<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Posts on sn00py1310's Blog</title><link>http://blog.snoopys.xyz/en/posts/</link><description>Recent content in Posts on sn00py1310's Blog</description><generator>Hugo</generator><language>en</language><lastBuildDate>Sun, 21 Jun 2026 20:00:00 +0200</lastBuildDate><atom:link href="http://blog.snoopys.xyz/en/posts/index.xml" rel="self" type="application/rss+xml"/><item><title>Writeup Simple Food Notifications</title><link>http://blog.snoopys.xyz/en/posts/writeup-simple-food-notifications-ef21cc083e00/</link><pubDate>Sun, 21 Jun 2026 20:00:00 +0200</pubDate><guid>http://blog.snoopys.xyz/en/posts/writeup-simple-food-notifications-ef21cc083e00/</guid><description>&lt;p&gt;Notes: This is a writeup from the author of the challenge. The handout is &lt;a href="./simple-food-notifications.tar.gz" &gt;simple-food-notifications.tar.gz&lt;/a&gt;.&lt;/p&gt;
&lt;h2 id="short-challenge-description"&gt;
 Short challenge description
 &lt;a class="heading-link" href="#short-challenge-description"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;Users can simulate ordering food on the website and receive a notification on a provided callback URL. The goal of the challenge is to request &lt;code&gt;/vip-meal&lt;/code&gt; from the IP &lt;code&gt;127.0.0.1&lt;/code&gt;.&lt;/p&gt;
&lt;h2 id="challenge-description"&gt;
 Challenge description
 &lt;a class="heading-link" href="#challenge-description"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;The challenge simulates a website where users can order food and receive notifications once it&amp;rsquo;s ready.
The ordering logic has a simple rate limiting mechanism and starts a new thread for each order.&lt;/p&gt;</description></item><item><title>Writeup Painting Dice</title><link>http://blog.snoopys.xyz/en/posts/writeup-painting-dice-098527d17a3c/</link><pubDate>Sun, 22 Jun 2025 00:00:00 +0200</pubDate><guid>http://blog.snoopys.xyz/en/posts/writeup-painting-dice-098527d17a3c/</guid><description>&lt;p&gt;Notes: This is a writeup from the author of the challenge. The handout is &lt;a href="./painting-dice.tar.gz" &gt;painting-dice.tar.gz&lt;/a&gt;.&lt;/p&gt;
&lt;h2 id="short-challenge-description"&gt;
 Short challenge description
 &lt;a class="heading-link" href="#short-challenge-description"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;User can update a profile with HTML and CSS. Javascript execution is not possible because of a Strong CSP. User can requests a review from the admin bot, which then sends them a screenshot from their profile. To get the flag the user needs to be upgraded.&lt;/p&gt;</description></item><item><title>Microsoft spoofs emails because of wrong SPF records for Hotmail.com</title><link>http://blog.snoopys.xyz/en/posts/microsoft-spf-error-b9e4d4ebc2db/</link><pubDate>Fri, 18 Aug 2023 04:30:00 +0200</pubDate><guid>http://blog.snoopys.xyz/en/posts/microsoft-spf-error-b9e4d4ebc2db/</guid><description>&lt;h2 id="the-story"&gt;
 The Story
 &lt;a class="heading-link" href="#the-story"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;Today I wanted to test &lt;a href="https://simplelogin.io" class="external-link" target="_blank" rel="noopener"&gt;SimpleLogin&lt;/a&gt; and check what the service can and can&amp;rsquo;t do. So I created an account and tried the email forwarding. So I did send a mail from my Gmail to my Hotmail account over the SimpleLogin forwarding service. SimpleLogin also supports &lt;a href="https://simplelogin.io/docs/getting-started/reverse-alias/" class="external-link" target="_blank" rel="noopener"&gt;reverse aliases&lt;/a&gt; which allows you to send email to a specific generated mail. They then forward the mail for you to the original email but from their email server, so your email address stays private. When I tested this feature and the email was sent, there were only responses similar to the &lt;a href="#protonsimplelogin-email-rejection-message" &gt;Proton Mail Rejection&lt;/a&gt;.&lt;/p&gt;</description></item><item><title>VeraCrypt - How to block the Windows format drive popup</title><link>http://blog.snoopys.xyz/en/posts/veracrypt-windows-drive-popup-891660a2d9fe/</link><pubDate>Wed, 30 Nov 2022 00:00:00 +0000</pubDate><guid>http://blog.snoopys.xyz/en/posts/veracrypt-windows-drive-popup-891660a2d9fe/</guid><description>&lt;h2 id="the-story"&gt;
 The story
 &lt;a class="heading-link" href="#the-story"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;VeraCrypt is a good software, but it there is one downside. If you have an encrypted partition you get a annoying popup on Windows: &amp;ldquo;Format the Disk before You Can Use It&amp;rdquo;. This was getting really annoying to me so I spend a lot of time reading through &lt;a href="https://www.google.com/search?q=veracrypt&amp;#43;Format&amp;#43;the&amp;#43;Disk&amp;#43;before&amp;#43;You&amp;#43;Can&amp;#43;Use&amp;#43;It" class="external-link" target="_blank" rel="noopener"&gt;Google&lt;/a&gt; and finding a loot of partial solutions. All of them where only for the current PC, but I want something which worked on every PC and now we are here.&lt;/p&gt;</description></item></channel></rss>