Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Your back is white

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Bo0oM Bo0oM
April 01, 2021
Programming
410
0

Your back is white

Funny vulnerabilities especially for Fool's Day

Avatar for Bo0oM

Bo0oM

April 01, 2021

More Decks by Bo0oM

See All by Bo0oM
Носок на сок
Avatar for Bo0oM bo0om
0
1.9k
Выйди и зайди нормально
Avatar for Bo0oM bo0om
0
120
Защита от вредоносной автоматизации сегодня
Avatar for Bo0oM bo0om
0
670
Defending against automatization using nginx
Avatar for Bo0oM bo0om
0
910
Antibot pitch deck
Avatar for Bo0oM bo0om
0
200
31337
Avatar for Bo0oM bo0om
0
250
FTP2RCE
Avatar for Bo0oM bo0om
1
7.7k
Interpret it!
Avatar for Bo0oM bo0om
0
1.2k
At Home Among Strangers
Avatar for Bo0oM bo0om
1
4k

Other Decks in Programming

See All in Programming
Google Apps Script で Ruby を動かす
Avatar for Shogo Kawahara kawahara
0
240
関東Kaggler会_NVIDIA_Nemotron_コンペ_振り返り
Avatar for rick rick_ds
0
590
仕様書を書く前にハーネスを作る - Agent Native開発は「探索を速く、判定を固く」
Avatar for Gota gotalab555
4
1.7k
PHP初心者セッション2026　〜生成AIでは見えない裏側を知る：今だからLAMPを通して仕組みを学ぶ〜
Avatar for Hideo Kashioka kashioka
0
930
AWS CDK を「作」ってみた 〜フルスクラッチで見えた CDK の裏側〜 / aws-cdk-from-scratch
Avatar for k.goto gotok365
3
2.8k
全PRの83%がAIレビューだけでマージできるようになった開発組織はその後どうなったか
Avatar for a-thug athug
1
1.7k
AIを紡ぐPMのお話
Avatar for swdtkuy swdtkuy
0
110
Japan Community Day at Kubecon + CloudNativeCon Japan 2026: Learning Container Privilege Control by Building My Own Low-Level Container Runtime
Avatar for ternbusty ternbusty
1
160
生成AI導入の「期待外れ」を乗り越える ー 開発フロー改革が目指す、真の組織変革
Avatar for starfish719 starfish719
0
4.5k
Claude CodeとAgentCore Gatewayを繋ぐ際の認証認可 / Authentication and authorization when connecting Claude Code with AgentCore Gateway
Avatar for Har1101 har1101
2
280
Foundation Models frameworkで画像分析
Avatar for リョウ ryodeveloper
1
620
Laravel Boostに学ぶ、AIにPHPを書かせる技術 〜OSSの実装から蒸留するエージェント制御の王道〜
Avatar for 武田 憲太郎 kentaroutakeda
3
700

Featured

See All Featured
Lightning talk: Run Django tests with GitHub Actions
Avatar for Sarah Abderemane sabderemane
0
230
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
Avatar for panda_program panda_program
123
22k
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
191
12k
The Organizational Zoo: Understanding Human Behavior Agility Through Metaphoric Constructive Conversations (based on the works of Arthur Shelley, Ph.D)
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
410
DevOps and Value Stream Thinking: Enabling flow, efficiency and business value
Avatar for Helen Beal helenjbeal
1
330
StorybookのUI Testing Handbookを読んだ
Avatar for Shingo Yamazaki zakiyama
31
6.9k
YesSQL, Process and Tooling at Scale
Avatar for Rocio Delgado rocio
174
15k
Jamie Indigo - Trashchat’s Guide to Black Boxes: Technical SEO Tactics for LLMs
Avatar for Tech SEO Connect techseoconnect
PRO
0
620
The AI Search Optimization Roadmap by Aleyda Solis
Avatar for Aleyda Solis aleyda
1
6.1k
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
50
15k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
Avatar for soudai sone soudai
PRO
201
75k
Put a Button on it: Removing Barriers to Going Fast.
Avatar for kastner kastner
60
4.5k

Transcript

  1. 1 APRIL ANTON LOPANITSYN YOUR BACK IS WHITE

  2. VAR X;

  3. None
  4. None
  5. None

  6. PSYCH0TR1A

  7. None

  8. CRLF

  9. KAIMI

  10. KAIMI

  11. BLACKFAN

  12. BLACKFAN

  13. D0ZNPP

  14. MEMCACHED

  15. KAIMI

  16. None
  17. None
  18. None

  19. ALXREM

  20. ANDREWAEVA

  21. None

  22. CAMERA

  23. None
  24. None

  25. WAF

  26. None

  27. SESSID=3368006E705067F174810D133BCCC611; //NOBODY SESSID=; // ADMIN

  28. VITMALKIN

  29. GET, POST, OPTIONS, PUT, PATCH

  30. IVAN_IGC & CO

  31. GET /API/V1/DESTROY_CURRENT_USER EMPTY_JACK

  32. None

  33. ‘ OR 1=1 --

  34. RM -RF /*

  35. None