The situation is as follows — the FFUF has found several dozen/several hundred "hidden" resources. You can manually copy addresses to your browser to check each one for interesting results or automate the whole process a bit. I recommend this second approach and i will add a ready-made script, which… Continue reading
"Some content on websites is seemingly hidden – that is, without their address, we are not able to access it. Often these are some remnants still from the stage of application development – the developer was supposed to remove them later, but forgot ̄_(ツ)_/ ̄ ." – it's a mention… Continue reading
"Unrestricted File Upload" is one of my favorite group of web application vulnerabilities. This is because if I can locate this type of security error, it usually leads to remote control of the server. If you can upload images, why not try to upload an executable file on the server… Continue reading
Recently, a cheap Chinese IP camera fell into my hands. As I like to know how the equipment works, it ended up in my fuse workshop. Results below. What the ports squeak A quick nmap scan of the device indicated several open ports: Port 80 : Here is a web… Continue reading
This entry is divided into two parts. In the first I publish a description of vulnerabilities that I was able to identify as part of the "EY GDS Poland Cybersecurity Challenge". In the second, I describe my reservations about the form in which that 'challenge' was carried out and why… Continue reading
This manual shows you how to set up your IP camera. The model screenshots were taken from the IPCAM PTZ camera model C6F0SgZ3N0P6L2, however, the same settings can be applied to most brands. Cameras that will have very similar settings are Clearview, Dahua, Hikvision, Gise and Qsee. Format Video To… Continue reading
During the penetration test, the reconnaissance phase is the most important element of all "fun". It is she who gives direction to the next steps. Therefore, it is important to approach it with due care and get as much information as possible about our goal. The technologies used to build… Continue reading
I have been collecting statistics from my computer security research for the last few years. I decided to share them a bit. Here you can find a sample penetration test report – report. In a large number of interviews with penetration testers, I hear the question – "Has the security… Continue reading
Without wrapping in cotton – after a series of tests, I finally managed to adjust the print parameters to use less filament, and the print was still waterproof. The recipe for this with fiberlogy fibersilk is as follows: layer height 0.2 mm; The wazy mode is on; 6 compact lower… Continue reading
I remember at the beginning of my printing adventure, I printed various vases. Unfortunately, due to the lack of water resistance, they presented only aesthetic value. Their practical use was not possible. Some time, 3d printing technology has gone ahead. I decided to bite again about waterproof prints. This time… Continue reading
