Overview
News
Salaries
Products
People
Growth
Offices
Financials
News
Go Go XSS Gadgets: Chaining a DOM Clobbering Exploit in the Wild
Brett Buerhaus (@bbuerhaus), Sam Curry (@samwcyo), Maik Robert (@xEHLE_) A few years ago, I discovered a Cross-Site Scripting (XSS) chain that incorporated several interesting methods that I usually see in write-ups or Capture the Flag challenges. I had t
Read more
Report
Reversing and Tooling a Signed Request Hash in Obfuscated JavaScript
Test out this concept with a lab I helped develop at https://app.hackinghub.io/surl I was hacking on a bug bounty program recently and discovered that the website is signing every request, preventing you from modifying the URL, including GET parameter val
Read more
Report
Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More
While we were visiting the University of Maryland, we came across a fleet of electric scooters scattered across the campus and couldn't resist poking at the scooter's mobile app. To our surprise, our actions caused the horns and headlights on all of the s
Read more
Report
Meet the SoCal professor who hiked 500 miles across the Mojave Desert
He embarked on the trek as a sabbatical project and documented the journey in a YouTube series called "Across the Mojave on Foot."
Read more
Report
BT's Metaversal Album Treasure Hunt Solution
Intro The musical artist known as BT recently launched his 14th album as an interactive NFT experience on the Arweave blockchain called Metaversal. Part of this experience was a multiple day long puzzle treasure hunt. Metaversal: https://btmusic.com/metav
Read more
Report
Cr0wnGhoul 1ETH Puzzle: You've Got Mail Write-up
Solved by: ziot (@bbuerhaus) xEHLE (@xEHLE_) mattm (@mattmcquaig) LeFevre (@_LeFevre_) Cr0wn_Gh0ul launched a new puzzle with a 1 Eth and 800 Matic prize recently. This involved airdropping matic NFTs and contracts to many addresses, similar to the one mi
Read more
Report
coin_artist 50k Follower Puzzle - Write-up
The infamous crypto puzzle artist coin_artist just launched a new NFT airdrop for hitting 50,000 followers on Twitter. As with all coin_artist related announcements and products, we immediately dusted off the magnifying glass and started to seek for a puz
Read more
Report
New Buer Malware Downloader Rewritten in E-Z Rust Language
It's coming in emails disguised as DHL Support shipping notices and is apparently getting prepped for leasing on the underground.
Read more
Report
DEFCON 29 CTF Qualifier: 3FACTOOORX Write-up
I recently participated with the CTF team Norse Code representing Hacking for Soju in the DEFCON 29 CTF qualifiers. There was a web challenge, so I went full speed ahead to solve it. Overall the challenge is fairly straightforward and not too difficult, b
Read more
Report
Show more news
