GMO Flatt Security Research

Posts

Clone2Leak: Your Git Credentials Belong To Us
Jan 26, 25
Clone2Leak: Your Git Credentials Belong To Us
Non-Intrusive Web Recon: Techniques from Chrome DevTools Recorder
Dec 25, 24
Non-Intrusive Web Recon: Techniques from Chrome DevTools Recorder
Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection
Dec 6, 24
Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection
Beyond the Limit: Expanding single-packet race condition with a first sequence sync for breaking the 65,535 byte limit
Aug 2, 24
Beyond the Limit: Expanding single-packet race condition with a first sequence sync for breaking the 65,535 byte limit
BatBadBut: You can't securely execute commands on Windows
Apr 9, 24
BatBadBut: You can't securely execute commands on Windows
Bypassing DOMPurify with good old XML
Apr 1, 24
Bypassing DOMPurify with good old XML
How I could bypass DOMPurify with XML