Archive

This blogpost describes how I got annoyed by vulnerabilities in 3rd party Windows applications, which allowed to execute local files but wi...

Shopify infrastructure is isolated into subsets of infrastructure. @0xacb reported it was possible to gain root access to any container in one particular subset by exploiting a server side request...

Testing

Homepage:

The Bug Hunters Methodology v3(ish) Video: https://www.youtube.com/watch?v=Qw1nNPiH_Go

Earlier this week, I stumbled upon a tweet that caught my interest:

As an attacker, initial access can prove to be quite the challenge against a hardened target. When selecting a payload for initial access…

In this blog post René Freingruber (@ReneFreingruber) from the SEC Consult Vulnerability Lab shares different filesystem tricks which were collected over the

Vulnerability discovery is the first stage of the exploit development lifecycle. The duration of this phase is open-ended because the search space, code qual...

I accidentally discovered a huge browser security bug. Here's what it does, and how I discovered it…

Внимание — это фривольный перевод заметки о том, как именно Jonathan Bouman нашёл публичный AWS S3, который использовался на одном из поддоменнов apple.com.

While browsing Twitter I’ve noticed ElectronJS remote code execution vulnerability in protocol handler. That sounds severe. As stated in…

Last year, I got an invitation from a private bug bounty program on HackerOne platform. I said let’s give it a try since I had some free time and here is the...