How I Exploited A VPN To PWN A Company

TL; DR
The following are the vulnerabilities chained during an RTO:
1. Pre-Auth Arbitrary File Reading - CVE-2019–11510
2. Post-Auth Cross-Site Scripting - CVE-2019–11507
3. Post-Auth(admin) Command Injection - CVE-2019–11539
4. Missing Brute Force Prevention on Authentication
5. Weak Password Policy

Read All

cloud security cybersecurity ethical hacking hackernoon-top-story information security information technology mitre-attandck red team vpn