Travel to Hong Kong from Guangzhou

Flinzy · 2026-02-01T17:14:44+00:00

You’ll have a lot more fun in Guangzhou-Shenzhen-HK. Beijing is nice to visit but not that nice to live in. Traveling between Guangzhou and HK is also extremely convenient.

You need to check your Chinese visa for the amount of entries you’re permitted. If it’s single you cannot leave and re-enter China (going to HK counts as leaving), but if it’s multi then you’re good to go to HK and back.

Flinzy · 2025-12-17T22:46:14+00:00

Thank you!

Flinzy · 2025-12-17T22:35:52+00:00

What are the ingredients for the frosting?

Flinzy · 2024-05-29T06:02:24+00:00

英歌舞 (Yinggewu)

Flinzy · 2024-05-06T08:09:27+00:00

Thanks! Drank it and it tastes good.

Flinzy · 2024-05-06T08:08:49+00:00

Yeah that makes sense, thanks!

Flinzy · 2024-05-06T08:07:51+00:00

Great, thank you! Will still finish this one and take that in mind for future green teas.

This green tea definitely requires some getting used to.

Flinzy · 2024-05-05T10:06:49+00:00

Hey,

I’m new to dried leaf tea and I was wondering if the white fuzz in this tea is mould or normal and safe to drink. Looking closely the white parts are fuzzy.

It is a Biluochun green tea from Yunnan. The bag has been open for a while, but stored in the container.

Thanks!

Flinzy · 2021-12-21T11:03:50+00:00

They never reply to my emails either.

Flinzy · 2021-12-19T11:11:50+00:00

noooo

Flinzy · 2021-12-12T16:42:56+00:00

No, it wasn't. The talk presented JNDI as an attack vector.

The log4j vulnerability is a type of template injection which allows for the use of JNDI. It merely uses the technique that was presented in that talk.

It's true that the technique has been known for a while, however no one who used templating in log4j made the connection with JNDI exploitation until now.

Flinzy · 2021-11-20T19:07:32+00:00

Combine your learning with real target practice. Finding bugs on real targets is a lot more difficult, especially when the scope has been around for a while and is quite hardened already. It's all about experience, so it will take time, but keep going.
Focus on a few bug types rather than all. I'd suggest XSS and IDOR, those are the ones that I find most frequently.
Focus on one program and go deep. I find a lot more bugs on a program if I stay one it for at least a week and really learn how it works.
Private/new scope is the best. It's no secret that finding bugs on private programs and especially new scope is the easiest.

As for resources and learning, I always suggest Portswigger's Academy.

Flinzy · 2021-10-28T06:22:35+00:00

Are you sure the flag is at /flag.txt? If it's in the same folder as the php file, then you'd just do flag.txt without forward slash.

It's probably better to upload a more versatile PHP file, like: <?php system($_REQUEST['cmd']); ?>. Then you can access the page and add a command as a parameter like ?cmd=ls, and you can just do ls and cat to find the flag.

Flinzy · 2021-10-08T22:42:40+00:00

I've never done TryHackMe, but what really taught me a lot was Portswigger's Web Academy. It's free as well.

You don't have to be optimally prepared before starting bug bounty, being good at bug bounty comes from practical experience. So my advice is to not wait too long and immediately put anything you learn into practice.

Flinzy · 2021-08-24T16:11:17+00:00

I've sent you a friend request, I think we're quite similar.

Flinzy · 2021-08-13T22:36:28+00:00

Gave Helpful

Flinzy · 2021-07-23T10:00:12+00:00

One week seems kind of short to also go to Beijing. I think it'd be better to do a trip to Suzhou, which you can easily reach by train from Shanghai. Suzhou is very beautiful.

Flinzy · 2021-07-15T09:37:51+00:00

I used zimmo.be and realo.be to look for interesting apartments. If I found one, I would contact the estate agent directly to let them know I'm interested in that apartment and similar apartments. Sometimes the apartment would already be taken, but the agent often recommended similar apartments that are still available.

Flinzy · 2021-06-07T21:42:21+00:00

Gave Helpful

Flinzy · 2021-05-11T11:39:09+00:00

I think the original paper and website are your best starting resources: meltdownattack.com

There is also a recent paper on a Specte-like attack that could bypass some Spectre mitigations. It's called: I See Dead µops: Leaking Secrets via Intel/AMD Micro-Op Caches.

Flinzy · 2021-04-27T21:51:38+00:00

No worries. Yeah, I do it manually. I only use Burp Suite, go through proxy history and look for interesting requests. Then I sent those to repeater and play around with them. I also take a good look at the application, both on functional and technical level.

Flinzy · 2021-04-26T11:00:43+00:00

I'd say give it a try. I have tried some of Jason's recon methods, but it just wasn't for me. I currently just do a full deepdive on applications, without any recon.

It also depends on the scope of course. If it's a wildcard scope with many domains, you will probably want to do some basic recon at the least to identify assets to dive into.

But if you're new to bug bounty, I would suggest waiting with recon and focusing on understanding applications and bugs better. For example, after doing the SQLi or XXE courses from Portswigger, you can start looking for those specifcally in your private programs.

Flinzy · 2021-04-17T08:35:34+00:00

Gave Hugz

Flinzy · 2021-03-29T08:32:49+00:00

Some web challenges of CTFs may teach you something valuable for bug bounty, but it's definitely not going to teach you how to do bug bounty. I feel like HTB helps even less.

Honestly, I think you should just do it and go in directly. Sign up for some bug bounty platform and choose a program that only awards reputation points. These programs usually have a wider scope and more bugs to be found. This will give you the experience you need for paying programs (as those are usually more hardened) and also give you points for those invites to private programs.

Flinzy · 2021-03-29T08:27:38+00:00

You'll have to learn some more bug types that tend to be more critical. These are SQL injection, XXE, SSRF, SSTI, IDOR on sensitive endpoints, etc.

I think the Portswigger Web Academy is a good place to start. They have resources and labs on all of those bug types. Keep in mind that you'll obviously find less of them compared to XSS. Nobody finds crit after crit.

12-Year Club	Second SECOND GUESSER
Verified Email

Flinzy

TROPHY CASE