Daniil Buchko @daniilbuchko

ML @ Charles University Joined December 2021

Tweets

7
Followers

63
Following

246
Likes

573

David Schütz @xdavidhu

4 years ago

In March, I found an SSRF in a @googlecloud service, which gave me access to a few internal Cloud projects. I recorded myself finding the bug from start to finish. Today, I published a video where I react to these recordings and explain the issue. youtu.be/UyemBjyQ4qA

12 217 773 0 223

Download Image

Youssef Sammouda (sam0) @samm0uda

3 years ago

Multiple bugs chained to takeover Facebook Accounts which uses Gmail. ( $42k ) ysamm.com/?p=763

59 474 2K 0 448

Download Image

Alex Xu @alexxubyte

3 years ago

/1 How do Apple Pay and Google Pay handle sensitive card info? The diagram below shows the differences. Both approaches are very secure, but the implementations are different. To understand the difference, we break down the process into two flows.

462 9K 36K 0 12K

Download Image

Daniil Buchko @daniilbuchko

3 years ago

Yay, I was awarded a $2,000 bounty on @Hacker0x01! My first resolved High-severity report! hackerone.com/dxin301 #TogetherWeHitHarder

9 4 91 0 1

Zhenpeng Lin @Markak_

3 years ago

The latest Google Pixel 6 pwned with a 0day in kernel! Achieved arbitrary read/write to escalate privilege and disable SELinux without hijacking control flow. The bug also affects Pixel 6 Pro, other Pixels are not affected :)