17-08-26, 11:56 PM
Hi all.
I've been thinking about selling this exploit for a loooong time.
I've been scraping by, doing some work here and there, and the time has come...
I need to start selling some of my most prized exploits I've stored in my exploit library, including the big kahuna - THE CHAINLINK RCE.
I was going to submit this to bug bounty, but I don't agree with bug-bounty,...much anymore, and I don't ass kiss, and I don't play politics.
Now onto the juicy technical details.
This exploit is RCE. As in, full admin control over a master node. Additionally, this enables :
Impact:
This is a full rce POC exploit. I know what I have and the value of it. So please, don't waste my time. Worst case I'll just submit this to the bugbounty.
If you want to be taken seriously as a buyer, reply to this thread, then PM me.
(Don't even msg me if you're still in the $xxxx four figures range)
From there I will show you pics, then a video POC, until we reach a deal.
I have escrow on standby.
Cheers.
I've been thinking about selling this exploit for a loooong time.
I've been scraping by, doing some work here and there, and the time has come...
I need to start selling some of my most prized exploits I've stored in my exploit library, including the big kahuna - THE CHAINLINK RCE.
I was going to submit this to bug bounty, but I don't agree with bug-bounty,...much anymore, and I don't ass kiss, and I don't play politics.
Now onto the juicy technical details.
This exploit is RCE. As in, full admin control over a master node. Additionally, this enables :
- theft of ethereum private keys
- manipulation of on chain data feeds
- full bypass of gateway level auth and WAF policies
Impact:
- wallet access - 200 ok response on /v2/keys/eth allows visibility on node wallets
- oracle sabotage - An attacker could reprogram price feeds. (ie) setting price of an asset to $.01 would trigger liquidations across defi platforms like AAve or compound.
This is a full rce POC exploit. I know what I have and the value of it. So please, don't waste my time. Worst case I'll just submit this to the bugbounty.
If you want to be taken seriously as a buyer, reply to this thread, then PM me.
(Don't even msg me if you're still in the $xxxx four figures range)
From there I will show you pics, then a video POC, until we reach a deal.
I have escrow on standby.
Cheers.