Gábor Molnár

Information Security Engineer @Google, CTFer @SpamAndHex, bug hunter, web technology enthusiast.

[!SpamAndHex @SpamAndHex]

Continuing the tradition of changing start dates, we have moved the start of #SpamAndFlags 2 to 2020.05.08 18:00 UTC. But it was also E L O N G A T E D to 48 hours to accomodate the 20+ flags. See you at https://t.co/yG4k8XHbbH

[!SpamAndHex @SpamAndHex]

Pro tip to make time fly by while social distancing: think about all the ways u could spend your winnings from the 2nd SpamAndFlags CTF coming on May 9th https://t.co/ZyAK6OYMvX
• 1st place: $1337
• 2nd: $694.20
• 3rd: $420.69
• all others: free zoom chello lessons by @_2can

[Google VRP (Google Bug Hunters) @GoogleVRP]

Bug of the Week! XSS in GMail’s #amp4email implementation via DOM Clobbering by @SecurityMB: https://t.co/cQb9xme0I8

[avatao @theavatao]

[CHOOSE YOUR ADVENTURE THREAD] #CyberSecurityAwarenessMonth

You’re a pentester for Secflix. The largest streaming platform in the world. 🌐

Multiple profile pictures of users are being replaced. There’s a breach & you need to act now. What do you do next?🤔

Choose an option⬇️

[Eduardo Vela @sirdarckcat]

Thanks for working with us @LiveOverflow :-). We are huge fans and hope we can do more of this in the future! 1/n

[Google VRP (Google Bug Hunters) @GoogleVRP]

We opensourced most of the Google CTF 2018 Finals challenges: https://t.co/KgQhmlYy9d

[koto @kkotowicz]

Looking for an internship? I can surely recommend our team at Google, the internships are very hands-on, and we have exciting projects queued up. But the most important part - you can beat us in fußball :)

[Gábor Molnár @molnar_g]

@HornUnak I guess just a year should be enough in most cases. I mean, one would have to brute force at least 2000 variations if you choose a historic year.

[Fermin J. Serna @fjserna]

"Introducing the Tink cryptographic software library"
Great job @XorNinja and team https://t.co/hjpX4FYXNU

[Gábor Molnár @molnar_g]

@sirdarckcat @buherator @officialmcafee The Hungarian one is not the one who won, they were just nominated: @bkkbudapest

[@[email protected] @buherator]

Another Hungarian achievement: BKK was also nominated :)

[Ian Beer @i41nbeer]

Hi @tim_cook, I've been working for years to help make iOS more secure. Here's a list of all the bugs I reported which qualified for your bug bounty since its launch, could you invite me to the program so we can donate this money to @amnesty?

[Gareth Heyes \u2028 @garethheyes]

The XSS Filter has disappeared from Edge! Even when you switch it on. It still works in block mode though. https://t.co/6emBQyZUdI

[Eduardo Vela @sirdarckcat]

We just opensourced most of the #GoogleCTF 2018 challenges. Enjoy! :) https://t.co/DJRgznDcQ3

[Gábor Molnár @molnar_g]

And it turns out he missed some of the traps in the first video, now covered in a follow-up :) https://t.co/BFzugfv9xX

[LiveOverflow 🔴 @LiveOverflow]

I got so much wrong in my video about the JS Safe 2 challenge from the #googlectf, that I had to make an update video 😅

Now the whole code makes complete sense! Thanks for everybody providing feedback! ❤️

https://t.co/92j2MRrPZQ

[Gábor Molnár @molnar_g]

Nice "writeup" about my JS Safe 2.0 #GoogleCTF challenge from @LiveOverflow https://t.co/ZAw8moRRzi

[LiveOverflow 🔴 @LiveOverflow]

I didn't have much time to play the #googlectf but I was persuaded by @_johnhammond to play a little bit :D
So here is the video write-up for the JavaScript crackme "JS Safe 2.0".

https://t.co/UkNY5jee50

[Google VRP (Google Bug Hunters) @GoogleVRP]

Without further ado, here is the bug of the week (BOTW): XSS in https://t.co/DIF1IYr3ZG by @SecurityMB.

https://t.co/TroAhBMO2X

[Eduardo Vela @sirdarckcat]

We will give 32 rewards to the best write-ups for GoogleCTF challenges. If you solved a challenge on the quals, submit a write-up before June 30! We have only received 25 so far, easy money! https://t.co/2SP7o5a7Ak

[Gábor Molnár @molnar_g]

@kusano_k IIRC it's a file on the holey beep machine

[Gynvael Coldwind @gynvael]

In the topic of #GoogleCTF - I will be showing how to solve all of the Beginners Quest challenges on a special livestream tomorrow (Tue), 8pm CEST:
https://t.co/dPf8h2z3h0
(recording will be available)