mbergeron

🎯 "After some research; [...] we had to conclude that this was unknown to the public and that it could potentially be an unintentional bug in MSSQL." Read our latest blog ⬇ bit.ly/3PoAnJM #cybersecurity #AWS #Amazon #EthicalHacking

@osiryszzz @GoSecure_Inc My assumption is that all of them have the same behaviour but I only tested on MSSQL 2019 and 2022 under Windows and Linux.

@GoSecure_Inc Have you guys found out which versions of mssql support this?

@_lineending @GoSecure_Inc So "autocomplete='off'" doesn't work at all on the testing I've done. As for "new-password" it does work but my point in the article was to show that with an XSS you can add your own inputs without autcomplete attribute and therefore, does not matter if the autocomplete is there.

@GoSecure_Inc @mo_bergeron Thank you for the nice article! I think as a web developer you could add the "autocomplete='off'" attribute or "autocomplete='new-password'" since the first one might be ignored. Could you correct me if I'm wrong, please? (ref: stackoverflow.com/questions/1237…)

Are you using the browser’s autofill feature to log in? See how it can be used to steal your credentials with an XSS in this blog post by @mo_bergeron: gosecure.net/blog/2022/06/2… #GoSecureTitanLabs #browser #xss #cybersecurity

RingZer0 Team has grown considerably over the last couple of years, and to better support this surge of users and activity we have decided to make Ringzer0 Team an official company. There are currently open positions and you can apply at: ringzer0ctf.com/contribute 💚

#IBPInvite Why not sweeten the deal? Big thank you to @WDCreators for providing three WD Blue 250GB SSDs 😍 goo.gl/jih8n7