Friday, July 29, 2022

IronPython - Reflection

›
As per IronPython site, IronPython is an open-source implementation of the Python programming language which is tightly integrated with...
Friday, December 24, 2021

Log4Shell - VMware Horizon

›
VMware Horizon (formerly called Horizon View) is a commercial desktop and app virtualization product developed by VMware, Inc for Microsoft ...
Monday, December 20, 2021

Btrace - Tracing JndiLookups - Log4jShell Exploitation Attempts

›
 BTrace is a safe, dynamic tracing tool for the Java platform.BTrace can be used to dynamically trace a running Java program. BTrace dynamic...
Wednesday, December 15, 2021

CVE-2021-44228 - Retrieving Payload

›
CVE-2021-44228 tracks a remote code execution vulnerability in Apache Log4j. An attacker who can control the logging message has the ability...
Monday, November 29, 2021

Quick Analysis - CVE-2019-2725 Payload

›
Since few days now there has been a constant hammering of the weblogic honeypots with the exploits targeting a deserialization vulnerability...
Wednesday, October 13, 2021

Analyzing Apache HTTP Server Information Disclosure Vulnerability - CVE-2021-42013

›
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to...
Tuesday, December 29, 2020

Nullify AMSI Scanner with PowerShell

›
 AMSI as per Microsoft is: "The Windows Antimalware Scan Interface (AMSI) is a versatile interface standard that allows your applicati...