iltosec

iltosec

Penetration Tester at LoreSecurity | OSWE | eWPTXv2 | SRT

127.0.0.1
iltosec@hotmail.com
@iltosec
@iltosec
@ali-iltizar

Articles with the Rce Tag

.NET Deserialization Leading to Remote Code Execution (CVE-2019-18211)
.NET DESERIALIZATION LEADING TO REMOTE CODE EXECUTION (CVE-2019-18211)

This blog post explains the black-box exploitation of Composite C1 CMS via CVE-2019-18211. The deserialization vulnerability in the EntityTokenSerializer class …...

  • 15 Aug 2025   ALI İLTIZAR
  • Reading Time: 3 min   Views: 38
Whitebox Web Pentesting: Exploiting Flask Authentication & RCE in Chain Lab
WHITEBOX WEB PENTESTING: EXPLOITING FLASK AUTHENTICATION & RCE IN CHAIN LAB

A detailed walkthrough of **Chain Lab** from **CyberExam.io**, demonstrating a Flask web app's **authentication bypass**, **SQL injection**, **hash cracking**, and …...

  • 06 May 2025   ALI İLTIZAR
  • Reading Time: 2 min   Views: 415
Exploiting Flask Authentication and RCE Vulnerabilities – Chain Lab Writeup
EXPLOITING FLASK AUTHENTICATION AND RCE VULNERABILITIES – CHAIN LAB WRITEUP

Learn how to exploit Flask authentication and remote code execution (RCE) vulnerabilities in the Chain Lab challenge on CyberExam. This …...

  • 02 Dec 2024   ALI İLTIZAR
  • Reading Time: 4 min   Views: 1782
Remote Code Execution by Bypassing Cloudflare: CVE-2022–29464 Analysis
REMOTE CODE EXECUTION BY BYPASSING CLOUDFLARE: CVE-2022–29464 ANALYSIS

Explore the detection and exploitation of CVE-2022-29464, a critical vulnerability in WSO2 products that allows remote code execution. Learn how …...

  • 11 Nov 2024   ALI İLTIZAR
  • Reading Time: 8 min   Views: 792