UNDERCODE COMMUNITY
2.69K subscribers
1.23K photos
31 videos
2.65K files
80.5K links
๐Ÿฆ‘ Undercode Cyber World!
@UndercodeCommunity


1๏ธโƒฃ World first platform which Collect & Analyzes every New hacking method.
+ AI Pratice
@Undercode_Testing

2๏ธโƒฃ Cyber & Tech NEWS:
@Undercode_News

3๏ธโƒฃ CVE @Daily_CVE

โœจ Web & Services:
โ†’ Undercode.help
Download Telegram
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
Forwarded from Exploiting Crew (Pr1vAt3)
Forwarded from Exploiting Crew (Pr1vAt3)
๐Ÿฆ‘๐—๐’๐’ ๐“๐ก๐ซ๐จ๐ฎ๐ ๐ก ๐‡๐‘๐„๐… ๐”๐‘๐‹๐ฌ ๐Ÿ‘‡

I often see applications that let their users control URLs which are reflected back in the DOM as part of the HREF tag

Most of the time these features let you:

โ€ข set the integration URL with a 3rd party service
โ€ข customize your profile page with a link to your own blog/website
โ€ข link your account to you social media profile

While sometimes developers use HTML encoding on quotes to block attackers from escaping the tag, there are several ways to trigger XSS inside href tags <without> escaping them.

One of them is to provide a valid URL format (to bypass server-side validation) but use the javascript protocol (instead of http which is what most developers would expect)

Note however that this won't work if the target="_blank" is specified

Ref: Andrei Agape
@UndercodeCommunity
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซฤ†๐”ฌ๐““โ“” โ–„ โ–‚ โ–
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
Forwarded from UNDERCODE NEWS (Copyright & Fact Checker)
๐Ÿšจ Unmasking Threats Before They Strike: 5 Powerful Techniques for Better Security

https://undercodenews.com/unmasking-threats-before-they-strike-5-powerful-techniques-for-better-security/

@Undercode_News
Forwarded from Exploiting Crew (Pr1vAt3)
๐Ÿฆ‘
DSA is so easy when you follow these 6 steps:


๐Ÿญ. ๐—™๐—ผ๐—ฐ๐˜‚๐˜€ ๐—ผ๐—ป ๐——๐—ฒ๐—ฝ๐˜๐—ต ๐—ผ๐˜ƒ๐—ฒ๐—ฟ ๐—•๐—ฟ๐—ฒ๐—ฎ๐—ฑ๐˜๐—ต:
- Don't solve 500 coding problems aimlessly. Master around 100 core problems deeply instead.
- 40 Problems on Array, Strings, LinkedList, Stack & Queue, Binary search, Trees, Graph, Sorting and Searching: https://lnkd.in/djnaPkeD
- 40 Problems on Dynamic Programming (DP), Backtracking, Hashing, Heap, Tries, and Greedy Algorithms: https://lnkd.in/dF3h-Khk

๐Ÿฎ. ๐—–๐—ฟ๐—ฒ๐—ฎ๐˜๐—ฒ ๐—ฎ ๐—น๐—ถ๐˜€๐˜ ๐—ผ๐—ณ ๐—ธ๐—ฒ๐˜† ๐—พ๐˜‚๐—ฒ๐˜€๐˜๐—ถ๐—ผ๐—ป๐˜€:
- Use resources like "Strivers A2Z DSA Sheet" by Raj Vikramaditya to curate around 100 core problems.
- https://lnkd.in/dQMGy9zF (Strivers)

๐Ÿฏ. ๐— ๐—ฎ๐˜€๐˜๐—ฒ๐—ฟ ๐—ฒ๐—ฎ๐—ฐ๐—ต ๐—ฑ๐—ฎ๐˜๐—ฎ ๐˜€๐˜๐—ฟ๐˜‚๐—ฐ๐˜๐˜‚๐—ฟ๐—ฒ:
- Understand and implement them by hand. Know how they work internally to ace interview questions.
- Fundamentals, Intermediate, Advance DSA topics: https://lnkd.in/d4ws9xfr

๐Ÿฐ. ๐—ฃ๐—ฟ๐—ฎ๐—ฐ๐˜๐—ถ๐—ฐ๐—ฒ ๐˜„๐—ถ๐˜๐—ต ๐—ฆ๐—ฝ๐—ฎ๐—ฐ๐—ฒ๐—ฑ ๐—ฅ๐—ฒ๐—ฝ๐—ฒ๐˜๐—ถ๐˜๐—ถ๐—ผ๐—ป:
- Revisit problems after 3 days, a week, and 15 days. Break down solutions instead of rote memorization.
- 3:7:15 Rule for DSA: https://lnkd.in/dW6a8wcg

๐Ÿฑ. ๐—œ๐—ฑ๐—ฒ๐—ป๐˜๐—ถ๐—ณ๐˜† ๐—ฟ๐—ฒ๐˜‚๐˜€๐—ฎ๐—ฏ๐—น๐—ฒ ๐˜๐—ฒ๐—ฐ๐—ต๐—ป๐—ถ๐—พ๐˜‚๐—ฒ๐˜€ ๐—ฎ๐—ป๐—ฑ ๐—ฐ๐—ผ๐—ฑ๐—ฒ ๐—ฏ๐—น๐—ผ๐—ฐ๐—ธ๐˜€:
- Isolate common patterns like Binary Search or Depth First Search for focused practice.
- 20 DSA patterns: https://lnkd.in/d9GCezMm
- 14 problem solving patterns: https://lnkd.in/daysVFSz
- DSA questions patterns: https://lnkd.in/d3rRHTfE

๐Ÿฒ. ๐—˜๐˜…๐—ฝ๐—ฎ๐—ป๐—ฑ ๐—ถ๐—ป๐˜๐—ผ ๐—•๐—ฟ๐—ฒ๐—ฎ๐—ฑ๐˜๐—ต:
- Once you've mastered core problems and techniques, tackle a wider range of questions. Keep it realistic and relevant to interview scenarios.
- 16 Important algorithms problems: https://lnkd.in/dfjm8ked
- Tips to solve any DSA question by understanding patterns: https://lnkd.in/d9GVyfBY

Additional tips
Practice on paper: Practice whiteboard interviews to improve your planning and coding skills without relying on an IDE. Itโ€™s a practical way to get ready for real interviews.

Ref: Rajat Gajbhiye
@UndercodeCommunity
โ– โ–‚ โ–„ U๐•Ÿ๐”ปโ’บ๐ซฤ†๐”ฌ๐““โ“” โ–„ โ–‚ โ–