Exploring Server-Side Bugs & Unique Vulnerabilities in Bug Bounty Hunting

This chapter delves into the speaker's journey in bug bounty hunting, focusing on server-side bugs and the complexities of finding vulnerabilities. They discuss discovering basic vulnerabilities like open redirects and XSS, emphasizing the importance of understanding callback flows for exploitation. The chapter also covers incidents involving unique security vulnerabilities, such as a race condition in an access token refresh mechanism and discovering access tokens without cookies or refresh tokens, highlighting the surprises and ethical considerations faced in bug hunting.

Transcript

Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app