Episode 151: In this episode of Critical Thinking - Bug Bounty Podcast we’re covering Client-side advanced topics. Justin talks Joseph (and us) through Third-Party Cookie Nuances, Iframe Tricks, URL Parsing, and more.
Follow us on twitter at: https://x.com/ctbbpodcast
Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io
Shoutout to YTCracker for the awesome intro music!
====== Links ======
Follow your hosts Rhynorater, rez0 and gr3pme on X:
https://x.com/Rhynorater
https://x.com/rez0__
https://x.com/gr3pme
====== Ways to Support CTBBPodcast ======
Hop on the CTBB Discord at https://ctbb.show/discord!
We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.
You can also find some hacker swag at https://ctbb.show/merch!
Today's Sponsor: ThreatLocker. Check out ThreatLocker Elevation Control
https://ctbb.show/tl-ec
====== Resources ======
Nowasky's Tweet #1
https://x.com/nowaskyjr/status/1993421017381744974
Nowasky's Tweet #2
https://x.com/nowaskyjr/status/1992717862398800081
rep+ in Chrome DevTools
https://x.com/BourAbdelhadi/status/1992622964077179229
Terjanq Post from 2021
https://x.com/terjanq/status/1421093136022048775
====== Timestamps ======
(00:00:00) Introduction
(00:02:58) Client-side news & AI Updates
(00:12:02) Third-Party Cookie Nuances & PostMessages
(00:30:09) Iframe Tricks
(00:47:43) URL Parsing, CSPTS, and Client-side Routes