OpnSec personal blog

Into the Borg – SSRF inside Google production network

opnsec.com published 2018-07-206 min read

Intro - Testing Google Sites and Google Caja In March 2018, I reported an XSS in Google Caja, a tool to securely embed arbitrary html/javascript in a webpage. In May 2018, after the XSS was fixed, I r

Points

256

HN comments

74

Submissions

1

Cited by

0 commenters

Security & PrivacySystems & Performance2018

Related posts from the same era

Announcing the first SHA-1 collision

Google Security Blog20173,030 points485 commentscited by 13 details

Why I’m done with Chrome

Matthew Green20182,357 points838 commentscited by 4 details

Reading privileged memory with a side-channel

GGoogle Project Zero20182,334 points594 commentscited by 26 details

Ken Thompson's Unix Password

Leah Neukirchen20192,101 points637 comments details

Court: Suspicionless Searches of Travelers’ Phones and Laptops Unconstitutional

ACLU20192,063 points580 comments details

Firefox Send: Free encrypted file transfer service

Mozilla Blog20192,031 points512 comments details