https://giacolenzo2109.github.io/tags/penetration-test/ Recent content in Penetration Test on Giacomo Lenzini Hugo -- 0.152.2 en Mon, 03 Nov 2025 20:00:00 +0000 https://giacolenzo2109.github.io/blog/nextcloud-rce/ Mon, 03 Nov 2025 20:00:00 +0000 https://giacolenzo2109.github.io/blog/nextcloud-rce/ <p>During a recent penetration test, I came across a misconfigured <strong>Nextcloud</strong> instance. With the appropriate permissions, it was possible to achieve <strong>Remote Code Execution (RCE)</strong> in two distinct ways by leveraging built-in Nextcloud functionality. This post walks through the attack surface and outlines defensive measures.</p> <p><strong>Nextcloud</strong> is an open-source platform for file storage, collaboration, and communication. It allows users to sync files, share documents, manage calendars, and collaborate securely across devices and teams. In many ways, Nextcloud resembles popular cloud services such as Google Drive or Dropbox, but it offers the key advantage of complete data ownership and enhanced privacy.</p>