fuck off

When you bypass server side sanitization while trying to bypass client side

I've deployed an instance of OWASP Juice Shop on Heroku, if anyone wants to practice and/or learn pen testing or just web based vulnerabilities in general it's an amazing application to learn from and practice on.

Your progress is dependant on the cookie, so it won't affect one another.

owaspshop.herokuapp.com

It's free, so if you want to deploy your own instance you can.

[UPDATE] on my newly joined internship

Considering how corporate the organisation is, I'm surprised how chill everyone is. My team consists of mostly millennials, which is great!
Everyone is super helpful, I honestly thought it'd be shitty experience joining in and it'd all be so formal but none!
First few days I got no work, so I went and asked my mentor and he just laughed and said go home, watch Netflix, which I definitely didn't expected cause corporates

I got web testing work twice (sad I didn't get more, but in time it will increase), got some research work currently which is cool too.

Honestly, I wasn't excited to join as I didn't know what kinda work would I even get(it was pretty vague) but I'm glad I got this.
I'll continue to update here, and sorry I couldn't update any sooner

Cheers my dudes

Hey guys, I start a long internship in an hour now and I'm scared shitless
Wish me luck

The owner is Jewish and they know exactly what they were doing
Welcome to Pisscorp

Defense in depth

So while we all ranting about Mozilla fucking up, has anyone ever used a pi-hole?
If anyone who doesn't know what a pi-hole is, it's basically a blackhole for ads which works across all your devices in the network

"your flesh is mine"
"your blood is mine"
"Yield"

Get zucced

It should be fucking illegal to get such ads on a fitness app c'mon, my fat ass tryna lose some weight here

Stay hydrated folks

You might have seen servers running XP, but have you ever seen a car running CE?

Anyone who's interested in cyber security, go follow Binni Shah (@binitamshah) on Twitter. The amount of tutorials and guides she retweets is crazy and very informative.
Also if you're not on Twitter you're missing out on a lot of content to learn from ✌️

I have a question regarding file redirects 2>&1 and 1>&2. I know that file descriptor 1 is std o/p and 2 is std error and that we're redirecting one file descriptor to another.

But why do we do it? What are their use cases? Wouldn't the file to which redirection is setup get too clunky?
Analysis of the file would also become a bit difficult. And wouldn't having errors stored in a separate file make it easier to interpret and fix them?

Idk who demonized vim but I finally took efforts to learn it and damn it is fucking great and easy

A random thought.
In a game what if we put these messages instead?
If a person wins, "We have a winner!"
Else, "We have a weiner!"

Hate it when microsoft forces you to use windows to work with some software. Well guess fucking what?

Hey guys, I just joined a firm as an intern!
I'm right now there, I'll rant about it at night! :)

Should we have a discord for chatting purposes or is there one already?

Eh...so should I report this or what...?

https://devrant.com/rants/1036033/...

This one wins

Twitter: Julia Evans @b0rk

If there's anything I've learned till now then that's: You should know how to Google the *RIGHT* thing

Things I haven't learned: How to Google the *RIGHT* thing

[UPDATE]
As some 6 of you might know from my previous post I was gonna start with my OSCP course. Well, I didn't.

I thought maybe I needed some more practice before I do, and I joined this wonderful platform called HackTheBox (hackthebox.eu)

It's a really amazing place to test a lot of your skills in pentesting. You practice on various machines, each having it's own challenge different from another, it really helps in thinking differently and learning while you move forward.

I'd really like to recommend it to anyone who is interested in it! :)

Where are my fabulous LGBT+ devs at?

Got a fan! Thanks

Hey guys, I'll be starting my oscp/pwk course soon, any suggestions as to what should I study beforehand or types of attacks I should practice?
Thanks

When you release an update and don't wanna deal with fixing bugs any time soon

So I just had this amazing thought

What is an operating system?

Any system that is in a working condition is an operating system

I'm so done with this. Fuck you and your motherfucking updates!

Back on Mint :)