« first day (3690 days earlier)      last day (46 days later) » 

10:40 AM
@MechMK1 That sounds like a fun approach :)
 
@ConorMancone I'm AaaS - Asshole-as-a-Service :D
 
:)
So... I have a tricky one and need someone with more penetration testing experience
I'm mucking with a PHP site
I have a vulnerable file upload that allows me to save any file anywhere on the system
I also have an RCE already, so I can confirm that the file upload works as expected - I'm dumping a PHP file into the web root
But there are two issues: one, the file I create will automatically get deleted after a few seconds
Two, I can't actually execute the file even when I know it is there
So to be clear, I'm doing this:
 
10:56 AM
How about overwriting an existing file?
 
I'm trying to not actually break anything, but they have a lot of dead code laying around, so that's not a bad idea
 
I should offer BDSM themed reports, where people can pick humiliation, degradation, etc... when writing

"You didn't place in a HSTS header? Of course you didn't, because you never follow best practices! That's why your wife is cheating on you, because you can't do anything right!"
 
@ConorMancone Should I ask if you have a PTA? :D
 
:) I do - it's an internal website. No fun bug bounties for me!
I don't actually have full control over the filename though. I can put it anywhere in the file tree, and it keeps my extension, but changes the actual filename (in a predictable way though).
As a result I can't over write files that already exist
The whole, "Automatically delete file after a couple seconds" is new to me though
Although even when I try to execute the file while it exists it seems not to work
 
11:16 AM
That is really weird. Perhaps you can run a script that continuously tries to execute the file how it's going to be named
 
 
1 hour later…
12:30 PM
@ConorMancone What do you get, a 404 Not Found or something else?
 
1:06 PM
So it looks like the disappearing files are simply because there are multiple servers in a load balancer via round robin. However, it seems like there is some weird caching going on that is also causing trouble
@nobody yes, 404
BTW, since this topic came up yesterday:
Is it just me or do adult websites tend to have terrible security?
 
@ConorMancone SO the files aren't actually being deleted?
 
1:29 PM
@nobody I haven't had a chance to confirm yet, but it seems like they are not after all - it's just hard to "find" them again because the next requests may not go to the server where the file was uploaded. I want to try just uploading the same file to the same place repeatedly and see if I can get the file on all the servers. I haven't figured out how many there are though. For a few, no problem. For 100...
 
1:41 PM
@ConorMancone I guess so
 
2:18 PM
0
Q: How to describe insurance

user37920My question is why at the end of full realization of what is insurance, we can't describe insurance in words and the knowledge about insurance is inner? And what is such a big subject insurance? For one, is it at the end of an era and at the beginning of a new era? And realization is in the conte...

The fuck...
 
2:29 PM
My first thought that it was just a trolling nonsense post, but on further inspection that user has accounts on many SE sites, and some of which have a little bit of rep. Maybe they mistook security for personal finance (where they also have an account)?
OTOH, they're suspended on Personal Finance
 
 
4 hours later…
6:28 PM
help me build a bank...
https://security.stackexchange.com/questions/243707/securing-session-storage-and-whether-appropriate-for-open-banking
close as too broad? migrate to serverfault? ask slashdot?
 

« first day (3690 days earlier)      last day (46 days later) »