Hellios Project
Ir al canal en Telegram
663
Suscriptores
-224 horas
-27 días
-530 días
Archivo de publicaciones
🔥 Chrome RCE PoC: CVE-2026-6307
A working renderer RCE Proof of Concept for CVE-2026-6307 — a V8 type-confusion bug (JS-to-Wasm deoptimization) patched in Chrome 147.0.7727.101.
✅ Full primitives (addrof/fakeobj, out-of-cage, in-cage r/w)
✅ No-ASLR RCE that patches JIT code to pop xcalc
✅ Based on Nebula Security writeup
✅ Heavily improved with frontier LLMs + human direction (4-day experiment)
This is renderer-only and still far from fully weaponized, but great for learning and research.
📥 PoC + scripts:
https://github.com/0xsha/CVE-2026-6307
#Chrome #V8 #Exploit #CVE #SecurityResearch
🔥 BRUT SECURITY — DAILY PENTEST DROP 🔥
"403 Forbidden" doesn't always mean forbidden.
Hit a locked admin panel? Don't walk away — try these path tricks first:
/admin → 403 /admin/. → 200 ✅ //admin// → 200 ✅ /./admin/./ → 200 ✅ /admin/.;/ → 200 ✅ /admin%20 → try itServers parse paths differently than WAFs filter them. That mismatch = your way in. Bonus move:
GET /anything HTTP/1.1 Host: target.com X-Original-URL: /adminSome reverse proxies trust this header blindly. 200 OK where there should've been a wall. ⚠️ Always test on scope you're authorized for. This is recon, not a free pass. 💬 Drop a like if you've ever bypassed a 403 like this in the wild. ---
A tool to find open S3 buckets in AWS or other cloud providers:
- AWS
- DigitalOcean
- DreamHost
- GCP
- Linode
- Scaleway
- Custom
Source: https://github.com/sa7mon/s3scanner
