Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Partyhack 3.0 - Telegram bugbounty writeup

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Bo0oM Bo0oM
April 12, 2019
4.1k
0

Partyhack 3.0 - Telegram bugbounty writeup

Avatar for Bo0oM

Bo0oM

April 12, 2019

More Decks by Bo0oM

See All by Bo0oM
Носок на сок
Avatar for Bo0oM bo0om
0
2k
Выйди и зайди нормально
Avatar for Bo0oM bo0om
0
130
Защита от вредоносной автоматизации сегодня
Avatar for Bo0oM bo0om
0
690
Defending against automatization using nginx
Avatar for Bo0oM bo0om
0
940
Antibot pitch deck
Avatar for Bo0oM bo0om
0
210
31337
Avatar for Bo0oM bo0om
0
270
Your back is white
Avatar for Bo0oM bo0om
0
440
FTP2RCE
Avatar for Bo0oM bo0om
1
7.8k
Interpret it!
Avatar for Bo0oM bo0om
0
1.2k

Featured

See All Featured
The AI Search Optimization Roadmap by Aleyda Solis
Avatar for Aleyda Solis aleyda
2
6.4k
Lessons Learnt from Crawling 1000+ Websites
Avatar for Charles Meaden charlesmeaden
PRO
1
1.7k
Code Reviewing Like a Champion
Avatar for maltzj maltzj
529
40k
brightonSEO & MeasureFest 2025 - Winning Strategies for Black Friday CRO & PPC - Christian Goodrich
Avatar for Christian Goodrich cargoodrich
3
890
How Software Deployment tools have changed in the past 20 years
Avatar for Geshan Manandhar geshan
2
35k
The Success of Rails: Ensuring Growth for the Next 100 Years
Avatar for Eileen M. Uchitelle eileencodes
47
8.4k
Site-Speed That Sticks
Avatar for Harry Roberts csswizardry
13
1.6k
YesSQL, Process and Tooling at Scale
Avatar for Rocio Delgado rocio
174
15k
Prompt Engineering for Job Search
Avatar for Mfonobong Umondia mfonobong
0
570
Public Speaking Without Barfing On Your Shoes - THAT 2023
Avatar for David Neal reverentgeek
1
660
The Mindset for Success: Future Career Progression
Avatar for Greg Gifford greggifford
PRO
0
560
We Analyzed 250 Million AI Search Results: Here's What I Found
Avatar for Josh Blyskal joshbly
2
2.1k

Transcript

  1. Вступление

  2. None
  3. None
  4. None

  5. КАК-ТО МНЕ НУЖНО БЫЛО ПРИДУМАТЬ ТЕМУ ДЛЯ ДОКЛАДА Как я

    телеграм ломал
  6. None
  7. None

  8. https://github.com/Bo0oM/fuzz.txt

  9. https://github.com/Bo0oM/server-status-monitor

  10. None
  11. None
  12. None

  13. https://github.com/telegramdesktop/tdesktop/blob/cc2c13d0182c62dd5a89784a49ec375306 449797/Telegram/SourceFiles/core/crash_report_window.cpp#L506

  14. None
  15. None
  16. None
  17. None
  18. None

  19. Database: tdesktopdbase Table: users [4 columns] +----------+ | Column |

    +----------+ | id | int(11) | | login | | logincrc | | pwdhash | +----------+ Database: tdesktopdbase Table: keyvalue [3 columns] +--------+ | Column | +--------+ | key | | value | | id | +--------+ Database: tdesktopdbase Table: crashes [6 columns] +----------+ | Column | +----------+ | date | | version | | dump | | id | int(11) | | platform | | viewed | +----------+
  20. None
  21. None
  22. None

  23. https://t.me/WebPwn https://twitter.com/i_bo0om