0day.work

@0day_work@robot.villas

Sebastian Neef's security research, vulnerability writeups, CTF solutions, and tooling notes. The latest post is dated July 2025.

Source: https://0day.work/index.xml

Homepage: https://0day.work

Posts

57

Posts

Migrating From Ghost to Hugo | 0day.work #Tech #Blogging #WebDev
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397840
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397840
Don't have an account? Find a server at joinmastodon.org
Jul 8, 2025
Contact | 0day.work #Security #Research #CTF
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397861
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397861
Don't have an account? Find a server at joinmastodon.org
Jul 1, 2025
Archives | 0day.work #Security #Research #CTF
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397851
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397851
Don't have an account? Find a server at joinmastodon.org
Jul 1, 2025
CVE-2023-6294: popup-builder <= 4.2.6 Admin+ SSRF & File Read | 0day.work #CyberSecurity #Vulnerability #Exploit
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397869
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397869
Don't have an account? Find a server at joinmastodon.org
Jan 31, 2024
CVE-2023-6295: so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion | 0day.work #CyberSecurity #Vulnerability #Exploit
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397881
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397881
Don't have an account? Find a server at joinmastodon.org
Dec 12, 2023
Measuring a Tor Hidden Service's idle Traffic | 0day.work #Security #Tor #Privacy
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397892
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397892
Don't have an account? Find a server at joinmastodon.org
Nov 18, 2020
BalCCon2k20 CTF: Let Me See And Dawsonite Writeups | 0day.work #CTF #Writeups #Security
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397901
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397901
Don't have an account? Find a server at joinmastodon.org
Sep 28, 2020
Credentials hiding in plain sight or how I pwned your http auth | 0day.work #Security #Hacking #Auth
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397911
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397911
Don't have an account? Find a server at joinmastodon.org
Jul 5, 2020
Damn Vulnerable Bash Web Server | 0day.work #Security #CTF #Web
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397920
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397920
Don't have an account? Find a server at joinmastodon.org
Feb 27, 2020
Files on web servers Part I: History Files | 0day.work #CyberSecurity #WebServers #History
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397933
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397933
Don't have an account? Find a server at joinmastodon.org
Jan 20, 2020
Pwning your (web)server and network the easy way - or why exposing ~/.ssh/ is a bad idea | 0day.work #CyberSecurity #Hacking #Infosec
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397944
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397944
Don't have an account? Find a server at joinmastodon.org
Jan 16, 2020
InfiniteWP Client < 1.9.4.5 - Authentication Bypass | 0day.work #Security #Vulnerability #Exploit
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397952
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397952
Don't have an account? Find a server at joinmastodon.org
Jan 15, 2020
X-MAS CTF: Roboworld | 0day.work #CyberSecurity #CTF #Writeups
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397964
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397964
Don't have an account? Find a server at joinmastodon.org
Dec 28, 2019
Open Redirects In Improperly Configured mod_rewrite Rules (PoC for CVE-2019-10098?) | 0day.work #Security #Vulnerability #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397972
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397972
Don't have an account? Find a server at joinmastodon.org
Oct 29, 2019
Proof of Concept for "Wordpress <=5.2.3: viewing unauthenticated posts" (CVE-2019-17671) | 0day.work #Security #Vulnerability #WordPress
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397979
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397979
Don't have an account? Find a server at joinmastodon.org
Oct 20, 2019
Proof of Concept for "Apache Httpd Limited cross-site scripting in mod_proxy error page (CVE-2019-10092)" | 0day.work #Security #WebSecurity #CVE
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397988
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22397988
Don't have an account? Find a server at joinmastodon.org
Oct 19, 2019
CVE-2019-11360: BufferOverflow in iptables-restore v1.8.2 | 0day.work #Security #Vulnerability #Exploit
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398001
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398001
Don't have an account? Find a server at joinmastodon.org
Jul 11, 2019
A crash in unsquashfs | 0day.work #Security #Vulnerability #Exploit
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398008
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398008
Don't have an account? Find a server at joinmastodon.org
Jun 5, 2019
CVE-2019-6726: Arbitrary File Deletion in WP fastest Cache <= 0.8.9.0 | 0day.work #CyberSecurity #Vulnerability #Exploit
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398014
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398014
Don't have an account? Find a server at joinmastodon.org
Mar 9, 2019
An example why NAT is NOT security | 0day.work #CyberSecurity #Networking #Vulnerabilities
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398021
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398021
Don't have an account? Find a server at joinmastodon.org
Mar 7, 2019
Performance of Iodine over DNS-over-HTTPS | 0day.work #Security #Networking #Privacy
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398029
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398029
Don't have an account? Find a server at joinmastodon.org
Feb 27, 2019
CVE-2019-1000032: Memory corruption / DoS in nanosvg | 0day.work #Security #Vulnerability #Exploit
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398037
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398037
Don't have an account? Find a server at joinmastodon.org
Feb 24, 2019
Dockerized Tor Onion Services with Vanity v3 Tor Addresses | 0day.work #Security #Tor #Privacy
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398046
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398046
Don't have an account? Find a server at joinmastodon.org
Feb 22, 2019
Routes-apply.sh - Safely apply routes and revert on error | 0day.work #Security #Vulnerability #Tooling
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398055
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398055
Don't have an account? Find a server at joinmastodon.org
Oct 28, 2018
P.W.N University: web 200 - H!pster Startup writeup | 0day.work #CyberSecurity #CTF #Writeup
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398063
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398063
Don't have an account? Find a server at joinmastodon.org
Oct 28, 2018
How to configure PXE network booting for Kali Linux | 0day.work #CyberSecurity #Linux #Networking
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398073
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398073
Don't have an account? Find a server at joinmastodon.org
Oct 21, 2018
Tunneling all traffic over DNS with a SOCKS proxy | 0day.work #Security #Networking #CTF
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398084
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398084
Don't have an account? Find a server at joinmastodon.org
Oct 14, 2018
Scanning the Alexa Top 1M for git daemons | 0day.work #CyberSecurity #Git #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398092
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398092
Don't have an account? Find a server at joinmastodon.org
Jun 24, 2018
Parsing the .DS_Store file format | 0day.work #Security #Forensics #MacOS
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398103
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398103
Don't have an account? Find a server at joinmastodon.org
Mar 12, 2018
Downloading SSH Keys via DNS | 0day.work #Cybersecurity #Infosec #DNS
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398111
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398111
Don't have an account? Find a server at joinmastodon.org
Feb 6, 2018
Protecting against spam by receiving more spam | 0day.work #Security #Spam #Research
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398120
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398120
Don't have an account? Find a server at joinmastodon.org
Jan 28, 2018
Locking the screen when removing a Yubikey | 0day.work #Security #Privacy #Yubikey
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398129
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398129
Don't have an account? Find a server at joinmastodon.org
Jan 14, 2018
Using a Yubikey for GPG and SSH | 0day.work #Security #Yubikey #Cryptography
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398138
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398138
Don't have an account? Find a server at joinmastodon.org
Jan 13, 2018
Jinja2 template injection filter bypasses | 0day.work #Security #Vulnerability #CTF
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398151
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398151
Don't have an account? Find a server at joinmastodon.org
Aug 28, 2017
Finding an arbitrary file upload vulnerability in a filesharing script | 0day.work #CyberSecurity #Vulnerability #Hacking
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398156
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398156
Don't have an account? Find a server at joinmastodon.org
May 13, 2017
iCTF 2017 flasking unicorns writeup - Or how we might have rooted your iCTF VM | 0day.work #CyberSecurity #CTF #Writeup
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398168
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398168
Don't have an account? Find a server at joinmastodon.org
Mar 11, 2017
BsidesSF CTF 2017 web writeups | 0day.work #CyberSecurity #CTF #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398174
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398174
Don't have an account? Find a server at joinmastodon.org
Feb 17, 2017
nullcon HackIM Crypto 1 writeup | 0day.work #CyberSecurity #CTF #Writeup
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398183
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398183
Don't have an account? Find a server at joinmastodon.org
Feb 12, 2017
Don't format, overwrite before you sell! - Recovering data from 2nd hand HDDs | 0day.work #DataSecurity #HardDrive #Privacy
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398194
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398194
Don't have an account? Find a server at joinmastodon.org
Dec 15, 2016
Ekoparty CTF 2016 writeups | 0day.work #CyberSecurity #CTF #Writeups
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398207
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/0day_work/posts/22398207
Don't have an account? Find a server at joinmastodon.org
Oct 28, 2016