weaponised-XSS-payloads

무기화된 XSS 페이로드 alert1을 P1으로 바꾸도록 설계된 XSS 페이로드 블로그 게시물 이 저장소는 "How to Upgrade Your XSS Bugs from Medium to Critical"이라는 제목의 블로그 게시물과 함께 공개되었습니다. https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 이게 뭔가요? 이 저장소에는 인기 있는 CMS 플랫폼에서 피해자 브라우저의 컨텍스트로 민감한 기능을 수행하기 위해 XSS 페이로드에 로드할...

KashmirBlack Botnet Hijacks Thousands of Sites Running On Popular CMS Platforms

An active botnet comprising hundreds of thousands of hijacked systems spread across 30 countries is exploiting "dozens of known vulnerabilities" to target widely-used content management systems CMS. The "KashmirBlack" campaign, which is believed to have started around November 2019, aims for...

CrimeOps of the KashmirBlack Botnet – Part I

Introduction Being in a research team exposes us to a variety of attacks on different platforms, of different types, scope, and volume. It also gives us the opportunity to select particularly interesting attacks that target our customers and to analyze them. This blog will give you a taste of the...

Multiple CMS Platforms SQL Injection Attempt Over URL

Multiple SQL injection vulnerabilities exist in CMS platforms. Successful exploitation could allow an attacker to disclose confidential information, modify or shut down the database or execute arbitrary code on affected servers...

Analysis of Ronggolawe Ransomware and How to Block It

In the last few years ransomware attacks have been significantly on the rise. This infamous trend began by targeting end point users’ machines, such as personal desktop and laptops. Later, it evolved and broadened the attack surface to target mobile phones and servers. Web Servers Not Immune to...