These CSRFs are not mitigated by SameSite=Lax #bugbounty #bugbountytips #bugbountyhunter

Full video: https://youtu.be/o2rj0utFZvg
📕 The full case study:
📧 Subscribe to BBRE Premium: https://bbre.dev/premium
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw

This video is a part of the CSRF case study where I extracted all the disclosed CSRF reports from the Internet and I studied them to adjust my CSRF bug hunting methodology. This free part of the case study covers the SameSite attribute and its impact on reports.

🖥 Get $100 in …

adjust bug bug hunting case csrf free hunting impact internet methodology reports samesite study video