SecuriTEA & Crumpets - Episode 3 - PwnFunction
SecuriTEA & Crumpets is a series where security professionals come together to talk about their background, research, and interesting topics. The third episode is with PwnFunction. PwnFunction is an independent security consultant, he is a content creator, where he creates easy to digest youtube videos on security topics, and web security challenges on his website. PwnFunction is building an interactive security platform hackercamp.co
00:00 Intro
1:34 Where did the name PwnFunction come from?
3:14 How did you get into security?
5:45 Education
8:21 Independent Consultant
13:42 CTFs
17:33 YouTube
19:33 How do you make YouTube videos?
27:34 What is Hackercamp.co
30:23 Inspiration of Hackercamp
33:05 Technical challenges building hackercamp
36:15 Business challenges building hackercamp
39:32 Advice for building a start-up
42:12 Web Security / Favorite Bugs
44:13 What do you find interesting about the web browser/security model?
46:18 XSS
50:21 Mutation XSS
52:56 DOM Clobbering
58:02 How do you approach finding vulnerabilities?
References:
https://www.buzzsprout.com/775379
https://capturetheflag.withgoogle.com/
/ @pwnfunction
https://hackercamp.co
https://xss.pwnfunction.com/
https://research.securitum.com/mutati...
/ 847990952346218496
https://bugs.chromium.org/p/project-z...
https://www.slideshare.net/x00mario/i...