Horilla HR Authenticated RCE and XSS
Writeup of a code injection and a file upload issue on the Horilla HR app, that lead to code execution and XSS, respectively.
[ Read ]Blog
Security Research & Writeups
Recent Articles
Emulating Kimsuky's LNKs for Initial Access
Recreating Kimsuky's LNK-based initial access techniques
[ Read ]
Accessing Realme's Customer Support Platform
Gaining access to Realme's customer support system by exploiting an API and Blind XSS flaw.
[ Read ]