231 - IOT Issues and DNS Rebinding [Bug Bounty Podcast]

A mix of issues this week, not traditionally bounty topics, but there are some lessons that can be applied. First is a feature, turned vulnerability in VS Code which takes a look at just abusing intentional functionality. Several XOS bugs with a web-console. A Sonos Era 100 jailbreak which involves causing a particular call to fail, a common bug path we've seen before, and some discussion about doing fast DNS rebinding attacks against Chrome and Safari.

Links and vulnerability summaries …

abusing bounty bug bug bounty bugs code console dns feature iot jailbreak podcast sonos topics vs code vulnerability web week