Resources
People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!
After taking apart the Amazon Android mobile application he found a URL that the author had not seen before.
This URL had a parameter that was reflected directly into JavaScript. By inserting a marquee tag the text went across the screen!
There were several mechanisms that had to be bypassed. To start with, all letters were capitalized. This was bypassed by HTML encoding all the characters then URL encoding this.
Overall, this article has several cool tricks for bypassing restrictions (octal character encoding or jscrewit).