Загрузка видео...
Не удалось загрузить видео
This scrappy setup got him 10+ account takeovers on the same program 👇🏼
15,634 просмотров • 1 месяц назад •via X (Twitter)
Комментарии: 5

Bug Bounty Village1 месяц назад
At DEF CON 33, @PayPal hall of fame hacker @nytr0gen_ recalls stealing cookies from a web app behind an Akamai CDN. The app ran attacker-controlled input inside JSON responses. But the input type? Edge Side Includes, a markup language from 2004. #throwBackThursday

Bug Bounty Village1 месяц назад
@nytr0gen_ Web apps protect their cookies from XSS with `HttpOnly`. But ESI markup runs server-side, so an attacker can read those cookies anyway. The lesson? Obscure tech = completely new attack surface. Read those docs. Full talk:

unknown27 дней назад
how to do this??

Bug Bounty Village27 дней назад
Watch the full video!

Krishna Sharma27 дней назад
@zseano @grok explain

