Self-XSS to Site-Wide CSRF on Twitter

speakerdeck.com

2 pointskarma202 comments

Cool, I liked it included blind alleys, too often people include just what worked to seem smarter.

For sure. It definitely echoes the thrill of bug-hunting when you know you’ve found something interesting but need to dig a bit deeper.