Skip To Main Content
Not A Brand" on Muck Rack

Not A Brand"

As seen in: Packetst Storm, The Cyber Post
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Not A Brand"’s profile

Articles by Not A Brand"

Reverse engineering the Facebook Messenger API

|
By Include SubDomains, Not A Brand", Intuitive explanations, URLs ..
| intuitiveexplanations.com
I recently had occasion to reverse engineer the Facebook Messenger API for personal use, and realized the case study would make a great tutorial. This blog post lays out how I deciphered the API, and explains the reverse engineering techniques I used, so that you can go forth and do the same. The required background knowledge is fairly minimal.
Open in Who Shared Issue with article?

AeroCMS 0.0.1 Shell Upload

|
By Not A Brand"
| exploitalert.com
Advertisement Looking for a fix?
Open in Who Shared Issue with article?

AeroCMS 0.0.1 Shell Upload

|
By Not A Brand", Hassan Khan Yusufzai
| Packetst Storm
# AeroCMS-Unrestricted-File-Upload-POC # Author: D4rkP0w4r * Description => Upload web shell at Post Image in admin panel ## Step to Reproduct * Login to admin panel -> Posts -> Add Posts -> Post Image -> upload malicious file shell.php -> access /images/shell.php on url -> shell.php page ## Exploit * When upload success access /images/shell.php * Niceeee web shell active # Vulnerable Code * No file checking before uploading # POC * Injection Point ------WebKitFormBoundaryqOuTjoBBv5W1iXkD...
Open in Who Shared Issue with article?

AeroCMS 0.0.1 Cross Site Scripting

|
By Hassan Khan Yusufzai, Not A Brand"
| Packetst Storm
# AeroCMS-Comment-Stored_XSS-POC # Author: D4rkP0w4r * Note => Don't need register or login account * Description => Stored_XSS at comment box ## Step to Reproduct * Click Read More -> input payload <img/src/onerror=prompt(10)> at Author -> click Submit button # Exploit * Input payload at Author -> click Submit button * When admin login to admin panel and click Comments -> The XSS will trigger * Finally, Success !!!! # Vulnerable Code * view_all_comments.php * Stored xss in comment section *...
Open in Who Shared View Duplicates (4) Issue with article?

AeroCMS 0.0.1 Shell Upload

|
By Not A Brand", Hassan Khan Yusufzai
| Packetst Storm
# AeroCMS-Unrestricted-File-Upload-POC # Author: D4rkP0w4r * Description => Upload web shell at Post Image in admin panel ## Step to Reproduct * Login to admin panel -> Posts -> Add Posts -> Post Image -> upload malicious file shell.php -> access /images/shell.php on url -> shell.php page ## Exploit * When upload success access /images/shell.php * Niceeee web shell active # Vulnerable Code * No file checking before uploading # POC * Injection Point ------WebKitFormBoundaryqOuTjoBBv5W1iXkD...
Open in Who Shared Issue with article?

Online Traffic Offense Management System 1.0 Remote Code Execution

|
By Halit Akaydin, Not A Brand"
| The Cyber Post
Authored by Halit Akaydin Online Traffic Offense Management System version 1.0 unauthenticated remote code execution exploit.
Open in Who Shared Issue with article?
Show More