Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Your back is white

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Bo0oM Bo0oM
April 01, 2021
Programming
0
380

Your back is white

Funny vulnerabilities especially for Fool's Day

Avatar for Bo0oM

Bo0oM

April 01, 2021
Tweet

More Decks by Bo0oM

See All by Bo0oM
Носок на сок
Avatar for Bo0oM bo0om
0
1.9k
Выйди и зайди нормально
Avatar for Bo0oM bo0om
0
98
Защита от вредоносной автоматизации сегодня
Avatar for Bo0oM bo0om
0
630
Defending against automatization using nginx
Avatar for Bo0oM bo0om
0
870
Antibot pitch deck
Avatar for Bo0oM bo0om
0
180
31337
Avatar for Bo0oM bo0om
0
220
FTP2RCE
Avatar for Bo0oM bo0om
1
7.6k
Interpret it!
Avatar for Bo0oM bo0om
0
1.2k
At Home Among Strangers
Avatar for Bo0oM bo0om
1
4k

Other Decks in Programming

See All in Programming
CS教育のDX AIによる育成の効率化
Avatar for ニフティ株式会社 niftycorp
PRO
0
140
20260228_JAWS_Beginner_Kansai
Avatar for Takuya Yonezawa takuyay0ne
5
590
米国のサイバーセキュリティタイムラインと見る Goの暗号パッケージの進化
Avatar for tom twinkle tomtwinkle
2
610
社内規程RAGの精度を73.3% → 100%に改善した話
Avatar for oharu121 oharu121
13
8.2k
Linux Kernelの1文字のミスで 権限昇格ができた話
Avatar for rona rqda
0
1.8k
What Spring Developers Should Know About Jakarta EE
Avatar for ivargrimstad ivargrimstad
0
650
AWS Infrastructure as Code の新機能 2025 総まとめ 〜SA 4人による怒涛のデモ祭り〜
Avatar for Kenji Kono konokenj
10
3.4k
へんな働き方
Avatar for Yusuke Wada yusukebe
5
2.7k
クライアントワークでSREをするということ。あるいは事業会社におけるSREと同じこと・違うこと
Avatar for nnaka2992 nnaka2992
1
350
「接続」—パフォーマンスチューニングの最後の一手 〜点と点を結ぶ、その一瞬のために〜
Avatar for 武田 憲太郎 kentaroutakeda
3
990
Claude Code Skill入門
Avatar for maya mayahoney
0
400
GoのDB アクセスにおける 「型安全」と「柔軟性」の両立 - Bob という選択肢
Avatar for tak tak848
0
230

Featured

See All Featured
<Decoding/> the Language of Devs - We Love SEO 2024
Avatar for Nikki Halliwell nikkihalliwell
1
160
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
Avatar for Joe Casabona jcasabona
34
2.7k
Taking LLMs out of the black box: A practical guide to human-in-the-loop distillation
Avatar for Ines Montani inesmontani
PRO
3
2.1k
svc-hook: hooking system calls on ARM64 by binary rewriting
Avatar for Akira Moroo retrage
2
180
JavaScript: Past, Present, and Future - NDC Porto 2020
Avatar for David Neal reverentgeek
52
5.9k
Rebuilding a faster, lazier Slack
Avatar for samanthasiow samanthasiow
85
9.4k
Bootstrapping a Software Product
Avatar for Garrett Dimon garrettdimon
PRO
307
120k
Navigating Weather and Climate Data
Avatar for Ryan Abernathey rabernat
0
140
Design in an AI World
Avatar for tapps tapps
0
170
Navigating the moral maze — ethical principles for Al-driven product design
Avatar for Skipper Chong Warson skipperchong
2
290
Intergalactic Javascript Robots from Outer Space
Avatar for Vicent Martí tanoku
273
27k
Designing for Timeless Needs
Avatar for Cassini Nazir cassininazir
0
170

Transcript

  1. 1 APRIL ANTON LOPANITSYN YOUR BACK IS WHITE

  2. VAR X;

  3. None
  4. None
  5. None

  6. PSYCH0TR1A

  7. None

  8. CRLF

  9. KAIMI

  10. KAIMI

  11. BLACKFAN

  12. BLACKFAN

  13. D0ZNPP

  14. MEMCACHED

  15. KAIMI

  16. None
  17. None
  18. None

  19. ALXREM

  20. ANDREWAEVA

  21. None

  22. CAMERA

  23. None
  24. None

  25. WAF

  26. None

  27. SESSID=3368006E705067F174810D133BCCC611; //NOBODY SESSID=; // ADMIN

  28. VITMALKIN

  29. GET, POST, OPTIONS, PUT, PATCH

  30. IVAN_IGC & CO

  31. GET /API/V1/DESTROY_CURRENT_USER EMPTY_JACK

  32. None

  33. ‘ OR 1=1 --

  34. RM -RF /*

  35. None