Archivos del blog

Remote Code Execution in Web.py framework

Several months ago I happened to be looking at web.py‘s source code when I found an old-style (as in basic) remote code execution in the database module. Fortunately for most users of web.py, the database module is pretty simple and

Tagged with: , , , ,
Publicado en hacking, Programming, web hacking
Archive
  • RT @gremisch: "Your tweet has reached 100 likes. Please wait, an out of context weirdo will be assigned to you shortly." 2 days ago
  • RT @campuscodi: A website that generates random data breach excuses Plz share with your CEO. He/she needs to be prepared. https://t.co/rx… 1 week ago
  • RT @TaliaShadwell: Been debating whether I should share this - but think it’s a revealing - and somewhat creepy - insight into how big tech… 1 week ago
  • RT @jomaoppa: I saw a software engineer today No company swag hoodie. No stickers on their laptop. No mechanical keyboard. He just sat th… 1 week ago