1
Finding an authorization bypass on my own website
The mysqljs parameterized query parser handles objects as column name and key, leading to alterations of the query.
Maxwell Dulin
Security Researcher (hacker) at Asymmetric Research, who previously worked at Security Innovation. Previously, I specialized in everything low level about computers - from wireless signals to hardware to operating systems. Now, I'm tackling the web3 world. Read personal hacking experiences, research and notes here.
- Popular posts
- 1
- Total points
- 107
- HN comments
- 118
- Rank
- #20,369 personal
Visit maxwelldulin.com → On Hacker News Mar 2022 – Mar 2022