Where OSINT, Hacking, Penetration Testing, Privacy, Piracy, Information Security, Cyber Security and Law are a lifestyle.
The post discusses the discovery of multiple CVEs in LoMag WareHouse Management, including hard-coded credentials, weak hash usage, and SQL injection vulnerabilities. The author provides insights into their discovery process and highlights the insecure coding practices in the application.
Something that piqued my interest earlier in my cybersecurity studies was wireless attacks on vehicles. A friend reached out claiming her car had been broken into, sans keys. And... she had video of it. I had heard the reports and I had read a few articles. But I had never had a chance to see … Continue reading Wireless Attack Vectors Against Automobiles
Started my journey into LLMs and AI. While I do some real work with Jan AI, I created a custom GPT. Might add some custom functionality but if not, it's still useful for offensive cyber security! I made sure it tries to do what you ask first and always offer to generate code for you … Continue reading Introducing Sherlock GPT Holmes
Been a long time! Just wanted to stop by and let y'all know I've created a new project on the GainSec GitHub! It's called The Hackers Lunch Box. Here's the description: High level attack and finding maps for all your penetration testing, hacking, bug bounty and red teaming needs! To be more specific, this is … Continue reading New Project: The Hackers Lunch Box
A lecture demonstrating how I compromised a trillion dollar organization for under $150.
So stoked to reveal that my article submission was published in the latest Unredacted magazine publication! Ik they received hundreds of submissions so to be chosen is just awesome! Check it out on page 34 HERE END TRANSMISSION
Denial Of Service and an Arbitrary file copy and download found in MSI's Feature Navigator demo software!
Multiple new CVEs discovered and disclosed! IDOR, User Enum, invalid session termination and a weak password policy!
A location sharing open source server and android client was found to hardcode credentials and allow weak passwords by default (including blank passwords!)
Multiple new CVEs discovered and disclosed! XSS, DoS and a weak password policy!