Home Bookmarks Inbox Collections Profile

Recent searches

Search chats

Find a past chat

Search

Search posts, people, and collections.

Inbox Collections Profile

How I Found a $90,000 Remote Code Execution Vulnerability in Google | Simon Koeck — Blankdot

simonkoeck.com3 weeks ago

How I Found a $90,000 Remote Code Execution Vulnerability in Google | Simon Koeck

How I Found a $90,000 Remote Code Execution Vulnerability in Google | Simon Koeck

A Flask cookie on developers.google.com was signed with a secret it was also carrying inside itself. Pulling that secret out turned a forged session into code execution across seven Google domains.

Visit simonkoeck.com

No discussion yet. Be the first to share your thoughts!