Hidden ASCII (Art)
What have been seen, cannot be unseen.

" >
What have been seen, cannot be unseen.

After my release about the Tiny PHP Shell, Mr. Gareth Hayes @ The Spanner made a non-alphanumeric variant. I got inspired by his nifty script and started researching further. My main plan was to create an array of data with different values in order to have something to work with. So my first shot was this: @$_[]=@!+_; PHP will try to parse the green underscore as a constant, when the interpreter…
More+Dear Rikspolisstyrelsen,
While examining our server logs we noticed that you are accessing our webpage.
It’s nice to see that you are interrested in IT security.
However, we also noted that you are running an old web browser version that has several published exploits against it.
This is how you feel when you discover obvious vulnerabilities.
‘Nuff said.
Cya soon.
Well well, another post about safari! The problem I will take up today is the how Safari handles protocol handlers. In all other major browsers, even Internet Explorer, you have to agree to visit a link with a custom protocol. But not in safari. Oh no.
More+