CVE-2024-26367
CVE-2024-26367
Posts by Year
2024
RCE into EA using Kubeflow Notebooks
Intro Multiple articles and blog posts written about Kubeflow intrigued me to dive (albeit shallow) into and scour the depths of Shodan one evening to see wh...
2023
CVE-2023-39854
CVE-2023-39854
Burp Suite Extension - Raw Collaborator
The following describes the set up and usage of a Burp Suite Extension I wrote, that creates a new Collaborator URL and dumps the raw Interaction transaction...
CVE-2023-38523
CVE-2023-38523
Pentesting FoundationDB
During a recent Pentesting engagement, I came across a service using FoundationDB to store application layer configurations and state. This lead me to dive i...
Database Credential Dumps
The following is a compilation of queries to list database user hashes, which are stored locally in tables. The hashes obtained can be cracked using password...