$2,500 Leaking parts of private Hackerone reports - timeless cross-site leaks

[@BugBountyReportsExplained]

Thanks for watching the video and welcome to the comment section. Make sure to leave a like to help me grow my channel and reach more hackers like you👍

[@FUN-sy5lr]

Before i will watch i will thank you for your videos you are great 😍

[@BugBountyReportsExplained]

Very nice of you mate!

[@tyaprak]

Job very well done brother, appreciated.

[@BugBountyReportsExplained]

My pleasure

[@unurbayaramarsaikhan1362]

You are awesome. I have learned so much from your channel. And Congratulations for you last 1000$ bounty

[@BugBountyReportsExplained]

Thanks so much! I'm very glad you learn a lot!

[@rabbitcodecs]

Wow..amazing content

[@BugBountyReportsExplained]

Thank you 🙌

[@-bubby9633]

Absolutely fantastic explanation thanks! Very easy to understand. Was interested throughout to see how this could be effectively abused, and was kicking myself when I realized "oh yes, stealing partially known values containing sensitive info such as cookiename+Val or headername+Val. Duhhh of course 😅". Very educational

[@BugBountyReportsExplained]

Im happy you learnt something!

[@ミネちゃんねる-t5u]

Interesting, but modern browsers have a samesite cookie value of lax. The browser does not send the cookie...

[@BugBountyReportsExplained]

True. Those attacks these days mostly work in websites that explicitly set their SameSite to None, like KZbin

[@mnageh-bo1mm]

Great video , but i wasn't able to fully understand the Timeless XSleak tecnique

[@BugBountyReportsExplained]

Which part exactly?

[@mnageh-bo1mm]

@@BugBountyReportsExplained the diff between it and the time one

[@howplz]

Hi bro can you explain to me how you did to understand every tech word And if you're may be translated the word to ur native language?? Please i need an answer

[@BugBountyReportsExplained]

Can you clarify? I don't understand