chako – Page 2 – Pepsi World

Testing Apache Unomi Remote Code Execution (CVE-2020-13942) PoC

November 20, 2020 chako Uncategorized

Reference: https://www.checkmarx.com/blog/apache-unomi-cve-2020-13942-rce-vulnerabilities-discovered/
https://twitter.com/pyn3rd/status/1328920545442680837

Popup a calculator on the machine

testing CVE-2020-13958 PoC

November 11, 2020 chako Uncategorized

Reference : https://github.com/irsl/apache-openoffice-rce-via-uno-links

WebLogic Pre-Auth RCE (cve-2020-14882) PoC exploit

October 31, 2020 chako Exploit, Security, Uncategorized

Reference : 1. https://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf

2. https://github.com/jas502n/CVE-2020-14882 (bypass patch)

cve-2020-14882 is a pre-auth RCE vulnerability in WebLogic discovered by voidfyoo of Chaitin Security Research Lab. This is a high impact and easy to exploit vulnerability.

Wrote a poc exploit to pop up calculator on target server