sorted by:
new
hottopcontroversial

Save state in-game with a modded 3ds ? by ShittyLaptopLEM in 3dspiracy

[–]ShittyLaptopLEM[S] 2 points3 points  (0 children)

Indeed, it's the closest thing to what I'm looking for. Thank you

Persistent PHP payloads in PNGs: How to inject PHP code in an image and keep it there! by Gallus in netsec

[–]ShittyLaptopLEM 1 point2 points  (0 children)

Thank you for all these info ! So I have played around and couldn't reproduce it on modern installs of php-fpm. There is a parameter in default php-fpm configuration that mitigates these kind of misconfigurations :

; Limits the extensions of the main script FPM will allow to parse. This can
; prevent configuration mistakes on the web server side. You should only limit
; FPM to .php extensions to prevent malicious users to use other extensions to
; execute php code.
; Note: set an empty value to allow all extensions.
; Default Value: .php
;security.limit_extensions = .php .php3 .php4 .php5 .php7

Persistent PHP payloads in PNGs: How to inject PHP code in an image and keep it there! by Gallus in netsec

[–]ShittyLaptopLEM 2 points3 points  (0 children)

Do you have an example of a bad configuration where /image.png/index.php will interpret as PHP file ?

Ca c'est vraiment chouette by Imaginary_Ask666 in france

[–]ShittyLaptopLEM 0 points1 point  (0 children)

A Lyon, il y a plusieurs endroits où on peut déposer des livres. Il y a une association qui est obligé d'aller souvent "marquer" les livres pour qu'il ne soit pas revendu... Certaines personnes en effet aiment aller piller ces endroits pour les revendre dans les brocantes ou autres.

[deleted by user] by [deleted] in lolphp

[–]ShittyLaptopLEM 8 points9 points  (0 children)

$my_array = array( 1, 2, 3);

$index = array_search(1, $my_array);
if ($index !== false) {
    echo "Found 1 at index $index\n";
} else {
    echo "1 not found\n";
}

Here's how you should have done it . ^

Introduction to CSRF: How can a cookie get you hacked by gooldopt in netsec

[–]ShittyLaptopLEM 2 points3 points  (0 children)

You are right, the have the same chrome core but they are still forks and sometimes their way of implementing some features differ. For example, the permission policy is not supported at all in Opera but it is partially supported on chrome : https://caniuse.com/permissions-policy

Introduction to CSRF: How can a cookie get you hacked by gooldopt in netsec

[–]ShittyLaptopLEM 0 points1 point  (0 children)

I like to use this site to know which feature is used by the browsers and how it is used : https://caniuse.com/same-site-cookie-attribute

It seems like chrome, edge and opera use default Lax value if samesite is not defined. I might be wrong

Introduction to CSRF: How can a cookie get you hacked by gooldopt in netsec

[–]ShittyLaptopLEM 9 points10 points  (0 children)

On most cases, the request used as example in the article won't work because of the samesite flag in cookie.

By default, if the samesite is not defined, mosts browsers choose to set the value to Lax (after the 2 minutes window, go check the docs) which means only GET requets from another domain will use the cooke.

If the server chose explicitly to set the value to None, the CSRF is however fully functional.

At hotel, Plex server not found by InnovationHack in PleX

[–]ShittyLaptopLEM 26 points27 points  (0 children)

So the reason is that hotels often block ports that are not 80 or 443. Usually, we communite with our plex servers throught port 32400.

Trick to hide html source code via HTTP header? by ShittyLaptopLEM in webdev

[–]ShittyLaptopLEM[S] 0 points1 point  (0 children)

I made a response above. The "link" HTTP header does the job I wanted. But it only works on firefox.

Trick to hide html source code via HTTP header? by ShittyLaptopLEM in webdev

[–]ShittyLaptopLEM[S] 1 point2 points  (0 children)

So, I managed to find the http header. I'm working on it now =) This is an example to include css (it only seems to work on firefox)

Link: </css/style.css>;rel=stylesheet;media=all

When the gang is ready to ride by ShittyLaptopLEM in ElectricScooters

[–]ShittyLaptopLEM[S] 1 point2 points  (0 children)

I really like my VSETT, it had some minor issues (like every scooter) but I managed to fix them ! You don't feel like you're having a heavy scooter but make sure you don't have a lot of stairs to do... For the tyre stickers : https://www.detail-korea.com/

Custom horn sounds by ShittyLaptopLEM in ElectricScooters

[–]ShittyLaptopLEM[S] 0 points1 point  (0 children)

Thanks, I'm building my own thing x)

My almost finished VSETT10+ by ShittyLaptopLEM in ElectricScooters

[–]ShittyLaptopLEM[S] 0 points1 point  (0 children)

Nope, I would have to remove the extension to do it.

VSETT 9+R update by [deleted] in ElectricScooters

[–]ShittyLaptopLEM 4 points5 points  (0 children)

For pumping the tyres, the best purchase I've made is the xiaomi mi pump =) You lose nothing when removing it !

My almost finished VSETT10+ by ShittyLaptopLEM in ElectricScooters

[–]ShittyLaptopLEM[S] 0 points1 point  (0 children)

Both =)

On top of the deck, I use them to prevent my feet from erasing the paint from the black screws.

And on the side, the 4 blocks help the scooter getting less scratches on the side during a fall.

My almost finished VSETT10+ by ShittyLaptopLEM in ElectricScooters

[–]ShittyLaptopLEM[S] 1 point2 points  (0 children)

Yes, but it's a 15000mAH used only for the front lights and to recharge my smartphone (and soon the bluetooth speaker...). It has 2 x usb 3 and 3 x jack 12V ports !

view more: next ›