
Episode 9: Headless Browser SSRF & RebindMultiA Tool Release + Web3 Bug
Critical Thinking - Bug Bounty Podcast
00:00
How to Generate a PDF
A lot of the time this happens in like pdf generation type stuff. You'll see actually HTML passed into these endpoints, right? Like you know, you'll look at the the HTTP request and they'll actually be less than greater than a bold tag or something like that. If if you're fuzzing fields, so start with those payloads and then you can you know Take a look at the source code take a look at other vulnerabilities that have affected that to see if you can exploit it nice. The homsec actually has either a talk or presentation about this Um, so we can maybe leave a link for that.
Transcript
Play full episode