Ivan Chalykin

Охотник на жучков

[Ivan Chalykin @igc_iv]

@w34kp455 only realtime demo, only hardcore!

[Sachin Thakuri @sachinnthakuri]

A blog by me & @1lastBr3ath discussing our findings we presented in Black Hat Europe #BHEU talk titled “Exploiting CSP in Webkit to break Authentication/Authorization”. Find out how we made more than $100k in bug bounties with a bug ignored by Apple. https://t.co/vN2b5v7k5s

[Ivan Chalykin @igc_iv]

@hackerscrolls Also there is an article about it from @antyurin
https://t.co/TESuKtuZsh

[Hack3rScr0lls @hackerscrolls]

Found a hidden HTTP param? Look deeper, maybe there is a mass assignment/autobinding vulnerability.

Sometimes changes in objects are hidden too and you need to closely explore the app.

Source:
https://t.co/9lURrqkxVh

#CyberSecurity #BugBountyTip #BugBounty

[Ivan Chalykin @igc_iv]

@kannthu1 Yes, but only two months :)

[Hack3rScr0lls @hackerscrolls]

We often get confused how Samesite affects cookies in different attacks in modern browsers. So, we have made a memo and now share it with you.

#CyberSecurity #BugBountyTip #BugBounty

[Hack3rScr0lls @hackerscrolls]

We have combined all the tricks we know about SSRF into a single mindmap.

If we missed something, write about it in the comments!

High resolution: https://t.co/Gub9KUoiGY
XMind source: https://t.co/pAtT0WVFAY

#CyberSecurity #BugBountyTip #BugBounty

[МимоКрокодил @m1mo_croc]

Вышел выпуск подкаста №4.
Наконец cобрались обсудить давно интересующу нас тему: менджмент и бизнес - особенности данных веток таланов для пентестера. Есть ли вобще другие?

Уже разлит по площадкам
https://t.co/llifUd6Smx
https://t.co/gIafCnjCoP
https://t.co/lYt7882Skq

[Sergey Toshin @_bagipro]

#bugbountytips
One more way to increase the impact of opening arbitrary URLs in a built-in WebView is Universal XSS. They are widespread on #android! Steps:

[Hack3rScr0lls @hackerscrolls]

Have you ever wonder about fast and easy-to-use SOCKS proxy over DNS?

Here it is
https://t.co/2eVTTRvbtw from @fbk_cs

You don't even need to compile it!

#CyberSecurity #RedTeam #Pentest

[Hack3rScr0lls @hackerscrolls]

CSRF in 120 seconds!

As you remember Cookies without SameSite are treated as SameSite=LAX in Chrome.

But there is one exception that can be used as a temporary policy bypass.

More detailed examples: https://t.co/zQoCeQrGfF by @RenwaX23

#CyberSecurity #BugBountyTip #BugBounty

[Ivan Chalykin @igc_iv]

@S1r1u5_ Nice nice! But is it possible to clear history?

[Hack3rScr0lls @hackerscrolls]

Using other hosts as a gateway, sometimes, you can get access to other VLANs or bypass the firewall.

That is a task for gateway-finder!

Check the improved version by @whitel1st:
https://t.co/xyXxMdYHGA

#CyberSecurity #Pentest #RedTeam

[Hack3rScr0lls @hackerscrolls]

Were you surprised when your cross-domain attack didn't work?

Meet the new reality with SameSite Cookies.

Now Chrome and Safari recognize Cookies without the SameSite attribute as SameSite=Lax by default.

#CyberSecurity #BugBounty #BugBountyTip

[Ivan at Wallarm / API security solution @d0znpp]

Meet JWT heartbreaker! A Burp extension that finds thousands of weak JWT secrets https://t.co/pI2HSJIIyG

[Hack3rScr0lls @hackerscrolls]

Got root access to a server? Run 3snake and grab the attention to the server. Wait for admins and grab their ssh passwords!

https://t.co/L6yPqunVpy

Trick by @cherboff

#redteam #cybersecurity #Pentest

[Hack3rScr0lls @hackerscrolls]

Yet another trick about CORS!

Do not forget to check Origin: null

#CyberSecurity #BugBountyTip #BugBounty

[Hack3rScr0lls @hackerscrolls]

Incredible mindmap about hacking iOS applications by @hd_421

Pay attention, we have prepared two versions:
1. Full Security Assessments
2. Shorter BugBounty version

XMind source:
https://t.co/52We9OSiFI

#CyberSecurity #BugBountyTip #BugBounty #iOS

[Hack3rScr0lls @hackerscrolls]

Found a Stored Self-XSS? Chain it with Login/Logout CSRF and increase the impact!

Few examples:
https://t.co/K3Wo9RObmJ
https://t.co/ogj06AysSN
https://t.co/Ut8EN9qkcc

#BugBounty #CyberSecurity #BugBountyTip #XSS