Service Workers and Exploitation Scenarios

Discussion on the impact and exploitation scenarios of service workers, including installing service workers without a header, sub domain takeover, and file upload for persistence. Also touches on middleware misconfigurations and their exploitation possibilities, including using specific proxy pass rules and escape characters. Covers the topics of stored access, S3 bucket rewriting, and response headers in S3.

Play episode from 01:37:49

Transcript

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app