Faav

Hacker & Developer.
Hunting bugs. Building & NameMC Extras.

[Faav @efaav]

@ctbbpodcast @brutecat Mad man

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

Not even Google is safe from RCEs, and we brought @brutecat on the pod to talk about his hacking journey on Google!

https://t.co/FtkQysEeiC

[zhero; @zhero___]

New short article on a real-world exploitation case rather than pure research, demonstrating how a specific mistake in Next.js can lead to a systematic zero-click SXSS on its latest versions (w/@inzo____):

Re:CACHE - Excessive reflection, type confusion, and 0-click SXSS on Next.js

https://t.co/0JWjH6yzC2

[Nathan Jones @njcve_]

Yay, I was awarded a $143,000 bounty on @Hacker0x01! https://t.co/yGeDpoGirS #TogetherWeHitHarder

It was worth waiting for ;)

[HackerOne @Hacker0x01]

A 100%+ surge in submissions changed how we think about triage. We're rolling out new changes, including TriageOne Smart Routing, so reports reach the right analyst based on skillset, severity, and researcher signal. Here's the full story: https://t.co/1FiOUU0XtU

[Faav @efaav]

@payloadartist Yes it was that simple

[d3d aka dead (dead, мёртв, 死了) @deadvolvo]

As promised, here is paper part 2 of 2 attacking Azure Front Door issues for various bugs.

Smuggling Through the Front Door... Achieving 0-Click XSS with Cache Poisoning
https://t.co/INtcplLVQx

[Faav @efaav]

@deadvolvo dope asf

[d3d aka dead (dead, мёртв, 死了) @deadvolvo]

Azure post 1 of 2 is live now, covering traffic hijacking via Smuggle Caching. Post 2 will focus on a Azure Front Door 0-click XSS that worked on HTTP/1.x and HTTP/2.

Smuggling Through the Front Door... Achieving Global Redirect Poisoning at the Edge
https://t.co/4fTtI2gAdL

[Faav @efaav]

@Hacksore Google might be following Adobe bug bounty wise too…

[Faav @efaav]

. @brutecat posts some of the most high quality interesting blog posts in bug bounty imo https://t.co/0EVKHMvbgf

[DaviMatsuyama @davi1337_]

Here we go. my DEF CON CTF writeup, a little different from the others. Also, thanks to Pwn de Queijo for letting me play with you guys.

https://t.co/6oQBZSKqoy

[Faav @efaav]

Well I'm #10 on the USA Leaderboard now!

[Faav @efaav]

Been grinding out on HackerOne and I beat @rez0__ somehow, not sure how long this'll last though... 😅 (USA Leaderboard)

[Joseph Thacker @rez0__]

Faav is a beastttttt. Keep going bro!!

[Faav @efaav]

Been grinding out on HackerOne and I beat @rez0__ somehow, not sure how long this'll last though... 😅 (USA Leaderboard)

[Faav @efaav]

@brutecat You are fucking insaneeeeeeeee 🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥

[skull @brutecat]

StubZero: $148,337 RCE in Google Cloud Production

https://t.co/m7cBnSTaj4

[shubs @infosec_au]

Adam (@hash_kitten) posted the solution for the XSS challenge he made earlier in the week on our Searchlight Cyber blog here: https://t.co/LwaSDSu64u - pretty interesting behaviour in Chrome's sanitizer API!

[Lupin @0xLupin]

I managed to RCE Fortune 500 companies and made over $50,000 with this technique.

A new npm supply chain technique we just disclosed. The trick is dumb-simple.

We call it npx Confusion.

🧵

[Faav @efaav]

@davi1337_ real