Back to directory

WRITEUP #3642

MSRC is confused! 😕

OtherDependency confusion

by@ricardo_iramar(Ricardo Iramar dos Santos)

Program

Microsoft

Published

Jun 24, 2021

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://web.archive.org/web/20210910154714/https://ricardoiramar.medium.com/msrc-is-confused-5d86b23c2e88

▸ RELATED WRITEUPS

[2,500$ Bug Bounty Write-Up] Remote Code Execution (RCE) via unclaimed Node package

RCEDependency confusion

Data Theft in Salesforce: Manipulating Public Links

OtherSOQL injection

When Certificates Fail: A Story of Bypassed MFA in Remote Access

Other2FA / MFA bypass

SSTI in Bug Bounty Program: The Time I Played with Handlebars and Broke Stuff

Ghost In The Ppl Part 1: Byovdll

OtherUse-After-Free

Built with ❤️ by Shubham Rawat