The Secret Life of a Bug Bounty Hunter – Frans Rosén @ Security Fest …
Frans Rosén has reported hundreds of security issues using his big white hat since 2012. He have recieved the biggest bounty ever paid on HackerOne, and is one…
Browser Extension and Login-Leak Experiment
Exploiting CVE-2017-0199: HTA Handler Vulnerability – MDSec
A blog post documenting how to exploit CVE-2017-0199, a vulnerability in the Windows HTA handling.
CSW2017 Geshev Miller logic bug hunting in chrome on android
Logic Bug Hunting in Chrome on Android CanSecWest 17 March, 2017
5haked's research blog
How I hacked Pornhub for fun and profit
![[0day] Text/Plain Considered Harmful – Jan's security blog](https://rdl.ink/render/https%3A%2F%2Fjankopecky.net%2Fwp-content%2Fuploads%2F2017%2F04%2Farticle_textplain.png?width=92&height=&ar=&mode=&dpr=2)
[0day] Text/Plain Considered Harmful – Jan's security blog
Yahoo Bug Bounty: Chaining 3 Minor Issues To Takeover Flickr Accounts | mis
Exploiting MS16-145: MS Edge TypedArray.sort Use-After-Free (CVE-2016-7288)
SensePost | Outlook forms and shells
Our news
The Security Impact of HTTPS Interception
Exploiting the unexploitable with lesser known browser tricks
1252 - MsMpEng: Remotely Exploitable Type Confusion in Windows 8, 8.1, 10,
Bypassing Windows Attachment Manager – rvrsh3ll’s Blog
Publish tweets by any other user — Kedrisec security blog
From Serialized to Shell :: Exploiting Google Web Toolkit with EL Injection
This is a follow up blog post to my previous post on auditing Google Web Toolkit (GWT). Today we are going to focus on a specific vulnerability that I found ...
Browser's XSS Filter Bypass Cheat Sheet · masatokinugawa/filterbypass Wiki
Contribute to filterbypass development by creating an account on GitHub.
Exploiting an integer overflow with array spreading (WebKit) - phoenhex tea
How I got 5500$ from Yahoo for RCE – Th3G3nt3lman – Medium
Hi Guys,
Pwn2Own: Safari sandbox part 1 – Mount yourself a root shell - phoenhex tea
Hack Patch!: Is your ePub reader secure enough?
Hi, this is my first (and last?) blog post in English. Sorry if there's any grammatical mistake, I'm not too fluent in English. Today, I'll write about ePub file with some of my findings in ePub readers. So What's ePub file? EPUB is an e-book file format with the extension .epub that can be downloaded and read on devices like smartphones, tablets, computers, or e-readers. And in technical implementation An EPUB file is a ZIP archive that contains, in effect, a website—including HTML files, images, CSS style sheets, and other assets. It also contains metadata. EPUB 3 is the latest version....
This book reads you - exploiting services and readers that support the ePub
“We use the ePub format - it is the most popular open book format in the world. We’re very excited about this.” - Steve Jobs, 2010 (original iPad launch)
Security: Black box discovery of memory corruption RCE on box.com
Overview Robust evidence existed for the presence of a memory corruption based RCE (remote code execution) on box.com servers. The most l...
1225 - LastPass: global properties can be modified across isolated worlds,
Hack Patch !: PDF Special Function (Redirect)
今回は今年一番ハマったPDFについて書きます。 先ずは軽い構造の説明から！ 上記はJavaScriptが実行できる最小限のPDFの例です。 上記の例では、ル ートオブジェクト(1 0 obj)内にPDFのページおよびPDFを開いた際に実行するアクション(/...
Reversing the Balong M3/MCU Console – Lightning the Path to Ring 0 | Advanc
Note: I’ve done some more work since this was written. You can find updates here, and a complete compromise here. This weekend, I spent some time continuing my investigation of a Huawei E5573…
Rooting a Printer: From Security Bulletin to Remote Code Execution - Blog |
Printers. They are everywhere. In big businesses. In small businesses. In our homes. In our schools. Wherever you go, there they are.
#243470 another local file disclosure via ffmpeg - HackerOne
### Summary The fix for https://hackerone.com/reports/242831 can be easily bypassed. It looks like you've banned `file://` substring, which is not enough. ### Repro steps 1. Download `gen_avi.py`...
MQTT - IoT - explore & exploit - BSidesTLV 2017 (June 2017)
"Connect all the things!" is, for some time now, the main theme when talking about IoT devices, solutions and products. Our eagerness to find new, at times - i…
GitHub - neex/ffmpeg-avi-m3u-xbin
Contribute to ffmpeg-avi-m3u-xbin development by creating an account on GitHub.
phdays ffmpeg - Google Презентации
Attacks on video converters: a year later Emil Lerner Pavel Cheremushkin