Finding an SOQL Injection 0-Day in Salesforce
How an un-exploitable SOQL injection turned into a 0-day in Salesforce itself affecting millions of user records
Tobia Righi - Security Researcher
Recent content on Tobia Righi - Security Researcher
Latest posts
CVE-2024-9956 - PassKey Account Takeover in All Mobile Browsers
Phishing PassKeys credentials using browser intents
Sec-T presentation on BankID Hijacking and other mis-configuration in Cross-Device protocols
Here is the presentation I have at Sec-T 2024 about Account Takeovers in Swedish BankID and other Cross-Device Authentication protocols
Hijacking accounts via BankID Session Fixation attack
A common misconfiguration found in services integrating BankID, allows attackers to take over victim's accounts exploiting a Session Fixation bug
HackTheBox - Web Challenge: ExpressionalRebel
Write up for the HackTheBox web challenge called ExpressionalRebel Expressional Rebel was a very entertaining medium web challenge, the solution involved exploiting a url Uconfusion vulnerability along with a regex injection, something I believe most have not tinkered with (at least it wasn’t the case for me!) The vulnerable application was written in NodeJS, in this case we are provided the…
Machine Learning Security Evasion Competition
This blogpost contains the process and solution which got me 2nd place in the ML Security Evasion Competition sponsored by Adversa AI, CUJO AI, and Robust Intelligence. The Phishing Challenge The challenge I focused on in this competition was their phishing detection evasion challenge. The goal of the challenge was to evade 8 machine learning models designed to detect phishing pages while…
TensorFlow Remote Code Execution with Malicious Model
The purpose of this article is to show how to get RCE when a crafted malicious Tensorflow model is loaded. Remember all of this is for educational purposes only! Don’t be mean! Tensorflow Models are Programs This article is in no way reporting a vulnerability in the Tensorflow python module. As it can be read in the SECURITY section of the project, Tensorflow models should be treated as…