YesWeHack Dojo #54: One Accent Past the Filter
How a byte-versus-character length check and a hand-built JSON string chain into logging in as another account, plus the failed probes that got me there.
Web Security
1 post
1 post
How a byte-versus-character length check and a hand-built JSON string chain into logging in as another account, plus the failed probes that got me there.