plenum 🇹🇳

I just published Identifying and Exploiting Unsafe Deserialization in Ruby XMLRPC link.medium.com/tc9mOBQlUBb

Consistency is the hardest thing in bug bounty

And then wonder why do I keep doing this to myself

Félicitations @Blaklis_ j’espère que au moins tu aura une augmentation cette année

Congrats all the best

Started using bluesky bsky.app/profile/plenumlab.b…

Ssrf -> dns rebind -> access to cloud metadata. The rest is history 😁

🤔

Congrats 👏

Using individual by name is also interesting, to be able to hide all the tracking and unnecessary cookies

In the ever evolving landscape of ...

Agreed, regardless of the program, things have been piling up for quite some time now, and we have seen this behavior becoming more common. Some reports have been disclosed already where we clearly see triage or vendor giving wrong cvss explanation sometimes totally made up.

Glad it went good, hope you get well soon buddy

The new critical content injection, quality over quantity

Fun fact you can actually exploit it the other way around, if the app allows incoming emails and uses/shows the sender field, you can send emails with netcat, although it is tricky to not break SMTP syntax it is still a nice bug medium.com/bugbountywriteup/…

AC:H, UI:R

Are you a hacker ?

I'm buying this one.

CVSS: custom vulnerability scoring system