Phew, so I just spent my whole day debugging a supposedly RCE I got during an assessment. I’ll talk in this article about what happened and how I managed to debug a faulty plugin. Long story short So, I won’t explain how I got access to the admin page for obvious reasons but what …
Hi, today I’ll explain a quick article I didn’t know about that was sent by a colleague today. The techniques and exploit presented in this article are not new since they were released in 2015 but it could still be useful on some instances. This article is inspired by two vulnerabilities, respectively for Joomla (here …
Hi, I’ll do a quick write-up of some challenges I did during the quals of Nuit du Hack 2018. We managed to get 12th (compared to 15th last year), so not so bad. I helped on a total of 7 challenges (on 12 we were able to complete) and validated myself 5 of those 7. …