Matheus Vrech
@vrechson
Followers
753
Following
1K
Media
19
Statuses
372
Computer Engineering UFSCar '16, bug hunter and ELT CTF player // @duph0use
Joined February 2019
Found a full-blown CSP bypass on the current version of Firefox (69). Not working on the beta version. PoC: lt;object data="javascript:alert(1)"></object>. #bugbounty.
3
42
98
RT @TransluceAI: We tested a pre-release version of o3 and found that it frequently fabricates actions it never took, and then elaborately….
0
1K
0
RT @eltctfbr: Brazil made history last weekend, and of course, ELT was a part of it!. Thanks @GaneshICMC , @boitatech , @gris_ufrj and #haw….
0
8
0
RT @caioluders: #genuary7 #genuary2025 Use software that is not intended to create art or images. Bad apple but it….
0
6
0
RT @lbherrera_: Seeing in PortSwigger's top 10 made me remember a trick I found a few years ago, where if a button….
0
13
0
RT @RedTeamVillage_: We're thrilled to share that we'll be joining @h2hconference this December in Brazil, and we want YOU to be a part of….
0
32
0
Hope to find a growing infosec community in blue sky, I would honestly be happier if I could move to another social network forever.
0
0
0
RT @lbherrera_: Seeing that Pwn2Win isn't happening this year, here's an unreleased beginner-level XSS challenge I created for it (shouldn'….
0
13
0
RT @garethheyes: Everyone knows that the RFCs for email addresses are crazy. This post will show without doubt that you should not be follo….
portswigger.net
Some websites parse email addresses to extract the domain and infer which organisation the owner belongs to. This pattern makes email-address parser discrepancies critical. Predicting which domain an
0
155
0
RT @bsysop: Servers with top-notch security measures like authentication, authorization, and ZeroTrust can still fall prey to HTTP Smugglin….
bugcrowd.com
We later discovered we had a powerful exploit affecting thousands of Google Cloud-hosted websites that were using their Load Balancer.
0
38
0
if the github team ends up not adding a background feature after this, I will be really upset.
0
3
9