
icesfont
@icesfont2
Followers
105
Following
0
Media
0
Statuses
8
For #AlpacaHack disconnection-revenge, it was possible to create a new document based on /cookie using history.replaceState/pushState and a javascript string URI navigation as per
2
5
31
For the #AlpacaHack cowsay challenge, \xff made the border `--` instead of `-. ` (until the length of the msg) which is treated as a postdecrement by perl, so u could get valid syntax with ?message[]=-f&message[]=x&message[]=1;system("cat /flag*");$x%23%FF :).
0
0
1