4

The two vertical bars hints towards 3 separate parts of the cookie. It seems that the first part is a base64 encoded json object. For the first part of the cookie no. 1 that would be: eyJ0YWxrX3N0YXRlIjowfQ\075\075 which decoded is: {"talk_state":0} nb: each "\075" is the unicode value for ascii character "K". Post login, the first part becomes: {"...


3

radare2 -c='H' <binary> can run radare2 with web interface. I guess you are using apt-get package manager for installing radare2, r2 deb package has a bit problem (Web interface files aren't available in deb version), It's better to install the latest version of radare2 from git.


3

My college has its erp platform in a flash interface, accesible only via Internet Explorer. Thing is, accessing the erp from amything other internet explorer results in the browser download a flash file "campus-lynx.swf". This means the platform is locked to windows only. You are obviously wrong. Application work in firefox without any problems. ...


3

Intercept the traffic between the browser / plugins and the server. I would start with Wireshark. The traffic between the client and the server will be some form of network requests which you can write code to generate / consume.


3

If what you see rendered on the page is sufficient, then just save the complete page via your browser and modify what you want changed. If you want to be more granular about seeing what the page is pulling in, press F12 in your browser to bring up the developer tools. The "Sources" tab will show you files that are being loaded and from where. This can help ...


3

youtube-dl is a nice program to download media content from a lot of websites, including twitter (and despites program name). It is open source, studying it can help understand how to retrieve the correct URLs and various other stuff (media quality, etc…)


3

You were looking at the wrong piece of code. Twitter features lightly obfuscated javscript. Bring it to order and you'll receive something like this: { "duration": 55322, "scribe_widget_origin": true, "heartbeatEnabled": false, "video_url": "https:\/\/video.twimg.com\/ext_tw_video\/823648834102272000\/pu\/pl\/BZiFV49f1BCX2JkK.m3u8", "disable_embed": "0", "...


2

The answer is embarrassingly simple. Simply remove the /web part of the URL so you end up with something like this: http://music.163.com/api/search/get/ and you're good to go.


2

It appears to me that the payload contains no instructions but just addresses of the existing ROP gadgets in the DLLs specific to the system being exploited. Try looking up the addresses in the webserver process' memory and disassemble them. Alternatively, attach a debugger and put breakpoints on some of the possibly invoked functions to see how they're ...


1

Network sniffing tools such as Wireshark are your best bet. That will let you see all the traffic going across a network interface. You can use Statistics > Conversations to help narrow in on the specific network traffic you are interested in. If you post a PCAP, we can help.


1

Unfortunately, knowledge of JS probably isn't going to help. The HTML passes along the uploaded file to the cgi-bin/maintenance.cgi file which is a compiled ARM BE8 binary that's a bit more work to analyze than just looking at some javascript. After a very brief look, there is an RSA public/private key pair embedded in the binary that might be useful for ...


1

Sounds like it could be data coming from the server via an AJAX call, where they perhaps have a service that fetches a message (at random?) from within an array of messages like that. If it is, then assuming you're in Chrome: Click the Network tab. Click the XHR button. If you do not see it, then you'll need to click the Filter icon first. Make sure the ...


1

Yes you can. Original post is here. Explication : In your link : https://twitter.com/i/videos/823649890379120640?embed_source=facebook You can see a JSON with some informations. "statusTimestamp":{"local":"21:53 - 23 janv. 2017"} "user":{"screen_name":"VinePhilly" ...} "tweet_id":"823649890379120640" So you can access to the profile of the owner with ...


1

Googling brought me this: http://www.tutorialspoint.com/ruby-on-rails/rails-directory-structure.htm demo/ ..../app ......../controller ......../helpers ......../models ......../views ............../layouts ..../components ..../config ..../db ..../doc ..../lib ..../log ..../public ..../script ..../test ..../tmp ..../vendor README Rakefile


1

If you want to get the whole listing of updates, first you should write an xpath to get the uids of each download button, you should get a bunch of uids like xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx After that, POST to https://www.catalog.update.microsoft.com/DownloadDialog.aspx with [{"size":0,"languages":"","uidInfo":"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx","...


1

You may be able to reverse engineer the Javascript, CSS, and HTML, but not PHP or ASP. Using PHP as an example, if you have a command echo "foo";, the echo code gets executed on the server itself, and you see only the "foo" in the HTML you get. If you want to get PHP, you should test the functionality of the webpage, and hand-code the PHP accordingly. You ...


1

You can get pretty close, but if the site uses PHP, ASP.NET, or some other form of server-side html rendering, you'll never be able to completely reproduce a copy of it. This is because that server-side rendering code is just that, only on the server, and it is never sent down to the browser. But if you want to ignore all that, you can certainly assume the ...


Only top voted, non community-wiki answers of a minimum length are eligible