Login Register




⚠️ Domain Changed /🎂 Happy 14th Birthday Sinisterly!
Proxyvizr - The Proxy Marketplace (Residential / Mobile / Datacenter / ISP). 10+ Providers, Instant Auto-delivery, Pay with Crypto.
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Need help with this (XXE and\or SQLi) filter_list
Author
Message
BreShiE Offline
breshie@pm.me
Registered (Legends)
Fourteen Years of Service
Posts: 1,759
Threads: 199
Reputation: 32
Currency: 0 SP
StupidYouTubeCookieNight OwlSocialSuper EliteLegendaryOver 9000BritishStaffAward WhoreAkaneStoner
RE: Need help with this (XXE and\or SQLi) 03-03-2015, 04:22 AM #8
(03-03-2015, 03:48 AM)whatever Wrote: If it's encased in " and filtered with addslashes() you would be able to break out via %bf%22, no?

I'd assume it's not using magic_quotes_gpc because that function just breaks shit and was turned off in all PHP 3.x.x versions and is depracated as of 5.3

My response was also based on the OP where mysql_real_escape_string was never mentioned, so I didn't think about it.

EDIT: Sorry, it just hit me that not all charsets support the same shit. Derp.

Maximum over kek ^
[Image: F4Z9Dqw.png]

[+] 1 user Likes BreShiE's post
Reply





Messages In This Thread
Need help with this (XXE and\or SQLi) - by Misha- - 03-02-2015, 01:10 PM
RE: Need help with this (XXE and\or SQLi) - by BreShiE - 03-03-2015, 04:22 AM