<transcript><audio_58>template context by debugging the applications and setting some some breakpoints and then i was surprised that i was able to access thousands of objects that were non</transcript><transcript><audio_59>intentionally exposed they were like there they're indirectly exposed by other objects and with that big amount attack surface it was like this is going to be easy to find something that i can use to get remote called execution that was the case and then as a second part</transcript><transcript><audio_60>of the research we started looking at the implementation of those libraries and then we follow we found some specific flaws in the implementation the way they were checking block list for example</transcript><transcript><audio_61>that was your entry you uh all of a sudden like i have something and then you spent a significant amount of time checking testing the boundaries of the thing that you had until you worked your way towards where we are now that's it</transcript><transcript><audio_62>that makes sense it's always good to hear hear from you folks kind of where you're coming from on that so so i started a few different content management systems that you looked at and i imagine at some</transcript><transcript><audio_63>point you just kind of run out of time to keep checking things do you think that there are still more out there that people could follow your techniques and do the same kind of thing too to find vulnerabilities is that also going to be an</transcript> template context by debugging the applications and setting some some breakpoints and then i was surprised that i was able to access thousands of objects that were non intentionally exposed they were like there they're indirectly exposed by other objects and with that big amount attack surface it was like this is going to be easy to find something that i can use to get remote called execution that was the case and then as a second part of the research we started looking at the implementation of those libraries and then we follow we found some specific flaws in the implementation the way they were checking block list for example that was your entry you uh all of a sudden like i have something and then you spent a significant amount of time checking testing the boundaries of the thing that you had until you worked your way towards where we are now that's it that makes sense it's always good to hear hear from you folks kind of where you're coming from on that so so i started a few different content management systems that you looked at and i imagine at some point you just kind of run out of time to keep checking things do you think that there are still more out there that people could follow your techniques and do the same kind of thing too to find vulnerabilities is that also going to be an
{"source": "grass-yt-cc-by.-XOs_bnZjgg|shard_10044_53|create_multimodal_data.extract_yt_and_generate_transcripts.49|shard_10044|create_multimodal_data.generate_captions.49|shard_10044|create_multimodal_data.generate_captions.49", "params": {"id": "-XOs_bnZjgg", "channel_id": "UC6Om9kAkl32dWlDSNlDS9Iw", "duration": 1905, "view_count": 281, "age_limit": 0, "like_count": 4, "channel_follower_count": 319000, "license": "Creative Commons Attribution license (reuse allowed)", "uploader_id": "@DEFCONConference", "yt_tar_file": "/leonardo_work/EUHPC_E03_068/audio/fixed_download/grass-yt-cc-by//shard_10044/-XOs_bnZjgg.tar.gz"}}