Exhastive list of series I have watched

Sci Fi

1. Battlestar Galactica - the concept of cylons doing projections was awesome.
2. Stargate Atlantis - replicators are badass
3. Firefly (MW)
4. Legends of tomorrow  - love the concept of time masters and time pirates
5. The last ship (MW)
6. Expanse
7. Lost -(LIM)
8. Cosmos : A spacetime odyssey (MW)
9. Game of thrones
10. The 100

Others

1. Prison Break
2. House
3. Daredevil
4. Suits - (LIM)
5. Dexter
6. Homeland
7. House of Cards
8. 24
9. Six Feet Under
10. Arrow - (LIM)
11. Flash - (LIM)
12. Sopranos
13. Breaking Bad

Sitcoms
1. Modern Family
2. IT crowd

So basically I spend or waste a lot of time watching series, If you know some awesome sci-fi, post apocalyptic or awesome series do let me know.

MW - Must Watch
LIM - Left in middle, got bored or the series got too much emotion I couldnt handle.

OWASP TOP 10 IDOR: Bug Bounty romit.io

IDOR (Insecure Direct Object Reference)

Insecure Direct Object Reference is a common bug in web applications. It has without fail made to the OWASP - Top 10 vulnerabilites every time. The vulnerability exists when the application fails to verify if the user is properly authorized to access a certain endpoint/resource.

Romit has an open bug bounty program on hackerone.

Issue : 
Romit has Operator Wallets, only Owner has the permission to SHARE or UNSHARE the wallet with any user, but the application did not properly validates when someone tries to UNSHARE a wallet.

POC:

1. Suppose a wallet BITCOINS is created by user A and shared with user B and C.
2. Althoug only UserA should be able to delete shares. User B can send the following request and delete User C as there are no server side verifications

   POST /dashboard/account/<accountId>/sharing/delete HTTP/1.1
   Host: wallet.romit.io
   User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:37.0) Gecko/20100101 Firefox/37.0
   Accept: /
   Accept-Language: en-US,en;q=0.5
   Accept-Encoding: gzip, deflate
   Content-Type: application/x-www-form-urlencoded; charset=UTF-8
   X-Requested-With: XMLHttpRequest
   Referer: https://wallet.romit.io/dashboard
   Content-Length: 90
   Cookie:
   Connection: keep-alive
   Pragma: no-cache
   Cache-Control: no-cache

Solution:
The solution to such attacks is very simple, the application should verify that the user deleting the share is actually admin of that wallet.

Bug Bounty:
Aug 1st : Reported
Sep 1st: Acknowleged
Sep 10th: Bounty awarded 250 USD

IDORs are simple to find vulnerabilites, whenver I start testing a webapp IDOR attacks are the first ones I look out for. These simple attacks can have varied impact depending on the vulnerable endpoint.

Read about IDOR on insider.in which compromised details of every single user (including email, card number, transaction id). Yes the impact can be critical.

Here is the link to a simple IDOR on facebook, that got $12,500 bounty award as the impact of the vulnerability was high.

HTTP STS policy & using it in express

Inroduction
HSTS is a web security policy that tells the browser to access a particular website over HTTPS and can be used to prevent protocol downgrade attack & cookie hijacking. It is somewhat well supported by majority of browsers. It is communicated by the server to the client(browser) via HTTP response header field "Strict-Transport-Security" and follows the following syntax

strict-transport-security:max-age=expireTime [;includeSubdomains][;preload]

The header tells the browser to visit the site using HTTPS for the time specified in "expireTime"

The expireTime is in seconds. So max-age=15552000 tells the browser to visit a site only on HTTPS for the next six months. The other two optional parameter are

1. includeSubdomains : so if the header is set on doiloud.in , supported browsers will use HTTPS on blog.doitloud.in as well or any other subdomain for that matter.
2. preload : Since HSTS header is TOFU(trust on  first use) the very first request might have been tampered with by the attacker, so major browsers maintain a "STS preload list" that is shipped with the browser so that webiste uses HTTPS for the initial request. 

strict-transport-security header in response from the server

What if your site is loaded over HTTP? 

IF  you website is loaded over HTTP the Strict-Transport-Security header is ignored by the browser this is because an attacker might have intercepted the response and injected/removed the header. It is only when site is accessed over HTTPS with no certificate errors, the browser honors the header.


Configuring HSTS header in express 

So you can configure security headers in express using the helmet middleware which in turn is a collection of 10 small middlewares functions that can be used to setup various security headers.. This simple gist tells you how to configure helmet in express. The HSTS policy states that max-age should be defined in seconds, helmet accepts the value in milliseconds and rounds it off to the nearest second.

Limitations

1. As mentioned before this only works if your website actually has HTTPS. A user accessing your website over HTTP won't be told to switch to HTTPS, it just tells HTTPS user to stick around.

Suraj Mani- A man of music, words and dreams

In a completely different part of the world, at the dawn of the 21st Century when Mr. Dylan was receiving his first Oscar for the song,"Things have changed", a young HVAC engineer by the name of Suraj Mani accidentally got into the world of music by accident and just like Dylan, changed in the coming decade, the way us Indians listened to music. Suraj Mani, as luck would have it, joined the influential rock band, MotherJane when he had gone to a restaurant to have a cup of tea and instead ended up performing for the band first in a gig in that restaurant and then, eventually for a decade. He started a record label called Aum-i-Artists to ensure musicians get paid for their music, that led to the concept of Music Mojo and helped bands like Thaikkudam Bridge gain international attention and fame. 

Going solo, his mix of colorful, yet deep and energetic yet poignant lyrics and spoken word passages are nothing less than amazing and needs to be experienced 
to be fully understood. The wonderful Suraj Mani and the tattva trip as he calls it, are undoubtedly India's first rock poets, lending a voice.... Read the full article at DoItLoud Blog



Here is a video of Suraj Mani & The Tattva Trippers performing Live In Jaipur (2015) organized by DoItLoud

Trick an user to tweet anything you want, Twitter CSRF vulnerability

The scope of this vulnerability is quite low, as you need access to the device you know user will login later. So, twitter has decided it to be a "won't fix". Anyways it would be a fun exploit and would serve as a good example to understand CSRF attack as you can try it out.

The CSRF token issued by twitter doesn't change unless you restart your PC.

CSRF token after login

CSRF token before login

Details of the attacks scenario in a shared workstation environment

1. The attacker simply copies the authenticity token.It is a hidden field with the id "authenticity_token". This token is the only protection against the CSRF attack.
2. Forge an html document and place the copied authenticity token in the request.
   
3. Wait for the victim to login and send the link. With what you want to be tweeted in the value of the field with name status.
4. When the vicitm clicks on the link, a tweet will be posted from his account.

Arvind Kejriwal - AAP Radio Ad in reply to "BJP abusive old lady Ad"

Can not start Apache in XAMPP?

Error: Apache shutdown unexpectedly.
This may be due to a blocked port, missing dependencies, improper privileges, a crash, or a shutdown by another method. Press the Logs button to view error logs and check the Windows Event Viewer for more clues. If you need more help, copy and post this entire log window on the forums.

Solution-->

1. If you are using Skype, go to Tools -> Options -> Advanced -> connection. Disable the "Use port 80 and 443 for alternatives for incoming connections". Sign Out and Close all Skype windows. Try restart your Apache again.

2.

• open your xampp control panel then click its "config"
• choose the "Apache (httpd.conf)". Find this code below and change it into this one:

#Change this to Listen on specific IP addresses as shown below

#to prevent Apache from glomming onto all bound IP addresses.

#Listen 0.0.0.0:80

#Listen [::]:80

Listen 80

# Dynamic Shared Object (DSO) Support

• save it (ctrl + s)
• after that, go back to xampp control panel and click again its config
• choose "Apache (httpd-ssl.conf)" find this code below and change it again:

# Note: Configurations that use IPv6 but not IPv4-mapped addresses need two

# Listen directives: "Listen [::]:443" and "Listen 0.0.0.0:443"

#

#Listen 0.0.0.0:443

#Listen [::]:443

• save it (ctrl + s)
• then, click the "config" (note: above the netstat) and click the "service and port settings" then save both of it.
• finally, go to the "control panel" -> "Programs & Features" -> "Turn Windows On or Off".
• Uncheck your "Internet Information Services" then click ok.

3. If you have VMWare installed on your PC. In VMWare go to Edit>Preference>Shared VMs and Disable Sharing.

WORKED FOR ME :)

Animalia Kingdom

Unmanned Space Missions VS Manned Space Missions

Manned space flight is dangerous and costly no doubt but unmanned space flights can not be the solution. There are large amount of tasks and experiments which require constant human presence to record observations or study a particular phenomenon.

Unmanned space flights are best suited for reconnaissance missions which are essential before manned mission. A great deal of information gathered from unmanned space missions are required to fail proof the future manned missions. Unmanned missions like "Curiosity" on mars and "Chandrayan" on moon have been critical in providing crucial data such as the amount of radiations astronauts would be exposed to on a one way trip to mars or moon. These observations will be essential in developing space shuttles with much better shielding. These rover provide data but are quite slow in performing tasks like drilling the martian or lunar surface which can be done much faster by humans. Also, large amount of man power is dedicated in controlling these rovers.

Also manned missions are needed if humans want to be a space faring civilization. Recently many companies plan on establishing colonies on the lunar and the martian surface, which will be impossible without manned missions. No doubt it it is quite dangerous for the astronauts to be out there into emptiness and vastness of universe but nothing great is achieved without taking great risks.

Furthermore, instead of stop investing on the manned missions we should invest on fail proofing the manned mission and reducing their costs. Companies are working on reducing the costs for space travel. SpaceX is working on reusable rockets which is supposed to ,significantly cut down the cost of space travel. With every mission there are lessons to be learned which help in making manned space flights much safer.

Unmanned missions are only to better understand the region before humans go and explore it for themselves. They are necessary but not a replacement to manned missions.

Its just me or is it really fcuked?

Well to your bitter surprise and horror Kuwait(well not only Kuwait, Kuwait and neighbors) have Friday and Saturday as weekends, well this was only since 2007 because apparently before that they had Thursday and Friday as weekends. What do you infer from this trend? Is it, they are in steps somehow trying to close in to 'western' Saturday and Sunday as weekends. Well the truth is far more relieving and logical. In cultures, the day of rest derives from the main religious tradition: Sunday (Christian), Saturday (Jewish), or Friday (Muslim).So, this trend is to allow for respect of Fridays as the day for Jumu'ah prayers in Muslim countries while also having more working days to overlap with international financial markets.

You do see the irony.

P.S : The previous post was a total HOAX.

The WAIT is OVER.

No doubt, the finale episode of Sherlock(TV Series) Season 2 left you all in awe and thinking, how he did it this time, fake his own suicide. I bet you all must have put your swelling brains to work, trying to crack it. "Did Molly help him accomplish his fake suicide?" Well whatever happened London Central Court has left it to your own thinking by banning the next season from being aired , claiming that the trick used by Sherlock Holmes to fake his suicide in the last episode of Season 2 "The Reichenbach Fall" is so simple that people can easily fake their own suicide which may lead to public disturbance.

The producers on the other hand have sued the government and have demanded the government to pay the losses they are expected to incur from this decision of the London Central Court.

My Dark Passenger

Unsure how it began ,what provoked it

was it the "stairway to heaven"

 or "the platinum Mac"

Something dark and deadly

Next was a splitting flash

Something struggled within me

Struggled to escape its confines

 Writhing me in pain

Parting from me

My dark passenger

Wild unguided she soared

Naive, oblivious of the paranoia mantling her

For why would she have even cared

Bloodhound mongrels

They laughed they perched

Hunting her down the lowliness

For make her realize

she an abomination

There I stood frozen

In the theater of war

helpless, watching her

Lioness fighting them off

Prideful she embraced what came next

For she was the only

Hostile to the millions I guess

Still I stood there as she fell back into me

Convinced, she ain't dead yet

For she will rise again..

Well, Just for Starters

Anyone who has never made a mistake has never tried anything new ~ Albert Einstein