@[email protected] @SecurityMB

Improving the world’s security at Google. Opinions are mine. bentkowski.info Zurich, Switzerland Joined September 2014

Tweets

1K
Followers

11K
Following

284
Likes

921

Kévin GERVOT (Mizu) @kevin_mizu

a month ago

I'm happy to release a script gadgets wiki inspired by the work of @slekies, @kkotowicz, and @sirdarckcat in their Black Hat USA 2017 talk! 🔥 The goal is to provide quick access to gadgets that help bypass HTML sanitizers and CSPs 👇 gmsgadget.com 1/4

11 167 437 33K 284

Download Image

terjanq @terjanq

2 months ago

It started! pV!

terjanq @terjanq

2 months ago

It started! pV!

7 63 528 36K 149

Download Image

0 2 29 5K 0

@[email protected] @SecurityMB

2 months ago

Google CTF is on! Here's a challenge that I created: capturetheflag.withgoogle.com/challenges/web…. Good luck 😀

0 27 150 13K 60

@[email protected] @SecurityMB

3 months ago

Here's my blog post about escaping `<>` in attributes and why it makes mXSS harder to exploit!

Google VRP (Google Bug Hunters) @GoogleVRP

3 months ago

Here's my blog post about escaping `<>` in attributes and why it makes mXSS harder to exploit!

1 58 229 27K 118

1 19 90 10K 51

@[email protected] @SecurityMB

4 months ago

🔥 A new (more difficult) era for mXSS will come soon! If nothing breaks, Chromium will start escaping "<" and ">" in attributes starting with M138. See chromestatus.com/feature/626498… for details.

2 17 88 9K 22

Google VRP (Google Bug Hunters) @GoogleVRP

9 months ago

Celebrating 15 years of password hacking 💻 🔑, Swiss Army knives (and sometimes even chainsaws or swords) included! 😲 Discover how Google's security teams turn employee farewells into security tests. bughunters.google.com/blog/635526578…

0 31 111 26K 33

Oh My Hack @OMHconf

10 months ago

Pewien inżynier bezpieczeństwa musi zadbać o bezpieczeństwo dosłownie tysięcy aplikacji. 💥 Jak to osiągnąć? Michał Bentkowski pokaże kilka rozwiązań, które pozwolą upewnić się, że każda nowonapisana aplikacja zachowuje wysoki poziom bezpieczeństwa. 🎟 omhconf.pl

0 2 7 3K 1

Download Image

@[email protected] @SecurityMB

10 months ago

Reading about new mXSS techniques always warms my heart. Amazing writeup @kevin_mizu and great bugs!

Kévin GERVOT (Mizu) @kevin_mizu

10 months ago

Reading about new mXSS techniques always warms my heart. Amazing writeup @kevin_mizu and great bugs!

18 180 704 75K 376

Download Image

1 1 34 3K 7

Google VRP (Google Bug Hunters) @GoogleVRP

11 months ago

Do you want to learn more about the various Vulnerability Reward Programs offered by Google? Or you're looking for inspiration? Check the video below in which @kkotowicz and @SecurityMB talk about Google VRPs! youtube.com/watch?v=R2qMd4…

0 11 65 5K 22

Jakub Żoczek @zoczus

11 months ago

It's always nice to talk with Mr @SecurityMB 🔥

0 1 6 1K 0

Download Image

@[email protected] @SecurityMB

11 months ago

Check out the video in which I’m talking with @kkotowicz about Google VRPs. Learn how you can start hacking Google! Let me know if there’s something you’d like us to cover in future videos 😀 youtu.be/R2qMd4PZbko?si…

3 8 44 6K 24

Lukasz Olejnik @lukOlejnik

11 months ago

Very nice presentation about web security at a scale by @SecurityMB. Finally, web security is solved for good.

1 1 5 1K 2

Download Image

@[email protected] @SecurityMB

a year ago

[PL] Zapraszam na MSHP do Krakowa! Sam też będę miał tam prezentację 😀

Sekurak @Sekurak

a year ago

[PL] Zapraszam na MSHP do Krakowa! Sam też będę miał tam prezentację 😀

28 33 452 653K 21

Download Image

1 0 5 1K 0

@[email protected] @SecurityMB

a year ago

Google VRP significantly increases reward amounts! Just go and hack 😀

Google VRP (Google Bug Hunters) @GoogleVRP

a year ago

Google VRP significantly increases reward amounts! Just go and hack 😀

4 66 268 54K 67

1 0 14 2K 2

Google VRP (Google Bug Hunters) @GoogleVRP

a year ago

🚫 DOM XSS, begone! 👋 Discover how we used Trusted Types to protect AppSheet, and how that can inform your own web application's journey to a safer security posture where DOM XSS vulnerabilities are a thing of the past. bughunters.google.com/blog/603789066…

1 37 117 12K 56

huli @aszx87410

a year ago

I didn't manage to solve postviewer v1 in 2022, really close to solve v2 in 2023, but this year finally solve v3 💯 It's my writeup to the GoogleCTF 2024, almost all web challenges are client-side, so I really like it lol blog.huli.tw/2024/06/28/en/…

0 22 120 8K 36

@[email protected] @SecurityMB

a year ago

Congratulations for the five teams that solved in-the-shadows! The challenge is open-sourced now including a short writeup and a solver: github.com/google/google-…

@[email protected] @SecurityMB

a year ago

Congratulations for the five teams that solved in-the-shadows! The challenge is open-sourced now including a short writeup and a solver: github.com/google/google-…

3 2 36 14K 3

0 11 58 7K 14

@[email protected] @SecurityMB

a year ago

Google CTF is on! I'm especially curious how many teams will be able to solve the challenge "in the shadows" 😉

Google VRP (Google Bug Hunters) @GoogleVRP

a year ago

Google CTF is on! I'm especially curious how many teams will be able to solve the challenge "in the shadows" 😉

0 20 91 16K 17

Download Image

3 2 36 14K 3

@[email protected] @SecurityMB

a year ago

Czy można zgłaszać propozycje odcinków @RadioNaukowe? Jeśli tak, to świetnie byłoby posłuchać o ostatnich zmianach w języku polskim, rjp.pan.pl 😀

2 0 4 2K 0

Marc Stevens @realhashbreaker

a year ago

Here is a 72-byte alphanum MD5 collision with 1-byte difference for fun: md5("TEXTCOLLBYfGiJUETHQ4hAcKSMd5zYpgqf1YRDhkmxHkhPWptrkoyz28wnI9V0aHeAuaKnak") = md5("TEXTCOLLBYfGiJUETHQ4hEcKSMd5zYpgqf1YRDhkmxHkhPWptrkoyz28wnI9V0aHeAuaKnak")