Sim4n6🐞

Sim4n6🐞

@sim4n6.bsky.social

A bug squasherπŸ—œοΈin spirit 🐞 πŸžπŸŒπŸ›πŸ₯… https://github.com/sim4n6/sim4n6

135 followers168 following159 posts

Sim4n6🐞 reposted

Gynvael Coldwind
@gynvael.bsky.social

When working with computers we frequently find these cool little tidbits/tricks/tips we could share. They are too small to make a full article, but they are likely the right size for Paged Out! magazine, where each article is just 1 page 😎 CFP deadline for Issue #9: 30th April'26

Sim4n6🐞 reposted

CaidoIO
@caido.io

You can now convert request bodies between formats via the right-click menu. Supported conversions: ・x-www-form-urlencoded ・JSON ・multipart/form-data ・XML Part of Caido v0.54.0 β†’ caido.io/blog/2025-12...

Sim4n6🐞
@sim4n6.bsky.social

is #curl still being developed? Well, that's wrap-up the matter, interesting insights on the matter from uncle curl himself... I still though have the same question πŸ™‹ but from the financial perspective? daniel.haxx.se/blog/2025/11...

daniel.haxx.seYes really, curl is still developedA lot! One of the most common reactions or questions I get about curl when I show up at conferences somewhere and do presentations: -- is curl still being actively developed? How many more protocols c...
Sim4n6🐞
@sim4n6.bsky.social

The path to venv is the sourcebut it's not sanitized properly and injected πŸ’‰ into the activate script leading to is command injection.

Application Security Feed@appsecfeed.bsky.social

πŸ—žοΈ The peril of unquoted Python strings, and how they caused CVE-2024-9287 πŸ”— https://pythonkoans.substack.com/p/koan-12-the-blacksmiths-hammer

Sim4n6🐞 reposted

Sim4n6🐞
@sim4n6.bsky.social

Replying to @lirantal.com

I guess 02 vulnerabilities: when resolving the symlink, attacker can switch it after the resolving (race condition, aftertime Check). Have you thought about nested symlinks, I love β™₯️ this one. Very scarce. Realpath would resolve the symlink once. How About if the destination is another symlink

Sim4n6🐞
@sim4n6.bsky.social

`CTRL+SHIFT+T` on Firefox is the best keyboard shortcut ever. It can instantly reopen the last closed tab. Amazing, Special thanks fly to the @firefox member of team who did that.

Sim4n6🐞
@sim4n6.bsky.social

Oncle curl got a gold medal πŸ‘πŸ‘ daniel.haxx.se/blog/2025/1...

daniel.haxx.seA royal gold medalThe Royal Swedish Academy of Sciences (IVA, the same org that selects winners for three of the Nobel prize categories) awards me a gold medal 2025 for my work on curl. This academy, established 1919 by the Swedish king Gustav V, has been awarding great achievers for over one hundred years and the simple idea … Continue reading A royal gold medal β†’
Sim4n6🐞
@sim4n6.bsky.social

A code review approach and two bypasses or more

Liran Tal@lirantal.com

very cool potential SSRF but mostly a trusted origins bypass found on better-auth due to logic failure and how URLs work:

castilho.onrender.comcastilho blogLike starting recon scripts from scratch from time to time just because we feel like it, I decided to do that for my blog and it's design in general. While looking to showcase websites from UI libraries because, why reinvent the wheel when we can just copy paste components from UI libraries, , I found a company named Better-Auth. so I went to their website to get some web design ideias for mine.Better-auth, with over 40,000+ weekly downloads and 350,000+ downloads in total, is a open source library written in Typescript that makes authentication easier for companies to implement into their websites, handling all sorts of authentication types, from the usual email signin, to signin with magic links, social media and others. While looking around the good looking website, and because I work in this field, out of curiosity I checked their security features and security issues on github which was when one feature caught my interest.

Sim4n6🐞 reposted

CaidoIO
@caido.io

We are super excited to share that we acquired the Shift Plugin (shiftplugin.com) and we are making it free to Caido paid users πŸš€ Shift is a smart AI companion for your hacking. It can craft payloads, Match&Replace rules, HTTPQL queries, etc. All details here: caido.io/blog/2025-07...

Sim4n6🐞
@sim4n6.bsky.social

Scary beast .. !

Alvaro MuΓ±oz@pwntester.bsky.social

For the last 6 months I’ve been helping an incredible team to build @xbow.com and there was not a single day without being amazed by XBOW findings and reasoning. It even got to the top of @hacker0x01.bsky.social US leaderboard 🀯Stay tuned for blog posts and detailed traces!

xbow.comXBOW – Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPNXBOW discovered multiple cross-site scripting (XSS) vulnerabilities in Palo Alto Networks’ GlobalProtect VPN web application

Sim4n6🐞 reposted

SonarResearch
@sonarresearch.bsky.social

SQL Injection despite using prepared statements? 🧐 Turns out that SQL syntax can be ambiguous! Learn how this has led to vulnerabilities in several popular PostgreSQL client libraries: www.sonarsource.com/blog/double-... #appsec #security #vulnerability

sonarsource.comDouble Dash, Double Trouble: A Subtle SQL Injection FlawCan a simple dash character introduce a security risk? Discover how SQL line comments can open the door to unexpected injection vulnerabilities in several PostgreSQL client libraries!

Sim4n6🐞 reposted

Nicolas GrΓ©goire
@agarri.fr

TIL it's possible to search among opened Firefox tabs by prefixing your search with "%" 🀯 As a keyboard maximalist, the workflow should be "Ctrl-T + %search criteria + up/down + Enter" πŸ¦₯ support.mozilla.org/en-US/kb/add...

support.mozilla.org Address bar autocomplete suggestions in Firefox | Firefox Help When you type into the address bar, Firefox suggests pages you've bookmarked, tagged, visited before or have open in tabs. Learn more.
Sim4n6🐞
@sim4n6.bsky.social

/proc/self/cwd/ is a symlink pointing to the current working directory of the process that is accessing it ... Never lose sight of the process's CWD and what underneath again 🫑

Sim4n6🐞
@sim4n6.bsky.social

I hate this unilateral company emailing approach! In sum, you have the right to send me a message and I can't do the same, And reply, WTH? ✌🏼 Hello@ rocks πŸ₯Š

Sim4n6🐞 reposted

Jorian
@jorianwoltjer.com

While listening to the @ctbbpodcast.bsky.social, I discovered that my own blog was vulnerable to Cache Deception! It would have allowed anyone to send me a link and then retrieve all hidden posts. This sent me down a caching deep dive, check out the details here: jorianwoltjer.com/blog/p/codin...

jorianwoltjer.comCache Deception on my new site! | Jorian WoltjerA fun story about discovering my site was vulnerable to Cache Deception, allowing the visit of a link by me to leak all hidden blog posts to an attacker, thanks to URL-decoding and Path Traversals to ...
Sim4n6🐞
@sim4n6.bsky.social

To my little understanding, a vulnerability is kind of road that shouldn't be taken in a certain way, but for some specific input it sneak down into and may cause unintended shenanigans. Right ? So why this is not a vulnerability ? github.com/pypa/pip/iss...

github.comArbitrary Configuration Injection from a CLI input in pypa/pip Β· Issue #12382 Β· pypa/pipDescription An arbitrary configuration injection happens when the application in an unsanitized way considers the user input and can reach the configuration file. Under those circumstances, a malic...
Sim4n6🐞
@sim4n6.bsky.social

Never tought about such an amount of issues

Liran Tal@lirantal.com

Half a dozen secure code review comments and none of them mentioned the potential security vulnerability that exists in the code snippet: www.nodejs-security.com/blog/nodejs-... dive into a Node.js secure code review and see if you can spot the security bug you totally missed

nodejs-security.comCan a Node.js Secure Code Review Find Future Vulnerabilities?Half a dozen secure code review comments and none of them mentioned the potential security vulnerability that exists in the code snippet. Let's dive into a Node.js secure code review and see if you can spot the security bug you totally missed.
Sim4n6🐞
@sim4n6.bsky.social

@jameskettle.com hey I have this question and I always had it, a bit avoiding to ask. You seem to figure out brand new ways to exploit and hack websites. And then you publish wonderful research. what I am missing is how do you monetize all this ? hw d u bring food to the table?