realansgar

Inactive here, go to the other sites:

[realansgar @realansgar]

I'm leaving here, pls follow me on the blue site or the purple site :)

[Rebane @rebane2001]

after seeing @garethheyes's post about making tic-tac-toe in just css (no js, no html), i decided to give it a shot too!

i ended up using a different approach involving custom properties and animations for state and mouse input, and it works pretty well!

https://t.co/lTBOURGLmT

[Sonar Research @Sonar_Research]

Beware the Cookie Monster! 🍪

We found a vulnerability in the Cyberhaven browser extension that allowed attackers to steal any cookie from their victim. Learn about the details in our latest blog post:

https://t.co/RlbvYQglCO

#appsec #security #vulnerability

[Jorian @J0R1AN]

Inspired by @PaulosYibelo, I thought about what improvements I could make to trick users into pressing buttons that perform sensitive actions. Finding some vulnerable targets along the way!
Read the details in my latest blog post below:
https://t.co/Bl7UxxZ4qV

[realansgar @realansgar]

@artsploit wow this is so well-written 👏

[Michael Stepankin @artsploit]

Last year, I committed to uncovering critical vulnerabilities in Maven repositories. Now it’s time to share the findings: RCE in Sonatype Nexus, Cache Poisoning in JFrog Artifactory, and more! Read it all below 🧵

[realansgar @realansgar]

@LiveOverflow <img name=domain><script>alert(document.domain)</script>
another nitpick reason to not rely on document.domain :D

[realansgar @realansgar]

@LiveOverflow I like alert(origin), it's shorter :)

[404 Media @404mediaco]

Candy Crush, Tinder, MyFitnessPal: See the thousands of apps hijacked to spy on your location

A hack of location data company Gravy Analytics has revealed which apps are—knowingly or not—being used to collect your information behind the scenes.

🔗 https://t.co/f3906gLVC0

[Orange Tsai 🍊 @orange_8361]

The detailed version of our #WorstFit attack is available now! 🔥
Check it out! 👉 https://t.co/EWlBSgXhpx

cc: @_splitline_

[Sonar Research @Sonar_Research]

What a year! We look back and summarize our security research highlights of 2024:

🪲 Vulnerabilities in Jenkins, SourceForge, Joomla, and much more
🎙️ 7 talks, including DEF CON and Hexacon
🏆 5 nominations and 1 award

https://t.co/EYfGfOn9ni

#research #vulnerability #appsec

[watchTowr @watchtowrcyber]

have you been using webshells recently? we've been watching you hack govts and more.

join us on our latest ill-advised adventure...

until next time.. :-)

https://t.co/Cnh524hb7h

[Stuart Larsen @c0nrad_jr]

Some quick thoughts on why people shouldn't be too hard on themselves when it comes to CTFs. https://t.co/eqGuT0R9si

[Moritz Sanft @stdoutput]

After quite some CTFs and challenges solved, this awesome challenge from hxp 38C3 CTF is the first one I ever did a writeup for. Check it out:

https://t.co/s4poL3TvaC

#38C3 #ctf #hxpctf

[realansgar @realansgar]

I'm at 38C3, if anybody wants to chat, meet me at the FluxFingers table or call 9009 :D

[realansgar @realansgar]

@Gi7w0rm RUB detected 👀 Glückwunsch!

[realansgar @realansgar]

Be sure to check out this XSS chall by @J0R1AN , it's a funny one :D

[Intigriti @intigriti]

First blood goes to @realansgar 🩸

There's still plenty of prizes up for grabs though! 🏆

Who else can solve this challenge? 😎

[realansgar @realansgar]

mXSS fans should read this for the latest DOMPurify shenanigans :)

[Yaniv Nizry @YNizry]

🧬🔬 I wrote about this finding a bit more extensively in my blog:
https://t.co/3CeEnbSutq

#mXSS #XSS

[GMO Flatt Security Inc. @flatt_sec_en]

🚨 Try your hand at our latest XSS Challenge! 🚨

Can you get alert(origin) executed in each problem?

This challenge features 3 problems crafted by our security experts @hamayanhamayan , @ryotkak , and @kinugawamasato .

Ready to dive in? 🧠

https://t.co/qyOZTfGcV0

[realansgar @realansgar]

@fransrosen @jobertabma @martenmickos @Hacker0x01 As @martenmickos awoke one morning from uneasy dreams he found himself transformed in his bed into a gigantic insect.