duphouse

Paying houses one dup at a time

[duphouse @duph0use]

follow the 🧵

[caioluders @caioluders]

Got an file upload restricted to `.json` files ANYWHERE on the system?

Try to overwrite an dependency manager file, like package.json or composer.json

Most times they have an "scripts" property that runs a command before every action, like an update.

#bugbounty #bugbountytips

[Matheus Vrech @vrechson]

Yay, @MozillaSecurity released the CVE-2022-29912 for a bug that I reported in the last @duph0use https://t.co/ZoLuhIKeBv

[duphouse @duph0use]

pew pew pew

[caioluders @caioluders]

Yay, I was awarded a $5,000 bounty on @Hacker0x01! https://t.co/AOaKJNLKnV #TogetherWeHitHarder

[duphouse @duph0use]

@ricardo_iramar tamo marcando 👀

[duphouse @duph0use]

#NewProfilePic

[Ricardo Iramar @ricardo_iramar]

Just published my new tool called h2rs which detects potential request smuggling via HTTP/2 downgrades.
Feedbacks and PR are welcome! If you wan to try install with pip3 command below:

pip3 install h2rs

source code: https://t.co/m90uTX2g2Z

[Vitor Fernandes @Rapt00rVF]

My research about IDO & IGO platforms is having very interesting results :)

Tested Platforms (until now): 15
Vulnerable Platforms: 8

Some of the vulnerabilities allows attackers to change the smart contract of the token, info leak and so on!!!

[caioluders @caioluders]

Messing Nuclei up

Dropping 2 malicious templates and a false positive server

https://t.co/VWTPbrrun2

[The Daily Swig @DailySwig]

Security researchers @k33r0k and @lbherrera_ have detailed a mutation XSS in Kitsune, an open source platform that runs https://t.co/ilvMQuzWpE https://t.co/bh3fHb32DX

[Luan Herrera @lbherrera_]

A contrived solution for the "Basic context length limit, arbitrary code" impossible lab working on Firefox: https://t.co/Y706j4I0Nl @PortSwiggerRes

[celesian @c3l3si4n]

Nuclei < v2.5.2 was vulnerable to RCE.
I found that you could achieve RCE by using a malicious .yaml template and exploiting nuclei's headless browser feature, which runs with sandbox disabled.

Thanks @pdnuclei for the quick update and fix.
PoC:
https://t.co/IyL1nB9gl2

[duphouse @duph0use]

@k33r0k kkkkkk

[Mente Binária (ONG) @mentebinaria]

Quer saber como funciona um ataque a dispositivos Android? @caioluders, da @eltctfbr, explica o passo a passo no nosso portal: https://t.co/vaAHKemDhI

[Renwa @RenwaX23]

My Solution to HackUs in Pwn2Win CTF

0-day XSS in CodiMD

https://t.co/LvUoqauJac

[Luan Herrera @lbherrera_]

This year, for Pwn2Win 2021 CTF, I relaunched MessageKeeper. The main idea was to exploit Chrome's AppCache fallback section (and the fact that it matches URLs by prefix) - I think it was the hardest challenge I created to date! A solution can be found on https://t.co/F77yzFBe2g

[duphouse @duph0use]

@Allan_Trindad a @picpay tem um escopo mais interessante

[Vitor Fernandes @Rapt00rVF]

I've just found another "git clone" vulnerability that allows me to execute arbitrary code on the victim's machine!

Writeup soon :)

[Guilherme Keerok @k33r0k]

Finally found my first XSS on https://t.co/52Vwji4Hjo! 😀

[Luan Herrera @lbherrera_]

Finally found an XSS on a https://t.co/vL5LyDlVpI subdomain! 😁