Fixing the Unfixable: Story of a Google Cloud SSRF
This blog shares the stories behind my best finds.
Interested in my latest disclosures?
Check out the Feed.
Interested in my latest disclosures?
Check out the Feed.
Fixing the Unfixable: Story of a Google Cloud SSRF
4 Weird Google VRP Bugs in 40 Minutes
I Built a TV That Plays All of Your Private YouTube Videos
The Embedded YouTube Player Told Me What You Were Watching (and more)
Stealing Your Private YouTube Videos, One Frame at a Time
The unexpected Google wide domain check bypass