FD

@0xReconless

[PortSwigger Research @PortSwiggerRes]

The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2023! https://t.co/KhiMEHP1dh

[FD @filedescriptor]

Google(Chromium) suddenly decided to pay me for a UI Spoofing bug reported 3 years that had been idle, and from reward potential to no potential to potential. Ok thanks?

[PortSwigger Research @PortSwiggerRes]

The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2022!
https://t.co/NXiHK9eUjT

[7ASecurity @7aSecurity]

This #privacy audit looks like the first LeaveHomeSafe #pentest ever, way below commercial apps:
Broken SSL validation, SD Card Leaks, 2FA Logic bypass, Screenshot leaks, several Face Recognition artifacts, etc. https://t.co/ZdwRW3vy5G

[VXCON @vxresearch]

We are organising VXCON on 27 August. Please feel free to submit CFP.
https://t.co/d91c2tEEoC

[TrendAI Zero Day Initiative @thezdi]

Confirmed! Masato Kinugawa demonstrated a 3-bug chain of injection, misconfiguration and sandbox escape on Microsoft Teams to earn $150K and 15 Master of Pwn points.

[Renwa @RenwaX23]

New writing about the story of 3 bug bounty reports in which I chain low severity bugs together for higher impact and less known browser tricks.

Includes CSS injection, Self-XSS, Drag-Drop XSS, Cookie Bomb, Login-Logout-CSRF, and more...

https://t.co/vPpnuKPU8g

[Ed @EdOverflow]

After 5 years of work, security.txt is officially an RFC. I am pleased to announce RFC 9116: https://t.co/uIqSRo28ak.

I would like to use this opportunity to thank those who made this possible. Thank you. ❤️

[HACxyk. @Hacxyk]

We found a way to spoof ENS domains and were awarded a $15k bug bounty by
@ensdomains

👇Check out the write-up
https://t.co/upGxncusgm

[FD @filedescriptor]

@intigriti F

[PortSwigger Research @PortSwiggerRes]

The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2021!

https://t.co/t3pMqnLt2T

[Ed @EdOverflow]

New blog post: "What Bypassing Razer's DOM-based XSS Patch Can Teach Us" — https://t.co/XnuUUFgsS3.

[FD @filedescriptor]

@garethheyes XSS wordle when?

[FD @filedescriptor]

Why do we need NFT on social media??

[FD @filedescriptor]

@luketucker @Hacker0x01 I'll miss you!

[FD @filedescriptor]

@freddyb typeof document.all != "function" && document.all(0)

[FD @filedescriptor]

@terjanq Thanks for the heads up it's back!

[FD @filedescriptor]

@freddyb @secalert how about https://t.co/uUiiu5wMxJ https://t.co/HO8L0lgnIH https://t.co/YtLPAy10sd https://t.co/CuVBzHFIdr ...

[FD @filedescriptor]

@garethheyes Also

function solve(obj, property){
if(typeof obj != 'function') {
obj(property).innerHTML = '<img src=1 onerror="alert(`You win`)">';
} else {
alert('You must try harder than that.');
}
}

[FD @filedescriptor]

@garethheyes @aynap6 :D