Race Conditions - PART 2 | Exploiting Time Sensitive Vulnerabilities | Portswigger Labs
HTML-код
- Опубликовано: 14 окт 2024
- Race Conditions are more than just Limit Overrun Vulnerabilities. They are many more variations to them and many scenarios in which they are applicable. Amongst many, using race conditions to generate a time-sensitive password reset token is one possibility (if the reset password endpoint uses just time as the seed phrase and is vulnerable to race condition vulnerability). Check out the video.
Comment your opinions...
Portswigger URL: portswigger.ne...
Awesome video! You really nailed the explanation of race conditions. I love how you made such a complex topic easy to understand with your clear examples. Your deep knowledge really comes through. Can't wait to see more videos like this from you! 💯 🔥
@@m.abhiteja7337 Thank you! It means a lot to me. Glad it helped...
detailing on point 🔥
@@nikhilvasantham7599 Thank you. Stay tuned for more.
Why does the random generator need an input?
@@hemanthbabumupparaju3622 Because, randomness isn't something feasible for a computer. A computer can perform many complex tasks and calculations by following a set of logical steps but, it can't generate anything random out of nothing. For e.g., when I ask you to say a random number, you give out a number but a lot of thought process happens in the subconscious mind; a computer isn't capable of that. So, it takes some inputs as seed phrases (input to random generator) and compounds upon it, to generate something completely different.