CSRF protection bypass feat. Teddy Katz
Full video: • $25k GitHub account takeover & justCT...
📧 Subscribe to BBRE Premium: https://bbre.dev/premium
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw
The full video is a writeup of my CTF task "phantom" from justCTF 2023 that involved a CSRF inspired by a $25,000 Oauth account takeover in GitHub and also an XSS due to invalid sanitisation.