Episode 108: How to Hack Salesforce, ServiceNow, and Other SaaS Products With Aaron Costello

Episode 108: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph bring on Aaron Costello to discuss SaaS security and misconfigurations as a bug class. He also gives some in-depth examples from Salesforce, ServiceNow, and Power Pages.
Follow us on twitter at: x.com/ctbbpodcast
Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io
Shoutout to x.com/realytcracker for the awesome intro music!
====== Links ======
Follow your hosts on Twitter:
x.com/Rhynorater
x.com/rez0__
====== Ways to Support CTBBPodcast ======
Hop on the CTBB Discord at ctbb.show/discord!
We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.
You can also find some hacker swag at ctbb.show/merch!
Today’s Sponsor: AppOmni. Get AppOmni's Definitive Guide to SaaS Security criticalthinkingpodcast.io/AppOmni
Today’s Guest:
x.com/ConspiracyProof
====== Resources ======
Aaron's Blog
enumerated.ie
Data Exposure and ServiceNow: The Elephant in the ITSM Room
enumerated.ie/index/servicenow-data-exposure
Salesforce Lightning - An in-depth look at exploitation vectors for the everyday community
enumerated.ie/index/salesforce
Lightning Components: A Treatise on Apex
Security from an External Perspective
go.appomni.com/hubfs/Collateral/AppOmni_Labs_W…
Microsoft Power Pages: Data Exposure Reviewed
appomni.com/ao-labs/microsoft-power-pages-data…
====== Timestamps ======
(00:00:00) Introduction
(00:03:00) Aaron Costello, Arbitrary File Upload, & App Cache Manifest Poison bug
(00:13:37) SAAS Misconfigurations as a bug class
(00:43:27) SalesForce Misconfigurations
(01:11:30) Microsoft Power Pages