Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Your back is white

Bo0oM
April 01, 2021
Programming
0
320

Your back is white

Funny vulnerabilities especially for Fool's Day

Bo0oM

April 01, 2021
Tweet

More Decks by Bo0oM

See All by Bo0oM
Защита от вредоносной автоматизации сегодня
bo0om
0
530
Defending against automatization using nginx
bo0om
0
790
Antibot pitch deck
bo0om
0
120
31337
bo0om
0
140
FTP2RCE
bo0om
1
7.3k
Interpret it!
bo0om
0
1.1k
At Home Among Strangers
bo0om
1
3.8k
2000day in Safari
bo0om
2
2.2k
Partyhack 3.0 - Telegram bugbounty writeup
bo0om
0
4k

Other Decks in Programming

See All in Programming
技術好きなエンジニアが "リーダーへの進化" によって得たものと失ったもの
pospome
5
1.3k
RCPと宣言型ポリシーについてのお話し
kokitamura
2
130
エンジニアに許された特別な時間の終わり
watany
89
80k
複数ドメインに散らばってしまった画像…！ 運用中のPHPアプリに後からCDNを導入する…！
suguruooki
0
370
ニックトレイン登壇資料
ryotakurokawa
0
120
Denoでフロントエンド開発 2025年春版 / Frontend Development with Deno (Spring 2025)
petamoriken
1
1.2k
Windows版PHPのビルド手順とPHP 8.4における変更点
matsuo_atsushi
0
350
Effective Signals in Angular 19+ Rules and Helpers
manfredsteyer
PRO
0
170
Compose Navigation実装の見通しを良くする
hiroaki404
0
130
Return of the Full-Stack Developer
simas
PRO
1
300
The Evolution of Enterprise Java with Jakarta EE 11 and Beyond
ivargrimstad
0
340
‘무차별 LGTM~👍’만 외치던 우리가 ‘고봉밥 코드 리뷰’를?
hannah0731
0
490

Featured

See All Featured
Designing for Performance
lara
605
69k
GraphQLの誤解/rethinking-graphql
sonatard
69
10k
Distributed Sagas: A Protocol for Coordinating Microservices
caitiem20
331
21k
How STYLIGHT went responsive
nonsquared
99
5.4k
Optimizing for Happiness
mojombo
377
70k
Scaling GitHub
holman
459
140k
Unsuck your backbone
ammeep
669
57k
KATA
mclloyd
29
14k
Optimising Largest Contentful Paint
csswizardry
34
3.1k
Automating Front-end Workflow
addyosmani
1369
200k
Large-scale JavaScript Application Architecture
addyosmani
511
110k
A designer walks into a library…
pauljervisheath
205
24k

Transcript

  1. 1 APRIL ANTON LOPANITSYN YOUR BACK IS WHITE

  2. VAR X;

  3. None
  4. None
  5. None

  6. PSYCH0TR1A

  7. None

  8. CRLF

  9. KAIMI

  10. KAIMI

  11. BLACKFAN

  12. BLACKFAN

  13. D0ZNPP

  14. MEMCACHED

  15. KAIMI

  16. None
  17. None
  18. None

  19. ALXREM

  20. ANDREWAEVA

  21. None

  22. CAMERA

  23. None
  24. None

  25. WAF

  26. None

  27. SESSID=3368006E705067F174810D133BCCC611; //NOBODY SESSID=; // ADMIN

  28. VITMALKIN

  29. GET, POST, OPTIONS, PUT, PATCH

  30. IVAN_IGC & CO

  31. GET /API/V1/DESTROY_CURRENT_USER EMPTY_JACK

  32. None

  33. ‘ OR 1=1 --

  34. RM -RF /*

  35. None