Back to directory

WRITEUP #884

How I got Two RCE at BBP Program @0xbartita

RCEDefault credentialsSAPGroovy scripting

by@0xBaRtiTa(0xBartita)

Program

-

Published

Aug 10, 2023

Added to HackDex

Aug 14, 2023

Read Full Writeuphttps://0xbartita.medium.com/how-i-got-two-rce-at-bbp-program-0xbartita-232727c5b3f0

▸ RELATED WRITEUPS

Hidden in Plain Sight: Uncovering RCE on a Forgotten Axis2 Instance

RCEDefault credentials

3 ways to get Remote Code Execution in Kafka UI

RCEInsecure deserialization

Vulnerabilities in Open Source C2 Frameworks

RCEOS command injection

[2,500$ Bug Bounty Write-Up] Remote Code Execution (RCE) via unclaimed Node package

RCEDependency confusion

Attacking PowerShell CLIXML Deserialization

DeserializationInsecure deserialization

Built with ❤️ by Shubham Rawat