PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

New tool for finding mutated XSS, $20k Chromium sandbox escape, Live bug bounty results from Ekoparty – ethical hacker news roundup

yeswehack.com | research | #bug-bounty | #php | #sandbox-escape | #chromium | #roundup | #mutation-xss
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Roundup: Dom-Explorer for mutated XSS, a $20k Chromium sandbox escape, Cfreal's lightyear for PHP blind file reads, and live Bug Bounty results from Ekoparty.
Published
Collected

Related coverage

research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
research · yeswehack.com
One-upmanship on sandbox escapes, record-breaking Patch Tuesdays, the next evolution in pentesting – OffSec roundup for CISOs
This research provides technical context that security teams can use for monitoring and validation.
research · yeswehack.com
Dom-Explorer tool launched to reveal how browsers parse HTML and find mutated XSS vulnerabilities
Launch of Dom-Explorer: BitK's open-source tool showing how browsers and popular sanitisers parse HTML, helping researchers uncover mutation XSS bugs and iterate on ideas faster.
research · yeswehack.com
Web timing attacks, Apache HTTP confusion attacks, email parsing discrepancies – ethical hacker news roundup
Roundup: James Kettle's web timing attacks, Orange Tsai's Apache HTTP 'confusion' techniques exposing nine flaws, email parsing discrepancies turned access-control bypass, and cache exploits.
research · portswigger.net
Inline Style Exfiltration: leaking data with chained CSS conditionals
Chained CSS if() conditionals in inline styles exfiltrate attribute data such as usernames via background requests — no selectors or stylesheet imports needed; Burp actions brute-force values.
Back