Security Topics #3: CSP WebRTC Bypass

[@handle1337]

Awesome video 🎉. I’ve been watching your channel since early 2023, but haven’t had a youtube account until very recently. I participated in a good amount of CTFs in 2023 and have been finding XSS vulnerabilities for about a decade now and didn’t know about this bypass. Haven’t had the chance to say this because I’ve always been using youtube signed out, but now that I can comment, I really appreciate what you’re doing and am looking forward to more :)

[@SloppyJoePirates]

hey handle1337, glad it was useful! And thanks! Hopefully many more videos

[@abuctf]

upload rate increasing, here for it :)

[@danielfoudeh5915]

If you keep uploading at this rate i will be pwning in no time :)

[@benjaminatkin4745]

window.location can be blocked inside an actually - with child-src disallowing navigation to any exfiltratable locations, and popups disabled

[@SloppyJoePirates]

Ah right! and you can use sandbox attribute on csp. Hmm, maybe I'll need to revisit this. It still seems impossible imo to block all exfil, but I'm excited to see what you make!