skip to content

osorin's abyss

Site Tools

Recent Changes
Media Manager
Sitemap

Trace: • sidebar

Sidebar

CTF notes:

Bypass CSP when a custom 404 page is present
data URI scheme (+ XSS)
Easy bash jail with strict restrictions
Express req.query Notes
H2 SQL injection to RCE
Headers for localhost bypass
HTML Encoding Differentials
HTTP Pipelining + HTTP/2 Single Packets
LFI using proc.
Mime Spoofing + php
On DNS Rebinding
parseInt() in JS
Pydantic email validator + jinja ssti
Python format string
SNI Spoofing
SQLi No Commas
TCP1P Multiplication
When stuck on jinja/flask SSTI
XSS Payloads LACTF
Zip Slip + Absolute Paths

Figures and stuff:

Index for 3D Printed Miniatures

Ham radio:

Index for Ham Radio Topics

Lockpicking:

Index for Lockpicking Topics

Console Mods:

Index for Modded Consoles

sidebar

This is an old revision of the document!

CTF notes:

Bypass CSP when a custom 404 page is present
data URI scheme (+ XSS)
Easy bash jail with strict restrictions
Express req.query Notes
H2 SQL injection to RCE
Headers for localhost bypass
HTML Encoding Differentials
HTTP Pipelining + HTTP/2 Single Packets
LFI using proc.
Mime Spoofing + php
On DNS Rebinding
parseInt() in JS
Pydantic email validator + jinja ssti
Python format string
SNI Spoofing
SQLi No Commas
TCP1P Multiplication
When stuck on jinja/flask SSTI
XSS Payloads LACTF
Zip Slip + Absolute Paths

sidebar.1725435465.txt.gz · Last modified: 2024/09/04 07:37 by osorin · Currently locked by: 172.17.0.1,216.73.216.220

Page Tools

Edit this page
Old revisions
Backlinks
Back to top

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International