WordPress Sliced Invoices <= 3.8.2 Authenticated SQL Injection

The WordPress Sliced Invoices plugin, in versions lower than 3.8.2, is affected by an authenticated SQL Injection vulnerability. Note that this vulnerability is very similar to WordPress Sliced I...

Oct 23, 2019 my_exploits, offensive_security

WordPress Sliced Invoices <= 3.8.2 Authenticated Reflected XSS

The WordPress Sliced Invoices plugin, in versions lower than 3.8.2, is affected by an authenticated Reflected Cross-site scripting (XSS) vulnerability. Initial submission of the vulnerability #...

Oct 22, 2019 my_exploits, offensive_security

Exploiting the xmlrpc.php on all WordPress versions

XML-RPC on WordPress is an API that gives developers who build 3rd party applications and services the ability to interact with your WordPress site. The XML-RPC API that WordPress provides offers...

Jul 2, 2019 cheatsheet, offensive_security, wordpress

[NeverLAN 2019] - Das Blog

Description: Solution Author: Lucian Nitescu, as part of jmp 0xc0ffee team. Solution: At first, I was provided with the following web page, which instructed me to authenticate into the appl...

Feb 5, 2019 neverlan, ctf, writeups

[NeverLAN 2019] - Things are not always what they seem

Description: Solution Author: Lucian Nitescu, as part of jmp 0xc0ffee team. Solution: This challenge was too easy and only required viewing the source of the current web page. view-source:...