17min chapter

Bug Bounty Reports Discussed cover image

The secret to finding many Criticals - Alex Chapman

Bug Bounty Reports Discussed

CHAPTER

Bug Bounty Hunting and Browser Exploitation Journey

The chapter follows the speaker's progression from binary exploitation into full-time bug bounty hunting, with a focus on identifying critical vulnerabilities within complex systems like PDF rendering functionalities using server-side browsers. They discuss their experiences with browser exploitation, including identifying reliable primitives and proof of concepts, and the challenges posed by recent security implementations in browsers like Chrome. The conversation also covers exploiting CI/CD pipelines, manipulating JDBC drivers for code execution, and the strategy of applying bugs across various programs in bug bounty hunting.

00:00

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode