Critical Thinking - Bug Bounty Podcast
Episode 47: CSP Research, Iframe Hopping, and Client-side Shenanigans
Nov 30, 2023
The podcast discusses the struggles of bug bounty hunting, including feeling disconnected after live hacking events and the frustration of not finding bugs. They highlight the significance of perseverance and getting into a flow state. They explore topics such as client-side paths, manipulating webpack map files, and exploiting XSS vulnerabilities in iframed domains. They also discuss the benefits of Google's extension for hacking and techniques for bypassing Content Security Policy.
01:31:52
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Taking detailed notes during hacking sessions can greatly enhance productivity and organization.
- Identifying client-side paths in JavaScript files can provide valuable scope and functionality insights for gaining access and triggering functions.
Deep dives
The Power of Taking Notes
Taking detailed notes during hacking sessions can greatly enhance productivity and organization. Through tools like Postman or Paw, hackers can structure their requests, set up variables, and even automate tasks. These tools also come in handy when handling complex HTTP requests or dealing with crypto-related challenges. Additionally, integrating note-taking and scope control features in tools like Kaido or Burp can further streamline the hacking process.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
