[goshs] Part #1 - My take on SimpleHTTPServer in go

2020-10-01 — 15 min read

#go #coding #goshs

In this blog post I will describe how I replicated python’s SimpleHTTPServer functionality in go using only the standard libraries. This is a very technical post and will guide through the complete implemention of it. It is aimed at go beginners and intermediates.

[CVE-2020-14293] and [CVE-2020-14294] 2 vulnerabilities in Secure File Transfer Solution Qiata by Secudos

2020-09-28 — 6 min read

#rce #os-command-injection #xss #cve

The Secure File Transfer Solution Qiata by Secudos suffers from two vulnerabilities. One persistent Cross-Site Scripting and one Authenticated OS Command Injection with Privilege Escalation. This post will describe the vulnerabilities in detail.

[CVE-2020-15492] INNEO Startup Tools 2017/2018 - From Path Traversal to RCE

2020-07-22 — 6 min read

#rce #path-traversal #cve

INNEO Startup Tools has a path traversal vulnerablility in versions up to 2018 M040 (13.0.70.3804). This post will show the details of the vulnerability and how to leverage it to gain RCE.