Top Tweets for #Security_Tip

over 1 year ago

#Security_Tip: Manually deserializing accounts in your @solana program? Don't forget the 8-byte discriminator check! I've seen protocols get rekt because they only checked account ownership but skipped discriminator validation. Why? Those first 8 bytes are like your account's DNA - they tell you exactly what type of account you're dealing with. Without this check, attackers can pull a sneaky move: passing a completely different account that happens to have the same data layout. Imagine trying to process a vault account but getting fed a stake account instead - chaos! 💥 Quick example: If your vault account stores `amount` as a u64, an attacker could pass any account that starts with a u64. The program would happily process it, leading to... well, you can imagine 😅 Always validate those first 8 bytes! and look for this #bug if you are hunting 🛡️ #SolanaSec #Web3Security

elliot_1698's tweet photo. #Security_Tip: Manually deserializing accounts in your @solana program? Don't forget the 8-byte discriminator check!
I've seen protocols get rekt because they only checked account ownership but skipped discriminator validation. Why? Those first 8 bytes are like your account's DNA - they tell you exactly what type of account you're dealing with.
Without this check, attackers can pull a sneaky move: passing a completely different account that happens to have the same data layout. Imagine trying to process a vault account but getting fed a stake account instead - chaos! 💥
Quick example: If your vault account stores `amount` as a u64, an attacker could pass any account that starts with a u64. The program would happily process it, leading to... well, you can imagine 😅
Always validate those first 8 bytes! and look for this #bug if you are hunting 🛡️
#SolanaSec #Web3Security

808

Ogun State Police Command

@OgunPoliceNG

almost 4 years ago

#Security_Tip. Always let someone know your whereabouts or where you are going. Give the name and other useful information of the person you are going to meet, in case of any eventuality. Happy new month to all and sundry. N:B Always remember "Police Is Your Friend" 👋

Musab Alharany @3mSecurity

over 4 years ago

it's so smart payload to open redirect. Thank you so much @YogoshaOfficial #open_redirect #websecurity #BugBounty #CyberSecurtiy #security_tip

Yogosha @YogoshaOfficial

over 4 years ago

[HACKER TIP] If you are testing Open Redirect but there is a blacklisted character, you can test it with a chinese dot to bypass it or any other Unicode Character. example: redirect_to=////evil%E3%80%82com #bugbounty #hackertips #openredirect

YogoshaOfficial's tweet photo. [HACKER TIP] If you are testing Open Redirect but there is a blacklisted character, you can test it with a chinese dot to bypass it or any other Unicode Character.
example:
redirect_to=////evil%E3%80%82com
#bugbounty #hackertips #openredirect https://t.co/eXeEwOp13P

180

IT Security C&T @ITSecurityCT

about 10 years ago

How to make your home Wi_Fi router secure? #Secure #WIFI #Encryption #Security_Tip

Top Tweets for #Security_Tip

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users