Weak Credentials | writeups.xyz

Title	Vulnerabilities	Programs	Authors
How i was able to hack a Company via watching a YouTube video	Weak Credentials	Undisclosed	Ahmad Mansour
Hacking ISP CPE equipment: FiberHome	Cryptographic Issues Weak Credentials Missing Authentication XSS Buffer Overflow Memory Corruption	FiberHome	Gergely Kalman (@Gergely_kalman)
Technical Advisory – Multiple Vulnerabilities in Nagios XI	RCE Missing Authentication OS Command Injection Local Privilege Escalation Stored XSS Plaintext Storage of a Password Weak Credentials Privilege Escalation Post-Exploitation	Nagios	Oliver Brooks
Unraveling The Story of Multiple Admin Panel Compromises	Weak Credentials Authentication Bypass HTTP Response Manipulation	Undisclosed	Vedant Tekale (@_JustYnot)
Uncovering a Command Injection, $2400 Bounty	OS Command Injection RCE File Upload Weak Credentials	Undisclosed	0xrz (@Omidxrz)
Pwning Admin Panel To Change Movie Ticket Prices at Disney	Bruteforce Weak Credentials	Disney	Inderjeet Singh (@3nc0d3dGuY)
How careless default credentials impact to massive account takeover	Authentication Bypass Account Takeover Weak Credentials	Undisclosed	M Maulana Abdullah
“2022: A Year of Fascinating Discoveries”	CSRF SSRF Blind XSS Password Reset Hyperlink Injection IDOR Weak Credentials AWS Misconfiguration	Undisclosed	Dhakal_bibek (@Dhakal__bibek)
Chaining Multiple Vulnerabilities Leads to Remote Code Execution (RCE) on One of the Payment Service Companies.	Exposed Registration Page Exposed Jenkins Instance Weak Credentials RCE	Undisclosed	Rohit Soni (@Streetofhacker)
GL.iNET GL-MT300N-V2 Router Vulnerabilities and Hardware Teardown	OS Command Injection Arbitrary File Read Information Disclosure Account Takeover Stored XSS Lack of Rate Limiting Weak Credentials Password Policy Bypass	GL.iNet	Olivier Laflamme (@Olivier_boschko)
Using Default Credential to Admin Account Takeover	Weak Credentials	Undisclosed	Rohit Kumar (Rohit_443)
How to find & access Admin Panel by digging into JS files…🥰	Weak Credentials WAF Bypass	Undisclosed	Ratnadip Gajbhiye (@Scspcommunity)
Adventures Into The MeowCorp Bug Bounty Program	Information Disclosure Weak Credentials SSRF .Git Folder Disclosure RCE	Undisclosed	Nirmal Thapa (@Tnirmalz)
From Recon via Censys and DNSdumpster, to Getting P1 by Login Using Weak Password – “password”	WAF Bypass Weak Credentials	Undisclosed	YoKo Kho (@YokoAcc)
Accessing Grofers Grafana Instance Using Shodan	Weak Credentials	Grofers	Lohith Gowda M (@Lohigowda_in)
Account Takeovers — Believe the Unbelievable	Account Takeover Session Management Issue Weak Credentials Components With Known Vulnerabilities Password Reset	Undisclosed	Nikhil (Niks) (@Niksthehacker)
Exploiting Admin Panel Like a Boss	Authorization Bypass Weak Credentials	Undisclosed	Shivam Kamboj Dattana (@Sechunt3r)
It took me only 5 minutes to find an RCE on Bentley	RCE Weak Credentials	Bentley	Divyansh Sharma
How I managed to Escalate privilege as admin	Lack of Rate Limiting Bruteforce Weak Credentials	Undisclosed	Abisheik Magesh (@AbisheikMagesh)
Attacking PostgreSQL Database	Bruteforce Weak Credentials	Undisclosed	Vishnuraj
How i was able to get admin panel on a private program	Weak Credentials	Undisclosed	Shahzad Sadiq (@ShahzadSadiq25)
How I got $13337 bounty From Google	Weak Credentials	Google	Sreeram KL (@Kl_sree)

Page 1 of 1