Episode 140: Crit Research Lab Update & Client-Side Tricks Galore

Episode 140: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph give an update from The Crit Research Lab, as well as some writeups on postMessage vulnerabilities, Cookie Chaos, and more.
Follow us on X at: x.com/ctbbpodcast
Got any ideas and suggestions? Send us feedback at info@criticalthinkingpodcast.io
Shoutout toYTCracker (twitter.com/realytcracker) for the awesome intro music!
====== Links ======
Follow your hosts x.com/Rhynorater and Rez0 (x.com/rez0__)
====== Ways to Support CTBBPodcast ======
Hop on the CTBB Discord (ctbb.show/discord)!
Get some hacker swag here! (ctbb.show/merch)
====== This Week in Bug Bounty ======
Cross-site request forgery (yeswehack.com/learn-bug-bounty/ultimate-guide-…)
HackerOne New Milestone Program (hackerone.com/blog/hackerone-portswigger-hacke…)
Email santerra.holler@bugcrowd.com for media opportunities
====== Resources ======
Exploiting Web Worker XSS with Blobs (criticalthinkingpodcast.github.io/research/Exp…)
Critical Research Lab (criticalthinkingpodcast.io/p/critical-research…)
Rez0's Tweet (x.com/rez0__/status/1965848719863193827)
CVE-2022-21703: cross-origin request forgery against Grafana (jub0bs.com/posts/2022-02-08-cve-2022-21703-wri…)
Conversation about Forcing Quirks Mode (x.com/terjanq/status/1965041537680822534)
AI Busniess Logic & POC or GTFO (x.com/rez0__/status/1965582855322419383)
Hunting postMessage Vulnerabilities – Part 1 (blog.ryukudz.com/posts/postmessage-part-1)
Hunting postMessage Vulnerabilities – Part 2 (blog.ryukudz.com/posts/postmessage-part-2)
Executive Offense (executiveoffense.beehiiv.com/p/ai-hackbots-par…)
Cookie Chaos: How to bypass Host and Secure cookie prefixes (portswigger.net/research/cookie-chaos-how-to-b…)
====== Timestamps ======
(00:00:00) Introduction
(00:05:48) Crit Research Update
(00:13:00) Encouragement & Collaboration
(00:19:37) Cross-origin request forgery & Anthropic's web fetch
(00:29:17) Quirks Mode, AI Business Logic & POC or GTFO
(00:44:21) Hunting postMessage & Claude Code browserbase
(00:51:25) Community story, Executive Offense, & Cookie Chaos