Pinned Tweet
I'm excited 🎉 to introduce JSSCM!
A browser extension that detects expired domains for Stored XSS.
So you can find XSS and earn money while casually browsing. I've earned $5K+ in bounties with this extension.
Check it out
#BugBounty #OpenSource
crazy to see this one come together live @kultekin 🔥
*sshole is out
if you run sshd on alpine, openwrt or any musl box with password auth on: update now
official writeup: sshhole.com
The problem with *strong* leaders is that over time people get more reluctant to share real problems, and start to sugarcoat things instead. That blurs the leader's view, and they make bad decisions based on those sugarcoated insights. And that continues until total failure.
Samet Sahin retweeted
I'm excited 🎉 to introduce collectvars!
A browser extension that finds all JS variables and detects dangerous ones.
So you can find secrets and earn money while casually browsing.
Check it out github.com/sametsahinnet/col…
#BugBounty
Samet Sahin retweeted
1 Bug, $50K+ in bounties: how Zendesk left a backdoor in hundreds of companies #bugbountytips
gist.github.com/hackermondev…
Samet Sahin retweeted
In August, watchTowr Labs hijacked parts of the global .mobi TLD - and went on to discover the mayhem that we could cause.
Enjoy....
labs.watchtowr.com/we-spent-…
I'm excited 🎉 to introduce collectvars!
A browser extension that finds all JS variables and detects dangerous ones.
So you can find secrets and earn money while casually browsing.
Check it out github.com/sametsahinnet/col…
#BugBounty
Samet Sahin retweeted
New blog post on hacking EPP servers:
How we could've taken over the .ai, .bj, .bw, .ci, .gl, .ke, .kn, .lb, .ly, .mr, .ms, .mz, .ng, .pyc, .rw, .so, .ss, .td, and .zm TLDs.
hackcompute.com/hacking-epp-…
Work from @rhyselsmore, @bbuerhaus, @infosec_au, and myself.
Samet Sahin retweeted
Google 2022 Bug Bounty year in review:
security.googleblog.com/2023…
Highest single bounty was over $600k!
Samet Sahin retweeted
It's dangerously easily to ignore good research due to glancing at the title and thinking you already know something. I nearly missed this entirely
Converting LFI into RCE by chaining PHP encoding filters - superb research by @_remsio_!
synacktiv.com/publications/p…
Samet Sahin retweeted
I'm attempting to kick off some research on a topic unrelated to request smuggling & cache poisoning, and wow it's a struggle. Specialism is dangerous stuff.
Samet Sahin retweeted
Emojis can be used to deliver malicious payloads (i.e. to hack systems). Clever. xn--fda.fr/defcon/DEF%20CON%…
Samet Sahin retweeted
Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling by @albinowax
portswigger.net/research/bro…
Samet Sahin retweeted
There is an ugly side to collaboration in bug bounties, which is often never spoken about publicly. It's my least favourite part of bug bounties. Keen to hear peoples thoughts. shubs.io/the-ugly-side-of-co…
Samet Sahin retweeted
Open redirect vulnerability and how to use it "correctly" in bug bounty 🙃
link.medium.com/ftOSGKkZtqb
New year new blog post 🎯
Recommendations to programs from a hunter’s perspective
sametsahin.net/posts/bug-bou…