albinowax_

691 karmajoined May 31, 2016On HN

I research novel web attack techniques. More details at https://jameskettle.com/

Recent submissions

Drag and Pwnd: Exploiting VS Code with ASCII portswigger.net
1albinowax_1ydiscuss
Microsoft Copilot: From Prompt Injection to Exfiltration of Personal Information embracethered.com
4albinowax_2ydiscuss
Chaining Three Bugs to Access All Your ServiceNow Data assetnote.io
2albinowax_2ydiscuss
ORM Leak Vulnerabilities elttam.com
1albinowax_2ydiscuss
Hacking millions of modems and investigating who hacked my modem samcurry.net
838albinowax_2y271 comments
Getting XXE in Web Browsers Using ChatGPT swarm.ptsecurity.com
1albinowax_2ydiscuss
Response Filter Denial of Service: shut down a website by triggering WAF rule blog.sicuranext.com
95albinowax_2y26 comments
Source Code Disclosure in Asp.net via Cookieless Sessions swarm.ptsecurity.com
1albinowax_2ydiscuss
ChatGPT Account Takeover via Wildcard Web Cache Deception nokline.github.io
4albinowax_2ydiscuss
Detection and Exploitation of Ivanti's Pulse Connect Secure RCE assetnote.io
1albinowax_2ydiscuss
The curl quirk that exposed Burp Suite and Google Chrome portswigger.net
1albinowax_3y1 comment
Remote code execution in Homebrew by compromising the official Cask repository blog.ryotak.me
4albinowax_5ydiscuss
Brave browser’s Tor feature found to leak .onion queries to ISPs portswigger.net
2albinowax_5ydiscuss
Cracking reCAPTCHA, Turbo Intruder Style portswigger.net
1albinowax_6ydiscuss
The age of browser XSS filters is over portswigger.net
3albinowax_7ydiscuss
Significant new web hacking techniques from 2018 portswigger.net
1albinowax_7ydiscuss
Abusing Meta Programming for Unauthenticated RCE in Jenkins blog.orange.tw
1albinowax_7ydiscuss
Turbo Intruder: Embracing the Billion-Request Attack portswigger.net
2albinowax_7ydiscuss

All submissions and comments on Hacker News.