The Curious Engineer

All blogs / Security

0day.work

0day.work

Just another security blog by Sebastian Neef

Security

’15’16’17’18’19’20’21’22’23’24’25’26
Posts
54 from 2 Nov 2015 to 8 Jul 2025
Posting
now and then
Kind
personal blog
Feed
https://0day.work/index.xml

2025 1

  1. Migrating From Ghost to Hugo | 0day.work

2024 1

  1. CVE-2023-6294: popup-builder <= 4.2.6 Admin+ SSRF & File Read | 0day.work

2023 1

  1. CVE-2023-6295: so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion | 0day.work

2020 7

  1. Measuring a Tor Hidden Service's idle Traffic | 0day.work
  2. BalCCon2k20 CTF: Let Me See And Dawsonite Writeups | 0day.work
  3. Credentials hiding in plain sight or how I pwned your http auth | 0day.work
  4. Damn Vulnerable Bash Web Server | 0day.work
  5. Files on web servers Part I: History Files | 0day.work
  6. Pwning your (web)server and network the easy way - or why exposing ~/.ssh/ is a bad idea | 0day.work
  7. InfiniteWP Client < 1.9.4.5 - Authentication Bypass | 0day.work

2019 11

  1. X-MAS CTF: Roboworld | 0day.work
  2. Open Redirects In Improperly Configured mod_rewrite Rules (PoC for CVE-2019-10098?) | 0day.work
  3. Proof of Concept for "Wordpress <=5.2.3: viewing unauthenticated posts" (CVE-2019-17671) | 0day.work
  4. Proof of Concept for "Apache Httpd Limited cross-site scripting in mod_proxy error page (CVE-2019-10092)" | 0day.work
  5. CVE-2019-11360: BufferOverflow in iptables-restore v1.8.2 | 0day.work
  6. A crash in unsquashfs | 0day.work
  7. CVE-2019-6726: Arbitrary File Deletion in WP fastest Cache <= 0.8.9.0 | 0day.work
  8. An example why NAT is NOT security | 0day.work
  9. Performance of Iodine over DNS-over-HTTPS | 0day.work
  10. CVE-2019-1000032: Memory corruption / DoS in nanosvg | 0day.work
  11. Dockerized Tor Onion Services with Vanity v3 Tor Addresses | 0day.work

2018 10

  1. Routes-apply.sh - Safely apply routes and revert on error | 0day.work
  2. P.W.N University: web 200 - H!pster Startup writeup | 0day.work
  3. How to configure PXE network booting for Kali Linux | 0day.work
  4. Tunneling all traffic over DNS with a SOCKS proxy | 0day.work
  5. Scanning the Alexa Top 1M for git daemons | 0day.work
  6. Parsing the .DS_Store file format | 0day.work
  7. Downloading SSH Keys via DNS | 0day.work
  8. Protecting against spam by receiving more spam | 0day.work
  9. Locking the screen when removing a Yubikey | 0day.work
  10. Using a Yubikey for GPG and SSH | 0day.work

2017 5

  1. Jinja2 template injection filter bypasses | 0day.work
  2. Finding an arbitrary file upload vulnerability in a filesharing script | 0day.work
  3. iCTF 2017 flasking unicorns writeup - Or how we might have rooted your iCTF VM | 0day.work
  4. BsidesSF CTF 2017 web writeups | 0day.work
  5. nullcon HackIM Crypto 1 writeup | 0day.work

2016 14

  1. Don't format, overwrite before you sell! - Recovering data from 2nd hand HDDs | 0day.work
  2. Ekoparty CTF 2016 writeups | 0day.work
  3. Being confident: How I could have gotten into the IFA for free | 0day.work
  4. Using an AWS GPU instance to generate vanity Bitcoin addresses | 0day.work
  5. Writing my first shellcode - iptables -P INPUT ACCEPT | 0day.work
  6. ##Securityfeed: Security RSS 2 IRC | 0day.work
  7. Scanning firewalls for differences in IPv4 and IPv6 rules | 0day.work
  8. TROOPERS 2016 Challenge & PacketWars writeups | 0day.work
  9. 0CTF 2016 Quals writeups | 0day.work
  10. Sunshine CTF 2016 writeups | 0day.work
  11. Hacking with LaTeX | 0day.work
  12. Boston Key Party CTF 2016 writeups | 0day.work
  13. How I recovered your private key or why small keys are bad | 0day.work
  14. Using neural networks for password cracking | 0day.work

2015 4

  1. Wordpress plugin downloader | 0day.work
  2. Easy PGP Composer - Encrypting PGP messages in your browser | 0day.work
  3. Twitter hashing bot | 0day.work
  4. Hello world! | 0day.work