Security Researcher & DevSecOps

Rocket.Chat versions prior to 2.1.0 suffer from a cross-site scripting vulnerability. As I found out, the service has a security problem t...

In our first test of the OWASP Honeypot with Ali Razmjoo , I am gonna say that among all attacks we are receiving, Russians are doing it sma...

Our OWASP Nettacker: Automated Penetration Testing Framework  has been accepted for Black Hat Asia Arsenal 2019. https://www.blackhat.co...

What is CloudFlare CloudFlare is one of the fastest growing CDN providers, which has free and premium service to accelerate, optimize ...

This script will help you to decode files coded as "Encoding by TeleAgent.IR - ResellerCenter.IR". For more detailed look here : ...

SQLMAP is Automatic SQL injection and database takeover tool. this tamper can use to bypass some web application firewall via the random s...

This script helps you to brute force files and directories on persiangig storage accounts. if you would like for more performance you can ...

Hack Dat Kiwi (Kiwi CTF) Hack Dat Kiwi is a new CTF franchise designed by security researchers and hackers with the aim of creating...

Decode PHP code with signature : [protected by law] I wrote an script for reverse it. 1 2 3 4 5 6 7 8 9 10 11 12 ...

Most of FCKeditor vulnerable to shell upload from example path in the blow: 1 2 http://target.com/FCKeditor/editor/filemanager/upload/t...