hackintoanetwork/byp-sop

🏴‍☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴‍☠️

---

Profile

• Name : 이세형 ( Sehyoung Lee, 2004.04 )
• Email : [email protected]
• Blog : hackintoanetwork.com
• Team : DEMON, ASC, DeadSec, TOOR

Education

• ~ 2022.12 : 정보보호영재교육원 고등 전문
• 2023.07 - 2024.03 : KITRI Best Of the Best 12th Vulnerability Analysis
• 2024.03 ~ : Soongsil Univ. Department of Information Security @ssu.sec
• 2024.03 ~ : Undergraduate Researcher @ssu.csec

Speaker

• 2023.08.26 : HackingCamp 27, PoC Security ( CTF Player to Hacker : 선택과 집중 )
• 2024.08.30 : CodeGate 2024, ( Exploiting SPACEX / STARLINK )

Hall of Fame

• Kakao Bug Bounty Hall of Fame 2023
• NAVER Bug Bounty Hall of Fame 2023
• Patchstack 2023 April Leader Board 1st
• SPACEX / STARLINK Hall of Fame 6th 2024
• Wordfence Vulnerability Researcher Hall of Fame 2023

Bug Bounty

SPACEX / STARLINK

• CVE-2023-49965, CVE-2023-52235

NAVER

• NBB-2777, NBB-2874, NBB-2783 ( SQL Injection, XSS )

Kakao

• KV-2023-32, KV-2023-33, KV-2023-69, KV-2023-66, KV-2023-88, KV-2024-114 ( RCE )

ARC Browser

• CVE-2024-25733

WordPress Plugins

( RCE, SQL Injection, XSS, CSRF )

• CVE-2023-29385, CVE-2023-29441, CVE-2023-30471, CVE-2023-30472
• CVE-2023-30487, CVE-2023-30493, CVE-2023-30499, CVE-2023-30779
• CVE-2023-30871, CVE-2023-30473, CVE-2023-31071, CVE-2023-30868
• CVE-2023-30877, CVE-2023-31230, CVE-2023-31233, CVE-2023-32122
• CVE-2023-32740, CVE-2023-33313, CVE-2023-33927, CVE-2023-34026
• CVE-2023-34185, CVE-2023-34181, CVE-2023-34177, CVE-2023-34174
• CVE-2023-34371, CVE-2023-34372, CVE-2023-35047, CVE-2023-35043
• CVE-2023-35098, CVE-2023-35778, CVE-2023-35780, CVE-2023-35877
• CVE-2023-35878, CVE-2023-36508, CVE-2023-35878, CVE-2023-36692
• CVE-2023-36693, CVE-2023-37977, CVE-2023-37981, CVE-2023-40215
• CVE-2023-39992, CVE-2023-40663, CVE-2023-41667, CVE-2023-41668
• CVE-2023-41669, CVE-2023-45003, CVE-2023-45064, CVE-2023-45761
• CVE-2023-45770, CVE-2023-45771, CVE-2023-46071, CVE-2023-46074
• CVE-2023-46075, CVE-2023-46076, CVE-2023-46088, CVE-2023-46089
• CVE-2023-46090, CVE-2023-46091, CVE-2023-46092, CVE-2023-46093
• CVE-2023-46191, CVE-2023-46192, CVE-2023-46193