I'm happy to release a script gadgets wiki inspired by the work of @slekies, @kkotowicz, and @sirdarckcat in their Black Hat USA 2017 talk! 🔥 The goal is to provide quick access to gadgets that help bypass HTML sanitizers and CSPs 👇 gmsgadget.com 1/4

wrote some words about vulnerabilities i found in Aviatrix during a red team cloud.google.com/blog/topics/...

Trix Shots: Remote Code Execution on Aviatrix Controller | Google Cloud Blog

Red team case study detailing the discovery of two critical vulnerabilities in the Aviatrix Controller software.

cloud.google.com

TeleMessage, the Israeli company that makes the modified Signal app used by Trump officials, was hacked. “I would say the whole process took about 15-20 minutes,” the hacker said micahflee.com/the-signal-c...

The Signal Clone the Trump Admin Uses Was Hacked

TeleMessage, a company that makes a modified version of Signal that archives messages for government agencies, was hacked.

micahflee.com

🚀 Another plugin in the Caido Store! Introducing "Data Grep" by @bebiksior. Extract data from requests and responses. Great for building wordlists, finding secrets, or powering your recon. Check it out: github.com/caido-commun...

Got sniped into the challenge and ended up doing some cool XSS research :D 11 char XSS with mind-boggling race-conditions. TL;DR the final payload is location=x (10 chars) and the longest is top.Z.x=x.d (11 char) It's shorter than location=name !! terjanq.me/solutions/jo...

Johan Carlsson@joaxcar.bsky.social · 2y ago

A small code-golf web challenge (free research from you, for me), how short can you make a "fetch content and execute it inline". There is a CSP in a meta tag. Goal: get the content from the file hack.js and have it inserted in the page. like in the image joaxcar.com/xss/self.html

I wrote a thing with my colleague Ilyass El Hadi (0xc0ffee_) & Charles Prevost, about how we've been leveraging offensive webapp testing during Red Teams. 4 use cases of external breaches using webapps inside, enjoy! #appsec cloud.google.com/blog/topics/...

Bridging the Gap: Elevating Red Team Assessments with Application Security Testing | Google Cloud Blog

Red team and targeted external assessments should incorporate application security expertise to better simulate modern adversaries.

cloud.google.com

Environments are something I've wanted for a while now.

CaidoIO@caido.io · 2y ago

🚀 v0.44.1 is here! Say hello to Environments, a powerful way to handle context-specific cookies, API keys, and headers. Easily switch between environments to streamline your testing. We’ve also added tab reordering, CA certificate importing, and SNI overrides.

My latest blog post is live! nastystereo.com/security/cro... Read how to send a cross-site POST without including a Content-Type header (without CORS). It even works with navigator.sendBeacon

Been having a ton of fun solving these, only 2/3 done and i'm quite humbled so far challenge-xss.quiz.flatt.training

Flatt Security XSS Challenge

Execute alert(origin) on each challenge origins.

challenge-xss.quiz.flatt.training

add that to the reasons to stop using bash in production pipelines yossarian.net/til/post/som... #security #cicd #appsec