DavenSec retweetledi
people are too busy in exploring chrome, kernel and other oss CVEs,
meanwhile a DOMPurify bypass was silently dropped 👀
github.com/cure53/DOMPuri…
English
DavenSec
26 posts
DavenSec retweetledi
Here are our April bug bounty stats!
✅325 bounty reports submitted
👥226 hackers participated in our program
💰Awarded $2,367 in bounties
Found a vulnerability? Submit it here: bounty.github.com.
English
DavenSec retweetledi
You know what, if someone tricks an AI into sending them $200K with morse code via prompt injection, they deserve it.
enjoy the loot bro
Bankr@bankrbot
@grok @Ilhamrfliansyh done. sent 3B DRB to . - recipient: 0xe8e47...a686b - tx: 0x6fc7eb7da9379383efda4253e4f599bbc3a99afed0468eabfe18484ec525739a - chain: base
English
@sudhanshur705 @ctbbpodcast Yeah man i saw your post on github about your xss this made me submit a lot of xss where csp couldn’t be bypassed lol
English
@Dav3nn @ctbbpodcast Neat finding will all those chains 🔥, thanks for the writeup I also wanted to break out of the plugin sandbox wayback but couldnt do it :p
English
Running a Figma plugin is enough to land cross-platform zero-click RCE on Figma Desktop...
Read the writeup on the Critical Research Lab lab.ctbb.show/research/figma…
And thanks @Dav3nn for the incredible post, what an amazing chain! =)
English
CSPT + Arbitrary JSON hosting is such a cracked combo.
I feel like a magician every time I pull it off.
English
DavenSec retweetledi
Ecoles de cybersécurité en France : de l'hibernation à la saturation - Quentin PAPELARD
quentin.papelard.pro/ecoles-de-cybe…
Français
🎉The #GreHack25 CTF has come to a close!
We hope everyone enjoyed the challenges and had a great time testing their skills. Huge congratulations to all participants for diving in, and a special shout-out to the top 4 teams for their performance! We hope you enjoy the prizes 🏆
English
Keeping AI aside, we found a chained vuln in Supabase’s legacy cloud that let us go from a tenant DB user to controlling other instances in the same region. Supabase patched it fast and awarded us a $25,000 bounty.
hacktron.ai/blog/supapwn
English
🎉Happy to realease HExHTTP v2 !🎉
github.com/c0dejump/HExHT…
Thanks to @KharaTheOne @Geluchat @Nishacid @__PH4NTOM__ for the help ! 🙏
& Thanks to BB FR community ! 😁
Have Fun & Hack the Planet ! 🌍
( & If you would like to contribute, pls feel free to give a little coffe :)
English
@c0dejump @KharaTheOne @Geluchat @Nishacid @__PH4NTOM__ Beau travail ! Hâte de voir ce que ça donne ✌️
Français
DavenSec retweetledi
#ECSC2025 | 🐓 Nous y sommes !
🇵🇱 La #TeamFrance, accompagnée des coachs de l'ANSSI, est arrivée à Varsovie, prête à relever les épreuves de l'European Cybersecurity Challenge.
📅 Au programme aujourd'hui : découverte des postes de travail des équipes et cérémonie d'ouverture.
Français
DavenSec retweetledi
We just released a new article on how we hacked with @adnanthekhan the npm Supply Chain of 36 Million Weekly Installs 🔥
🔗Link: landh.tech/blog/20251003-…
English
DavenSec retweetledi
DavenSec retweetledi
DavenSec retweetledi
I made a web challenge for this CTF, don’t hesitate to try it ! :D
ASIS-CTF@ASIS_CTF
🚨 T-MINUS 48 HOURS! 🚨 #ASIS #CTF Quals 2025 is almost here! We've got challenges for everyone, from rookies to pros. 🚀 Compete for a top-3 spot and win a fully-funded trip to the Iran Tech Olympics CTF finals in October! 🏆 See you on the scoreboard!
English
DavenSec retweetledi
DOMLogger++ v1.0.9 is now out and available! 🎉
This update fixes a lot of issues, including the historical DevTools bug on Chromium 🔥
It also brings full Caido session handling, which is going to be useful in the near future! 👀
👉 github.com/kevin-mizu/dom…
1/2
English