Web Security Vulnerabilities and Bug Bounty Hunting

This chapter covers various topics related to web security, including client-side stored XSS vulnerability, ATO mechanism using cookie bombing, and hijacking plain text passwords with service workers. It also discusses post message vulnerabilities, bug bounty hunting experiences in Dropbox and payment providers, and the importance of due diligence in assessing post message listeners. Additionally, it explores the use of message ports, potential vulnerabilities, understanding browser mechanics, and client-side race conditions with post message.

Play episode from 01:45:37

Transcript

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app