Sahil Dhar

Vulnerability Researcher

(OSED, OSWE, OSCE)

[Sahil Dhar @0x401]

Extremely happy and proud to achieve this feat. Thank you @offsectraining for the amazing course and the brutal exam. #osed

[Sahil Dhar @0x401]

@0xacb @0xteknogeek 😂

[Sahil Dhar @0x401]

@bsdaemon Hi @bsdaemon is this position still open ?

[Sahil Dhar @0x401]

@intigriti https://t.co/Yuv6glf5Tj

[Sahil Dhar @0x401]

@AmirMSafari we can pass more then one email as json object, to satisfy the creation of user object?

[p3rr0 @Hperalta89]

This research allowed me to find critical bugs in several electron applications by finding public n-day exploits for older versions of chrome and adapting them to the electron framework.
https://t.co/kZKmvuABkq

#BugBounty

[Jack Halon @jack_halon]

To wrap up 2022, I'm releasing the final part of my 3-part browser exploitation series on Chrome!

In this post, we demonstrate the practical use of the concepts we've learned throughout the series by analyzing and exploiting CVE-2018-17463.

Enjoy!
https://t.co/Xhrnh4fqNB

[TrendAI Zero Day Initiative @thezdi]

In a new guest blog, #Pwn2Own winner @_manfp details CVE-2024-2887 - a bug he used to exploit both #Chrome and #Edge during the contest on his way to winning Master of Pwn. He breaks down the root cause and shows how he exploited it. Read the details at https://t.co/BgMGfczO8U

[Sahil Dhar @0x401]

A file read primitive and you have your KASLR bypass ;)

[c0m0r1 @c0m0r1]

I'm speechless

[Vignesh Rao @sherl0ck__]

We wrote about a Chrome bug that arose due to the manner in which V8's Maglev tried to optimize the number of allocations it made. Now, in the newer releases with Trusted Pointers, the v8 heap sandbox looking a bit more formidable 👀

[Boris Larin @oct0xor]

The recording of our (me, @bzvr_, @kucher1n) #37c3 talk “Operation Triangulation: What You Get When Attack iPhones of Researchers” was published! https://t.co/j97J9TiXsC

[Nasreddine Bencherchali @nas_bench]

Write-up & POC for CVE-2023-38146 released

Blog - https://t.co/DiRVO4uadN
POC - https://t.co/X7ZRLiB2F1

[Sahil Dhar @0x401]

@TerrifyingNatur this is bollywood 😅

[Sahil Dhar @0x401]

@Steph3nSims Love your content, please keep posting. Would be great to see some interviews from pwn2own winners and participants.

[Sahil Dhar @0x401]

@NinjaParanoid why would you prefer a naked bike over faired ?

[Sahil Dhar @0x401]

@irsdl As an admirer of your work, I am interested to understand your thoughts and motivation to get into this domain ?

[Sahil Dhar @0x401]

@redcanary @PartyD0lphin Can you please share the github or download link as well. Would love to give it a try.

[Sahil Dhar @0x401]

@hardik05 It really depends on many factors such as product’s security maturity and how good and stable your harness is how deep you are hooking into the program for execution speed. In generic terms yea it will take some time.

[Y4er @Y4er_ChaBug]

CVE-2023-28432 Minio information leakage leads to RCE

https://t.co/1IaBVptrAQ

[Sahil Dhar @0x401]

@refactorsec Thank you for this ❤️. I was using breakpoints to mark interested areas till now.

[Refactor Security @refactorsec]

🧨 TOOL ANNOUNCEMENT 🧨

We are glad to release a VSCode extension to help out during code reviews!

Create inline notes 📝, import findings from Semgrep 🛠️, collaborate with others in real-time 🤝, and more!

Find out more at:

https://t.co/AswhyyjH4M

#infosec #appsec #pentest