How I Hacked Microsoft Teams and got $150,000 in Pwn2Own
Target Program: Microsoft (Teams)
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by Patrick Peng (@retr0reg)Evernote RCE: From PDF.js font-injection to All-platform Electron exposed ipcRenderer with listened BrokerBridge Remote-Code Execution
pentester.land
by Paul GersteRemote Code Execution in Tutanota Desktop due to Code Flaw
pentester.land
by Mizu (@kevin_mizu)Linux local electron application script-src: self bypass
pentester.land
by Luca Carettoni (@lucacarettoni)