James Kettle

@albinowax

Director of Research at @PortSwigger. Startup advisor. Find my research, tools & contact details at jameskettle.com

United Kingdom

jameskettle.com

Joined January 2010

107 Following

85.7K Followers

Replies Reposts Media

Pinned
James Kettle
@albinowax
Jul 8, 2024
Remember you can always find my full research portfolio, upcoming presentations and contact details at jameskettle.com
10
James Kettle
@albinowax
Nov 4
$300k for a trusted internal header! I wonder if Param Miner found it... congrats to the discoverer either way!
David Singleton
@dps
Nov 3
Replying to @dps
The $300k bug was the most serious: during internal testing, four months before launch, an auth check trusted a header added by a local proxy as proof a request was safe. A migration added a second proxy layer, so outside requests could carry that header too. It exposed internal
4
James Kettle
@albinowax
Nov 2
I've been nominated for the SANS Difference Makers Awards, in the Red Teamer category! I'd love your vote: feedback.sans.org/733559 If I win*, I'll share something that genuinely surprised me involving a website, a vulnerability, and GLM 5.3 #SANSDMA #DifferenceMakers *I'll also
20
James Kettle
@albinowax
Oct 23
daybreak-blue cares so much about authorisation, I asked it to patch a bug in "scope add" and it removed the feature to make scope read-only 🤣
James Kettle
@albinowax
Oct 6
Have you ever felt like a model isn't actually trying to do what you asked? Did you just ask it wrong, or is there something else at play here? In "The model isn't cooperating", I take a little look. Link below 👇
5
James Kettle
@albinowax
Oct 13
I've started a new research project for Black Hat USA 2027 and I'm pleased to announce it has nothing to do with HTTP Desync Attacks! In spite of my best efforts, HTTP/1.1 isn't going to die anytime soon, but it's time for me to explore something else :) *accidental desync
11

James Kettle

James Kettle’s posts