pspaul
@pspaul95
Followers
966
Following
6K
Statuses
231
source code connoisseur @Sonar_Research | CTF @FluxFingers | @[email protected]
Germany
Joined March 2017
@rebane2001 @Jane0ri Firefox doesn't seem to support animating custom properties (breaking the value caching) and also doesn't support container style queries yet
0
0
1
@rebane2001 I built HTML/CSS-only click/arrow-keys controls that control an infinite counter recently! I did it for Chrome but it should be doable for Firefox too I think 🤔 I can share it with you in a few hours when I'm back at my laptop
1
0
2
Wow, thanks for 2nd place! Didn't expect this, maybe it's my sign to finally write it down in text form and tackle all the follow-up ideas 👀
The results are in! We're proud to announce the Top ten web hacking techniques of 2024!
1
0
29
💉 SQL Injection Isn't Dead: Smuggling Queries at the Protocol Level Video: Slides:
0
0
1
RT @Sonar_Research: What a year! We look back and summarize our security research highlights of 2024: 🪲 Vulnerabilities in Jenkins, Source…
0
12
0
RT @albinowax: Nominations are now open for the Top 10 Web Hacking Techniques of 2024! Browse the contestants and submit your own here: htt…
0
89
0
RT @lukejahnke: 🧵Can you work out how to bypass this vulnerable CSRF protection? Read all about this gotcha in my latest blog post https://…
0
66
0
RT @flatt_sec_en: 🚨 Try your hand at our latest XSS Challenge! 🚨 Can you get alert(origin) executed in each problem? This challenge featu…
0
31
0
RT @Sonar_Research: In case you missed it, here's the recording of our #HEXACON2024 talk "Exploiting File Writes in Hardened Environments"!…
0
15
0
I'm quite proud of the challenges I wrote for this year, especially GymTok, Bench Press, and Ancient Monkey! I was very hooked by the research that went into them, so make sure to give them a look 👀
Hacklu CTF is still running for ~23h! We still have some unsolved challenges, including: - 📱Android Flutter exploitation - 🦊 2 webs with Firefox bots - 🐒 pwning a 17 year old SpiderMonkey - ✍️ LaTeX madness Come play:
1
1
13
Crazy good research from @scryh_ again! Turning a file write in any Node.js application into RCE 🔥
From HTTP request to ROP chain in Node.js! 🔥 Our latest blog post explains how to turn a file write vulnerability in a Node.js application into RCE – even though the target's file system is read-only:
0
1
14