5k Clickjacking, Encryption Oracles, and Cursor for PoCs (Ep. 90)

Published: 26 September 2024
on channel: Critical Thinking - Bug Bounty Podcast
1,842
71

Episode 90: In this episode of Critical Thinking - Bug Bounty Podcast Joel and Justin recap some of their recent hacking ups and downs and have a lively chat about Cursor. Then they cover some some research about SQL Injections, Clickjacking in Google Docs, and how to steal your Telegram account in 10 seconds.

Follow us on twitter at:   / ctbbpodcast  
We're new to this podcasting thing, so feel free to send us any feedback here: [email protected]

Shoutout to   / realytcracker   for the awesome intro music!

====== Links ======
Find the Hackernotes: https://blog.criticalthinkingpodcast.io/
Follow your hosts Rhynorater & Teknogeek on twitter:
  / 0xteknogeek  
  / rhynorater  

====== Ways to Support CTBBPodcast ======
Hop on the CTBB Discord at https://ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.
Shop our new swag store at http://ctbb.show/swag
Today’s Sponsor: Project Discovery - tldfinder: https://www.criticalthinkingpodcast.i...

Resources:
Breaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold
https://summoning.team/blog/progress-...

Content-Type that can be used for XSS
https://github.com/BlackFan/content-t...

Clickjacking Bug in Google Docs
https://x.com/rebane2001/status/18366...

Justin's Gadget Link
https://www.youtube.com/signin?next=h...

Stealing your Telegram account in 10 seconds flat
https://lyra.horse/blog/2024/05/steal...


Timestamps
(00:00:00) Introduction
(00:08:28) Recent Hacks and Dupes
(00:14:00) Cursor
(00:25:02) Exploiting Pre-Auth SQL Injection in WhatsUp Gold
(00:34:17) Content-Type that can be used for XSS
(00:40:25) Caido updates
(00:43:14) Clickjacking in Google Docs, and Stealing Telegram account


Watch video 5k Clickjacking, Encryption Oracles, and Cursor for PoCs (Ep. 90) online without registration, duration hours minute second in high quality. This video was added by user Critical Thinking - Bug Bounty Podcast 26 September 2024, don't forget to share it with your friends and acquaintances, it has been viewed on our site 1,84 once and liked it 7 people.