BROADCASTS.com

Some readily understood vulnerabilities, but with some interesting impacts, from escalating self-XSS to cross-account CSRF, data exfiltration with CSS, web-cache poisoning and MFA bypassing.\n\nLinks and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/bypassing-mfa-webcache-poisoning-and-aws-sagemaker.html\n\n[00:00:00] Introduction\n[00:00:34] Humble Book Bundle: Hacking by No Starch Press\n[00:05:50] AWS SageMaker Jupyter Notebook Instance Takeover\n[00:16:39] [Glassdoor] CSS injection via link tag whitelisted-domain bypass\n[00:21:15] [Symfony] Webcache Poisoning via X-Forwarded-Prefix and sub-request \n[00:25:47] Bypassing Box\u2019s Time-based One-Time Password MFA\n[00:31:26] Exploring Container Security: A Storage Vulnerability Deep Dive\n[00:36:28] Hakluke: Creating the Perfect Bug Bounty Automation\n[00:37:10] Data Exfiltration via CSS + SVG Font\n\n\nThe DAY[0] Podcast episodes are streamed live on Twitch twice a week:\n - Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities\n - Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.\n\nThe audio-only version of the podcast is available on: \n -- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063\n -- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt\n -- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz\n -- Other audio platforms can be found at https://anchor.fm/dayzerosec\n\nYou can also join our discord: https://discord.gg/daTxTK9\nOr follow us on Twitter (@dayzerosec) to know when new releases are coming.\n\n\n#BugBounty #EthicalHacking #InfoSec #Podcast