Antony Garand (@AntoGarand) header
Antony Garand (@AntoGarand) profile picture

Antony Garand

@AntoGarand

SDE @ Amazon, making https://xitter.cf/t.co/qMvp7H4h5S and other random projects.

dev.to/AntoGarand
Joined January 2015
  • Tweets191
  • Following406
  • Followers212
19Media
Photo by Antony Garand (@AntoGarand)Photo by Antony Garand (@AntoGarand)Photo by Antony Garand (@AntoGarand)Photo by Antony Garand (@AntoGarand)Photo by Antony Garand (@AntoGarand)Photo by Antony Garand (@AntoGarand)Photo by Antony Garand (@AntoGarand)Photo by Antony Garand (@AntoGarand)Photo by Antony Garand (@AntoGarand)
Can we get more than 2gb of ram on repl.it? My bot currently needs over 3gb, but I only see the 2gb "hacker" tier on the website Never considered hosting on repl, but if it works it would be amazing!
Image from Antony Garand (@AntoGarand)
1
And the post is out! dev.to/antogarand/making-a-s…

Making a simple fuzzer for Tixy

You might have heard about tixy.land, the minimalist javascript playground for creative coding....

dev.to
3
Not sure where this comes from, but it's nice and within the char limit! garand.dev/projects/tixy/?co…
And now, I ported my fuzzer to the tixy.land/gallery page! Never knew these horrifying things would be so fun to look at! garand.dev/projects/tixy/gal… Also, post for how I made this coming out tomorrow on my dev.to page.
Antony Garand (@AntoGarand) profile pictureAntony Garand@AntoGarand6 Dec 2020
Implemented a simple fuzzer for Tixy.land: It picks random pieces of existing solutions and merges them together: garand.dev/projects/tixy/ My favorite one: garand.dev/projects/tixy/?co… What ways of merging snippets should I add, other than few binary operators?
3
1
4
ummm bleepingcomputer.com/news/se…
Image from ✨ saleem ✨ (@saleemrash1d)
30
151
84
689
`1 +  2 === 3` Thanks, utf-8! codepoints.net/U+1680 github.com/Codepoints/awesom…
U+1680 OGHAM SPACE MARK: – Unicode

U+1680 OGHAM SPACE MARK:   – Unicode

 , codepoint U+1680 OGHAM SPACE MARK in Unicode, is located in the block “Ogham”. It belongs to the Ogham script and is a Space Separator.

codepoints.net
Implemented a simple fuzzer for Tixy.land: It picks random pieces of existing solutions and merges them together: garand.dev/projects/tixy/ My favorite one: garand.dev/projects/tixy/?co… What ways of merging snippets should I add, other than few binary operators?
Gareth Heyes \u2028 (@garethheyes) profile pictureGareth Heyes \u2028@garethheyes2 Dec 2020
Replying to @aemkei
Randomly changing the code by combining the other entries. E.g extract small sections of entry 1 randomly and combine randomly with small sections of entry 2
1
1
I've been experimenting with Metaballs recently, and finally arrived at a result I'm happy with! Try it out: garand.dev/projects/metaball… Working on a blog post for the technical details, but the source should be pretty readable for the interested.
1
Technically within 32 characters? Bonus for the XSS! tixy.land/?code=eval(locatio…

(t,i,x,y) => 'creative code golfing'

A minimalist coding environment. Control 16x16 points with a single JavaScript function. By @aemkei

tixy.land
1
1
2
Having fun with tixy.land from @aemkei! Sierpinski triangle in half speed, in an infinite loop tixy.land/?code=%28x%7Cy%29%…
1
2
Antony Garand retweeted
Martin Kleppe (@aemkei) profile picture
Martin Kleppe@aemkei2 Nov 2020
The most minimalist creative coding environment is alive: ⟶ tixy.land Control the size and color of a 16x16 dot matrix with a single JavaScript function. The input is limited to 32 characters – but no limits to your creativity! 🔴🔴 🔴🔴
409
962
365
3,921
Found out that #Microsoft #Teams policies are ONLY applied on the client🤦‍♂️and can be bypassed: 1. Use #AADInternals Teams functions 🔥 (edit and delete messages) 2. Lie to the Teams client😂(bypass messaging, meetings, and cloud storage policies) 👉 o365blog.com/post/teams-poli…
Image from Dr. Nestori Syynimaa (@DrAzureAD)
3
53
8
153
Antony Garand retweeted
James Kettle (@albinowax) profile picture
James Kettle
@albinowax23 Oct 2020
"An Attacker is able to bruteforce the Admin account until it is locked. After that an empty Password can be used to authenticate as admin to get access" - classic find by @S1lky_1337 github.com/S1lkys/CVE-2020-1…
2
126
6
407
Antony Garand retweeted
William Bowling (@wcbowling) profile picture
William Bowling@wcbowling19 Oct 2020
And the second: GitHub Gist - Account takeover via open redirect - $10,000 Bounty devcraft.io/2020/10/19/githu…

GitHub Gist - Account takeover via open redirect - $10,000 Bounty

While looking into bypasses for the per form CSRF token in my last post, I was digging into every method that was used to generate urls, trying to find one that could be used to create the required...

devcraft.io
4
118
1
293
Blogged: Inspecting Just in Time Compiled JS blog.mozilla.org/attack-and-… Want to know what JIT has compiled your function, and what the assembly looks like? Wonder no longer, it's now just a (JavaScript) function call away in the spidermonkey js shell...
Inspecting Just-in-Time Compiled JavaScript – Attack & Defense (Archive)

Inspecting Just-in-Time Compiled JavaScript – Attack & Defense (Archive)

The security implications of Just-in-Time (JIT) Compilers in browsers have been getting attention for the past decade and the references to more recent resources is too great to enumerate. While ...

blog.mozilla.org
2
20
1
54
We've updated our research post on sandboxing to include exploits by @SecurityMB and fixed a minor exploit by @AntoGarand. Thanks guys! portswigger.net/research/att…
Attacking and defending JavaScript sandboxes

Attacking and defending JavaScript sandboxes

Attacking sandboxes When I found the Safari Unicode issue earlier I started to look at current JavaScript sandboxes and found a few different ones that used a proxy. A proxy is a special object that a

portswigger.net
2
18
1
47
Antony Garand retweeted
Securitum (@securitum_com) profile picture
Securitum@securitum_com13 Jul 2020
We have published a blogpost by @SecurityMB in which he describes his recent discovery about marginwidth and marginheight attributes that make them a cross-origin communication channel research.securitum.com/margi…
1
50
3
113
During a recent plugin audit, we discovered a number of vulnerable #WordPress plugins which were copies of each other. When exploited, these vulnerabilities could lead to #SQL #injections via @antogarand. sucur.it/2Vz6U39 #infosec #sqli #security
1
10
14
Crisis responders, thanks for getting us through this. Please let us support you with a free year of our Web Application Firewall for public health workers like physicians, EMTs & food banks. sucur.it/39i7FRX #COVID19 #pandemic #coronavirus
22
6
27
Top 10 new web hacking techniques of 2019 portswigger.net/research/top…
Top 10 web hacking techniques of 2019

Top 10 web hacking techniques of 2019

The results are in! After 51 nominations whittled down to 15 finalists by a community vote, an expert panel consisting of Nicolas Grégoire, Soroush Dalili, Filedescriptor, and myself have conferred, v

portswigger.net
7
729
37
1,433
Load more