Critical Thinking - Bug Bounty Podcast Episode 88: News, Tools, and Writeups
Sep 12, 2024
Dive into the world of web security as the hosts explore a new cheat sheet for URL validation bypass. Learn about the innovative Sanic DNS for high-speed lookups and Dockerization strategies for Orange Confusion Attacks. Discover insights on PHP object injection exploits affecting WordPress and discuss the impact of browser tracking protections. With a blend of nostalgia and creativity, the conversation highlights the evolving landscape of cybersecurity and the importance of collaboration in tackling vulnerabilities.
AI Snips
Chapters
Transcript
Episode notes
URL Validation Bypass Cheat Sheet
- Use Portswigger's new URL validation bypass cheat sheet for testing bypasses.
- It generates payloads for URLs, host headers, and CORS, saving time and effort.
Sanic DNS for High-Speed Resolution
- Consider Sanic DNS for high-speed DNS resolution, exceeding MassDNS in speed.
- It handles millions of lookups per second, useful for large-scale recon.
Sanic DNS Infrastructure
- Sanic DNS's high speed requires rethinking DNS infrastructure.
- Most resolvers aren't designed for millions of requests per second.