Archive of stories published by alertot

Homepage

Open in app

alertot

All

2017

2018

2019

Claudio Salazar in alertot

May 13, 2019

“Web scraping considered dangerous”: Exploiting the telnet service in scrapy < 1.5.2

Disclaimer: scrapy 1.5.2 has been released on January 22th, to avoid being exploited you must disable telnet console (enabled by default) or upgrade up to 1.5.2 at least.

1 response

Claudio Salazar in alertot

Jul 14, 2019

“Web scraping considered dangerous”: Leaking files from the spider’s host

This is the next post of this serie called “Web scraping considered dangerous”. You can read the previous post here and as an update, my pull request fixing FormRequest.from_response behaviour was merged!

Claudio Salazar in alertot

Dec 4, 2018

Metasploit Community CTF 2018 writeup

This weekend we participated in Metasploit Community CTF and got the 12th place out of 1000…

Claudio Salazar in alertot

Apr 15, 2019

Un buffer overflow para gobernar Chile

El año pasado hubo en Chile una charla titulada “Chile Exposed: un puerto para gobernarlos a…

2 responses

Claudio Salazar in alertot

Feb 6, 2019

Un sigiloso ataque en SII.cl

[This post is only available in Spanish because the target audience is in Chile]

Claudio Salazar in alertot

Nov 15, 2018

New variant in wp-gdpr-compliance vulnerability and fixing it with virtual patching

Claudio Salazar in alertot

May 30, 2018

Getting the domain list of Chile

Update 13/12/2019: En el último tiempo, ha habido una gran discusión por las solicitudes de dominios a NIC.cl por parte de particulares. Nosotros no hemos realizado ni realizaremos ninguna petición de esa índole. Tal como expone la última sección de este artículo, desde…