Загрузка видео...

Не удалось загрузить видео

На главную

This scrappy setup got him 10+ account takeovers on the same program 👇🏼

15,634 просмотров • 1 месяц назад •via X (Twitter)

Комментарии: 5

Фото профиля Bug Bounty Village
Bug Bounty Village1 месяц назад

At DEF CON 33, @PayPal hall of fame hacker @nytr0gen_ recalls stealing cookies from a web app behind an Akamai CDN. The app ran attacker-controlled input inside JSON responses. But the input type? Edge Side Includes, a markup language from 2004. #throwBackThursday

Фото профиля Bug Bounty Village
Bug Bounty Village1 месяц назад

@nytr0gen_ Web apps protect their cookies from XSS with `HttpOnly`. But ESI markup runs server-side, so an attacker can read those cookies anyway. The lesson? Obscure tech = completely new attack surface. Read those docs. Full talk:

Фото профиля unknown
unknown27 дней назад

how to do this??

Фото профиля Bug Bounty Village
Bug Bounty Village27 дней назад

Watch the full video!

Фото профиля Krishna Sharma
Krishna Sharma27 дней назад

@zseano @grok explain

Похожие видео