Creează un cont pentru a te abona la acest blog și a-i urmări articolele pe pagina Lectură.
-
After being invited to bugSWAT Mexico in October 2025, I found myself drawn back to Google research.
-
What started as a debugging endpoint info leak escalated into full remote code execution on Google Cloud's production environment.
-
A few months ago, I disabled javascript on my browser while testing if there were any Google services left that still worked without JS in the modern web.
-
Some time back, while playing around with Google API requests, I found out it was possible to leak all request parameters in any Google API endpoint.
-
Some time ago, I was looking for a research target in Google and was digging through the Internal People API (Staging) discovery document until I noticed something interesting: "BlockedTarget": { "id": "BlockedTarget", "description": "The t…
-
We've all been there - staring at Google's search box, overwhelmed by the maze of complexity hiding behind that minimalist interface, thinking it's impossible to break in.