Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Odd XSS on Amazon- 67

Jonathon BoumanPosted 6 Years Ago
  • After taking apart the Amazon Android mobile application he found a URL that the author had not seen before.
  • This URL had a parameter that was reflected directly into JavaScript. By inserting a marquee tag the text went across the screen!
  • There were several mechanisms that had to be bypassed. To start with, all letters were capitalized. This was bypassed by HTML encoding all the characters then URL encoding this.
  • Overall, this article has several cool tricks for bypassing restrictions (octal character encoding or jscrewit).