Pinned Tweet
I did a writeup for Real World CTF The cult of 8 bit challenge. I solved it in an unintended way with the Same Origin Method Execution attack. In the writeup, you can find a simple example of the attack and how it can be used on live targets.
sh1yo.art/ctf/thecultof8bit/
Alexander Mironov retweeted
MXSS Explained Part 1: Why Server-Side HTML Sanitizers Are Doomed to Fail with this XSS!
In this video, I dive into how sanitizers work, discuss the first known MXSS in IE, and showcase an MXSS vulnerability in the popular Node.js module, sanitize-html.
youtu.be/aczTceXp49U
Alexander Mironov retweeted
Neplox' first Web3 public audit results 🚀 Thank you @immunefi for great support along the way with all the issues we encountered. This was definitely one of the most comfortable bugbounty experiences for us.
Here's to more productive audits with Immunefi! 🍾
Alexander Mironov retweeted
A good start on immunefi for us.
@neploxaudit
+95k$
The $500k Shardeum: Core (@shardeum) Audit Competition is finished and results have been posted!
Our SRs discovered 38 criticals!
🥇 @Infosec_us_team: $108,385
🥈 @slonser_: $95,054
🥉 @doxtopzhivago: $82,998
Check the link below for the full leaderboard!
👇
Alexander Mironov retweeted
Everyone knows that the RFCs for email addresses are crazy. This post will show without doubt that you should not be following the RFC.
portswigger.net/research/spl…
Alexander Mironov retweeted
The whitepaper is live! Listen to the whispers: web timing attacks that actually work. Read it here ->
portswigger.net/research/lis…
Alexander Mironov retweeted
I recently developed and posted about a technique called "First sequence sync", expanding @albinowax's single packet attack.
This technique allowed me to send 10,000 requests in 166ms, which breaks the packet size limitation of the single packet attack.
flatt.tech/research/posts/be…
Any ideas on how to make this js valid?
--
first_word second_word: "user_input";
alert();//"
--
Because of space between first two words JS file throws an error.
Alexander Mironov retweeted
Great research from @scryh_!
I was keeping it for a CTF challenge, but it's probably too late now :p
This trick is so powerful that it can be used to bypass most (if not all) server-side HTML sanitizers in the absence of a charset within the Content-Type response header 🤯
🔥 XSS on any website with missing charset information? 😳
Attackers may leverage the ISO-2022-JP character encoding to inject arbitrary JavaScript code into a website. Read more in our latest blog post:
sonarsource.com/blog/encodin…
#appsec #security #vulnerability
Alexander Mironov retweeted
🔥 XSS on any website with missing charset information? 😳
Attackers may leverage the ISO-2022-JP character encoding to inject arbitrary JavaScript code into a website. Read more in our latest blog post:
sonarsource.com/blog/encodin…
#appsec #security #vulnerability
Alexander Mironov retweeted
Just released my blog post "Bidding Like a Billionaire - Stealing NFTs With 4-Char CSTIs"! It's about a very impactful and technically interesting client-side bug I found in a major NFT site.
matanber.com/blog/4-char-cst…
Alexander Mironov retweeted
After months of work (and bugs), @maxenceschmitt has finally released his fabulous research. Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery or #CSPT2CSRF.
Full paper here: doyensec.com/resources/Doyen…
Summary in blog.doyensec.com/2024/07/02…
Alexander Mironov retweeted
happy to release my new article entitled:
Next.js and cache poisoning: a quest for the black hole
zhero-web-sec.github.io/rese…
good reading;
Alexander Mironov retweeted
The simple <script> XSS didn’t work? Don’t give up before trying some mXSS magic🪄.
Get to know the fundamentals of this bug class on your way to becoming a master of sanitizer bypasses:
sonarsource.com/blog/mxss-th…
#appsec #security #vulnerability #mXSS
Alexander Mironov retweeted
Hunting bugs in Nginx JavaScript engine (njs)
0xbigshaq.github.io/2024/05/…
Alexander Mironov retweeted
When I first started out in V8 / Chrome exploitation I spent quite a bit of time in writing a custom shellcode templating engine, and shellcode payloads to go along with it. A couple of years later and this investment has more than paid for itself (literally).
Alexander Mironov retweeted
Almost 700 hours into bug bounties. Out of 40 programs I spent time on, I only got paid on 5.
There's a pattern I noticed and I think it's worth sharing.
Here's my analysis: (a thread - 1/x)
#bugbounty #bugbountytips
Alexander Mironov retweeted
My new Research
Email attacks.
- C# 0day
- spoofing emails
e.t.c.
blog.slonser.info/posts/emai…
Alexander Mironov retweeted
🧧 Our researcher Igor Sak-Sakovskiy has discovered an XXE in Chrome and Safari by ChatGPT!
Bounty: $28,000 💸
Here is the write-up 👉
swarm.ptsecurity.com/xxe-chr…
