Skip To Main Content
Write-up Submissions on Muck Rack

Write-up Submissions

Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Write-up Submissions’s profile

Articles by Write-up Submissions

Intercepting Android Emulator SSL traffic with burp using magisk

|
By Write-up Submissions
| infosecwriteups.com
In an android security testing intercepting SSL traffic from the apk is one of the basic requirement. Their are many ways in which it can be done Using Genymotion Genymotion is the easiest one cause the emulators that comes with it is rooted.
Open in Who Shared Issue with article?

Send a Email to me and get kicked out of Google Groups !! - #GoogleVRP - A Feature that almost broke Google Groups !!

|
By Sriram Kesavan, Write-up Submissions
| infosecwriteups.com
Reported: Jun 26, 2021 12:51PM A lot of people might know what Google Groups is. For people who doesn’t, Google Groups allows users to create a group with multiple users in them and a common mail ID would be provided. That can be used to interact with the members in the group by simply sending a email. For example: You create a group named “Apple fans” and a Mail ID “apple_fans@googlegroups.com” will be provided.
Open in Who Shared Issue with article?

The Story of an RCE on a Java Web Application

|
By Import Os, Write-up Submissions, InfoSec Write-ups, Infosec Write-ups, Lil Nix
| infosecwriteups.com
It was about two months ago (November 2021) I was invited to a private program. According to their program scope, I decided to hack them for a while. This post is about a vulnerability I’ve found in this company that led to RCE. In this step, my recon methodology was not finding some unique subdomains or assets. I was searching for some web applications with some interesting features such as login or file upload. After a while, I came across an interesting portal.
Open in Who Shared Issue with article?

A TALE OF 5250$ : HOW I ACCESSED MILLIONS OF USER’S DATA INCLUDING THEIR NATIONAL ID’S

|
By Write-up Submissions, InfoSec Write-ups, Infosec Write-ups, Harjul Jobanputra, Athiththan Kathirgamasegaran
| infosecwriteups.com
Hi, Hope you guys are doing well, And a Happy New Year, YAY! ✨, Let’s start the blog without wasting more time. As usual, I am hunting in Tecno src program for something in the source code of the application, As the scope is huge, So I collected all the applications and decompiled them all at once with apktool with this command: find .
Open in Who Shared Issue with article?

My mindset while hunting on Yandex and my SSRF

|
By Write-up Submissions, InfoSec Write-ups, Infosec Write-ups, Brennen Witzens, Concordia Ase
| infosecwriteups.com
Hey hunters! Another write-up talking about my mindset while hunting on a program with a new vulnerability in another big program.
Open in Who Shared Issue with article?

XXE Attacks Explained

|
By Write-up Submissions, InfoSec Write-ups, Infosec Write-ups, A. Boukar
| infosecwriteups.com
XML ( eXtensible Markup Language) is a tag-based language that applications use for transferring data. Contrary to other tag-based languages (like HTML), XML does not have pre-defined tags. Instead, these are defined by the user. Here is an example of an XML code: <email> <sender>John</sender> <recipient>Peter</recipient> <subject>Hi</subject> <message>Hi Peter, How are you doing?</message> </email> In the above code, the email tag contains 4 child tags: sender, recipient, subject, and message.
Open in Who Shared Issue with article?

Remote Code Execution via Exif Data .

|
By Write-up Submissions, InfoSec Write-ups, Infosec Write-ups, Surendra Choudhury, Wojciech Marusarz
| infosecwriteups.com
Summary : Exif stands for Exchangeable Image File Format. Exif Data stores sensitive information like Geo-location, Date, Name of the camera, Modified date, Time, Sensing Method, File Source, Type of compression, etc. in the photos you click. Now, this data resides in every photo you take using cameras. Everyone knows what the EXIF data is but very few are aware of how dangerous it is.
Open in Who Shared Issue with article?

Exposing Millions of IRCTC Passengers' ticket details.

|
By Write-up Submissions, InfoSec Write-ups, Infosec Write-ups, Gregory Dame, Bennett Garner
| infosecwriteups.com
Hi There, Renganathan Here, I’m an Ethical Hacker & a Security researcher. I’ve been acknowledged by LinkedIn, United Nations, BYJU’s, Nike, Lenovo, Upstox for reporting security vulnerabilities in their web applications. What’s IRCTC?
Open in Who Shared Issue with article?

Abusing NTLM Relay and Pass-The-Hash for Admin

|
By Julian Runnels, Write-up Submissions, InfoSec Write-ups, Infosec Write-ups, Meggie Forster
| infosecwriteups.com
With the rise of PetitPotam recently, I was inspired to do a bit more research into NTLM Relaying as a whole. So I spent a while reading through different techniques and managed to combine two ideas that I had seen often, Responder/NTLMRelayx and Pass-The-Hash on some of my work engagements to significant effect. These techniques have been known for years, but still see use inside environments that have not implemented strong network security.
Open in Who Shared Issue with article?

Leveraging Burp Suite extension for finding IDOR(Insecure Direct Object Reference).

|
By Write-up Submissions
| infosecwriteups.com
IDOR is one of the common vulnerabilities found in bug bounty websites. Let's see how to easily catch them. Autorize Extension in action If you are not familiar with IDOR, then here is a quick refresher. IDOR is a type of access control vulnerability, where the system uses the user input to access objects or resources. When a user can modify the reference that is used to access an internal object/resource that is restricted to that user, IDOR arises. Let’s me put it in simple words with an example.
Open in Who Shared Issue with article?

How I was able to bypass the admin portal by using the default credentials in BBC Corporation.

|
By Write-up Submissions, InfoSec Write-ups, Infosec Write-ups, Ismail Tasdelen, Simon Saliba
| infosecwriteups.com
Hello everyone, today I will be talking about one of the critical bug which I found on the BBC website which is bypassing the admin portal using the default credentials.
Open in Who Shared Issue with article?

How I could have accessed all your private videos/photos saved inside your device without even unlocking it?

|
By Write-up Submissions, InfoSec Write-ups, Infosec Write-ups, Samip Aryal, Cristian Cornea
| infosecwriteups.com
… This writeup is about how a user’s Sensitive Private Data like photos/videos saved inside his/her device could have been leaked out through a Facebook Room Call even from a locked Android device. … In October 2020; I submitted a valid vulnerability report in Facebook Whitehat Program where users’ private saved videos/watch history could have been exposed from the watch together feature in a Messenger call from a locked Android device.
Open in Who Shared Issue with article?

Ethical Hacking Stories — Denial-of-Service to BiciMAD Bikes

|
By Héctor Martos, Write-up Submissions
| infosecwriteups.com
In the fall of 2020, Madrid added 454 free-floating bikes in a new modality called BiciMAD Go. The difference with BiciMAD bikes is that they don’t need to be docked at a station. You can leave them anywhere within the allowed area. The most convenient way to find one of these bikes is using the official BiciMAD App.
Open in Who Shared Issue with article?

My first automated code analysis

|
By InfoSec Write-ups, Infosec Write-ups, Write-up Submissions, Boris Reitman, Gupta Bless
| infosecwriteups.com
Writing secure code, isn’t that what we all want? I put my own code to the test by running the ShiftLeft code analyser against it. Follow me on my bug squashing journey! Photo by engin akyurt on Unsplash Ah, the joys of writing code. I think I can speak for all of us when I say that we, developers, have a love-hate relationship with writing code. Some days, I get out of bed to race to my computer, while other days those bugs I couldn’t squash, take control of my mind whilst trying to fall asleep.
Open in Who Shared Issue with article?

USBSamurai - A Remotely Controlled Malicious USB HID Injecting Cable for less than 10$

|
By InfoSec Write-ups, Infosec Write-ups, Luca Bongiorni, Write-up Submissions, David Artykov
| infosecwriteups.com
TL;DR: The Video is self-explanatory. (Wanna know how to make it? Read the article below.) All started with this Tweet last April, when I wanted a damn cheap USB implant capable of injecting keystrokes. It had to be: Remotely Controllable Fast in Typing Tiny as f***k Cheaper than a bottle of Vodka The main idea (for the hardware-side) is to re-use the Logitech’s inexpensive Unifying dongles as implants within USB cables.
Open in Who Shared Issue with article?

The peculiar case of HTML Injection

|
By InfoSec Write-ups, Infosec Write-ups, Aman Singh, Write-up Submissions
| infosecwriteups.com
This is a Writeup for an unusual HTML Injection bug I found on a private bug bounty program. HTML Injection (img src: https://www.acunetix.com/blog/web-security-zone/html-injections/) HTML Injection lies under the class of injection Attacks, which means that a malicious HTML input is trusted by the website and displayed to the innocent user. Similar to XSS there are stored, reflected, and self HTML injection.
Open in Who Shared Issue with article?

How I Passed OSCP with 100 points in 12 hours without Metasploit in my first attempt

|
By InfoSec Write-ups, Infosec Write-ups, Write-up Submissions, Adithyan AK
| infosecwriteups.com
OSCP Digital Certificate Free alternate link for this article: https://blog.adithyanak.com/oscp-preparation-guide My Complete OSCP Notes : https://blog.adithyanak.com/oscp-preparation-guide/enumeration I’m 21 years old and I decided to take OSCPtwo years ago when I was 19 years old. I had to wait for 1 and a half years until I won an OSCP voucher for free. Not just a normal 30 days lab voucher, but a sophisticated 90 days lab voucher that costs about 1349$.
Open in Who Shared Issue with article?

Understanding & Identifying Insecure Deserialization Vulnerabilities

|
By InfoSec Write-ups, Infosec Write-ups, Write-up Submissions
| infosecwriteups.com
This post explains the nitty-gritty of Insecure Deserialization Vulnerabilities. We will be covering basic understanding and identification., Insecure Deserialization- Vulnerability lies on the 8th spot in OWASP Top 10 Vulnerabilities-2017. It is said to be the most difficult to understand Vulnerability in OWASP Top 10. Insecure Deserialization also was the common question that I came across frequently, in my Interviews, for InfoSec Profiles.
Open in Who Shared Issue with article?

Jumping from SQL injection to RCE

|
By InfoSec Write-ups, Infosec Write-ups, Write-up Submissions
| infosecwriteups.com
In this case we are going to take advantage of a sql injection error to be able to “jump” to other vulnerabilities. For this we have to have write permissions and know the path where the server is mounted, they can do it with an @@datadir, in this case I have the path on the error screen After having the path, what we are going to do is inject the shell, in this case it is a simple backdoor in php: ‘<?
Open in Who Shared Issue with article?

Analyzing Radio Signals with Software Defined Radio

|
By InfoSec Write-ups, Infosec Write-ups, Keith Tay, Write-up Submissions
| infosecwriteups.com
In this write-up, I will share how one can go about analyzing radio signals transmitted over the air. This would be useful in the event if you are attempting to identify weakness in a device that you may own. As part of the Proof-Of-Concept (PoC), I purchased a doorbell that consists of a transmitter and a receiver that communicates on the 433 MHz frequency. I will detail the thought process of performing replay attacks and analyzing demodulated signals using software means.
Open in Who Shared Issue with article?

Basic Pentesting: 1 Walkthrough | Vulnhub

|
By InfoSec Write-ups, Infosec Write-ups, Dinidhu Jayasinghe, Write-up Submissions
| infosecwriteups.com
This Walkthrough is on Basic Pentesting: 1 Vulnhub Machine made by Josiah Pierce. It includes many remote vulnerabilities and vectors for escalation privileges. Go here for additional details or the machine to download. So first of all, I have to find the IP address of the target machine. Then I used netdisover command for that. In the first step of reconnaissance, I performed a nmap scan to identify the open ports.
Open in Who Shared Issue with article?
Show More