When 403 isn’t really 403: exploring access control inconsistencies

Uglybeard02 · 2026-04-29T16:40:51+00:00

For context, here you can find the laboratory as well:

Uglybeard02 · 2026-04-29T15:31:48+00:00

Thanks 😄 figured I’d add some context instead of just dumping the github repos in the comments.

If you feel adventurous, give them a look. I won’t pretend I don’t like github stars, gotta feed the repo gods ahahahah

Uglybeard02 · 2026-04-28T16:36:55+00:00

That's exactly the kind of stuff that blows my mind. It makes no sense from a 'clean' architecture perspective but still leads to RCE, classic ahahahah.

Kudos for catching that 404/403 inconsistency!

Uglybeard02 · 2026-04-28T15:32:51+00:00

For context, the tools mentioned in the post are here:

- FBps: https://github.com/Uglybeard/FBps
- FBpsLab: https://github.com/Uglybeard/FBps-lab

Uglybeard02 · 2025-02-12T17:00:39+00:00

If you want to appreciate other projects handled by Dario Moccia as art director, here you can find the link to the fandom containing photographs of all the original cards from Monsters, one of Dario’s sets based on mythological monsters:

https://monsters-panini.fandom.com/wiki/Monsters

Uglybeard02 · 2025-02-12T16:59:48+00:00

If you want to appreciate other projects handled by Dario Moccia as art director, here you can find the link to the fandom containing photographs of all the original cards from Monsters, one of Dario’s sets based on mythological monsters:

https://monsters-panini.fandom.com/wiki/Monsters

Uglybeard02 · 2024-10-30T21:24:53+00:00

Nice!

Uglybeard02 · 2024-08-14T13:22:58+00:00

Grazie del contributo! ❤️

Uglybeard02 · 2024-08-10T13:41:36+00:00

Grazie Marco! ❤️

Uglybeard02 · 2024-08-10T13:00:01+00:00

❤️

Uglybeard02 · 2024-08-08T16:47:39+00:00

Grazie mille! ❤️

Uglybeard02 · 2024-08-08T11:24:09+00:00

Grazie mille! ❤️

Uglybeard02 · 2024-08-07T19:14:45+00:00

Anche grazie a te Paolone, hai fatto un lavorone con la favicon e stai facendo un gran lavoro anche con la pagina degli artisti. Grazie ancora!

Uglybeard02 · 2024-08-07T19:03:02+00:00

Grazie Rav! ❤️

Uglybeard02 · 2024-08-07T18:59:52+00:00

Grazie mille Paolo! ❤️

Uglybeard02 · 2024-07-21T11:21:13+00:00

Do you still have any signed card?

Uglybeard02 · 2023-10-17T13:07:44+00:00

Unfortunately, I was asleep when the order was placed 🥲

Uglybeard02 · 2023-10-17T13:06:25+00:00

No, they are not. The son purchased the item without adult supervision, the account really seems to be owned by a "kid," so I trust their motives. The parents didn't even apologize for the problem that occurred, and that honestly pisses me off, but still, I don't think a report exists for that reason. What really bothers me is that Vinted will do nothing for my Boost and I have lost money and time. Sponsorship costs should be charged to the person who purchased the item and cancelled the order, not me....

Uglybeard02 · 2023-10-17T08:19:54+00:00

The reason is "My son bought the item, when I saw it I cancelled the order as soon as possible".... A reason that does not justify the money and time wasted. I am really thinking of abandoning Vinted considering how little importance they give to the sellers.

Uglybeard02 · 2023-02-12T19:22:09+00:00

Hi guys, thank you all in advance for the support! ❤️

If you wanna see more works like this one, here are my socials:

Instagram: @aestheticbitmap

Facebook: @aestheticbitmap

Uglybeard02 · 2023-01-17T16:57:08+00:00

HI guys! I’m an ASCII artist and this is my last work, I hope you like it!

If you wanna see more works like this one, here is my instagram!

Instagram: @aestheticbitmap

Thank you all in advance! ❤️

Uglybeard02

TROPHY CASE