Back to directory

WRITEUP #909

How I Hacked Microsoft Teams and got $150,000 in Pwn2Own

XSSElectronRCE

by@kinugawamasato(Masato Kinugawa)

Bounty

150,000

Program

Microsoft (Teams)

Published

Jul 31, 2023

Added to HackDex

Feb 1, 2024

Read Full Writeuphttps://speakerdeck.com/masatokinugawa/how-i-hacked-microsoft-teams-and-got-150000-dollars-in-pwn2own

▸ RELATED WRITEUPS

Evernote RCE: From PDF.js font-injection to All-platform Electron exposed ipcRenderer with listened BrokerBridge Remote-Code Execution

From MLOps to MLOops: Exposing the Attack Surface of Machine Learning Platforms

Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!

RCEConfusion attack

Studying 0days: How we hacked Anki, the world's most popular flashcard app

RCEComponents with known vulnerabilities

We hacked Anki - 0 day exploit from studying someone elses flashcards

RCEComponents with known vulnerabilities

Built with ❤️ by Shubham Rawat