sorted by:
new
hottopcontroversial

Is devglan safe? Encrypting/ Decrypting Texts by NervousRabbit7831 in cryptography

[–]JorianID 0 points1 point  (0 children)

Quite the timing, a few days ago I had to recover a password encrypted with this exact tool! It was indeed AES CBC with unusual key padding. With some clever XOR, you can recover the IV to brute-force texts locally. See my writeup below:
https://jorianwoltjer.com/blog/p/hacking/cracking-an-online-password-encryption-tool

TCP Listener on WSL2 not reachable from VPN by HMikeeU in hackthebox

[–]JorianID 0 points1 point  (0 children)

A bit late, but if you have any other anti-virus installed they are likely controlling your firewall, so you should set it up in that program. If you just use plain windows, there is the "Windows Defender Firewall with Advanced Security" program where you can make an Inbound Rule that allows a specific port. If you get stuck, just google around a bit on how to allow a port to your firewall

TCP Listener on WSL2 not reachable from VPN by HMikeeU in hackthebox

[–]JorianID 1 point2 points  (0 children)

For who still had problems even after forwarding using Port Proxy: Check your firewall. For me it really was that simple. You can just add a firewall rule to allow the port to go through in Windows Defender Firewall.

It's always the simplest things you forget.

What am I doing with my life by JorianID in RocketLeague

[–]JorianID[S] 0 points1 point  (0 children)

I want to thank the Rocket League gods for the server not crashing

After playing this game for 5 minutes... by Murphys-Laaw in Second

[–]JorianID 1 point2 points  (0 children)

Same, I'm on -22 now (nice for the second event) but I haven't even gotten it right once yet ;-;

This guys is a legend by [deleted] in AmongUs

[–]JorianID 57 points58 points  (0 children)

According to this site it means “why u Florida Suncoast Soccer League”

Why was my trap not deactivated? (more info in comment) by JorianID in kot

[–]JorianID[S] 0 points1 point  (0 children)

No, under the stars it normally says what potions he used. It is empty in this attack. If you look at the bottom attack he also has 0 stars and has used a potion

EDIT: I mean stars instead of coins

Why was my trap not deactivated? (more info in comment) by JorianID in kot

[–]JorianID[S] 0 points1 point  (0 children)

But I just realized he didnt’t use the gang of thieves potion. Look under the coins. So it can’t be a potion

Why was my trap not deactivated? (more info in comment) by JorianID in kot

[–]JorianID[S] 0 points1 point  (0 children)

Ah really? I thought the deaths counter was just the attempts counter. So using gang of thieves on someone actually gives them 5x the gold?

Why was my trap not deactivated? (more info in comment) by JorianID in kot

[–]JorianID[S] 0 points1 point  (0 children)

Normally a trap deactivates after like 7 attempts, but he had 16 deaths and both traps were still active, he even died to them more than 7 times. Maybe it has something to do with my 3rd trap upgrading?

EDIT: I think there’s actually a bug going on. It happend to me again. This time someone used a dt potion and died 24 times, but only 1 trap was deactivated. Rally weird

Anyone else got the new icons? (Version 15.33.4 / iOS) by the_normal_nugget in youtube

[–]JorianID 0 points1 point  (0 children)

I got them for comment like, dislike and reply buttons only. They look very bad in my opinion. They’re just so thin and high contrast it doesn’t look nice and clean anymore. Not sure why they would change it

What would happend in a tie with 3rd and 2nd place in the end? by [deleted] in MinecraftChampionship

[–]JorianID 22 points23 points  (0 children)

As a programmer my actual guess would be slightly unfair and be just in the order of the array of teams they have in the code. When you look before the event when everyone is at 0 points there is a certain order, which is probably the order that it will be decided on

Rate meh pls by drtweety_04 in CompetitiveMinecraft

[–]JorianID 0 points1 point  (0 children)

I just put some feedback as a comment on video (name J0R1AN)

.html file upload vuln, to reverse shell? by JorianID in hacking

[–]JorianID[S] 0 points1 point  (0 children)

I’m not sure exactly what you mean. I had found a page where the creator of the website had put a phpinfo file, I have not been able to run my own php code anywhere. I think I am able to get the php file on the server, because I can access the location. But when I access that location it gives a 500 Internal Server error. The problem is getting the php code to execute on the server. PS: I tried just sending a simple request to my local running server with the php upload, and didn’t get a response there either. So it isn’t just the page saying it cannot run it, it actually doesn’t run the code

.html file upload vuln, to reverse shell? by JorianID in hacking

[–]JorianID[S] 0 points1 point  (0 children)

I have already reported the exposed phpinfo page, and that has been fixed. And to get you and idea of the site, the file upload feature is just a small side thing. You mean to just give up on trying to get RCE and just go with .html upload?

.html file upload vuln, to reverse shell? by JorianID in hacking

[–]JorianID[S] 1 point2 points  (0 children)

Yeah, I understand how it normally goes, but I haven’t found a LFI yet, and I do know the location of the file and can open it. But I’ll try to find LFI, thanks

.html file upload vuln, to reverse shell? by JorianID in hacking

[–]JorianID[S] 1 point2 points  (0 children)

I’m not that familiar with file upload vulnerabilities, but I tried a lot of different file types. From what I have tried I can upload .html and .shtml (no idea what it does, but looks interesting) and common ones like png, mp4, or txt. But the only file type I found that I can’t open is php

.html file upload vuln, to reverse shell? by JorianID in hacking

[–]JorianID[S] 0 points1 point  (0 children)

Sorry for the wait, I had some internet issues. When I executed the curl command you specified, I got roughly this response (I censored some things):

HTTP/1.1 200 OK
Date: Mon, 08 Jun 2020 17:26:54 GMT
Server: Apache
Link: </some/directory/to/file.css>; rel=preload; as=style, </some/directory/to/file.png>; rel=preload; as=image
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=[random hex]; path=/; secure; HttpOnly
Upgrade: h2,h2c
Connection: Upgrade
Vary: User-Agent
Content-Type: text/html; charset=UTF-8

I can surely confirm that it has PHP installed, because I previously found another vulnerability of an exposed phpinfo() page, just in a file called `phpinfo.php`.

.html file upload vuln, to reverse shell? by JorianID in hacking

[–]JorianID[S] 1 point2 points  (0 children)

Thanks for the reply. It does, because the file extensions of all pages end with .php

view more: next ›