cc : @0xACB @bbuerhaus
Prikaži ovu nit
Did a Write up of Vimeo SSRF , It was an interesting one. RT if you like it.https://medium.com/@rootxharsh_90844/vimeo-ssrf-with-code-execution-potential-68c774ba7c1e …
-
-
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Amazing job!!
-
Thanks!
Kraj razgovora
Novi razgovor -
-
-
Fantastic!
-
Thanks!
Kraj razgovora
Novi razgovor -
-
-
Im not following the path traversal aspect. You aren't retrieving files from the server with it. The server is collapsing the request and following it. What am i missing?
-
Path traversal doesn't necessarily means that you gotta extract files, What it means is you were able to go through the other paths other than the specified one(s), Here we bypassed some given sets of paths by traversing and then were able to make the server hit our given path.
Kraj razgovora
Novi razgovor -
-
-
That parameter check seems weird, at least would make more sense if each field requires a type that is checked against the database. Also GCP being able to return a token just like that is much worse feature.
-
The check should be performed after url being paraed but hey everyone makes mistake, And BB is all about mistakes ;)
Kraj razgovora
Novi razgovor -
-
-
hearing after along time
-
Indeed, have few more in drafts waiting for approval.
- Još 1 odgovor
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.