Self-XSS to Site-Wide CSRF on Twitter
speakerdeck.com
Self-XSS to Site-Wide CSRF on Twitter
1–3 of 3 posts
Re: Self-XSS to Site-Wide CSRF on Twitter
#2Cool, I liked it included blind alleys, too often people include just what worked to seem smarter.
Re: Self-XSS to Site-Wide CSRF on Twitter
#3Cool, I liked it included blind alleys, too often people include just what worked to seem smarter.
For sure. It definitely echoes the thrill of bug-hunting when you know you’ve found something interesting but need to dig a bit deeper.