Alexander Mironov

playing ctf with @C4TBuTS4D

[Alexander Mironov @sh1yo_]

I did a writeup for Real World CTF The cult of 8 bit challenge. I solved it in an unintended way with the Same Origin Method Execution attack. In the writeup, you can find a simple example of the attack and how it can be used on live targets.
https://t.co/pIxOUAfRQR

[s1r1us (mohan) @S1r1u5_]

MXSS Explained Part 1: Why Server-Side HTML Sanitizers Are Doomed to Fail with this XSS!

In this video, I dive into how sanitizers work, discuss the first known MXSS in IE, and showcase an MXSS vulnerability in the popular Node.js module, sanitize-html.

https://t.co/4kghaCIYBc

[Neplox @neploxaudit]

Neplox' first Web3 public audit results 🚀 Thank you @immunefi for great support along the way with all the issues we encountered. This was definitely one of the most comfortable bugbounty experiences for us.

Here's to more productive audits with Immunefi! 🍾

[slonser @slonser_]

A good start on immunefi for us.
@neploxaudit
+95k$

[publiclyDisclosed @disclosedh1]

TikTok disclosed a bug submitted by @sh1yo_: https://t.co/OiZXEanvtl #hackerone #bugbounty

[d0nut 🦀 @d0nutptr]

If you're new to bug bounty, you should not learn recon.

[Gareth Heyes \u2028 @garethheyes]

Everyone knows that the RFCs for email addresses are crazy. This post will show without doubt that you should not be following the RFC.

https://t.co/HL0g9f7QEA

[James Kettle @albinowax]

The whitepaper is live! Listen to the whispers: web timing attacks that actually work. Read it here ->
https://t.co/cBRLNpOZ6y

[RyotaK @ryotkak]

I recently developed and posted about a technique called "First sequence sync", expanding @albinowax's single packet attack.

This technique allowed me to send 10,000 requests in 166ms, which breaks the packet size limitation of the single packet attack.

https://t.co/puM7hZWIlE

[Alexander Mironov @sh1yo_]

Any ideas on how to make this js valid?

--
first_word second_word: "user_input";
alert();//"
--

Because of space between first two words JS file throws an error.

[Kévin GERVOT (Mizu) @kevin_mizu]

Great research from @scryh_!

I was keeping it for a CTF challenge, but it's probably too late now :p

This trick is so powerful that it can be used to bypass most (if not all) server-side HTML sanitizers in the absence of a charset within the Content-Type response header 🤯

[Sonar Research @Sonar_Research]

🔥 XSS on any website with missing charset information? 😳

Attackers may leverage the ISO-2022-JP character encoding to inject arbitrary JavaScript code into a website. Read more in our latest blog post:

https://t.co/Ji3V0fK5b6

#appsec #security #vulnerability

[Matan Berson @MtnBer]

Just released my blog post "Bidding Like a Billionaire - Stealing NFTs With 4-Char CSTIs"! It's about a very impactful and technically interesting client-side bug I found in a major NFT site.
https://t.co/Jjrbwjhtcy

[Luca Carettoni @lucacarettoni]

After months of work (and bugs), @maxenceschmitt has finally released his fabulous research. Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery or #CSPT2CSRF.

Full paper here: https://t.co/vXjkZBq35Q

Summary in https://t.co/aOQfr6qD8s

[zhero; @zhero___]

happy to release my new article entitled:

Next.js and cache poisoning: a quest for the black hole

https://t.co/v7aqiYJjyX

good reading;

[Sonar Research @Sonar_Research]

The simple <script> XSS didn’t work? Don’t give up before trying some mXSS magic🪄.
Get to know the fundamentals of this bug class on your way to becoming a master of sanitizer bypasses:

https://t.co/ZBzN4g0o3s

#appsec #security #vulnerability #mXSS

[The Bug Bounty Hunter @tbbhunter]

Hunting bugs in Nginx JavaScript engine (njs)

https://t.co/zLkM6B9Y5n

[Alex Chapman @ajxchapman]

When I first started out in V8 / Chrome exploitation I spent quite a bit of time in writing a custom shellcode templating engine, and shellcode payloads to go along with it. A couple of years later and this investment has more than paid for itself (literally).

[Shreyas Chavhan @shreyas_chavhan]

Almost 700 hours into bug bounties. Out of 40 programs I spent time on, I only got paid on 5.
There's a pattern I noticed and I think it's worth sharing.

Here's my analysis: (a thread - 1/x)

#bugbounty #bugbountytips

[slonser @slonser_]

My new Research
Email attacks.
- C# 0day
- spoofing emails
e.t.c.
https://t.co/H6tFbZy9CI

[PT SWARM @ptswarm]

🧧 Our researcher Igor Sak-Sakovskiy has discovered an XXE in Chrome and Safari by ChatGPT!

Bounty: $28,000 💸

Here is the write-up 👉
https://t.co/EMnydNEoed