Marco Ivaldi · @raptor
1558 followers · 708 posts · Server infosec.exchange

Current mood: spelunking into old and mail spool archives :hecked:

We did some good stuff back in the day

#zines #0dd #8lgm #el8 #x25 #gobbles

Last updated 2 years ago

More entity / bypass fun:

As far as I'm aware you can have 3 kinds of HTML entities. Named, decimal and hexadecimal. For example:

a == "a"
/ == "/"
&; == "%"

The first trick is, you don't actually need the semicolon most of the time. If you write "It's like 33&" it will still work and show "It's like 33%ish"

Another nice trick with the hexadecimal notation is that you can add an arbitrary amount of zeros before the actual number like so: &;

You can use and combine these when certain entities are blocked or if there is a regex that doesn't take these tricks into account.

#x25 #x25ish #x00000000000000061

Last updated 2 years ago

Ubuntu Peronista · @peron
362 followers · 2462 posts · Server mastodon.sdf.org

As egyptian tombs, ASCII login screens should include ominous and menacing advises for the intruder.

#x25 #mainframe

Last updated 2 years ago

Ubuntu Peronista · @peron
362 followers · 2462 posts · Server mastodon.sdf.org

your packets!

#x25 #lineart

Last updated 2 years ago

Ubuntu Peronista · @peron
362 followers · 2462 posts · Server mastodon.sdf.org

I don't care. I'm bringing back.

#x25

Last updated 3 years ago