Episode 119: Abusing Iframes from a client-side hacker

Critical Thinking - Bug Bounty Podcast

Player FM - Internet Radio Done Right

44 subscribers

הוסף לפני two שנים

תוכן מסופק על ידי Justin Gardner (Rhynorater) & Joseph Thacker (Rez0), Justin Gardner (Rhynorater), and Joseph Thacker (Rez0). כל תוכן הפודקאסטים כולל פרקים, גרפיקה ותיאורי פודקאסטים מועלים ומסופקים ישירות על ידי Justin Gardner (Rhynorater) & Joseph Thacker (Rez0), Justin Gardner (Rhynorater), and Joseph Thacker (Rez0) או שותף פלטפורמת הפודקאסט שלהם. אם אתה מאמין שמישהו משתמש ביצירה שלך המוגנת בזכויות יוצרים ללא רשותך, אתה יכול לעקוב אחר התהליך המתואר כאן https://he.player.fm/legal.

All About Change

1
Eli Beer & United Hatzalah: Saving Lives in 90 seconds or Less 30:20

לפני 15 ימים30:20

הפעל מאוחר יותר

רשימות

לייק

אהבתי

30:20

Eli Beer is a pioneer, social entrepreneur, President and Founder of United Hatzalah of Israel. In thirty years, the organization has grown to more than 6,500 volunteers who unite together to provide immediate, life-saving care to anyone in need - regardless of race or religion. This community EMS force network treats over 730,000 incidents per year, in Israel, as they wait for ambulances and medical attention. Eli’s vision is to bring this life-saving model across the world. In 2015, Beer expanded internationally with the establishment of branches in South America and other countries, including “United Rescue” in Jersey City, USA, where the response time was reduced to just two minutes and thirty-five seconds. Episode Chapters (0:00) intro (1:04) Hatzalah’s reputation for speed (4:48) Hatzalah’s volunteer EMTs and ambucycles (5:50) Entrepreneurism at Hatzalah (8:09) Chutzpah (14:15) Hatzalah’s recruitment (18:31) Volunteers from all walks of life (22:51) Having COVID changed Eli’s perspective (26:00) operating around the world amid antisemitism (28:06) goodbye For video episodes, watch on www.youtube.com/@therudermanfamilyfoundation Stay in touch: X: @JayRuderman | @RudermanFdn LinkedIn: Jay Ruderman | Ruderman Family Foundation Instagram: All About Change Podcast | Ruderman Family Foundation To learn more about the podcast, visit https://allaboutchangepodcast.com/ Looking for more insights into the world of activism? Be sure to check out Jay’s brand new book, Find Your Fight , in which Jay teaches the next generation of activists and advocates how to step up and bring about lasting change. You can find Find Your Fight wherever you buy your books, and you can learn more about it at www.jayruderman.com .…

לפני 26 ימים 33:54

MP3•בית הפרקים

Episode 119: In this episode of Critical Thinking - Bug Bounty Podcast Justin does a mini deep dive into the world of iframes, starting with why they’re significant, their attributes, and how to attack them.

CORRECTION: Some of my comments on the latest episode of the pod were woefully inaccurate about the `csp` attribute of an iframe. Def should have read the spec more thoroughly. Please see the #corrections channel in Discord for the deets.

Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io

Shoutout to YTCracker for the awesome intro music!

====== Links ======

Follow your hosts Rhynorater and Rez0 on Twitter:

https://x.com/Rhynorater

https://x.com/rez0__

====== Ways to Support CTBBPodcast ======

Hop on the CTBB Discord at https://ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

You can also find some hacker swag at https://ctbb.show/merch!

====== Resources ======

Episode with JR0ch17

ctbb.show/61

Exacerbating Cross-Site Scripting: The Iframe Sandwich

https://coopergyoung.com/exacerbating-cross-site-scripting-the-iframe-sandwich/

====== Timestamps ======

(00:00:00) Introduction

(00:01:20) Why are Iframes useful

(00:05:11) Attributes of Iframes

(00:21:39) Iframe Attacks

(00:29:53) Iframe Fun Facts

121 פרקים

#Tech #Justin Gardner (Rhynorater

Critical Thinking - Bug Bounty Podcast