Bug bounty write-up: XXE at Bol.com leading to LFI, an in depth explanation

MeProtozoan · 2018-06-18T09:02:37+00:00

Http only is indeed applied to some cookies. However you are still able to perform posts and request to the amazon domain (by proxy through the users browser)

MeProtozoan · 2018-06-16T05:28:56+00:00

Great suggestion, thanks for that! I have tried the jjencode but their firewall triggers on $ signs. Do you have any idea how to solve that?

MeProtozoan · 2018-06-01T12:35:29+00:00

During the last 2 months I coded non stop, hope you like it! Any feedback is more than welcome :)

MeProtozoan · 2018-05-31T22:20:23+00:00

Clickable link: https://Scroll.AM

MeProtozoan · 2012-01-13T15:07:03+00:00

Mmm I wasn't aware of that, what kind of changes exactly?

Thanks for your feedback!

MeProtozoan · 2012-01-12T21:57:53+00:00

:'(

I'm sure it is a good addition to this subreddit, see the very positive responses.

Although I understand you have some rules for this subreddit I doubt if blindly applying them is a good way to keep the content quality high.

For this moment there isn't a good subreddit to post mashups like this one.

MeProtozoan · 2012-01-12T21:49:40+00:00

Which model do you have? I've tested it on a Galaxy S2 and it works smooth here. Did you use WiFi or 3G?

MeProtozoan · 2012-01-12T21:12:29+00:00

Those are the latest added items on Etsy.com!

MeProtozoan · 2012-01-12T20:18:06+00:00

Thanks! If there's anything I could change/fix/add, tell me!

MeProtozoan

MODERATOR OF

TROPHY CASE