187 - Top 2022 Web Hacking Techniques and a Binance Bug [Bug Bounty Podcast]

Bit slow this week, so we talk about the Top Web-hacking techniques of 2022, and some TruffleSec/XSS Hunter drama before so we cover a blockchain verification bug, and a simple path traversal to SSTI and RCE chain.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/187.html

[00:00:00] Introduction
[00:00:32] Top 10 web hacking techniques of 2022
[00:06:30] TruffleSec/XSSHunter Drama
[00:15:33] Binance Smart Chain Token Bridge Hack
[00:24:01] Insecure path join to RCE via SSTI [CVE-2023-22855]
[00:29:06] Fearless CORS: …

binance blockchain bounty bridge bug bug bounty cve drama hack hacking hunter insecure introduction path path traversal podcast rce simple slow smart ssti techniques token top 10 verification web web hacking xss