215 - DEF CON, HardwearIO, Broken Caching, and Dropping Headers [Bug Bounty Podcast]

We are back, and talking about our summer with a lengthy discussion about our DEF CON experiences before getting into some favorite issues from the summer. Including a neat twist on a PHP security feature that might be using in your bug bounty chains. A look at classic crypto issue (unauthenticated encrypted blobs), and an easily missed caching issue.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/215.html

[00:00:00] Introduction
[00:02:15] Summer Recap - HardwearIO
[00:11:51] Summer Recap …

back bounty bug bug bounty con def def con experiences feature headers php podcast security summer talking