PinkDraconian ✓

@PinkDraconian · joined 02 Jul 2019

▶️ YouTube: https://t.co/j2KvfZx6Un 💼 LinkedIn: https://t.co/1Ky1Jft7mj

12 027Followers

296Following

3 586Posts total

84.8KViews on collected posts

Derniers posts

PinkDraconian ✓@PinkDraconian6 Sep

This isn't scary at all 😅 651 views · 2 likes · 0 reposts · 1 replies Open on X →

PinkDraconian ✓@PinkDraconian4 Sep

I found a vulnerability in a mobile app that allowed me to overwrite the app's logo 😅 Of course I changed it to "GREAT SUCCESS!" (On staging!!!) S3 buckets keep on being good scope to attack. This API had an endpoint /upload-to-s3?filename=file You could give it any filename h 4.6K views · 98 likes · 1 reposts · 6 replies Open on X →

PinkDraconian ✓@PinkDraconian4 Sep

Found an unauthenticated SQL injection 🤞 Fingers crossed that it's not a dupe! And with that I don't mean a dupe with a bug bounty hunter, I mean a dupe with a bad actor! 2.6K views · 55 likes · 0 reposts · 3 replies Open on X →

PinkDraconian ✓@PinkDraconian3 Sep

@PinkDraconian This is very cool! But please don’t call it RCE. A user has to download the map, which makes it LCE. Still a major problem, and it’s a very fun bug. Congrats! 727 views · 2 likes · 0 reposts · 1 replies Open on X →

PinkDraconian ✓@PinkDraconian3 Sep

This was such fun research to do! 🔥 https://t.co/TGw8R2dcWY 8K views · 98 likes · 5 reposts · 5 replies Open on X →

PinkDraconian ✓@PinkDraconian3 Sep

Our researcher @PinkDraconian found a new RCE in MECCHA CHAMELEON, the hide-and-seek game with 15M copies sold in its first month. The map you're prompted to download when you join a match could write files anywhere on your PC, and he turned that into code execution on reboot. 13K views · 68 likes · 9 reposts · 6 replies Open on X →

PinkDraconian ✓@PinkDraconian3 Sep

So how do we get around that? Well, I've written a blog post going into a lot more detail on this, so definitely check it out 👇 https://t.co/uhwqO93i6d 2.3K views · 28 likes · 4 reposts · 0 replies Open on X →

PinkDraconian ✓@PinkDraconian3 Sep

But in the end, we're still saving a real audio file to this file. It may have the `exe` extension but it's not a real executable https://t.co/UURbnsoUaw 2.2K views · 5 likes · 0 reposts · 1 replies Open on X →

PinkDraconian ✓@PinkDraconian3 Sep

That's when I remembered a neat Windows trick: If you have a NULL (\u0000) byte in a filename, everything past the NULL gets dropped. So we could save our file as POC.exe\u0000. Unreal Engine will append .wav, making it POC.exe\u0000.wav But Windows removes all that! https://t. 2.1K views · 13 likes · 0 reposts · 1 replies Open on X →

PinkDraconian ✓@PinkDraconian3 Sep

Well, it's not quite as easy. The saved file get the `.wav` extension, so it's not really useful. We're just saving a real WAV file in a folder. https://t.co/Idsh2Tff5K 2.2K views · 7 likes · 0 reposts · 1 replies Open on X →

PinkDraconian ✓@PinkDraconian3 Sep

A MECCHA CHAMELEON map is more than just assets. It can also contain Blueprints. These are Unreal Engine's visual programming system where you can connect nodes to program. I starting digging through all the functions that a MECCHA CHAMELEON map can call and ... https://t.co/BmV 2.9K views · 15 likes · 0 reposts · 1 replies Open on X →

PinkDraconian ✓@PinkDraconian3 Sep

One stood out to me: Finish Recording Output It takes in some audio and saved that to a path. This means that we can easily just set the path to the Windows startup location and write files there right? %APPDATA%/Microsoft/Windows/Start Menu/Programs/Startup/ https://t.co/qt1ZZ 2.6K views · 11 likes · 0 reposts · 1 replies Open on X →

PinkDraconian ✓@PinkDraconian3 Sep

I found a Remote Code Execution in MECCHA CHAMELEON! If you play a map, that map can abuse a few cool neat bugs to write arbitrary files with (semi-)arbitrary content anywhere on your system, eventually leading to RCE 🧮 🧵 Want to know how? Read this thread 👇 https://t.co/ntOSbB 40.7K views · 413 likes · 50 reposts · 16 replies Open on X →

Face aux comptes de taille comparable

13 posts des 90 derniers jours, à côté de la tranche de 10K–100K abonnés. diffusé largement, mais peu de ces spectateurs réagissent.

Vues médianes2 602ce compte1 015médiane pour 10K–100K

Portée, %21.63%ce compte4.00%médiane pour 10K–100K

Engagement, %0.66%ce compte1.55%médiane pour 10K–100K

Indicateur	Ce compte	Médiane pour 10K–100K	Rapport
Vues médianes par post	2 602	1 015	2.56×
Portée (vues ÷ abonnés)	21.63%	4.00%	5.41×
Taux d'engagement	0.66%	1.55%	0.43×

Autres comptes de cette tranche → Comparer avec un autre compte → Comment ces repères sont établis →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.

Views per post

40.7K3 Sep

2.6K

2.9K

2.2K

2.1K

2.2K

2.3K

13K

727

2.6K4 Sep

4.6K

6516 Sep

Last 13 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.

Engagement rate per post

1.19%3 Sep

0.46%

0.55%

0.36%

0.66%

0.27%

1.41%

0.67%

1.34%

0.41%

2.20%4 Sep

2.29%

0.46%6 Sep

Reactions — likes, reposts, replies and quotes — divided by views. Median for 10K–100K accounts is 1.55%.

What the audience does

Likes70.0%815 in total

Reposts5.9%69 in total

Replies3.7%43 in total

Quotes0.8%9 in total

Bookmarks19.6%228 in total

Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.

The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.

Derniers posts

Face aux comptes de taille comparable

Growth & engagement

Views per post

Engagement rate per post

What the audience does

Comptes similaires