skip to content

osorin's abyss

User Tools

Log In

Site Tools

Recent Changes
Media Manager
Sitemap

Trace: • sidebar

Sidebar

CTF notes:

Bypass CSP when a custom 404 page is present
data URI scheme (+ XSS)
Easy bash jail with strict restrictions
Express req.query Notes
H2 SQL injection to RCE
Headers for localhost bypass
HTML Encoding Differentials
HTTP Pipelining + HTTP/2 Single Packets
LFI using proc.
Mime Spoofing + php
On DNS Rebinding
parseInt() in JS
Pydantic email validator + jinja ssti
Python format string
SNI Spoofing
SQLi No Commas
TCP1P Multiplication
When stuck on jinja/flask SSTI
XSS Payloads LACTF
Zip Slip + Absolute Paths

Figures and stuff:

Index for 3D Printed Miniatures

Ham radio:

Index for Ham Radio Topics

Lockpicking:

Index for 3D Lockpicking Topics

Console Mods:

Index for Modded Consoles

sidebar

This is an old revision of the document!

peepee poopoo sidebar!

Pages in this namespace:

csp-bypass-custom-404
data-xss
dns-rebinding
easy-bash-jail
express-query-param
html-parsing-differential
http-pipelining
java-h2-sqli-rce
jinja-ssti
js-with-strict-waf
lfi-proc
localhost-only-bypass
parse-int
php-mime-spoofing
pydantic-jinja-ssti
python-format-string
sidebar
sni-spoof
sqli-no-commas
start
unsolved
xss-payloads

sidebar.1724246945.txt.gz · Last modified: 2024/08/21 13:29 by osorin

Page Tools

Show pagesource
Old revisions
Backlinks
Back to top

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International