Reputation
513
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
1 7 23
Impact
~45k people reached

  • 0 posts edited
  • 0 helpful flags
  • 80 votes cast
Mar
24
comment openssl: recover key and IV by passphrase
So what would the next 16 bytes be? MD5(MD5(D0 || PASSWORD || SALT), which would be equivalent to MD5(MD5(MD5(PASSWORD || SALT) || PASSWORD || SALT)?
Mar
21
awarded  Notable Question
Mar
3
awarded  Popular Question
Jan
13
accepted encoding of optional NULL in DER
Jan
12
asked encoding of optional NULL in DER
Oct
15
awarded  Nice Question
Oct
7
awarded  Popular Question
Sep
24
accepted breaking down RSA/ECB/OAEPWITHSHA-256ANDMGF1PADDING
Sep
24
answered breaking down RSA/ECB/OAEPWITHSHA-256ANDMGF1PADDING
Aug
24
awarded  Tumbleweed
Aug
24
comment How to launch XSS code from an INPUT HTML tag upon page load?
Didn't work for me. Nor would I expect it to. onload isn't valid for input type="text" per w3schools.com/jsref/event_onload.asp
Aug
22
comment How to launch XSS code from an INPUT HTML tag upon page load?
@Anyonous - well them let me create a PoC website that demo's the vulnerability. Done. Now... how do I exploit it? And I do believe I have demonstrated an understanding of the concepts. As I said in my OP I can break out of the attribute but not the tag. Or do you believe that familiarity with the autofocus attribute essential to understanding XSS?
Aug
22
accepted How to launch XSS code from an INPUT HTML tag upon page load?
Aug
22
comment How to launch XSS code from an INPUT HTML tag upon page load?
@Anonymous - ignorance? I didn't write the website that I'm trying to exploit!
Aug
22
comment How to launch XSS code from an INPUT HTML tag upon page load?
I can't break out of the <input tag to start a <script tag, let alone not close a <script tag I'm already in. I'm not aware of any others that'll help either but if you are aware of one do feel free to post it as the answer..
Aug
22
asked How to launch XSS code from an INPUT HTML tag upon page load?
Aug
22
asked breaking down RSA/ECB/OAEPWITHSHA-256ANDMGF1PADDING
Aug
22
comment how to validate PKCS7 signed message signed with a self-signed cert via OpenSSL CLI
It's not working meh. My P7M file: pastebin.com/8382eEsN(base64 decode it to get actual result) The signing cert: pastebin.com/D4rPmyM9 I still get the "self signed certificate" error.
Aug
21
asked importing CA certs into OpenSSL CLI
Aug
21
asked how to validate PKCS7 signed message signed with a self-signed cert via OpenSSL CLI