Practical Self-XSS Exploitation and Novel Attacks with Cookie Tossing

Learn practical techniques for exploiting self-XSS vulnerabilities and discover novel attack vectors using cookie tossing methods in this 37-minute security conference talk. Explore how seemingly harmless self-XSS flaws can be weaponized through creative exploitation techniques, with detailed demonstrations of cookie manipulation attacks that can escalate privileges and bypass security controls. Gain insights into advanced web application security testing methodologies, understand the real-world impact of these vulnerabilities, and discover defensive strategies to protect against these sophisticated attack patterns. Master the technical aspects of cookie tossing as an attack vector, examine case studies of successful exploitations, and develop a deeper understanding of how attackers can chain multiple vulnerabilities to achieve meaningful compromise of web applications.