I like to break stuff | Vulnerability Researcher
Italy
Joined February 2022
- Tweets79
- Following577
- Followers775
- Likes1.8K
Pinned Tweet
I’ve been digging into HTTP Trailers and found some new smuggling techniques:
sebsrt.xyz/blog/trailing-dan…
A 12 year-old race condition to object injection and RCE, preauth in some configurations, I found in DokuWiki (CVE-2026-113356).
gist.github.com/sebastianosr…
Just published the writeup on qwik's deserialization RCE:
sebsrt.xyz/blog/a-qwik-rce/
I found an interesting RCE due to unsafe deserialization in qwik js framework. I'll post the writeup analysis
github.com/QwikDev/qwik/secu…
TR.MRG HTTP Request Smuggling?
author writeup for Trailing Danger - m0lecon 2026 teaser CTF 👉github.com/sebastianosrt/My-…
I'll share more about trailer fields parsing vulnerabilities soon.
I found that python hyper-h2 didn't correctly validate headers allowing http2 request splitting via crlf injection on http1 downgrades. So any proxy that uses it (like mitmproxy) might be vulnerable.
github.com/python-hyper/h2/s…
Interesting one :)
Just found an interesting way to bypass some nonce-based CSPs and made a small XSS challenge with an exploitable scenario. See if you can find it before I tell!
Source JS:
gist.github.com/JorianWoltje…
URL:
greeting-chall.jorianwoltjer…
Found a solution? Please DM to avoid spoilers, thanks!
8
1,070
I have just updated my site, here's the writeup of cve-2024-48962 I found in Apache Ofbiz.
sebsrt.xyz/blog/cve-2024-489…
4
406