For XSS. Know your sinks. That is, figure out exactly what function will be executing your injected code. That s what a sink is. Get to know the function that will be executing your input. Then find vulnrabiltiies

thanks Delarouge. yeah i gotta post more. but being able to visualize the stack is important. Revamp to the site coming. Labs. And Good labs too! Nothing worse than spending your time on a ctf that doesn't teach cool concepts. My labs will be cleverly craffted and insightful. And Free.

About My Reverse Engineering Video Series

I am creating a series on binary exploitation and reverse engineering. In this series, we'll take a unique approach by slowing things down to walk through the assembly of a simple piece of C code, step by step, instruction by instruction. We'll use an innovative demo involving an Excel spreadsheet, where each cell represents a memory location, to visualize data movement in and out of CPU registers.

Oh!! So that’s actually one of my favorite bands — Radiohead’s symbol. Or you know, one of their symbols, probably their most important symbol haha they used it heavily during the ok computer, kid a and amnesiac erras and still use it. Also, not sure what the AI mode is going to be. I intended to make a switch on the posts that called a chatgpt API or something and automatically AI-edited your posts. But then I realized that everyone hates when people just edit their english with AI so why would i want to have that here. And at about the same time I noticed linkedin implemented that feature so i wouldnt be the first to implement it anyway so i was like ehhhh. So the AI mode switch will be for show for now lol.

Hey! Hiddden text in my log? that sounds cool, it is news to me, will investigate. Do you mean the echo $USER thing? no you must mean something else.

nice! I finished that python course, CS50P. i finished CS50P, CS50x, CS50AI, and am one final project away from finishing CS50Web and CS50cyber. They are the best.

I am the only one who can delete posts currently. sorry i guess i should implement that. if you need me to delete a post, personal message me and I will take care of it. All your posts are so good! haha Um like any language, you have to learn the few things that make that language unique i think. syntax, special features, i would just look up advanced javascript and get on it like all those weird things, inline functions, ternary operators ( this is just an if/else statement written with different syntax, but the syntax can be confusing get on it), event handlers, promises, javascript syntactic sugar, the different ways to declare functions, learn about the "this" keyword, closures, await, currying, dom manipulation, generators. but watch the cs50web intro to javascript or even regular cs50x has an intro to javascript. cs50web gets into SOME of those advanced things

lol i take that back about learning css. only learn css if you want to learn how to make your site look nicer. it's a web dev thing, as you probably know. just learn about what it is at least and how to recognize it when you come across it in a burp scan or something, usually we ignore the css lol that's not where the vulnerabiltiies lie usually. and learning html is quick. but def learning javascript is more important in general and def from a web application security standpoint. I apologize you may be a javascript wizz for alli know i have no idea where you are at he he forgive me.