Matan Berson

Error while fetching scope from hackerone programs

2

```bash #command rescope -u hackerone.com/hackerone -o burpscope.json #output panic: runtime error: index out of range [0] with length 0 goroutine 1 [running]: github.com/root4loot/rescope/internal/bbaas/hackerone.Scrape({0x7ffcb7bd6f7d, 0x17}) /home/hood/.local/share/go/pkg/mod/github.com/root4loot/[email protected]/internal/bbaas/hackerone/hackerone.go:57 +0x645 github.com/root4loot/rescope/internal/url.BBaas({0xc000110f10?, 0x1?, 0x9ca7c8?}, {0x0,...

Snow can be bypassed by creating a Blob URI inside a worker

7

In order to prevent Blob URIs from being created within workers, snow overrides the `Worker` constructor using the following code: ```js const native = win.Worker; win.Worker = function Worker(aURL, options)...

Snow can be bypassed using the Response.prototype.blob function

2

Snow overrides the `URL.createObjectURL` function to only allow creation of Blob URLs if the blob type is included in a specific whitelist that Snow keeps. However, if the blob isn't...