Tweets
-
@totally_unknown liked this one, great trace -
One bug, 3 products affected: XSS in Google Sites, Analytics and Docs: "));} catch(e) { alert(3133.7) }// https://docs.google.com/file/d/0BwS7P2UORGooMktpb0ZELWpXR28/edit?usp=sharing …
Retweeted by Ben HayakExpand Collapse -
@SpiderLabs Thanks! I am glad to be among pros! -
just gained some great experience, I now find it much easier to trigger jquery DOM XSS during element selection.
#DOMXSS -
win8.1+ie11 exploit. pic.twitter.com/gyG9UqYFZM
Retweeted by Ben HayakExpand Collapse3:02 AM - 28 Jun 13 (GMT-07:00) · Details Flagged (learn more) -
Just saved myself some garbage-time thanks to MS Symbols passing to the next step of my current research!
-
@jduck Hi can I contact you directly ? -
@XSSniper@totally_unknown in your case you can end up doing both & that only make us challenge ourselves with even more creative ideas ;) -
use-after-free remote code execution IE8 works on latest Win7/Server 2008R2 Still Unfixed no patch yet
-
RT:
@_sinn3r "Department of Labor IE 0day (CVE-2013-1347) Now Available at#Metasploit: http://r-7.co/IE8-DOL " Great job!@_juan_vazquez_ -
@r3shl4k1sh@AviadGolan Mr. Bean Does it just RIGHT! LOL! *Like* -
@r3shl4k1sh thanks , that's appreciated -
Just stopping your routine and do what you WANT and not what you Need feels great , try it
#working#ReverseEngineering -
@0x6D6172696F@kkotowicz I had todo some similar PoC with iframe src of "secret data" page, to one of the customers - xss is more then alert -
@corelanc0d3r can we chat using a normal not 140 limited chat? -
More WinDbg fun: Turning a Breakpoint into a Busypoint http://www.osronline.com/article.cfm?article=611 …
Retweeted by Ben HayakExpand Collapse -
Interesting I wonder how common this jQuery XSS vector is:"]<img src=1 onerror=alert(1)>
Retweeted by Ben HayakExpand Collapse -
@Nirgoldshlager@shafigullin@superevr@kkotowicz@kuza55 great findings man, As always :) -
The Unfix Bug In Facebook OAuth http://www.breaksec.com/?p=6039
Retweeted by Ben HayakExpand Collapse
@BenHayak hasn't tweeted yet.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
Flag this media
This has already been marked as containing sensitive content.
Ben Hayak
Nils Juenemann
yuange


Nir Goldshlager