Leaking VPN traffic through non-RFC1918 local IP addresses
该报告还没有中文解读。
原文摘录
摘自原文（6467 字符中的一小部分）
This finding is part of a multi-party coordinated disclosure on VPN security. We plan to publicly disclose relevant findings in early August 2023. Please don't give a bug bounty if you disagree with the eventual public disclosure, we will still be happy to discuss details even without a bounty. …
原文中的代码
sudo ./vpn_tester.sh wlan0 wlan0 testnetwork abcdefgh --vpn-local nyu.edu
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Mozilla 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @vanhoefm · 版权归作者与 Mozilla 所有