https://blog.blindsecurity.gr/tags/python/ Recent content in Python on Blind Security Hugo -- gohugo.io en Sun, 07 Jun 2026 00:00:00 +0000 https://blog.blindsecurity.gr/posts/azure-app-services-c2-network-filtering-evasion/ Sat, 16 Aug 2025 00:00:00 +0000 https://blog.blindsecurity.gr/posts/azure-app-services-c2-network-filtering-evasion/ Turning an Azure App Service into a reverse proxy and payload host to punch a C2 channel through egress filtering. https://blog.blindsecurity.gr/writeups/bmdyy-tudo/ Fri, 16 Aug 2024 00:00:00 +0000 https://blog.blindsecurity.gr/writeups/bmdyy-tudo/ An OSWE-style source code review of the tudo web app, ending in a single all-in-one exploit script. https://blog.blindsecurity.gr/writeups/ssti-in-erpnext-12/ Tue, 02 Jan 2024 00:00:00 +0000 https://blog.blindsecurity.gr/writeups/ssti-in-erpnext-12/ Server-side template injection in ERPNext 12 leading to RCE. https://blog.blindsecurity.gr/posts/dinvoke-two-stage-payload-and-rc4-in-meterpreter/ Sat, 29 Jul 2023 00:00:00 +0000 https://blog.blindsecurity.gr/posts/dinvoke-two-stage-payload-and-rc4-in-meterpreter/ A Python staging server plus a C# DInvoke dropper that pulls an RC4-encrypted second stage and lands an undetected session. https://blog.blindsecurity.gr/writeups/sync-breeze-enterprise-10-0-28-rop-chain/ Sun, 01 Jan 2023 00:00:00 +0000 https://blog.blindsecurity.gr/writeups/sync-breeze-enterprise-10-0-28-rop-chain/ Building a ROP chain for Sync Breeze that does not depend on hardcoded addresses, so it survives across Windows versions.