Nodejs RCE and a simple reverse shell August 23, 2016 in nodejs, rce, poc An example proof of concept to show bad programming practice in nodejs that allows for user supplied data to be executed on the server. Continue reading
XSS to RCE – using WordPress as an example July 17, 2016 in xss, rce, wordpress, poc A real world example of how an XSS in the administration portal of a WordPress instance can lead to an RCE by uploading a webshell using the XSS. Continue reading