Archivos del blog

Remote Code Execution in Web.py framework

Several months ago I happened to be looking at web.py‘s source code when I found an old-style (as in basic) remote code execution in the database module. Fortunately for most users of web.py, the database module is pretty simple and

Tagged with: , , , ,
Publicado en hacking, Programming, web hacking
Archive
  • RT @LiveOverflow: HOW FRCKN' HARD IS IT TO UNDERSTAND A URL?! A video looking at the underlaying issue of a universal XSS in Chrome on iO… 1 day ago
  • RT @PedroWeb_: España ya es el país donde más caro es alquilar una vivienda de todo el mundo desarrollado https://t.co/rfOnRIQWSl 1 month ago
  • RT @olemoudi: Got to read this recent paper on CORS misconfigurations on my way home. Interesting quirks inside you probably were not aware… 1 month ago
  • RT @alviair: @amazon os recomiendo no contratar el reparto con @SEUR.Llevo desde el 21 d agosto esperando un paquete enviado con AmazonPrim… 1 month ago