Blog | Sam Curry samcurry.net

Hacking ClubWPT Gold

samcurry.net·31w·Hacker News, Hacker News

Hacking Subaru: Tracking and Controlling Cars via the Starlink Admin Panel

samcurry.net·69w·Lobsters, Hacker News, r/programming

Hacking Kia: Remotely Controlling Cars With Just a License Plate

samcurry.net·87w

Hacking Millions of Modems (and Investigating Who Hacked My Modem)

samcurry.net·102w

Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform

samcurry.net·146w

Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More

samcurry.net·176w

Exploiting Web3's Hidden Attack Surface: Universal XSS on Netlify's Next.js Library

samcurry.net·191w

Hacking Chess.com and Accessing 50 Million Customer Records

samcurry.net·283w

We Hacked Apple for 3 Months: Here’s What We Found

samcurry.net·293w

Hacking Starbucks and Accessing Nearly 100 Million Customer Records

samcurry.net·309w

Don't Force Yourself to Become a Bug Bounty Hunter

samcurry.net·314w

Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts

samcurry.net·317w

Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty

samcurry.net·342w

Analysis of CVE-2019-14994 - Jira Service Desk Path Traversal leads to Massive Information Disclosure

samcurry.net·347w

Cracking my windshield and earning $10,000 on the Tesla Bug Bounty Program

samcurry.net·357w

Reading ASP secrets for $17,000

samcurry.net·387w

The $12,000 Intersection between Clickjacking, XSS, and Denial of Service

samcurry.net·411w

Hacking a Massive Steam Scamming and Phishing Operation for Fun and Profit

samcurry.net·419w

Exploiting Directory Traversal to View Customer Credit Card Information on Yahoo's Small Business Platform

samcurry.net·445w

How I gained access to chef, docker, AWS, and MongoDB instances in a single request

samcurry.net·459w

Log in to enable infinite scrolling