Skip to content

Instantly share code, notes, and snippets.

This is a write-up of steps that I've done with OWASP Juice Shop incrementally to solve some of the tasks.

Log in as an admin

Navigate to login form and submit Payload in both fields Payload: ' OR '1'='1' --

Finding privacy policy page

Navigate Profile => Privacy & Security => Privacy

Finding the score board

@tobystic
tobystic / FANNG Levels
Last active August 28, 2024 17:35
FANNG Levels
## FAANG Levels and equivalents
For Engineering
IC2 - 59,60
IC3 - 61,62
IC4 - 63,64
IC5 - 65,66
IC6 - 67,68
@tobystic
tobystic / list-of-curl-options.txt
Created January 15, 2021 20:47 — forked from eneko/list-of-curl-options.txt
List of `curl` options
$ curl --help
Usage: curl [options...] <url>
--abstract-unix-socket <path> Connect via abstract Unix domain socket
--alt-svc <file name> Enable alt-svc with this cache file
--anyauth Pick any authentication method
-a, --append Append to target file when uploading
--basic Use HTTP Basic Authentication
--cacert <file> CA certificate to verify peer against
--capath <dir> CA directory to verify peer against
-E, --cert <certificate[:password]> Client certificate file and password
Hope is a dangerous thing
-----------------------------
Hope is a fundamental thing
Hoping is what you do when you invest. It's a bet against misfortune
The place of hope is often understated
It's lack of it that makes a politician steal billions for his future grandkids.
It's hope that makes a poor man put in the work, to change his status.
Hope is trusting that your kid comes home alive without a Ted Bundy type story
Today I look out at the sun. And I understand that Billionaires in all their splendour cannot give us 10 mins of sunshine.
I also look at the flowers outside my window. Very colorful, yet I do not know any wealthy person able to provide their beauty
I feel like love is a weakness. You have to be vulnerable to experience it and the only index or it's measure, is
the weight of the sacrifices that is made towards it. Even God let his only begotten son go. A love without sacrifice? err
On Dec 3rd 2017, I drove off a bridge in the South side of Seattle. Like Tom Cruise in Vanilla sky, SUV was written off and I had
thought my spinal cord was broken from the sharp pain. I am still playing in a soccer league in 2020. I cannot understand this either.
I may think I do not need Him. But I would be a useless tissue paper without his anchor
@tobystic
tobystic / fetch alert rules using REST API call
Last active May 3, 2020 03:32
Analystics rule (Azure sentinel)
_fetch information using REST API call via powershell*_
--------------------------------------------------------
(Culled from Gary Busheyllc's webpage)
To use one, select it from the list. In the detail pane on the right side of the screen, click on the Create rule button to create the rule (looks like Microsoft just changed the functionality so that you can create the rule from template whether or not you have the proper data sources), then fill in the required fields (usually the defaults that get filled in from the template are good enough) and create it. Instant, or almost instant, Analytic rule
How can we get this listing of templates ourselves? We can make the REST call to get them. I will not go through all the steps needed to make the call since that was covered in Your first Azure Sentinel REST API call so I will just show you the differences from the call that was previous covered.
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Star Rating System</title>
<meta name="viewport" content="width=device-width">
<style>
.star{
color: goldenrod;
font-size: 2.0rem;