Hack The Boo 2023 - Writeups
Hack The Boo
Miguel Xavier Penha Neto
Blog about programming and nerdy stuff.
Latest posts
Type Juggling and MySQL: A Dangerous Combination
Type juggling is when you trick the application into processing something as a different type than intended by the programmers. This is usually a problem on languages with dynamic typing. Those languages usually have some sort of type coercion in place and if you try to compare two variables of different types one of them will usually be implicitly converted to the other type and then the…
Server side XSS
XSS stands for Cross Site Scripting, it’s basically when input is not properly sanitized somewhere and a malicious actor can inject unintended javascript somewhere. That javascript will be executed by some unsuspecting user’s browser and then bad stuff can happen.
Hello world!
Hello! I’m Miguel, a 29 year old developer from Curitiba in Brazil. I’m very passionate about coding and technology in general and I’ll use this blog to post cool things about stuff I’m working on.
How I found and fixed a bug in PHP’s standard library
I’ve been a software developer at EBANX since 2016. There we have a mechanism called Release Candidate. Every time we deploy something new to our monolith PHP system we end up deploying it first to the release candidate server. Then we elect a few random requests and proxy it from our live normal servers to the release candidate server, if those requests go well with no errors then the deploy…