Penetration tester and full time hacker. I’m open for penetration testing contracts - see about page.

Security

Posts about cybersecurity, and related topics.

Unicode conversion to replacement characters [EXTERNAL LINK]

Check out my blog post at: https://lab.ctbb.show/research/unicode-surrogates-to-replacement-characters

I was able to bypass file-type validation by using allowed parameter value from another part of the ecosystem and achieve RCE.