
Episode 28: Surfin' with CSRFs
Critical Thinking - Bug Bounty Podcast
00:00
Chrome Extensions for Service Workers
There was this, there was this tweet you made today actually, where you were like, I'm so annoyed like when you find an iDOR and your sessions get swapped. So I wrote this JS book, Marklet that puts a cookie on the TLD of the target. And then I use request highlighter to highlight each browser a different color. If it's something super straightforward, I'll usually just like copy paste my off header or whatever it is.
Transcript
Play full episode