Discussion this week around Chrome's Sanitizer API, and bypassing firewalls with webhooks and 0days (ModSecurity bypass), and a pre-auth BitBucket RCE.

Links and summaries are available at https://dayzerosec.com/podcast/153.html

[00:00:00] Introduction

[00:00:31] Exploiting Web3’s Hidden Attack Surface: Universal XSS on Netlify’s Next.js Library

[00:10:31] Breaking Bitbucket: Pre Auth Remote Command Execution [CVE-2022-36804]

[00:16:25] [Chrome] Sanitizer API bypass via prototype pollution

[00:23:02] How we Abused Repository Webhooks to Access Internal CI Systems at Scale

[00:35:03] WAF bypasses via 0days

[00:42:40] Cloning internal Google repos for fun and… info?

[00:43:19] How to turn security research into profit: a CL.0 case study