Podcasts Technology Day[0] [bounty] Web3 Universal XSS, Breaking BitBucket, and WAF Bypasses

[bounty] Web3 Universal XSS, Breaking BitBucket, and WAF Bypasses

Published: Sept. 27, 2022, 8 p.m.

Discussion this week around Chrome's Sanitizer API, and bypassing firewalls with webhooks and 0days (ModSecurity bypass), and a pre-auth BitBucket RCE.

\n

Links and summaries are available at https://dayzerosec.com/podcast/153.html

\n

[00:00:00] Introduction

\n

[00:00:31] Exploiting Web3\u2019s Hidden Attack Surface: Universal XSS on Netlify\u2019s Next.js Library

\n

[00:10:31] Breaking Bitbucket: Pre Auth Remote Command Execution [CVE-2022-36804]

\n

[00:16:25] [Chrome] Sanitizer API bypass via prototype pollution

\n

[00:23:02] How we Abused Repository Webhooks to Access Internal CI Systems at Scale

\n

[00:35:03] WAF bypasses via 0days

\n

[00:42:40] Cloning internal Google repos for fun and\u2026 info?

\n

[00:43:19] How to turn security research into profit: a CL.0 case study