parrot409 (@parrot409) profile picture

ctfer | webpwn @superguesser

Joined January 2020
Photo by parrot409 (@parrot409)Photo by parrot409 (@parrot409)Photo by parrot409 (@parrot409)Photo by parrot409 (@parrot409)Photo by parrot409 (@parrot409)Photo by parrot409 (@parrot409)Photo by parrot409 (@parrot409)Photo by parrot409 (@parrot409)Photo by parrot409 (@parrot409)Photo by parrot409 (@parrot409)
parrot409 retweeted
i made a new game called js crossword where you have to solve it by literally writing javascript code that eval()'s into the correct values! check it out if you're into ctfs or wanna challenge your javascript skills hope y'all have fun playing it <3
23
39
6
454
47,205
parrot409 retweeted
Cross-Site ETag Length Leak blog.arkark.dev/2025/12/26/e… I just posted the author writeup for impossible-leak in SECCON CTF 14 Quals. As far as I know, this is a new XS-Leak technique! The ETag header can become a side channel :)
5
99
4
356
44,351
parrot409 retweeted
Not only can you pollute `then`, but you can also pollute `return`! Both behaviors are specified in the ECMAScript spec.
34
74
24
899
64,781
parrot409 retweeted
You can sell the Whatsapp 0-click RCE for $5m but then how do you buy back your integrity and morals when it's used against a dissident (for example)? I can kind of see the $1m argument here.
12
7
2
150
21,145
parrot409 retweeted
NEW: OAuth misconfigurations show how common dev settings can lead to account takeovers. Our second deep dive breaks down real cases where overlooking differences between desktop and mobile environments left SDKs, exchanges, and wallets open to exploits. osec.io/blog/2025-10-16-how-…
2
19
1
73
8,569
XSS-Leak: Leaking Cross-Origin Redirects, Subdomains and More! You can read the article here: blog.babelo.xyz/posts/cross-…
8
66
2
357
28,424
parrot409 retweeted
Here is video POCs iOS steal iCloud data: youtube.com/shorts/y1WkAYsak… iOS Camera access: youtube.com/shorts/bwZg3VY-A… Mac steal iCloud data: youtu.be/gbiPPkNFlQAMac Mac Camera access: youtu.be/4KR258DwAMo
4
14
3
414
96,343
That's great news! It reminds me of a Gunicorn bug (now patched) I found, where HEAd was treated as HEAD. Since it returned a Content-Length without a body (as expected for HEAD), it caused confusion with proxies that didn’t expect a HEAD request!
1
1
11
1,962
I challenged myself to remember a library that isnt listed in this website but I failed.
2
9
1,086
My ctf memory is getting weak?
1
2
679
SQL Injection despite using prepared statements? 🧐 Turns out that SQL syntax can be ambiguous! Learn how this has led to vulnerabilities in several popular PostgreSQL client libraries: sonarsource.com/blog/double-… #appsec #security #vulnerability
1
30
3
102
18,080
parrot409 retweeted
i stopped auditing /net/sched because kCTF players have used it to print 0days for years now and I figured “surely they’re running out of bugs there”; so based on similar past decisions/analysis of mine, you can guarantee another year or two of bugs from there
No shortage of kernel bugs... :) Kernel 6.6.87 got pwned by 6 unique 0days within 25 seconds of going live on kCTF, lol: docs.google.com/spreadsheets…
3
7
1
86
8,940
CVE-2025-3155 writeup It's about exfiltrating files using the GNOME Help application. It isn't severe as it requires some user interaction, but it's a fun bug. gist.github.com/parrot409/e9…
2
19
1
94
8,834
gg. It was so fun.
2
33
2,288
I turned 21 today
10
83
4,173