neonprimetime security , just trying to help

I ran across a few phishing kits that had their php mailers obfuscated to the point where you couldn't just view the threat actor's ...

@Techhelplistcom posted a dhl/stripe phish site hxxp://bitadze[.]ge/wp-includes/ The site was still wide open so you could view the http....

This Paste of the AerulShell v.4 appears to be a php webshell that an attacker can upload and get him backdoor access to compromise and man...

Saw this web request , it is the Joomla unserialize vulnerability . Going to walk through below how to see what it's doing. GET / }...

Good quick read on preventing SQL injection by Kamran Mohsin 1-Input Validation   e.g. convert integers to integers before using so no na...

I noticed a series of Wordpress/Joomla file upload attacks from a single IP address / attacker in a short period of time. Some of the reques...

I've enjoyed talking about XSS many times on this blog . Today is another one of those days! We're going to bring it hopefully ful...

Saw this attack below that appears to be targted at China's popular CMS dedeCMS . HEAD /install/index.php.bak?step=11&insLockfile=...

Saw this sql injection attempt likely related to the Discuz! Internet Forum software probably from earlier this year. I think it may come ...

Been blogging about a few PHP injection attempts recently [1] , [2] . Here's php injection I pasted that was unique in it's obfusc...

This php injection attack was similar to the one I blogged about yesterday but interesting none-the-less. POST/index.php?s=/abc/abc/abc/...

POST /yanyu/?q={${eval($_POST[u])}} HTTP/1.1 This malicious post looked pretty interested and worth mentioning. It's attempting to...

I saw this tweet by ‏@e3xpl0it about Remote Code Execution in XSL (EXtensible Stylesheet Language) Transformations. It contained as ex...

Here's a simple tool that can find Hidden/Common Website Folders that might not have a link directly to them from the main page. Downlo...

I thought it'd be helpful to illustrate how a vulnerability goes from the code written by a developer to the metasploit module added tha...

I thought this article by High-Tech Bridge SA titled Drive-by-login attack: the end of the safe web was fascinating and scary at the same t...

I posted some details about a PHP Injection attempt here . I'd like to explain in more detail the code below seen in the attack. The go...