Live Bug Bounty Hunting | Authenticated Testing the Client-Side & Server-Side on Figma's Core App

We spend 3 hours looking for attack vectors in Figma's UX/UI collaboration app, as well as discussing what types of Server-Side Injections & Client-Side Exploits are possible based on the technology stack!
Discord - / discord
Hire Me! - ars0nsecurity.com
Watch Live! - / rs0n_live
Free Tools! - github.com/R-s0n
Connect! - / harrison-richardson-ci...

[@gyro891]

Waking up to see a new video from you just made this a great Sunday! Thanks for all you do. 🔥

[@ReligionAndMaterialismDebunked]

Nice. SUNday. Hehe. :3

[@Cossaw]

if u use ctrl + space to send a request in burp instead of having to mouse click each time u can save a lot of time and energy over time. at least i prefer it :)

[@rs0n_live]

Oooh, I didn't know that hotkey existed, thank you!! Great tip!

[@cymzfr]

Thank you bro ❤❤

[@waterlord6969]

Love seeing your logic while testing targets! ❤

[@michalisz.4268]

Awesome videos dude, thank u for uploading this live!
Also, you have an OCD to catch burps automatic backup and press the hide before the window close. All the hackers/programmers/IT etc have 😂

[@KipcraftGaming]

I’m so happy you post your live’s. I’m on europe time so most of the times its hard for me to join.

[@user-nm4og5yi4e]

Happy to see u again sir🥰........Love from Nepal

[@monikasharma2931]

Your video gives me motivation 😊❤

[@FutureProsperityio]

Keep it up rs0n,💎 great content.

[@omarahmad8710]

Love your content!!!!!!❤

[@gamerz9129]

if there is a CNAME should i avoid client site injection and authanticaton etc? so i just test for cve?

[@ReligionAndMaterialismDebunked]

Nice sound and doggy. Hehe

[@SecurityTalent]

❤❤

[@Dayanandhansubramani-rj6tc]

uhhhhh is this yesterday twitch stream ??

[@rs0n_live]

Yep! I always upload them to YT the next morning.

[@lolwthy]

​@@rs0n_live❤