/explore
|
You are here 
|
jinyuz.dev | ||
| | | | |
www.laceyhenschel.com
|
|
| | | | | This week I needed to manipulate the privacy of a Wagtail page programmatically. The Wagtail docs show you how to edit page privacy in the admin UI, but it doesn't peek behind the curtain to show you the code. The example here is a result of my Google searching. | |
| | | | |
www.rasulkireev.com
|
|
| | | | | Whenever you building a site with Django that will have user authentication, it is recommended to create a Custom User Model, before the first migration. Sometimes you forget to do that. In this case you have to follow a strict procedure, which I'll show you in the post. | |
| | | | |
alexgaynor.net
|
|
| | | | | [AI summary] Alex, a software resilience engineer, demonstrates how to implement a read-only field in Django by subclassing FileField and modifying the widget rendering and validation logic. | |
| | | | |
blog.0x7d0.dev
|
|
| | | Bookworm is an Insane-difficulty machine from Hack The Box. We will exploit an XSS vulnerability to gain access to a grandfathered feature accessible only to a few users. Subsequently, we'll leverage a Path Traversal vulnerability to acquire an initial password. Then, we will exploit a bug in an internal HTTP service to pivot to another user. This second user will possess privileges to a system for generating shipping labels, vulnerable to a double injection, allowing us to escalate our privileges to root. | ||
