Arminius

Mini XSS challenge 3. Can you solve it? 🤔 <?php $n = bin2hex(random_bytes(8)); header("Content-Security-Policy: script-src 'nonce-$n'"); printf('<script nonce=%s>"%s"</script>%s', $n, str_replace('"', '', $_GET['a']), $_GET['b']); ?> #minixss #ctf

Well, seems like @kucoincom didn't take their security that seriously in the first place #KuCoinHack #KuCoin

Hey @krakenfx @krakensupport. I reported a major security vulnerability on your exchange 74 days ago. It's still open, and both your support and security team are ghosting me. Any help? #bugbounty $btc

Sigh. It's 2020. Crypto exchange @kucoincom just awarded me a $28.49 bounty for an unconditional XSS vuln on their main domain. (via 3rd party component but still...) A little deceitful to call that a #bugbounty program 🤷 @gan_chun $KCS

Know someone who needs a Titan security key bundle from Google? Got that promo mail where someone gets a free bundle if I refer them to Google's Advanced Protection Program

Arbitrary code execution vulnerability in Vim < 8.1.1365 and Neovim < 0.3.6 via modelines. 😬 Also, why you should not use Vim with default config, or cat without -v. github.com/numirias/security…

Want a riddle for your coffee break (or, if you're me, a weekend full of despair)? Try this tricky "One Line PHP Challenge" from #HITCON #CTF <?php ($_=@$_GET['orange']) && @substr(file($_)[0],0,6) === '@<?php' ? include($_) : highlight_file(__FILE__); ?> http://54.250.246.238/

My write-up for Hackover CTF "cyberware" challenge. Using dir trav and manually obtaining packfiles from git meta dir. Was a nice little peek into git internals. security.meta.stackexchange.…

Where's Bobby Tables when you need him

Write-up for @DragonSectorCTF Nodepad web challenge. :) XSS + SQLi + CSP bypass. That's some neat challenge design! security.meta.stackexchange.… #DragonCTF

Yay, finally solved Nodepad web challenge with team secse for @DragonSectorCTF. That one was super well designed. :) Now time for some sleep #DragonCTF

At my bank, a wire transfer requires PIN and TAN. Fine. But as it turns out, to close your account, you can just send in a signed form including the account number you want the balance transferred to. No auth, not even a confirmation call.

Apparently, the security of @deutschetelekom is so abysmal, their bug bounty program explicitly *excludes* RFI, LFI, and XSS. telekom.com/en/corporate-res…

Yay, after 8 months, @StackExchange finally fixed an XSS bug on openid.stackexchange.com. More vulns incoming. :)

Awesome, my bank sending my account information as an encrypted PDF... and the key is my five-digit ZIP code.

Fascinating how many people casually backdoor their projects. #githubdorks github.com/search?q=eval+%24…

Great write-up of the "Title Case" #SHA2017 CTF challenge! hugodelval.com/writeup/2017%…

Really want to see a write-up for the #SHA2017 "Title Case" CTF challenge. That was one annoying Python jail.

Excited to play the #SHA2017 CTF. Hoping for some interesting challenges. :)

Can you solve this 2nd mini XSS challenge, too? <?php echo file_get_contents(str_replace(['/', '.'], '', $_GET['q'])); ?>