Wessel SwanepoelJan 293 minRoad to Root: WordPress and WAVE XXEIn this installment of Road to Root we demonstrate -again!- why, you should never host your WordPress applications on the same...
Wessel SwanepoelJan 213 minRoad to Root: Node.js and MongoDB InjectionIn this installment of Road to Root we explore the intricacies of NoSQL injection and data exfiltration through html to pdf generators....
Wessel SwanepoelJan 143 minRoad to Root: Grafana and Consul ExploitationIn this installment of Road to Root we explore the dangers of exposing dev environments to untrusted networks. Sure, it's convenient and...