Archive

Сервис позволяющий создать USA Virtual card для оплаты рекламы и прочих услуг в интернете без верификации личности. Содержание 1. Обзор и регистрация 2. Пополнение баланса 3. Выпуск виртуальной карты Обзор и регистрация Virtual Credit Card Service CVC Wallet – “Простой способ получить виртуальную карту онлайн Универсальные решения для получения виртуальной карты и осуществления платежей через...

You don’t know me, but there’s a good chance I know you.

Разбираем на примере, как пробить заклоаченную ссылки и увидеть всю связку целиком. Ниже пример на основе платных сервисов, просто потому что удобнее и они уже есть под рукой, антидетект можно заменить на FireFox и плагин для Socks proxy, на что заменить прокси, думать уже вам. Чтобы спалить всю рабочую связку недостаточно увидеть только крео. Большую...

In this post I'll give details about how to exploit CVE-2020-6449, a use-after-free (UAF) in the WebAudio module of Chrome that I discovered in March 2020. I'll give an outline of the general strategy to exploit this type of UAF to achieve a sandboxed RCE in Chrome by a single click (and perhaps a 2 minute wait) on a malicious website.

exploit NAT/firewalls to access TCP/UDP services bound on a victim machine

A few months ago, I discovered a remote code execution issue in the Discord desktop application and I reported it via their Bug Bounty Prog...

MONOSPACE: Flip dots with feelings, a JavaScript demo in 1021 bytes, winner of the 1024 bytes demo competition at Assembly 2020.

TL;DR

In this blogpost I’ll explain my recent bypass in DOMPurify – the popular HTML sanitizer library. In a nutshell, DOMPurify’s job is to take an untrusted HTML snippet, supposedly coming from an end-user, and remove all elements and attributes that can lead to Cross-Site Scripting (XSS). This is the bypass: Believe me that there’s not ...

Prototype pollution is a vulnerability that is specific to programming languages with prototype-based inheritance (the most common one being JavaScript). While the bug is well-known for some time now, it lacks practical examples of exploitation. In this post, I'm showing how to exploit it to achieve Remote Code Execution in Kibana.

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities - sslab-gatech/pwn2own2020

Text rendering quality is an amazingly complicated topic, with hardware, settings, fonts, differing rendering engine philosophies, and user preferences all playing key roles. In some cases, however…

Search and explore code

In this article I’ll cover the prototype pollution vulnerability and show it can be used to bypass client-side HTML sanitizers. I’m also considering various ways to find exploitation of prototype pollution via semi-automatic methods. It could also be a big help in solving my XSS challenge. Prototype pollution basics Prototype pollution is a security vulnerability, ...

Finding Google Meet phone numbers and bruteforcing PINs to join random meetings

We are in 2020 and the US president is about to ban TikTok, a video-sharing social network mobile app, because “it poses a risk to US…

A story about macOS File Quarantine, 10years old bug, OneDrive entitlements and UX Security in apps.

Quarantine nights Exploring File Quarantine handling in macOS Apps / @Metnёw