skull (@brutecat) 's Twitter Profile
skull

@brutecat

hacker, security researcher. i run a blog @ brutecat.com

ID: 1844730892809588736

linkhttps://brutecat.com calendar_today11-10-2024 13:25:29

137 Tweet

1,1K Followers

142 Following

skull (@brutecat) 's Twitter Profile Photo

Thanks YouTube for verifying my channel! (even though i'm only at 5 subscribers...) Look forward to posting some Google VRP exploit POCs here in the future!

Thanks <a href="/YouTube/">YouTube</a> for verifying my channel! (even though i'm only at 5 subscribers...)

Look forward to posting some Google VRP exploit POCs here in the future!
skull (@brutecat) 's Twitter Profile Photo

Looks like Google has finally fixed the google.com/amp/x.com open redirect. Thankfully, there's still several other open redirects if you know where they are :)

Looks like Google has finally fixed the google.com/amp/x.com open redirect.

Thankfully, there's still several other open redirects if you know where they are :)
skull (@brutecat) 's Twitter Profile Photo

Google just removed comments for over ~2219 objects from the staging-people-pa discovery document today. All removed comments: tracker.brute.cat/api/changes/st…

Google just removed comments for over ~2219 objects from the staging-people-pa discovery document today.

All removed comments:
tracker.brute.cat/api/changes/st…
BleepingComputer (@bleepincomputer) 's Twitter Profile Photo

Google fixes flaw that could unmask YouTube users' email addresses - Lawrence Abrams bleepingcomputer.com/news/security/… bleepingcomputer.com/news/security/…

skull (@brutecat) 's Twitter Profile Photo

I've seen a lot of discussion about what the impact of an email address leak is. Here's my thoughts: - Many valuable but inactive accounts are on expired domains or old yahoo emails. Attackers can claim these domains, set up forwarding, or recreate deleted emails - then use

skull (@brutecat) 's Twitter Profile Photo

It used to be possible to leak the EXIF data of any Google user's profile picture by adding "=ip" to the end of the image URL, until recently when this got patched. No, Google does not strip EXIF when you upload a profile picture to your Google account...

WIRED (@wired) 's Twitter Profile Photo

Phone numbers are a goldmine for SIM swappers. A researcher found how to get this precious piece of information through a clever brute-force attack. wired.com/story/a-resear…