From Theory To Practice: Navigating The Challenges Of Vulnerability Research

on YouTube ↗47m

" summary

Shows concrete bug chains and tools: a reflected XSS that only executes because of innerHTML tag soup behavior discovered by reading the HTML spec, an Angular CSTI not SSTI case fingerprinted with Wappalyzer and error-probing, and a working exploit built with Burp Collaborator plus base64 decoded payload run via constructor.constructor eval to evade blocked characters and CSP (final exfil uses document.location after finding session IDs with a BondA scan). Covers what worked, what failed, collaboration, and Portuguese legal risks.

AI-written summary · about

" chapters (7)

1. 0:00Vulnerability research journey
2. 7:05Theory to practical research
3. 15:53Case study: Self XSS discovery
4. 21:50Case study: CSTI to XSS exploit
5. 35:16Account takeover via session leak
6. 37:44Ethical hacking legalities
7. 44:28Q&A on mitigations

" related talks

• 23mJavaScript attack surfaceDavit Karapetyan · JavaScript Summit Armenia 2023
• 34mJS Security - A Pentesters PerspectivePrasanna Kanagasabei · JSConf.Asia 2015
• 58mModern web application bugsErlend Oftedal · NDC Minnesota 2019
• 41mXSS Horror ShowGareth Heyes · OWASP AppSec Research (AppSecEU) 2015
• 50mModern WebApp VulnerabilitiesErlend Oftedal · Øredev 2019
• 42mModern web application bugsErlend Oftedal · NDC Sydney 2018
• 31m360° View of XSSSviatoslav Lohyn · QA fwdays'20 online conference
• 28mOffensive and Defensive Strategies for Client-Side JS SecurityAnand Vemuri · JSConf Budapest 2016