stolabs

Git Exposed -How to Identify and Exploit

What is Git?

A Guide to IDOR

In this article you’ll find the answers to the following questions:

Phishing Polícia Federal

Recebemos um e-mail da Polícia Federal com o título de “Notificação de abuso”:

Bypass Admin Authentication on Seq

Seq is a log server that runs on a central machine. The applications send structured events through a framework and the platform organize them in dashboards. This is an application used by most of the world’s biggest companies, such as Microsoft, Bosch, Allianz and…

Security Issues on Eramba

Researching the platform, me, Edward Amaral and my coworkers Kelvin Clark and Lucas Carmo, security researchers from Stone Payments found some security issues on the IT…

Código do Malware de Point-of-Sale (POS) TreasureHunter vaza na internet

[ 0x01 ] — Introdução

Cloud SSRF Exploitation

Hey guys,

Today I’m going to talk about the Server-side request forgery (SSRF)…

HTB — Backdoor

wordpress | LFI | pid’s | gdbserver | misconfiguration | screen

Stored XSS + Session Hijacking

Hi, I'm Cid da Costa and as an information security researcher, I’ve made a security assessments in order…