bobross · HackerTrans

Submissions

What Bypassing Razer's DOM-Based XSS Patch Can Teach Us

edoverflow.com

2 pointsby bobross4년 전0 comments

What's the shortest domain? – Unicode Hacking and Tricks

youtube.com

2 pointsby bobross6년 전0 comments

How easy is it to tweet as anyone? – Twitter Hacks and Bug Bounty

youtube.com

1 pointsby bobross6년 전0 comments

How easy is it to tweet as somebody else? – Twitter Hacks and Bug Bounty

youtube.com

2 pointsby bobross6년 전0 comments

Samesite by Default and What It Means for Bug Bounty Hunters

blog.reconless.com

2 pointsby bobross6년 전0 comments

The Cookie Monster in the Browsers

speakerdeck.com

4 pointsby bobross7년 전0 comments

VPN Service

thewirecutter.com

1 pointsby bobross7년 전0 comments

Cursor Hijacking to make Twitter user appear like another user

twitter.com

2 pointsby bobross7년 전0 comments

Cursor Hijacking to make Twitter user appear like Elon Musk

twitter.com

2 pointsby bobross8년 전0 comments

UI redressing to make Twitter user appear like Elon Musk

twitter.com

2 pointsby bobross8년 전0 comments

VPN Extensions are not for privacy

blog.innerht.ml

1 pointsby bobross8년 전0 comments

VPN Extensions are not for privacy

blog.innerht.ml

1 pointsby bobross8년 전0 comments

A guide to subdomain takeovers

hackerone.com

4 pointsby bobross8년 전0 comments

Google YOLO clickjacking

blog.innerht.ml

1,304 pointsby bobross8년 전229 comments

comments

bobross

5년 전discuss

VPN browser extensions are merely proxies and most likely will leak you IP/privacy. I've written a blog post on this topic: https://blog.innerht.ml/vpn-extensions-are-not-for-privacy/

bobross

6년 전discuss

I love the concept and the user interface very much!

bobross

6년 전discuss

Any tips for people like me who have flat feet?

bobross

8년 전discuss

Clickjacking works without JavaScript assuming the targeted site works without JavaScript. HTML and CSS suffice.

bobross

8년 전discuss

To me Likejacking is more like harvesting organic likes. And YOLO leaks email address which is PII.

bobross

8년 전discuss

No, it was the full email. Besides, I've tried to suggest a fix by prompting first time users but it's been ignored for a week.

bobross

8년 전discuss

Nothing

bobross

8년 전discuss

Actually Google temporarily shuts down the service as I've tried changing API keys/domains but received the same error

bobross

8년 전discuss

You could still convince users to do a double click, no?

bobross

8년 전discuss

This is what you would see if it still worked:

https://twitter.com/LiveOverflow/status/994560352149999616