Schlagwort: sokai @bm.sok.ai

Veröffentlicht am
von
Gmail popularized plus addressing which is a simple rule that ignores everything after a plus sign in the local part of an email address.

For example, messages sent to john+shopping@doe.com land into john@doe.com.

This behavior is built into Migadu and no additional configuration is required for it. In addition, we will auto-create a folder with the label given after the plus sign (e.g. shopping) and sort the respective message there.

For an alternative to plus addressing, take a look at subdomain addressing.
— Permalink

Veröffentlicht am
von
Soccer starts with a website that is managed over Tiny File Manager. On finding the default credentials, I’ll use that to upload a webshell and get a shell on the box. With this foothold, I’ll identify a second virtual host with a new site. That site uses websockets to do a validation task. I’ll exploit an SQL injection over the websocket to leak a password and get a shell over SSH. The user is able to run dstat as root using doas, which I’ll exploit by crafting a malicious plugin.
— Permalink