Critical Thinking - Bug Bounty Podcast
Episode 52: Best Technical Content from Year 1 of CTBB Podcast
Jan 4, 2024
The podcast highlights the best technical moments from the past year, including topics such as exploiting meta tags and base tags in HTML, client-side path traversal and cookie jar overflow, cross environment authentication bugs, the open-faced iframe sandwich, JS hoisting, Sean Yeoh on subdomains vs IP in recon, reversing enterprise software, building out a recon flow, hacking IIS servers, automating code review with JS Weasel and AI, post message vulnerabilities and listener tracking, hiding content from scrapers and XSLT transforms, exploring the Perforce version control system and testing methodologies, Python, reverse engineering, and bug bounties.
03:00:00
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Exploiting XSS vulnerabilities using the iFrame sandwich technique in subdomains.
- Using JS hoisting to modify content within an iFrame on a victim's domain.
Deep dives
Main Idea 1
The concept of an iFrame sandwich allows for exploiting XSS vulnerabilities in subdomains that are iFramed into the main domain.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
