bughunters-mobile-misc

star 0

Personal Google VRP reports by omespino — mobile and desktop miscellaneous findings. Local file read via Chrome file:// (file:///etc/environment has JS-compatible VAR="value" syntax, vars accessible in global scope). No rate limit + IDOR sequential on Android TV setup/lookup endpoint (seq + xargs -P20 parallel enumeration, ~900 devices/10K requests). XSS via PowerPoint 97-2003 javascript: hyperlink in Gmail iOS and Google Drive iOS (must be .ppt not .pptx). Spanish triggers — "chrome file://", "android tv idor", "powerpoint xss ios", "gmail ios xss", "drive ios xss", "ppt xss", "file:// chrome vulnerabilidad", "android tv enumeration", "lookup android tv".

By omespino schedule Updated 5/26/2026

play_arrow Run Skill in Manus View GitHub

Skill instructions (SKILL.md) could not be loaded from local cache or raw GitHub repository.

Install via CLI

npx skills add https://github.com/omespino/ai_config --skill bughunters-mobile-misc

Repository Details

star Stars 0

call_split Forks 0

navigation Branch main

article Path SKILL.md