While playing a challenge by @salvatoreabello, I found a pretty interesting way to exploit Dangling Markup with a strict CSP.
All you need is an <iframe>, <object> or <embed> set to about:blank, with a dangling name= attribute. This vulnerable page should be iframable.
@emil_lerner Thank you for providing the gif image sir! I have 1 more question. In the video you also upload a postscript file with the png file extension. Are these just normal postscript files, or are they also somehow modified to pass some mime type checks for example?
@emil_lerner Great talk sir! 1 question though. In the beginning you talk about using gif-images that do not have any palettes. I have been reading through the gif-format specification but having hard time understanding it. How can I create a gif-image that does not have a palette?
If you ignore the $25 I got as a bonus on a duplicate report about 1 week ago, I was recently awarded with my first bounty on hackerone and 3rd bounty overall. I'm pretty happy about this one!
🎯With the holidays coming up, I'm going to host a week of giveaways starting with my Hands-On Web Hacking course which includes:
✅ 100+ lessons
✅ 15+ hours of video content
✅ Dedicated community
👉🏼https://t.co/yZGD6JgBO3
🎁To enter: retweet and reply with a 🎅🏼