Yara AlHumaidan (0xy37)·Nov 18, 2025Stored XSS in ChinaSystems Eximbills Enterprise V4.1.5In this post, I’ll walk through a stored Cross-Site Scripting (XSS) vulnerability I identified in China Systems Eximbills Enterprise V4.1.5…
Yara AlHumaidan (0xy37)·Jan 19, 2025API TestingAPIs can be found in any IT aspect nowadays, from web and mobile applications all the way to IOT solutions and the cloud. It is of…A response icon1A response icon1
Yara AlHumaidan (0xy37)·Feb 27, 2022Attacking IBM MQ — SWIFT to Steal Money$$$What is IBM MQ?A response icon1A response icon1
Yara AlHumaidan (0xy37)·Jan 3, 2022Mail rules/forms to get a shellIf you were in a redteaming assessments, and you somehow have a valid credentials to a user mailbox you can get a remote shell using the…
Yara AlHumaidan (0xy37)·Dec 16, 2021CVE-2021–44228 — Log4shellProof-of-Concept for Critical Apache Log4j Remote Code Execution Vulnerability Available (Log4Shell)
Yara AlHumaidan (0xy37)·Oct 6, 2021My first CVE! CVE-2021–41825: Verint Workforce Optimization-HTML InjectionHTML injection is a type of injection vulnerability that occurs when a user is able to control an input point and is able to inject…
Yara AlHumaidan (0xy37)·Sep 26, 2021Attacking Wireless network - WiFi HackingBefore starting, lets get some basics:A response icon1A response icon1
Yara AlHumaidan (0xy37)·Jun 24, 2021Linux L33T! - PE Cheatsheet! [OSCP Prep]One of the things that was hard for me to master during my OSCP preparation is privilege escalation. i didn’t know what to look for, where…
Yara AlHumaidan (0xy37)·Jun 24, 2021Windows L33T! — PE Cheatsheet [OSCP Prep]One of the things that was hard for me to master during my OSCP preparation is privilege escalation. i didn’t know what to look for, where…
Yara AlHumaidan (0xy37)·May 23, 2021Windows and Linux shells repositoryWhile doing OSCP i spent a lot of time looking for suitable reverse shells and web shells, i needed a repository for keeping all the shells…