cr0mll

Cybersecurity Researcher

[cr0mll @cr0mll]

@TCMSecurity Cryptography

[cr0mll @cr0mll]

@kepano @obsdmd Samsung keyboard. There seems to be a bug report already submitted.

A temporary fix which worked for me was to disable Predictive Text in the Samsung Keyboard settings.

[cr0mll @cr0mll]

@iamnoahfranklin @Bugcrowd Joke's on me because I decided to take a stab at ZAP after this comment and have since switched entirely to it. A little more highlighting in HTTP requests would be appreciated, though.

[cr0mll @cr0mll]

@intigriti SSRF and Directory Traversal because user input is not validated

[cr0mll @cr0mll]

@iamnoahfranklin @Bugcrowd Who uses ZAP over Burp?

[cr0mll @cr0mll]

@intigriti Maybe actually start doing it

[cr0mll @cr0mll]

@intigriti Human gullibility

[cr0mll @cr0mll]

@aminei_ @intigriti You are absolutely right! I don't know why I thought it was concatenating "en.php" to the lang value. Probably sleep deprivation

[cr0mll @cr0mll]

@ion_kip @intigriti $_GET simply retrieves the value of the "lang" parameter without doing any validation whatsoever. This means that you can set its value to a path like ../../etc/passwd and it will be included by the include statement. The null-byte makes PHP ignore the suffix 'en.php'.

[cr0mll @cr0mll]

@patrickdibia @0x_rood Once you reach the root (/) of the file system in Linux, any additional "../" sequences are ignored. So you can just spam "../" to be sure.

[cr0mll @cr0mll]

@lauriewired @patrickwardle Let's try our luck.

[cr0mll @cr0mll]

@vxunderground @flopyash Let's see what luck brings us

[cr0mll @cr0mll]

@binitamshah @danboneh Anyone who is *not* studying cryptography at a university level and does not like math or theory should stay away from this as it is not nearly as practical as you would imagine. It is dry theory with a lot of math which you will never need in your career as an ethical hacker.

[cr0mll @cr0mll]

@vxunderground @MalDevAcademy @mrd0x Certainly a nice tool to add to the toolbox

[cr0mll @cr0mll]

@hack_git The Cyberclopaedia might be useful, too: https://t.co/cV6BSg1LYF

[cr0mll @cr0mll]

@_JohnHammond Don't forget to scan UDP

[cr0mll @cr0mll]

@SecurityTrybe 21. The Cyberclopaedia:
https://t.co/y1nhJwswdY

[cr0mll @cr0mll]

@TCMSecurity Unfortunately, I haven't been able to do much cybersecurity in the past few weeks