PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PwnMachine: quick update about fix and new features

yeswehack.com | blog | #bug-bounty | #docker | #tooling | #self-hosted | #pwnmachine | #release-update
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An update on PwnMachine, YesWeHack's self-hosted hunting environment: the web interface now handles file upload/download from any volume, and custom Docker images import from a Git repository.
Published
Collected

Related coverage

blog · yeswehack.com
PwnMachineV2: a new version of the self hosted pwning environment for Bug Bounty
YesWeHack released PwnMachine v2, a self-hosted hunting environment with a full web interface, Docker tooling, Traefik for HTTP routing and SSL, and PowerDNS for rebinding and SSRF tests.
vulnerability · yeswehack.com
Blind XSS : setup your self-hosted XSS Hunter with the PwnMachine
A step-by-step tutorial for self-hosting XSS Hunter Express on PwnMachine: configuring DNS, patching for volumes and SSL, and exposing it via Traefik for blind XSS campaigns.
blog · yeswehack.com
White-box penetration testing: How to debug for JavaScript vulnerabilities
Guide to white-box pentesting of JavaScript apps in Docker: debugging in VS Code to trace payloads, plus common flaws — prototype pollution (CWE-1321), type confusion and XSS.
blog · yeswehack.com
White-box penetration testing: Debugging for Python vulnerabilities
Guide to white-box pentesting of Python apps in Docker: debugging in VS Code to track payloads, covering prototype pollution, template injection (CWE-1336) and path traversal.
blog · yeswehack.com
White-box penetration testing with Xdebug: Debugging for PHP vulnerabilities
Guide to white-box pentesting of PHP apps with Xdebug: setting up Docker and VS Code debugging to find file inclusion, regex errors and unsafe uploads, and craft new payloads.
blog · blog.trailofbits.com
SequenceHash: multihashing for the rest of us
We're releasing SequenceHash and its sister function SequenceMAC, a pair of related hash constructions that bring secure multihashing to developers using hash functions other than Keccak.
Back