Antony Garand articles - 20 total
Vulnerabilities in Guilded.gg
I recently stumbled upon a Youtube video by No Text To Speech regarding Guilded issues that reminded...
Making a simple fuzzer for Tixy
You might have heard about tixy.land, the minimalist javascript playground for creative coding....
SVG Metaballs
I find metaballs fascinating: Pure shapes fusing and morphing with each other, making a weird gooey r...
Making math animations and videos with code
Cover gif by Freya Holmér I feel like animations are the most intuitive way to visualize and und...
JavaScript typed arrays: Unexpected overflow
An odd behavior from JavaScript typed arrays
Hacking Dev 2: Slipping through security
This is my second post regarding multiple XSS I found on dev.to
XSS in Ghost
Story of a reflected XSS in Ghost, the publishing platform. This post covers the technical walkthrough of the vulnerability.
Why Facebook's api starts with a for loop
The curious case of JSON hijacking
What happens when you submit an article?
Learn to navigate Dev.to's source code by understanding what happens when performing common actions!
Pwned Together: Hacking dev.to
How I found a vulnerability in the application, and how you can too!
From data leak to account takeover
How I managed to compromise accounts from an information leak on a web application.
SQL: Where spaces may not matter
Here is a vulnerable application which can be exploited thanks to a rather unknown SQL quirk.
Spot the malware
Can you find out how malware is injected in this page?
PHP: Return true to win - WriteUp (Part 2)
Returntrue.win is a website containing many challenges where you supply the input of a function which needs to return true. This posts covers the solutions to these challenges.
GoogleCTF 2018: Translate WriteUp
WriteUP for the GoogleCTF 2018 challenge Translate
PHP: Return true to win - WriteUp (Part 1)
Returntrue.win is a website containing many challenges where you supply the input of a function which needs to return true. This posts covers the solutions to these challenges.
JavaScript: Equality insanity, or where x === 1 && x === 2
JavaScript can produce interesting behavior thanks to its dynamic nature and rich features!
JavaScript: Async math is hard
Async math can cause bugs
JavaScript: Watch out for unwanted hoisting!
JavaScript hoisting is fun, but we need to be aware of its working to prevent vulnerable code.
Deploying a NestJS Application on AWS Beanstalk
Guide on how to deploy a NestJS application on AWS Beanstalk, or other production environment.