PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bypass Apache Superset restrictions to perform SQL injections

blog.quarkslab.com | research | #sql-injection | #postgresql | #vulnerability | #pentest | #apache-superset | #bypass
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab bypassed Apache Superset's SQL-injection guards during an audit by leveraging PostgreSQL behavior, achieving injections on two API routes and escalating time-based to error-based.
Published
Collected

Related coverage

research · blog.quarkslab.com
Bypassing Android Hardware Attestation from the Analyst's Chair
Hardware key attestation lets an Android app prove to its backend that a key lives in secure hardware on a locked, verified device. It is also the wall that stops a security analyst working on a rooted phone. This article opens the mechanism from the analyst's chair, from the certificate chain and the attestation extension down to the root of trust, then shows a simple bypass that never touches the secure hardware. We relay the attestation to a clean device and splice a genuine chain back into the target app with a Frida hook. A companion repository ships the validation backend, the demo apps and the instrumentation, so the whole setup can be run and inspected rather than taken on faith.
research · blog.quarkslab.com
Android Runtime Restrictions Bypass
Privilege-free techniques to bypass Android runtime restrictions: escaping the Android 7 dlopen() namespace limits on private libraries and the Android 9 block on internal Java APIs.
research · theori.io
Announcing Xint Code
Xint launches Xint Code, an autonomous code-analysis tool that found critical 0day RCEs in Redis, PostgreSQL and MariaDB at the ZeroDay Cloud challenge with no harnesses or humans in the loop.
research · portswigger.net
Using form hijacking to bypass CSP
Form hijacking bypasses CSP via injected forms or formaction attributes while password managers auto-fill credentials. Seen on Infosec Mastodon and PortSwigger's site; Burp added passive scan checks.
research · portswigger.net
Cracking reCAPTCHA, Turbo Intruder style
James Kettle uses Turbo Intruder's last-byte synchronization to trigger a race condition that partially bypasses Google reCAPTCHA, demonstrated against Reddit after Google declined to fix it.
research · portswigger.net
Abusing JavaScript frameworks to bypass XSS mitigations
Gareth Heyes abuses the Mavo JavaScript framework's $url object to build DOM-based XSS that bypasses NoScript's XSS filter, and shows risks from attacker-controlled data sources.
Back