| <html lang="en"> | |
| <head> | |
| <script> | |
| function str2hex(str) | |
| { | |
| var out_str = " "; | |
| for(var i = 0; i < str.length; i++) | |
| { |
| <html> | |
| <head></head> | |
| <body onload="go()"> | |
| <div id="log_div"></div> | |
| <script> | |
| function my_log(message) { document.getElementById('log_div').innerHTML += (message.toString() + "<br />"); } | |
| // wiretap | |
| (window.addEventListener || window.attachEvent)('message', function(e) { console.log('wiretap: ' + e.data); my_log("wiretap: " + e.data); }, false); | |
In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:
http://techcrunch.com/2007/08/11/facebook-source-code-leaked/
It became a big deal:
http://www.techmeme.com/070812/p1#a070812p1
The two files are index.php (the homepage) and search.php (the search page)
| viewer() { | |
| messenger_contacts { | |
| deltas.after(Nzg1NDY3Nzk1OjEzODc5Njc0NTE=).contact_profile_type(user) { | |
| page_info { | |
| end_cursor | |
| }, nodes { | |
| added_edge { | |
| time, node { | |
| id, graph_api_write_id, phone_entries { | |
| is_verified, primary_field { |
Welcome, recruit! Cross-site scripting (XSS) bugs are one of the most common and dangerous types of vulnerabilities in Web applications. These nasty buggers can allow your enemies to steal or modify user data in your apps and you must learn to dispatch them, pronto!
At Google, we know very well how important these bugs are. In fact, Google is so serious about finding and fixing XSS issues that we are paying mercenaries up to $7,500 for dangerous XSS bugs discovered in our most sensitive products.
In this training program, you will learn to find and exploit XSS bugs. You'll use this knowledge to confuse and infuriate your adversaries by preventing such bugs from happening in your applications.
There will be cake at the end of the test.
2015-01-29 Unofficial Relay FAQ
Compilation of questions and answers about Relay from React.js Conf.
Disclaimer: I work on Relay at Facebook. Relay is a complex system on which we're iterating aggressively. I'll do my best here to provide accurate, useful answers, but the details are subject to change. I may also be wrong. Feedback and additional questions are welcome.
Relay is a new framework from Facebook that provides data-fetching functionality for React applications. It was announced at React.js Conf (January 2015).
| require 'openssl' | |
| require 'base64' | |
| require 'json' | |
| require 'httpclient' | |
| http = HTTPClient.new(:agent_name => useragent) | |
| key = "" #The Private key | |
| login_info = {:guid => "00000000-0000-0000-0000-000000000000", | |
| :password => "PASSWORD", | |
| :username => "USERNAME", |
| { | |
| "700554543387711": { | |
| "id": "700554543387711", | |
| "latest_version": { | |
| "id": "455210147987840", | |
| "article_canonical_url": "http:\/\/www.buzzfeed.com\/expresident\/steps-to-instantly-improve-your-day", | |
| "article_version_number": 2, | |
| "cover_media": { | |
| "__type__": { | |
| "name": "DocumentVideoElement" |
| 9 dir 117150 svn+ssh://tubbs/svnroot/tfb/releases/thefacebook-r116496-fb95/www/lib/display/privacy svn+ssh://tubbs/svnroot 2008-08-05T21:47:04.536211Z 114218 chad svn:special svn:externals svn:needs-lock 2c7ba8d8-a2f7-0310-a573-de162e16dcc7 pages.php file 2008-08-18T18:50:32.000000Z e69ad78841111ae71df858b23a4d356c 2008-08-05T21:47:04.536211Z 114218 chad 8328 ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� |
