bugbounty技巧聚合20211109

漏洞报告

【Shopify 500刀】Senseitive data Related to Shopify Host -> http://shopify.zendesk.com/
http://hackerone.com/reports/1298809

【Shopify 5000刀】Blog posts atom feed of a store with password protection can be accessed by anyone
http://hackerone.com/reports/1256375

【HackerOne 2500刀】Leaked H1’s Employees Email addresses,meeting info on private bug bounty program http://hackerone-hackers.affinity.co/
http://hackerone.com/reports/1285115

挖洞技巧

Taking a quick look at output confusion in Kubernetes with Unicode
http://raesene.github.io/blog/2021/11/06/fun-with-unicode/

CVE-2021-40449
http://kristal-g.github.io/2021/11/05/CVE-2021-40449_POC.html

Client-Side Prototype Pollution
http://github.com/BlackFan/client-side-prototype-pollution/blob/master/README.md

文字来源于- 火线 Zone-云安全社区，安全小天地只做文章分享，如有侵权，请联系站长删除