SaltStack Salt REST API Arbitrary Command Execution Exploit

Date added 12-11-2020 This Metasploit module exploits an authentication bypass and command injection in SaltStack Salt’s REST API to execute

Read more

What is AppSec? A process and tools for securing software

Connect
Hello! I'm Steve, an independent security researcher, and analyst from Scotland, UK.

I've had an avid interest in Computers, Technology and Security since my early teens. 20 years on, and, it's a whole lot more complicated...

I've assisted Governments, Individuals and Organizations throughout the world. Including; US DOJ, NHS UK, GOV UK.

I'll often reblog infosec-related articles that I find interesting. On the RiSec website, You'll also find a variety of write-ups, tutorials and much more!
Connect

Checking for security flaws in your applications is essential as threats become more potent and prevalent What Is AppSec? Application

Read more