Learn More
Resend Email
36
gitpush
5y

This is what happens when you decide to send error messages as url value

I'm speechless :\

random

very wow
Favorite
Ranter
Comments
  • 6
    5y
    @JKamue I am honestly not sure, that's why I did not reveal their url, don't want them to be hacked lol
  • 4
    5y
    @JKamue Depends on how the underlying system is parsing the incoming parameters.. But I'd try nonetheless xD
  • 2
    5y
    @gitpush hacking with js?
  • 2
    5y
    @nitwhiz well I once saw a demo about listing server directory tree from using plain linux commands like ls, cd inside a textbox and sending request to server.
    Not sure what else could be possible
  • 0
    5y
    @gitpush these setups on which you can perform such stunts are outrageuosly stupid. On the other hand, error from url.. so.. you got a point.
  • 1
    5y
    I know the site, and had to try it out myself, luckily for them the MS thing it's made in does filter the basic xss things, even escaped stuff.
  • 1
    5y
    @GTom good good cuz I have to work with it for sometime lol don't you mess it up for me XD
Related Rants
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment