Details
-
AboutCurrently a student at university. I love technology, not so much programming languages lol
-
SkillsHTML, CSS, JS, Visual Studio, Brackets
-
LocationChicago
-
Website
-
Github
Joined devRant on 4/6/2017
Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
![](/static/devrant/img/pipeless-devrant-banner-white.png)
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
Sometime it feels like I'm surrounded with idiots.
Got a Ticket:
Support: Please delete installation ABC from Server D.
Me: Checks everything. Installation is on Server E. Asks if this is correct?
Support: Just follow the instructions!
Me: Okey dokey. If you want me to be a hammer the installation is a nail... Drop database, Remove all files. nuke K8s resources
Support: Why did you delete the installation ABC? You should delete XYZ!
Me: Cause the ticket told to delete ABC on Server D and YOU told me to follow your instructions!
Support: Yeah but we just reused an old ticket. We wanted XYZ deleted!
It's not a big deal I can restore the shit but I hate it if a day starts with this kind of shit!18 -
just found out a vulnerability in the website of the 3rd best high school in my country.
TL;DR: they had burried in some folders a c99 shell.
i am a begginer html/sql/php guy and really was looking into learning a bit here and there about them because i really like problem solving and found out ctfs mainly focus on this part of programming. i am a c++ programmer which does school contest like programming problems and i really enjoy them.
now back on topic.
with this urge to learn more web programming i said to myself what other method to learn better than real life sites! so i did just that. i first checked my school site. right click. inspect element. it seemed the site was made with wordpress. after looking more into the html code for the site i concluded all the images and files i could see on the site were from a folder on the server named 'wp-content/uploads'. i checked the folder. and here it got interesting. i did a get request on the site. saw the details. then i checked the site. bingo! there are 3 folders named '2017', '2018', '2019'. i said to myself: 'i am god.'
i could literally see all the announcements they have made from 2017-2019. and they were organised by month!!! my curiosity to see everything got me to the final destination.
with this adrenaline i thought about another site. in my city i have the 3rd most acclaimed high school in the country. what about checking their security?
so i typed the web address. looked around. again, right click, inspect element and looked around the source code. this time i was more lucky. this site is handmade!!! i was soooo happy because with my school's site i was restricted with what they have made with wordpress and i don't have much experience with it.
amd so i began looking what request the site made for the logos and other links. it seemed all the other links on the site were with this format: www.site.com/index.php?home. and i was very confused and still am. is this referencing some part of the site in the index.php file? is the whole site written inside the index.php file and with the question mark you just get to a part of the site? i don't really get it.
so nothing interesting inside the networking tab, just some stylesheets for the site's design i guess. i switched to the debugger tab and holy moly!! yes, it had that tree structure. very familiar. just like a project inside codeblocks or something familiar with it. and then it clicked me. there was the index.php file! and there was another folder from which i've seen nothing from the network tab. i finally got a lead!! i returned in the network tab, did a request to see the spgm folder and boooom a site appeared and i saw some files and folders from 2016. there was a spgm.js file and a spgm.php file. there was a contrib, flavors, gal and lang folders. then it once again clicked me! the lang folder was las updated this year in february. so i checked the folder and there were some files named lang with the extension named after their language and these files were last updated in 2016 so i left them alone. but there was this little snitch, this little 650K file named after the name of the school's site with the extension '.php' aaaaand it was last modified this year!!!! i was so excited! i thought i found a secret and different design of the site or something completely else! i clicked it and at first i was scared there was this black/red theme going on my screen and something was a little odd. there were no school announcements or event, nononoooo. this was still a tree structured view. at the top of the site it's written '!c99Shell v. 1.0...'
this was a big nono. i saw i could acces all kinds of folders. then i switched to the normal school website and tried to access a folder i have seen named userfiles and got a 403 forbidden error. wopsie. i then switched to the c99 shell website and tried to access the userfiles folder and my boy showed all of its contents. it was nakeeed naked. like very naked. and in the userfiles folder there were all, but i mean ALL files and folders they have on the server. there were a file with the salary of each job available in the school. some announcements. there was a list with all the students which failed classes. there were folders for contests they held. it was an absolute mess and i couldn't believe it.
i stopped and looked at the monitor. what have i done? just to learn some web programming i just leaked the server of the 3rd most famous high school in my country. image a black hat which would have seriously caused more damage. currently i am writing an email to the school to updrage their security because it is reaaaaly bad.
and the journy didn't end here. i 'hacked' the site 2 days ago and just now i thought about writing an email to the school. after i found i could access the WHOLE server i searched for the real attacker so if you want to knkw how this one went let me know in the comments.
sorry for the long post, but couldn't held it anymore13 -
Some ideas for variable names. Thank me later :))
1. bool sheet;
2. int entionally;
3. char mander;
4. double penetration;
5. string cheese;
6. long schlong;23 -
Dumb ass management. Picked a different technology for us without consulting our technical team...3
-
I'm the biggest dumbass, the laziest procrastinator I know of..
Joined devRant in June 2017, got eligible for the stickers in a week's time, sent a mail requesting them, but never received it. Given the size of our community, I thought I'm way behind in the list and probably receive them in few months. After a year, I totally forgot about it.
But, the colossal stupid that I am, had also lost the key to my mailbox (the physical one). I never cared about the lost key, because who sends post these days !!!
When I finally got a duplicate key for my mailbox after 2 years, guess what I found.. a first class international mail from devRant which arrived on July 2017 🤦♂️🤦♂️🤦♂️, couple of weeks after I originally requested
But, yay... I finally got them..16 -
Just the other day I got back from getting an extra monitor.. and just when I came back home, some older lady that also lives in this residence came to me, all panicked because her left car lights wouldn't turn off. So she asked me whether I could fix it, because I'm a man and therefore technical... Yeah.
Told her I don't know anything about cars (I don't even have a driver's license), and she should ask someone else.. but she kept clinging on to me and eventually I figured.. screw it, how hard can it be?
Got to her car, yada yada yada.. lady opens the door, and it's full of fucking buttons everywhere! No fucking way that I'm gonna dabble with those. So, do the easiest thing first.
"Ma'm, could you please turn on the car?"
*Turns car on, all lights light up*
🤔 Fair enough...
"Hmm.. and what happens if you turn it off now?"
*Turns car off, all lights go off*
Lady: "I've got no idea how you've done it but thank you so much, you're an angel!! 😊"
Me: "Well.. 😅 let's just say that turning it on, off and back on again works at least 90% of the time..."13 -
Here with my books just bought these new 8 monitors just to use them for my marketing analytics work, but do you know what i love more than these books and 8 monitors that i just bought for my marketing analytics work? My brand new lamborghini6
-
If you invite me to a "lunch and learn" about company policies, and I have to bring my own lunch, well, that's just a meeting during my lunch, isn't it?15
-
how to be a man in upper management:
-come into meetings without any context and talk over everyone
-say very obvious and broad things to seem like you're mentoring the team
-waste time14 -
Client: I forgot what my user ID is to log into the system
Me: It's just your employee ID number
Client: All caps?
Me:
Me: ...
Me: Yes10 -
My 14 year old self stared at Chrome and decided to consult Google on a random fleeting thought...
"How is software made?"
The search resulted in my downloading Visual Studio. Without any understanding of what it was or how it worked I somehow managed to create a new Winforms project.
I started to drag controls from the ToolBox onto the form, and I specifically recall thinking "Wow! This is easy.". Little did I know...
I then inadvertently double clicked either a control or the form which as most will know switches from the designer view to the code editor taking you to the code that drives the form.
"What the hell is this?"
I had absolutely no idea what I was looking at, but decided I was determined to understand what all of that random text did.
So, yeah, my first dev project was a Winforms App consisting of a single button that did absolutely nothing, but yet happens to be the most important app I have ever created.
To think I'd be working in an entirely different sector if it wasn't for that one Google search.4 -
Interview at amazon on Monday, wish me luck! Any advice? I've got 3-4 years experience, so not grad but not huge amount of experience.7