noobpk / sql2nd-example

An example of the second order sql injection vulnerability

🚀🚀🚀

Hi there! I'm LTPhuc - aka Pk

I hold the position of Senior Officer Information Security at a prominent bank in VietNam, concurrently engaged as a security researcher.

• 🌱 I am currently studying for a master's degree at the Vietnam National University HCMC - University of Information Technology
• 🌱 I am currently learning more security certifications to improve my level
• 🔭 I am currently developing the runtime application self protection (RASP) solution combined with deep learning
• 🥅 2024 Goals: Contribute more to Open Source projects
• 🛒 YangYang Shop: I opened a Print on Demand (POD) store on Printfy, selling products I designed myself. Buy now 👉
• ⚡ Fun fact: 🤔🤔🤔🤔

🔗 Connect with me:

💬 Quick reply in telegram.

💰 Donation channel:

• Github Sponsor

  https://github.com/sponsors/noobpk
  

• Paypal Address

  https://paypal.me/noobpk
  

• BNB Smart Chain (BEP20) Contract Address

  0x338c6ac8180a6357270f23cee96562b4e79ecbc3
  

• HERE Wallet Address

  noobpk.tg
  

🏆 Licenses & Certifications:

eLearnSecurity	Offensive Security	The SecOps Grouup	APIsec University
eJPT	OSCP	CAP	API Penetration Testing
eWPT		CNSP	API Security for PCI Compliance
eMAPT
eCPPTv2

🔎 CVEs:

ID	CVSS Vector	Score	Product
CVE-2020-25528	-	-	Cutephp
CVE-2021-3863	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	6.1 Medium	Snipe-IT
CVE-2021-3879	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N	5.4 Medium	Snipe-IT
CVE-2021-3945	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	6.1 Medium	Django-Helpdesk
CVE-2021-3950	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N	5.4 Medium	Django-Helpdesk
CVE-2021-3985	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H	9.0 Critical	Kimai2
CVE-2021-3994	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	9.6 Critical	Django-Helpdesk
CVE-2021-40232	-	-	Pluck-CMS
CVE-2021-40233	-	-	Typi-CMS
CVE-2021-40234	-	-	Typi-CMS
CVE-2022-0539	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N	5.4 Medium	Beanstalk_Console
CVE-2022-0894	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N	5.4 Medium	Pimcore
CVE-2022-28378	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	6.1 Medium	CraftCMS

📃 Research Publication

Phuc Le-Thanh, Tuan Le-Anh, and Quan Le-Trung. 2023. Research and Development of a Smart Solution for Runtime Web Application Self-Protection. In Proceedings of the 12th International Symposium on Information and Communication Technology (SOICT '23). Association for Computing Machinery, New York, NY, USA, 304–311. https://doi.org/10.1145/3628797.3628901

---

✍️ Latest Blog Posts

• Gemini-Self-Protector: The Runtime Application Self-Protection Solution Combined With Deep Learning
• [Jailbreak] Tutorial downgrade from iOS 15.6.1 to iOS 14.6 with sunst0rm
• [BugBounty] XSS with Markdown — Exploit & Fix on OpenSource
• Frida iOS Intercept Api
• [Bug!Bounty] Multiple Bug Found on NCOVID Mobile Application

📺 Latest YouTube Videos

• Frida iOS Hook | Advance Usage | Memory Dump - Radare2 - Iaito
• Jailbreak | How to downgrade from iOS 15.6.1 to iOS 14.6 with sunst0rm
• Frida Intercept API | Technical | How to Intercept Encrypted APIs on The Application | Part 2
• Frida Intercept API | Technical | How to Intercept Encrypted APIs on The Application | Part 1
• Frida iOS Hook | Basic Usage | App Static - Bypass Jailbreak - Bypass SSL - Intercept URL + Crypto

---

⚡ GitHub Stats

---