Ironically, XXE worth more on a dumb Rails or Python app, because it probably pivots to RCE quickly.
@joernchen @tqbf My buddy @alinajaf has "Turn a broken download feature in a Rails app into RCE" as his opening exercise for Rails training.
-
-
@patio11@joernchen@tqbf Well closing, because a large proportion of attendees up and leave to check their github accounts when they get it -
@alinajaf hahaha! very good. scare them all away ;)
End of conversation
New conversation -
-
-
-
@joernchen@patio11@tqbf That's right, we break it down into four: file download, session read, session write, then RCE. - 2 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.