0SPwn Blogs

Jay

Jay

13 followers

Hi, I'm Jay. A 17, Security Consultant (Pentester), Contracted OffSec Web App Trainer @hackthebox_eu & BSIDES 2023 Speaker @BSidesCymru.

How CVE-2022-24785 MomentJS Path Traversal Works: Detailed Exploit Guide

Jul 5, 20244 min read

CVE-2022-24785 Description Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal...

How CVE-2022-24785 MomentJS Path Traversal Works: Detailed Exploit Guide

Basic Firmware Reverse Engineering

Nov 29, 20215 min read

Hello everyone, today we will be covering something a little different. We will be taking a look at how to reverse engineer firmware which we can then...

Basic Firmware Reverse Engineering

Recon, Vulnerable Code Assessment, Exploit Automation, Bypasses & Patching all one. (Python, PHP)

Nov 7, 202120 min read

Hello everyone, hope you are all well! Today we will be continuing our Python Hacking Series, this time however we will not be covering basics but...

Recon, Vulnerable Code Assessment, Exploit Automation, Bypasses & Patching all one. (Python, PHP)

0-Day Hunting (Chaining Bugs/Methodology)

Oct 11, 202120 min read

Introduction to 0-Day Hunting/chaining vulnerabilities Hello everyone, I wanted to write a blog on how I go around my method of thinking for finding...

0-Day Hunting (Chaining Bugs/Methodology)

Bypassing PHP strcmp()

Sep 15, 20213 min read

Introduction to Bypassing PHP strcmp() What will be covered today? What is strcmp() Buggy Code review Bypassing strcmp() Fixing the bug(s) What is...

Bypassing PHP strcmp()

IDN Homograph Attacks/Prevention

Aug 29, 20214 min read

Introduction to IDN Homograph Attacks What will be covered today? What is an IDN Homograph Attack? Example of IDN Homograph Attack Reversing a...

IDN Homograph Attacks/Prevention