Orhan Albay

Senior Software Developer | Offensive Security Certified Professional (OSCP)

[Orhan Albay @OrhanAlbay]

uniqid() — insecure PHP function https://t.co/nbnIVCgMBw

[Rapplex @RapplexOfficial]

🎉Rapplex is successfully integrated into Discord and Telegram platforms!
We are also fully integrated with 11 global platforms such as Azure DevOps, GitHub, GitHub, Jira, Slack, Asana, Trello.
Rapplex is here to make your work easier to manage and your communication stronger!

[Rapplex @RapplexOfficial]

🚀 Rapplex Web App Security Scanner !
🔗Filled with brand new features and additions, this update takes things to the next level.

[Orhan Albay @OrhanAlbay]

I tried harder @offsectraining

[Orhan Albay @OrhanAlbay]

@PawanSohlot @offsectraining Thank you

[Orhan Albay @OrhanAlbay]

View my verified achievement from @offsectraining.

I tried harder! https://t.co/a5UxF6ErlF

[Orhan Albay @OrhanAlbay]

@PortSwiggerRes @PortSwigger You're welcome.

[Orhan Albay @OrhanAlbay]

@PortSwigger

https://t.co/NNz5XokHX0

The following payload works but does not solve the lab.

/x"onerror=alert(1) "

[Orhan Albay @OrhanAlbay]

@strukt93 @Hacker0x01 Congratulations pal

[Orhan Albay @OrhanAlbay]

Not only script but all elements must be lower case also

[Orhan Albay @OrhanAlbay]

Because XML is case sensitive

[Orhan Albay @OrhanAlbay]

#til #xss when XSS injection occurs in an XML document

[Sven Morgenroth @asdizzle_]

Command injection without space, $, {, }
Python3 or PHP on server?

uname`cat<<<'<?="\x20"?>'|php`-a
uname`cat<<<'print("\x20")'|python3`-a

[Sven Morgenroth @asdizzle_]

Probably well known already, but you don't need to use document.location.hash.slice, use unescape(location) with %0a
https://t.co/M7ChRWYg2E

[Sven Morgenroth @asdizzle_]

Well obviously 1s are more dangerous than 0s. * Chrome's XSS Auditor is a marvelous piece of software.

[Orhan Albay @OrhanAlbay]

#tip #mongodb

{"user": {$nin: ["foo"]}, "pass": {$nin: ["bar"]}}

bypass login in mongodb with $nin operator as an alternative to $regex

[Orhan Albay @OrhanAlbay]

@LeetSkater Thank you.

[Orhan Albay @OrhanAlbay]

@DissidentMoore if we get an error for example say "200", we can extend the numbers between 100 and 200 for small step like 100,125,150,175,200

[Orhan Albay @OrhanAlbay]

@DissidentMoore and you can try this method for even large number of columns (e.g, 1000) with greater step between numbers like 100,200,300,400,500

[Orhan Albay @OrhanAlbay]

@DissidentMoore Yes it is possible but the main goal here is to construct the payload as small as possible