Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Free Bugs Campaign

4357acd0098b7bd5495c9048d90c811a?s=47 8ayac
March 11, 2019
Technology
0
510

Free Bugs Campaign

Burp Suite Japan LT Carnivalの登壇資料

4357acd0098b7bd5495c9048d90c811a?s=128

8ayac

March 11, 2019
Tweet

More Decks by 8ayac

See All by 8ayac
4357acd0098b7bd5495c9048d90c811a?s=48 8ayac
0
1.4k
4357acd0098b7bd5495c9048d90c811a?s=48 8ayac
0
250

Other Decks in Technology

See All in Technology
140494d272a4d89883a94fdfdb29dea2?s=48 oracle4engineer
PRO
1
280
E53046bb9794560f541fcf2cf0b9d526?s=48 sayokomiura
0
190
Cd931bc05e7cee46b9a950a63e47ba4c?s=48 you
0
140
B0cd2f94d292187c9baaf34b3979154d?s=48 quandohr
1
1.6k
0b2426ff15397042caa863cc7965c091?s=48 kurotaky
0
120
03e869e0b971213c12889635e29e0aae?s=48 443n0511
0
100
97a7f7899e0df28c3636b8d44bbe6578?s=48 korodroid
0
160
B22a79a9c1bf42c1825ce42dedd41765?s=48 shinpsan
1
350
A64ac825509279a770c13c6fc517f11a?s=48 kawaguti
6
860
Eec11c7d221770d15a4b16104f3cf07e?s=48 eagletmt
0
120
2219597a939c895e5db6f8b7c94e2859?s=48 pojiro
3
660
1e30817651deafd932a3c7e1461111b2?s=48 kakudaisuke
0
110

Featured

See All Featured
15f2b8221f247985a27a627d2ece72f0?s=48 pauljervisheath
194
15k
06f8b41980eb4c577fa40c41d5030c19?s=48 keathley
21
830
D09fad3e36ae6841f54820be0e907f7a?s=48 rocio
154
11k
1519587b1a0febb658c36c94f6272b0d?s=48 roundedbygravity
84
8k
761be20b5ebd271008bcee1244fc5b52?s=48 matthewcrist
73
7.6k
5b9fe87ec1faa67a4599782930f45ec9?s=48 sstephenson
147
12k
Aff5641764408271f7bc398f2097edd0?s=48 denniskardys
219
120k
719435d98d452de7ac367c828266cf01?s=48 erikaheidi
20
4.7k
F68cb25ae3e5c2106997454b13b7737d?s=48 brad_frost
158
6.6k
E837d2996f52008ace055a08fbfff992?s=48 frogandcode
129
20k
C4de88ea47538e4594750e3861a341c8?s=48 brettharned
93
3.2k
E195ae45320d9202eaa01c9f1d31a416?s=48 marktimemedia
10
550

Transcript

  1. None

  2. : -> @8ayac (Twitter/HackerOne/Flickr) 2 PSIRT (’18/04~) MBSD Cybersecurity Challenges

    (’17/’18) GitLab Bug Bounty Program - Hall of Fame 7 (2018) 45 BugHunt / (←New!) CWE CWE-79 / CWE-400 Follow @8ayac 1

  3. Follow @8ayac 2

  4. Free Bugs Campaign Follow @8ayac 3

  5. Free Hugs Campaign ※ Follow @8ayac 4

  6. None
  7. None

  8. Burp Pro Cy-PSIRT HackerOne Follow @8ayac 7

  9. CVE-XXXX-XXXX … ( Burp Pro ) Follow @8ayac 8

  10. None

  11. Follow @8ayac 10

  12. Follow @8ayac 11

  13. None
  14. None

  15. Follow @8ayac 14

  16. Follow @8ayac 15

  17. + DEMO + α Stored XSS(1) - $0 - $0

    Stored XSS(2) - $0 Free Bugs Campaign Follow @8ayac 16
  18. None

  19. OSS GitLab Issue Tracker / ✨ Follow @8ayac 18

  20. None

  21. Title: Issue Stored XSS Issue Type: XSS(CWE-79) Severity: High(7~8.9) Affected

    Versions: 11.3.x < 11.3.1 11.2.x < 11.2.4 11.1.x < 11.1.7 Report: https://hackerone.com/reports/384255 Follow @8ayac 20
  22. None

  23. https://github.com/gitlabhq/gitlabhq/commit/6d360c210d3d822fc266eecc04753481ae4bda70#diff-ebb2ac556337fa87bae1c9e999fca8cfR2 Follow @8ayac 22

  24. None

  25. Follow @8ayac 24

  26. Follow @8ayac 25

  27. Follow @8ayac 26

  28. Follow @8ayac 27

  29. GitLab Public Program 10 Follow @8ayac 28

  30. Title: Issue Type: Information Exposure Through Browser Caching(CWE-525) Severity: Medium

    Affected Versions: 11.4.x < 11.4.3 11.3.x < 11.3.8 11.2.x < 11.2.7 Report: https://hackerone.com/reports/407763 Follow @8ayac 29
  31. None

  32. https://github.com/gitlabhq/gitlabhq/commit/782badd0a2cd00d2a9cbe591e78b30aca32e252b#diff-55c5b7aecfb519d0e4880eaf2788eb6e Follow @8ayac 31

  33. None

  34. Follow @8ayac 33

  35. Follow @8ayac 34

  36. Follow @8ayac 35

  37. Follow @8ayac 36

  38. Follow @8ayac 37

  39. Follow @8ayac 38

  40. Follow @8ayac 39

  41. Follow @8ayac 40

  42. Follow @8ayac 41

  43. Follow @8ayac 42

  44. Public Program Private Follow @8ayac 43

  45. Title: Stored XSS Issue Type: XSS(CWE-79) Severity: High Affected Versions:

    11.4.x < 11.4.3 11.3.x < 11.3.8 11.2.x < 11.2.7 Report: https://hackerone.com/reports/409380 Follow @8ayac 44
  46. None

  47. Follow @8ayac 46

  48. None
  49. None

  50. GitLab Public Program ! !(Low $1000) : https://hackerone.com/gitlab/policy_versions?change=3597572# Follow @8ayac

    49

  51. Follow @8ayac 50

  52. Follow @8ayac 51

  53. Follow @8ayac 52

  54. Follow @8ayac 53

  55. Follow @8ayac 54

  56. Follow @8ayac 55

  57. Follow @8ayac 56

  58. None
  59. None

  60. @zseano : Are you submitting bugs for free when others

    are being paid?... Follow @8ayac 59

  61. Follow @8ayac 60

  62. Private Private Researcher Follow @8ayac 61

  63. Private Private Researcher Follow @8ayac 62

  64. Free Bugs Campaign : Public Private Follow @8ayac 63

  65. Follow @8ayac 64

  66. Follow @8ayac 65

  67. None

  68. $500 ( ) “Private Program” GitLab ( HackEDU) 100 Burp

    ( ) Follow @8ayac 67

  69. ☺