Type your comment> @elseif said:
Type your comment> @mandev said:
I find the right cve but page gives 500 error. I tryed ar***s instead of usrs but not luck. Any nudge?
It will respond with 500 but still go through. Try sending multiple requests and reload the page to see if it’s reflected. Curl/burp/zap works better than going through the browser as well.
For pad part only changing cond is enough right? and remote address to ofcource 
If it fails then its co**nd or encode right?