Уровень 0 · материалов: 8
Сюда относятся документы, описывающие конкретные технические уязвимости веб-серверов и способы их эксплуатации для получения контроля над системой.
Общие признаки: SQL-инъекции, небезопасная загрузка файлов, удаленное выполнение кода (RCE), ошибки валидации входных данных, компрометация серверов
Группа выше: Уязвимости веб-приложений и их эксплуатация
Смысл: The text illustrates how a lack of basic server-side security validation—specifically allowing unrestricted file uploads—can lead to total system compromise in seconds.
A developer demonstrates how he hacked a potential client's website in 60 seconds using an unrestricted file upload vulnerability after being treated rudely.
Смысл: The text demonstrates how basic security flaws like XSS and SQL injection can lead to a total system compromise, even on a site run by security experts.
A security researcher details how they exploited XSS and SQL injection vulnerabilities to hijack administrator accounts and access the database of Kaspersky Lab's Securelist.com.
Смысл: The main idea is that basic validation methods for file uploads (like checking MIME types, image dimensions, or extension blacklists) are insufficient and can be bypassed by attackers to achieve Remote Code Execution (RCE).
The article demonstrates how common PHP file upload validations can be bypassed to upload malicious shells, urging developers to use more rigorous security practices.
Смысл: The text serves as a case study in poor security hygiene, demonstrating how simple reconnaissance (Google Dorking) combined with common developer errors (exposed debug info and weak passwords) can lead to a full server compromise.
A security researcher used Google Dorks and a weak password to gain administrative access and remote code execution on an Alfa-Bank development server, subsequently reporting the flaw to the bank.
Смысл: The text serves as a cautionary tale about the dangers of poor input validation and the ease with which sensitive government data can be compromised through common vulnerabilities like SQL Injection.
A security researcher discovered a massive SQL injection vulnerability in a Russian government diploma registry, potentially exposing the personal data of 14 million citizens before it was patched.
Смысл: The main idea is that traditional client-side or superficial server-side checks for file uploads are easily bypassed; therefore, a defense-in-depth strategy involving server configuration and file transformation is necessary to prevent Remote Code Execution (RCE).
Superficial file upload checks are easily bypassed by attackers; security requires disabling script execution in upload folders, renaming files, and reprocessing images.
Смысл: The text explains how a lack of strict validation in FFmpeg's file handling and protocol support (HLS, concat) can be weaponized to achieve SSRF and unauthorized local file access on both servers and client machines.
A security researcher demonstrates how specially crafted video files can exploit FFmpeg to steal local system files and perform SSRF attacks on servers and unsuspecting users.
Смысл: The text serves as both a case study of a high-profile breach of a surveillance company and a practical tutorial for beginner penetration testers, illustrating that even security-focused companies can fall victim to basic vulnerabilities like SQL injections and poor software configuration.
A detailed analysis and tutorial based on the hacking of Gamma International, revealing how the creators of the FinFisher spy tool were compromised via basic web vulnerabilities.