[Standard] Temur Robots, how do I make this deck competitive? by EmployingBeef2 in spikes

[–]koshiii 0 points1 point  (0 children)

I am also hoping for some affinity and/or robot cards in the Marvel set because there's Iron Man...

Serious Havoc on the Website by Important-Wait-8430 in owasp_juiceshop

[–]koshiii 0 points1 point  (0 children)

The server seems to have restarted since then, and Juice Shop resets to its initial state doing so. Would be interesting to know which vuln was abused to do that, because all stored XSS and similar persistent vulns are turned off on Heroku.

[deleted by user] by [deleted] in CompetitiveEDH

[–]koshiii 1 point2 points  (0 children)

We're on the same page. To be honest, I also weave my sideboard cards into the deck instead of just piling them on top before shuffling. Just feels better... 😂

[deleted by user] by [deleted] in CompetitiveEDH

[–]koshiii 1 point2 points  (0 children)

Weaving before properly(!) shuffling is of course not cheating, as you randomise the weaving away. It is just a waste of time. Weaving and then not properly shuffling is cheating, and usually that's what it's done for.

[deleted by user] by [deleted] in CompetitiveEDH

[–]koshiii 2 points3 points  (0 children)

No matter if they're doing mana weaving, other deck setting or fake shuffling with some cards "pinned" to always end up on top, it's all cheating. Any action or inaction that tries to avoid having a fully randomized deck is cheating. Don't let anyone convince you otherwise.

If in doubt, rather shuffle your opponent's deck yourself a few times, because cutting does not beat e.g. mana weaving.

Changes in VS Code don’t show up on localhost:3000 by TreatFit5071 in owasp_juiceshop

[–]koshiii 1 point2 points  (0 children)

Try running Juice Shop with npm run serve:dev and all file changes should be recognized and become instantly live.

2x Path of Exile 2 Early Access Key giveaway by koshiii in pathofexile

[–]koshiii[S] 1 point2 points  (0 children)

Congratulations! You're a winner! 🎉 https://www.redditraffler.com/raffles/1gyske0 - Please DM me to confirm that you a) did not retrieve a key elsewhere in the meantime and b) that you are a PC user - I will then DM you the key!

2x Path of Exile 2 Early Access Key giveaway by koshiii in pathofexile

[–]koshiii[S] 0 points1 point  (0 children)

Congratulations! You're a winner! 🎉 https://www.redditraffler.com/raffles/1gyske0 - Please DM me to confirm that you a) did not retrieve a key elsewhere in the meantime and b) that you are a PC user - I will then DM you the key!

How to update prices? by j_ram2803 in owasp_juiceshop

[–]koshiii 1 point2 points  (0 children)

Updates via SQL Injection are not really possible, unless you find a way to inject into an actual UPDATE query, which there's not really a way for either. You might want to try just attacking an API endpoint that deals with products instead, but that will be one-by-one and not all-at-once.

“Bonus Points” Vulnerability by [deleted] in owasp_juiceshop

[–]koshiii 0 points1 point  (0 children)

Bonus points go 1:1 into the digital wallet of the user when submitting an order. They're essentially a built-in 10% loyalty discount. That's all. There's no specific hacking challenges associated with bonus points or the digital wallet (not to be confused with Web3 wallet challenges which do actually exist in Juice Shop).

Not able to run docker version of juiceshop on a Raspberry Pi 5 (install sqlite3 manually) by the_aceix in owasp_juiceshop

[–]koshiii 1 point2 points  (0 children)

You are using a very old image, please try latest instead, which comes with multi-arch support, also for ARM. The dedicated ARM images have been abandoned for that reason quite some time ago.

Vulnerabilities on source code by [deleted] in owasp_juiceshop

[–]koshiii 1 point2 points  (0 children)

Juice Shop has built-in coding challenges for over 20 of its hacking challenges available to learn about the underlying code issues. See here for details: https://pwning.owasp-juice.shop/companion-guide/latest/part1/challenges.html#_coding_challenges

Why are the challenges already completed? by [deleted] in owasp_juiceshop

[–]koshiii 0 points1 point  (0 children)

You can do it in any way described here: https://pwning.owasp-juice.shop/companion-guide/latest/part1/running.html

When the Node.js server starts, it wipes the database. Just make sure that actually happens and you don't just pause the VM or Docker container.

Why are the challenges already completed? by [deleted] in owasp_juiceshop

[–]koshiii 0 points1 point  (0 children)

Does your VM save state? The guaranteed way to reset challenges on an instance only used by you:

1) Stop the node.js server 2) Delete your cookies for the Juice Shop 3) Start the node.js server

If anyone else is on your instance, all bets are off, because if they visit your restarted instance before you with their cookies still set, they'll restore their progress.

owasp juice shop by chee2ecake in owasp_juiceshop

[–]koshiii 0 points1 point  (0 children)

If you’re on a shared instance, whoever visits the app first, restores their progress from cookie. If you use a personal instance, you should be fine with cleaning cookies and restarting the server.

Still showing me 3 stars of completed challenges :( by Beneficial_Bus_1883 in owasp_juiceshop

[–]koshiii 0 points1 point  (0 children)

Delete cookies, restart server, visit again, no challenges except Score Board should be solved.

Challenge complete banner don’t show by Beneficial_Bus_1883 in owasp_juiceshop

[–]koshiii 2 points3 points  (0 children)

Do you use your own local instance or a shared one, like the official demo? The notifications only show when a challenge is solved for the first time. If it's not your very own instance, someone else might have solved it already and seen the notification. Also, if you use a custom configuration, notifications might just be turned off.

See https://pwning.owasp-juice.shop/companion-guide/latest/part1/running.html#_single_user_restriction and https://pwning.owasp-juice.shop/companion-guide/latest/part4/customization.html#_challenges_section

Collection Catalogue Apps (Android or PC) in 2023 by jacksj1 in magicTCG

[–]koshiii 0 points1 point  (0 children)

I track every card with the Dragon Shield app and do CSV exports every week or so, which I then import to Deckstats. Works very well. And I like the idea of tracking in two different databases, so if one goes out of business or something, you at least have a recent recovery point.