jonaslejon

7 ms·

1.
by jonaslejon 8mo ago
Memories! I was at the hacking conference HAL2001 and listening to Dug Song and Solar Designer, who were talking about their SSH timing analysis: https://download.openwall.net/pub/advisories/OW-003-ssh-traf... Tim
2.
The Full Story of CVE-2024-6386: Remote Code Execution in WPML(blog.wpsec.com)
1 points by jonaslejon 2y ago|0 comments
3.
by jonaslejon 2y ago
Nice tool! Will check it out. I have used jdam in the past to fuzz JSON: https://gitlab.com/michenriksen/jdam
4.
How to Inspect TLS Encrypted Traffic(netresec.com)
2 points by jonaslejon 2y ago|0 comments
5.
by jonaslejon 2y ago
OpenSSH 9.8p1 was released July 1, 2024 according to https://www.openssh.com/releasenotes.html#9.8p1
6.
Critical Security Flaw in the WooCommerce Payments Plugin(blog.wpsec.com)
2 points by jonaslejon 4y ago|0 comments
7.
Wpsec.com Docker WordPress Vulnerability Scanner Command Line Client(hub.docker.com)
1 points by jonaslejon 4y ago|0 comments
8.
Wpsec.com Python Command-Line Client(github.com)
1 points by jonaslejon 4y ago|0 comments
9.
Eight-Year Study Shows the Dark Side of WordPress Plugins(blog.wpsec.com)
4 points by jonaslejon 4y ago|0 comments
10.
Security in WordPress Plugin Development(blog.wpsec.com)
2 points by jonaslejon 4y ago|0 comments
11.
by jonaslejon 4y ago
This was quite funny: if name == "boring_wozniak" /* Steve Wozniak is not boring */ { goto begin }
12.
Discovering Vulnerabilities in WordPress Plugins at Scale(blog.wpsec.com)
1 points by jonaslejon 4y ago|0 comments
13.
Backdooring WordPress Using PyShell(blog.wpsec.com)
6 points by jonaslejon 5y ago|0 comments
14.
by jonaslejon 5y ago
I personally use OSSEC for File Integrity Monitoring. And it has also actually caught an intruder that modified some PHP-code on a webserver. The attacker forgot to use the prefix @ in the PHP-code so a new error message was sent to the log
15.
Security Features We Wish Were Included in WordPress(blog.wpsec.com)
1 points by jonaslejon 5y ago|0 comments
16.
WordPress and the new vulnerability Trojan Source(blog.wpsec.com)
1 points by jonaslejon 5y ago|0 comments
17.
by jonaslejon 5y ago
You need to have a really good relationship with your ISP and get their acknowledge prior to the scanning
18.
Malicious PDF Generator(github.com)
2 points by jonaslejon 5y ago|0 comments
19.
WooCommerce Unauthenticated SQL Injection Vulnerability(blog.wpsec.com)
1 points by jonaslejon 5y ago|0 comments
20.
WordPress PHPMailer Vulnerability Analysis(blog.wpsec.com)
2 points by jonaslejon 5y ago|0 comments
21.
WordPress XXE Vulnerability in Media Library – CVE-2021-29447(blog.wpsec.com)
2 points by jonaslejon 5y ago|0 comments
22.
by jonaslejon 5y ago
I don't really understand the thread. This guy X writes about the harassments and then someone replies and asks about the release versions?
23.
Are WordPress Websites That Vulnerable? – WPSec(blog.wpsec.com)
2 points by jonaslejon 5y ago|0 comments
24.
What You Need to Know About WordPress 5.7 and One-Click HTTPS Migration(blog.wpsec.com)
1 points by jonaslejon 6y ago|0 comments
25.
Write-up about the WordPress Contact Form 7 plugin vulnerability(blog.wpsec.com)
1 points by jonaslejon 6y ago|0 comments
26.
WordPress 5.5.2 Security Release(blog.wpsec.com)
1 points by jonaslejon 6y ago|0 comments
27.
The Corona Hat helps you keeping the distance to your fellow citizens(hakanlidbo.com)
1 points by jonaslejon 6y ago|1 comments
28.
Backdooring WordPress with Phpsploit(blog.wpsec.com)
1 points by jonaslejon 7y ago|0 comments
29.
Dozens of File Upload Vulnerabilities Found in Web Apps(blog.wpsec.com)
2 points by jonaslejon 7y ago|0 comments
30.
CVE-2020-9334: Stored XSS Vulnerability in Popular Gallery Plugin for WordPress(blog.wpsec.com)
1 points by jonaslejon 7y ago|0 comments

More ›