Back to directory
WRITEUP #5501

Chain of hacks leading to Database Compromise!

SSRFLFI
by@logicbomb_1(Avinash Jain)
Program
-
Published
Feb 23, 2019
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://medium.com/@logicbomb_1/chain-of-hacks-leading-to-database-compromise-b2bc2b883915
▸ RELATED WRITEUPS
IIS welcome page to source code review to LFI!
SSRFLFI
Directory Traversal, SQL Injection and Server-Side Request Forgery
SQL InjectionPath traversal
The Hunt for XXE to LFI: How I Uncovered CVE-2019–9670 in a Bug Bounty Program
XXELFI
$15k RCE Through Monitoring Debug Mode
RCELFI
NTLM Credential Theft in Python Windows Applications
SSRFNTLMv2 hash disclosure

Built with ❤️ by Shubham Rawat