pentester.land· Feb 25, 2024· by Michael Hyndman

How I hacked into Google’s internal corporate assets

Open Original Article ↗
Target Program: Google
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#Dependency confusion#RCE#Supply chain attack

More Writeups Like This

pentester.land

[2,500$ Bug Bounty Write-Up] Remote Code Execution (RCE) via unclaimed Node package

by Fuleki Ioan
pentester.land

Vulnerabilities In CocoaPods Open The Door To Supply Chain Attacks Against Thousands Of iOS And MacOS Applications

by Reef Spektor, Eran Vaknin
pentester.land

Fixing Typos And Breaching Microsoft’s Perimeter

by John Stawinski, Adnan Khan (@adnanthekhan)
pentester.land

Wiz Research finds architecture risks that may compromise AI-as-a-Service providers and consequently risk customer data; works with Hugging Face on mitigations

by Shir Tamari (@shirtamari), Sagi Tzadik (@sagitz_)