Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2016/06/04 11:5 p.m.25 views

Gratipay: upgrade Aspen on inside.gratipay.com to pick up CR injection fix

1 Using IE11, open DevTools and start network capture 2 visit the following URL: http://inside.gratipay.com/assets/%0dSet-Cookie:%20qwe=qwe%0dq 3 find a 'qwe' cookie set in the response There is a 0x0d character injected, which can be used as a header delimiter in IE. To see this behaviour using...

7AI score
SaveExploits0
Rows per page
Query Builder