Critical Thinking - Bug Bounty Podcast
Episode 57: Technical breakdown from Miami Hacking Event - H1-305
Feb 8, 2024
Justin and Joel discuss client-side routing and path traversal bugs, challenges of cutting losses, and importance of time tracking. They explore OAuth vulnerabilities, hacking competition strategies, and the significance of setting clear goals. The podcast also touches on web element vulnerabilities in HTML5 and the technical breakdown from a Miami hacking event.
32:34
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Importance of client-side routing and path traversal in bug classes.
- Knowing when to cut losses in bug hunting and tracking time for setting goals.
Deep dives
Focus on Client-Side Bugs and Routing Issues
The episode delves into the significance of client-side bugs and routing challenges faced during a live hacking event. It emphasizes the growing importance of paying attention to client-side routing, suggesting that client-side path traversal will be a prevalent bug class in the future. The discussion also highlights the potential risks of client-side path traversals when combined with open redirects and manipulating content being placed in applications.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
