new blogpost time!!
this one's a fun writeup on a vulnerability chain i found across multiple google services that earned me a $4133.70 bounty
lots of fun css as usual! i had to recreate a bunch of drive/docs/gmail/youtube UIs c:
have fun!
https://lyra.horse/blog/2024/09/using-youtube-to-steal-your-files/
Rebane
npub1jd…408ye
2024-09-19 06:28:52 UTC
Author Public Key
npub1jd6jws6am6vmwt8yyuke86l7sxrt6zlymaynfdsqnwgr2atk2pnqt408yeSeen on
wss://relay.momostr.pinkPublished at
2024-09-19 06:28:52 UTCEvent JSON
{
"id": "279b57e211c5e278fbb7bd1e43d3939397060629e68fa017605bc077b0b1294c",
"pubkey": "937527435dde99b72ce4272d93ebfe8186bd0be4df4934b6009b903575765066",
"created_at": 1726727332,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@rebane2001/113162802490491321",
"web"
],
[
"proxy",
"https://infosec.exchange/users/rebane2001/statuses/113162802490491321",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/rebane2001/statuses/113162802490491321",
"pink.momostr"
],
[
"-"
]
],
"content": "new blogpost time!!\n\nthis one's a fun writeup on a vulnerability chain i found across multiple google services that earned me a $4133.70 bounty\n\nlots of fun css as usual! i had to recreate a bunch of drive/docs/gmail/youtube UIs c:\n\nhave fun!\n\nhttps://lyra.horse/blog/2024/09/using-youtube-to-steal-your-files/",
"sig": "87edb3ea9dd84c7828cfd08eb26cbb8ed4dbefb682a469244585c99eeb8e4e655ec083983d477a76490cd9b09dd31f58e4174abfbbb544fd8bc07c4e340a0ba5"
}