GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    ajantis (ajantis@cyberplace.social)'s status on Tuesday, 01-Apr-2025 23:30:28 JSTajantisajantis
    in reply to
    • Kevin Beaumont

    @GossiTheDog Unpopular opinion: Proof looks like web cache poisoning and not RCE. Looks like made to believe to be an actual txt file

    Notice the "?" param where is used as part of cachebuster PoC for web cache poisoning

    As if not, then all Archive entries should resolve to the same txt contents, however bunch 404 like the x.txt itself and there is "?a" which disproves the proof based from Archive timestamp

    x.txt - 404
    x.txt?mail - with email text
    x.txt?a - 404
    x.txt?x - with email text

    In conversationabout 2 months ago from cyberplace.socialpermalink
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.