Researcher, and security person at @intruder_io. Hack dumber. He/him
Joined June 2018
- Tweets36
- Following256
- Followers656
- Likes129
And here’s part 2, presenting new techniques for reliable, split-second DNS rebinding in Chrome and Safari intruder.io/research/split-s…
Here's part 1, detailing how I hacked my company's own product using DNS rebinding:
intruder.io/research/we-hack…
Here's part 1, detailing how I hacked my company's own product using DNS rebinding:
intruder.io/research/we-hack…
Excited to be talking about new DNS rebinding techniques at @BlackHatEvents #BHEU next week. The research for this talk will be released in 2 parts on the @intruder_io research blog - keep an eye out for part 1 on Thursday tinyurl.com/bdzxesd3
Excited to be talking about new DNS rebinding techniques at @BlackHatEvents #BHEU next week. The research for this talk will be released in 2 parts on the @intruder_io research blog - keep an eye out for part 1 on Thursday tinyurl.com/bdzxesd3
A while ago I decided to try take on a big challenge and work out how to detect prototype pollution black-box. One thing I’m very happy with from this research is the simplicity of the solution I found
Prototype pollution can be a dangerous bug, but it's hard to detect in real-world scenarios without the source code. In the latest blog, our researcher, @_danielthatcher, discusses a new technique for detecting prototype pollution in black-box situations:hubs.li/Q01Cs9L70
As a newbie pentester I read the RFC for GUIDs out of a fear that I wasn’t testing them correctly. A few years later, it paid off.
GUIDs are everywhere - but there are hidden dangers when using them as they're designed for their uniqueness, not their security. Find out more in the latest blog from our research team: hubs.li/Q01pyz_r0
#guid #vulnerabilityscanning #CyberSecMonth
The technique isn’t new, but the vast majority of pentesters I’ve spoken to don’t know about it, so I thought it worth sharing with an example from a pentest. I’ve also created a tool to help you exploit this issue github.com/intruder-io/guidt…
Daniel Thatcher retweeted
This may in fact have been a good idea... but I think @mopman deserves some kind of recognition for a beautifully crafted social hack that it would appear has actually resulted in an amendment to an Act of Parliament. Nice work.
I was lucky enough to catch this talk at BH, and it was one of the highlights of the conference for me. Great research, and really well presented
Just finished ElectroVolt talk at #DEFCON30. Was super glad to see the entire room full. Thanks a lot for coming AND supporting! ⚡️
Hope you enjoyed the talk and can use the knowledge in your day to day work.
Feel free to check out electrovolt.io for POCs.
#DC
Heading off to Vegas for the first time. If you see me about, say hi. I’m the lanky blond British guy with round black glasses.
If you have stored self-XSS and login CSRF you can probably do something interesting, but you have to do slightly more than this tip says. Here's an example I put together against Moodle a few years ago: blog.long.lat/2019/04/09/obt…
Found a self-XSS? 🤨 Don't worry!
Let's magically turn that into a valid XSS by sprinkling some CSRF on top of it! 🧙♂️
#bugbounty #bugbountytips 👇
This example works by using the self-XSS to set a session cookie with a limited path so that the self-XSS will still load when the victim logs back into their account. The self-XSS can then access the rest of the application as the victim, so is effectively regular XSS.
If you only need to read info rather than modify it, then the trick of loading the application in two separate iFrames works well.
@iamnoooob writes about it here: blog.noob.ninja/escalating-l…
@avlidienbrunn has a great talk on this and other tricks: youtube.com/watch?v=l3yThCIF…
Daniel Thatcher retweeted
My lesson from the past few days… Ignore the logical part of your brain that says “Nah ignore that, it’s not gonna be vulnerable”!
Look Mum! I'm on PortSwigger!
The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2021!
portswigger.net/research/top…
My advice for this list is to always take to time to read everything on the top 10, and then go through the nominations as well. There's so much good research in these lists that you'll almost certainly find something awesome that you missed, or forgot about.
Nominations: portswigger.net/research/top…
