$10k+5k Web cache poisoning - Github + Firefox - Bug Bounty Reports Explained

[@BugBountyReportsExplained]

Welcome to the comment section!
First, thanks for watching!
Make sure you are subscribed if you liked the video!
ruclips.net/user/BugBountyReportsExplained
Follow me on twitter:
twitter.com/gregxsunday
✉️ Sign up for the mailing list ✉️
mailing.bugbountyexplained.com/
☕️ Support my channel ☕️
www.buymeacoffee.com/bountyexplained
🖥 Get $100 in credits for Digital Ocean 🖥
m.do.co/c/cc700f81d215

[@yashmehta9816]

Great video! I love the clear explanation and methodical presentation.

[@BugBountyReportsExplained]

thanks! I happy you like it

[@sysrootsysroot2743]

hii

[@debprasadbanerjee5005]

5:07 Is it like Desync attack? Cause the victim is being served our request end of the day?

[@attitalks]

This is my favourite RUclips channel now

[@danieltamang2289]

Thanks man! I got one whose explanation actually comes into my mind

[@BugBountyReportsExplained]

Great to hear that Daniel!

[@AnPham-uz3td]

At 4:13 I think the body of form-urlencode should be: key=value2 in order to overwrite the key on GET request for poisoning, am i right?

[@BugBountyReportsExplained]

Well, this was a generic example just to explain what fat GET is, but if we go one step further and try to exploit web cache poisoning, indeed we need to overwrite the parameter key.

[@krishanuchhabra]

Awesome work bro !!

[@sysrootsysroot2743]

rply

[@jaywandery9269]

brother, in the 6:03 min the entry in the 3rd row, is that equivalence correct? I mean why did you disregard the b?

[@BugBountyReportsExplained]

Yes, it's correct.
../ is like coming one directory back

[@jaywandery9269]

@@BugBountyReportsExplainedthanks for explaining

[@TheThunderSpirit]

good content. 👍👍

[@BugBountyReportsExplained]

😊

[@internetandcomputerprobe4426]

really informative

[@gf384]

Thanks!

[@BugBountyReportsExplained]

thanks for watching!

[@apnadekhtu]

nice content but i don't understand all of this, i am interested in ethical hacking and bug bounty program where do i have to start? is there any good content on RUclips? please suggest me way.. one question do i need to know the programming for hacking?

[@BugBountyReportsExplained]

you do not need to know programming, but it's useful. For learning, go to OWASP materials and WebSec Academy

[@simonkoeck]

i think you misspelled referer :D

[@BugBountyReportsExplained]

haha right, I forgot to include this mistake 😂

[@geri_revay]

Referrer is the correct spelling and it was misspelled in the RFC as referer: www.reddit.com/r/ProgrammerHumor/comments/6hbpyl/http_header_referer_was_misspelled_in_the_1996/

[@hdphoenix29]

damet garm n1

[@BugBountyReportsExplained]

👌

[@0x000void]

👍

[@BugBountyReportsExplained]

👌

[@ca7986]

❤️

[@BugBountyReportsExplained]

😊

[@blueman1592]

i was great but i couldn't understand anyway

[@BugBountyReportsExplained]

which part you dont understand?

[@sysrootsysroot2743]

hii

[@abrakadabra0072]

It's 404 Like :)

[@BugBountyReportsExplained]

where is it? can't find... badum tss

[@sysrootsysroot2743]

hii

[@medhamid8003]

First Comment

[@BugBountyReportsExplained]

first response