Collaborate Disseminate
These days, you can’t throw a USB stick without hitting something that’s running Linux. It might be a phone, an embedded device, or your TV. Either way, it’s running Linux, …read more Continue reading Galvanize Your Grip On Grep With This Great Grep Guide
I was asked the following question at job interview recently.
You need to reach a web-server at the ip address 20.21.22.23 via browser using HTTP. Browser checks the ip address and blocks requests to the ips that match the regex ^http(s)?:… Continue reading How to bypass regex block of request?
I was asked the following question at a job interview recently:
You need to reach a web server at the IP address 20.21.22.23 via browser using HTTP. Browser checks the IP address and blocks requests to the IPs that match the regex ^http(s… Continue reading How to bypass regex block of request?
Is it possible to set a pattern for creating passwords or username just by simple regex? And it this a good idea?
How to sort the results of Google Dorks in Sqlmap using the –scope option?
How to easily, non-programming, non-third-party way to reduce size of all:
dates and time
Images
Headers
Doing so helps those read essential information within MHT document from Steps Recorder.
As example, Windows Steps Recorder is showi… Continue reading How to reduce font size for all images, dates and times in Microsoft MHT document? [migrated]
The VBScript’s RegExp object used in Classic ASP allows one to set a pattern then execute it. If a user provides the search string, is it exploitable for IDS08-J / CWE-625 (Permissive Regex)? Or does the RegExp object sanitize input to … Continue reading Is VBScript RegExp object exploitable with a code injection or does it escape special characters?
I have a pattern that goes like this:
Starts with |00|, is followed by a variable number of ASCII characters in uppercase that can have at most length 22, followed by 12 |00| bytes, followed by 6 random bytes, followed by an md5 hash, foll… Continue reading Can I use pcres in Suricata for UDP traffic?
Sad news for kids and adults alike as Lego announces the end of the Mindstorms line. The much-wish-listed line of robotics construction toys will be discontinued by the end of …read more Continue reading Hackaday Links: October 30, 2022
My web application allows users to make custom divs with whitelisted attributes. One of them is data-{user-input}.
Recently I have seen the following XSS payload:
[[div data-test/onmouseover=alert(1)]]
So I added the following code:
… Continue reading Bypass XSS filter in data- attribute