Episode 28: Surfin' with CSRFs
Critical Thinking - Bug Bounty Podcast
00:00
How to Fix a CSERF Bug
I wasn't at either of the last Vegas or Austin events. So we were hacking together. I was training him, you know, with some stuff and there's this app that I guess I can't specify. It looks very vulnerable to CSERF, right? But here's the thing: It deletes your account and he actually uses the app. Is it deleted his whole account? Yeah. Like this is a several thousand dollar bug here.
Transcript
Play full episode
