Skip to main content
gsgx's user avatar
gsgx's user avatar
gsgx's user avatar
gsgx
  • Member for 13 years
  • Last seen more than a month ago
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
awarded
comment
awarded
awarded
comment
Getting null byte injection attacks to work with PHP 5.2.17
While I haven't went back to test this, I read later on that the magic_quotes_gpc escapes the null byte. Maybe this was enabled?
comment
What is a good XSS vector without forward slashes and spaces?
Doesn't work for me in the latest version of chrome.
awarded
comment
Cross Site Scripting without special chars
For the POC, the throw 1 works, but why is the alert there? It doesn't seem to do anything.
awarded
awarded
comment