Critical Thinking - Bug Bounty Podcast

Episode 61: A Hacker on Wall Street - JR0ch17

15 snips
Mar 7, 2024
Guest
Jasmin Landry
Guest Jasmin Landry shares stories about startup security, bug bounties, discovering OAuth-related bugs, and differences between structured learning and self-teaching. They walk through arbitrary ATO's, SSTI to RCE bugs, and emphasize the challenges and surprises in bug hunting.
Ask episode
AI Snips
Chapters
Transcript
Episode notes
ANECDOTE

Meta Tag + DOM Purify Bug

  • Jasmin Landry found an auth mechanism problem combined with a DOM Purify bypass.
  • This allowed leaking OAuth codes via an HTML injection using a meta tag and image tag.
ANECDOTE

Origin Story

  • Jasmin's non-traditional security journey began with accounting, then sysadmin work.
  • He transitioned to security after discovering a computer science program poster.
ADVICE

Learning Web App Hacking

  • Learn web app hacking through self-study, hands-on practice, and reading.
  • Jasmin recommends resources like the Web Application Hackers Handbook and Peter Yaworski's book.
Get the Snipd Podcast app to discover more snips from this episode
Get the app