Santosh Bhandari

Security Engineer by day, and redacted by night

[Santosh Bhandari @MRCodedBrain]

Random idea : We can use XSS to exfiltrate passwords by abusing password managers autofill functionality. What we can do is inject a fake login page which gets filled up by a password manager like @LastPass , and our xss can steal them.

[Santosh Bhandari @MRCodedBrain]

@intigriti yea

[Santosh Bhandari @MRCodedBrain]

Wrote a poem on 'love overflow'. When poetry meets cybersecurity.

[Santosh Bhandari @MRCodedBrain]

@s3cur3_1337 yes, changing the base leads to the repetition of a number which can be stripped off to reveal the flag. @StructHack solved it by doing frequency analysis in paper.

[Santosh Bhandari @MRCodedBrain]

Can you find the flag from this?

Flag format : mrcb{....}

I wrote this challenge with one-liner JS

鄉鄔ঙঘ鄣鄗鄐鄅ঙ鄑鄀鄁鄕কগ鄔鄁ক鄅鄐鄖鄁鄔鄁鄕鄖鄅鄐鄃���

[Santosh Bhandari @MRCodedBrain]

@s3cur3_1337 cool. what was your approach?

[Santosh Bhandari @MRCodedBrain]

@joaxcar 9, 10, and 13 seem to be the only characters which get stripped out. Tried in firefox, chrome, and safari.

[Santosh Bhandari @MRCodedBrain]

@heavypennies @chesscom Thank you. The team responded, and they are working on a fix.

[Santosh Bhandari @MRCodedBrain]

Hello @chesscom ,
I've found a critical vulnerability in your system. Please check the report in your security bug ticketing system.

[Santosh Bhandari @MRCodedBrain]

@dntverif @nullenc0de readme asks you to run as ./gofuzz.py however, there is a shebang missing in the source code. Try adding shebang and see if the problem resolves?

[Santosh Bhandari @MRCodedBrain]

@PentesterLab @taviso @samykamkar

[Santosh Bhandari @MRCodedBrain]

@pablos @samykamkar Looks like the link to the @samykamkar site is wrong there. It should have been https://t.co/kcX5Rz8xA8 . Gonna listen to the podcast soon :)

[Santosh Bhandari @MRCodedBrain]

We've wrapped up our fifth onsite @hackthebox_eu meetup Nepal. It was organized in collaboration with women in cybersecurity for the women's cyber empowerment. We solved a Windows machine to get them started with CTF. Thanks @hackthebox_eu , and my team mates @maskop9 @tnirmalz.

[LiveOverflow 🔴 @LiveOverflow]

I stumbled over this tweet and thought "isn't this a generic HTML sanitizer bypass?"

In todays video I share my investigation: https://t.co/W6Y5HnTz4Q

[Santosh Bhandari @MRCodedBrain]

We've wrapped up fourth @hackthebox_eu meetup Nepal. It was an onsite event hosted for the college students. There were around 100+ participants and it was so overwhelming. We solved a medium level box named "interface". Looking forward to upcoming events. Keep hacking !

[Santosh Bhandari @MRCodedBrain]

@_jerbz Yes

[Santosh Bhandari @MRCodedBrain]

If you try <22></22> in html then <22> gets treated as text where as </22> gets wrapped inside html comment. 🤔

[Santosh Bhandari @MRCodedBrain]

@kingthorin_rm I tried this in codepen in Firefox but should work in other browsers too. It's in the specs.

[Santosh Bhandari @MRCodedBrain]

Excited to share my recent talk on WordPress Application Security at WordCamp Nepal! Check out the video to learn about tips and tricks to keep your WordPress site secure.

Disclaimer: It's in Nepali language but you can go through the slide.

https://t.co/PGQJw7RUa5

[Santosh Bhandari @MRCodedBrain]

@OctagonNetworks Neat solution!
If the substring was only https://t.co/MydhPsxRoi then this also would also have worked.