Magento – Unauthenticated Remote Code Execution – 0-Days And Life
June 20, 2025 at 9:46:40 AM UTC * - permalink -

- https://www.netanelrub.in/2016/05/17/magento-unauthenticated-remote-code-execution/

Source Code Disclosure in ASP.NET apps – PT SWARM
February 19, 2025 at 1:20:40 PM UTC * - permalink -

- https://swarm.ptsecurity.com/source-code-disclosure-in-asp-net-apps/

Device Code Phishing – Compass Tooling – Compass Security Blog
March 7, 2024 at 4:56:21 PM UTC - permalink -

- https://blog.compass-security.com/2023/10/device-code-phishing-compass-tooling/

Confirm your account recovery settings
March 7, 2024 at 4:56:04 PM UTC - permalink -

- https://github.com/rvrsh3ll/TokenTactics

Dynamic Device Code Phishing  - Black Hills Information Security
March 7, 2024 at 4:55:44 PM UTC - permalink -

- https://www.blackhillsinfosec.com/dynamic-device-code-phishing/

GitHub - chrisallenlane/drek: A static-code-analysis tool for performing security-focused code reviews. It enables an auditor to swiftly map the attack-surface of a large application, with an emphasis on identifying development anti-patterns and footguns.
May 2, 2023 at 11:08:43 AM UTC - permalink -

- https://github.com/chrisallenlane/drek

PHP Development Server <= 7.4.21 - Remote Source Disclosure
January 29, 2023 at 2:13:45 PM UTC * - permalink -

- https://blog.projectdiscovery.io/php-http-server-source-disclosure/

code white | Blog: RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941) – A Walk-Through
January 25, 2022 at 5:39:20 PM UTC - permalink -

- https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html

How to audit a Magento site for upgrades or custom functionality | Cadence Labs
January 2, 2022 at 11:07:23 PM UTC - permalink -

- https://www.cadence-labs.com/2016/02/how-to-audit-a-magento-site-for-upgrades-or-custom-functionality/?PageSpeed=noscript

java.lang.Runtime.exec() Payload Workarounds - @Jackson_T
October 21, 2021 at 12:49:07 PM UTC * - permalink -

- https://ares-x.com/tools/runtime-exec/

https://github.com/vincentcox/StaCoAn
July 10, 2021 at 12:47:14 PM UTC - permalink -

- https://github.com/vincentcox/StaCoAn

WordPress Plugin Security Testing Cheat Sheet · wpscanteam/wpscan Wiki
January 22, 2021 at 4:35:19 PM UTC - permalink -

- https://github.com/wpscanteam/wpscan/wiki/WordPress-Plugin-Security-Testing-Cheat-Sheet

Mobile Security on Twitter: "Android Mobile Hacking Workshop - Community Day #MobileSecurity #AndroidSecurity by @B3nac VIDEO: https://t.co/Tr5KdPxWC5 SLIDES: https://t.co/noVUgSpokO https://t.co/yZitX8tcZA" / Twitter
October 20, 2020 at 9:30:43 AM UTC - permalink -

- https://twitter.com/mobilesecurity_/status/1318220394638225409

returntocorp/semgrep: Fast and syntax-aware semantic code pattern search for many languages: like grep but for code
May 21, 2020 at 11:38:10 PM UTC - permalink -

- https://github.com/returntocorp/semgrep