moAliased

Be quiet, sunset is shining!
Degree in EE, minor in details

[Chris Martz @ChrisMartzWX]

Everything is a conspiracy when you don’t understand how anything works.

[moAliased @bierellow]

@AmirMSafari I was looking for a complex approach, but seems like case-sensitivity is missing in the ct validation. Funny one, nice!

[Sahand @sahandy89]

You can't play "game theory" with people who believe they win if they die.

[moAliased @bierellow]

خفگی، نگرانی، خشم.

[moAliased @bierellow]

Exact same approach as before.
Not following the usual path last time paid off :))

[Yasho @YShahinzadeh]

Yousef (@samm0uda) gave me a challenge few days ago, it's a redesign of Amir's recent challenge, the solution is quite interesting, I was able to solve it in 10 minutes as I'd previously debugged QS library it, I highly RECOMMEND it, the source code:
https://t.co/D2cgR6v9PA

[moAliased @bierellow]

@Riazi_Cafe_en = (e^(j*pi/2))^(e^(j*pi/2)) = e^((j*pi/2)*(e^(j*pi/2)))
= e^((pi/2)*(e^(j*pi))) = e^((pi/2)*(e^(j*pi)))
= e^((pi/2)*(-1)) = e^(-pi/2) ≈ 0.2
It looks complicated, but it’s actually simple on paper :)

[moAliased @bierellow]

@mimbele_ @YShahinzadeh @AmirMSafari well done. there’s actually another way to get to the second point(thing) i mentioned earlier. amirmohammad explained it in his recent blog.

[moAliased @bierellow]

3 hours yesterday. Halfway there. Gave up.
Today I saw @YShahinzadeh call it the best challenge of 2026 so far. So I gave it 2 more hours. It worked.
Lesson: dig deeper.
Big shoutout to @AmirMSafari

[AmirMohammad Safari @AmirMSafari]

Can you spot the XSS vulnerability? 👀
Test it out live at: https://t.co/vRpgo8PTBE

[AmirMohammad Safari @AmirMSafari]

Thanks for participating in this challenge! I analyzed the qs parser source code and wrote about the inconsistency between the backend and frontend query parsers, along with two possible solutions. Hope you enjoy it!

https://t.co/BRPp2L7TS6

[moAliased @bierellow]

@dennis_malware @YShahinzadeh @AmirMSafari don’t worry, hope you’ll figure it out soon ;)

[moAliased @bierellow]

@6173687561646d6 @mimbele_ @YShahinzadeh @AmirMSafari code is code, doesn’t matter if it runs client-side (browser) or back-end.
focus on the concepts first, trying to learn everything at once can get distracting.
btw i’m also a newcomer, didn’t even know “express” exists before this challenge :)

[moAliased @bierellow]

@dennis_malware @YShahinzadeh @AmirMSafari what's wrong?

[moAliased @bierellow]

@mimbele_ @YShahinzadeh @AmirMSafari btw, if you’re a newbie like me, i highly recommend running the code yourself(if you haven’t already) and inspecting req.query, especially req.query.redirect_uri, to see how it behaves with different input parameters.

[moAliased @bierellow]

@mimbele_ @YShahinzadeh @AmirMSafari i had found the first one but was stuck on the second.
for me, the key was digging deeper into how back-end parsing actually behaves.
i suggest focusing on parser behavior, especially on the back-end side. that’s more suspicious.

[moAliased @bierellow]

@iri_image اینترنتا اختلال داره مجبوره تانل بزنه

[moAliased @bierellow]

@seyedhadikasaei این کصخلا آلردی نه عقل دارن، نه هوشمندی و نه شرافت. در واقع چیزی نقض نشده الان

[moAliased @bierellow]

@saeed_fard ۳ تا اینترنت ، ۴ تا متد مختلف. از جایگشت‌هاش سعی میکنم یچیزی در بیارم و وصل بمونم.

[moAliased @bierellow]

@simplerfan الان فقط فحش جوابه، بقول دکتر سکویی: خفه خون بگیرید سیاه بازا... ما تو جنگیم، چاقو گذاشتن رو رگمون دارن شرفمون رو میبرن!

[moAliased @bierellow]

@Liverbird8LFC as they have done for 40 years!