Needs stuff to hack, caffeine, oxygen and tea to survive. In that particular order. Security Research @netsparker
Joined July 2015
- Tweets1.9K
- Following85
- Followers1.1K
- Likes0
Sven Morgenroth retweeted
A rare case of a bug found through a private bug bounty program being publicly acknowledged. Great to see :) kb.netapp.com/support/s/arti…
How to alert in edge / IE without alert, prompt or confirm using onbeforeunload
jsfiddle.net/oqpuqxn2/
Sven Morgenroth retweeted
All domains using CloudFlare have a CSP bypass gadget. Don't use 'unsafe-eval' for CloudFlare domains.
PoC: vulnerabledoma.in/cloudflare…
Btw, the PHP closing tag can be omitted if you replace it with a semicolon
`cat<<<'<?="uname\x20-a";'|php`
Command injection without space, $, {, }
Python3 or PHP on server?
uname`cat<<<'<?="\x20"?>'|php`-a
uname`cat<<<'print("\x20")'|python3`-a
Well obviously 1s are more dangerous than 0s. * Chrome's XSS Auditor is a marvelous piece of software.
Probably well known already, but you don't need to use document.location.hash.slice, use unescape(location) with %0a
jsfiddle.net/d78mmcfe/
If you are a security researcher or developer you should certainly secure your local testing environment. How & Why:
netsparker.com/blog/web-secu…
Sven Morgenroth retweeted
Tonight! Tech segments from @md5session of @JavelinNetworks & @asdizzle_ of @netsparker, & security news! 6pm EDT securityweekly.com/live
Create with parseInt('xyz', 36) and leave it like that or convert to 0B.
Decode with .toString(36) again.
jsfiddle.net/kbn7mwkq/
<-- a practical XSS payload with 0B and base36 like in the original tweet xitter.cf/asdizzle_/status/88522…
Why did nobody tell me about 0B??
jsfiddle.net/razgL0vj/ xitter.cf/XssPayloads/status/885…