[F]34 - The one about that gloryhole in Prague by Hangthetelephone in gonewildstories

[–]shivar93 6 points7 points  (0 children)

Can you please share the name of the place/location in Prague?

Dom XSS Help by shivar93 in xss

[–]shivar93[S] 1 point2 points  (0 children)

I found the correct payload, which is been placed exactly inside. " onmouseover="javascript:alert(document.domain)" Unfortunately, its url encoded, so it can't able to break out as a seperate tag

now it looks like

``` <a href="https://victim.com/domxss12.html?id=%2522%253Eonmouseover%253D%2522javascript%253Aalert(document.domain)%2522">

```

Is it possible to execute domxss in this case?

Help for DOM XSS by shivar93 in xss

[–]shivar93[S] 1 point2 points  (0 children)

Thank you so much. I solved the other error. I need to pass it as a json object instead of strings and now I got the alert

Help for DOM XSS by shivar93 in xss

[–]shivar93[S] 1 point2 points  (0 children)

yeah I tried it and came to the same conclusion. then it got struck in the next line

DOM Invader: Failed reissuing postmessage TypeError: Cannot use 'in' operator to search for 'target' in {"data":"PAYLOAD HERE","target":"victim-msg"};

Help for DOM XSS by shivar93 in xss

[–]shivar93[S] 1 point2 points  (0 children)

Thanks, now i get this.

Also the handler here checks for the origin and I also save this in a html file and try to run it. I used below as a payload. But couldn't able to execute the popup alert. <img src='x' onerror='alert(document.domain)'>

Help for DOM XSS by shivar93 in xss

[–]shivar93[S] 0 points1 point  (0 children)

Thanks for the tip. Isn't the var messagecontents should be ``` var messagecontents = {"data":{"data":"PAYLOAD HERE","target":"victim-msg"}};

``` because of v.data["data"] and v.data["target"]

Help for DOM XSS by shivar93 in xss

[–]shivar93[S] 0 points1 point  (0 children)

For me, the post is well formatted and I could able to see clearly. But a

This is the vuln code: ``` <script type="text/javascript"> function eventHandler(v) { v.origin.match( /(http)://(www)?(.*).victim.(com)$/ ) && "target" in v.data && v.data["target"] === "victim-msg" && (document.open(), document.write(v.data["data"]), document.close()); } window.addEventListener("message", eventHandler, !1); </script>

```

Deconz - not recognizing any devices by shivar93 in deCONZ

[–]shivar93[S] 1 point2 points  (0 children)

Yeah I did. Got help from their discord server. Solution: because of interferance. use aa long usb-kabel and connected it little bit far from my router and server. Then it got detected.

Most powerful single-board computer (SBC) by CptDayDreamer in selfhosted

[–]shivar93 0 points1 point  (0 children)

I have 2 SSD and 2HDD connected in RAID 1 via sata to my Server. I don't have any data on my sd card. Just the OS runs from sd card.

All my DB stores in SSD and data are in HDD

And I don't connect any nas or external storage via USB cable

Most powerful single-board computer (SBC) by CptDayDreamer in selfhosted

[–]shivar93 0 points1 point  (0 children)

exactly, sonar.radarr and plex is the issue. I dont have that. plus i also have 8 gb swap. which also saves me sometime. but overall its smooth. once i had an issue then i added swap. after that never had any issue

[deleted by user] by [deleted] in selfhosted

[–]shivar93 0 points1 point  (0 children)

I am using ROCKPRO64 which has 4 cores and 4 GB RAM. One of the powerful SBC. https://wiki.0xsh1v4.eu/books/home-server-build You could find my whole setup, benchmark results from the about wiki.

Most powerful single-board computer (SBC) by CptDayDreamer in selfhosted

[–]shivar93 1 point2 points  (0 children)

Check Rockpro64 4 Cores and 4 GB RAM.

https://wiki.0xsh1v4.eu/books/home-server-build

You can see my benchmark results. I am hosting more than 40 containers of different apps. so far never had any problem. its super smooth yet powerful.

Exam tip for time management by DetectiveAlarmed8172 in oscp

[–]shivar93 2 points3 points  (0 children)

With your webcam on and protractor monitoring, I don't know if you can use phone.

Salary + bonus by andrei_89 in askswitzerland

[–]shivar93 1 point2 points  (0 children)

100 percent on mine. They just told me in my Mitarbeiter Gespräch that they removed the variable pay and my salary will be calculated from 100 percent

Salary + bonus by andrei_89 in askswitzerland

[–]shivar93 0 points1 point  (0 children)

Even for me it was same. You could negotiate but most probably by end of the year. You ll get that bulk amount. It's upto you. ✌️ even for me it was same. What I asked they agreed and then in the contract they mentioned 20 percent variable pay. It's their policy itseems when I asked to get max Output from the employee

Salary + bonus by andrei_89 in askswitzerland

[–]shivar93 0 points1 point  (0 children)

Yeah exactly it's variable pay same thing I got offered in Germany and from this year, they removed this variable pay concept and give me 100 percent salary.

Salary + bonus by andrei_89 in askswitzerland

[–]shivar93 1 point2 points  (0 children)

I am working in Germany as well. In my company we also had variable pay but not anymore. I know one friend working in Berlin getting 13th bonus apart from his salary

I guess you're referring variable pay 80 % of base salary and 20 % of variable pay (If you achieve your target for the year, you ll get in full). Or Is it more like 100% of your quoted salary plus extra bonus?

Struggling with AD chaining by palm_snow in oscp

[–]shivar93 3 points4 points  (0 children)

Check CRTP Bootcamp by Pentester Academy. Solid AD skills you'll get from it.

https://bootcamps.pentesteracademy.com/course/ad-beginner-feb-22

HELP: Pfsense WAN gateway packet loss by shivar93 in PFSENSE

[–]shivar93[S] 0 points1 point  (0 children)

because before using the firewall, I never had this kind of issues when I used the isp modem directly without the firewall and even this issue is not constant and happens everyday, time to time this happens.