This Sunday August 30 at 17Uhr I will be running a session on XSS for @haecksen@chaos.social
Join us in Might Mary!
https://www.haecksen.org/bbb-raume/
Remote
katalyst
@katalyst@infosec.exchange
mastodon 4.8.0-alpha.3+glitch45 Followers
1096 Following
20 Posts
Joined November 19, 2022
If you were gonna start learning php today, what resources would you reach for?
Replying to
what a journey it has been ..... yikes. still blown away I managed to graduate with a 3 in a foreign language!!!!🥳
Im thinking of moving my rotation curation project over to this platform. Has any experienced problems with accounts run by multiple users?
It's a good thing I like rain
Replying to
i know there is no true ai right now and i want to know exactly how this works so i can see through the emperors new clothes
I mean.. im glad to be on the unseasonably cold summer side of global warming, rather than the catastrophic fire or flood side of things, but i am wearing way too many clothes for the "middle of summer"
full moon coming up....
Replying to
@ifixcoinops@mstdn.social i learned you can even do object orientated programming with it, im not convinced that means I should, though haha
@deadliftbear@mas.to thank you! now i can stop talking about it all the time hahahaha
@spandauAnders@ioc.exchange actually django was gonna be my next step.. i just thought maybe it makes sense to learn php first.. but you think i can jump straight in with django instead?
My aunt in New Zealand has started making videos of her life on her small farm. I think she has made art here, there is a special atmosphere https://www.youtube.com/watch?v=VPPEtHHKfhY
My little XSS session went pretty well I think. It made me ask all kind of questions, and really solidified the basics for me. I am going to give another session in a few weeks, this time on Host Header attacks #xss #bscp #portswigger #appsec #haecksen
I thought HTTP2 smuggling was going to be waaaay harder that HTTP/1.1 but it turns out its really common to downgrade to 1.1 between the front end and the server. And HTTP/2 just ignores headers its not interested in. #bscp #portswigger #httpsmuggling #appsec
I've been studying for the bscp since the start of July. I read that HTTP Smuggling doesnt come up often in the exam, and when it does, its mind-blowingly hard. But I thought, while Im here, I might as well figure this out. THIS lab has totally challenged my understanding of how TCP works once it gets past a reverse proxy. Instead of getting its own client stream, from this point there is a pool of streams that can be shared by different client requests coming in. Its not the first lab I have come across that blurs this transport/web boundary in a way that seems like it really shouldnt be possible, but it is for sure the most spectacular to this point, as you get the actual request from the victim posted as a comment to a blogpost #wtf #tcp #bscp #portswigger #appsec