After CBSE, Bengaluru City University’s On-Screen Marking Portal gets hacked
A researcher has publicly detailed how he gained full unauthenticated access to Bengaluru City University’s (BCU) official On-Screen Marking (OSM) portal at bcuosm.onmark.co.in.
Findings:
- Admin dashboards completely open and were accessible without any login.
- Master data upload exposed, Anyone could upload bulk exam metadata directly to the backend.
- Plain HTTP only, No forced HTTPS or HSTS.
- Blind time-based SQLite injection in a CSS endpoint.
- Outdated libraries (jQuery 3.3.1, Chart.js 2.3.0) and missing security headers.
The portal, used for evaluating answer scripts, is developed by Coempt EduTeck and appears to be used by multiple institutions including CBSE
This raises serious concerns about the integrity of exam evaluations for thousands of students.
Full detailed write-up:
🔗 How I Broke Into Bangalore City University’s On-Screen Marking Portal
🧑💻 @agamtechtricks
A researcher has publicly detailed how he gained full unauthenticated access to Bengaluru City University’s (BCU) official On-Screen Marking (OSM) portal at bcuosm.onmark.co.in.
Findings:
- Admin dashboards completely open and were accessible without any login.
- Master data upload exposed, Anyone could upload bulk exam metadata directly to the backend.
- Plain HTTP only, No forced HTTPS or HSTS.
- Blind time-based SQLite injection in a CSS endpoint.
- Outdated libraries (jQuery 3.3.1, Chart.js 2.3.0) and missing security headers.
The portal, used for evaluating answer scripts, is developed by Coempt EduTeck and appears to be used by multiple institutions including CBSE
This raises serious concerns about the integrity of exam evaluations for thousands of students.
Full detailed write-up:
🔗 How I Broke Into Bangalore City University’s On-Screen Marking Portal
🧑💻 @agamtechtricks
🔥26❤6👍1😁1
Forwarded from ATT • Memes (Leonardo)
This media is not supported in your browser
VIEW IN TELEGRAM
🧑💻 @agamtechtricks x @attmemes
😭19🤣8😁3❤1
Forwarded from [SN] Channel at 25:00 삶 (Leonardo)
i am this bored, i recreated the existing ai studio project by myself (not from scratch)
literally inspired from snapseed, generated by u/betteratps on reddit initially.
link: snapweb.isaiahthings.me
literally inspired from snapseed, generated by u/betteratps on reddit initially.
link: snapweb.isaiahthings.me
❤11👍1🤔1
got access to JioPC today, and here's some fun facts about it:
- It uses Ubuntu 24.04
- Their "Software Center" app has flatpak apps
- The desktop environment is "LXQt"
- It has a whole lot of AI slop apps preinstalled
- It has no terminal installed
- It has LibreOffice installed by default
- I don't know what the root password is
- It has 8 gigs of RAM and 500 GB storage
I don't know what to do with it, and I'm not a cybersecurity nerd so I can't really do anything
🧑💻 @agamtechtricks
- It uses Ubuntu 24.04
- Their "Software Center" app has flatpak apps
- The desktop environment is "LXQt"
- It has a whole lot of AI slop apps preinstalled
- It has no terminal installed
- It has LibreOffice installed by default
- I don't know what the root password is
- It has 8 gigs of RAM and 500 GB storage
I don't know what to do with it, and I'm not a cybersecurity nerd so I can't really do anything
🧑💻 @agamtechtricks
🤣30❤2
ATT • Tech News
got access to JioPC today, and here's some fun facts about it: - It uses Ubuntu 24.04 - Their "Software Center" app has flatpak apps - The desktop environment is "LXQt" - It has a whole lot of AI slop apps preinstalled - It has no terminal installed - It…
here's some screenshots
Google Chrome is native because I can see the system files from it. Some more normal apps too.
The AI Slop apps are just shortcuts for Chrome.
I wonder who actually enjoys using this.
🧑💻 @agamtechtricks
Google Chrome is native because I can see the system files from it. Some more normal apps too.
The AI Slop apps are just shortcuts for Chrome.
I wonder who actually enjoys using this.
🧑💻 @agamtechtricks
🤔12🥴4
Forwarded from ATT • Memes (Αgam)
Thank you Satya Nadella for this integration, because OpenClaw instances are really secure and can be fully trusted for a business. I love Microsoft 😍
🔗 Build 2026
🧑💻 @agamtechtricks x @attmemes
🔗 Build 2026
🧑💻 @agamtechtricks x @attmemes
🤡26😭4❤2🤣2👍1
Here's a preview of Cosmic DE's "Frosted Glass" effect
You can adjust the Frost Thickness and Glass Opacity, or just turn it off altogether.
🔗 Carl Richell
🧑💻 @agamtechtricks
You can adjust the Frost Thickness and Glass Opacity, or just turn it off altogether.
🔗 Carl Richell
🧑💻 @agamtechtricks
🔥23❤8🤔2
Microsoft brings Linux commands to Windows
Microsoft has released Coreutils, a project that brings Linux-like command-line utilities that run natively on Windows. This is based on uutils, a cross-platform reimplementation of GNU Coreutils in Rust.
Instead of creating separate executables for each program, a single
Some commands like
Install Coreutils:
🔗 Coreutils | Commands
🧑💻 @agamtechtricks x @attmemes
Microsoft has released Coreutils, a project that brings Linux-like command-line utilities that run natively on Windows. This is based on uutils, a cross-platform reimplementation of GNU Coreutils in Rust.
Instead of creating separate executables for each program, a single
coreutils.exe binary contains all the functions, and the executables are all hardlinks to coreutils.exe.Some commands like
dir, kill, etc. aren't included because they conflict with CMD and/or Powershell.Install Coreutils:
winget install Microsoft.Coreutils
🔗 Coreutils | Commands
🧑💻 @agamtechtricks x @attmemes
💩27🔥7❤4
Forwarded from Tech & Leaks Zone
A journey to get RealTek WLAN working on Hackintosh!
My friend wrote an interesting blog describing his journey to get a RealTek WLAN card to communicate with macOS through Hackintoshing.
It is not an AI-generated crap article, but something written entirely by a human that is also enjoyable to read & easier to understand what porting a driver to macOS on unsupported hardware looks & feels like!
Please, do give it a read!
https://goonblog.thevakhovske.eu.org/posts/20260604-never-say-never-or-how-i-got-r/
My friend wrote an interesting blog describing his journey to get a RealTek WLAN card to communicate with macOS through Hackintoshing.
It is not an AI-generated crap article, but something written entirely by a human that is also enjoyable to read & easier to understand what porting a driver to macOS on unsupported hardware looks & feels like!
Please, do give it a read!
https://goonblog.thevakhovske.eu.org/posts/20260604-never-say-never-or-how-i-got-r/
goonblog.thevakhovske.eu.org
Never say never, or how I got Realtek to talk to macOS
The wonders of porting a driver for macOS
🔥23❤1
Forwarded from ATT • Memes (Leonardo)
This media is not supported in your browser
VIEW IN TELEGRAM
🧑💻 @agamtechtricks x @attmemes
❤9