Episode 68: 0-days & HTMX-SS with Mathias
Critical Thinking - Bug Bounty Podcast
Bug Hunting Frustrations and CDN CGI Work
This chapter explores bug hunting experiences and frustrations caused by small issues like case flips or encoding problems. Additionally, it delves into CDN CGI work, particularly focusing on HTMX, deprecated formats like HX-on for defining multiple handlers, and potential research opportunities around error handling when transitioning between handlers. The discussion also includes a bypass for Firefox CSP and the discovery and investigation process of a specific HTTP-only CDN to CGI endpoint called BinRec, highlighting its reflection of the entire request and potential implications for bypassing CSP in Firefox.
00:00
Transcript
Play full episode
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
