Technical Tag
8 related articles.
0x00 Preface. Xu recently told me Qishi CMS had patched a problem in the global assign_resume_tpl function and asked whether it was exploitable. The official advisory points to /Application/Common/Controller/BaseController…
Affected version: V1.0.0.20200506 beta, the latest release. Requirement: the member center must be enabled in /application/config.php. Vulnerability analysis: lines 58–67 of /application/index/User.php. user_request_empty is a developer hook and can be ignored; the important part is return $thi…
0x01 Preface. Xu provided this vulnerability for me to analyze. 0x02 SeaCMS overview. SeaCMS is a PHP 5.x + MySQL video-on-demand system; FOFA shows over 400 instances. 0x03 Analysis. Vulnerable file: ./comme…
0x01 What Is Reflection? Reflection is a Java feature absent from C/C++. It lets a running program inspect itself and operate on internal properties of classes and objects. Oracle explains: 'Reflection enables Java code to disc…'
0x00 Preface. I created this series because online Java code-audit material is usually fragmented and unfriendly to beginners. I am also learning Java auditing, so the series records and summarizes that process. It is intended for readers with basic Java syntax knowledge and will cover…
0x00 Preface. I created this series because online Java code-audit material is usually fragmented and unfriendly to beginners. I am also learning Java auditing, so the series records and summarizes that process. It is intended for readers with basic Java syntax knowledge and will cover…
I. Reinstallation vulnerability. Like other CMS products, this application uses a lock file to determine whether it has been installed. Because the check occurs only in step 1, an attacker can POST directly to steps 2 and 3 and reinstall it. Analysis of Install/Index.php: $submit = isset($POST['s…
I. Preface After June began, I had more free time. Several competitions were over, and there were temporarily no tasks from NSFOCUS before I started work in July. I chose previously audited source code and reviewed it myself to identify gaps and gain experience. I had also promised at a T00ls meetup to publish an article, so after years of lurking, here is this somewhat unstructured CMS audit…