BrunoZero

CTFer for: @Water_Paddler / Security auditor @osec_io
my writeups:

[BrunoZero @BrunoModificato]

Reported a fun variant of this, those kind of bypasses are still quite fun

[Masato Kinugawa @kinugawamasato]

A trivial bypass was fixed in DOMPurify 3.2.5 (https://t.co/anfo1wseaD). It works only if an attacker can write "-->". DOMPurify usually tries to prevent you from writing "-->" on attributes, but it can be written through DOMPurify hooks in some cases, for example. PoC👇

[BrunoZero @BrunoModificato]

@hash_kitten @kevin_mizu Funny one, I think understanding this scenario may be useful in the future

[Robert Chen @NotDeGhost]

Great work by our web team! We also got RCE on LiteLLM and Oracle AI DB. Blog soon!

[TrendAI Zero Day Initiative @thezdi]

Let's goooo! Nikolaos Mourousias, Caue Obici & Bruno Halltari (@deltaclock, @caueobici & @BrunoModificato) of OtterSec was able to exploit LM Studio! If confirmed, they win $40,000 and 4 Master of Pwn points. They're off to the disclosure room to explain how they did it. #Pwn2Own #P2OBerlin

[OtterSec @osec_io]

We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with @cor_ctf.

Full writeup coming next week.

[BrunoZero @BrunoModificato]

@TheGrandPew Happy bdayy :)

[BrunoZero @BrunoModificato]

@codewithimanshu @0xacb @H4R3L @sudhanshur705 it's fixed now

[OtterSec @osec_io]

Our research team achieved client RCE on Minecraft Bedrock Edition via a heap overflow to bypass ASLR and sidestep CFG. Writeup to come.

[BrunoZero @BrunoModificato]

New research, I did found many wallets /web 3 products not taking in consideration the difference between desktop env and mobile env leading to high severity issues.

[OtterSec @osec_io]

NEW: OAuth misconfigurations show how common dev settings can lead to account takeovers.

Our second deep dive breaks down real cases where overlooking differences between desktop and mobile environments left SDKs, exchanges, and wallets open to exploits.
https://t.co/QWABEOXcSU

[OtterSec @osec_io]

NEW: OAuth misconfigurations show how common dev settings can lead to account takeovers.

Our second deep dive breaks down real cases where overlooking differences between desktop and mobile environments left SDKs, exchanges, and wallets open to exploits.
https://t.co/QWABEOXcSU

[BrunoZero @BrunoModificato]

@smashjarchive @osec_io you can find it here https://t.co/H40Vievjlh

[OtterSec @osec_io]

NEW: The recent supply-chain attack on NPM exposed a fundamental vulnerability in the open-source ecosystem and the risks that lurk within our dependencies.

We break down how the malware worked and practical defenses every dev should know ↓
https://t.co/ZeqAkFR2jo

[MetaMask 🦊 @MetaMask]

As a MetaMask user, you do not need to be scared of the supply chain attack that took place earlier today.

MetaMask has multiple layers of defense to protect our products and users:

- Basic Security: We lock our versions, don't push directly to main, have manual and automated checks during the entire development lifecycle, and have robust release processes and monitored rollouts.
- LavaMoat: Prevents malicious code from harming you, even if malicious code was to somehow sneak in. LavaMoat covers both the development lifecycle and runtime scenarios.
- Blockaid: Flags malicious addresses nearly instantaneously, protecting you from compromised dapps.

Security is paramount for MetaMask. We work tirelessly to protect you from attacks and threats, including supply chain attacks.

🧡

[OtterSec @osec_io]

NEW: Proof of Reserves you can verify yourself.

We teamed up with @Backpack to build PoRv2, a zero-knowledge system for fast, transparent solvency checks.

More on how we designed it ↓

https://t.co/dfyVlrceRW

[BrunoZero @BrunoModificato]

Yay, got a new bounty #bugbountytips

[BrunoZero @BrunoModificato]

@S1r1u5_ Wtf. Where are you going btw?

[BrunoZero @BrunoModificato]

Happy to talk there :)

[Bug Bounty Village @BugBountyDEFCON]

We’re excited to announce that Bruno Halltari (@BrunoModificato) will be speaking at the Bug Bounty Village at DEF CON 33!

Stay tuned for more details on their talk, you won’t want to miss it.

#BugBounty #DEFCON #BBV #BugBountyVillage

[BrunoZero @BrunoModificato]

@xenobyte_ I think AI offers no technical improvements, it can only help with correcting English grammar

[BrunoZero @BrunoModificato]

I hope the AI hype ends soon: :'(. The quality of infosec reports and write-ups has been declining so much because of AI slop

[BrunoZero @BrunoModificato]

@28YearsLaterMov amazing