turb0

@7urb01

CTBB Full-Time Hunters' Guild Member | Recovering AppSec Engineer | /((de)?bu(g+)?(ing)?)?/i Bits, bytes, and bad ideas turb0.one

Joined March 2024

198

turb0
@7urb01
Aug 25
Some people's favorite shape is a circle. Others, a square. Mine is the shape of cross tenant cloud bugs. Research Review. youtu.be/XTuk3ZTs_So
Wiz
@wiz_io
Jul 30
🚨 CosmosEscape: We found a single key that unlocked every database in Azure CosmosDB One key >> Platform-wide impact. Microsoft fully remediated the issue. ✅ Read the full research and see how Wiz uncovered CosmosEscape: wiz.io/blog/cosmosesc…
turb0
@7urb01
Aug 18
Can't wait to see all the crazy new ways to achieve security impact with internet breaking techniques that get discovered by forking the approaches shared here. Research Review. youtu.be/WQc46XXuKdI
James Kettle
@albinowax
Aug 5
The whitepaper is live! Read "Can AI Do Novel Security Research? Meet the HTTP Terminator" here -> portswigger.net/research/http-…
turb0
@7urb01
Aug 13
Some people are just looking for an excuse to talk about JavaScript sandboxes at all times. I'm some people. Research Review. youtu.be/-de7dxdkacU
VIE, slayyyter disciple
@vie_pls
Jul 24
JavaScript Sandboxes: A Small and Casual Antipattern Review jamvie.net/posts/2026/07/…
turb0
@7urb01
Aug 4
I'm not sure which is crazier, the icy chain here or the fact that the prompt and setup was shared so freely that I can just toss at other hardened targets and get RCE. Research review. youtu.be/BNm_jF4jDwc
hashkitten
@hash_kitten
Jul 20
Seems that wp2shell PoCs are now floating around the internet, so we've published our blog post including our research methodology for finding the bug as well as a deep dive into the chain itself - slcyber.io/research-cente…
turb0
@7urb01
Jul 21
These kinds of bugs are cool because such small discrepancies and have such huge impact. Research review. youtu.be/uzBPzMQiAE8
Calif
@calif_io
Jul 1
MAD Bugs: My Cousin Vinyl (CVE-2026-50052) So the story went like this: Squid was bleeding from a 29-year-old heap overread in her default config. Naturally, she did the only sensible thing: she called her cousin, Vinyl. It turns out Vinyl also had a family problem of his own.