Critical Thinking - Bug Bounty Podcast
Episode 68: 0-days & HTMX-SS with Mathias
Apr 25, 2024
Security researcher Mathias discusses HTMX vulnerabilities and bug bounty challenges like CSP bypass, XSS conversions, and HTMX disable bypasses. They also explore CDN-CGI functionality, CTF Challenge results, and the use of HTMX in larger applications with performance trade-offs.
01:03:53
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Discovering Cloudflare Images' semi-open redirect for subdomain redirection and client-side path traversal.
- Praising HTMX framework's simplicity and efficiency despite insecure defaults.
Deep dives
CDN-CGI Image Proxy Usage and Benefits
Through investigating CDN-CGI image proxy functionality, a feature known as Cloudflare Images was discovered, allowing for local domain-only image proxy settings. This feature includes image optimization, caching, and the ability to specify on-error redirecting URLs. With the power to issue a 307 redirect, this semi-open redirect, restricted at the top domain level, proves invaluable for scenarios requiring subdomain redirection, client-side path traversal, and potential CSRF exploitation.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
