alienisgrinding

[Jorian @J0R1AN]

I won't keep you in mystery any longer, here's how I found an XSS vulnerability *in* Shazzer!
The chain involved some interesting browser techniques no sane developer could foresee. Check out the details below:
https://t.co/nY20Anz0VO
(and thanks @garethheyes for making Shazzer!)

[alienisgrinding @alien2exe]

@Mar0_0uane 🐐🐐

[alienisgrinding @alien2exe]

@mchklt @Hacker0x01 @Bugcrowd @intigriti real, imo the fee thing would be the best move in this situation

[alienisgrinding @alien2exe]

@Yassineaboukir @Hacker0x01 🥳🥳

[alienisgrinding @alien2exe]

@Magn4_ 🐐

[alienisgrinding @alien2exe]

@Magn4_ 🔥🔥🔥

[alienisgrinding @alien2exe]

@Magn4_ 🔥🔥🔥

[alienisgrinding @alien2exe]

@OriginalSicksec @wld_basha 🔥🔥🔥

[alienisgrinding @alien2exe]

@BadAt_Computers @intigriti GG 🔥🔥🔥

[alienisgrinding @alien2exe]

@matured_kazama @Cloudflare so cool

[alienisgrinding @alien2exe]

@Magn4_ @SalhiMahdi72759 goat 🔥

[alienisgrinding @alien2exe]

@Magn4_ @Hacker0x01 GG

[alienisgrinding @alien2exe]

@hamidonsolo 🔥

[alienisgrinding @alien2exe]

@elmehdimee 🔥

[alienisgrinding @alien2exe]

@mchklt @offsectraining mbrok the goaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaat

[alienisgrinding @alien2exe]

@hamidonsolo 🔥🔥🔥

[alienisgrinding @alien2exe]

Had a lot of fun writing this one, so don't forget to check it out.

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

New research just dropped by @alien2exe on hijacking OAuth popups via predictable window. open() targets.

The chain uses iframe name collision forcing the auth flow into a controlled context, eventually linking an attacker-controlled addon to leak workspace PII and config data

https://t.co/GbimNCyqxx

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

New research just dropped by @alien2exe on hijacking OAuth popups via predictable window. open() targets.

The chain uses iframe name collision forcing the auth flow into a controlled context, eventually linking an attacker-controlled addon to leak workspace PII and config data

https://t.co/GbimNCyqxx

[alienisgrinding @alien2exe]

@AmirMSafari interesting

[alienisgrinding @alien2exe]

I had the best time networking, learning, and sharing insights with my fellow hunters. @OriginalSicksec @Yassineaboukir @thelitesecurity @wld_basha @mchklt @Magn4_ @m4ll0k @nasserwashere @HappyKira9 and every other awesome hacker who took part in the event.

[alienisgrinding @alien2exe]

Last week I had the privilege of joining NullHat the first live hacking event of its kind in Morocco hosted by UM6P University Mohammed VI Polytechnic and 1337 Coding School and organized by The Elites' Security in collaboration with HackerOne.

Huge thanks to the organizers