Email or username:

Password:

Forgot your password?
Top-level
Jon Ribbens

@dragonfrog @EnaWasHere @bjb @suprjami That's not quite right, the username/password part cannot contain (amongst other things) forward slashes. This attack is relying on using a unicode character that looks like a forward slash but isn't one.

1 comment
Captain Dragonfrog Queernabs

@jribbens @EnaWasHere @bjb @suprjami I see, it's both the @ and the pseudo-slashes. Thanks for pinning that out.

Go Up