infosecau

8 ms·

31.
Taking over Azure DevOps accounts with one click(blog.assetnote.io)
118 points by infosecau 6y ago|25 comments
32.
Expanding the Attack Surface: React Native Android Applications(blog.assetnote.io)
37 points by infosecau 7y ago|11 comments
33.
CVE-2019-0604: Details of a Microsoft Sharepoint RCE Vulnerability(thezdi.com)
1 points by infosecau 8y ago|0 comments
34.
Discovering a zero day and getting code execution on Mozilla's AWS Network(blog.assetnote.io)
4 points by infosecau 8y ago|0 comments
35.
Gaining access to Uber's user data through AMPScript evaluation(blog.assetnote.io)
2 points by infosecau 8y ago|0 comments
36.
Leveraging web application vulnerabilities to steal NTLM hashes(wildfire.blazeinfosec.com)
1 points by infosecau 9y ago|0 comments
37.
Commonspeak: Content discovery wordlists built with BigQuery(pentester.io)
1 points by infosecau 9y ago|0 comments
38.
Breach Detection at Scale with PROJECT SPACECRAB(developer.atlassian.com)
1 points by infosecau 9y ago|0 comments
39.
Exploiting Dolphin – Part 1(dougallj.wordpress.com)
1 points by infosecau 10y ago|0 comments
40.
Taking Over DigitalOcean Domains via a Lax Domain Import System(thehackerblog.com)
385 points by infosecau 10y ago|170 comments
41.
by infosecau 10y ago
I wasn't able to maintain the frequency after 120 days. I had started the project and was hoping to do 365 bugs in 365 days, however I stopped at 120 days after I had realized that continuing at such a rate would lead to significant me
42.
by infosecau 10y ago
Hi, OP here, The total amount was just under $80,000 in 120 days. The table reflects payouts for bugs I was able to disclose, there are a fair few bugs worth >7k that I wasn't able to include in that table. Some platforms/progr
43.
SmashBot – An AI That Plays Super Smash Bros(github.com)
1 points by infosecau 10y ago|0 comments
44.
Exploring the QNX shadowed password hash formats(moar.so)
3 points by infosecau 11y ago|0 comments
45.
Instagram's Million Dollar Bug(exfiltrated.com)
1562 points by infosecau 11y ago|516 comments
46.
Severe bugs in 11 Indian startups worth $3B+ in a week(medium.com)
1 points by infosecau 11y ago|0 comments
47.
by infosecau 11y ago
In Australia, "realised" is the preferred spelling.
48.
A survey of insecure Flash crossdomain policies(blog.whatever.io)
20 points by infosecau 11y ago|0 comments
49.
Abusing URL Shortners to discover sensitive resources or assets(shubh.am)
5 points by infosecau 11y ago|0 comments
50.
Sonar – A Framework for Scanning and Exploiting Internal Hosts with a Webpage(thehackerblog.com)
2 points by infosecau 11y ago|0 comments
51.
What is in the first Ashley Madison leak?(l.avala.mp)
1 points by infosecau 11y ago|0 comments
52.
Server-Side Template Injection: RCE for the Modern Web App [pdf](blackhat.com)
9 points by infosecau 11y ago|0 comments
53.
Why You Want Two-Factor Authentication(reddit.com)
2 points by infosecau 11y ago|0 comments
54.
Enumerating IPs in X-Forwarded-For Headers to Bypass 403 Restrictions(shubh.am)
3 points by infosecau 11y ago|0 comments
55.
Getting into Linux Kernel Development(cyphar.com)
106 points by infosecau 11y ago|29 comments
56.
Stealing Lastpass Passwords with Clickjacking(thehackerblog.com)
5 points by infosecau 11y ago|0 comments
57.
by infosecau 11y ago
Just letting everyone know, by clicking anywhere on their page, you've now liked their Facebook page. This was done via ClickJacking and here are the offending scripts/html: <script>$(function(){var i=-1;$("#cksl7"
58.
by infosecau 12y ago
Great idea! Done! :)
59.
CatpchaJacking: A new approach on bypassing the Captcha.(blog.shubh.am)
1 points by infosecau 13y ago|0 comments