Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Your back is white

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Bo0oM Bo0oM
April 01, 2021
Programming
400
0

Your back is white

Funny vulnerabilities especially for Fool's Day

Avatar for Bo0oM

Bo0oM

April 01, 2021

More Decks by Bo0oM

See All by Bo0oM
Носок на сок
Avatar for Bo0oM bo0om
0
1.9k
Выйди и зайди нормально
Avatar for Bo0oM bo0om
0
110
Защита от вредоносной автоматизации сегодня
Avatar for Bo0oM bo0om
0
660
Defending against automatization using nginx
Avatar for Bo0oM bo0om
0
900
Antibot pitch deck
Avatar for Bo0oM bo0om
0
190
31337
Avatar for Bo0oM bo0om
0
240
FTP2RCE
Avatar for Bo0oM bo0om
1
7.7k
Interpret it!
Avatar for Bo0oM bo0om
0
1.2k
At Home Among Strangers
Avatar for Bo0oM bo0om
1
4k

Other Decks in Programming

See All in Programming
脅威をエンジニアリングの糧にして――現場編 / Turning Threats into Engineering Fuel — Field Edition
Avatar for nrs nrslib
0
270
AIで効率化できた業務・日常
Avatar for Ochtum ochtum
0
130
メソッドのジェネリクスでGoの夢は広がるか？ / Kyoto.go #65
Avatar for utagawa kiki utgwkk
3
720
Snowflake Summitでの新機能 CoCo / CoWork / snowflake-summit-2026-overall-what-new-coco
Avatar for Tatsuhiro tatsuhiro
1
110
TAKTでAI駆動開発の品質を設計する
Avatar for かとじゅん j5ik2o
6
1.2k
技術記事、AIに書かせるか、自分で書くか？ 〜それでも私が自分の手で書く理由〜 / #QiitaConference
Avatar for Junichi Ito jnchito
2
1.4k
Oxlintのカスタムルールの現況
Avatar for syumai syumai
6
1.1k
肥大化するレガシーコードに立ち向かうためのインターフェース分離と依存の逆転 / JJUG CCC 2026 Spring
Avatar for hirokuni-maeta hirokunimaeta
0
540
Signal Forms: Beyond the Basics @ngBaguette 2026 in Paris
Avatar for Manfred Steyer manfredsteyer
PRO
0
240
依存関係から依存物へ―Dependencyという言葉の歴史をひも解く
Avatar for j_lee_inst j_lee
0
110
IBM Bobを活用したレガシーアプリの最新化
Avatar for Akira Onishi (IBM) oniak3ibm
PRO
1
190
[2026年度第1回ORセミナー] 計画最適化ベンチャーと競技プログラミング人材
Avatar for terry-u16 terryu16
0
260

Featured

See All Featured
Build The Right Thing And Hit Your Dates
Avatar for Maggie C. maggiecrowley
39
3.2k
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
Avatar for Aki / @LoveIdahoBurger aki_iinuma
128
56k
How To Stay Up To Date on Web Technology
Avatar for Chris Coyier chriscoyier
790
250k
[RailsConf 2023] Rails as a piece of cake
Avatar for Vladimir Dementyev palkan
59
6.7k
Practical Tips for Bootstrapping Information Extraction Pipelines
Avatar for Matthew Honnibal honnibal
25
2k
Visualization
Avatar for Eitan Lees eitanlees
152
17k
Building Flexible Design Systems
Avatar for Yesenia Perez-Cruz yeseniaperezcruz
330
40k
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
32
3.4k
Digital Projects Gone Horribly Wrong (And the UX Pros Who Still Save the Day) - Dean Schuster
Avatar for UX Y'all uxyall
1
1.7k
GraphQLの誤解/rethinking-graphql
Avatar for sonatard sonatard
75
12k
Game over? The fight for quality and originality in the time of robots
Avatar for Wayne Barker wayneb77
1
200
A better future with KSS
Avatar for Kyle Neath kneath
240
18k

Transcript

  1. 1 APRIL ANTON LOPANITSYN YOUR BACK IS WHITE

  2. VAR X;

  3. None
  4. None
  5. None

  6. PSYCH0TR1A

  7. None

  8. CRLF

  9. KAIMI

  10. KAIMI

  11. BLACKFAN

  12. BLACKFAN

  13. D0ZNPP

  14. MEMCACHED

  15. KAIMI

  16. None
  17. None
  18. None

  19. ALXREM

  20. ANDREWAEVA

  21. None

  22. CAMERA

  23. None
  24. None

  25. WAF

  26. None

  27. SESSID=3368006E705067F174810D133BCCC611; //NOBODY SESSID=; // ADMIN

  28. VITMALKIN

  29. GET, POST, OPTIONS, PUT, PATCH

  30. IVAN_IGC & CO

  31. GET /API/V1/DESTROY_CURRENT_USER EMPTY_JACK

  32. None

  33. ‘ OR 1=1 --

  34. RM -RF /*

  35. None