Article: Android Browser All Versions - Address Bar Spoofing Vulnerability - CVE-2015-3830 - published over 9 years ago. Content: IntroductionGoogle security team themselves state that "We recognize that the address bar is the only reliable security indicator in modern browsers" and if the only reliable security indicator could be controlled by an attacker it could carry adverse affects, For instance potentially tricking users into supplying sensitive information to a malicious websit... http://www.rafayhackingarticles.net/2015/05/android-browser-address-bar-spoofing-vulnerability.html Published: 2015 05 18 18:14:00 Received: 2021 06 06 09:04:44 Feed: Ethical Hacking - Rafayhackingarticles Source: Ethical Hacking - Rafayhackingarticles Category: Cyber Security Topic: Cyber Security |
Article: Oracle Security Alert for CVE-2015-3456 - 15 May 2015
- published over 9 years ago. Content: http://www.oracle.com/technetwork/topics/security/alert-cve-2015-3456-2542656.html Published: 2015 05 15 19:30:54 Received: 2021 06 06 09:03:27 Feed: Oracle Security Alerts Source: Oracle Security Alerts Category: Alerts Topic: Vulnerabilities |
|
Article: Best Wordlist sites - published over 9 years ago. Content: Best sites to Download wordlist... http://cyberwarzone.com/cyberwarfare/pas...word-lists http://hashcrack.blogspot.de/p/wordlist-...ds_29.html http://www.skullsecurity.org/wiki/index.php/Passwords http://packetstormsecurity.org/Crackers/wordlists/ http://www.isdpodcast.com/resources/62k-...-passwords http://g0tmi1k.blogspot.com/2011/06/dict..... http://hacking-share.blogspot.com/2015/05/best-wordlist-sites.html Published: 2015 05 15 08:40:00 Received: 2024 02 07 05:20:19 Feed: Hacking Share Source: Hacking Share Category: Cyber Security Topic: Cyber Security |
|
Article: An Overview of Exploit Packs (Update 25) May 2015 - published over 9 years ago. Content: Update May 12, 2015 Added CVE-2015-0359 and updates for CVE-2015-0336 Exploit kit table 2014- 2015 (Sortable HTML table) Reference table : Exploit References 2014-2015 Update March 20, 2015 Added CVE-2015-0336 ------------------------ Update February 19, 2015 Added Hanjuan Exploit kit and CVE-2015-3013 for Angler Update... https://contagiodump.blogspot.com/2010/06/overview-of-exploit-packs-update.html Published: 2015 05 12 04:30:00 Received: 2024 03 13 18:00:19 Feed: contagio Source: contagio Category: Cyber Security Topic: Cyber Security |
|
Article: SQL Injection Bypassing handbook - published over 9 years ago. Content: Content writers :-Chapter I::: SQL Injection: What is it? SQL Injection: An In-depth Explanation Why is it possible to pass SQL queries directly to a database that is hidden behind a firewall and any other security mechanism? Is my database at risk to SQL Injection? What is the impact of SQL Injection? Example of a SQLInjection Attack WebApplication... http://hacking-share.blogspot.com/2015/05/sql-injection-bypassing-handbook.html Published: 2015 05 07 04:05:00 Received: 2024 02 07 05:20:19 Feed: Hacking Share Source: Hacking Share Category: Cyber Security Topic: Cyber Security |
Article: Many ways of malware persistence (that you were always afraid to ask) - published over 9 years ago. Content: TL;DR: Are you into red teaming? Need persistence? This post is not that long, read it ;) Are you into blue teaming? Have to find those pesky backdoors? This post is not that long, read it ;) In the previous post, I listed different ways how a Windows domain/forest can be backdoored. In this new post, I am digging a bit deeper, and list the most common/... https://jumpespjump.blogspot.com/2015/05/many-ways-of-malware-persistence-that.html Published: 2015 05 05 06:32:00 Received: 2024 03 12 23:22:33 Feed: Jump ESP, jump! Source: Jump ESP, jump! Category: Cyber Security Topic: Cyber Security |
Article: Best Deface pages Collection - published over 9 years ago. Content: Don't Have Time for designing A Deface page .. ?? dont worry here you can download Best Deface Pages, Just replace the Name and messgae with your own name and message !! [Click on Download And Copy The Code, Then Use it, for demo you can paste the code on Pastehtml.com How to edit and save it... ?? All html codes are shared on pastebin, copy it and pas... http://hacking-share.blogspot.com/2015/05/best-deface-pages-collection.html Published: 2015 05 04 03:18:00 Received: 2023 04 02 10:42:08 Feed: Hacking Share Source: Hacking Share Category: Cyber Security Topic: Cyber Security |
Article: 3062591 - Local Administrator Password Solution (LAPS) Now Available - Version: 1.0 - published over 9 years ago. Content: Revision Note: V1.0 (May 1, 2015): V1.0 (May 1, 2015): Advisory published.Summary: Microsoft is offering the Local Administrator Password Solution (LAPS) that provides a solution to the issue of using a common local account with an identical password on every computer in a domain. LAPS resolves this issue by setting a different, random password for the commo... https://technet.microsoft.com/en-us/library/security/3062591 Published: 2015 05 01 17:00:00 Received: 2022 04 14 18:03:37 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
|
Article: Sucuri WAF XSS Filter Bypass - published over 9 years ago. Content: Introduction Sucuri Cloud Proxy is a very well known WAF capable of preventing DOS, SQL Injection, XSS and malware detection and prevention. It acts as a reverse proxy which means that all the traffic sent to an application behind Sucuri WAF would be first sent to Sucuri's network which (based upon it's signature database) would check if a particular req... http://www.rafayhackingarticles.net/2015/04/sucuri-waf-xss-filter-bypass.html Published: 2015 04 25 14:10:00 Received: 2024 02 17 13:21:46 Feed: Ethical Hacking - Rafayhackingarticles Source: Ethical Hacking - Rafayhackingarticles Category: Cyber Security Topic: Cyber Security |
Article: Operation RussianDoll: Adobe & Windows Zero-Day Exploits Likely Leveraged by Russia’s APT28 in Highly-Targeted Attack - published over 9 years ago. Content: FireEye Labs recently detected a limited APT campaign exploiting zero-day vulnerabilities in Adobe Flash and a brand-new one in Microsoft Windows. Using the Dynamic Threat Intelligence Cloud (DTI), FireEye researchers detected a pattern of attacks beginning on April 13th, 2015. Adobe independently patched the vulnerability (CVE-2015-3043) in ... http://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html Published: 2015 04 18 16:10:00 Received: 2021 06 06 09:05:11 Feed: FireEye Blog Source: FireEye Blog Category: Cyber Security Topic: Cyber Security |
|
Article: CSP 2015 Capture The Flag Writeup - published over 9 years ago. Content: On 11th April Giuseppe Trotta and myself organized a CTF (Capture The Flag) competition for Cyber Secure Pakistan (A conference that combines all the stakeholders). The challenge was hosted on hack.me and contained 9 different challenges, some challenges itself contained sub-challenges. Overall, we received great feedback from vast majority of participan... http://www.rafayhackingarticles.net/2015/04/csp-2015-capture-flag-writeup.html Published: 2015 04 18 07:31:00 Received: 2024 02 17 13:21:46 Feed: Ethical Hacking - Rafayhackingarticles Source: Ethical Hacking - Rafayhackingarticles Category: Cyber Security Topic: Cyber Security |
|
Article: Oracle Critical Patch Update Advisory - April 2015
- published over 9 years ago. Content: http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html Published: 2015 04 14 19:30:54 Received: 2021 06 06 09:03:27 Feed: Oracle Security Alerts Source: Oracle Security Alerts Category: Alerts Topic: Vulnerabilities |
Article: 3009008 - Vulnerability in SSL 3.0 Could Allow Information Disclosure - Version: 3.0 - published over 9 years ago. Content: Revision Note: V3.0 (April 14, 2015): Revised advisory to announce with the release of security update 3038314 on April 14, 2015 SSL 3.0 is disabled by default in Internet Explorer 11, and to add instructions for how to undo the workarounds.Summary: Microsoft is aware of detailed information that has been published describing a new method to exploit a vulner... https://technet.microsoft.com/en-us/library/security/3009008 Published: 2015 04 14 17:00:00 Received: 2022 04 14 18:03:37 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
|
Article: 3045755 - Update to Improve PKU2U Authentication - Version: 1.0 - published over 9 years ago. Content: Revision Note: V1.0 (April 14, 2015): Advisory published.Summary: Microsoft is announcing the availability of a defense-in-depth update that improves the authentication used by the Public Key Cryptography User-to-User (PKU2U) security support provider (SSP) in Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1. The improvement is part of ongoing efforts... https://technet.microsoft.com/en-us/library/security/3045755 Published: 2015 04 14 17:00:00 Received: 2022 04 14 18:03:37 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
|
Article: Apple fixes security vulnerabilities in Safari, OS X, iOS and Apple TV - published over 9 years ago. Content: http://www.livehacking.com/2015/04/09/apple-fixes-security-vulnerabilities-in-safari-os-x-ios-and-apple-tv/ Published: 2015 04 09 07:37:20 Received: 2021 06 06 09:04:45 Feed: LIVE HACKING Source: LIVE HACKING Category: Cyber Security Topic: Cyber Security |
Article: sshDoor (good ssh backdoor) - published over 9 years ago. Content: Usage: ./install passwrod port ./install jancok 33 open putty ssh port : 33 login : root password : jancok [root@serv ~]# uname -a;id Linux serv.test.com 2.6.18-53.1.13.el5 #1 SMP Tue Feb 12 13:01:45 EST 20010 i686 i686 i386 GNU/Linux uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel) [roo... http://hacking-share.blogspot.com/2015/04/sshdoor-good-ssh-backdoor.html Published: 2015 04 03 03:42:00 Received: 2024 02 07 05:20:19 Feed: Hacking Share Source: Hacking Share Category: Cyber Security Topic: Cyber Security |
|
Article: Local Root Exploit For Linux Kernel 2.6.32 (precompile) - published over 9 years ago. Content: Note: Its a pre-compiled exploit and has been verified for list servers. It might working on other 2.6.32-X kernels too. So, test it and update us in comments. Thanks. Following is the list of vulnerable kernels which can be rooted with our exploit. Vulnerable Kernels: Linux localhost.domain 2.6.32-358.2.1.el6.x86_64 #1 SMP Wed Mar 13 00:26:49 UT... http://hacking-share.blogspot.com/2015/04/local-root-exploit-for-linux-kernel.html Published: 2015 04 02 08:59:00 Received: 2024 02 07 05:20:19 Feed: Hacking Share Source: Hacking Share Category: Cyber Security Topic: Cyber Security |
|
Article: Vulnerability Summary for the Week of March 23, 2015 - published over 9 years ago. Content: https://www.cisa.gov/news-events/bulletins/sb15-089 Published: 2015 03 30 21:11:32 Received: 2023 03 19 13:24:20 Feed: CISA Bulletins Source: Cybersecurity and Infrastructure Security Agency (CISA) Category: Bulletins Topic: Cyber Security |
|
Article: 3050995 - Improperly Issued Digital Certificates Could Allow Spoofing - Version: 2.0 - published over 9 years ago. Content: Revision Note: V2.0 (March 26, 2015): Advisory rereleased to announce that the update for supported editions of Windows Server 2003 is now available. See Microsoft Knowledge Base Article 3050995 for more information and download links.Summary: Microsoft is aware of improperly issued digital certificates coming from the subordinate CA, MCS Holdings, which cou... https://technet.microsoft.com/en-us/library/security/3050995 Published: 2015 03 26 17:00:00 Received: 2022 04 14 18:03:37 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
|
Article: 3046310 - Improperly Issued Digital Certificates Could Allow Spoofing - Version: 2.0 - published over 9 years ago. Content: Revision Note: V2.0 (March 19, 2015): Advisory rereleased to announce that the update for supported editions of Windows Server 2003 is now available. See Knowledge Base Article 3046310 for more information and download links.Summary: Microsoft is aware of an improperly issued SSL certificate for the domain “live.fi” that could be used in attempts to spoof co... https://technet.microsoft.com/en-us/library/security/3046310 Published: 2015 03 19 17:00:00 Received: 2022 04 14 18:03:37 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
Article: The OpenSSL project releases new versions of its software to squash 12 security vulnerabilities - published over 9 years ago. Content: http://www.livehacking.com/2015/03/19/new-versions-openssl-to-squash-12-security-vulnerabilities/ Published: 2015 03 19 14:56:46 Received: 2021 06 06 09:04:45 Feed: LIVE HACKING Source: LIVE HACKING Category: Cyber Security Topic: Cyber Security |
|
Article: Android Browser Kitkat Content Spoofing Vulnerability - published over 9 years ago. Content: The following is a low risk vulnerability that was found few months ago while testing the latest Android Stock browser on Android Kitkat. The issue that was found is commonly referred as Content spoofing Vulnerability or dialog box spoofing vulnerability which could be used to fake an alert message on a legitimate website. In other words, i could d... http://www.rafayhackingarticles.net/2015/03/android-browser-kitkat-content-spoofing.html Published: 2015 03 12 05:41:00 Received: 2024 02 17 13:21:47 Feed: Ethical Hacking - Rafayhackingarticles Source: Ethical Hacking - Rafayhackingarticles Category: Cyber Security Topic: Cyber Security |
|
Article: 3033929 - Availability of SHA-2 Code Signing Support for Windows 7 and Windows Server 2008 R2 - Version: 1.0 - published over 9 years ago. Content: Revision Note: V1.0 (March 10, 2015): Advisory published.Summary: Microsoft is announcing the reissuance of an update for all supported editions of Windows 7 and Windows Server 2008 R2 to add support for SHA-2 signing and verification functionality. This update supersedes the 2949927 update that was rescinded on October 17, 2014 to address issues that some c... https://technet.microsoft.com/en-us/library/security/3033929 Published: 2015 03 10 17:00:00 Received: 2022 04 14 18:03:38 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
Article: 3046015 - Vulnerability in Schannel Could Allow Security Feature Bypass - Version: 2.0 - published over 9 years ago. Content: Severity Rating: ImportantRevision Note: V2.0 (March 10, 2015): Advisory updated to reflect publication of security bulletin.Summary: Microsoft has completed the investigation into a public report of a vulnerability. We have issued Microsoft Security Bulletin MS15-031 to address this issue. For more information about this issue, including download links for ... https://technet.microsoft.com/en-us/library/security/3046015 Published: 2015 03 10 17:00:00 Received: 2022 04 14 18:03:37 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
|
Article: Ask and you shall receive - published over 9 years ago. Content: I get emails from readers asking for specific malware samples and thought I would make a mini post about it. Yes, I often obtain samples from various sources for my own research. I am sometimes too lazy/busy to post them but don't mind sharing. If you are looking for a particular sample, feel free to ask. I might have it. Send MD5 (several or few s... https://contagiodump.blogspot.com/2015/03/ask-and-you-shall-receive.html Published: 2015 03 09 01:08:00 Received: 2024 03 13 18:00:19 Feed: contagio Source: contagio Category: Cyber Security Topic: Cyber Security |
|
Article: Thousand ways to backdoor a Windows domain (forest) - published over 9 years ago. Content: When the Kerberos elevation of privilege (CVE-2014-6324 / MS14-068) vulnerability has been made public, the remediation paragraph of the following blog post made some waves: http://blogs.technet.com/b/srd/archive/2014/11/18/additional-information-about-cve-2014-6324.aspx "The only way a domain compromise can be remediated with a high level of certainty is... https://jumpespjump.blogspot.com/2015/03/thousand-ways-to-backdoor-windows.html Published: 2015 03 05 21:04:00 Received: 2023 03 31 10:02:48 Feed: Jump ESP, jump! Source: Jump ESP, jump! Category: Cyber Security Topic: Cyber Security |
Article: FREAK vulnerability weakens secure Web sites - published over 9 years ago. Content: http://www.livehacking.com/2015/03/04/freak/ Published: 2015 03 04 09:24:02 Received: 2021 06 06 09:04:45 Feed: LIVE HACKING Source: LIVE HACKING Category: Cyber Security Topic: Cyber Security |
|
Article: WP-Slimstat vulnerability exposes WordPress websites to SQL injection attacks - published over 9 years ago. Content: http://www.livehacking.com/2015/02/25/wp-slimstat-vulnerability/ Published: 2015 02 25 11:37:19 Received: 2021 06 06 09:04:45 Feed: LIVE HACKING Source: LIVE HACKING Category: Cyber Security Topic: Cyber Security |
Article: Collection of Pcap files from malware analysis - published almost 10 years ago. Content: Update: Feb 19. 2015 We have been adding pcaps to the collection so remember to check out the folder ( Pcap collection) for the recent pcaps. I had a project to test some malicious and exploit pcaps and collected a lot of them (almost 1000) from various public sources. You can see them in the PUBLIC folder. The credits go to the authors of the pcaps lis... https://contagiodump.blogspot.com/2013/04/collection-of-pcap-files-from-malware.html Published: 2015 02 20 04:39:00 Received: 2023 03 31 08:41:26 Feed: contagio Source: contagio Category: Cyber Security Topic: Cyber Security |
|
Article: iOS Masque Attack Revived: Bypassing Prompt for Trust and App URL Scheme Hijacking - published almost 10 years ago. Content: In November of last year, we uncovered a major flaw in iOS we dubbed “Masque Attack” that allowed for malicious apps to replace existing, legitimate ones on an iOS device via SMS, email, or web browsing. In total, we have notified Apple of five security issues related to four kinds of Masque Attacks. Today, we are sharing Masque Attack II in the ... https://www.fireeye.com/blog/threat-research/2015/02/ios_masque_attackre.html Published: 2015 02 19 19:00:00 Received: 2022 05 23 16:06:47 Feed: FireEye Blog Source: FireEye Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Equation samples - from the Kaspersky Report and additional - published almost 10 years ago. Content: Here are a few samples from the report by Kaspersky Lab "Equation: The Death Star of Malware Galaxy" and additional samples of the same family. The full list is belowDownload all the samples listed below. Email me if you need the password (New link)List of filesFiles from the report:File NameMD5Size_SD_IP_CF.dll_03718676311DE33DD0B8F4F18CFFD48803718676311de3... http://contagiodump.blogspot.com/2015/02/equation-samples-from-kaspersky-report.html Published: 2015 02 17 06:22:00 Received: 2021 06 06 09:04:40 Feed: contagio Source: contagio Category: Cyber Security Topic: Cyber Security |
Article: Google backpedals on its arbitrary vulnerability disclosure policy - published almost 10 years ago. Content: http://www.livehacking.com/2015/02/14/google-backpedals-on-its-arbitrary-vulnerability-disclosure-policy/ Published: 2015 02 14 10:58:46 Received: 2021 06 06 09:04:45 Feed: LIVE HACKING Source: LIVE HACKING Category: Cyber Security Topic: Cyber Security |
|
Article: 3004375 - Update for Windows Command Line Auditing - Version: 1.0 - published almost 10 years ago. Content: Revision Note: V1.0 (February 10, 2015): Advisory published.Summary: Microsoft is announcing the availability of an update for supported editions of Windows 7, Windows 8, Windows Server 2008R2 and Windows Server 2012 that expands the Audit Process Creation policy to include the command information passed to every process. This is a new feature that provides ... https://technet.microsoft.com/en-us/library/security/3004375 Published: 2015 02 10 18:00:00 Received: 2022 04 14 18:03:38 Feed: Latest Security Advisories Source: Latest Security Advisories Category: Alerts Topic: Vulnerabilities |
|
Article: Oracle Security Alert for CVE-2016-0603 - 5 February 2016
- published almost 10 years ago. Content: http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.html Published: 2015 02 05 19:30:54 Received: 2021 06 06 09:03:27 Feed: Oracle Security Alerts Source: Oracle Security Alerts Category: Alerts Topic: Vulnerabilities |
Article: Cross Site Scripting vulnerability found in IE 11 - published almost 10 years ago. Content: http://www.livehacking.com/2015/02/04/cross-site-scripting-vulnerability-found-in-ie-11/ Published: 2015 02 04 09:46:59 Received: 2021 06 06 09:04:45 Feed: LIVE HACKING Source: LIVE HACKING Category: Cyber Security Topic: Cyber Security |
|
Article: Blind Return Oriented Programming (BROP) Attack - published almost 10 years ago. Content: submitted by /u/turnersr [link] [comments] https://www.reddit.com/r/vrd/comments/2u7wxo/blind_return_oriented_programming_brop_attack/ Published: 2015 01 30 18:06:05 Received: 2021 06 06 11:29:11 Feed: Vulnerability Research and Development Source: Vulnerability Research and Development Category: Alerts Topic: Vulnerabilities |
|
Article: Apple updates iOS, OS X and Apple TV in monster patch release - published almost 10 years ago. Content: http://www.livehacking.com/2015/01/28/apple-updates-ios-os-x-and-apple-tv/ Published: 2015 01 28 12:56:01 Received: 2021 06 06 09:04:45 Feed: LIVE HACKING Source: LIVE HACKING Category: Cyber Security Topic: Cyber Security |
Article: Google discloses three more zero-day vulnerabilities, this time for OS X - published almost 10 years ago. Content: http://www.livehacking.com/2015/01/23/google-discloses-three-more-zero-day-vulnerabilities-this-time-for-os-x/ Published: 2015 01 23 07:45:27 Received: 2021 06 06 09:04:45 Feed: LIVE HACKING Source: LIVE HACKING Category: Cyber Security Topic: Cyber Security |
|
Article: Oracle Critical Patch Update Advisory - January 2015
- published almost 10 years ago. Content: http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html Published: 2015 01 20 19:30:54 Received: 2021 06 06 09:03:27 Feed: Oracle Security Alerts Source: Oracle Security Alerts Category: Alerts Topic: Vulnerabilities |
|
Article: The Devil is in the Constants: Bypassing Defenses in Browser JIT Engines by Michalis Athanasakis, Elias Athanasopoulos, Michalis Polychronakis, Georgios Portokalidis, and Sotiris Ioannidis [PDF] - published almost 10 years ago. Content: submitted by /u/turnersr [link] [comments] https://www.reddit.com/r/vrd/comments/2sppvi/the_devil_is_in_the_constants_bypassing_defenses/ Published: 2015 01 17 06:44:33 Received: 2021 06 06 11:29:11 Feed: Vulnerability Research and Development Source: Vulnerability Research and Development Category: Alerts Topic: Vulnerabilities |
Article: Preventing Use-after-free with Dangling Pointers Nullification by Byoungyoung Lee, Chengyu Song, Yeongjin Jang, and Tielei Wang [PDF] - published almost 10 years ago. Content: submitted by /u/turnersr [link] [comments] https://www.reddit.com/r/vrd/comments/2sppt4/preventing_useafterfree_with_dangling_pointers/ Published: 2015 01 17 06:43:25 Received: 2021 06 06 11:29:11 Feed: Vulnerability Research and Development Source: Vulnerability Research and Development Category: Alerts Topic: Vulnerabilities |
|
Article: Hacking freemium games - the evolution of PC game cheating - published almost 10 years ago. Content: This post is going to be a rather strange post compared to previous ones. But bear with me, in the middle of the post you will see why this post fits the IT security topic. I'm also terribly sorry for not posting recently, but I was busy with my SPSE and SLAE certification. Both are recommended for Python and Assembly noobs like me. But back to this post... https://jumpespjump.blogspot.com/2015/01/hacking-freemium-games-evolution-of-pc.html Published: 2015 01 14 19:47:00 Received: 2024 03 12 23:22:34 Feed: Jump ESP, jump! Source: Jump ESP, jump! Category: Cyber Security Topic: Cyber Security |
|
Click to Open Code Editor