Bug Bounty Meetup vol. 5
Join the fifth Hacking Meetup of the HackerOne Club Germany! We are going to hack on a live target, connect, collaborate, and learn.
Hi there 👋
My name is Lauritz and I am an IT-Security researcher and penetration tester based in Germany.
Upcoming Events
Talks, workshops, and meetups I will host or am scheduled to attend.
SSO Security Workshop
The next SSO Security Workshop will take place on March 18th, from 11:00 to 16:00, remote. In this workshop, we will explore the security aspects of Single Sign-On (SSO) systems, including common vulnerabilities and best practices for securing SSO implementations.
Recent Advisories
Recent research and write-ups on relevant web security topics.
Sign-in with World ID: XSS and ATO via OIDC Form Post Response Mode
Recently, Tools for Humanity partnered with the German HackerOne Club to run a one-week virtual and in-person Hacking Meetup. In the course of the meetup, a critical vulnerability within the Sign-in with World ID implementation was found, which affected the OpenID Connect form_post Response Mode and could allow malicious actors to take over end-user accounts at third-party applications that utilize the Sign-in with World ID mechanism. The vulnerability was addressed within a few hours after triage.
Personal Access Token Disclosure in Asana Desktop Application
This post gives an insight into a sensitive data exposure vulnerability in Asana for Mac that was rated as P1 and was awarded a bounty. This was the very first report of that kind for me. Still, I think this type of deployment and build chain issue is more common than one may think.
Flickr Account Takeover
This post gives a deep dive into a critical security flaw that was present in Flickr’s login flow. The authentication at identity.flickr.com is implemented using AWS Cognito. By exploiting configuration issues and violations of the OpenID Connect specification, it was possible to takeover any Flickr account without user interaction.