PAYATU

Nikhil Mittal

Ex-Bandit
Former Security Consultant at Payatu, working on web and application security. Has authored 7 blogs, 9 published CVEs, 2 talks/webinars for Payatu.
PAYATU

Nikhil Mittal

Ex-Bandit
Former Security Consultant at Payatu, working on web and application security. Has authored 7 blogs, 9 published CVEs, 2 talks/webinars for Payatu.
Former Security Consultant at Payatu, working on web and application security. Has authored 7 blogs, 9 published CVEs, 2 talks/webinars for Payatu.
PAYATU

Nikhil Mittal

Ex-Bandit

CVEs published

Vulnerabilities discovered and responsibly disclosed. Each links to the Payatu advisory.

Safari Login AutoFill

Safari Login AutoFill A malicious attacker may cause Safari to suggest a password for the wrong domain
Browser
Spoofing
High
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Safari reader download permission bypass

Safari reader download permission bypass A malicious attacker may be able to change the origin of a frame for a download in Safari Reader mode
Browser
Authentication & Access Bypass
Low
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Safari reader same origin policy (SOP) bypass

Safari reader same origin policy (SOP) bypass An issue in Safari Reader mode may allow a remote attacker to bypass the Same Origin Policy
Browser
Authentication & Access Bypass
High
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Talks & appearances

Conferences, podcasts and workshops.
My Hacking Adventures With Safari Reader Mode
View Details
White arrow pointing diagonally up and right on black background.White arrow pointing diagonally up and right on black background.
2020
Breaking Microsoft Edge Extensions Security Policies
Nikhil Mittal
View Details
White arrow pointing diagonally up and right on black background.White arrow pointing diagonally up and right on black background.
01-12-2019

Articles by  

Nikhil Mittal

No items found.
My hacking adventures with Safari reader mode
August 27, 2020
No items found.
No items found.
No items found.
Web & API
Exploit dev & reverse engineering
Browser Security
Executing scripts in Safari Reader Mode to CSP Bypass
April 28, 2020
6 mins
Web & API
Exploit dev & reverse engineering
Browser Security
Engineers
Researchers
Research & disclosures
Guides & tutorials
Browser Security
Web & API
windows
That Evil Bookmark API in your Browser
February 26, 2020
6 mins
Browser Security
Web & API
windows
Engineers
Researchers
Research & disclosures
Application Security
Web & API
MassCode Code Execution (CVE-2020-8548)
February 4, 2020
2–3 mins
Application Security
Web & API
Engineers
Researchers
Research & disclosures
Browser Security
Mobile
Get Pwned By Scanning Firefox QR Code Reader
December 10, 2019
4–5 mins
Browser Security
Mobile
Engineers
Researchers
Research & disclosures
Web & API
windows
Browser Security
Microsoft Edge Extensions Host-Permission Bypass (Cve-2019-0678)
June 6, 2019
8–10 mins
Web & API
windows
Browser Security
Engineers
Researchers
Research & disclosures

The Bandits

Conferences, podcasts and workshops.
Bandits
All

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
Dark scene with vertical thin orange lines resembling distant illuminated bars or streaks against a black background and a faint horizontal red glow near the bottom.

Impressed by the work? Point it at your systems.

Bring the research depth behind these advisories to your own product, app or infrastructure.

Talk to an expert
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
Black downward arrow on a white background.Black downward arrow on a white background.
Explore our research
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
This is the default text value
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.