PinnedDaniel Santos·Nov 11, 2020From SVG and back, yet another mutation XSS via namespace confusion for DOMPurify < 2.2.2 bypassFor those who are only interested in the final payload here you go (I won’t judge). For the ones interested in why it works, please bear…
Daniel Santos·Jun 27, 2024Reversing a Magento RCE (CVE-2022–24086)NOTE: This post has been sitting on my drafts forever and I don’t remember why I never published it before 🤣. The vulnerability addressed…
Daniel Santos·Feb 11, 2024Leaking Microsoft Defender’s exclusions using a timing oracleAround January 2022, the fact that unprivileged users were able to enumerate Microsoft Defender’s exclusion rules gained notoriety. A…
Daniel Santos·Feb 7, 2023Capturing the flag with ChatGPT: solving DiceCTF 2023 rev/time-travelI was recently invited to play the latest edition of DiceCTF. It was a last-minute invite, so I just played the last two hours of the…
Daniel Santos·Feb 17, 2022Bypassing Defender’s self-protect mechanismI recently started working as a Red Team lead, and figuring out ways to bypass antivirus engines became a regular thing. I am a huge fan of…
InTechiepediabyDaniel Santos·Nov 17, 2021The tale of CVE-2021–34479 (VSCode XSS)This April, I finally decided to take some time to study the Electron framework and the security considerations around it. After learning…A response icon1A response icon1
InCodeXbyDaniel Santos·Aug 28, 2021Hunting for XSS with CodeQLWhat is CodeQLA response icon1A response icon1
InTechiepediabyDaniel Santos·Jun 28, 2021How I found my first Chrome bug (CVE-2021–21210)On October 31, 2020, @SamyKamkar published his research on NAT Slipstreaming. According to his own words, NAT Slipstreaming —
Daniel Santos·Jan 1, 2021Cracking Rolling Code Locks the lazy wayI took some of my Christmas break time to solve as many challenges as I could in HackerOne’s CTF. Out of the remaining challenges I still…A response icon2A response icon2
