floating mind

[floating mind @floatingdotmind]

https://t.co/lSY126STZS

[floating mind @floatingdotmind]

WebSockets are a treasure trove for bug bounty hunters. 🚀 Let's explore how they work and vulnerabilities you can exploit. 👇
#BugBounty #WebSecurity

[floating mind @floatingdotmind]

https://t.co/I3bnkuqgnN

[Justin Gardner @Rhynorater]

Absolutely stunning work from @pspaul95 on this CSS Injection - > text node exfil technique.
https://t.co/UYPfAZWhk7

[floating mind @floatingdotmind]

@ammighorbani @jusxing Yes, If an app doesn’t verify the origin of postMessage requests, attackers can send malicious messages from any origin! This could lead to data theft or functionality abuse based on application business logic

[floating mind @floatingdotmind]

In today's web environment, the postMessage API enables cross-origin communication but can also introduce vulnerabilities if misconfigured. Let's explore how bug bounty hunters can hunt for these issues. #BugBounty #WebSecurity #postMessage

[floating mind @floatingdotmind]

Finally, special thanks to @Rhynorater, @0xteknogeek, and @fransrosen
for their valuable information and research! #bugbountytips #bugbountyhunter

[floating mind @floatingdotmind]

PostMessage Exploits and CSS Injection (Ep. 8) (https://t.co/cnH5o06xrL)