Episode 27: Top 7 Esoteric Web Vulnerabilities

1

Introduction

00:00 • 2min

2

The Importance of Sleep Study

02:24 • 2min

3

Asset Note's Thought Methodology and the Path They Took to Get There

04:45 • 4min

4

The Pitfalls of Self-Authentication in JWT Tokens

08:35 • 2min

5

AES Padding Protocol for Padding Oracle Attacks

10:19 • 2min

6

How to Decrypt an AES Block With a Headless Chrome Instance

12:17 • 3min

7

How to Hack a Headless Browser

15:36 • 2min

8

Hacking in the Bug Bounty Space

17:59 • 2min

9

ATC One Four Four One Hacks Rob

20:16 • 3min

10

How to Hack a Google Search Appliance

23:18 • 2min

11

How to Crack an IOT Device

25:00 • 2min

12

The Elite Hacker's Mindset

27:09 • 5min

13

The Evolution of Short Name Scanners

31:50 • 2min

14

How to Get Your Esoteric Web Vulnerabilities Fixed

34:04 • 2min

15

Config Injection File Injection: What You Should Know

35:52 • 4min

16

How to Inject a Configuration File Into a System

40:14 • 2min

17

How to Hack a DHCPD Server

42:18 • 3min

18

The Importance of Path Traversal in APIs

45:40 • 2min

19

The Impact of Microservices on a Service's Path Traversal

47:45 • 4min

20

Cookie Jar Overflow: Exploiting Native Browser Behavior

51:17 • 4min

21

Ermina on Cookie Bombing

55:13 • 2min

22

How to Avoid Cookie Jar Overflow

56:48 • 2min

23

How to Hack Tricks to Save Time and Money

58:46 • 3min

24

How to Set a Cookie Jar Limit in a Browser

01:01:40 • 2min

25

Cross-Site Leak: A Common Vulnerability Over the Next Few Years

01:03:23 • 3min

26

How to Exploit a Vulnerability in a Browser

01:06:00 • 3min

27

Cross Site Leak Techniques

01:08:45 • 2min

28

UNC Path Leaks

01:10:40 • 3min

29

How to Exploit NTLM Hashes

01:13:48 • 2min

30

The Importance of Impactful Link Hijacking

01:15:20 • 2min

31

How to Use GitHub to Find Impactful Vulnerabilities

01:17:05 • 3min