Steal saved passwords, cookies, bookmarks, and history from the victim’s browser. Febin Mon Saji CEH(MASTER) | eJPT | OSCP Hi, this is Febin, an Infosec professional. In this article, I came up with a Post-Exploitation technique to steal saved passwords, cookies, bookmarks, and history from the victim’s browser using a tool named “HackBrowserData”. Post Exploitation: The term “Post-Exploitation” means nothing but what you as…

This is Febin, a Security Researcher. This article is about my third CVE that I got for finding a Remote Code Execution in a popular Learning Management Software named “Chamilo LMS”. This is a chained exploit. First, I found a CSRF in the plugin upload feature which leads to Remote…

Introduction This is Febin, a security professional. I used to pick random opensource software for my research, recently I took some web-based file management software as my research targets. There I found some popular web-based file managers, one of which was a software named “Tiny File Manager”. While poking around…

Introduction This is Febin, a security professional. I used to pick random opensource software for my research, recently I took some web-based file management software as my research targets. There I found some popular web-based file managers, one of them was a software named “FileBrowser”. While poking around I was…

Hi. This is Febin, Junior Cyber Security Engineer. In this article I am gonna explain, how I got a Telescope as a reward from Celestron for finding a subdomain takeover vulnerability on their site. I am not only interested in Hacking, Red teaming and AppSec but also interested in Astronomy…

Hi, This is Febin. This post is a walk through on a vulnhub machine called “BrainPan”. BrainPan is a nice box for the ones who are preparing for the OSCP exam, learning penetration testing & exploit development. So let’s begin. First create a separate directory for brainpan.

Hi, This is Febin, a Cyber Security Enthusiast and Ethical Hacker. In this blog, I am going to tell you the story of how I hacked my neighbour’s wi-fi. Disclaimer: I am not promoting any illegal stuff, this is meantfor educational purposes. I have a BSNL broadband connection at my…

Hi, This is Febin, Twitter : febinrev In this Post , I am gonna demonstrate windows Stack buffer overflow and exploit development in CloudMe 1.11.2 . CloudMe is a cloud storage service. This buffer overflow vulnerability was patched and the exploit is released publicly in 2018 (CVE-2018–6892). This demo will…

Hi, I am Febin, a security researcher, bug bounty hunter, CEH and a cybersecurity enthusiast. Twitter: febinrev In this blog I am going to talk about CSRF! What is CSRF? CSRF (Cross-Site Request Forgery), as its name suggests it is all about requesting a resource to another domain or webserver from an attacker…