s0rte

[s0rte @_MrPlanB]

@lukashanren1 🤯

[s0rte @_MrPlanB]

@lukashanren1 😂😂

[s0rte @_MrPlanB]

calm down claude...

[s0rte @_MrPlanB]

@odinshell congratulations, great work!

[s0rte @_MrPlanB]

A duplicate a day keeps the doctor away

[s0rte @_MrPlanB]

@F4tM4n2k @Bugcrowd 🤯

[s0rte @_MrPlanB]

@0xwer8 Congratulations man!

[s0rte @_MrPlanB]

@XTank0 No oss

[s0rte @_MrPlanB]

🙃

[s0rte @_MrPlanB]

@XTank0 It was one/two minutes after submission in this case

[s0rte @_MrPlanB]

@busf4ctor which platform?

[vx-underground @vxunderground]

Yeah, so pretty much this guy is releasing an exploit in solidarity with Nightmare Eclipse guy. He said he notified GitHub about the exploit 60 minutes before releasing this paper.

I don't do web stuff, and I'm not a VSCode nerd, so I'm confused by the underlying technologies.

If you're a stinky GitHub and VSCode nerd maybe you'll understand.

tl;dr click github dev, github dev opens editor, in github dev editor have javascript, javascript does shortcuts automatically. github treats javascript shortcuts as real human input, or something. use javascript shortcut stuff to automatically install vscode extension. the vscode extension steals your data

tl;dr tl;dr user clicks 1 link, 1 click steals all data from your github

https://t.co/uh17usZeEH

[s0rte @_MrPlanB]

@intigriti Gym

[s0rte @_MrPlanB]

@IrshadAnsari05 @intigriti Nono

[s0rte @_MrPlanB]

Almost 2 months and still no updates...@intigriti that's painfully long 🥲

[s0rte @_MrPlanB]

@Behi_Sec Hopefully not 😂😂
Let's see..

[s0rte @_MrPlanB]

@XTank0 Thanks man! No, it's Google VRP and 1 and a half month from submitted to accepted

[s0rte @_MrPlanB]

First accepted on google VRP..long way to go...

[s0rte @_MrPlanB]

@rm_rf_chumy Eyoooo...congratulations!!
How much time from submitted to awarded?