ZipJar, a little bit unexpected attack chain

Jul 19, 2023 · 7 min read · The upcoming .zip TLDs from Google brought some discussion about attack vectors. Most of those attack vectors are not completely new, like using an "@" to split between username and host. While playing a little bit around, an unexpected attack chain ...