Jump to content

Tailscale RCE


aeline

Recommended Posts

Yep, probably the writeup of the year. Fantastic work. The whole concept of Tailscale always felt sketchy to me despite the solid team behind it, and this shows how it can go wrong!

Another key part of the writeup is how it shows that vulnerabilities considered "dead" due to strong mitigations in the common scenario (DNS rebinding in Chrome) can recur outside of the pure browser context.

Edited by hyperreality
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...