rhodey_orbits

3 ms·

1. 1.▲
   by rhodey_orbits 10y ago

   Cool to see DNS Rebinding getting more attention lately :D just a couple months ago I used DNS Rebinding to attack Ethereum wallets: https://medium.com/@rhodey/walking-past-same-origin-policy-n...
2. 2.▲
   The RadioWitness.io DSP Pipeline Part 1, Where to Start?(medium.com)

   1 points by rhodey_orbits 10y ago|0 comments
3. 3.▲
   by rhodey_orbits 10y ago

   thanks! I didn't take the time to setup Mist but my understanding is that Mist is especially vulnerable because it's bundled with a wallet and used for browsing DAPPS which always require the JSON API to be enabled.
4. 4.▲
   by rhodey_orbits 10y ago

   Ethereum brushed off my bug bounty submission and then began this hard fork junk so I documented and packaged my exploit publicly. It hasn't gotten much exposure yet, please have fun with it. "Walking Past Same-origin Policy, NAT,
5. 5.▲
   Walking Past Same-Origin Policy, NAT, and Firewall for Ethereum Wallet Control(medium.com)

   1 points by rhodey_orbits 10y ago|0 comments