CVE-2024-26367
CVE-2024-26367
Posts by Tag
CVE
Back to Top ↑Databases
Pentesting FoundationDB
During a recent Pentesting engagement, I came across a service using FoundationDB to store application layer configurations and state. This lead me to dive i...
Database Credential Dumps
The following is a compilation of queries to list database user hashes, which are stored locally in tables. The hashes obtained can be cracked using password...
Responsible Disclosure
The Cost of Exposing your Kubecost
Intro : During a recent engagement of reviewing a Kubernetes environment I came across a service called “Kubecost”, which is intended to be used for monitori...
RCE into EA using Kubeflow Notebooks
Intro Multiple articles and blog posts written about Kubeflow intrigued me to dive (albeit shallow) into and scour the depths of Shodan one evening to see wh...
Hashcat
Database Credential Dumps
The following is a compilation of queries to list database user hashes, which are stored locally in tables. The hashes obtained can be cracked using password...
FoundationDB
Pentesting FoundationDB
During a recent Pentesting engagement, I came across a service using FoundationDB to store application layer configurations and state. This lead me to dive i...
BurpSuite
Burp Suite Extension - Raw Collaborator
The following describes the set up and usage of a Burp Suite Extension I wrote, that creates a new Collaborator URL and dumps the raw Interaction transaction...