WEBVTT Kind: captions Language: en 00:00:03.560 --> 00:00:05.630 align:start position:0% as<00:00:03.719> much<00:00:03.840> as<00:00:03.959> I<00:00:04.120> love<00:00:04.520> like<00:00:04.839> podcasting<00:00:05.440> and 00:00:05.630 --> 00:00:05.640 align:start position:0% as much as I love like podcasting and 00:00:05.640 --> 00:00:09.030 align:start position:0% as much as I love like podcasting and stuff<00:00:05.879> like<00:00:06.120> that<00:00:07.000> the<00:00:08.000> prepping<00:00:08.360> slides<00:00:08.920> and 00:00:09.030 --> 00:00:09.040 align:start position:0% stuff like that the prepping slides and 00:00:09.040 --> 00:00:11.070 align:start position:0% stuff like that the prepping slides and then<00:00:09.200> doing<00:00:09.480> like<00:00:09.599> a<00:00:09.760> live<00:00:10.040> presentation<00:00:10.800> is 00:00:11.070 --> 00:00:11.080 align:start position:0% then doing like a live presentation is 00:00:11.080 --> 00:00:13.789 align:start position:0% then doing like a live presentation is just<00:00:11.960> I<00:00:12.040> don't<00:00:12.240> know<00:00:12.519> man<00:00:12.880> it<00:00:13.080> it<00:00:13.200> hurts<00:00:13.519> me<00:00:13.679> a 00:00:13.789 --> 00:00:13.799 align:start position:0% just I don't know man it it hurts me a 00:00:13.799 --> 00:00:15.390 align:start position:0% just I don't know man it it hurts me a little<00:00:14.000> bit<00:00:14.280> you<00:00:14.400> know<00:00:14.719> like<00:00:14.920> like<00:00:15.080> this<00:00:15.200> is 00:00:15.390 --> 00:00:15.400 align:start position:0% little bit you know like like this is 00:00:15.400 --> 00:00:18.870 align:start position:0% little bit you know like like this is totally<00:00:15.759> fine<00:00:16.199> but<00:00:16.920> but<00:00:17.720> you<00:00:17.840> know<00:00:18.080> go<00:00:18.439> go<00:00:18.600> into 00:00:18.870 --> 00:00:18.880 align:start position:0% totally fine but but you know go go into 00:00:18.880 --> 00:00:21.670 align:start position:0% totally fine but but you know go go into like<00:00:19.080> a<00:00:19.279> a<00:00:19.439> location<00:00:20.160> and<00:00:20.359> then<00:00:21.160> just<00:00:21.320> so<00:00:21.480> much 00:00:21.670 --> 00:00:21.680 align:start position:0% like a a location and then just so much 00:00:21.680 --> 00:00:23.509 align:start position:0% like a a location and then just so much slide<00:00:22.119> prep<00:00:22.519> it<00:00:22.760> it<00:00:22.880> gets<00:00:23.039> in<00:00:23.160> my<00:00:23.279> head<00:00:23.439> a 00:00:23.509 --> 00:00:23.519 align:start position:0% slide prep it it gets in my head a 00:00:23.519 --> 00:00:25.310 align:start position:0% slide prep it it gets in my head a little<00:00:23.640> bit<00:00:23.840> I<00:00:24.000> much<00:00:24.320> much<00:00:24.519> preferred<00:00:24.880> to<00:00:25.000> do 00:00:25.310 --> 00:00:25.320 align:start position:0% little bit I much much preferred to do 00:00:25.320 --> 00:00:27.630 align:start position:0% little bit I much much preferred to do like<00:00:26.080> handson<00:00:26.840> like<00:00:27.000> all<00:00:27.080> right<00:00:27.240> let's<00:00:27.439> just 00:00:27.630 --> 00:00:27.640 align:start position:0% like handson like all right let's just 00:00:27.640 --> 00:00:29.029 align:start position:0% like handson like all right let's just like<00:00:27.960> I'm<00:00:28.039> going<00:00:28.160> to<00:00:28.240> share<00:00:28.439> my<00:00:28.599> screen<00:00:28.960> I'm 00:00:29.029 --> 00:00:29.039 align:start position:0% like I'm going to share my screen I'm 00:00:29.039 --> 00:00:30.509 align:start position:0% like I'm going to share my screen I'm going<00:00:29.119> to<00:00:29.199> share<00:00:29.519> kaido<00:00:30.039> whatever<00:00:30.320> and<00:00:30.400> then 00:00:30.509 --> 00:00:30.519 align:start position:0% going to share kaido whatever and then 00:00:30.519 --> 00:00:31.910 align:start position:0% going to share kaido whatever and then we<00:00:30.640> just<00:00:30.759> kind<00:00:30.840> of<00:00:30.960> go<00:00:31.119> at<00:00:31.199> it<00:00:31.519> yeah<00:00:31.599> it's<00:00:31.800> way 00:00:31.910 --> 00:00:31.920 align:start position:0% we just kind of go at it yeah it's way 00:00:31.920 --> 00:00:34.110 align:start position:0% we just kind of go at it yeah it's way easier<00:00:32.320> well<00:00:32.480> L<00:00:32.640> prepping<00:00:33.360> and<00:00:33.559> you<00:00:33.680> have<00:00:33.879> more 00:00:34.110 --> 00:00:34.120 align:start position:0% easier well L prepping and you have more 00:00:34.120 --> 00:00:36.950 align:start position:0% easier well L prepping and you have more room<00:00:34.480> to<00:00:35.160> change<00:00:35.520> if<00:00:35.680> the<00:00:35.840> room<00:00:36.079> is<00:00:36.280> not 00:00:36.950 --> 00:00:36.960 align:start position:0% room to change if the room is not 00:00:36.960 --> 00:00:39.190 align:start position:0% room to change if the room is not understanding<00:00:37.239> something<00:00:37.719> or<00:00:38.160> yeah<00:00:38.559> exactly 00:00:39.190 --> 00:00:39.200 align:start position:0% understanding something or yeah exactly 00:00:39.200 --> 00:00:40.790 align:start position:0% understanding something or yeah exactly toast<00:00:39.680> it's<00:00:39.800> much<00:00:39.920> more<00:00:40.120> personal<00:00:40.520> much<00:00:40.640> more 00:00:40.790 --> 00:00:40.800 align:start position:0% toast it's much more personal much more 00:00:40.800 --> 00:00:42.910 align:start position:0% toast it's much more personal much more dynamic<00:00:41.280> as<00:00:41.520> well<00:00:42.120> but<00:00:42.280> is<00:00:42.600> difficult<00:00:42.760> but<00:00:42.840> you 00:00:42.910 --> 00:00:42.920 align:start position:0% dynamic as well but is difficult but you 00:00:42.920 --> 00:00:45.029 align:start position:0% dynamic as well but is difficult but you have<00:00:43.000> a<00:00:43.079> lot<00:00:43.200> of<00:00:43.320> people<00:00:43.520> in<00:00:43.600> the<00:00:43.760> room 00:00:45.029 --> 00:00:45.039 align:start position:0% have a lot of people in the room 00:00:45.039 --> 00:00:47.150 align:start position:0% have a lot of people in the room yeah<00:00:46.039> asking<00:00:46.280> how<00:00:46.440> many<00:00:46.600> people<00:00:46.800> will<00:00:46.960> be 00:00:47.150 --> 00:00:47.160 align:start position:0% yeah asking how many people will be 00:00:47.160 --> 00:00:49.670 align:start position:0% yeah asking how many people will be there<00:00:47.440> so<00:00:47.840> it's<00:00:48.000> just<00:00:48.160> to<00:00:48.320> know<00:00:48.520> if<00:00:48.640> I<00:00:48.719> can<00:00:49.000> get 00:00:49.670 --> 00:00:49.680 align:start position:0% there so it's just to know if I can get 00:00:49.680 --> 00:00:52.069 align:start position:0% there so it's just to know if I can get Live<00:00:49.960> question<00:00:50.280> or<00:00:50.480> not<00:00:50.760> you<00:00:50.879> know<00:00:51.320> yeah<00:00:51.840> yeah 00:00:52.069 --> 00:00:52.079 align:start position:0% Live question or not you know yeah yeah 00:00:52.079 --> 00:00:55.549 align:start position:0% Live question or not you know yeah yeah you<00:00:52.559> uh<00:00:52.920> I<00:00:53.000> think<00:00:53.239> there's<00:00:54.039> there's<00:00:54.320> 20<00:00:54.920> 21 00:00:55.549 --> 00:00:55.559 align:start position:0% you uh I think there's there's 20 21 00:00:55.559 --> 00:00:57.910 align:start position:0% you uh I think there's there's 20 21 right<00:00:55.719> now<00:00:56.039> we<00:00:56.160> normally<00:00:56.760> we<00:00:56.879> normally<00:00:57.280> go<00:00:57.840> I 00:00:57.910 --> 00:00:57.920 align:start position:0% right now we normally we normally go I 00:00:57.920 --> 00:00:59.549 align:start position:0% right now we normally we normally go I think<00:00:58.160> the<00:00:58.480> the<00:00:58.600> most<00:00:58.800> we've<00:00:59.039> had<00:00:59.239> live<00:00:59.440> is 00:00:59.549 --> 00:00:59.559 align:start position:0% think the the most we've had live is 00:00:59.559 --> 00:01:01.349 align:start position:0% think the the most we've had live is like 00:01:01.349 --> 00:01:01.359 align:start position:0% like 00:01:01.359 --> 00:01:02.830 align:start position:0% like and<00:01:01.480> then<00:01:01.600> the<00:01:01.760> least<00:01:02.039> we've<00:01:02.280> had<00:01:02.519> live<00:01:02.760> I 00:01:02.830 --> 00:01:02.840 align:start position:0% and then the least we've had live I 00:01:02.840 --> 00:01:06.750 align:start position:0% and then the least we've had live I think<00:01:03.000> is<00:01:03.199> like<00:01:03.399> 15<00:01:03.719> or<00:01:03.920> 16<00:01:04.400> so<00:01:05.479> um<00:01:06.479> I<00:01:06.600> just 00:01:06.750 --> 00:01:06.760 align:start position:0% think is like 15 or 16 so um I just 00:01:06.760 --> 00:01:08.190 align:start position:0% think is like 15 or 16 so um I just pinged<00:01:07.080> everyone<00:01:07.360> so<00:01:07.479> we'll<00:01:07.640> give<00:01:07.799> everyone<00:01:08.080> a 00:01:08.190 --> 00:01:08.200 align:start position:0% pinged everyone so we'll give everyone a 00:01:08.200 --> 00:01:11.510 align:start position:0% pinged everyone so we'll give everyone a second<00:01:08.680> to<00:01:08.880> pop<00:01:09.119> in<00:01:10.040> um<00:01:10.759> but<00:01:10.960> welcome 00:01:11.510 --> 00:01:11.520 align:start position:0% second to pop in um but welcome 00:01:11.520 --> 00:01:14.190 align:start position:0% second to pop in um but welcome everybody<00:01:12.520> sorry<00:01:12.920> we<00:01:13.200> we<00:01:13.320> started<00:01:13.840> the<00:01:14.080> the 00:01:14.190 --> 00:01:14.200 align:start position:0% everybody sorry we we started the the 00:01:14.200 --> 00:01:16.070 align:start position:0% everybody sorry we we started the the recording<00:01:14.640> right<00:01:14.799> in<00:01:14.880> the<00:01:15.000> middle<00:01:15.280> of<00:01:15.600> me<00:01:15.759> us 00:01:16.070 --> 00:01:16.080 align:start position:0% recording right in the middle of me us 00:01:16.080 --> 00:01:19.510 align:start position:0% recording right in the middle of me us like<00:01:16.240> chatting<00:01:16.600> about<00:01:16.920> stuff<00:01:17.880> um<00:01:18.799> but<00:01:19.400> is 00:01:19.510 --> 00:01:19.520 align:start position:0% like chatting about stuff um but is 00:01:19.520 --> 00:01:21.230 align:start position:0% like chatting about stuff um but is there<00:01:19.640> a<00:01:19.799> live<00:01:19.960> chat<00:01:20.200> when<00:01:20.360> I<00:01:20.479> can<00:01:20.680> see<00:01:21.119> yeah 00:01:21.230 --> 00:01:21.240 align:start position:0% there a live chat when I can see yeah 00:01:21.240 --> 00:01:22.550 align:start position:0% there a live chat when I can see yeah there<00:01:21.400> is<00:01:21.680> yeah<00:01:21.840> you<00:01:21.920> should<00:01:22.079> be<00:01:22.200> able<00:01:22.320> to<00:01:22.400> see 00:01:22.550 --> 00:01:22.560 align:start position:0% there is yeah you should be able to see 00:01:22.560 --> 00:01:24.109 align:start position:0% there is yeah you should be able to see it<00:01:22.680> maybe<00:01:22.880> on<00:01:23.000> the<00:01:23.079> right<00:01:23.320> hand<00:01:23.520> side<00:01:23.840> there's 00:01:24.109 --> 00:01:24.119 align:start position:0% it maybe on the right hand side there's 00:01:24.119 --> 00:01:26.230 align:start position:0% it maybe on the right hand side there's like<00:01:24.240> a<00:01:24.640> okay<00:01:24.840> yeah<00:01:25.200> you<00:01:25.320> see<00:01:25.439> it 00:01:26.230 --> 00:01:26.240 align:start position:0% like a okay yeah you see it 00:01:26.240 --> 00:01:30.069 align:start position:0% like a okay yeah you see it there<00:01:27.240> live<00:01:28.000> is<00:01:28.200> Justin<00:01:28.720> low<00:01:29.040> for<00:01:29.479> oh<00:01:29.640> my<00:01:29.920> my 00:01:30.069 --> 00:01:30.079 align:start position:0% there live is Justin low for oh my my 00:01:30.079 --> 00:01:33.469 align:start position:0% there live is Justin low for oh my my mic<00:01:30.320> volume<00:01:30.799> is<00:01:31.000> my<00:01:31.240> is<00:01:31.320> my<00:01:31.479> mic<00:01:31.720> volume 00:01:33.469 --> 00:01:33.479 align:start position:0% mic volume is my is my mic volume 00:01:33.479 --> 00:01:37.109 align:start position:0% mic volume is my is my mic volume low<00:01:34.479> let<00:01:34.600> me<00:01:34.759> see<00:01:35.000> where<00:01:35.159> is<00:01:35.720> my<00:01:36.720> go<00:01:36.840> ahead<00:01:37.000> and 00:01:37.109 --> 00:01:37.119 align:start position:0% low let me see where is my go ahead and 00:01:37.119 --> 00:01:39.830 align:start position:0% low let me see where is my go ahead and say<00:01:37.280> something<00:01:37.560> bitk<00:01:38.560> hello<00:01:39.200> hello<00:01:39.439> everyone 00:01:39.830 --> 00:01:39.840 align:start position:0% say something bitk hello hello everyone 00:01:39.840 --> 00:01:42.190 align:start position:0% say something bitk hello hello everyone oh<00:01:40.079> yeah<00:01:40.479> so<00:01:40.799> he's<00:01:40.960> a<00:01:41.079> little<00:01:41.320> higher<00:01:42.079> I'm 00:01:42.190 --> 00:01:42.200 align:start position:0% oh yeah so he's a little higher I'm 00:01:42.200 --> 00:01:44.590 align:start position:0% oh yeah so he's a little higher I'm gonna 00:01:44.590 --> 00:01:44.600 align:start position:0% gonna 00:01:44.600 --> 00:01:48.030 align:start position:0% gonna um<00:01:45.600> you<00:01:45.799> know<00:01:46.320> I<00:01:46.479> think<00:01:46.920> my<00:01:47.159> mic<00:01:47.439> is<00:01:47.640> actually 00:01:48.030 --> 00:01:48.040 align:start position:0% um you know I think my mic is actually 00:01:48.040 --> 00:01:50.190 align:start position:0% um you know I think my mic is actually where<00:01:48.479> it<00:01:48.600> should<00:01:48.840> be<00:01:49.159> so<00:01:49.600> can<00:01:49.719> you<00:01:49.960> can<00:01:50.079> you 00:01:50.190 --> 00:01:50.200 align:start position:0% where it should be so can you can you 00:01:50.200 --> 00:01:52.830 align:start position:0% where it should be so can you can you turn<00:01:50.479> yourself<00:01:50.880> down<00:01:51.079> a<00:01:51.200> little<00:01:51.360> bit<00:01:51.840> yeah<00:01:52.759> I 00:01:52.830 --> 00:01:52.840 align:start position:0% turn yourself down a little bit yeah I 00:01:52.840 --> 00:01:54.670 align:start position:0% turn yourself down a little bit yeah I should<00:01:53.000> have<00:01:53.159> caught<00:01:53.399> that<00:01:53.600> before<00:01:54.399> I<00:01:54.560> I 00:01:54.670 --> 00:01:54.680 align:start position:0% should have caught that before I I 00:01:54.680 --> 00:01:56.510 align:start position:0% should have caught that before I I invited<00:01:55.040> him<00:01:55.159> in<00:01:55.280> here<00:01:55.399> and<00:01:55.520> I<00:01:55.600> was<00:01:55.799> like<00:01:56.360> hey 00:01:56.510 --> 00:01:56.520 align:start position:0% invited him in here and I was like hey 00:01:56.520 --> 00:01:58.109 align:start position:0% invited him in here and I was like hey let's<00:01:56.640> do<00:01:56.759> a<00:01:56.880> sound<00:01:57.159> check<00:01:57.360> and<00:01:57.439> then<00:01:57.560> I'm<00:01:57.719> like 00:01:58.109 --> 00:01:58.119 align:start position:0% let's do a sound check and then I'm like 00:01:58.119 --> 00:02:01.830 align:start position:0% let's do a sound check and then I'm like okay<00:01:58.280> everything's<00:01:58.759> great<00:01:59.320> and<00:01:59.399> then<00:01:59.520> we<00:01:59.640> we 00:02:01.830 --> 00:02:01.840 align:start position:0% okay everything's great and then we we 00:02:01.840 --> 00:02:06.870 align:start position:0% okay everything's great and then we we uh<00:02:02.840> okay<00:02:03.399> so<00:02:03.759> that<00:02:04.000> so<00:02:04.240> he<00:02:04.479> just<00:02:05.000> he<00:02:05.240> just<00:02:05.880> uh 00:02:06.870 --> 00:02:06.880 align:start position:0% uh okay so that so he just he just uh 00:02:06.880 --> 00:02:11.670 align:start position:0% uh okay so that so he just he just uh okay<00:02:07.479> so<00:02:08.479> so<00:02:08.720> his<00:02:08.959> is<00:02:09.280> his<00:02:09.479> is<00:02:10.119> lower<00:02:10.599> now<00:02:11.080> is<00:02:11.440> is 00:02:11.670 --> 00:02:11.680 align:start position:0% okay so so his is his is lower now is is 00:02:11.680 --> 00:02:15.190 align:start position:0% okay so so his is his is lower now is is mine<00:02:12.680> are<00:02:12.840> we<00:02:13.080> equaled<00:02:13.480> out<00:02:13.840> or<00:02:14.720> should<00:02:15.000> I 00:02:15.190 --> 00:02:15.200 align:start position:0% mine are we equaled out or should I 00:02:15.200 --> 00:02:18.430 align:start position:0% mine are we equaled out or should I should<00:02:15.400> we<00:02:15.640> both<00:02:16.000> boost<00:02:16.319> Stars<00:02:16.599> a<00:02:16.720> little<00:02:16.879> bit 00:02:18.430 --> 00:02:18.440 align:start position:0% should we both boost Stars a little bit 00:02:18.440 --> 00:02:22.309 align:start position:0% should we both boost Stars a little bit now<00:02:19.440> okay<00:02:20.160> okay<00:02:20.560> sound<00:02:20.920> sounding<00:02:21.319> good<00:02:21.680> that's 00:02:22.309 --> 00:02:22.319 align:start position:0% now okay okay sound sounding good that's 00:02:22.319 --> 00:02:25.430 align:start position:0% now okay okay sound sounding good that's good<00:02:23.319> resolution<00:02:23.800> is<00:02:24.000> rough<00:02:24.239> at<00:02:24.360> the<00:02:24.480> moment 00:02:25.430 --> 00:02:25.440 align:start position:0% good resolution is rough at the moment 00:02:25.440 --> 00:02:29.350 align:start position:0% good resolution is rough at the moment uh<00:02:26.000> yeah<00:02:26.200> I<00:02:26.400> get<00:02:26.640> bad<00:02:26.840> webcam<00:02:27.239> sorry<00:02:28.160> yeah<00:02:28.680> yeah 00:02:29.350 --> 00:02:29.360 align:start position:0% uh yeah I get bad webcam sorry yeah yeah 00:02:29.360 --> 00:02:32.309 align:start position:0% uh yeah I get bad webcam sorry yeah yeah his<00:02:30.120> his<00:02:30.360> should<00:02:30.640> be<00:02:31.319> um<00:02:31.840> I<00:02:31.920> think<00:02:32.080> his<00:02:32.239> is 00:02:32.309 --> 00:02:32.319 align:start position:0% his his should be um I think his is 00:02:32.319 --> 00:02:33.270 align:start position:0% his his should be um I think his is going<00:02:32.440> to<00:02:32.519> be 00:02:33.270 --> 00:02:33.280 align:start position:0% going to be 00:02:33.280 --> 00:02:37.589 align:start position:0% going to be 720p<00:02:34.360> um<00:02:35.360> also<00:02:35.760> guys<00:02:36.040> I<00:02:36.239> just<00:02:36.680> uh<00:02:36.879> I<00:02:37.000> just<00:02:37.319> spoke 00:02:37.589 --> 00:02:37.599 align:start position:0% 720p um also guys I just uh I just spoke 00:02:37.599 --> 00:02:40.030 align:start position:0% 720p um also guys I just uh I just spoke to<00:02:37.720> our<00:02:38.040> producer<00:02:39.040> and<00:02:39.480> uh<00:02:39.640> I<00:02:39.720> think<00:02:39.879> we're 00:02:40.030 --> 00:02:40.040 align:start position:0% to our producer and uh I think we're 00:02:40.040 --> 00:02:43.030 align:start position:0% to our producer and uh I think we're going<00:02:40.159> to<00:02:40.840> so<00:02:41.080> we<00:02:41.400> have<00:02:41.840> the<00:02:42.000> recording<00:02:42.840> the 00:02:43.030 --> 00:02:43.040 align:start position:0% going to so we have the recording the 00:02:43.040 --> 00:02:45.390 align:start position:0% going to so we have the recording the 1080p<00:02:43.640> recordings<00:02:44.080> for<00:02:44.440> for<00:02:44.680> last<00:02:45.000> master 00:02:45.390 --> 00:02:45.400 align:start position:0% 1080p recordings for for last master 00:02:45.400 --> 00:02:48.030 align:start position:0% 1080p recordings for for last master classes<00:02:45.959> previous<00:02:46.280> master<00:02:46.560> classes<00:02:46.959> as<00:02:47.120> well 00:02:48.030 --> 00:02:48.040 align:start position:0% classes previous master classes as well 00:02:48.040 --> 00:02:49.990 align:start position:0% classes previous master classes as well um<00:02:48.720> rather<00:02:48.959> than<00:02:49.120> just<00:02:49.239> the<00:02:49.360> cloud<00:02:49.640> recording 00:02:49.990 --> 00:02:50.000 align:start position:0% um rather than just the cloud recording 00:02:50.000 --> 00:02:51.430 align:start position:0% um rather than just the cloud recording which<00:02:50.120> is<00:02:50.200> what<00:02:50.280> we've<00:02:50.440> been<00:02:50.560> putting<00:02:50.800> out<00:02:51.000> so 00:02:51.430 --> 00:02:51.440 align:start position:0% which is what we've been putting out so 00:02:51.440 --> 00:02:52.509 align:start position:0% which is what we've been putting out so we're<00:02:51.599> going<00:02:51.680> to<00:02:51.800> try<00:02:51.920> to<00:02:52.040> have<00:02:52.159> our<00:02:52.319> video 00:02:52.509 --> 00:02:52.519 align:start position:0% we're going to try to have our video 00:02:52.519 --> 00:02:55.350 align:start position:0% we're going to try to have our video editor<00:02:52.959> go<00:02:53.159> back<00:02:53.360> and<00:02:53.519> create<00:02:53.879> more<00:02:54.560> refined 00:02:55.350 --> 00:02:55.360 align:start position:0% editor go back and create more refined 00:02:55.360 --> 00:02:57.190 align:start position:0% editor go back and create more refined uh<00:02:55.519> versions<00:02:55.879> of<00:02:56.000> the<00:02:56.120> master<00:02:56.440> classes<00:02:56.959> within 00:02:57.190 --> 00:02:57.200 align:start position:0% uh versions of the master classes within 00:02:57.200 --> 00:03:01.509 align:start position:0% uh versions of the master classes within the<00:02:57.400> ne<00:02:58.200> going<00:02:58.440> forward<00:02:58.920> and<00:02:59.200> retrospectively 00:03:01.509 --> 00:03:01.519 align:start position:0% the ne going forward and retrospectively 00:03:01.519 --> 00:03:04.550 align:start position:0% the ne going forward and retrospectively are<00:03:01.599> we<00:03:01.760> going<00:03:01.840> to<00:03:02.040> discuss<00:03:02.480> canva<00:03:03.080> too<00:03:04.080> what 00:03:04.550 --> 00:03:04.560 align:start position:0% are we going to discuss canva too what 00:03:04.560 --> 00:03:06.990 align:start position:0% are we going to discuss canva too what what<00:03:04.680> is 00:03:06.990 --> 00:03:07.000 align:start position:0% what is 00:03:07.000 --> 00:03:09.470 align:start position:0% what is no<00:03:08.000> I<00:03:08.120> I<00:03:08.200> don't<00:03:08.360> know<00:03:08.560> we'll<00:03:08.720> see<00:03:09.000> we'll<00:03:09.200> see 00:03:09.470 --> 00:03:09.480 align:start position:0% no I I don't know we'll see we'll see 00:03:09.480 --> 00:03:14.949 align:start position:0% no I I don't know we'll see we'll see we'll<00:03:09.959> see<00:03:10.959> H<00:03:11.959> um<00:03:12.959> but<00:03:13.440> can<00:03:13.560> I<00:03:13.720> just<00:03:13.920> say<00:03:14.760> we 00:03:14.949 --> 00:03:14.959 align:start position:0% we'll see H um but can I just say we 00:03:14.959 --> 00:03:17.670 align:start position:0% we'll see H um but can I just say we both<00:03:15.159> are<00:03:15.319> we're<00:03:15.480> twinning<00:03:16.239> today<00:03:17.239> we<00:03:17.440> both 00:03:17.670 --> 00:03:17.680 align:start position:0% both are we're twinning today we both 00:03:17.680 --> 00:03:20.190 align:start position:0% both are we're twinning today we both got<00:03:17.879> the<00:03:18.120> yes<00:03:18.319> we<00:03:18.519> hack<00:03:18.720> swag<00:03:19.080> on<00:03:19.360> not<00:03:19.599> planned 00:03:20.190 --> 00:03:20.200 align:start position:0% got the yes we hack swag on not planned 00:03:20.200 --> 00:03:22.910 align:start position:0% got the yes we hack swag on not planned not<00:03:20.360> planned<00:03:20.760> at<00:03:20.879> all<00:03:21.200> I<00:03:21.799> like<00:03:22.400> you<00:03:22.519> know<00:03:22.840> let 00:03:22.910 --> 00:03:22.920 align:start position:0% not planned at all I like you know let 00:03:22.920 --> 00:03:25.869 align:start position:0% not planned at all I like you know let me<00:03:23.000> just<00:03:23.959> of<00:03:24.159> them 00:03:25.869 --> 00:03:25.879 align:start position:0% me just of them 00:03:25.879 --> 00:03:28.550 align:start position:0% me just of them so<00:03:26.879> nice<00:03:27.560> I<00:03:27.720> I<00:03:27.799> was<00:03:27.920> thinking<00:03:28.120> about<00:03:28.280> wearing 00:03:28.550 --> 00:03:28.560 align:start position:0% so nice I I was thinking about wearing 00:03:28.560 --> 00:03:31.110 align:start position:0% so nice I I was thinking about wearing the<00:03:28.680> ctbb<00:03:29.319> swag<00:03:29.920> that<00:03:30.080> we<00:03:30.360> uh<00:03:30.519> that<00:03:30.640> we<00:03:30.799> got 00:03:31.110 --> 00:03:31.120 align:start position:0% the ctbb swag that we uh that we got 00:03:31.120 --> 00:03:33.630 align:start position:0% the ctbb swag that we uh that we got over<00:03:31.400> at<00:03:31.760> the<00:03:31.920> swag<00:03:32.280> store<00:03:32.640> but<00:03:32.920> uh<00:03:33.159> I<00:03:33.280> decided 00:03:33.630 --> 00:03:33.640 align:start position:0% over at the swag store but uh I decided 00:03:33.640 --> 00:03:37.670 align:start position:0% over at the swag store but uh I decided to<00:03:34.439> wrap<00:03:34.680> the<00:03:34.879> yes<00:03:35.080> we<00:03:35.280> hack<00:03:35.840> stuff 00:03:37.670 --> 00:03:37.680 align:start position:0% to wrap the yes we hack stuff 00:03:37.680 --> 00:03:42.190 align:start position:0% to wrap the yes we hack stuff today<00:03:38.680> Al<00:03:38.840> righty<00:03:39.480> um<00:03:40.159> let's 00:03:42.190 --> 00:03:42.200 align:start position:0% today Al righty um let's 00:03:42.200 --> 00:03:45.949 align:start position:0% today Al righty um let's uh<00:03:43.200> let's<00:03:43.439> see<00:03:43.920> what<00:03:44.360> what 00:03:45.949 --> 00:03:45.959 align:start position:0% uh let's see what what 00:03:45.959 --> 00:03:48.670 align:start position:0% uh let's see what what um<00:03:46.959> any<00:03:47.200> chance<00:03:47.439> to<00:03:47.599> get<00:03:47.799> XXL<00:03:48.239> in<00:03:48.360> the<00:03:48.439> swag 00:03:48.670 --> 00:03:48.680 align:start position:0% um any chance to get XXL in the swag 00:03:48.680 --> 00:03:50.429 align:start position:0% um any chance to get XXL in the swag store<00:03:48.959> yeah<00:03:49.080> I<00:03:49.159> think<00:03:49.280> we<00:03:49.439> have<00:03:49.560> it<00:03:49.879> uh<00:03:49.959> R<00:03:50.239> for 00:03:50.429 --> 00:03:50.439 align:start position:0% store yeah I think we have it uh R for 00:03:50.439 --> 00:03:52.030 align:start position:0% store yeah I think we have it uh R for combat 00:03:52.030 --> 00:03:52.040 align:start position:0% combat 00:03:52.040 --> 00:03:55.470 align:start position:0% combat um<00:03:53.040> depends<00:03:53.360> on<00:03:53.599> the<00:03:53.920> item<00:03:54.280> I<00:03:54.400> think<00:03:55.159> uh<00:03:55.319> but 00:03:55.470 --> 00:03:55.480 align:start position:0% um depends on the item I think uh but 00:03:55.480 --> 00:03:57.149 align:start position:0% um depends on the item I think uh but you<00:03:55.599> can<00:03:56.000> I'll<00:03:56.159> drop<00:03:56.400> the<00:03:56.519> link<00:03:56.720> in<00:03:56.799> the<00:03:56.959> chat 00:03:57.149 --> 00:03:57.159 align:start position:0% you can I'll drop the link in the chat 00:03:57.159 --> 00:04:00.229 align:start position:0% you can I'll drop the link in the chat here<00:03:57.400> HBS<00:03:58.360> CBB<00:03:59.159> doow 00:04:00.229 --> 00:04:00.239 align:start position:0% here HBS CBB doow 00:04:00.239 --> 00:04:02.270 align:start position:0% here HBS CBB doow swag<00:04:01.239> there<00:04:01.319> you<00:04:01.519> go<00:04:01.760> let<00:04:01.879> me<00:04:02.000> know<00:04:02.120> if<00:04:02.159> you 00:04:02.270 --> 00:04:02.280 align:start position:0% swag there you go let me know if you 00:04:02.280 --> 00:04:03.830 align:start position:0% swag there you go let me know if you don't<00:04:02.439> have<00:04:02.599> what<00:04:02.680> you<00:04:02.799> need<00:04:03.239> you're<00:04:03.400> a<00:04:03.560> mod 00:04:03.830 --> 00:04:03.840 align:start position:0% don't have what you need you're a mod 00:04:03.840 --> 00:04:06.030 align:start position:0% don't have what you need you're a mod too<00:04:04.000> in<00:04:04.120> the<00:04:04.239> Discord<00:04:04.640> so<00:04:05.040> DM<00:04:05.400> me<00:04:05.640> and<00:04:05.799> I'll 00:04:06.030 --> 00:04:06.040 align:start position:0% too in the Discord so DM me and I'll 00:04:06.040 --> 00:04:08.470 align:start position:0% too in the Discord so DM me and I'll I'll<00:04:06.239> get<00:04:06.360> you<00:04:06.680> I'll<00:04:06.840> get<00:04:06.959> you<00:04:07.120> one<00:04:08.079> what<00:04:08.280> size 00:04:08.470 --> 00:04:08.480 align:start position:0% I'll get you I'll get you one what size 00:04:08.480 --> 00:04:10.789 align:start position:0% I'll get you I'll get you one what size do<00:04:08.640> I<00:04:08.760> use<00:04:09.120> just<00:04:09.239> a<00:04:09.400> medium<00:04:10.040> just<00:04:10.159> a<00:04:10.319> medium<00:04:10.680> you 00:04:10.789 --> 00:04:10.799 align:start position:0% do I use just a medium just a medium you 00:04:10.799 --> 00:04:12.990 align:start position:0% do I use just a medium just a medium you know<00:04:11.599> I've<00:04:11.720> been<00:04:11.840> working<00:04:12.120> on<00:04:12.640> been<00:04:12.799> working 00:04:12.990 --> 00:04:13.000 align:start position:0% know I've been working on been working 00:04:13.000 --> 00:04:15.830 align:start position:0% know I've been working on been working on<00:04:13.200> I<00:04:13.280> was<00:04:13.400> telling<00:04:14.000> bitk<00:04:14.480> before<00:04:14.920> like<00:04:15.280> I<00:04:15.560> thre 00:04:15.830 --> 00:04:15.840 align:start position:0% on I was telling bitk before like I thre 00:04:15.840 --> 00:04:17.749 align:start position:0% on I was telling bitk before like I thre out<00:04:16.000> my<00:04:16.120> shoulder<00:04:16.519> I<00:04:16.680> dislocated<00:04:17.239> my<00:04:17.320> shoulder 00:04:17.749 --> 00:04:17.759 align:start position:0% out my shoulder I dislocated my shoulder 00:04:17.759 --> 00:04:19.789 align:start position:0% out my shoulder I dislocated my shoulder playing<00:04:18.239> uh<00:04:18.359> volleyball<00:04:19.079> last<00:04:19.239> week<00:04:19.479> so<00:04:19.639> I've 00:04:19.789 --> 00:04:19.799 align:start position:0% playing uh volleyball last week so I've 00:04:19.799 --> 00:04:22.670 align:start position:0% playing uh volleyball last week so I've been<00:04:20.000> like<00:04:20.519> doing<00:04:20.959> some<00:04:21.280> a<00:04:21.400> lot<00:04:21.519> of<00:04:21.680> shoulder 00:04:22.670 --> 00:04:22.680 align:start position:0% been like doing some a lot of shoulder 00:04:22.680 --> 00:04:24.110 align:start position:0% been like doing some a lot of shoulder ex<00:04:23.040> strengthening 00:04:24.110 --> 00:04:24.120 align:start position:0% ex strengthening 00:04:24.120 --> 00:04:26.629 align:start position:0% ex strengthening exercises<00:04:25.120> um<00:04:25.759> and<00:04:25.919> dude<00:04:26.120> I'm<00:04:26.199> going<00:04:26.280> to<00:04:26.479> get 00:04:26.629 --> 00:04:26.639 align:start position:0% exercises um and dude I'm going to get 00:04:26.639 --> 00:04:29.510 align:start position:0% exercises um and dude I'm going to get I'm<00:04:26.720> going<00:04:26.840> to<00:04:27.040> get<00:04:27.759> big<00:04:28.080> wide<00:04:29.080> chest<00:04:29.360> it's 00:04:29.510 --> 00:04:29.520 align:start position:0% I'm going to get big wide chest it's 00:04:29.520 --> 00:04:30.950 align:start position:0% I'm going to get big wide chest it's some<00:04:29.840> point<00:04:30.000> and<00:04:30.120> I'm<00:04:30.199> going<00:04:30.280> to<00:04:30.400> be<00:04:30.560> wearing<00:04:30.800> a 00:04:30.950 --> 00:04:30.960 align:start position:0% some point and I'm going to be wearing a 00:04:30.960 --> 00:04:35.070 align:start position:0% some point and I'm going to be wearing a large<00:04:31.360> someday<00:04:31.759> I<00:04:31.880> know<00:04:32.039> it<00:04:32.600> I<00:04:32.759> know<00:04:32.919> it<00:04:33.880> uh<00:04:34.479> but 00:04:35.070 --> 00:04:35.080 align:start position:0% large someday I know it I know it uh but 00:04:35.080 --> 00:04:37.830 align:start position:0% large someday I know it I know it uh but all<00:04:35.199> righty<00:04:35.919> um<00:04:36.759> let's<00:04:37.000> see<00:04:37.320> all<00:04:37.400> right<00:04:37.560> we<00:04:37.720> got 00:04:37.830 --> 00:04:37.840 align:start position:0% all righty um let's see all right we got 00:04:37.840 --> 00:04:41.670 align:start position:0% all righty um let's see all right we got about<00:04:38.039> 46<00:04:38.639> people<00:04:38.880> rolling<00:04:39.280> in<00:04:39.759> we'll<00:04:40.680> uh 00:04:41.670 --> 00:04:41.680 align:start position:0% about 46 people rolling in we'll uh 00:04:41.680 --> 00:04:44.110 align:start position:0% about 46 people rolling in we'll uh let's<00:04:41.919> see<00:04:42.320> we'll<00:04:43.039> we'll<00:04:43.240> give<00:04:43.400> him<00:04:43.600> two<00:04:43.800> more 00:04:44.110 --> 00:04:44.120 align:start position:0% let's see we'll we'll give him two more 00:04:44.120 --> 00:04:46.790 align:start position:0% let's see we'll we'll give him two more minutes<00:04:45.120> okay 00:04:46.790 --> 00:04:46.800 align:start position:0% minutes okay 00:04:46.800 --> 00:04:50.629 align:start position:0% minutes okay um<00:04:47.800> so<00:04:48.800> yeah<00:04:48.960> man<00:04:49.120> so<00:04:49.440> the<00:04:50.280> we<00:04:50.360> were<00:04:50.520> just 00:04:50.629 --> 00:04:50.639 align:start position:0% um so yeah man so the we were just 00:04:50.639 --> 00:04:52.550 align:start position:0% um so yeah man so the we were just talking<00:04:50.960> just<00:04:51.120> to<00:04:51.280> cue<00:04:51.840> the<00:04:51.960> chat<00:04:52.160> in<00:04:52.320> we<00:04:52.440> were 00:04:52.550 --> 00:04:52.560 align:start position:0% talking just to cue the chat in we were 00:04:52.560 --> 00:04:54.189 align:start position:0% talking just to cue the chat in we were just<00:04:52.680> talking<00:04:53.039> before<00:04:53.320> we<00:04:53.560> we<00:04:53.720> went<00:04:53.960> live 00:04:54.189 --> 00:04:54.199 align:start position:0% just talking before we we went live 00:04:54.199 --> 00:04:57.390 align:start position:0% just talking before we we went live about<00:04:54.560> his<00:04:54.919> uh<00:04:55.520> bit<00:04:55.759> K's<00:04:56.039> role<00:04:56.440> at<00:04:56.600> at<00:04:56.759> yes<00:04:56.960> we 00:04:57.390 --> 00:04:57.400 align:start position:0% about his uh bit K's role at at yes we 00:04:57.400 --> 00:05:00.189 align:start position:0% about his uh bit K's role at at yes we hack<00:04:58.400> it's<00:04:58.639> like<00:04:59.520> this<00:04:59.680> this<00:04:59.759> is<00:04:59.880> the<00:04:59.960> kind<00:05:00.080> of 00:05:00.189 --> 00:05:00.199 align:start position:0% hack it's like this this is the kind of 00:05:00.199 --> 00:05:02.310 align:start position:0% hack it's like this this is the kind of role<00:05:00.440> you<00:05:00.560> want<00:05:00.680> to<00:05:00.960> have<00:05:01.400> like<00:05:01.800> essentially 00:05:02.310 --> 00:05:02.320 align:start position:0% role you want to have like essentially 00:05:02.320 --> 00:05:06.710 align:start position:0% role you want to have like essentially it's<00:05:03.039> just<00:05:03.360> do<00:05:03.840> research<00:05:04.840> and<00:05:05.400> present<00:05:05.759> it<00:05:06.320> and 00:05:06.710 --> 00:05:06.720 align:start position:0% it's just do research and present it and 00:05:06.720 --> 00:05:09.150 align:start position:0% it's just do research and present it and it's<00:05:06.960> just<00:05:07.919> perfect<00:05:08.360> perfect<00:05:08.639> sort<00:05:08.800> of<00:05:08.919> thing 00:05:09.150 --> 00:05:09.160 align:start position:0% it's just perfect perfect sort of thing 00:05:09.160 --> 00:05:11.150 align:start position:0% it's just perfect perfect sort of thing I<00:05:09.240> do<00:05:09.360> also<00:05:09.520> a<00:05:09.840> bit<00:05:10.000> of<00:05:10.160> development<00:05:10.880> inside 00:05:11.150 --> 00:05:11.160 align:start position:0% I do also a bit of development inside 00:05:11.160 --> 00:05:13.310 align:start position:0% I do also a bit of development inside this<00:05:11.400> we<00:05:11.560> act<00:05:11.800> but<00:05:12.400> oh<00:05:12.600> really<00:05:12.759> the<00:05:12.880> actual 00:05:13.310 --> 00:05:13.320 align:start position:0% this we act but oh really the actual 00:05:13.320 --> 00:05:16.749 align:start position:0% this we act but oh really the actual core<00:05:13.520> platform<00:05:14.520> yeah<00:05:14.720> some<00:05:14.840> of<00:05:15.440> the<00:05:16.440> uh<00:05:16.600> some 00:05:16.749 --> 00:05:16.759 align:start position:0% core platform yeah some of the uh some 00:05:16.759 --> 00:05:18.990 align:start position:0% core platform yeah some of the uh some of<00:05:16.919> the<00:05:17.080> product<00:05:17.400> we<00:05:17.560> sell<00:05:18.280> I<00:05:18.440> developed<00:05:18.800> it 00:05:18.990 --> 00:05:19.000 align:start position:0% of the product we sell I developed it 00:05:19.000 --> 00:05:20.590 align:start position:0% of the product we sell I developed it myself<00:05:19.319> and<00:05:19.440> also<00:05:19.639> we<00:05:19.720> have<00:05:19.840> the<00:05:19.960> dojo<00:05:20.440> with 00:05:20.590 --> 00:05:20.600 align:start position:0% myself and also we have the dojo with 00:05:20.600 --> 00:05:22.830 align:start position:0% myself and also we have the dojo with challenges<00:05:21.120> every<00:05:21.319> month<00:05:22.160> right<00:05:22.479> right<00:05:22.759> I 00:05:22.830 --> 00:05:22.840 align:start position:0% challenges every month right right I 00:05:22.840 --> 00:05:24.790 align:start position:0% challenges every month right right I made<00:05:23.080> the<00:05:23.199> full 00:05:24.790 --> 00:05:24.800 align:start position:0% made the full 00:05:24.800 --> 00:05:27.830 align:start position:0% made the full website<00:05:25.800> that's<00:05:26.000> rad<00:05:26.360> man<00:05:27.360> that's<00:05:27.600> really 00:05:27.830 --> 00:05:27.840 align:start position:0% website that's rad man that's really 00:05:27.840 --> 00:05:29.790 align:start position:0% website that's rad man that's really good<00:05:28.560> and<00:05:28.680> there<00:05:28.800> is<00:05:28.960> some<00:05:29.120> updates<00:05:29.440> coming 00:05:29.790 --> 00:05:29.800 align:start position:0% good and there is some updates coming 00:05:29.800 --> 00:05:32.990 align:start position:0% good and there is some updates coming soon<00:05:30.199> with<00:05:30.720> a<00:05:30.840> lot<00:05:31.000> of<00:05:32.000> new<00:05:32.160> tooling<00:05:32.680> to 00:05:32.990 --> 00:05:33.000 align:start position:0% soon with a lot of new tooling to 00:05:33.000 --> 00:05:34.909 align:start position:0% soon with a lot of new tooling to inspect<00:05:33.560> excess 00:05:34.909 --> 00:05:34.919 align:start position:0% inspect excess 00:05:34.919 --> 00:05:38.230 align:start position:0% inspect excess mutation<00:05:35.919> yeah<00:05:36.400> yeah<00:05:36.720> the<00:05:37.080> um<00:05:37.479> mutation<00:05:38.000> stuff 00:05:38.230 --> 00:05:38.240 align:start position:0% mutation yeah yeah the um mutation stuff 00:05:38.240 --> 00:05:40.390 align:start position:0% mutation yeah yeah the um mutation stuff has<00:05:38.360> been<00:05:38.560> popping<00:05:38.840> off<00:05:39.520> lately<00:05:39.840> with<00:05:39.960> the<00:05:40.120> D 00:05:40.390 --> 00:05:40.400 align:start position:0% has been popping off lately with the D 00:05:40.400 --> 00:05:41.909 align:start position:0% has been popping off lately with the D purify<00:05:40.919> stuff<00:05:41.360> and<00:05:41.479> you<00:05:41.560> were<00:05:41.759> just 00:05:41.909 --> 00:05:41.919 align:start position:0% purify stuff and you were just 00:05:41.919 --> 00:05:44.070 align:start position:0% purify stuff and you were just mentioning<00:05:42.360> some<00:05:42.520> CSS<00:05:43.000> mutations<00:05:43.680> and<00:05:43.840> stuff 00:05:44.070 --> 00:05:44.080 align:start position:0% mentioning some CSS mutations and stuff 00:05:44.080 --> 00:05:45.670 align:start position:0% mentioning some CSS mutations and stuff like<00:05:44.280> that<00:05:44.440> it<00:05:44.520> wasn't<00:05:44.720> on<00:05:44.840> my<00:05:45.000> radar<00:05:45.319> quite<00:05:45.479> as 00:05:45.670 --> 00:05:45.680 align:start position:0% like that it wasn't on my radar quite as 00:05:45.680 --> 00:05:47.790 align:start position:0% like that it wasn't on my radar quite as much<00:05:45.840> until<00:05:46.199> this<00:05:46.479> past<00:05:47.039> couple<00:05:47.319> months<00:05:47.680> I 00:05:47.790 --> 00:05:47.800 align:start position:0% much until this past couple months I 00:05:47.800 --> 00:05:50.550 align:start position:0% much until this past couple months I think<00:05:48.759> I<00:05:48.840> think<00:05:49.080> it's<00:05:49.319> super<00:05:49.560> interesting 00:05:50.550 --> 00:05:50.560 align:start position:0% think I think it's super interesting 00:05:50.560 --> 00:05:53.469 align:start position:0% think I think it's super interesting because<00:05:51.560> I<00:05:51.680> I<00:05:51.800> like<00:05:52.039> open<00:05:52.479> uh<00:05:52.600> white<00:05:52.880> box 00:05:53.469 --> 00:05:53.479 align:start position:0% because I I like open uh white box 00:05:53.479 --> 00:05:55.710 align:start position:0% because I I like open uh white box auditing<00:05:54.240> and<00:05:54.440> Pen<00:05:54.639> testing<00:05:55.080> so<00:05:55.360> for<00:05:55.520> me 00:05:55.710 --> 00:05:55.720 align:start position:0% auditing and Pen testing so for me 00:05:55.720 --> 00:05:58.950 align:start position:0% auditing and Pen testing so for me client<00:05:56.120> side<00:05:56.280> bugs<00:05:56.919> always<00:05:57.440> white<00:05:57.800> bugs<00:05:58.800> so 00:05:58.950 --> 00:05:58.960 align:start position:0% client side bugs always white bugs so 00:05:58.960 --> 00:06:00.309 align:start position:0% client side bugs always white bugs so you<00:05:59.080> can<00:05:59.360> really<00:05:59.720> know<00:05:59.840> what<00:05:59.919> you're<00:06:00.080> doing 00:06:00.309 --> 00:06:00.319 align:start position:0% you can really know what you're doing 00:06:00.319 --> 00:06:01.870 align:start position:0% you can really know what you're doing and<00:06:00.400> you<00:06:00.479> don't<00:06:00.639> need<00:06:00.759> to<00:06:01.000> guess<00:06:01.400> what<00:06:01.560> will<00:06:01.720> be 00:06:01.870 --> 00:06:01.880 align:start position:0% and you don't need to guess what will be 00:06:01.880 --> 00:06:03.909 align:start position:0% and you don't need to guess what will be happening<00:06:02.880> and<00:06:03.120> so<00:06:03.240> you<00:06:03.360> can<00:06:03.479> have<00:06:03.560> a<00:06:03.720> very 00:06:03.909 --> 00:06:03.919 align:start position:0% happening and so you can have a very 00:06:03.919 --> 00:06:07.909 align:start position:0% happening and so you can have a very logical<00:06:04.440> approach<00:06:05.000> to<00:06:05.199> your<00:06:06.120> buting<00:06:07.120> yeah<00:06:07.560> I<00:06:07.800> I 00:06:07.909 --> 00:06:07.919 align:start position:0% logical approach to your buting yeah I I 00:06:07.919 --> 00:06:11.029 align:start position:0% logical approach to your buting yeah I I agree<00:06:08.240> man<00:06:08.560> I<00:06:08.680> think<00:06:08.960> I<00:06:09.039> think<00:06:09.520> uh<00:06:10.120> I<00:06:10.240> think 00:06:11.029 --> 00:06:11.039 align:start position:0% agree man I think I think uh I think 00:06:11.039 --> 00:06:12.710 align:start position:0% agree man I think I think uh I think white<00:06:11.319> box<00:06:11.599> stuff<00:06:11.800> is<00:06:11.880> a<00:06:11.960> little<00:06:12.199> addicting 00:06:12.710 --> 00:06:12.720 align:start position:0% white box stuff is a little addicting 00:06:12.720 --> 00:06:14.749 align:start position:0% white box stuff is a little addicting though<00:06:13.080> right<00:06:13.680> like<00:06:13.840> I<00:06:13.960> feel<00:06:14.199> like<00:06:14.440> once<00:06:14.639> you 00:06:14.749 --> 00:06:14.759 align:start position:0% though right like I feel like once you 00:06:14.759 --> 00:06:16.710 align:start position:0% though right like I feel like once you go<00:06:14.919> down<00:06:15.080> the<00:06:15.240> white<00:06:15.479> box<00:06:16.080> you<00:06:16.199> know<00:06:16.360> rabbit 00:06:16.710 --> 00:06:16.720 align:start position:0% go down the white box you know rabbit 00:06:16.720 --> 00:06:17.909 align:start position:0% go down the white box you know rabbit hole<00:06:16.960> it's<00:06:17.120> like<00:06:17.319> uh<00:06:17.440> you<00:06:17.520> go<00:06:17.680> back<00:06:17.759> to 00:06:17.909 --> 00:06:17.919 align:start position:0% hole it's like uh you go back to 00:06:17.919 --> 00:06:19.350 align:start position:0% hole it's like uh you go back to blackbox<00:06:18.319> and<00:06:18.400> you're<00:06:18.520> like<00:06:18.680> man<00:06:18.880> I'm<00:06:19.120> just 00:06:19.350 --> 00:06:19.360 align:start position:0% blackbox and you're like man I'm just 00:06:19.360 --> 00:06:22.950 align:start position:0% blackbox and you're like man I'm just like<00:06:20.039> I'm<00:06:20.160> just<00:06:20.360> guessing<00:06:20.840> here<00:06:21.599> like<00:06:22.599> it's<00:06:22.759> so 00:06:22.950 --> 00:06:22.960 align:start position:0% like I'm just guessing here like it's so 00:06:22.960 --> 00:06:25.510 align:start position:0% like I'm just guessing here like it's so much<00:06:23.120> easier<00:06:23.400> to<00:06:23.599> feel<00:06:23.880> like<00:06:24.120> you<00:06:25.120> and<00:06:25.280> I<00:06:25.360> think 00:06:25.510 --> 00:06:25.520 align:start position:0% much easier to feel like you and I think 00:06:25.520 --> 00:06:26.990 align:start position:0% much easier to feel like you and I think for<00:06:25.639> me<00:06:25.840> also<00:06:26.120> from<00:06:26.280> like<00:06:26.400> a<00:06:26.520> white<00:06:26.680> box 00:06:26.990 --> 00:06:27.000 align:start position:0% for me also from like a white box 00:06:27.000 --> 00:06:28.230 align:start position:0% for me also from like a white box perspective 00:06:28.230 --> 00:06:28.240 align:start position:0% perspective 00:06:28.240 --> 00:06:30.710 align:start position:0% perspective you<00:06:29.240> when<00:06:29.400> you<00:06:29.800> you<00:06:29.960> cover<00:06:30.199> a<00:06:30.319> certain<00:06:30.520> amount 00:06:30.710 --> 00:06:30.720 align:start position:0% you when you you cover a certain amount 00:06:30.720 --> 00:06:33.110 align:start position:0% you when you you cover a certain amount of<00:06:30.840> code<00:06:31.120> in<00:06:31.240> your<00:06:31.479> head<00:06:32.240> like<00:06:32.560> it<00:06:32.800> it<00:06:32.919> feels 00:06:33.110 --> 00:06:33.120 align:start position:0% of code in your head like it it feels 00:06:33.120 --> 00:06:34.670 align:start position:0% of code in your head like it it feels like<00:06:33.240> you<00:06:33.360> made<00:06:33.560> more<00:06:33.840> progress<00:06:34.199> whereas<00:06:34.479> with 00:06:34.670 --> 00:06:34.680 align:start position:0% like you made more progress whereas with 00:06:34.680 --> 00:06:36.270 align:start position:0% like you made more progress whereas with blackbox<00:06:35.160> stuff<00:06:35.440> like<00:06:35.680> I<00:06:35.720> don't<00:06:35.919> know<00:06:36.120> if 00:06:36.270 --> 00:06:36.280 align:start position:0% blackbox stuff like I don't know if 00:06:36.280 --> 00:06:38.790 align:start position:0% blackbox stuff like I don't know if there's<00:06:36.639> like<00:06:37.160> I'm<00:06:37.360> just<00:06:38.160> at<00:06:38.280> the<00:06:38.400> tip<00:06:38.560> of<00:06:38.680> the 00:06:38.790 --> 00:06:38.800 align:start position:0% there's like I'm just at the tip of the 00:06:38.800 --> 00:06:40.430 align:start position:0% there's like I'm just at the tip of the iceberg<00:06:39.240> and<00:06:39.360> then<00:06:39.599> everything<00:06:39.880> I<00:06:40.039> can't<00:06:40.199> see 00:06:40.430 --> 00:06:40.440 align:start position:0% iceberg and then everything I can't see 00:06:40.440 --> 00:06:43.790 align:start position:0% iceberg and then everything I can't see is<00:06:40.599> like<00:06:40.840> massive<00:06:41.280> you<00:06:41.400> know<00:06:42.240> um<00:06:42.759> so<00:06:43.160> you<00:06:43.240> can 00:06:43.790 --> 00:06:43.800 align:start position:0% is like massive you know um so you can 00:06:43.800 --> 00:06:45.589 align:start position:0% is like massive you know um so you can something<00:06:44.120> that's<00:06:44.400> super<00:06:44.639> easy<00:06:44.840> to<00:06:45.000> exploit 00:06:45.589 --> 00:06:45.599 align:start position:0% something that's super easy to exploit 00:06:45.599 --> 00:06:47.350 align:start position:0% something that's super easy to exploit but<00:06:45.759> just<00:06:45.919> because<00:06:46.120> you<00:06:46.240> didn't<00:06:46.560> test<00:06:47.199> the 00:06:47.350 --> 00:06:47.360 align:start position:0% but just because you didn't test the 00:06:47.360 --> 00:06:49.950 align:start position:0% but just because you didn't test the little<00:06:47.639> thing<00:06:47.880> that<00:06:48.039> was<00:06:48.560> working<00:06:49.560> or 00:06:49.950 --> 00:06:49.960 align:start position:0% little thing that was working or 00:06:49.960 --> 00:06:51.710 align:start position:0% little thing that was working or sometimes<00:06:50.160> you<00:06:50.319> get<00:06:50.919> you<00:06:51.039> send<00:06:51.280> some<00:06:51.440> input 00:06:51.710 --> 00:06:51.720 align:start position:0% sometimes you get you send some input 00:06:51.720 --> 00:06:53.029 align:start position:0% sometimes you get you send some input and<00:06:51.840> you<00:06:51.919> get<00:06:52.000> a<00:06:52.120> weird<00:06:52.319> bug<00:06:52.560> and<00:06:52.680> there<00:06:52.759> is<00:06:52.880> no 00:06:53.029 --> 00:06:53.039 align:start position:0% and you get a weird bug and there is no 00:06:53.039 --> 00:06:54.830 align:start position:0% and you get a weird bug and there is no way<00:06:53.160> to<00:06:53.240> know<00:06:53.400> what's<00:06:53.599> happening<00:06:54.360> but<00:06:54.479> you<00:06:54.759> the 00:06:54.830 --> 00:06:54.840 align:start position:0% way to know what's happening but you the 00:06:54.840 --> 00:06:56.350 align:start position:0% way to know what's happening but you the source<00:06:55.080> code<00:06:55.280> it's<00:06:55.440> like<00:06:55.680> oh<00:06:56.039> everything 00:06:56.350 --> 00:06:56.360 align:start position:0% source code it's like oh everything 00:06:56.360 --> 00:06:58.430 align:start position:0% source code it's like oh everything makes<00:06:56.560> sense<00:06:56.800> and<00:06:56.919> I<00:06:57.000> can<00:06:57.240> just<00:06:57.720> do<00:06:57.919> this<00:06:58.199> very 00:06:58.430 --> 00:06:58.440 align:start position:0% makes sense and I can just do this very 00:06:58.440 --> 00:07:01.150 align:start position:0% makes sense and I can just do this very specific<00:06:58.840> input<00:06:59.199> and 00:07:01.150 --> 00:07:01.160 align:start position:0% specific input and 00:07:01.160 --> 00:07:03.990 align:start position:0% specific input and going<00:07:02.080> yeah<00:07:02.240> it<00:07:02.680> it<00:07:02.759> is<00:07:02.960> adct<00:07:03.479> addicting 00:07:03.990 --> 00:07:04.000 align:start position:0% going yeah it it is adct addicting 00:07:04.000 --> 00:07:08.110 align:start position:0% going yeah it it is adct addicting though<00:07:04.879> like<00:07:05.039> I<00:07:05.120> feel<00:07:05.400> like<00:07:05.800> um<00:07:06.800> I<00:07:06.879> feel<00:07:07.160> like<00:07:08.000> I 00:07:08.110 --> 00:07:08.120 align:start position:0% though like I feel like um I feel like I 00:07:08.120 --> 00:07:11.110 align:start position:0% though like I feel like um I feel like I I<00:07:08.240> forced<00:07:08.599> my<00:07:08.720> mentee<00:07:09.199> to<00:07:09.520> go<00:07:09.759> back<00:07:10.000> from<00:07:10.639> doing 00:07:11.110 --> 00:07:11.120 align:start position:0% I forced my mentee to go back from doing 00:07:11.120 --> 00:07:13.869 align:start position:0% I forced my mentee to go back from doing white<00:07:11.319> box<00:07:11.639> stuff<00:07:12.440> and<00:07:12.800> and<00:07:13.280> client<00:07:13.680> side 00:07:13.869 --> 00:07:13.879 align:start position:0% white box stuff and and client side 00:07:13.879 --> 00:07:15.909 align:start position:0% white box stuff and and client side stuff<00:07:14.120> to<00:07:14.319> going<00:07:14.599> back<00:07:14.720> to<00:07:15.000> blackbox<00:07:15.560> server 00:07:15.909 --> 00:07:15.919 align:start position:0% stuff to going back to blackbox server 00:07:15.919 --> 00:07:18.469 align:start position:0% stuff to going back to blackbox server side<00:07:16.080> testing<00:07:16.599> right<00:07:17.280> and<00:07:17.759> and<00:07:17.879> he<00:07:17.960> was<00:07:18.120> like<00:07:18.319> I 00:07:18.469 --> 00:07:18.479 align:start position:0% side testing right and and he was like I 00:07:18.479 --> 00:07:20.670 align:start position:0% side testing right and and he was like I I<00:07:18.599> hate<00:07:18.840> this<00:07:19.000> for<00:07:19.160> the<00:07:19.319> first<00:07:19.720> like<00:07:20.360> for<00:07:20.560> the 00:07:20.670 --> 00:07:20.680 align:start position:0% I hate this for the first like for the 00:07:20.680 --> 00:07:22.189 align:start position:0% I hate this for the first like for the first<00:07:20.919> couple<00:07:21.240> weeks<00:07:21.520> and<00:07:21.639> then<00:07:21.879> after<00:07:22.080> he 00:07:22.189 --> 00:07:22.199 align:start position:0% first couple weeks and then after he 00:07:22.199 --> 00:07:23.589 align:start position:0% first couple weeks and then after he started<00:07:22.479> finding<00:07:22.759> bugs<00:07:23.000> he's<00:07:23.160> like<00:07:23.319> wow<00:07:23.479> this 00:07:23.589 --> 00:07:23.599 align:start position:0% started finding bugs he's like wow this 00:07:23.599 --> 00:07:25.710 align:start position:0% started finding bugs he's like wow this is<00:07:23.759> actually<00:07:23.960> a<00:07:24.080> totally<00:07:24.440> separate<00:07:24.759> skill<00:07:25.080> set 00:07:25.710 --> 00:07:25.720 align:start position:0% is actually a totally separate skill set 00:07:25.720 --> 00:07:29.629 align:start position:0% is actually a totally separate skill set yeah<00:07:26.120> um<00:07:27.120> which<00:07:27.240> I<00:07:27.360> think<00:07:27.479> is<00:07:27.680> cool<00:07:28.080> so<00:07:29.000> um<00:07:29.520> all 00:07:29.629 --> 00:07:29.639 align:start position:0% yeah um which I think is cool so um all 00:07:29.639 --> 00:07:30.830 align:start position:0% yeah um which I think is cool so um all right<00:07:29.879> we're<00:07:30.120> we're<00:07:30.280> about<00:07:30.440> time<00:07:30.560> to<00:07:30.680> start 00:07:30.830 --> 00:07:30.840 align:start position:0% right we're we're about time to start 00:07:30.840 --> 00:07:34.830 align:start position:0% right we're we're about time to start rolling<00:07:31.240> now<00:07:31.800> um<00:07:32.199> so<00:07:32.520> we<00:07:32.720> have<00:07:33.120> bit<00:07:33.400> K<00:07:33.759> here<00:07:34.400> um 00:07:34.830 --> 00:07:34.840 align:start position:0% rolling now um so we have bit K here um 00:07:34.840 --> 00:07:36.029 align:start position:0% rolling now um so we have bit K here um and<00:07:35.039> he's<00:07:35.240> going<00:07:35.319> to<00:07:35.400> be<00:07:35.520> talking<00:07:35.800> about 00:07:36.029 --> 00:07:36.039 align:start position:0% and he's going to be talking about 00:07:36.039 --> 00:07:38.309 align:start position:0% and he's going to be talking about prototype<00:07:36.479> pollution<00:07:37.000> he<00:07:37.160> gave<00:07:37.319> this<00:07:37.560> talk<00:07:37.919> at 00:07:38.309 --> 00:07:38.319 align:start position:0% prototype pollution he gave this talk at 00:07:38.319 --> 00:07:41.550 align:start position:0% prototype pollution he gave this talk at Defcon<00:07:39.319> and<00:07:39.919> uh<00:07:40.120> I<00:07:40.280> had<00:07:40.599> a<00:07:40.800> conflicting<00:07:41.319> time 00:07:41.550 --> 00:07:41.560 align:start position:0% Defcon and uh I had a conflicting time 00:07:41.560 --> 00:07:44.110 align:start position:0% Defcon and uh I had a conflicting time slot<00:07:41.919> and<00:07:42.080> couldn't<00:07:42.360> make<00:07:42.560> it<00:07:43.440> um<00:07:43.759> and<00:07:43.840> so<00:07:44.039> I 00:07:44.110 --> 00:07:44.120 align:start position:0% slot and couldn't make it um and so I 00:07:44.120 --> 00:07:46.869 align:start position:0% slot and couldn't make it um and so I was<00:07:44.280> so<00:07:44.639> bummed<00:07:45.639> and<00:07:46.000> I<00:07:46.159> really<00:07:46.599> I<00:07:46.720> really 00:07:46.869 --> 00:07:46.879 align:start position:0% was so bummed and I really I really 00:07:46.879 --> 00:07:50.629 align:start position:0% was so bummed and I really I really wanted<00:07:47.120> to<00:07:47.280> make<00:07:47.400> it<00:07:47.560> over<00:07:47.840> there<00:07:48.680> um<00:07:49.440> so<00:07:50.159> I<00:07:50.560> I 00:07:50.629 --> 00:07:50.639 align:start position:0% wanted to make it over there um so I I 00:07:50.639 --> 00:07:51.990 align:start position:0% wanted to make it over there um so I I asked<00:07:50.879> him<00:07:51.039> hey<00:07:51.199> man<00:07:51.400> can<00:07:51.520> you<00:07:51.599> come<00:07:51.759> do<00:07:51.879> this 00:07:51.990 --> 00:07:52.000 align:start position:0% asked him hey man can you come do this 00:07:52.000 --> 00:07:53.469 align:start position:0% asked him hey man can you come do this for<00:07:52.120> the<00:07:52.199> critical<00:07:52.520> thinkers<00:07:52.879> and<00:07:53.080> he 00:07:53.469 --> 00:07:53.479 align:start position:0% for the critical thinkers and he 00:07:53.479 --> 00:07:56.710 align:start position:0% for the critical thinkers and he graciously<00:07:54.000> agreed<00:07:54.520> so<00:07:55.360> um<00:07:56.319> we<00:07:56.440> are<00:07:56.560> going<00:07:56.639> to 00:07:56.710 --> 00:07:56.720 align:start position:0% graciously agreed so um we are going to 00:07:56.720 --> 00:07:58.790 align:start position:0% graciously agreed so um we are going to be<00:07:56.840> talking<00:07:57.080> about<00:07:57.599> mostly<00:07:57.919> server<00:07:58.599> side 00:07:58.790 --> 00:07:58.800 align:start position:0% be talking about mostly server side 00:07:58.800 --> 00:08:02.270 align:start position:0% be talking about mostly server side prototype<00:07:59.199> pollution<00:07:59.840> right<00:08:00.759> nice<00:08:01.759> nice<00:08:02.159> I'll 00:08:02.270 --> 00:08:02.280 align:start position:0% prototype pollution right nice nice I'll 00:08:02.280 --> 00:08:05.029 align:start position:0% prototype pollution right nice nice I'll let<00:08:02.479> you<00:08:03.479> yeah<00:08:03.720> let's<00:08:03.960> go<00:08:04.199> let<00:08:04.400> me<00:08:04.639> sh<00:08:04.879> my 00:08:05.029 --> 00:08:05.039 align:start position:0% let you yeah let's go let me sh my 00:08:05.039 --> 00:08:12.469 align:start position:0% let you yeah let's go let me sh my screen 00:08:12.469 --> 00:08:12.479 align:start position:0% 00:08:12.479 --> 00:08:14.149 align:start position:0% sure 00:08:14.149 --> 00:08:14.159 align:start position:0% sure 00:08:14.159 --> 00:08:18.149 align:start position:0% sure okay<00:08:15.159> do<00:08:15.319> you<00:08:15.479> see<00:08:15.680> the<00:08:15.800> the<00:08:15.919> slide<00:08:16.919> okay<00:08:17.560> yeah 00:08:18.149 --> 00:08:18.159 align:start position:0% okay do you see the the slide okay yeah 00:08:18.159 --> 00:08:19.869 align:start position:0% okay do you see the the slide okay yeah so<00:08:18.759> let's 00:08:19.869 --> 00:08:19.879 align:start position:0% so let's 00:08:19.879 --> 00:08:23.029 align:start position:0% so let's go<00:08:20.879> so<00:08:21.120> yeah<00:08:21.319> today<00:08:21.599> I'm<00:08:21.759> going<00:08:21.879> to<00:08:22.319> talk<00:08:22.639> about 00:08:23.029 --> 00:08:23.039 align:start position:0% go so yeah today I'm going to talk about 00:08:23.039 --> 00:08:26.830 align:start position:0% go so yeah today I'm going to talk about sde<00:08:23.479> protype<00:08:24.080> pollution<00:08:25.080> and<00:08:25.479> how<00:08:25.759> to<00:08:26.520> find 00:08:26.830 --> 00:08:26.840 align:start position:0% sde protype pollution and how to find 00:08:26.840 --> 00:08:29.950 align:start position:0% sde protype pollution and how to find the<00:08:27.319> pollution<00:08:27.599> how<00:08:27.759> to<00:08:27.879> exploit<00:08:28.280> them<00:08:29.680> so<00:08:29.879> I 00:08:29.950 --> 00:08:29.960 align:start position:0% the pollution how to exploit them so I 00:08:29.960 --> 00:08:32.790 align:start position:0% the pollution how to exploit them so I work<00:08:30.159> at<00:08:30.319> yesak<00:08:31.280> uh<00:08:31.400> this<00:08:31.479> is<00:08:31.639> your<00:08:31.919> logo<00:08:32.360> but 00:08:32.790 --> 00:08:32.800 align:start position:0% work at yesak uh this is your logo but 00:08:32.800 --> 00:08:34.630 align:start position:0% work at yesak uh this is your logo but because<00:08:33.200> I've<00:08:33.399> done<00:08:33.560> the<00:08:33.680> talk<00:08:34.200> a<00:08:34.279> long<00:08:34.479> time 00:08:34.630 --> 00:08:34.640 align:start position:0% because I've done the talk a long time 00:08:34.640 --> 00:08:37.190 align:start position:0% because I've done the talk a long time ago<00:08:34.800> for<00:08:34.919> the<00:08:35.080> first<00:08:35.440> time<00:08:36.440> this<00:08:36.640> research<00:08:37.000> are 00:08:37.190 --> 00:08:37.200 align:start position:0% ago for the first time this research are 00:08:37.200 --> 00:08:40.630 align:start position:0% ago for the first time this research are made<00:08:37.479> by<00:08:38.039> sakir<00:08:38.560> one<00:08:38.680> of<00:08:38.839> my<00:08:39.039> friend<00:08:39.440> and 00:08:40.630 --> 00:08:40.640 align:start position:0% made by sakir one of my friend and 00:08:40.640 --> 00:08:44.670 align:start position:0% made by sakir one of my friend and another<00:08:41.640> uh<00:08:41.800> colleague<00:08:42.120> atak<00:08:42.839> and 00:08:44.670 --> 00:08:44.680 align:start position:0% another uh colleague atak and 00:08:44.680 --> 00:08:46.990 align:start position:0% another uh colleague atak and myself<00:08:45.680> and<00:08:45.839> before<00:08:46.080> we<00:08:46.200> talk<00:08:46.399> about<00:08:46.600> protype 00:08:46.990 --> 00:08:47.000 align:start position:0% myself and before we talk about protype 00:08:47.000 --> 00:08:48.710 align:start position:0% myself and before we talk about protype pollution<00:08:47.399> I<00:08:47.480> think<00:08:47.680> it's<00:08:47.959> good<00:08:48.160> to<00:08:48.360> do<00:08:48.560> a 00:08:48.710 --> 00:08:48.720 align:start position:0% pollution I think it's good to do a 00:08:48.720 --> 00:08:50.790 align:start position:0% pollution I think it's good to do a little<00:08:49.279> uh<00:08:49.399> check<00:08:49.600> up<00:08:49.760> on<00:08:49.920> what<00:08:50.040> is<00:08:50.279> prototype 00:08:50.790 --> 00:08:50.800 align:start position:0% little uh check up on what is prototype 00:08:50.800 --> 00:08:54.710 align:start position:0% little uh check up on what is prototype in<00:08:50.959> JavaScript<00:08:51.760> and<00:08:52.200> how<00:08:53.200> JavaScript<00:08:53.760> behave 00:08:54.710 --> 00:08:54.720 align:start position:0% in JavaScript and how JavaScript behave 00:08:54.720 --> 00:08:56.230 align:start position:0% in JavaScript and how JavaScript behave because<00:08:55.000> JavaScript<00:08:55.399> behave<00:08:55.680> weirdly<00:08:56.120> most 00:08:56.230 --> 00:08:56.240 align:start position:0% because JavaScript behave weirdly most 00:08:56.240 --> 00:08:59.190 align:start position:0% because JavaScript behave weirdly most of<00:08:56.360> the<00:08:56.880> time<00:08:57.880> so<00:08:58.040> let's<00:08:58.240> create<00:08:58.920> uh<00:08:59.040> let's 00:08:59.190 --> 00:08:59.200 align:start position:0% of the time so let's create uh let's 00:08:59.200 --> 00:09:02.750 align:start position:0% of the time so let's create uh let's create<00:08:59.560> a<00:08:59.720> simple<00:09:00.240> object<00:09:01.120> x<00:09:01.519> with<00:09:01.640> a<00:09:01.839> property 00:09:02.750 --> 00:09:02.760 align:start position:0% create a simple object x with a property 00:09:02.760 --> 00:09:05.670 align:start position:0% create a simple object x with a property called<00:09:03.040> prop<00:09:03.399> with<00:09:03.519> a<00:09:03.640> value<00:09:04.160> Val<00:09:05.160> and<00:09:05.399> so<00:09:05.560> we 00:09:05.670 --> 00:09:05.680 align:start position:0% called prop with a value Val and so we 00:09:05.680 --> 00:09:07.430 align:start position:0% called prop with a value Val and so we have<00:09:05.839> this<00:09:06.040> object<00:09:06.680> we<00:09:06.800> can<00:09:07.000> access<00:09:07.240> the 00:09:07.430 --> 00:09:07.440 align:start position:0% have this object we can access the 00:09:07.440 --> 00:09:10.430 align:start position:0% have this object we can access the property<00:09:07.839> using<00:09:08.200> the<00:09:08.680> dot<00:09:09.680> and<00:09:09.760> we<00:09:09.920> get<00:09:10.040> the 00:09:10.430 --> 00:09:10.440 align:start position:0% property using the dot and we get the 00:09:10.440 --> 00:09:13.630 align:start position:0% property using the dot and we get the value<00:09:11.440> so<00:09:11.680> this<00:09:11.760> is<00:09:11.920> super<00:09:12.279> simple<00:09:13.279> and<00:09:13.440> if<00:09:13.519> you 00:09:13.630 --> 00:09:13.640 align:start position:0% value so this is super simple and if you 00:09:13.640 --> 00:09:15.110 align:start position:0% value so this is super simple and if you want<00:09:13.760> to<00:09:13.880> check<00:09:14.079> if<00:09:14.200> the<00:09:14.360> property<00:09:14.720> exists<00:09:15.000> on 00:09:15.110 --> 00:09:15.120 align:start position:0% want to check if the property exists on 00:09:15.120 --> 00:09:17.870 align:start position:0% want to check if the property exists on an<00:09:15.279> object<00:09:15.800> we<00:09:15.920> can<00:09:16.120> use<00:09:16.360> the<00:09:16.600> function<00:09:17.079> as<00:09:17.240> an 00:09:17.870 --> 00:09:17.880 align:start position:0% an object we can use the function as an 00:09:17.880 --> 00:09:19.990 align:start position:0% an object we can use the function as an property<00:09:18.880> so<00:09:19.079> here<00:09:19.240> we<00:09:19.399> check<00:09:19.680> if<00:09:19.839> the 00:09:19.990 --> 00:09:20.000 align:start position:0% property so here we check if the 00:09:20.000 --> 00:09:24.069 align:start position:0% property so here we check if the property<00:09:20.440> prop<00:09:20.920> exist<00:09:21.720> uh<00:09:21.880> on<00:09:22.399> X<00:09:23.399> and<00:09:23.839> we<00:09:23.959> get 00:09:24.069 --> 00:09:24.079 align:start position:0% property prop exist uh on X and we get 00:09:24.079 --> 00:09:26.389 align:start position:0% property prop exist uh on X and we get true<00:09:24.399> the<00:09:24.560> property<00:09:24.959> exists<00:09:25.800> and<00:09:25.920> if<00:09:26.000> we<00:09:26.120> try 00:09:26.389 --> 00:09:26.399 align:start position:0% true the property exists and if we try 00:09:26.399 --> 00:09:29.949 align:start position:0% true the property exists and if we try with<00:09:26.519> something<00:09:27.160> else<00:09:28.160> we<00:09:28.320> get<00:09:28.480> false 00:09:29.949 --> 00:09:29.959 align:start position:0% with something else we get false 00:09:29.959 --> 00:09:33.150 align:start position:0% with something else we get false but<00:09:30.760> what<00:09:30.880> happen<00:09:31.160> if<00:09:31.240> you<00:09:31.360> try<00:09:31.640> to<00:09:31.839> test<00:09:32.600> x. 00:09:33.150 --> 00:09:33.160 align:start position:0% but what happen if you try to test x. 00:09:33.160 --> 00:09:35.110 align:start position:0% but what happen if you try to test x. aen<00:09:33.480> property<00:09:33.839> of<00:09:34.040> Aon<00:09:34.399> property<00:09:34.880> we<00:09:35.000> are 00:09:35.110 --> 00:09:35.120 align:start position:0% aen property of Aon property we are 00:09:35.120 --> 00:09:37.509 align:start position:0% aen property of Aon property we are using<00:09:35.519> this<00:09:35.880> from<00:09:36.079> the<00:09:36.240> beginning<00:09:36.839> and<00:09:37.440> it 00:09:37.509 --> 00:09:37.519 align:start position:0% using this from the beginning and it 00:09:37.519 --> 00:09:40.230 align:start position:0% using this from the beginning and it should<00:09:37.720> be<00:09:37.959> there<00:09:38.760> but<00:09:38.920> if<00:09:39.040> we<00:09:39.240> check<00:09:39.839> actually 00:09:40.230 --> 00:09:40.240 align:start position:0% should be there but if we check actually 00:09:40.240 --> 00:09:43.470 align:start position:0% should be there but if we check actually there<00:09:40.360> is<00:09:40.519> no<00:09:40.800> aen<00:09:41.160> property<00:09:41.600> on<00:09:42.040> X<00:09:43.040> so<00:09:43.279> where 00:09:43.470 --> 00:09:43.480 align:start position:0% there is no aen property on X so where 00:09:43.480 --> 00:09:47.470 align:start position:0% there is no aen property on X so where does<00:09:43.720> aen<00:09:44.040> property<00:09:44.360> come<00:09:44.959> from<00:09:46.279> well<00:09:47.279> in 00:09:47.470 --> 00:09:47.480 align:start position:0% does aen property come from well in 00:09:47.480 --> 00:09:50.110 align:start position:0% does aen property come from well in JavaScript<00:09:48.240> every<00:09:48.560> object<00:09:49.079> every<00:09:49.839> everything 00:09:50.110 --> 00:09:50.120 align:start position:0% JavaScript every object every everything 00:09:50.120 --> 00:09:52.550 align:start position:0% JavaScript every object every everything in<00:09:50.240> JavaScript<00:09:50.640> got<00:09:50.800> a<00:09:51.399> prototype<00:09:52.399> the 00:09:52.550 --> 00:09:52.560 align:start position:0% in JavaScript got a prototype the 00:09:52.560 --> 00:09:54.710 align:start position:0% in JavaScript got a prototype the Prototype<00:09:53.519> is 00:09:54.710 --> 00:09:54.720 align:start position:0% Prototype is 00:09:54.720 --> 00:09:56.670 align:start position:0% Prototype is um<00:09:55.720> is<00:09:55.839> used<00:09:56.120> when<00:09:56.200> you<00:09:56.279> are<00:09:56.399> doing 00:09:56.670 --> 00:09:56.680 align:start position:0% um is used when you are doing 00:09:56.680 --> 00:09:59.430 align:start position:0% um is used when you are doing inheritance<00:09:57.279> in<00:09:57.800> JavaScript<00:09:58.800> so<00:09:59.000> each<00:09:59.160> of 00:09:59.430 --> 00:09:59.440 align:start position:0% inheritance in JavaScript so each of 00:09:59.440 --> 00:10:01.670 align:start position:0% inheritance in JavaScript so each of object<00:10:00.200> uh<00:10:00.360> on<00:10:00.480> the<00:10:00.600> Prototype<00:10:01.040> you<00:10:01.120> can<00:10:01.279> have 00:10:01.670 --> 00:10:01.680 align:start position:0% object uh on the Prototype you can have 00:10:01.680 --> 00:10:03.509 align:start position:0% object uh on the Prototype you can have default<00:10:02.079> value<00:10:02.600> that<00:10:02.800> the<00:10:03.040> object<00:10:03.320> will 00:10:03.509 --> 00:10:03.519 align:start position:0% default value that the object will 00:10:03.519 --> 00:10:07.230 align:start position:0% default value that the object will inherit<00:10:04.360> from<00:10:05.360> so<00:10:05.640> here<00:10:05.839> we<00:10:05.959> can<00:10:06.200> look<00:10:06.399> at<00:10:06.920> X 00:10:07.230 --> 00:10:07.240 align:start position:0% inherit from so here we can look at X 00:10:07.240 --> 00:10:08.750 align:start position:0% inherit from so here we can look at X and<00:10:07.399> look<00:10:07.519> at<00:10:07.600> the<00:10:07.720> Prototype<00:10:08.360> and<00:10:08.519> it's 00:10:08.750 --> 00:10:08.760 align:start position:0% and look at the Prototype and it's 00:10:08.760 --> 00:10:11.710 align:start position:0% and look at the Prototype and it's actually<00:10:09.200> the<00:10:09.560> object<00:10:09.920> n 00:10:11.710 --> 00:10:11.720 align:start position:0% actually the object n 00:10:11.720 --> 00:10:13.630 align:start position:0% actually the object n prototype<00:10:12.720> we<00:10:12.800> can<00:10:13.000> also<00:10:13.279> access<00:10:13.519> the 00:10:13.630 --> 00:10:13.640 align:start position:0% prototype we can also access the 00:10:13.640 --> 00:10:15.389 align:start position:0% prototype we can also access the Prototype<00:10:14.079> using<00:10:14.399> the<00:10:14.560> constructor. 00:10:15.389 --> 00:10:15.399 align:start position:0% Prototype using the constructor. 00:10:15.399 --> 00:10:17.630 align:start position:0% Prototype using the constructor. Prototype<00:10:15.800> on<00:10:15.920> the<00:10:16.000> same 00:10:17.630 --> 00:10:17.640 align:start position:0% Prototype on the same 00:10:17.640 --> 00:10:20.269 align:start position:0% Prototype on the same object<00:10:18.640> and<00:10:18.760> if<00:10:18.880> you<00:10:19.040> look<00:10:19.200> at<00:10:19.600> this<00:10:19.800> prototype 00:10:20.269 --> 00:10:20.279 align:start position:0% object and if you look at this prototype 00:10:20.279 --> 00:10:24.509 align:start position:0% object and if you look at this prototype it's<00:10:20.560> actually<00:10:21.360> uh<00:10:21.600> object. 00:10:24.509 --> 00:10:24.519 align:start position:0% 00:10:24.519 --> 00:10:26.590 align:start position:0% prototype<00:10:25.519> and<00:10:25.640> if<00:10:25.720> you<00:10:25.880> look<00:10:26.000> on<00:10:26.160> the<00:10:26.279> object 00:10:26.590 --> 00:10:26.600 align:start position:0% prototype and if you look on the object 00:10:26.600 --> 00:10:29.630 align:start position:0% prototype and if you look on the object of<00:10:27.040> uh<00:10:27.399> prototype<00:10:28.160> and<00:10:28.360> we<00:10:28.680> try<00:10:28.920> to<00:10:29.040> check<00:10:29.480> if 00:10:29.630 --> 00:10:29.640 align:start position:0% of uh prototype and we try to check if 00:10:29.640 --> 00:10:32.630 align:start position:0% of uh prototype and we try to check if the<00:10:29.839> Asen<00:10:30.160> property<00:10:30.560> exist<00:10:30.839> on<00:10:31.040> this<00:10:31.480> one<00:10:32.480> this 00:10:32.630 --> 00:10:32.640 align:start position:0% the Asen property exist on this one this 00:10:32.640 --> 00:10:34.590 align:start position:0% the Asen property exist on this one this time<00:10:32.760> we<00:10:32.920> got<00:10:33.079> true<00:10:33.600> because<00:10:33.880> the<00:10:34.120> function 00:10:34.590 --> 00:10:34.600 align:start position:0% time we got true because the function 00:10:34.600 --> 00:10:38.350 align:start position:0% time we got true because the function actually<00:10:34.920> come<00:10:35.399> from<00:10:35.800> there<00:10:36.160> and<00:10:36.279> not<00:10:36.440> from<00:10:36.639> X 00:10:38.350 --> 00:10:38.360 align:start position:0% actually come from there and not from X 00:10:38.360 --> 00:10:41.629 align:start position:0% actually come from there and not from X directly<00:10:39.360> so<00:10:39.639> how<00:10:40.000> do<00:10:40.440> JavaScript<00:10:41.160> resolve 00:10:41.629 --> 00:10:41.639 align:start position:0% directly so how do JavaScript resolve 00:10:41.639 --> 00:10:44.069 align:start position:0% directly so how do JavaScript resolve when<00:10:41.760> you<00:10:41.880> try<00:10:42.079> to<00:10:42.320> access<00:10:43.040> uh<00:10:43.360> a<00:10:43.639> property<00:10:44.000> of 00:10:44.069 --> 00:10:44.079 align:start position:0% when you try to access uh a property of 00:10:44.079 --> 00:10:46.750 align:start position:0% when you try to access uh a property of an<00:10:44.279> object<00:10:45.000> here<00:10:45.160> we<00:10:45.279> try<00:10:45.480> to<00:10:45.600> access<00:10:45.839> to 00:10:46.750 --> 00:10:46.760 align:start position:0% an object here we try to access to 00:10:46.760 --> 00:10:49.870 align:start position:0% an object here we try to access to string<00:10:47.760> so<00:10:47.920> we<00:10:48.000> don't<00:10:48.160> have<00:10:48.279> a<00:10:48.399> value<00:10:48.880> yet 00:10:49.870 --> 00:10:49.880 align:start position:0% string so we don't have a value yet 00:10:49.880 --> 00:10:52.190 align:start position:0% string so we don't have a value yet we're<00:10:50.040> going<00:10:50.120> to<00:10:50.320> store<00:10:50.959> X<00:10:51.279> in<00:10:51.399> a<00:10:51.800> temporary 00:10:52.190 --> 00:10:52.200 align:start position:0% we're going to store X in a temporary 00:10:52.200 --> 00:10:55.629 align:start position:0% we're going to store X in a temporary variable<00:10:52.839> object<00:10:53.440> we<00:10:53.600> look<00:10:53.839> if<00:10:54.160> object<00:10:54.800> as<00:10:55.160> the 00:10:55.629 --> 00:10:55.639 align:start position:0% variable object we look if object as the 00:10:55.639 --> 00:10:58.350 align:start position:0% variable object we look if object as the on<00:10:55.920> property<00:10:56.240> to<00:10:56.680> string<00:10:57.680> here<00:10:57.920> the<00:10:58.040> property 00:10:58.350 --> 00:10:58.360 align:start position:0% on property to string here the property 00:10:58.360 --> 00:11:01.550 align:start position:0% on property to string here the property doesn't<00:10:58.720> exist<00:10:59.279> so<00:10:59.720> return<00:10:59.880> return 00:11:01.550 --> 00:11:01.560 align:start position:0% doesn't exist so return return 00:11:01.560 --> 00:11:04.870 align:start position:0% doesn't exist so return return false<00:11:02.560> so<00:11:03.000> what<00:11:03.160> we<00:11:03.279> do<00:11:03.560> we<00:11:03.800> go<00:11:04.000> back<00:11:04.200> we<00:11:04.360> go<00:11:04.560> up 00:11:04.870 --> 00:11:04.880 align:start position:0% false so what we do we go back we go up 00:11:04.880 --> 00:11:06.590 align:start position:0% false so what we do we go back we go up in<00:11:05.040> the<00:11:05.279> Prototype<00:11:05.680> Shain<00:11:06.000> so<00:11:06.120> we<00:11:06.240> look<00:11:06.360> at<00:11:06.480> the 00:11:06.590 --> 00:11:06.600 align:start position:0% in the Prototype Shain so we look at the 00:11:06.600 --> 00:11:08.910 align:start position:0% in the Prototype Shain so we look at the Proto<00:11:06.920> of<00:11:07.000> the<00:11:07.120> object<00:11:08.079> we<00:11:08.240> check<00:11:08.560> again<00:11:08.760> if 00:11:08.910 --> 00:11:08.920 align:start position:0% Proto of the object we check again if 00:11:08.920 --> 00:11:11.310 align:start position:0% Proto of the object we check again if the<00:11:09.079> property<00:11:09.880> exists<00:11:10.880> this<00:11:11.000> time<00:11:11.160> the 00:11:11.310 --> 00:11:11.320 align:start position:0% the property exists this time the 00:11:11.320 --> 00:11:12.470 align:start position:0% the property exists this time the property 00:11:12.470 --> 00:11:12.480 align:start position:0% property 00:11:12.480 --> 00:11:15.430 align:start position:0% property exists<00:11:13.480> and<00:11:14.160> uh<00:11:14.399> because<00:11:14.600> it<00:11:14.839> exists<00:11:15.160> it<00:11:15.320> will 00:11:15.430 --> 00:11:15.440 align:start position:0% exists and uh because it exists it will 00:11:15.440 --> 00:11:20.069 align:start position:0% exists and uh because it exists it will be<00:11:15.800> return<00:11:16.079> as<00:11:16.240> the 00:11:20.069 --> 00:11:20.079 align:start position:0% 00:11:20.079 --> 00:11:22.750 align:start position:0% value<00:11:21.079> okay<00:11:21.320> so<00:11:21.560> now<00:11:21.760> what<00:11:21.880> we<00:11:22.079> know<00:11:22.399> we<00:11:22.519> know<00:11:22.639> a 00:11:22.750 --> 00:11:22.760 align:start position:0% value okay so now what we know we know a 00:11:22.760 --> 00:11:24.110 align:start position:0% value okay so now what we know we know a little<00:11:22.920> bit<00:11:23.079> more<00:11:23.200> about<00:11:23.399> the<00:11:23.519> Prototype<00:11:23.959> and 00:11:24.110 --> 00:11:24.120 align:start position:0% little bit more about the Prototype and 00:11:24.120 --> 00:11:26.190 align:start position:0% little bit more about the Prototype and how<00:11:24.320> they<00:11:24.519> work<00:11:25.279> we're<00:11:25.440> going<00:11:25.560> to<00:11:25.800> check<00:11:26.079> what 00:11:26.190 --> 00:11:26.200 align:start position:0% how they work we're going to check what 00:11:26.200 --> 00:11:28.069 align:start position:0% how they work we're going to check what is<00:11:26.440> protype 00:11:28.069 --> 00:11:28.079 align:start position:0% is protype 00:11:28.079 --> 00:11:31.550 align:start position:0% is protype pollution<00:11:29.079> well<00:11:29.519> we<00:11:29.800> create<00:11:30.040> our<00:11:30.279> object<00:11:30.560> like 00:11:31.550 --> 00:11:31.560 align:start position:0% pollution well we create our object like 00:11:31.560 --> 00:11:34.590 align:start position:0% pollution well we create our object like before<00:11:32.560> and<00:11:32.680> we<00:11:32.839> create<00:11:33.200> a<00:11:33.320> new 00:11:34.590 --> 00:11:34.600 align:start position:0% before and we create a new 00:11:34.600 --> 00:11:38.350 align:start position:0% before and we create a new object<00:11:35.600> but<00:11:35.800> if<00:11:35.920> we<00:11:36.079> edit<00:11:36.480> the<00:11:36.639> Prototype<00:11:37.240> of<00:11:37.519> a 00:11:38.350 --> 00:11:38.360 align:start position:0% object but if we edit the Prototype of a 00:11:38.360 --> 00:11:40.190 align:start position:0% object but if we edit the Prototype of a so<00:11:38.519> we<00:11:38.600> are<00:11:38.800> actually<00:11:39.120> editing<00:11:39.639> object. 00:11:40.190 --> 00:11:40.200 align:start position:0% so we are actually editing object. 00:11:40.200 --> 00:11:42.829 align:start position:0% so we are actually editing object. prototype<00:11:40.959> and<00:11:41.120> we<00:11:41.320> add<00:11:41.440> a<00:11:41.560> new 00:11:42.829 --> 00:11:42.839 align:start position:0% prototype and we add a new 00:11:42.839 --> 00:11:45.550 align:start position:0% prototype and we add a new value<00:11:43.839> and<00:11:43.959> we<00:11:44.120> try<00:11:44.320> to<00:11:44.480> check<00:11:44.680> the<00:11:44.839> value<00:11:45.360> it's 00:11:45.550 --> 00:11:45.560 align:start position:0% value and we try to check the value it's 00:11:45.560 --> 00:11:48.629 align:start position:0% value and we try to check the value it's existing<00:11:45.920> on<00:11:46.160> a<00:11:47.120> but<00:11:47.240> it's<00:11:47.480> also<00:11:48.079> existing<00:11:48.440> on 00:11:48.629 --> 00:11:48.639 align:start position:0% existing on a but it's also existing on 00:11:48.639 --> 00:11:50.590 align:start position:0% existing on a but it's also existing on B<00:11:49.200> because<00:11:49.800> because<00:11:50.000> the<00:11:50.120> value<00:11:50.360> doesn't 00:11:50.590 --> 00:11:50.600 align:start position:0% B because because the value doesn't 00:11:50.600 --> 00:11:52.230 align:start position:0% B because because the value doesn't exist<00:11:50.839> on<00:11:50.959> B<00:11:51.160> directly<00:11:51.560> it<00:11:51.639> will<00:11:51.839> check<00:11:52.000> on<00:11:52.120> the 00:11:52.230 --> 00:11:52.240 align:start position:0% exist on B directly it will check on the 00:11:52.240 --> 00:11:54.150 align:start position:0% exist on B directly it will check on the prototype<00:11:52.680> to<00:11:52.760> see<00:11:52.880> if<00:11:53.000> the<00:11:53.079> value<00:11:53.360> is<00:11:53.600> there 00:11:54.150 --> 00:11:54.160 align:start position:0% prototype to see if the value is there 00:11:54.160 --> 00:11:56.949 align:start position:0% prototype to see if the value is there and<00:11:54.320> because<00:11:54.560> it's<00:11:54.839> there<00:11:55.399> we<00:11:55.560> get<00:11:55.680> the<00:11:55.800> value 00:11:56.949 --> 00:11:56.959 align:start position:0% and because it's there we get the value 00:11:56.959 --> 00:11:59.110 align:start position:0% and because it's there we get the value back<00:11:57.959> and<00:11:58.160> this<00:11:58.320> work<00:11:58.560> even<00:11:58.720> if<00:11:58.800> you<00:11:58.880> create<00:11:59.079> a 00:11:59.110 --> 00:11:59.120 align:start position:0% back and this work even if you create a 00:11:59.120 --> 00:12:01.470 align:start position:0% back and this work even if you create a new<00:11:59.240> new<00:11:59.399> object<00:11:59.760> later<00:12:00.639> for<00:12:00.800> example<00:12:01.200> here 00:12:01.470 --> 00:12:01.480 align:start position:0% new new object later for example here 00:12:01.480 --> 00:12:03.750 align:start position:0% new new object later for example here I've<00:12:01.680> already<00:12:02.040> polluted<00:12:03.000> uh<00:12:03.320> the<00:12:03.480> object 00:12:03.750 --> 00:12:03.760 align:start position:0% I've already polluted uh the object 00:12:03.760 --> 00:12:06.350 align:start position:0% I've already polluted uh the object prototype<00:12:04.200> with<00:12:04.320> the<00:12:04.440> full<00:12:05.200> property<00:12:06.200> and<00:12:06.279> I 00:12:06.350 --> 00:12:06.360 align:start position:0% prototype with the full property and I 00:12:06.360 --> 00:12:08.790 align:start position:0% prototype with the full property and I will<00:12:06.519> create<00:12:06.760> a<00:12:06.839> new<00:12:07.000> object<00:12:07.399> C<00:12:08.399> and<00:12:08.519> if<00:12:08.639> I 00:12:08.790 --> 00:12:08.800 align:start position:0% will create a new object C and if I 00:12:08.800 --> 00:12:12.389 align:start position:0% will create a new object C and if I check<00:12:08.959> at<00:12:09.079> c.<00:12:09.480> Fu<00:12:10.399> I<00:12:10.600> also<00:12:10.959> got 00:12:12.389 --> 00:12:12.399 align:start position:0% check at c. Fu I also got 00:12:12.399 --> 00:12:14.870 align:start position:0% check at c. Fu I also got bar<00:12:13.399> it's<00:12:13.720> it's<00:12:14.120> it's<00:12:14.279> really<00:12:14.480> interesting 00:12:14.870 --> 00:12:14.880 align:start position:0% bar it's it's it's really interesting 00:12:14.880 --> 00:12:17.069 align:start position:0% bar it's it's it's really interesting I'm<00:12:15.000> just<00:12:15.120> going<00:12:15.240> to<00:12:15.560> jump<00:12:15.800> in<00:12:16.000> sorry<00:12:16.560> I<00:12:16.760> I<00:12:16.839> do 00:12:17.069 --> 00:12:17.079 align:start position:0% I'm just going to jump in sorry I I do 00:12:17.079 --> 00:12:18.269 align:start position:0% I'm just going to jump in sorry I I do this<00:12:17.199> from<00:12:17.360> time<00:12:17.519> to<00:12:17.680> time<00:12:17.800> in<00:12:17.880> the<00:12:18.000> master 00:12:18.269 --> 00:12:18.279 align:start position:0% this from time to time in the master 00:12:18.279 --> 00:12:19.910 align:start position:0% this from time to time in the master classes<00:12:18.920> um<00:12:19.199> I<00:12:19.279> would<00:12:19.399> love<00:12:19.519> it<00:12:19.680> because<00:12:19.839> I 00:12:19.910 --> 00:12:19.920 align:start position:0% classes um I would love it because I 00:12:19.920 --> 00:12:22.790 align:start position:0% classes um I would love it because I will<00:12:20.040> feel<00:12:20.240> super<00:12:20.480> alone<00:12:21.440> no<00:12:21.920> that's<00:12:22.160> great<00:12:22.480> so 00:12:22.790 --> 00:12:22.800 align:start position:0% will feel super alone no that's great so 00:12:22.800 --> 00:12:25.550 align:start position:0% will feel super alone no that's great so this<00:12:22.920> is<00:12:23.279> this<00:12:23.440> is<00:12:23.720> um<00:12:24.360> this<00:12:24.480> is<00:12:24.720> really 00:12:25.550 --> 00:12:25.560 align:start position:0% this is this is um this is really 00:12:25.560 --> 00:12:27.949 align:start position:0% this is this is um this is really interesting<00:12:26.040> as<00:12:26.160> well<00:12:26.800> that<00:12:26.959> it<00:12:27.160> happens<00:12:27.680> post 00:12:27.949 --> 00:12:27.959 align:start position:0% interesting as well that it happens post 00:12:27.959 --> 00:12:31.430 align:start position:0% interesting as well that it happens post instantiation<00:12:29.399> like<00:12:29.839> you're<00:12:30.519> you<00:12:30.839> define<00:12:31.279> the 00:12:31.430 --> 00:12:31.440 align:start position:0% instantiation like you're you define the 00:12:31.440 --> 00:12:34.069 align:start position:0% instantiation like you're you define the b<00:12:32.360> b<00:12:32.600> equals<00:12:32.920> the<00:12:33.040> new<00:12:33.279> object<00:12:33.680> there<00:12:33.839> right 00:12:34.069 --> 00:12:34.079 align:start position:0% b b equals the new object there right 00:12:34.079 --> 00:12:36.110 align:start position:0% b b equals the new object there right let's<00:12:34.279> do<00:12:34.720> yeah<00:12:35.120> yeah<00:12:35.320> because<00:12:35.560> if<00:12:35.720> we<00:12:35.920> let's 00:12:36.110 --> 00:12:36.120 align:start position:0% let's do yeah yeah because if we let's 00:12:36.120 --> 00:12:38.150 align:start position:0% let's do yeah yeah because if we let's open<00:12:36.440> nde<00:12:36.880> I<00:12:36.959> think<00:12:37.160> at<00:12:37.320> one<00:12:37.480> point<00:12:37.639> we<00:12:37.760> need 00:12:38.150 --> 00:12:38.160 align:start position:0% open nde I think at one point we need 00:12:38.160 --> 00:12:41.590 align:start position:0% open nde I think at one point we need two<00:12:39.160> so<00:12:39.399> we<00:12:39.519> have<00:12:39.680> our<00:12:39.959> object<00:12:40.560> and<00:12:40.720> if<00:12:40.880> we<00:12:41.480> if 00:12:41.590 --> 00:12:41.600 align:start position:0% two so we have our object and if we if 00:12:41.600 --> 00:12:44.750 align:start position:0% two so we have our object and if we if you<00:12:41.720> look<00:12:41.839> at<00:12:42.519> Proto<00:12:43.519> yeah<00:12:43.680> it's<00:12:44.000> it's<00:12:44.199> object 00:12:44.750 --> 00:12:44.760 align:start position:0% you look at Proto yeah it's it's object 00:12:44.760 --> 00:12:46.230 align:start position:0% you look at Proto yeah it's it's object protype<00:12:45.160> so<00:12:45.399> this<00:12:45.480> is<00:12:45.600> the<00:12:45.680> same<00:12:45.839> thing<00:12:46.000> as 00:12:46.230 --> 00:12:46.240 align:start position:0% protype so this is the same thing as 00:12:46.240 --> 00:12:48.189 align:start position:0% protype so this is the same thing as this<00:12:47.040> yeah<00:12:47.480> that<00:12:47.560> was<00:12:47.680> one<00:12:47.760> of<00:12:47.880> my<00:12:48.000> other 00:12:48.189 --> 00:12:48.199 align:start position:0% this yeah that was one of my other 00:12:48.199 --> 00:12:50.750 align:start position:0% this yeah that was one of my other questions<00:12:48.600> was<00:12:48.959> those<00:12:49.199> are<00:12:49.760> interchangeable 00:12:50.750 --> 00:12:50.760 align:start position:0% questions was those are interchangeable 00:12:50.760 --> 00:12:53.189 align:start position:0% questions was those are interchangeable yeah<00:12:50.920> this<00:12:51.000> is<00:12:51.199> exactly<00:12:51.519> the<00:12:51.639> same<00:12:52.000> thing<00:12:53.000> like 00:12:53.189 --> 00:12:53.199 align:start position:0% yeah this is exactly the same thing like 00:12:53.199 --> 00:12:56.829 align:start position:0% yeah this is exactly the same thing like if<00:12:53.320> you<00:12:53.519> check<00:12:53.760> it<00:12:53.920> with<00:12:54.120> the<00:12:54.279> triple 00:12:56.829 --> 00:12:56.839 align:start position:0% 00:12:56.839 --> 00:12:59.470 align:start position:0% equal<00:12:57.839> it's<00:12:58.079> literally<00:12:58.519> the<00:12:58.839> the<00:12:58.920> same<00:12:59.240> object 00:12:59.470 --> 00:12:59.480 align:start position:0% equal it's literally the the same object 00:12:59.480 --> 00:13:02.550 align:start position:0% equal it's literally the the same object is<00:12:59.600> the<00:12:59.680> same<00:12:59.920> instance<00:13:00.399> of<00:13:00.519> the<00:13:00.680> object<00:13:01.560> yeah 00:13:02.550 --> 00:13:02.560 align:start position:0% is the same instance of the object yeah 00:13:02.560 --> 00:13:04.350 align:start position:0% is the same instance of the object yeah so<00:13:02.800> if<00:13:02.880> you<00:13:03.079> edit<00:13:03.360> something<00:13:03.680> over<00:13:03.920> there<00:13:04.199> and 00:13:04.350 --> 00:13:04.360 align:start position:0% so if you edit something over there and 00:13:04.360 --> 00:13:07.509 align:start position:0% so if you edit something over there and you<00:13:04.560> put<00:13:04.800> an<00:13:05.000> x<00:13:05.199> on<00:13:05.360> it<00:13:05.519> for<00:13:05.920> example<00:13:06.920> M<00:13:07.320> and<00:13:07.440> you 00:13:07.509 --> 00:13:07.519 align:start position:0% you put an x on it for example M and you 00:13:07.519 --> 00:13:09.870 align:start position:0% you put an x on it for example M and you look<00:13:07.639> at<00:13:07.839> a<00:13:08.079> a<00:13:08.240> is<00:13:08.360> still<00:13:08.560> empty<00:13:09.560> but<00:13:09.680> if<00:13:09.760> you 00:13:09.870 --> 00:13:09.880 align:start position:0% look at a a is still empty but if you 00:13:09.880 --> 00:13:13.230 align:start position:0% look at a a is still empty but if you look<00:13:10.000> at<00:13:10.279> object<00:13:11.240> prototype<00:13:12.240> here<00:13:12.360> is<00:13:12.560> the<00:13:12.720> X 00:13:13.230 --> 00:13:13.240 align:start position:0% look at object prototype here is the X 00:13:13.240 --> 00:13:16.189 align:start position:0% look at object prototype here is the X the<00:13:13.360> x<00:13:13.560> is<00:13:13.680> set<00:13:13.920> on<00:13:14.160> this<00:13:14.519> object<00:13:15.519> so<00:13:15.720> if<00:13:15.839> we<00:13:16.000> try 00:13:16.189 --> 00:13:16.199 align:start position:0% the x is set on this object so if we try 00:13:16.199 --> 00:13:18.670 align:start position:0% the x is set on this object so if we try to<00:13:16.399> access<00:13:17.040> X<00:13:17.480> because<00:13:17.680> it<00:13:17.800> doesn't<00:13:18.120> exist<00:13:18.440> on 00:13:18.670 --> 00:13:18.680 align:start position:0% to access X because it doesn't exist on 00:13:18.680 --> 00:13:22.430 align:start position:0% to access X because it doesn't exist on a<00:13:19.560> we<00:13:19.760> get<00:13:20.279> uh<00:13:20.440> the<00:13:20.560> value<00:13:20.880> from<00:13:21.040> the<00:13:21.440> Prototype 00:13:22.430 --> 00:13:22.440 align:start position:0% a we get uh the value from the Prototype 00:13:22.440 --> 00:13:25.870 align:start position:0% a we get uh the value from the Prototype but<00:13:22.600> if<00:13:22.720> we<00:13:22.880> do<00:13:23.240> a.x<00:13:24.199> equal 00:13:25.870 --> 00:13:25.880 align:start position:0% but if we do a.x equal 00:13:25.880 --> 00:13:29.389 align:start position:0% but if we do a.x equal undefined<00:13:26.880> this<00:13:27.079> time<00:13:27.720> we<00:13:27.880> still<00:13:28.079> have<00:13:28.279> a.<00:13:28.760> a 00:13:29.389 --> 00:13:29.399 align:start position:0% undefined this time we still have a. a 00:13:29.399 --> 00:13:32.550 align:start position:0% undefined this time we still have a. a is<00:13:29.639> undefined<00:13:30.600> and<00:13:30.720> the<00:13:30.920> Prototype<00:13:31.480> is<00:13:31.639> still 00:13:32.550 --> 00:13:32.560 align:start position:0% is undefined and the Prototype is still 00:13:32.560 --> 00:13:34.870 align:start position:0% is undefined and the Prototype is still there<00:13:33.160> because<00:13:33.399> the<00:13:33.560> key<00:13:33.720> is<00:13:33.920> defined<00:13:34.560> to<00:13:34.760> the 00:13:34.870 --> 00:13:34.880 align:start position:0% there because the key is defined to the 00:13:34.880 --> 00:13:37.230 align:start position:0% there because the key is defined to the value<00:13:35.240> undefined<00:13:36.120> and<00:13:36.240> there<00:13:36.360> is<00:13:36.440> a<00:13:36.680> little 00:13:37.230 --> 00:13:37.240 align:start position:0% value undefined and there is a little 00:13:37.240 --> 00:13:39.470 align:start position:0% value undefined and there is a little Nuance<00:13:37.639> over 00:13:39.470 --> 00:13:39.480 align:start position:0% Nuance over 00:13:39.480 --> 00:13:41.910 align:start position:0% Nuance over there<00:13:40.480> and<00:13:40.760> yeah<00:13:41.160> for<00:13:41.279> the<00:13:41.440> question<00:13:41.720> from 00:13:41.910 --> 00:13:41.920 align:start position:0% there and yeah for the question from 00:13:41.920 --> 00:13:44.230 align:start position:0% there and yeah for the question from shelfish<00:13:42.880> modifying<00:13:43.320> object<00:13:43.680> prototype<00:13:44.079> do 00:13:44.230 --> 00:13:44.240 align:start position:0% shelfish modifying object prototype do 00:13:44.240 --> 00:13:45.910 align:start position:0% shelfish modifying object prototype do exactly<00:13:44.560> the 00:13:45.910 --> 00:13:45.920 align:start position:0% exactly the 00:13:45.920 --> 00:13:49.590 align:start position:0% exactly the same<00:13:46.920> if<00:13:47.040> I<00:13:47.240> do<00:13:47.480> a<00:13:47.920> y<00:13:48.160> I<00:13:48.279> got<00:13:48.440> it<00:13:48.639> back<00:13:48.920> yeah 00:13:49.590 --> 00:13:49.600 align:start position:0% same if I do a y I got it back yeah 00:13:49.600 --> 00:13:51.550 align:start position:0% same if I do a y I got it back yeah let's<00:13:49.800> grab<00:13:50.120> some<00:13:50.320> questions<00:13:50.680> here<00:13:50.880> so<00:13:51.120> if<00:13:51.399> if 00:13:51.550 --> 00:13:51.560 align:start position:0% let's grab some questions here so if if 00:13:51.560 --> 00:13:55.470 align:start position:0% let's grab some questions here so if if B<00:13:51.759> was<00:13:51.920> made<00:13:52.120> is<00:13:52.240> that<00:13:52.759> also<00:13:53.759> is<00:13:53.920> that<00:13:54.199> also 00:13:55.470 --> 00:13:55.480 align:start position:0% B was made is that also is that also 00:13:55.480 --> 00:13:58.269 align:start position:0% B was made is that also is that also object<00:13:56.480> prototype<00:13:56.920> like<00:13:57.120> a<00:13:57.440> yeah<00:13:57.759> if<00:13:57.839> I<00:13:57.959> do 00:13:58.269 --> 00:13:58.279 align:start position:0% object prototype like a yeah if I do 00:13:58.279 --> 00:14:01.590 align:start position:0% object prototype like a yeah if I do cons<00:13:58.680> B<00:13:59.440> a<00:13:59.600> new<00:13:59.800> object<00:14:00.120> and<00:14:00.240> I<00:14:00.399> do<00:14:00.680> a 00:14:01.590 --> 00:14:01.600 align:start position:0% cons B a new object and I do a 00:14:01.600 --> 00:14:05.629 align:start position:0% cons B a new object and I do a do 00:14:05.629 --> 00:14:05.639 align:start position:0% 00:14:05.639 --> 00:14:08.269 align:start position:0% Proto<00:14:06.639> they<00:14:06.880> exactly<00:14:07.240> the<00:14:07.320> same<00:14:07.920> they<00:14:08.040> share 00:14:08.269 --> 00:14:08.279 align:start position:0% Proto they exactly the same they share 00:14:08.279 --> 00:14:10.230 align:start position:0% Proto they exactly the same they share the<00:14:08.480> Prototype<00:14:09.480> this<00:14:09.600> is<00:14:09.759> made<00:14:10.000> because<00:14:10.160> if 00:14:10.230 --> 00:14:10.240 align:start position:0% the Prototype this is made because if 00:14:10.240 --> 00:14:12.110 align:start position:0% the Prototype this is made because if you<00:14:10.360> use<00:14:10.839> return<00:14:11.279> you<00:14:11.360> don't<00:14:11.560> want<00:14:11.800> all<00:14:11.959> the 00:14:12.110 --> 00:14:12.120 align:start position:0% you use return you don't want all the 00:14:12.120 --> 00:14:14.230 align:start position:0% you use return you don't want all the instance<00:14:12.680> of<00:14:12.800> all<00:14:12.959> your<00:14:13.160> classes<00:14:13.680> to<00:14:13.880> have<00:14:14.079> a 00:14:14.230 --> 00:14:14.240 align:start position:0% instance of all your classes to have a 00:14:14.240 --> 00:14:16.749 align:start position:0% instance of all your classes to have a copy<00:14:14.519> of<00:14:14.680> each<00:14:14.880> function<00:14:15.360> of<00:14:15.600> each<00:14:15.880> property 00:14:16.749 --> 00:14:16.759 align:start position:0% copy of each function of each property 00:14:16.759 --> 00:14:19.949 align:start position:0% copy of each function of each property so<00:14:17.480> the<00:14:17.639> function<00:14:18.120> exist<00:14:18.639> on<00:14:18.800> the<00:14:19.000> Prototype 00:14:19.949 --> 00:14:19.959 align:start position:0% so the function exist on the Prototype 00:14:19.959 --> 00:14:22.069 align:start position:0% so the function exist on the Prototype if<00:14:20.079> we<00:14:20.240> try<00:14:20.440> to<00:14:20.600> create<00:14:20.920> a<00:14:21.120> class<00:14:21.759> uh<00:14:21.920> let's 00:14:22.069 --> 00:14:22.079 align:start position:0% if we try to create a class uh let's 00:14:22.079 --> 00:14:23.550 align:start position:0% if we try to create a class uh let's call<00:14:22.240> it 00:14:23.550 --> 00:14:23.560 align:start position:0% call it 00:14:23.560 --> 00:14:30.030 align:start position:0% call it test<00:14:24.560> and<00:14:25.040> Define<00:14:25.399> a<00:14:25.639> function<00:14:26.600> um 00:14:30.030 --> 00:14:30.040 align:start position:0% 00:14:30.040 --> 00:14:35.269 align:start position:0% like<00:14:30.360> this<00:14:31.199> and<00:14:31.480> remove<00:14:32.440> uh<00:14:33.000> let's 00:14:35.269 --> 00:14:35.279 align:start position:0% 00:14:35.279 --> 00:14:38.030 align:start position:0% do<00:14:36.279> if<00:14:36.360> you<00:14:36.480> look<00:14:36.639> at<00:14:36.839> T<00:14:37.199> it's<00:14:37.360> empty<00:14:37.800> but<00:14:37.920> if 00:14:38.030 --> 00:14:38.040 align:start position:0% do if you look at T it's empty but if 00:14:38.040 --> 00:14:41.990 align:start position:0% do if you look at T it's empty but if you<00:14:38.160> look<00:14:38.279> at<00:14:38.519> t.<00:14:39.519> uh<00:14:40.320> Proto<00:14:40.720> the<00:14:40.880> Prototype<00:14:41.880> uh 00:14:41.990 --> 00:14:42.000 align:start position:0% you look at t. uh Proto the Prototype uh 00:14:42.000 --> 00:14:46.430 align:start position:0% you look at t. uh Proto the Prototype uh should<00:14:42.279> be<00:14:43.040> uh<00:14:43.240> no<00:14:44.240> Constructor<00:14:45.440> prototype 00:14:46.430 --> 00:14:46.440 align:start position:0% should be uh no Constructor prototype 00:14:46.440 --> 00:14:48.910 align:start position:0% should be uh no Constructor prototype it's<00:14:46.639> empty<00:14:47.040> but<00:14:47.360> we<00:14:47.440> should<00:14:47.680> have<00:14:48.279> uh<00:14:48.519> Toto 00:14:48.910 --> 00:14:48.920 align:start position:0% it's empty but we should have uh Toto 00:14:48.920 --> 00:14:51.269 align:start position:0% it's empty but we should have uh Toto over<00:14:49.160> there<00:14:49.600> yeah<00:14:50.160> it<00:14:50.360> just<00:14:50.560> didn't<00:14:50.839> show<00:14:51.040> it 00:14:51.269 --> 00:14:51.279 align:start position:0% over there yeah it just didn't show it 00:14:51.279 --> 00:14:54.230 align:start position:0% over there yeah it just didn't show it because<00:14:51.480> it's<00:14:51.920> un<00:14:52.120> listable<00:14:52.600> is<00:14:52.839> just<00:14:53.839> it<00:14:54.040> it's 00:14:54.230 --> 00:14:54.240 align:start position:0% because it's un listable is just it it's 00:14:54.240 --> 00:14:57.389 align:start position:0% because it's un listable is just it it's interesting<00:14:54.880> how<00:14:55.399> how<00:14:56.120> the<00:14:57.120> the 00:14:57.389 --> 00:14:57.399 align:start position:0% interesting how how the the 00:14:57.399 --> 00:15:00.030 align:start position:0% interesting how how the the representation<00:14:58.199> is<00:14:58.560> when<00:14:58.759> you<00:14:59.519> when<00:14:59.639> it<00:14:59.759> shows 00:15:00.030 --> 00:15:00.040 align:start position:0% representation is when you when it shows 00:15:00.040 --> 00:15:02.470 align:start position:0% representation is when you when it shows the<00:15:00.199> curly<00:15:00.519> braces<00:15:01.040> right<00:15:01.240> and<00:15:01.639> I<00:15:01.800> also<00:15:02.000> wonder 00:15:02.470 --> 00:15:02.480 align:start position:0% the curly braces right and I also wonder 00:15:02.480 --> 00:15:05.670 align:start position:0% the curly braces right and I also wonder if<00:15:02.800> so<00:15:03.160> if<00:15:03.320> we<00:15:03.600> have<00:15:04.040> um<00:15:04.440> you<00:15:04.519> can<00:15:04.680> have<00:15:04.920> it 00:15:05.670 --> 00:15:05.680 align:start position:0% if so if we have um you can have it 00:15:05.680 --> 00:15:08.350 align:start position:0% if so if we have um you can have it there's<00:15:05.839> a<00:15:05.959> trick<00:15:06.800> so<00:15:07.480> you<00:15:07.600> can<00:15:07.720> use<00:15:08.000> as<00:15:08.120> own 00:15:08.350 --> 00:15:08.360 align:start position:0% there's a trick so you can use as own 00:15:08.360 --> 00:15:13.110 align:start position:0% there's a trick so you can use as own property<00:15:08.759> desri<00:15:09.680> uh<00:15:10.639> object 00:15:13.110 --> 00:15:13.120 align:start position:0% property desri uh object 00:15:13.120 --> 00:15:15.030 align:start position:0% property desri uh object dot<00:15:14.120> own 00:15:15.030 --> 00:15:15.040 align:start position:0% dot own 00:15:15.040 --> 00:15:19.710 align:start position:0% dot own [Music] 00:15:19.710 --> 00:15:19.720 align:start position:0% 00:15:19.720 --> 00:15:21.870 align:start position:0% property<00:15:20.720> there<00:15:20.839> was<00:15:21.040> something<00:15:21.399> like<00:15:21.560> that 00:15:21.870 --> 00:15:21.880 align:start position:0% property there was something like that 00:15:21.880 --> 00:15:24.150 align:start position:0% property there was something like that ah<00:15:22.040> this<00:15:22.160> one<00:15:22.320> it's<00:15:22.680> property<00:15:23.160> descriptors 00:15:24.150 --> 00:15:24.160 align:start position:0% ah this one it's property descriptors 00:15:24.160 --> 00:15:26.150 align:start position:0% ah this one it's property descriptors and<00:15:24.279> if<00:15:24.399> you<00:15:24.600> you<00:15:24.720> look<00:15:24.839> at<00:15:25.000> T<00:15:25.360> it<00:15:25.440> will<00:15:25.600> show 00:15:26.150 --> 00:15:26.160 align:start position:0% and if you you look at T it will show 00:15:26.160 --> 00:15:28.550 align:start position:0% and if you you look at T it will show okay<00:15:26.320> so<00:15:26.639> need<00:15:26.800> to<00:15:26.920> check<00:15:27.079> on<00:15:27.240> the<00:15:27.560> Prototype 00:15:28.550 --> 00:15:28.560 align:start position:0% okay so need to check on the Prototype 00:15:28.560 --> 00:15:31.230 align:start position:0% okay so need to check on the Prototype uh 00:15:31.230 --> 00:15:31.240 align:start position:0% 00:15:31.240 --> 00:15:34.150 align:start position:0% and<00:15:31.399> here<00:15:31.560> we<00:15:31.680> have<00:15:32.199> the<00:15:32.440> totto<00:15:32.959> but<00:15:33.160> it's<00:15:33.759> uh 00:15:34.150 --> 00:15:34.160 align:start position:0% and here we have the totto but it's uh 00:15:34.160 --> 00:15:37.230 align:start position:0% and here we have the totto but it's uh not<00:15:35.000> enumerable<00:15:36.000> so<00:15:36.120> we<00:15:36.240> don't<00:15:36.440> see<00:15:36.600> it<00:15:36.880> over 00:15:37.230 --> 00:15:37.240 align:start position:0% not enumerable so we don't see it over 00:15:37.240 --> 00:15:39.990 align:start position:0% not enumerable so we don't see it over there<00:15:38.240> but<00:15:38.360> we<00:15:38.519> can<00:15:38.759> see<00:15:39.040> it<00:15:39.279> and<00:15:39.399> we<00:15:39.480> can<00:15:39.720> write 00:15:39.990 --> 00:15:40.000 align:start position:0% there but we can see it and we can write 00:15:40.000 --> 00:15:43.309 align:start position:0% there but we can see it and we can write it<00:15:40.279> and<00:15:40.399> you<00:15:40.519> can<00:15:41.279> modify<00:15:42.279> this<00:15:43.000> can<00:15:43.120> you 00:15:43.309 --> 00:15:43.319 align:start position:0% it and you can modify this can you 00:15:43.319 --> 00:15:45.030 align:start position:0% it and you can modify this can you control<00:15:43.759> those<00:15:44.000> writable<00:15:44.399> enumerable 00:15:45.030 --> 00:15:45.040 align:start position:0% control those writable enumerable 00:15:45.040 --> 00:15:48.030 align:start position:0% control those writable enumerable configurable<00:15:45.560> values<00:15:46.560> yeah<00:15:46.720> you<00:15:46.839> can<00:15:47.000> do<00:15:47.399> set 00:15:48.030 --> 00:15:48.040 align:start position:0% configurable values yeah you can do set 00:15:48.040 --> 00:15:49.829 align:start position:0% configurable values yeah you can do set we're<00:15:48.399> we're<00:15:48.519> going<00:15:48.720> down<00:15:48.839> a<00:15:49.040> tangent<00:15:49.440> now<00:15:49.680> but 00:15:49.829 --> 00:15:49.839 align:start position:0% we're we're going down a tangent now but 00:15:49.839 --> 00:15:51.790 align:start position:0% we're we're going down a tangent now but this<00:15:49.959> is<00:15:50.399> this<00:15:50.480> is<00:15:50.680> great<00:15:51.040> like<00:15:51.199> this<00:15:51.319> is<00:15:51.480> an 00:15:51.790 --> 00:15:51.800 align:start position:0% this is this is great like this is an 00:15:51.800 --> 00:15:54.069 align:start position:0% this is this is great like this is an inheritance<00:15:52.399> Master<00:15:52.680> Class<00:15:53.199> object<00:15:53.600> Define 00:15:54.069 --> 00:15:54.079 align:start position:0% inheritance Master Class object Define 00:15:54.079 --> 00:15:55.990 align:start position:0% inheritance Master Class object Define property<00:15:54.920> and<00:15:55.160> here<00:15:55.319> you<00:15:55.440> can<00:15:55.639> Define 00:15:55.990 --> 00:15:56.000 align:start position:0% property and here you can Define 00:15:56.000 --> 00:16:00.550 align:start position:0% property and here you can Define property<00:15:56.360> on<00:15:57.079> let's<00:15:57.319> say<00:15:57.800> a<00:15:58.639> yeah<00:15:59.279> we<00:15:59.399> can<00:15:59.759> say 00:16:00.550 --> 00:16:00.560 align:start position:0% property on let's say a yeah we can say 00:16:00.560 --> 00:16:05.949 align:start position:0% property on let's say a yeah we can say um<00:16:01.560> the<00:16:01.720> value<00:16:02.279> is<00:16:02.880> too<00:16:03.880> MH<00:16:04.639> and<00:16:04.839> we<00:16:04.959> can<00:16:05.160> say 00:16:05.949 --> 00:16:05.959 align:start position:0% um the value is too MH and we can say 00:16:05.959 --> 00:16:08.629 align:start position:0% um the value is too MH and we can say enumerable<00:16:06.959> uh 00:16:08.629 --> 00:16:08.639 align:start position:0% enumerable uh 00:16:08.639 --> 00:16:12.670 align:start position:0% enumerable uh false<00:16:09.639> and<00:16:09.759> we<00:16:09.880> need<00:16:10.040> to<00:16:10.160> say<00:16:10.480> name<00:16:10.880> so<00:16:11.600> key<00:16:12.600> I 00:16:12.670 --> 00:16:12.680 align:start position:0% false and we need to say name so key I 00:16:12.680 --> 00:16:15.910 align:start position:0% false and we need to say name so key I think<00:16:12.959> this<00:16:13.079> is<00:16:13.319> the<00:16:13.880> right<00:16:14.639> syntax<00:16:15.639> and<00:16:15.800> now 00:16:15.910 --> 00:16:15.920 align:start position:0% think this is the right syntax and now 00:16:15.920 --> 00:16:18.069 align:start position:0% think this is the right syntax and now we<00:16:16.040> have<00:16:16.319> X<00:16:16.800> but<00:16:16.959> we<00:16:17.079> don't<00:16:17.279> see<00:16:17.480> the<00:16:17.680> key<00:16:17.959> but 00:16:18.069 --> 00:16:18.079 align:start position:0% we have X but we don't see the key but 00:16:18.079 --> 00:16:19.870 align:start position:0% we have X but we don't see the key but if<00:16:18.199> you<00:16:18.319> do<00:16:18.480> X<00:16:18.759> that<00:16:19.000> key<00:16:19.199> we<00:16:19.279> should<00:16:19.480> see<00:16:19.639> it 00:16:19.870 --> 00:16:19.880 align:start position:0% if you do X that key we should see it 00:16:19.880 --> 00:16:22.710 align:start position:0% if you do X that key we should see it now<00:16:20.600> value<00:16:20.880> should<00:16:21.120> be<00:16:21.360> a<00:16:21.519> method 00:16:22.710 --> 00:16:22.720 align:start position:0% now value should be a method 00:16:22.720 --> 00:16:25.269 align:start position:0% now value should be a method maybe<00:16:23.720> I<00:16:23.839> don't<00:16:24.000> remember<00:16:24.399> they<00:16:24.519> got<00:16:24.720> syntax 00:16:25.269 --> 00:16:25.279 align:start position:0% maybe I don't remember they got syntax 00:16:25.279 --> 00:16:27.749 align:start position:0% maybe I don't remember they got syntax but<00:16:25.720> yeah<00:16:26.360> yeah<00:16:26.639> but<00:16:26.759> so<00:16:27.079> this<00:16:27.160> is<00:16:27.319> the<00:16:27.480> way<00:16:27.639> you 00:16:27.749 --> 00:16:27.759 align:start position:0% but yeah yeah but so this is the way you 00:16:27.759 --> 00:16:29.509 align:start position:0% but yeah yeah but so this is the way you would<00:16:28.000> you<00:16:28.120> would<00:16:28.240> set<00:16:28.440> up<00:16:28.600> a<00:16:28.959> those<00:16:29.160> specific 00:16:29.509 --> 00:16:29.519 align:start position:0% would you would set up a those specific 00:16:29.519 --> 00:16:32.430 align:start position:0% would you would set up a those specific properties<00:16:30.120> and<00:16:30.319> this<00:16:30.600> guys<00:16:30.800> is<00:16:31.000> also<00:16:31.560> um<00:16:32.279> in 00:16:32.430 --> 00:16:32.440 align:start position:0% properties and this guys is also um in 00:16:32.440 --> 00:16:34.430 align:start position:0% properties and this guys is also um in my<00:16:32.680> experience<00:16:33.319> these<00:16:33.519> sort<00:16:33.720> of<00:16:33.920> things<00:16:34.199> are 00:16:34.430 --> 00:16:34.440 align:start position:0% my experience these sort of things are 00:16:34.440 --> 00:16:37.550 align:start position:0% my experience these sort of things are oh<00:16:34.600> because<00:16:34.920> I<00:16:35.000> check<00:16:35.199> on<00:16:35.440> a<00:16:35.720> but<00:16:36.199> yeah<00:16:37.160> are 00:16:37.550 --> 00:16:37.560 align:start position:0% oh because I check on a but yeah are 00:16:37.560 --> 00:16:39.629 align:start position:0% oh because I check on a but yeah are very<00:16:38.560> you<00:16:38.639> don't<00:16:38.759> see<00:16:38.920> key<00:16:39.079> so<00:16:39.199> it's<00:16:39.319> it<00:16:39.480> was 00:16:39.629 --> 00:16:39.639 align:start position:0% very you don't see key so it's it was 00:16:39.639 --> 00:16:42.749 align:start position:0% very you don't see key so it's it was working<00:16:40.360> nice<00:16:41.240> um<00:16:41.639> in<00:16:41.759> my<00:16:41.920> experience<00:16:42.440> these 00:16:42.749 --> 00:16:42.759 align:start position:0% working nice um in my experience these 00:16:42.759 --> 00:16:46.550 align:start position:0% working nice um in my experience these things<00:16:43.040> are<00:16:43.319> very<00:16:43.600> useful<00:16:44.079> also<00:16:44.519> for<00:16:45.519> um<00:16:46.120> okay 00:16:46.550 --> 00:16:46.560 align:start position:0% things are very useful also for um okay 00:16:46.560 --> 00:16:48.309 align:start position:0% things are very useful also for um okay people<00:16:46.800> are<00:16:46.920> gonna<00:16:47.560> okay<00:16:47.759> people<00:16:47.959> want<00:16:48.120> me<00:16:48.199> to 00:16:48.309 --> 00:16:48.319 align:start position:0% people are gonna okay people want me to 00:16:48.319 --> 00:16:51.309 align:start position:0% people are gonna okay people want me to boost<00:16:48.560> my<00:16:48.680> audio<00:16:49.000> so<00:16:49.199> hold<00:16:49.319> on<00:16:49.480> let<00:16:49.560> me<00:16:49.720> let<00:16:50.319> me 00:16:51.309 --> 00:16:51.319 align:start position:0% boost my audio so hold on let me let me 00:16:51.319 --> 00:16:53.749 align:start position:0% boost my audio so hold on let me let me Joel<00:16:51.639> told<00:16:51.800> me<00:16:51.959> never<00:16:52.160> to<00:16:52.319> touch<00:16:52.759> my<00:16:52.959> audio 00:16:53.749 --> 00:16:53.759 align:start position:0% Joel told me never to touch my audio 00:16:53.759 --> 00:16:55.150 align:start position:0% Joel told me never to touch my audio thing<00:16:54.040> but<00:16:54.160> I'm<00:16:54.279> going<00:16:54.360> to<00:16:54.480> do<00:16:54.600> it<00:16:54.720> anyway<00:16:55.000> for 00:16:55.150 --> 00:16:55.160 align:start position:0% thing but I'm going to do it anyway for 00:16:55.160 --> 00:16:57.309 align:start position:0% thing but I'm going to do it anyway for you<00:16:55.399> guys<00:16:55.600> all<00:16:55.720> right<00:16:55.880> here<00:16:56.000> it<00:16:56.160> goes<00:16:57.000> can<00:16:57.160> you 00:16:57.309 --> 00:16:57.319 align:start position:0% you guys all right here it goes can you 00:16:57.319 --> 00:16:59.829 align:start position:0% you guys all right here it goes can you guys<00:16:57.560> can<00:16:57.680> you<00:16:57.839> guys<00:16:58.160> hear<00:16:58.319> me<00:16:58.880> you<00:16:59.040> slow<00:16:59.319> out 00:16:59.829 --> 00:16:59.839 align:start position:0% guys can you guys hear me you slow out 00:16:59.839 --> 00:17:01.470 align:start position:0% guys can you guys hear me you slow out okay<00:17:00.040> all<00:17:00.199> right<00:17:00.440> how<00:17:00.600> about<00:17:00.920> how<00:17:01.040> about<00:17:01.199> if<00:17:01.319> I 00:17:01.470 --> 00:17:01.480 align:start position:0% okay all right how about how about if I 00:17:01.480 --> 00:17:08.510 align:start position:0% okay all right how about how about if I go<00:17:01.759> here<00:17:02.360> how<00:17:02.680> like<00:17:02.959> right<00:17:03.640> here<00:17:04.640> is 00:17:08.510 --> 00:17:08.520 align:start position:0% 00:17:08.520 --> 00:17:13.549 align:start position:0% this<00:17:09.520> is<00:17:09.640> this<00:17:10.120> better<00:17:11.120> oh<00:17:11.520> sh<00:17:11.799> did 00:17:13.549 --> 00:17:13.559 align:start position:0% this is this better oh sh did 00:17:13.559 --> 00:17:17.949 align:start position:0% this is this better oh sh did I<00:17:14.559> that<00:17:14.679> should<00:17:14.919> be<00:17:15.079> my<00:17:15.280> gain<00:17:15.880> is<00:17:16.360> that<00:17:17.360> is<00:17:17.520> that 00:17:17.949 --> 00:17:17.959 align:start position:0% I that should be my gain is that is that 00:17:17.959 --> 00:17:23.750 align:start position:0% I that should be my gain is that is that uh<00:17:18.439> is<00:17:18.559> that<00:17:18.799> better<00:17:19.079> now<00:17:19.480> everyone<00:17:20.319> no 00:17:23.750 --> 00:17:23.760 align:start position:0% 00:17:23.760 --> 00:17:27.390 align:start position:0% yes<00:17:24.760> better 00:17:27.390 --> 00:17:27.400 align:start position:0% 00:17:27.400 --> 00:17:30.710 align:start position:0% okay<00:17:28.400> GG<00:17:29.000> my<00:17:29.120> ears<00:17:29.360> went<00:17:29.520> to<00:17:29.679> the<00:17:29.799> next<00:17:30.000> World 00:17:30.710 --> 00:17:30.720 align:start position:0% okay GG my ears went to the next World 00:17:30.720 --> 00:17:34.390 align:start position:0% okay GG my ears went to the next World I'm<00:17:31.000> so<00:17:31.320> sorry<00:17:32.039> guys<00:17:33.039> I<00:17:33.240> literally<00:17:33.720> tweaked<00:17:34.120> it 00:17:34.390 --> 00:17:34.400 align:start position:0% I'm so sorry guys I literally tweaked it 00:17:34.400 --> 00:17:38.630 align:start position:0% I'm so sorry guys I literally tweaked it like<00:17:34.880> this<00:17:35.240> much<00:17:35.559> I<00:17:36.200> went<00:17:37.200> and<00:17:37.320> it<00:17:37.520> and<00:17:37.600> it<00:17:37.880> went 00:17:38.630 --> 00:17:38.640 align:start position:0% like this much I went and it and it went 00:17:38.640 --> 00:17:42.669 align:start position:0% like this much I went and it and it went went<00:17:39.640> through<00:17:39.840> the<00:17:40.000> roof<00:17:40.840> okay<00:17:41.080> sorry<00:17:41.480> guys<00:17:42.120> um 00:17:42.669 --> 00:17:42.679 align:start position:0% went through the roof okay sorry guys um 00:17:42.679 --> 00:17:44.350 align:start position:0% went through the roof okay sorry guys um but<00:17:43.039> I<00:17:43.120> just<00:17:43.240> wanted<00:17:43.480> to<00:17:43.640> also<00:17:44.000> mention 00:17:44.350 --> 00:17:44.360 align:start position:0% but I just wanted to also mention 00:17:44.360 --> 00:17:46.909 align:start position:0% but I just wanted to also mention something<00:17:44.640> here<00:17:45.080> um<00:17:45.480> the<00:17:45.679> in<00:17:45.799> my<00:17:45.960> experience 00:17:46.909 --> 00:17:46.919 align:start position:0% something here um the in my experience 00:17:46.919 --> 00:17:47.909 align:start position:0% something here um the in my experience understanding<00:17:47.280> having<00:17:47.520> like<00:17:47.640> a<00:17:47.720> really 00:17:47.909 --> 00:17:47.919 align:start position:0% understanding having like a really 00:17:47.919 --> 00:17:49.750 align:start position:0% understanding having like a really thorough<00:17:48.480> understanding<00:17:48.640> of<00:17:48.799> inheritance 00:17:49.750 --> 00:17:49.760 align:start position:0% thorough understanding of inheritance 00:17:49.760 --> 00:17:52.630 align:start position:0% thorough understanding of inheritance and<00:17:50.240> uh<00:17:50.360> some<00:17:50.480> of<00:17:50.679> these<00:17:51.520> um<00:17:51.679> objectoriented 00:17:52.630 --> 00:17:52.640 align:start position:0% and uh some of these um objectoriented 00:17:52.640 --> 00:17:55.149 align:start position:0% and uh some of these um objectoriented programming<00:17:53.280> principles<00:17:54.160> is<00:17:54.480> are<00:17:54.640> also 00:17:55.149 --> 00:17:55.159 align:start position:0% programming principles is are also 00:17:55.159 --> 00:17:58.950 align:start position:0% programming principles is are also really<00:17:55.840> um<00:17:56.360> applicable<00:17:56.919> to<00:17:57.400> sandbox<00:17:58.000> escapes 00:17:58.950 --> 00:17:58.960 align:start position:0% really um applicable to sandbox escapes 00:17:58.960 --> 00:18:01.110 align:start position:0% really um applicable to sandbox escapes yeah<00:17:59.320> and<00:17:59.480> that<00:17:59.600> sort<00:17:59.760> of<00:17:59.880> thing<00:18:00.039> as<00:18:00.200> well<00:18:00.559> so 00:18:01.110 --> 00:18:01.120 align:start position:0% yeah and that sort of thing as well so 00:18:01.120 --> 00:18:02.549 align:start position:0% yeah and that sort of thing as well so that's<00:18:01.360> why<00:18:01.520> we<00:18:01.640> take<00:18:01.799> a<00:18:01.919> little<00:18:02.080> bit<00:18:02.200> of<00:18:02.360> time 00:18:02.549 --> 00:18:02.559 align:start position:0% that's why we take a little bit of time 00:18:02.559 --> 00:18:03.750 align:start position:0% that's why we take a little bit of time here<00:18:02.679> even<00:18:02.880> though<00:18:03.000> the<00:18:03.120> main<00:18:03.320> focus<00:18:03.600> is 00:18:03.750 --> 00:18:03.760 align:start position:0% here even though the main focus is 00:18:03.760 --> 00:18:05.950 align:start position:0% here even though the main focus is prototype<00:18:04.200> pollution<00:18:05.039> if<00:18:05.159> we<00:18:05.280> can<00:18:05.440> actually 00:18:05.950 --> 00:18:05.960 align:start position:0% prototype pollution if we can actually 00:18:05.960 --> 00:18:07.149 align:start position:0% prototype pollution if we can actually understand<00:18:06.200> what's<00:18:06.440> actually<00:18:06.799> happening 00:18:07.149 --> 00:18:07.159 align:start position:0% understand what's actually happening 00:18:07.159 --> 00:18:09.990 align:start position:0% understand what's actually happening here<00:18:07.360> with<00:18:07.480> overriding<00:18:08.120> prototypes<00:18:08.960> and<00:18:09.480> how 00:18:09.990 --> 00:18:10.000 align:start position:0% here with overriding prototypes and how 00:18:10.000 --> 00:18:14.110 align:start position:0% here with overriding prototypes and how um<00:18:10.320> various<00:18:11.280> uh<00:18:11.559> objects<00:18:12.480> inherit<00:18:13.120> properties 00:18:14.110 --> 00:18:14.120 align:start position:0% um various uh objects inherit properties 00:18:14.120 --> 00:18:16.350 align:start position:0% um various uh objects inherit properties then<00:18:14.720> um<00:18:15.200> there's<00:18:15.360> a<00:18:15.520> lot<00:18:15.679> of<00:18:15.840> applications 00:18:16.350 --> 00:18:16.360 align:start position:0% then um there's a lot of applications 00:18:16.360 --> 00:18:19.190 align:start position:0% then um there's a lot of applications for<00:18:16.559> that<00:18:16.799> in<00:18:17.039> the<00:18:17.400> um<00:18:18.159> in<00:18:18.280> the<00:18:18.400> sandbox<00:18:18.840> Escape 00:18:19.190 --> 00:18:19.200 align:start position:0% for that in the um in the sandbox Escape 00:18:19.200 --> 00:18:21.510 align:start position:0% for that in the um in the sandbox Escape world<00:18:19.520> too<00:18:20.120> yeah<00:18:20.240> and<00:18:20.360> prot<00:18:20.640> pollution<00:18:21.080> can<00:18:21.240> be 00:18:21.510 --> 00:18:21.520 align:start position:0% world too yeah and prot pollution can be 00:18:21.520 --> 00:18:24.110 align:start position:0% world too yeah and prot pollution can be very<00:18:21.919> tricky<00:18:22.520> sometimes<00:18:23.400> like<00:18:23.559> for<00:18:23.720> example 00:18:24.110 --> 00:18:24.120 align:start position:0% very tricky sometimes like for example 00:18:24.120 --> 00:18:26.950 align:start position:0% very tricky sometimes like for example if<00:18:24.240> I<00:18:24.440> do<00:18:25.120> uh<00:18:25.840> let's<00:18:26.080> just<00:18:26.280> start<00:18:26.600> again<00:18:26.760> so<00:18:26.880> I 00:18:26.950 --> 00:18:26.960 align:start position:0% if I do uh let's just start again so I 00:18:26.960 --> 00:18:29.310 align:start position:0% if I do uh let's just start again so I don't<00:18:27.159> have<00:18:27.400> all<00:18:27.520> the<00:18:27.679> garbage<00:18:28.400> m<00:18:28.760> so<00:18:28.880> I<00:18:28.960> create 00:18:29.310 --> 00:18:29.320 align:start position:0% don't have all the garbage m so I create 00:18:29.320 --> 00:18:31.590 align:start position:0% don't have all the garbage m so I create x<00:18:29.760> and<00:18:30.000> x<00:18:30.320> I<00:18:30.400> will<00:18:30.600> set 00:18:31.590 --> 00:18:31.600 align:start position:0% x and x I will set 00:18:31.600 --> 00:18:35.190 align:start position:0% x and x I will set Proto<00:18:32.919> to 00:18:35.190 --> 00:18:35.200 align:start position:0% Proto to 00:18:35.200 --> 00:18:39.470 align:start position:0% Proto to y42<00:18:36.200> and<00:18:36.440> here<00:18:36.640> if<00:18:36.799> I<00:18:36.960> do<00:18:37.840> x.<00:18:38.320> y<00:18:38.480> I<00:18:38.559> got<00:18:38.720> 42<00:18:39.159> but<00:18:39.320> X 00:18:39.470 --> 00:18:39.480 align:start position:0% y42 and here if I do x. y I got 42 but X 00:18:39.480 --> 00:18:42.149 align:start position:0% y42 and here if I do x. y I got 42 but X is<00:18:39.559> still<00:18:39.760> empty<00:18:40.520> but<00:18:40.640> if<00:18:40.720> I<00:18:40.840> do<00:18:40.960> a<00:18:41.080> new<00:18:41.400> object 00:18:42.149 --> 00:18:42.159 align:start position:0% is still empty but if I do a new object 00:18:42.159 --> 00:18:47.149 align:start position:0% is still empty but if I do a new object called<00:18:42.520> y<00:18:43.080> or<00:18:43.520> called<00:18:44.080> a<00:18:45.080> here<00:18:45.320> A<00:18:45.840> Y<00:18:46.080> is<00:18:46.200> not 00:18:47.149 --> 00:18:47.159 align:start position:0% called y or called a here A Y is not 00:18:47.159 --> 00:18:50.230 align:start position:0% called y or called a here A Y is not defined<00:18:48.159> because<00:18:48.520> here<00:18:49.480> I've<00:18:49.679> changed<00:18:50.080> the 00:18:50.230 --> 00:18:50.240 align:start position:0% defined because here I've changed the 00:18:50.240 --> 00:18:52.909 align:start position:0% defined because here I've changed the Prototype<00:18:50.720> of<00:18:50.960> x<00:18:51.200> to<00:18:51.360> be<00:18:51.600> this<00:18:52.280> but<00:18:52.400> I<00:18:52.480> didn't 00:18:52.909 --> 00:18:52.919 align:start position:0% Prototype of x to be this but I didn't 00:18:52.919 --> 00:18:54.950 align:start position:0% Prototype of x to be this but I didn't modify<00:18:53.600> the<00:18:53.760> object 00:18:54.950 --> 00:18:54.960 align:start position:0% modify the object 00:18:54.960 --> 00:19:00.110 align:start position:0% modify the object prototype<00:18:55.960> so<00:18:56.120> if<00:18:56.200> you<00:18:56.360> look<00:18:56.480> at<00:18:56.760> X<00:18:57.760> um 00:19:00.110 --> 00:19:00.120 align:start position:0% prototype so if you look at X um 00:19:00.120 --> 00:19:02.870 align:start position:0% prototype so if you look at X um Proto<00:19:01.120> is<00:19:01.360> this<00:19:01.559> object<00:19:01.840> we<00:19:01.960> created<00:19:02.320> earlier 00:19:02.870 --> 00:19:02.880 align:start position:0% Proto is this object we created earlier 00:19:02.880 --> 00:19:03.870 align:start position:0% Proto is this object we created earlier but<00:19:03.039> it's 00:19:03.870 --> 00:19:03.880 align:start position:0% but it's 00:19:03.880 --> 00:19:06.510 align:start position:0% but it's not<00:19:04.880> object.<00:19:05.480> prototype 00:19:06.510 --> 00:19:06.520 align:start position:0% not object. prototype 00:19:06.520 --> 00:19:09.870 align:start position:0% not object. prototype anymore<00:19:07.720> right<00:19:08.720> right<00:19:09.120> so<00:19:09.200> you 00:19:09.870 --> 00:19:09.880 align:start position:0% anymore right right so you 00:19:09.880 --> 00:19:12.350 align:start position:0% anymore right right so you can<00:19:10.880> we<00:19:11.039> reassigned<00:19:11.600> the<00:19:11.760> Prototype<00:19:12.240> we 00:19:12.350 --> 00:19:12.360 align:start position:0% can we reassigned the Prototype we 00:19:12.360 --> 00:19:13.830 align:start position:0% can we reassigned the Prototype we didn't<00:19:12.600> modify<00:19:13.039> the<00:19:13.200> Prototype<00:19:13.679> we 00:19:13.830 --> 00:19:13.840 align:start position:0% didn't modify the Prototype we 00:19:13.840 --> 00:19:17.470 align:start position:0% didn't modify the Prototype we reassigned<00:19:14.360> it<00:19:14.919> so<00:19:15.039> if<00:19:15.159> we<00:19:15.320> did<00:19:15.760> x.<00:19:16.480> prototo 00:19:17.470 --> 00:19:17.480 align:start position:0% reassigned it so if we did x. prototo 00:19:17.480 --> 00:19:21.070 align:start position:0% reassigned it so if we did x. prototo doy<00:19:18.280> equals<00:19:18.760> 42<00:19:19.760> yeah<00:19:20.120> this<00:19:20.240> would<00:19:20.480> work<00:19:20.960> that 00:19:21.070 --> 00:19:21.080 align:start position:0% doy equals 42 yeah this would work that 00:19:21.080 --> 00:19:23.750 align:start position:0% doy equals 42 yeah this would work that would<00:19:21.240> work<00:19:21.640> okay<00:19:22.360> yeah<00:19:22.880> and<00:19:23.039> but<00:19:23.200> if<00:19:23.320> you<00:19:23.480> also 00:19:23.750 --> 00:19:23.760 align:start position:0% would work okay yeah and but if you also 00:19:23.760 --> 00:19:29.430 align:start position:0% would work okay yeah and but if you also know<00:19:24.200> do<00:19:24.640> object.<00:19:25.320> prototype<00:19:26.320> uh.<00:19:26.760> Z<00:19:27.480> 43<00:19:28.360> are<00:19:28.799> X 00:19:29.430 --> 00:19:29.440 align:start position:0% know do object. prototype uh. Z 43 are X 00:19:29.440 --> 00:19:31.149 align:start position:0% know do object. prototype uh. Z 43 are X the<00:19:29.559> Prototype<00:19:29.960> is<00:19:30.120> this<00:19:30.280> value<00:19:30.919> but<00:19:31.080> the 00:19:31.149 --> 00:19:31.159 align:start position:0% the Prototype is this value but the 00:19:31.159 --> 00:19:32.909 align:start position:0% the Prototype is this value but the Prototype<00:19:31.559> of<00:19:31.720> this<00:19:31.880> value<00:19:32.159> is<00:19:32.320> still<00:19:32.600> object 00:19:32.909 --> 00:19:32.919 align:start position:0% Prototype of this value is still object 00:19:32.919 --> 00:19:36.149 align:start position:0% Prototype of this value is still object prototype<00:19:33.600> so<00:19:33.840> XZ<00:19:34.360> is<00:19:34.480> still<00:19:34.799> available<00:19:35.799> why 00:19:36.149 --> 00:19:36.159 align:start position:0% prototype so XZ is still available why 00:19:36.159 --> 00:19:38.430 align:start position:0% prototype so XZ is still available why it's<00:19:36.520> it's<00:19:36.640> a<00:19:36.799> chain<00:19:37.559> yeah<00:19:38.000> because<00:19:38.159> then<00:19:38.280> it 00:19:38.430 --> 00:19:38.440 align:start position:0% it's it's a chain yeah because then it 00:19:38.440 --> 00:19:41.029 align:start position:0% it's it's a chain yeah because then it goes<00:19:39.240> It<00:19:39.360> goes<00:19:39.640> into<00:19:39.799> that<00:19:40.080> string<00:19:40.679> also 00:19:41.029 --> 00:19:41.039 align:start position:0% goes It goes into that string also 00:19:41.039 --> 00:19:43.110 align:start position:0% goes It goes into that string also inates<00:19:41.559> from<00:19:41.919> object<00:19:42.320> everything<00:19:42.600> inate<00:19:42.960> from 00:19:43.110 --> 00:19:43.120 align:start position:0% inates from object everything inate from 00:19:43.120 --> 00:19:45.430 align:start position:0% inates from object everything inate from object<00:19:43.360> in<00:19:43.520> JavaScript<00:19:44.520> but<00:19:44.679> if<00:19:44.799> you<00:19:44.880> want<00:19:45.039> to 00:19:45.430 --> 00:19:45.440 align:start position:0% object in JavaScript but if you want to 00:19:45.440 --> 00:19:47.390 align:start position:0% object in JavaScript but if you want to at<00:19:45.600> some<00:19:45.799> point<00:19:46.159> protect<00:19:46.480> yourself<00:19:46.960> for<00:19:47.159> this 00:19:47.390 --> 00:19:47.400 align:start position:0% at some point protect yourself for this 00:19:47.400 --> 00:19:49.950 align:start position:0% at some point protect yourself for this from<00:19:47.559> this<00:19:47.720> kind<00:19:47.840> of<00:19:48.039> attack<00:19:48.799> you<00:19:48.919> can<00:19:49.159> create 00:19:49.950 --> 00:19:49.960 align:start position:0% from this kind of attack you can create 00:19:49.960 --> 00:19:52.190 align:start position:0% from this kind of attack you can create uh<00:19:50.320> can<00:19:50.480> do<00:19:50.640> object<00:19:50.880> to<00:19:51.080> create<00:19:51.520> and<00:19:51.720> specify 00:19:52.190 --> 00:19:52.200 align:start position:0% uh can do object to create and specify 00:19:52.200 --> 00:19:55.549 align:start position:0% uh can do object to create and specify the<00:19:52.360> null<00:19:53.200> prototype<00:19:54.200> so<00:19:54.480> this<00:19:54.640> time<00:19:55.159> let's<00:19:55.360> do 00:19:55.549 --> 00:19:55.559 align:start position:0% the null prototype so this time let's do 00:19:55.559 --> 00:19:58.750 align:start position:0% the null prototype so this time let's do it<00:19:56.080> m<00:19:56.919> and<00:19:57.120> this<00:19:57.280> object<00:19:57.880> has<00:19:58.039> not<00:19:58.240> the<00:19:58.320> same 00:19:58.750 --> 00:19:58.760 align:start position:0% it m and this object has not the same 00:19:58.760 --> 00:20:01.230 align:start position:0% it m and this object has not the same thing<00:19:59.200> has<00:19:59.360> a<00:19:59.440> n<00:19:59.760> prototype<00:20:00.640> but<00:20:00.760> this<00:20:00.919> object 00:20:01.230 --> 00:20:01.240 align:start position:0% thing has a n prototype but this object 00:20:01.240 --> 00:20:03.070 align:start position:0% thing has a n prototype but this object doesn't<00:20:01.520> have<00:20:01.679> two<00:20:01.880> string<00:20:02.200> anymore<00:20:02.520> because 00:20:03.070 --> 00:20:03.080 align:start position:0% doesn't have two string anymore because 00:20:03.080 --> 00:20:04.549 align:start position:0% doesn't have two string anymore because it's<00:20:03.159> a<00:20:03.280> n<00:20:03.520> Prototype<00:20:04.000> all<00:20:04.159> the<00:20:04.280> thing<00:20:04.440> you 00:20:04.549 --> 00:20:04.559 align:start position:0% it's a n Prototype all the thing you 00:20:04.559 --> 00:20:08.230 align:start position:0% it's a n Prototype all the thing you interat<00:20:04.960> from<00:20:05.159> object 00:20:08.230 --> 00:20:08.240 align:start position:0% 00:20:08.240 --> 00:20:11.630 align:start position:0% disappeared<00:20:09.240> that<00:20:09.799> yeah<00:20:10.000> that<00:20:10.159> makes<00:20:10.640> sense 00:20:11.630 --> 00:20:11.640 align:start position:0% disappeared that yeah that makes sense 00:20:11.640 --> 00:20:14.070 align:start position:0% disappeared that yeah that makes sense okay<00:20:12.039> I<00:20:12.280> I<00:20:12.480> I<00:20:12.679> I<00:20:12.760> see<00:20:13.039> that<00:20:13.200> it<00:20:13.320> took<00:20:13.480> a<00:20:13.640> second 00:20:14.070 --> 00:20:14.080 align:start position:0% okay I I I I see that it took a second 00:20:14.080 --> 00:20:16.789 align:start position:0% okay I I I I see that it took a second but<00:20:14.320> I<00:20:14.440> I<00:20:14.520> see<00:20:14.840> that<00:20:15.000> now<00:20:15.320> okay<00:20:16.120> but<00:20:16.320> also<00:20:16.640> a 00:20:16.789 --> 00:20:16.799 align:start position:0% but I I see that now okay but also a 00:20:16.799 --> 00:20:18.909 align:start position:0% but I I see that now okay but also a last<00:20:17.120> thing<00:20:17.480> because<00:20:17.880> I<00:20:18.039> think<00:20:18.200> a<00:20:18.320> bit<00:20:18.480> tricky 00:20:18.909 --> 00:20:18.919 align:start position:0% last thing because I think a bit tricky 00:20:18.919 --> 00:20:21.669 align:start position:0% last thing because I think a bit tricky you<00:20:19.039> can<00:20:19.320> create<00:20:19.559> an<00:20:19.760> object<00:20:20.480> with<00:20:20.640> a<00:20:20.799> key<00:20:21.080> poto 00:20:21.669 --> 00:20:21.679 align:start position:0% you can create an object with a key poto 00:20:21.679 --> 00:20:23.029 align:start position:0% you can create an object with a key poto without<00:20:21.960> it<00:20:22.159> being<00:20:22.360> the 00:20:23.029 --> 00:20:23.039 align:start position:0% without it being the 00:20:23.039 --> 00:20:26.430 align:start position:0% without it being the Prototype<00:20:24.039> so<00:20:24.200> if<00:20:24.320> I<00:20:24.480> do<00:20:24.720> cons<00:20:25.640> uh 00:20:26.430 --> 00:20:26.440 align:start position:0% Prototype so if I do cons uh 00:20:26.440 --> 00:20:37.149 align:start position:0% Prototype so if I do cons uh U<00:20:27.440> and<00:20:27.600> I<00:20:27.760> do<00:20:28.120> with<00:20:28.280> bracket<00:20:28.679> it's<00:20:28.799> over 00:20:37.149 --> 00:20:37.159 align:start position:0% 00:20:37.159 --> 00:20:40.190 align:start position:0% there<00:20:38.159> here<00:20:38.600> you<00:20:39.039> I<00:20:39.159> have<00:20:39.280> a<00:20:39.400> key<00:20:39.640> Proto<00:20:39.960> inside 00:20:40.190 --> 00:20:40.200 align:start position:0% there here you I have a key Proto inside 00:20:40.200 --> 00:20:42.029 align:start position:0% there here you I have a key Proto inside of<00:20:40.360> it<00:20:40.720> but<00:20:41.000> this<00:20:41.120> is<00:20:41.240> not<00:20:41.360> the<00:20:41.520> Prototype<00:20:41.919> of 00:20:42.029 --> 00:20:42.039 align:start position:0% of it but this is not the Prototype of 00:20:42.039 --> 00:20:47.350 align:start position:0% of it but this is not the Prototype of the<00:20:42.200> object<00:20:42.640> if<00:20:42.760> I<00:20:42.919> do<00:20:43.120> u.<00:20:43.559> C<00:20:43.799> I<00:20:43.919> got 00:20:47.350 --> 00:20:47.360 align:start position:0% 00:20:47.360 --> 00:20:50.149 align:start position:0% nothing<00:20:48.360> huh<00:20:49.200> and<00:20:49.360> this<00:20:49.440> is<00:20:49.600> what<00:20:49.720> happen<00:20:50.039> when 00:20:50.149 --> 00:20:50.159 align:start position:0% nothing huh and this is what happen when 00:20:50.159 --> 00:21:06.590 align:start position:0% nothing huh and this is what happen when you<00:20:50.280> pass<00:20:50.559> Jen 00:21:06.590 --> 00:21:06.600 align:start position:0% 00:21:06.600 --> 00:21:07.870 align:start position:0% this<00:21:06.720> is<00:21:06.799> not<00:21:06.919> the<00:21:07.000> Prototype<00:21:07.400> of<00:21:07.480> the<00:21:07.600> object 00:21:07.870 --> 00:21:07.880 align:start position:0% this is not the Prototype of the object 00:21:07.880 --> 00:21:10.669 align:start position:0% this is not the Prototype of the object this<00:21:07.960> is<00:21:08.159> just<00:21:08.360> a<00:21:08.640> key<00:21:09.000> Proto<00:21:09.360> of<00:21:09.559> the<00:21:09.720> object 00:21:10.669 --> 00:21:10.679 align:start position:0% this is just a key Proto of the object 00:21:10.679 --> 00:21:12.630 align:start position:0% this is just a key Proto of the object yeah<00:21:10.919> the<00:21:11.080> key<00:21:11.760> and<00:21:12.000> and<00:21:12.120> it's<00:21:12.240> a<00:21:12.320> little<00:21:12.480> bit 00:21:12.630 --> 00:21:12.640 align:start position:0% yeah the key and and it's a little bit 00:21:12.640 --> 00:21:14.990 align:start position:0% yeah the key and and it's a little bit weird<00:21:12.960> because<00:21:13.360> in 00:21:14.990 --> 00:21:15.000 align:start position:0% weird because in 00:21:15.000 --> 00:21:16.950 align:start position:0% weird because in in<00:21:16.000> and<00:21:16.080> you<00:21:16.159> can<00:21:16.279> check<00:21:16.520> it<00:21:16.640> with<00:21:16.799> this 00:21:16.950 --> 00:21:16.960 align:start position:0% in and you can check it with this 00:21:16.960 --> 00:21:19.310 align:start position:0% in and you can check it with this function<00:21:17.640> shut<00:21:17.840> up<00:21:17.960> shut<00:21:18.159> up 00:21:19.310 --> 00:21:19.320 align:start position:0% function shut up shut up 00:21:19.320 --> 00:21:22.750 align:start position:0% function shut up shut up dude<00:21:20.400> um<00:21:21.400> uh 00:21:22.750 --> 00:21:22.760 align:start position:0% dude um uh 00:21:22.760 --> 00:21:25.110 align:start position:0% dude um uh the<00:21:23.760> I<00:21:24.000> I<00:21:24.159> I'm<00:21:24.320> seeing<00:21:24.559> it<00:21:24.679> it<00:21:24.799> took<00:21:24.919> me<00:21:25.000> a 00:21:25.110 --> 00:21:25.120 align:start position:0% the I I I'm seeing it it took me a 00:21:25.120 --> 00:21:26.789 align:start position:0% the I I I'm seeing it it took me a second<00:21:25.279> to<00:21:25.440> see<00:21:25.600> it<00:21:25.720> but<00:21:26.000> I<00:21:26.080> do<00:21:26.200> see<00:21:26.400> it<00:21:26.520> because 00:21:26.789 --> 00:21:26.799 align:start position:0% second to see it but I do see it because 00:21:26.799 --> 00:21:29.470 align:start position:0% second to see it but I do see it because that<00:21:26.880> is<00:21:27.000> a<00:21:27.159> key<00:21:27.440> called<00:21:27.799> Proto<00:21:29.000> the<00:21:29.120> actual 00:21:29.470 --> 00:21:29.480 align:start position:0% that is a key called Proto the actual 00:21:29.480 --> 00:21:31.870 align:start position:0% that is a key called Proto the actual protyp<00:21:30.480> and<00:21:30.799> the<00:21:30.880> weird<00:21:31.159> thing<00:21:31.400> about<00:21:31.679> how 00:21:31.870 --> 00:21:31.880 align:start position:0% protyp and the weird thing about how 00:21:31.880 --> 00:21:33.510 align:start position:0% protyp and the weird thing about how these<00:21:32.120> objects<00:21:32.440> function<00:21:32.760> in<00:21:32.880> JavaScript<00:21:33.400> is 00:21:33.510 --> 00:21:33.520 align:start position:0% these objects function in JavaScript is 00:21:33.520 --> 00:21:37.070 align:start position:0% these objects function in JavaScript is you<00:21:33.640> can<00:21:34.320> access<00:21:35.039> attributes<00:21:36.039> via<00:21:36.400> the<00:21:36.600> dot 00:21:37.070 --> 00:21:37.080 align:start position:0% you can access attributes via the dot 00:21:37.080 --> 00:21:39.630 align:start position:0% you can access attributes via the dot the<00:21:37.360> dot<00:21:38.200> syntax<00:21:38.960> I<00:21:39.039> think<00:21:39.159> for<00:21:39.240> me<00:21:39.360> this<00:21:39.480> is 00:21:39.630 --> 00:21:39.640 align:start position:0% the dot syntax I think for me this is 00:21:39.640 --> 00:21:41.549 align:start position:0% the dot syntax I think for me this is the<00:21:39.880> biggest<00:21:40.279> mistake<00:21:40.559> of<00:21:40.760> JavaScript<00:21:41.360> is 00:21:41.549 --> 00:21:41.559 align:start position:0% the biggest mistake of JavaScript is 00:21:41.559 --> 00:21:43.029 align:start position:0% the biggest mistake of JavaScript is there<00:21:41.640> is<00:21:41.799> no<00:21:42.039> difference<00:21:42.480> between<00:21:42.840> this 00:21:43.029 --> 00:21:43.039 align:start position:0% there is no difference between this 00:21:43.039 --> 00:21:45.669 align:start position:0% there is no difference between this syntax<00:21:43.720> and<00:21:43.960> this<00:21:44.120> syntax<00:21:44.799> yeah<00:21:45.080> that's<00:21:45.440> what 00:21:45.669 --> 00:21:45.679 align:start position:0% syntax and this syntax yeah that's what 00:21:45.679 --> 00:21:47.350 align:start position:0% syntax and this syntax yeah that's what that<00:21:45.880> exactly<00:21:46.720> this<00:21:46.799> is<00:21:46.919> this<00:21:47.000> is<00:21:47.080> the<00:21:47.200> main 00:21:47.350 --> 00:21:47.360 align:start position:0% that exactly this is this is the main 00:21:47.360 --> 00:21:49.230 align:start position:0% that exactly this is this is the main issue<00:21:47.640> of<00:21:47.880> all<00:21:48.039> the<00:21:48.159> GS<00:21:48.440> bugs<00:21:48.799> and<00:21:48.919> for<00:21:49.039> you<00:21:49.159> if 00:21:49.230 --> 00:21:49.240 align:start position:0% issue of all the GS bugs and for you if 00:21:49.240 --> 00:21:50.630 align:start position:0% issue of all the GS bugs and for you if you're<00:21:49.360> a<00:21:49.480> developer<00:21:50.039> every<00:21:50.240> time<00:21:50.360> you<00:21:50.480> need 00:21:50.630 --> 00:21:50.640 align:start position:0% you're a developer every time you need 00:21:50.640 --> 00:21:54.789 align:start position:0% you're a developer every time you need to<00:21:50.760> store<00:21:51.640> key<00:21:52.080> value<00:21:53.400> uh<00:21:54.400> I<00:21:54.480> don't<00:21:54.640> know 00:21:54.789 --> 00:21:54.799 align:start position:0% to store key value uh I don't know 00:21:54.799 --> 00:21:57.510 align:start position:0% to store key value uh I don't know whatever<00:21:55.159> variables<00:21:56.000> use<00:21:56.200> a<00:21:56.400> map 00:21:57.510 --> 00:21:57.520 align:start position:0% whatever variables use a map 00:21:57.520 --> 00:21:59.909 align:start position:0% whatever variables use a map instead<00:21:58.600> this<00:21:58.720> is<00:21:58.840> made<00:21:59.080> for<00:21:59.279> stocking<00:21:59.720> key 00:21:59.909 --> 00:21:59.919 align:start position:0% instead this is made for stocking key 00:21:59.919 --> 00:22:02.750 align:start position:0% instead this is made for stocking key values<00:22:00.799> object<00:22:01.159> are<00:22:01.640> made<00:22:01.799> to<00:22:01.919> store<00:22:02.520> things 00:22:02.750 --> 00:22:02.760 align:start position:0% values object are made to store things 00:22:02.760 --> 00:22:04.190 align:start position:0% values object are made to store things that<00:22:02.880> you<00:22:03.000> know<00:22:03.200> the<00:22:03.360> key<00:22:03.520> in<00:22:03.640> advance<00:22:04.039> if<00:22:04.120> you 00:22:04.190 --> 00:22:04.200 align:start position:0% that you know the key in advance if you 00:22:04.200 --> 00:22:05.990 align:start position:0% that you know the key in advance if you don't<00:22:04.360> know<00:22:04.480> the<00:22:04.600> key<00:22:04.760> in<00:22:04.880> advance<00:22:05.240> use<00:22:05.360> a<00:22:05.559> map 00:22:05.990 --> 00:22:06.000 align:start position:0% don't know the key in advance use a map 00:22:06.000 --> 00:22:08.350 align:start position:0% don't know the key in advance use a map use<00:22:06.159> a<00:22:06.360> map<00:22:06.919> okay<00:22:07.200> wow<00:22:07.600> that's<00:22:07.880> that's<00:22:08.000> a<00:22:08.159> great 00:22:08.350 --> 00:22:08.360 align:start position:0% use a map okay wow that's that's a great 00:22:08.360 --> 00:22:10.390 align:start position:0% use a map okay wow that's that's a great takeaway<00:22:08.840> there<00:22:09.520> um<00:22:09.720> so<00:22:09.840> I<00:22:09.919> just<00:22:10.039> want<00:22:10.120> to<00:22:10.279> make 00:22:10.390 --> 00:22:10.400 align:start position:0% takeaway there um so I just want to make 00:22:10.400 --> 00:22:12.070 align:start position:0% takeaway there um so I just want to make sure<00:22:10.600> you<00:22:10.799> guys<00:22:11.080> get<00:22:11.279> this<00:22:11.480> what<00:22:11.600> he's<00:22:11.760> saying 00:22:12.070 --> 00:22:12.080 align:start position:0% sure you guys get this what he's saying 00:22:12.080 --> 00:22:15.310 align:start position:0% sure you guys get this what he's saying here<00:22:12.279> is<00:22:12.480> that<00:22:13.279> the<00:22:13.960> there<00:22:14.159> there<00:22:14.240> are<00:22:14.440> two 00:22:15.310 --> 00:22:15.320 align:start position:0% here is that the there there are two 00:22:15.320 --> 00:22:17.149 align:start position:0% here is that the there there are two main<00:22:15.600> or<00:22:15.720> there<00:22:15.799> are<00:22:15.960> two<00:22:16.159> areas<00:22:16.520> here<00:22:16.799> in<00:22:17.000> in 00:22:17.149 --> 00:22:17.159 align:start position:0% main or there are two areas here in in 00:22:17.159 --> 00:22:18.669 align:start position:0% main or there are two areas here in in JavaScript<00:22:17.799> right<00:22:18.000> there's<00:22:18.320> there's<00:22:18.520> the 00:22:18.669 --> 00:22:18.679 align:start position:0% JavaScript right there's there's the 00:22:18.679 --> 00:22:22.110 align:start position:0% JavaScript right there's there's the ways<00:22:19.039> to<00:22:19.520> access<00:22:19.840> properties<00:22:20.279> via<00:22:21.080> the<00:22:21.279> dot 00:22:22.110 --> 00:22:22.120 align:start position:0% ways to access properties via the dot 00:22:22.120 --> 00:22:25.149 align:start position:0% ways to access properties via the dot right<00:22:22.320> so<00:22:22.919> whatever<00:22:23.279> object<00:22:23.640> X<00:22:24.159> do<00:22:24.799> property 00:22:25.149 --> 00:22:25.159 align:start position:0% right so whatever object X do property 00:22:25.159 --> 00:22:27.590 align:start position:0% right so whatever object X do property name<00:22:25.640> and<00:22:25.760> there's<00:22:26.000> also<00:22:26.520> the<00:22:26.880> square<00:22:27.200> bracket 00:22:27.590 --> 00:22:27.600 align:start position:0% name and there's also the square bracket 00:22:27.600 --> 00:22:30.190 align:start position:0% name and there's also the square bracket syntax<00:22:28.200> X<00:22:28.679> square<00:22:29.039> bracket<00:22:29.760> name<00:22:29.960> of<00:22:30.080> the 00:22:30.190 --> 00:22:30.200 align:start position:0% syntax X square bracket name of the 00:22:30.200 --> 00:22:32.390 align:start position:0% syntax X square bracket name of the attribute<00:22:30.600> in<00:22:30.760> string<00:22:31.080> form<00:22:31.679> square<00:22:31.960> bracket 00:22:32.390 --> 00:22:32.400 align:start position:0% attribute in string form square bracket 00:22:32.400 --> 00:22:36.390 align:start position:0% attribute in string form square bracket right<00:22:33.120> um<00:22:33.880> and<00:22:34.880> there<00:22:35.159> there<00:22:35.919> there's<00:22:36.279> those 00:22:36.390 --> 00:22:36.400 align:start position:0% right um and there there there's those 00:22:36.400 --> 00:22:37.789 align:start position:0% right um and there there there's those are<00:22:36.559> interchangeable<00:22:37.200> but<00:22:37.279> they<00:22:37.400> can<00:22:37.520> also 00:22:37.789 --> 00:22:37.799 align:start position:0% are interchangeable but they can also 00:22:37.799 --> 00:22:41.230 align:start position:0% are interchangeable but they can also access<00:22:38.200> values<00:22:38.640> of<00:22:38.840> a<00:22:39.120> of<00:22:39.240> an<00:22:39.480> object<00:22:40.480> and<00:22:41.080> uh 00:22:41.230 --> 00:22:41.240 align:start position:0% access values of a of an object and uh 00:22:41.240 --> 00:22:43.710 align:start position:0% access values of a of an object and uh they<00:22:41.360> can<00:22:41.559> also<00:22:41.880> access<00:22:42.320> like<00:22:42.679> keys<00:22:43.120> in<00:22:43.279> a<00:22:43.480> in<00:22:43.559> a 00:22:43.710 --> 00:22:43.720 align:start position:0% they can also access like keys in a in a 00:22:43.720 --> 00:22:46.029 align:start position:0% they can also access like keys in a in a Json<00:22:44.080> structure<00:22:44.520> there<00:22:44.760> right<00:22:45.360> um<00:22:45.520> so<00:22:45.720> there's 00:22:46.029 --> 00:22:46.039 align:start position:0% Json structure there right um so there's 00:22:46.039 --> 00:22:48.590 align:start position:0% Json structure there right um so there's there's<00:22:46.279> overlap<00:22:46.880> there<00:22:47.080> which<00:22:47.320> makes<00:22:47.600> it 00:22:48.590 --> 00:22:48.600 align:start position:0% there's overlap there which makes it 00:22:48.600 --> 00:22:50.470 align:start position:0% there's overlap there which makes it very<00:22:48.840> easy<00:22:49.120> to<00:22:49.240> be<00:22:49.400> confused<00:22:49.919> is<00:22:50.039> that<00:22:50.240> is<00:22:50.320> that 00:22:50.470 --> 00:22:50.480 align:start position:0% very easy to be confused is that is that 00:22:50.480 --> 00:22:52.510 align:start position:0% very easy to be confused is that is that accurate<00:22:51.000> have<00:22:51.120> I<00:22:51.480> yeah<00:22:51.760> reated<00:22:52.360> that 00:22:52.510 --> 00:22:52.520 align:start position:0% accurate have I yeah reated that 00:22:52.520 --> 00:22:54.549 align:start position:0% accurate have I yeah reated that correctly<00:22:53.120> okay<00:22:53.320> good<00:22:53.640> everything<00:22:54.039> is<00:22:54.360> just 00:22:54.549 --> 00:22:54.559 align:start position:0% correctly okay good everything is just 00:22:54.559 --> 00:22:56.430 align:start position:0% correctly okay good everything is just access<00:22:54.960> the<00:22:55.039> same<00:22:55.240> and<00:22:55.400> it's<00:22:55.640> it's<00:22:55.720> a<00:22:55.880> to<00:22:56.360> I 00:22:56.430 --> 00:22:56.440 align:start position:0% access the same and it's it's a to I 00:22:56.440 --> 00:23:00.430 align:start position:0% access the same and it's it's a to I think<00:22:57.000> python<00:22:57.360> made<00:22:57.559> it<00:22:57.840> better<00:22:58.279> with 00:23:00.430 --> 00:23:00.440 align:start position:0% think python made it better with 00:23:00.440 --> 00:23:04.190 align:start position:0% think python made it better with sep<00:23:01.440> yeah<00:23:01.559> I<00:23:01.679> agree<00:23:02.240> um<00:23:02.360> Shish<00:23:03.279> can<00:23:03.640> access<00:23:04.039> the 00:23:04.190 --> 00:23:04.200 align:start position:0% sep yeah I agree um Shish can access the 00:23:04.200 --> 00:23:05.590 align:start position:0% sep yeah I agree um Shish can access the Prototype<00:23:04.679> with<00:23:04.799> the<00:23:04.880> square<00:23:05.159> brackets<00:23:05.520> I 00:23:05.590 --> 00:23:05.600 align:start position:0% Prototype with the square brackets I 00:23:05.600 --> 00:23:08.029 align:start position:0% Prototype with the square brackets I believe<00:23:05.840> you<00:23:06.000> can<00:23:06.880> uh<00:23:07.120> not<00:23:07.320> anymore<00:23:07.679> on<00:23:07.919> this 00:23:08.029 --> 00:23:08.039 align:start position:0% believe you can uh not anymore on this 00:23:08.039 --> 00:23:11.070 align:start position:0% believe you can uh not anymore on this one<00:23:08.640> because<00:23:09.640> yeah<00:23:09.960> if<00:23:10.080> you<00:23:10.159> want<00:23:10.320> to<00:23:10.520> access 00:23:11.070 --> 00:23:11.080 align:start position:0% one because yeah if you want to access 00:23:11.080 --> 00:23:14.830 align:start position:0% one because yeah if you want to access let's<00:23:11.640> uh<00:23:11.760> store<00:23:12.200> this<00:23:12.360> one<00:23:12.919> in<00:23:13.200> a<00:23:13.880> variable 00:23:14.830 --> 00:23:14.840 align:start position:0% let's uh store this one in a variable 00:23:14.840 --> 00:23:16.630 align:start position:0% let's uh store this one in a variable and<00:23:15.000> if<00:23:15.200> I<00:23:15.320> do<00:23:15.559> Proto<00:23:15.919> I<00:23:16.000> will<00:23:16.159> still<00:23:16.360> access 00:23:16.630 --> 00:23:16.640 align:start position:0% and if I do Proto I will still access 00:23:16.640 --> 00:23:18.230 align:start position:0% and if I do Proto I will still access this<00:23:16.799> object<00:23:17.120> but<00:23:17.200> it's<00:23:17.320> not<00:23:17.480> the<00:23:17.600> Prototype 00:23:18.230 --> 00:23:18.240 align:start position:0% this object but it's not the Prototype 00:23:18.240 --> 00:23:19.990 align:start position:0% this object but it's not the Prototype if<00:23:18.320> I<00:23:18.440> want<00:23:18.600> the<00:23:18.760> Prototype<00:23:19.400> I<00:23:19.480> can<00:23:19.640> use 00:23:19.990 --> 00:23:20.000 align:start position:0% if I want the Prototype I can use 00:23:20.000 --> 00:23:23.750 align:start position:0% if I want the Prototype I can use object.<00:23:20.679> get<00:23:21.000> prototype<00:23:21.720> of<00:23:22.720> ah<00:23:23.320> and<00:23:23.440> I<00:23:23.559> still 00:23:23.750 --> 00:23:23.760 align:start position:0% object. get prototype of ah and I still 00:23:23.760 --> 00:23:26.549 align:start position:0% object. get prototype of ah and I still get<00:23:23.880> the<00:23:24.039> Prototype<00:23:24.640> which<00:23:24.760> is<00:23:25.440> uh<00:23:26.440> we 00:23:26.549 --> 00:23:26.559 align:start position:0% get the Prototype which is uh we 00:23:26.559 --> 00:23:28.190 align:start position:0% get the Prototype which is uh we modified<00:23:27.000> earlier<00:23:27.360> with<00:23:27.480> the<00:23:27.640> Z<00:23:27.880> but<00:23:28.000> there<00:23:28.080> is 00:23:28.190 --> 00:23:28.200 align:start position:0% modified earlier with the Z but there is 00:23:28.200 --> 00:23:28.990 align:start position:0% modified earlier with the Z but there is no 00:23:28.990 --> 00:23:29.000 align:start position:0% no 00:23:29.000 --> 00:23:31.269 align:start position:0% no but<00:23:29.240> but<00:23:29.360> if<00:23:29.520> you<00:23:29.760> instantiate<00:23:30.279> a<00:23:30.440> new<00:23:30.760> object 00:23:31.269 --> 00:23:31.279 align:start position:0% but but if you instantiate a new object 00:23:31.279 --> 00:23:35.070 align:start position:0% but but if you instantiate a new object and<00:23:31.400> then<00:23:31.559> you<00:23:31.840> access<00:23:32.919> _<00:23:33.919> Proto<00:23:34.720> with<00:23:34.960> the 00:23:35.070 --> 00:23:35.080 align:start position:0% and then you access _ Proto with the 00:23:35.080 --> 00:23:37.149 align:start position:0% and then you access _ Proto with the square<00:23:35.440> bracket<00:23:36.080> you<00:23:36.159> can<00:23:36.279> still<00:23:36.640> access<00:23:36.919> it 00:23:37.149 --> 00:23:37.159 align:start position:0% square bracket you can still access it 00:23:37.159 --> 00:23:39.110 align:start position:0% square bracket you can still access it correct<00:23:37.559> yeah<00:23:37.720> yeah<00:23:38.039> yeah<00:23:38.200> yeah<00:23:38.440> that's<00:23:38.600> the 00:23:39.110 --> 00:23:39.120 align:start position:0% correct yeah yeah yeah yeah that's the 00:23:39.120 --> 00:23:42.190 align:start position:0% correct yeah yeah yeah yeah that's the whole<00:23:40.120> premise<00:23:40.520> of<00:23:40.880> of 00:23:42.190 --> 00:23:42.200 align:start position:0% whole premise of of 00:23:42.200 --> 00:23:45.470 align:start position:0% whole premise of of um<00:23:43.200> Proto<00:23:44.080> access<00:23:44.480> like<00:23:44.600> that<00:23:44.880> the<00:23:45.000> same<00:23:45.240> way 00:23:45.470 --> 00:23:45.480 align:start position:0% um Proto access like that the same way 00:23:45.480 --> 00:23:47.909 align:start position:0% um Proto access like that the same way yeah<00:23:46.440> yeah<00:23:46.600> because<00:23:46.960> that<00:23:47.200> and<00:23:47.440> and<00:23:47.720> this 00:23:47.909 --> 00:23:47.919 align:start position:0% yeah yeah because that and and this 00:23:47.919 --> 00:23:50.190 align:start position:0% yeah yeah because that and and this allows<00:23:48.279> for<00:23:48.520> us<00:23:48.799> for<00:23:49.159> developers<00:23:49.640> to<00:23:49.840> provide 00:23:50.190 --> 00:23:50.200 align:start position:0% allows for us for developers to provide 00:23:50.200 --> 00:23:52.669 align:start position:0% allows for us for developers to provide Dynamic<00:23:50.720> Keys<00:23:51.480> which<00:23:51.799> attribute<00:23:52.400> which 00:23:52.669 --> 00:23:52.679 align:start position:0% Dynamic Keys which attribute which 00:23:52.679 --> 00:23:55.669 align:start position:0% Dynamic Keys which attribute which access<00:23:53.240> attributes<00:23:54.240> of<00:23:54.520> the<00:23:54.919> of 00:23:55.669 --> 00:23:55.679 align:start position:0% access attributes of the of 00:23:55.679 --> 00:23:59.070 align:start position:0% access attributes of the of the<00:23:56.679> of<00:23:56.799> the<00:23:56.960> object's<00:23:57.880> prototype<00:23:58.760> rather 00:23:59.070 --> 00:23:59.080 align:start position:0% the of the object's prototype rather 00:23:59.080 --> 00:24:03.750 align:start position:0% the of the object's prototype rather than<00:23:59.679> of<00:24:00.000> the<00:24:00.200> actual<00:24:01.080> entity<00:24:01.520> itself<00:24:02.360> yeah<00:24:02.760> um 00:24:03.750 --> 00:24:03.760 align:start position:0% than of the actual entity itself yeah um 00:24:03.760 --> 00:24:06.269 align:start position:0% than of the actual entity itself yeah um leam<00:24:04.320> says<00:24:04.679> so<00:24:05.200> Json<00:24:05.600> parse<00:24:05.840> doesn't<00:24:06.080> cause 00:24:06.269 --> 00:24:06.279 align:start position:0% leam says so Json parse doesn't cause 00:24:06.279 --> 00:24:07.549 align:start position:0% leam says so Json parse doesn't cause protype<00:24:06.640> potion<00:24:06.960> contrary<00:24:07.279> to<00:24:07.400> what<00:24:07.480> is 00:24:07.549 --> 00:24:07.559 align:start position:0% protype potion contrary to what is 00:24:07.559 --> 00:24:09.430 align:start position:0% protype potion contrary to what is written<00:24:07.760> on<00:24:07.919> ports<00:24:08.159> sger<00:24:08.960> I<00:24:09.080> think<00:24:09.240> you 00:24:09.430 --> 00:24:09.440 align:start position:0% written on ports sger I think you 00:24:09.440 --> 00:24:13.310 align:start position:0% written on ports sger I think you misread<00:24:10.159> what<00:24:10.360> port<00:24:10.919> was<00:24:11.080> writing<00:24:12.000> but<00:24:13.000> uh 00:24:13.310 --> 00:24:13.320 align:start position:0% misread what port was writing but uh 00:24:13.320 --> 00:24:16.310 align:start position:0% misread what port was writing but uh just<00:24:13.720> not<00:24:13.960> pass<00:24:14.520> doesn't<00:24:15.400> uh<00:24:15.720> do<00:24:16.000> proty 00:24:16.310 --> 00:24:16.320 align:start position:0% just not pass doesn't uh do proty 00:24:16.320 --> 00:24:18.710 align:start position:0% just not pass doesn't uh do proty pollution<00:24:17.039> but<00:24:17.159> it<00:24:17.279> will<00:24:17.480> give<00:24:17.640> you<00:24:18.240> it<00:24:18.440> also 00:24:18.710 --> 00:24:18.720 align:start position:0% pollution but it will give you it also 00:24:18.720 --> 00:24:21.750 align:start position:0% pollution but it will give you it also doesn't<00:24:19.159> remove<00:24:19.600> any<00:24:19.799> dangerous<00:24:20.279> keys<00:24:21.080> so<00:24:21.440> if 00:24:21.750 --> 00:24:21.760 align:start position:0% doesn't remove any dangerous keys so if 00:24:21.760 --> 00:24:24.070 align:start position:0% doesn't remove any dangerous keys so if after<00:24:22.000> you<00:24:22.159> get<00:24:22.440> your<00:24:22.679> data<00:24:23.000> from<00:24:23.200> J<00:24:23.679> pass<00:24:24.000> and 00:24:24.070 --> 00:24:24.080 align:start position:0% after you get your data from J pass and 00:24:24.080 --> 00:24:25.830 align:start position:0% after you get your data from J pass and you<00:24:24.200> merge<00:24:24.480> it<00:24:24.600> with<00:24:24.720> an<00:24:24.880> object<00:24:25.279> with<00:24:25.399> a 00:24:25.830 --> 00:24:25.840 align:start position:0% you merge it with an object with a 00:24:25.840 --> 00:24:27.590 align:start position:0% you merge it with an object with a vulnerable<00:24:26.360> function<00:24:27.120> you<00:24:27.240> will<00:24:27.360> get<00:24:27.480> an 00:24:27.590 --> 00:24:27.600 align:start position:0% vulnerable function you will get an 00:24:27.600 --> 00:24:29.310 align:start position:0% vulnerable function you will get an error<00:24:27.880> but<00:24:28.000> we<00:24:28.080> will<00:24:28.159> see<00:24:28.600> this<00:24:28.720> in<00:24:28.840> a<00:24:28.960> bit<00:24:29.240> I 00:24:29.310 --> 00:24:29.320 align:start position:0% error but we will see this in a bit I 00:24:29.320 --> 00:24:31.269 align:start position:0% error but we will see this in a bit I will<00:24:29.480> go<00:24:29.559> back<00:24:29.679> to<00:24:29.799> my<00:24:29.919> slide<00:24:30.159> I<00:24:30.240> think<00:24:30.760> yeah 00:24:31.269 --> 00:24:31.279 align:start position:0% will go back to my slide I think yeah 00:24:31.279 --> 00:24:32.830 align:start position:0% will go back to my slide I think yeah yeah<00:24:31.480> we'll<00:24:31.760> we<00:24:31.880> we'll<00:24:32.080> go<00:24:32.200> back<00:24:32.320> to<00:24:32.520> that<00:24:32.720> and 00:24:32.830 --> 00:24:32.840 align:start position:0% yeah we'll we we'll go back to that and 00:24:32.840 --> 00:24:34.590 align:start position:0% yeah we'll we we'll go back to that and then<00:24:33.000> we'll<00:24:33.320> we'll<00:24:33.640> uh<00:24:33.760> we'll<00:24:33.919> play<00:24:34.120> around<00:24:34.440> as 00:24:34.590 --> 00:24:34.600 align:start position:0% then we'll we'll uh we'll play around as 00:24:34.600 --> 00:24:36.590 align:start position:0% then we'll we'll uh we'll play around as needed<00:24:35.480> these<00:24:35.600> slides<00:24:35.880> are<00:24:36.000> beautiful<00:24:36.399> by<00:24:36.520> the 00:24:36.590 --> 00:24:36.600 align:start position:0% needed these slides are beautiful by the 00:24:36.600 --> 00:24:40.110 align:start position:0% needed these slides are beautiful by the way<00:24:36.799> man<00:24:36.960> I<00:24:37.399> it's<00:24:37.720> made<00:24:38.240> it's<00:24:38.399> unade<00:24:39.120> the<00:24:39.240> world 00:24:40.110 --> 00:24:40.120 align:start position:0% way man I it's made it's unade the world 00:24:40.120 --> 00:24:43.149 align:start position:0% way man I it's made it's unade the world the<00:24:40.279> world<00:24:40.440> Frameworks<00:24:40.919> is<00:24:41.399> unmade<00:24:42.399> of<00:24:42.880> is 00:24:43.149 --> 00:24:43.159 align:start position:0% the world Frameworks is unmade of is 00:24:43.159 --> 00:24:45.750 align:start position:0% the world Frameworks is unmade of is what<00:24:44.039> this<00:24:44.159> is<00:24:44.360> a<00:24:44.760> slide<00:24:45.039> Frameworks<00:24:45.520> I<00:24:45.600> made 00:24:45.750 --> 00:24:45.760 align:start position:0% what this is a slide Frameworks I made 00:24:45.760 --> 00:24:49.350 align:start position:0% what this is a slide Frameworks I made for<00:24:46.320> myself<00:24:47.320> what<00:24:47.919> are<00:24:48.039> you<00:24:48.279> kidding<00:24:48.480> me<00:24:49.120> no 00:24:49.350 --> 00:24:49.360 align:start position:0% for myself what are you kidding me no 00:24:49.360 --> 00:24:51.590 align:start position:0% for myself what are you kidding me no because<00:24:49.760> I<00:24:49.840> don't<00:24:50.080> like<00:24:50.640> writing<00:24:51.000> slides<00:24:51.360> so<00:24:51.520> I 00:24:51.590 --> 00:24:51.600 align:start position:0% because I don't like writing slides so I 00:24:51.600 --> 00:24:54.269 align:start position:0% because I don't like writing slides so I say<00:24:51.840> but<00:24:51.960> I<00:24:52.080> like<00:24:52.240> doing<00:24:52.600> developments<00:24:53.360> so<00:24:54.159> I 00:24:54.269 --> 00:24:54.279 align:start position:0% say but I like doing developments so I 00:24:54.279 --> 00:24:56.549 align:start position:0% say but I like doing developments so I trick<00:24:54.679> myself<00:24:55.039> into<00:24:55.279> doing<00:24:55.480> slide<00:24:55.919> into<00:24:56.399> by 00:24:56.549 --> 00:24:56.559 align:start position:0% trick myself into doing slide into by 00:24:56.559 --> 00:25:00.149 align:start position:0% trick myself into doing slide into by making<00:24:56.799> my<00:24:56.880> own<00:24:57.039> Frameworks<00:24:57.919> oh<00:24:58.120> my<00:24:58.480> my<00:24:59.159> God 00:25:00.149 --> 00:25:00.159 align:start position:0% making my own Frameworks oh my my God 00:25:00.159 --> 00:25:03.510 align:start position:0% making my own Frameworks oh my my God you<00:25:00.279> can<00:25:00.520> do<00:25:01.520> whoa<00:25:02.120> whoa<00:25:02.320> whoa<00:25:02.520> what<00:25:02.640> was<00:25:02.880> that 00:25:03.510 --> 00:25:03.520 align:start position:0% you can do whoa whoa whoa what was that 00:25:03.520 --> 00:25:07.350 align:start position:0% you can do whoa whoa whoa what was that dude<00:25:03.840> when<00:25:04.440> hold<00:25:04.679> up<00:25:05.039> hold<00:25:05.279> up<00:25:05.840> when<00:25:05.919> are<00:25:06.080> you 00:25:07.350 --> 00:25:07.360 align:start position:0% dude when hold up hold up when are you 00:25:07.360 --> 00:25:10.310 align:start position:0% dude when hold up hold up when are you um<00:25:08.360> what<00:25:08.760> when<00:25:08.880> are<00:25:08.960> you<00:25:09.120> release<00:25:09.880> the<00:25:10.000> chat<00:25:10.200> is 00:25:10.310 --> 00:25:10.320 align:start position:0% um what when are you release the chat is 00:25:10.320 --> 00:25:13.190 align:start position:0% um what when are you release the chat is blowing<00:25:10.679> up<00:25:10.960> right<00:25:11.120> now<00:25:12.120> I<00:25:12.240> can<00:25:12.399> give<00:25:12.480> you<00:25:12.760> play 00:25:13.190 --> 00:25:13.200 align:start position:0% blowing up right now I can give you play 00:25:13.200 --> 00:25:15.430 align:start position:0% blowing up right now I can give you play if<00:25:13.279> you<00:25:13.440> want<00:25:13.919> oh<00:25:14.039> my<00:25:14.200> God<00:25:14.520> this<00:25:14.640> is<00:25:14.799> the<00:25:15.240> little 00:25:15.430 --> 00:25:15.440 align:start position:0% if you want oh my God this is the little 00:25:15.440 --> 00:25:17.710 align:start position:0% if you want oh my God this is the little did<00:25:15.640> we<00:25:15.760> know<00:25:16.080> this<00:25:16.200> is<00:25:16.440> the<00:25:16.760> dude<00:25:17.000> the<00:25:17.159> chat<00:25:17.440> is 00:25:17.710 --> 00:25:17.720 align:start position:0% did we know this is the dude the chat is 00:25:17.720 --> 00:25:19.230 align:start position:0% did we know this is the dude the chat is blowing 00:25:19.230 --> 00:25:19.240 align:start position:0% blowing 00:25:19.240 --> 00:25:22.430 align:start position:0% blowing up<00:25:20.240> that's<00:25:20.520> nuts<00:25:20.960> dude<00:25:21.559> that's<00:25:21.799> hilarious 00:25:22.430 --> 00:25:22.440 align:start position:0% up that's nuts dude that's hilarious 00:25:22.440 --> 00:25:24.470 align:start position:0% up that's nuts dude that's hilarious yeah<00:25:22.679> this<00:25:22.760> is<00:25:22.919> the<00:25:23.080> main<00:25:23.360> takeaway<00:25:23.799> from<00:25:24.000> this 00:25:24.470 --> 00:25:24.480 align:start position:0% yeah this is the main takeaway from this 00:25:24.480 --> 00:25:27.389 align:start position:0% yeah this is the main takeaway from this master<00:25:24.880> class<00:25:25.240> it's<00:25:26.080> people<00:25:26.279> want<00:25:26.399> to<00:25:26.600> buy<00:25:26.799> it 00:25:27.389 --> 00:25:27.399 align:start position:0% master class it's people want to buy it 00:25:27.399 --> 00:25:30.269 align:start position:0% master class it's people want to buy it oh<00:25:27.559> my<00:25:27.720> God<00:25:28.520> and<00:25:28.679> also<00:25:28.960> if<00:25:29.039> you<00:25:29.159> do<00:25:29.600> a<00:25:29.840> live<00:25:30.039> talk 00:25:30.269 --> 00:25:30.279 align:start position:0% oh my God and also if you do a live talk 00:25:30.279 --> 00:25:32.230 align:start position:0% oh my God and also if you do a live talk with<00:25:30.399> a<00:25:30.520> big<00:25:30.679> audience<00:25:31.080> it's<00:25:31.279> nice<00:25:31.480> to<00:25:31.960> because 00:25:32.230 --> 00:25:32.240 align:start position:0% with a big audience it's nice to because 00:25:32.240 --> 00:25:33.990 align:start position:0% with a big audience it's nice to because people<00:25:32.720> keep<00:25:33.000> keep<00:25:33.279> engaged<00:25:33.720> because<00:25:33.880> they 00:25:33.990 --> 00:25:34.000 align:start position:0% people keep keep engaged because they 00:25:34.000 --> 00:25:36.269 align:start position:0% people keep keep engaged because they want<00:25:34.120> to<00:25:34.200> know<00:25:34.320> the<00:25:34.480> next<00:25:35.399> funy<00:25:35.840> stuff<00:25:36.039> that<00:25:36.159> we 00:25:36.269 --> 00:25:36.279 align:start position:0% want to know the next funy stuff that we 00:25:36.279 --> 00:25:37.990 align:start position:0% want to know the next funy stuff that we happen<00:25:36.480> on<00:25:36.600> the<00:25:36.720> slide<00:25:37.000> and<00:25:37.159> there<00:25:37.279> is<00:25:37.520> more 00:25:37.990 --> 00:25:38.000 align:start position:0% happen on the slide and there is more 00:25:38.000 --> 00:25:39.830 align:start position:0% happen on the slide and there is more coming<00:25:38.240> on<00:25:38.480> you'll<00:25:38.679> see<00:25:39.200> it's<00:25:39.320> amazing<00:25:39.640> dude 00:25:39.830 --> 00:25:39.840 align:start position:0% coming on you'll see it's amazing dude 00:25:39.840 --> 00:25:41.350 align:start position:0% coming on you'll see it's amazing dude all<00:25:39.919> right<00:25:40.039> take<00:25:40.159> it<00:25:40.279> away<00:25:40.440> take<00:25:40.559> it<00:25:40.679> away<00:25:41.080> so 00:25:41.350 --> 00:25:41.360 align:start position:0% all right take it away take it away so 00:25:41.360 --> 00:25:43.549 align:start position:0% all right take it away take it away so this<00:25:41.440> is<00:25:41.559> an<00:25:41.720> example<00:25:42.000> of<00:25:42.159> vable<00:25:42.600> code<00:25:43.200> we<00:25:43.320> have 00:25:43.549 --> 00:25:43.559 align:start position:0% this is an example of vable code we have 00:25:43.559 --> 00:25:45.990 align:start position:0% this is an example of vable code we have this<00:25:43.919> kind<00:25:44.080> of<00:25:44.279> database<00:25:44.880> with<00:25:45.279> some<00:25:45.600> guests 00:25:45.990 --> 00:25:46.000 align:start position:0% this kind of database with some guests 00:25:46.000 --> 00:25:48.470 align:start position:0% this kind of database with some guests some<00:25:46.320> uh<00:25:46.399> some<00:25:46.559> users<00:25:46.960> and<00:25:47.120> some 00:25:48.470 --> 00:25:48.480 align:start position:0% some uh some users and some 00:25:48.480 --> 00:25:51.190 align:start position:0% some uh some users and some skills<00:25:49.480> and<00:25:49.679> we<00:25:49.760> have<00:25:49.880> a<00:25:50.080> route<00:25:50.760> where<00:25:50.919> we<00:25:51.000> can 00:25:51.190 --> 00:25:51.200 align:start position:0% skills and we have a route where we can 00:25:51.200 --> 00:25:54.950 align:start position:0% skills and we have a route where we can update<00:25:51.520> our<00:25:51.720> skills<00:25:52.159> so<00:25:52.520> we<00:25:52.640> send<00:25:52.919> some<00:25:53.720> Jen<00:25:54.679> uh 00:25:54.950 --> 00:25:54.960 align:start position:0% update our skills so we send some Jen uh 00:25:54.960 --> 00:25:57.310 align:start position:0% update our skills so we send some Jen uh we<00:25:55.159> get<00:25:55.520> the<00:25:55.679> skill<00:25:56.080> the<00:25:56.200> category<00:25:56.600> the<00:25:56.720> level 00:25:57.310 --> 00:25:57.320 align:start position:0% we get the skill the category the level 00:25:57.320 --> 00:25:59.909 align:start position:0% we get the skill the category the level and<00:25:57.520> we<00:25:57.640> have<00:25:57.880> this<00:25:58.559> uh<00:25:58.880> triple<00:25:59.279> assignment 00:25:59.909 --> 00:25:59.919 align:start position:0% and we have this uh triple assignment 00:25:59.919 --> 00:26:02.110 align:start position:0% and we have this uh triple assignment which<00:26:00.039> is<00:26:01.000> definitely<00:26:01.600> this<00:26:01.679> is<00:26:01.840> what<00:26:01.919> we 00:26:02.110 --> 00:26:02.120 align:start position:0% which is definitely this is what we 00:26:02.120 --> 00:26:02.950 align:start position:0% which is definitely this is what we looking<00:26:02.320> for<00:26:02.480> if<00:26:02.559> you're<00:26:02.679> looking<00:26:02.840> for 00:26:02.950 --> 00:26:02.960 align:start position:0% looking for if you're looking for 00:26:02.960 --> 00:26:04.510 align:start position:0% looking for if you're looking for protype<00:26:03.320> pollution<00:26:03.840> because<00:26:04.080> if<00:26:04.159> you<00:26:04.320> put 00:26:04.510 --> 00:26:04.520 align:start position:0% protype pollution because if you put 00:26:04.520 --> 00:26:06.190 align:start position:0% protype pollution because if you put Proto<00:26:05.000> there<00:26:05.200> and<00:26:05.279> a<00:26:05.480> key<00:26:05.679> you<00:26:05.799> can<00:26:05.960> set 00:26:06.190 --> 00:26:06.200 align:start position:0% Proto there and a key you can set 00:26:06.200 --> 00:26:09.269 align:start position:0% Proto there and a key you can set whatever<00:26:06.520> you<00:26:06.600> want<00:26:06.720> in<00:26:06.840> the 00:26:09.269 --> 00:26:09.279 align:start position:0% 00:26:09.279 --> 00:26:11.669 align:start position:0% Prototype<00:26:10.279> and<00:26:10.480> we<00:26:10.600> have<00:26:10.799> this<00:26:10.960> admin<00:26:11.320> route 00:26:11.669 --> 00:26:11.679 align:start position:0% Prototype and we have this admin route 00:26:11.679 --> 00:26:14.110 align:start position:0% Prototype and we have this admin route that<00:26:11.880> just<00:26:12.080> check<00:26:12.440> if<00:26:12.559> the<00:26:12.679> user<00:26:13.039> is<00:26:13.240> admin<00:26:13.880> and 00:26:14.110 --> 00:26:14.120 align:start position:0% that just check if the user is admin and 00:26:14.120 --> 00:26:18.269 align:start position:0% that just check if the user is admin and tell<00:26:14.320> you<00:26:14.440> if<00:26:14.520> you're<00:26:14.640> on<00:26:14.760> admin<00:26:15.039> or 00:26:18.269 --> 00:26:18.279 align:start position:0% 00:26:18.279 --> 00:26:20.870 align:start position:0% not<00:26:19.279> but<00:26:19.480> we<00:26:19.559> are<00:26:19.679> not<00:26:19.840> able<00:26:20.039> to<00:26:20.159> set<00:26:20.440> directly 00:26:20.870 --> 00:26:20.880 align:start position:0% not but we are not able to set directly 00:26:20.880 --> 00:26:22.830 align:start position:0% not but we are not able to set directly is<00:26:21.039> admin<00:26:21.520> because<00:26:21.760> over<00:26:22.039> there<00:26:22.399> we<00:26:22.480> are<00:26:22.640> only 00:26:22.830 --> 00:26:22.840 align:start position:0% is admin because over there we are only 00:26:22.840 --> 00:26:25.710 align:start position:0% is admin because over there we are only allowed<00:26:23.159> to<00:26:23.360> set<00:26:24.039> uh<00:26:25.000> things<00:26:25.320> inside<00:26:25.600> the 00:26:25.710 --> 00:26:25.720 align:start position:0% allowed to set uh things inside the 00:26:25.720 --> 00:26:27.510 align:start position:0% allowed to set uh things inside the skill<00:26:26.039> category<00:26:26.679> so<00:26:26.840> we're<00:26:27.000> not<00:26:27.120> allowed<00:26:27.360> to 00:26:27.510 --> 00:26:27.520 align:start position:0% skill category so we're not allowed to 00:26:27.520 --> 00:26:30.070 align:start position:0% skill category so we're not allowed to set<00:26:27.720> is<00:26:27.960> me<00:26:28.080> of<00:26:28.360> there<00:26:28.480> own 00:26:30.070 --> 00:26:30.080 align:start position:0% set is me of there own 00:26:30.080 --> 00:26:32.350 align:start position:0% set is me of there own guest<00:26:31.080> so<00:26:31.240> let's<00:26:31.399> try<00:26:31.559> to<00:26:31.720> send<00:26:31.919> the<00:26:32.080> first 00:26:32.350 --> 00:26:32.360 align:start position:0% guest so let's try to send the first 00:26:32.360 --> 00:26:34.750 align:start position:0% guest so let's try to send the first request<00:26:32.679> the<00:26:32.799> legitimate<00:26:33.279> one<00:26:34.039> with<00:26:34.399> category 00:26:34.750 --> 00:26:34.760 align:start position:0% request the legitimate one with category 00:26:34.760 --> 00:26:37.430 align:start position:0% request the legitimate one with category programming<00:26:35.159> skill<00:26:35.440> HTML<00:26:35.840> and<00:26:36.000> level 00:26:37.430 --> 00:26:37.440 align:start position:0% programming skill HTML and level 00:26:37.440 --> 00:26:41.110 align:start position:0% programming skill HTML and level 10<00:26:38.440> and<00:26:38.760> after<00:26:39.080> that<00:26:39.440> we<00:26:39.559> have<00:26:40.320> so<00:26:40.520> it<00:26:40.679> update 00:26:41.110 --> 00:26:41.120 align:start position:0% 10 and after that we have so it update 00:26:41.120 --> 00:26:42.990 align:start position:0% 10 and after that we have so it update our<00:26:41.320> skill<00:26:41.640> and<00:26:41.760> we<00:26:41.919> got<00:26:42.159> this<00:26:42.399> new<00:26:42.720> the<00:26:42.840> new 00:26:42.990 --> 00:26:43.000 align:start position:0% our skill and we got this new the new 00:26:43.000 --> 00:26:47.070 align:start position:0% our skill and we got this new the new skill<00:26:43.279> with<00:26:43.399> HTML<00:26:43.880> and<00:26:44.000> also<00:26:44.159> the<00:26:44.320> JavaScript 00:26:47.070 --> 00:26:47.080 align:start position:0% 00:26:47.080 --> 00:26:49.470 align:start position:0% scale<00:26:48.080> and<00:26:48.200> if<00:26:48.279> you<00:26:48.480> try<00:26:48.679> to<00:26:48.799> go<00:26:48.880> to<00:26:49.080> admin<00:26:49.399> we 00:26:49.470 --> 00:26:49.480 align:start position:0% scale and if you try to go to admin we 00:26:49.480 --> 00:26:52.510 align:start position:0% scale and if you try to go to admin we are<00:26:49.600> not<00:26:49.760> admin<00:26:50.440> anymore<00:26:51.440> so<00:26:51.640> let's<00:26:51.880> try<00:26:52.399> not 00:26:52.510 --> 00:26:52.520 align:start position:0% are not admin anymore so let's try not 00:26:52.520 --> 00:26:55.830 align:start position:0% are not admin anymore so let's try not ad<00:26:52.640> me<00:26:53.640> we<00:26:53.799> never<00:26:54.000> been<00:26:54.159> admin<00:26:55.120> so<00:26:55.360> here<00:26:55.480> we<00:26:55.600> try 00:26:55.830 --> 00:26:55.840 align:start position:0% ad me we never been admin so here we try 00:26:55.840 --> 00:26:57.430 align:start position:0% ad me we never been admin so here we try to<00:26:56.080> update<00:26:56.399> the<00:26:56.559> Prototype<00:26:57.039> the<00:26:57.159> object 00:26:57.430 --> 00:26:57.440 align:start position:0% to update the Prototype the object 00:26:57.440 --> 00:26:59.070 align:start position:0% to update the Prototype the object prototype<00:26:57.880> and<00:26:57.960> we<00:26:58.039> ch<00:26:58.240> change<00:26:58.520> the<00:26:58.640> is<00:26:58.799> admin 00:26:59.070 --> 00:26:59.080 align:start position:0% prototype and we ch change the is admin 00:26:59.080 --> 00:27:01.750 align:start position:0% prototype and we ch change the is admin key<00:26:59.279> to<00:26:59.440> one<00:27:00.279> so<00:27:00.520> this<00:27:00.679> time<00:27:00.960> because<00:27:01.159> our<00:27:01.360> user 00:27:01.750 --> 00:27:01.760 align:start position:0% key to one so this time because our user 00:27:01.760 --> 00:27:03.510 align:start position:0% key to one so this time because our user doesn't<00:27:02.080> have<00:27:02.200> the<00:27:02.360> key<00:27:02.559> is<00:27:02.720> admin<00:27:03.240> it<00:27:03.360> will 00:27:03.510 --> 00:27:03.520 align:start position:0% doesn't have the key is admin it will 00:27:03.520 --> 00:27:05.269 align:start position:0% doesn't have the key is admin it will fall<00:27:03.799> back<00:27:03.919> to<00:27:04.039> the 00:27:05.269 --> 00:27:05.279 align:start position:0% fall back to the 00:27:05.279 --> 00:27:07.510 align:start position:0% fall back to the Prototype<00:27:06.279> so<00:27:06.480> here<00:27:06.640> when<00:27:06.760> you<00:27:06.880> try<00:27:07.080> to<00:27:07.360> just 00:27:07.510 --> 00:27:07.520 align:start position:0% Prototype so here when you try to just 00:27:07.520 --> 00:27:09.669 align:start position:0% Prototype so here when you try to just set<00:27:07.760> it<00:27:08.039> we<00:27:08.320> see<00:27:08.559> the<00:27:08.679> same<00:27:08.840> thing<00:27:09.039> over<00:27:09.279> there 00:27:09.669 --> 00:27:09.679 align:start position:0% set it we see the same thing over there 00:27:09.679 --> 00:27:11.669 align:start position:0% set it we see the same thing over there because<00:27:10.159> like<00:27:10.399> we<00:27:10.600> saw<00:27:10.919> before<00:27:11.240> the<00:27:11.399> key<00:27:11.559> is 00:27:11.669 --> 00:27:11.679 align:start position:0% because like we saw before the key is 00:27:11.679 --> 00:27:14.510 align:start position:0% because like we saw before the key is not<00:27:12.240> enumerable<00:27:13.120> so<00:27:13.240> we<00:27:13.360> don't<00:27:13.480> see<00:27:13.679> the 00:27:14.510 --> 00:27:14.520 align:start position:0% not enumerable so we don't see the 00:27:14.520 --> 00:27:17.389 align:start position:0% not enumerable so we don't see the key<00:27:15.520> but<00:27:15.640> if<00:27:15.760> you<00:27:15.840> go<00:27:15.960> to<00:27:16.120> admin<00:27:16.919> uh<00:27:17.120> right<00:27:17.240> now 00:27:17.389 --> 00:27:17.399 align:start position:0% key but if you go to admin uh right now 00:27:17.399 --> 00:27:20.549 align:start position:0% key but if you go to admin uh right now I'm<00:27:17.520> an<00:27:18.039> admin<00:27:19.039> but<00:27:19.200> the<00:27:19.320> issue<00:27:19.600> is<00:27:20.240> uh<00:27:20.360> with 00:27:20.549 --> 00:27:20.559 align:start position:0% I'm an admin but the issue is uh with 00:27:20.559 --> 00:27:22.870 align:start position:0% I'm an admin but the issue is uh with this<00:27:20.720> kind<00:27:20.840> of<00:27:21.039> attack<00:27:21.520> is<00:27:21.919> everyone<00:27:22.320> is<00:27:22.440> at<00:27:22.600> me 00:27:22.870 --> 00:27:22.880 align:start position:0% this kind of attack is everyone is at me 00:27:22.880 --> 00:27:25.669 align:start position:0% this kind of attack is everyone is at me now<00:27:23.600> so<00:27:24.320> you<00:27:24.440> need<00:27:24.600> to<00:27:24.919> be<00:27:25.080> careful<00:27:25.440> when<00:27:25.520> you 00:27:25.669 --> 00:27:25.679 align:start position:0% now so you need to be careful when you 00:27:25.679 --> 00:27:30.830 align:start position:0% now so you need to be careful when you do<00:27:26.240> protype<00:27:26.640> pollution<00:27:27.240> on<00:27:27.720> uh<00:27:28.600> life 00:27:30.830 --> 00:27:30.840 align:start position:0% do protype pollution on uh life 00:27:30.840 --> 00:27:33.789 align:start position:0% do protype pollution on uh life targets<00:27:31.840> so<00:27:32.799> for<00:27:33.000> the<00:27:33.120> next<00:27:33.279> of<00:27:33.440> talk<00:27:33.600> I<00:27:33.640> will 00:27:33.789 --> 00:27:33.799 align:start position:0% targets so for the next of talk I will 00:27:33.799 --> 00:27:35.310 align:start position:0% targets so for the next of talk I will be<00:27:33.960> talking<00:27:34.200> about<00:27:34.480> protype<00:27:34.840> pollution 00:27:35.310 --> 00:27:35.320 align:start position:0% be talking about protype pollution 00:27:35.320 --> 00:27:38.070 align:start position:0% be talking about protype pollution gadgets<00:27:36.320> this<00:27:36.399> is<00:27:36.559> what<00:27:36.679> we<00:27:36.799> saw<00:27:37.039> just<00:27:37.279> before 00:27:38.070 --> 00:27:38.080 align:start position:0% gadgets this is what we saw just before 00:27:38.080 --> 00:27:41.509 align:start position:0% gadgets this is what we saw just before uh<00:27:38.279> this<00:27:38.440> kind<00:27:38.600> of<00:27:39.480> uh<00:27:40.360> this<00:27:40.600> key<00:27:40.880> is<00:27:41.080> AD<00:27:41.240> me<00:27:41.440> is 00:27:41.509 --> 00:27:41.519 align:start position:0% uh this kind of uh this key is AD me is 00:27:41.519 --> 00:27:43.750 align:start position:0% uh this kind of uh this key is AD me is a<00:27:41.720> gadget<00:27:42.080> because<00:27:42.279> if<00:27:42.360> we<00:27:42.480> manage<00:27:42.760> to<00:27:42.919> set<00:27:43.200> it 00:27:43.750 --> 00:27:43.760 align:start position:0% a gadget because if we manage to set it 00:27:43.760 --> 00:27:46.269 align:start position:0% a gadget because if we manage to set it we'll<00:27:44.000> reach<00:27:44.440> a<00:27:44.600> new<00:27:44.960> part<00:27:45.159> of<00:27:45.279> the<00:27:45.440> code<00:27:45.880> that 00:27:46.269 --> 00:27:46.279 align:start position:0% we'll reach a new part of the code that 00:27:46.279 --> 00:27:48.470 align:start position:0% we'll reach a new part of the code that we<00:27:46.399> were<00:27:46.559> not<00:27:46.760> able<00:27:46.960> to<00:27:47.080> reach<00:27:47.399> before<00:27:48.120> and 00:27:48.470 --> 00:27:48.480 align:start position:0% we were not able to reach before and 00:27:48.480 --> 00:27:51.470 align:start position:0% we were not able to reach before and sometimes<00:27:48.720> do<00:27:49.000> some<00:27:49.240> even<00:27:49.720> nicer 00:27:51.470 --> 00:27:51.480 align:start position:0% sometimes do some even nicer 00:27:51.480 --> 00:27:53.870 align:start position:0% sometimes do some even nicer stuff<00:27:52.480> so<00:27:52.640> what<00:27:52.760> a<00:27:52.880> gadget<00:27:53.200> is<00:27:53.440> it's<00:27:53.559> a<00:27:53.679> piece 00:27:53.870 --> 00:27:53.880 align:start position:0% stuff so what a gadget is it's a piece 00:27:53.880 --> 00:27:56.190 align:start position:0% stuff so what a gadget is it's a piece of<00:27:54.039> code<00:27:54.320> that<00:27:54.480> already<00:27:54.799> exist<00:27:55.120> in<00:27:55.200> the 00:27:56.190 --> 00:27:56.200 align:start position:0% of code that already exist in the 00:27:56.200 --> 00:27:58.950 align:start position:0% of code that already exist in the code<00:27:57.200> and<00:27:57.320> you<00:27:57.440> can<00:27:57.640> reach<00:27:57.840> it<00:27:58.240> depending<00:27:58.679> on 00:27:58.950 --> 00:27:58.960 align:start position:0% code and you can reach it depending on 00:27:58.960 --> 00:28:00.590 align:start position:0% code and you can reach it depending on some<00:27:59.240> property<00:27:59.640> that<00:27:59.760> are<00:28:00.279> currently 00:28:00.590 --> 00:28:00.600 align:start position:0% some property that are currently 00:28:00.600 --> 00:28:03.149 align:start position:0% some property that are currently undefined<00:28:01.080> but<00:28:01.200> you<00:28:01.320> can<00:28:01.640> maybe 00:28:03.149 --> 00:28:03.159 align:start position:0% undefined but you can maybe 00:28:03.159 --> 00:28:05.509 align:start position:0% undefined but you can maybe pollute<00:28:04.159> and<00:28:04.399> this<00:28:04.720> can<00:28:04.840> lead<00:28:05.039> to<00:28:05.320> very 00:28:05.509 --> 00:28:05.519 align:start position:0% pollute and this can lead to very 00:28:05.519 --> 00:28:06.430 align:start position:0% pollute and this can lead to very dangerous 00:28:06.430 --> 00:28:06.440 align:start position:0% dangerous 00:28:06.440 --> 00:28:08.509 align:start position:0% dangerous action<00:28:07.440> dangerous<00:28:07.919> can<00:28:08.039> depend<00:28:08.279> on<00:28:08.399> the 00:28:08.509 --> 00:28:08.519 align:start position:0% action dangerous can depend on the 00:28:08.519 --> 00:28:10.029 align:start position:0% action dangerous can depend on the context<00:28:08.840> of<00:28:08.960> the 00:28:10.029 --> 00:28:10.039 align:start position:0% context of the 00:28:10.039 --> 00:28:12.789 align:start position:0% context of the target<00:28:11.039> what<00:28:11.159> a<00:28:11.279> gadget<00:28:11.559> is<00:28:11.720> not<00:28:12.440> it's<00:28:12.559> not<00:28:12.679> a 00:28:12.789 --> 00:28:12.799 align:start position:0% target what a gadget is not it's not a 00:28:12.799 --> 00:28:15.110 align:start position:0% target what a gadget is not it's not a vulnerability<00:28:13.360> by<00:28:13.519> itself<00:28:14.399> uh<00:28:14.640> this<00:28:14.799> piece<00:28:14.960> of 00:28:15.110 --> 00:28:15.120 align:start position:0% vulnerability by itself uh this piece of 00:28:15.120 --> 00:28:17.269 align:start position:0% vulnerability by itself uh this piece of the<00:28:15.240> piece<00:28:15.399> of<00:28:15.519> code<00:28:15.720> we<00:28:15.799> saw<00:28:16.080> before<00:28:17.039> this<00:28:17.120> is 00:28:17.269 --> 00:28:17.279 align:start position:0% the piece of code we saw before this is 00:28:17.279 --> 00:28:19.630 align:start position:0% the piece of code we saw before this is not<00:28:17.399> a<00:28:17.519> vulnerability<00:28:18.360> this<00:28:18.519> is<00:28:19.519> the 00:28:19.630 --> 00:28:19.640 align:start position:0% not a vulnerability this is the 00:28:19.640 --> 00:28:23.990 align:start position:0% not a vulnerability this is the vulnerability<00:28:20.279> is<00:28:20.440> over 00:28:23.990 --> 00:28:24.000 align:start position:0% 00:28:24.000 --> 00:28:27.029 align:start position:0% there<00:28:25.000> you<00:28:25.120> can<00:28:25.440> kind<00:28:25.559> of<00:28:25.720> think<00:28:25.880> of<00:28:26.039> it<00:28:26.360> like<00:28:26.679> a 00:28:27.029 --> 00:28:27.039 align:start position:0% there you can kind of think of it like a 00:28:27.039 --> 00:28:29.190 align:start position:0% there you can kind of think of it like a PHP<00:28:27.440> distalization<00:28:28.200> Gadget<00:28:28.880> there<00:28:29.000> is<00:28:29.080> a 00:28:29.190 --> 00:28:29.200 align:start position:0% PHP distalization Gadget there is a 00:28:29.200 --> 00:28:30.549 align:start position:0% PHP distalization Gadget there is a bunch<00:28:29.399> of<00:28:29.480> gadgetss<00:28:29.840> everywhere<00:28:30.200> the<00:28:30.279> gadget 00:28:30.549 --> 00:28:30.559 align:start position:0% bunch of gadgetss everywhere the gadget 00:28:30.559 --> 00:28:34.389 align:start position:0% bunch of gadgetss everywhere the gadget is<00:28:30.679> not<00:28:30.799> the<00:28:30.960> bug<00:28:31.679> but<00:28:31.880> if<00:28:32.000> you<00:28:32.200> find<00:28:33.399> unies 00:28:34.389 --> 00:28:34.399 align:start position:0% is not the bug but if you find unies 00:28:34.399 --> 00:28:35.950 align:start position:0% is not the bug but if you find unies arbitrary<00:28:34.799> unies<00:28:35.399> you<00:28:35.480> can<00:28:35.640> reach<00:28:35.799> this 00:28:35.950 --> 00:28:35.960 align:start position:0% arbitrary unies you can reach this 00:28:35.960 --> 00:28:38.549 align:start position:0% arbitrary unies you can reach this gadget<00:28:36.519> and<00:28:36.799> exploit 00:28:38.549 --> 00:28:38.559 align:start position:0% gadget and exploit 00:28:38.559 --> 00:28:41.990 align:start position:0% gadget and exploit it<00:28:39.559> so<00:28:39.720> let's<00:28:39.880> look<00:28:40.039> at<00:28:40.200> some<00:28:40.559> gadgets<00:28:41.559> and 00:28:41.990 --> 00:28:42.000 align:start position:0% it so let's look at some gadgets and 00:28:42.000 --> 00:28:43.950 align:start position:0% it so let's look at some gadgets and here<00:28:42.159> we<00:28:42.279> have<00:28:42.360> a<00:28:42.519> simple<00:28:43.360> uh<00:28:43.679> common 00:28:43.950 --> 00:28:43.960 align:start position:0% here we have a simple uh common 00:28:43.960 --> 00:28:46.029 align:start position:0% here we have a simple uh common injection<00:28:44.559> so<00:28:44.760> we<00:28:44.840> have<00:28:44.960> a<00:28:45.120> command<00:28:45.720> that<00:28:45.840> just 00:28:46.029 --> 00:28:46.039 align:start position:0% injection so we have a command that just 00:28:46.039 --> 00:28:51.110 align:start position:0% injection so we have a command that just do<00:28:47.000> Echo<00:28:48.000> but<00:28:48.320> if<00:28:48.720> the<00:28:49.440> the<00:28:50.440> the<00:28:50.640> key 00:28:51.110 --> 00:28:51.120 align:start position:0% do Echo but if the the the key 00:28:51.120 --> 00:28:53.950 align:start position:0% do Echo but if the the the key additional<00:28:51.559> ARS<00:28:51.919> is<00:28:52.480> is<00:28:52.640> set<00:28:53.200> it<00:28:53.320> will<00:28:53.559> add<00:28:53.799> all 00:28:53.950 --> 00:28:53.960 align:start position:0% additional ARS is is set it will add all 00:28:53.960 --> 00:28:55.590 align:start position:0% additional ARS is is set it will add all the<00:28:54.080> ARs<00:28:54.440> to<00:28:54.600> the 00:28:55.590 --> 00:28:55.600 align:start position:0% the ARs to the 00:28:55.600 --> 00:28:58.350 align:start position:0% the ARs to the command<00:28:56.600> so<00:28:56.760> we<00:28:56.880> can<00:28:57.279> try<00:28:57.480> to<00:28:57.720> start<00:28:58.120> to<00:28:58.200> look 00:28:58.350 --> 00:28:58.360 align:start position:0% command so we can try to start to look 00:28:58.360 --> 00:29:00.149 align:start position:0% command so we can try to start to look in<00:28:58.440> the<00:28:58.600> code<00:28:58.880> and<00:28:59.000> try<00:28:59.200> to<00:28:59.399> find<00:28:59.679> all<00:28:59.880> these 00:29:00.149 --> 00:29:00.159 align:start position:0% in the code and try to find all these 00:29:00.159 --> 00:29:03.269 align:start position:0% in the code and try to find all these places<00:29:00.600> in<00:29:00.679> a<00:29:00.840> code<00:29:01.200> base<00:29:02.200> where<00:29:02.679> this<00:29:02.960> gadget 00:29:03.269 --> 00:29:03.279 align:start position:0% places in a code base where this gadget 00:29:03.279 --> 00:29:04.110 align:start position:0% places in a code base where this gadget can 00:29:04.110 --> 00:29:04.120 align:start position:0% can 00:29:04.120 --> 00:29:06.830 align:start position:0% can exist<00:29:05.120> but<00:29:05.279> this<00:29:05.360> is<00:29:05.480> not<00:29:05.640> the<00:29:05.760> only<00:29:06.000> way<00:29:06.679> uh 00:29:06.830 --> 00:29:06.840 align:start position:0% exist but this is not the only way uh 00:29:06.840 --> 00:29:09.630 align:start position:0% exist but this is not the only way uh you<00:29:06.960> can<00:29:07.120> reach<00:29:07.399> a<00:29:07.600> property<00:29:08.480> in<00:29:08.679> JavaScript 00:29:09.630 --> 00:29:09.640 align:start position:0% you can reach a property in JavaScript 00:29:09.640 --> 00:29:11.509 align:start position:0% you can reach a property in JavaScript look<00:29:09.799> as<00:29:10.000> it<00:29:10.200> as<00:29:10.360> this<00:29:10.519> function<00:29:10.960> it's<00:29:11.200> exactly 00:29:11.509 --> 00:29:11.519 align:start position:0% look as it as this function it's exactly 00:29:11.519 --> 00:29:14.630 align:start position:0% look as it as this function it's exactly the<00:29:11.640> same<00:29:11.919> one<00:29:12.919> but<00:29:13.559> here<00:29:13.760> instead<00:29:14.279> it<00:29:14.360> will 00:29:14.630 --> 00:29:14.640 align:start position:0% the same one but here instead it will 00:29:14.640 --> 00:29:19.269 align:start position:0% the same one but here instead it will extract<00:29:15.480> theal<00:29:16.480> uh<00:29:17.320> property<00:29:17.720> from<00:29:18.279> config 00:29:19.269 --> 00:29:19.279 align:start position:0% extract theal uh property from config 00:29:19.279 --> 00:29:20.509 align:start position:0% extract theal uh property from config but<00:29:19.399> this<00:29:19.519> is<00:29:19.600> not<00:29:19.760> the<00:29:19.840> same<00:29:19.960> syntax<00:29:20.360> as 00:29:20.509 --> 00:29:20.519 align:start position:0% but this is not the same syntax as 00:29:20.519 --> 00:29:22.669 align:start position:0% but this is not the same syntax as before<00:29:21.120> so<00:29:21.279> you<00:29:21.399> can<00:29:21.559> miss<00:29:21.840> this<00:29:21.919> one<00:29:22.360> quite 00:29:22.669 --> 00:29:22.679 align:start position:0% before so you can miss this one quite 00:29:22.679 --> 00:29:28.190 align:start position:0% before so you can miss this one quite easily 00:29:28.190 --> 00:29:28.200 align:start position:0% 00:29:28.200 --> 00:29:30.269 align:start position:0% so<00:29:28.440> there<00:29:28.559> is<00:29:28.679> a<00:29:28.840> bunch<00:29:29.080> of<00:29:29.240> way<00:29:29.440> to<00:29:29.720> access 00:29:30.269 --> 00:29:30.279 align:start position:0% so there is a bunch of way to access 00:29:30.279 --> 00:29:32.470 align:start position:0% so there is a bunch of way to access properties<00:29:30.679> in<00:29:30.960> JavaScript<00:29:31.960> let's<00:29:32.159> create<00:29:32.360> a 00:29:32.470 --> 00:29:32.480 align:start position:0% properties in JavaScript let's create a 00:29:32.480 --> 00:29:35.190 align:start position:0% properties in JavaScript let's create a first<00:29:32.760> object<00:29:33.720> first<00:29:33.960> we<00:29:34.080> can<00:29:34.360> say<00:29:34.640> like<00:29:34.799> we<00:29:35.080> we 00:29:35.190 --> 00:29:35.200 align:start position:0% first object first we can say like we we 00:29:35.200 --> 00:29:37.350 align:start position:0% first object first we can say like we we can<00:29:35.360> do<00:29:35.559> like<00:29:35.679> we<00:29:35.799> did<00:29:36.080> before<00:29:36.399> with<00:29:36.559> object. 00:29:37.350 --> 00:29:37.360 align:start position:0% can do like we did before with object. 00:29:37.360 --> 00:29:41.389 align:start position:0% can do like we did before with object. key<00:29:38.360> object.<00:29:38.880> key<00:29:39.120> with<00:29:39.600> square<00:29:40.279> bracket<00:29:41.279> but 00:29:41.389 --> 00:29:41.399 align:start position:0% key object. key with square bracket but 00:29:41.399 --> 00:29:44.750 align:start position:0% key object. key with square bracket but you<00:29:41.480> can<00:29:41.720> also<00:29:42.120> extract<00:29:42.640> the<00:29:42.799> value<00:29:43.399> using<00:29:44.039> uh 00:29:44.750 --> 00:29:44.760 align:start position:0% you can also extract the value using uh 00:29:44.760 --> 00:29:47.070 align:start position:0% you can also extract the value using uh viable<00:29:45.360> uh<00:29:45.519> object<00:29:45.840> D 00:29:47.070 --> 00:29:47.080 align:start position:0% viable uh object D 00:29:47.080 --> 00:29:49.310 align:start position:0% viable uh object D destructuring<00:29:48.080> you<00:29:48.200> can<00:29:48.360> also<00:29:48.600> do<00:29:48.760> it<00:29:49.039> in<00:29:49.159> a 00:29:49.310 --> 00:29:49.320 align:start position:0% destructuring you can also do it in a 00:29:49.320 --> 00:29:52.230 align:start position:0% destructuring you can also do it in a function 00:29:52.230 --> 00:29:52.240 align:start position:0% 00:29:52.240 --> 00:29:54.549 align:start position:0% argument<00:29:53.240> and<00:29:53.399> you<00:29:53.480> can<00:29:53.640> also<00:29:53.919> check<00:29:54.080> if<00:29:54.200> a<00:29:54.360> key 00:29:54.549 --> 00:29:54.559 align:start position:0% argument and you can also check if a key 00:29:54.559 --> 00:29:56.830 align:start position:0% argument and you can also check if a key is<00:29:54.640> an<00:29:54.880> object<00:29:55.279> with<00:29:55.480> in<00:29:56.039> because<00:29:56.440> sometimes 00:29:56.830 --> 00:29:56.840 align:start position:0% is an object with in because sometimes 00:29:56.840 --> 00:29:58.669 align:start position:0% is an object with in because sometimes in<00:29:57.000> Prototype<00:29:57.440> pollution<00:29:57.720> explo<00:29:58.080> but<00:29:58.559> they 00:29:58.669 --> 00:29:58.679 align:start position:0% in Prototype pollution explo but they 00:29:58.679 --> 00:30:00.590 align:start position:0% in Prototype pollution explo but they will<00:29:58.880> first<00:29:59.159> check<00:29:59.360> if<00:29:59.480> the<00:29:59.600> key<00:29:59.760> is<00:29:59.880> an<00:30:00.080> object 00:30:00.590 --> 00:30:00.600 align:start position:0% will first check if the key is an object 00:30:00.600 --> 00:30:02.630 align:start position:0% will first check if the key is an object before<00:30:01.080> accessing<00:30:01.480> the 00:30:02.630 --> 00:30:02.640 align:start position:0% before accessing the 00:30:02.640 --> 00:30:06.070 align:start position:0% before accessing the key<00:30:03.640> there<00:30:03.760> is<00:30:04.000> also<00:30:04.720> the<00:30:04.919> iteration<00:30:05.760> because 00:30:06.070 --> 00:30:06.080 align:start position:0% key there is also the iteration because 00:30:06.080 --> 00:30:07.750 align:start position:0% key there is also the iteration because if<00:30:06.200> you<00:30:06.320> do<00:30:06.519> this<00:30:06.799> it<00:30:06.880> will<00:30:07.080> iterate<00:30:07.399> over<00:30:07.600> all 00:30:07.750 --> 00:30:07.760 align:start position:0% if you do this it will iterate over all 00:30:07.760 --> 00:30:08.990 align:start position:0% if you do this it will iterate over all the<00:30:07.919> key<00:30:08.080> of<00:30:08.200> an 00:30:08.990 --> 00:30:09.000 align:start position:0% the key of an 00:30:09.000 --> 00:30:11.630 align:start position:0% the key of an object<00:30:10.000> and<00:30:10.200> maybe<00:30:10.440> more<00:30:10.679> if<00:30:10.760> you<00:30:10.919> find<00:30:11.159> more 00:30:11.630 --> 00:30:11.640 align:start position:0% object and maybe more if you find more 00:30:11.640 --> 00:30:14.430 align:start position:0% object and maybe more if you find more uh<00:30:11.760> tell<00:30:11.919> me<00:30:12.760> yeah<00:30:13.080> I<00:30:13.519> I'll<00:30:13.679> just<00:30:13.840> hop<00:30:14.080> in<00:30:14.279> here 00:30:14.430 --> 00:30:14.440 align:start position:0% uh tell me yeah I I'll just hop in here 00:30:14.440 --> 00:30:16.549 align:start position:0% uh tell me yeah I I'll just hop in here real<00:30:14.640> quick<00:30:15.200> and<00:30:15.399> say<00:30:15.720> the<00:30:15.880> times<00:30:16.200> where<00:30:16.399> I've 00:30:16.549 --> 00:30:16.559 align:start position:0% real quick and say the times where I've 00:30:16.559 --> 00:30:19.029 align:start position:0% real quick and say the times where I've seen<00:30:16.919> prototype<00:30:17.440> pollution<00:30:18.440> uh<00:30:18.600> a<00:30:18.720> lot<00:30:18.840> of 00:30:19.029 --> 00:30:19.039 align:start position:0% seen prototype pollution uh a lot of 00:30:19.039 --> 00:30:21.990 align:start position:0% seen prototype pollution uh a lot of times<00:30:19.640> is<00:30:20.320> with<00:30:20.519> this<00:30:20.760> iteration<00:30:21.559> this<00:30:21.760> last 00:30:21.990 --> 00:30:22.000 align:start position:0% times is with this iteration this last 00:30:22.000 --> 00:30:24.549 align:start position:0% times is with this iteration this last one<00:30:22.320> here<00:30:23.039> um<00:30:23.480> the<00:30:23.600> there's<00:30:23.760> a<00:30:23.919> lot<00:30:24.039> of<00:30:24.200> times 00:30:24.549 --> 00:30:24.559 align:start position:0% one here um the there's a lot of times 00:30:24.559 --> 00:30:26.950 align:start position:0% one here um the there's a lot of times where<00:30:25.000> where<00:30:25.200> they'll<00:30:25.559> take<00:30:25.919> some<00:30:26.240> key<00:30:26.760> and 00:30:26.950 --> 00:30:26.960 align:start position:0% where where they'll take some key and 00:30:26.960 --> 00:30:29.549 align:start position:0% where where they'll take some key and then<00:30:27.559> have<00:30:27.760> that<00:30:28.159> you<00:30:28.279> know<00:30:28.559> before<00:30:29.039> and<00:30:29.159> then 00:30:29.549 --> 00:30:29.559 align:start position:0% then have that you know before and then 00:30:29.559 --> 00:30:31.909 align:start position:0% then have that you know before and then iterate<00:30:30.080> over<00:30:30.720> all<00:30:30.880> of<00:30:31.039> the<00:30:31.279> keys<00:30:31.600> in<00:30:31.720> an 00:30:31.909 --> 00:30:31.919 align:start position:0% iterate over all of the keys in an 00:30:31.919 --> 00:30:33.710 align:start position:0% iterate over all of the keys in an object<00:30:32.399> and<00:30:32.519> allow<00:30:32.760> you<00:30:32.919> to<00:30:33.200> inject<00:30:33.519> into 00:30:33.710 --> 00:30:33.720 align:start position:0% object and allow you to inject into 00:30:33.720 --> 00:30:35.110 align:start position:0% object and allow you to inject into those<00:30:33.880> so<00:30:34.039> you<00:30:34.320> for<00:30:34.480> the<00:30:34.600> first<00:30:34.799> key<00:30:35.000> you 00:30:35.110 --> 00:30:35.120 align:start position:0% those so you for the first key you 00:30:35.120 --> 00:30:37.870 align:start position:0% those so you for the first key you provide<00:30:35.480> underscore<00:30:35.880> uncore<00:30:36.279> Proto<00:30:37.080> and<00:30:37.240> then 00:30:37.870 --> 00:30:37.880 align:start position:0% provide underscore uncore Proto and then 00:30:37.880 --> 00:30:39.430 align:start position:0% provide underscore uncore Proto and then the<00:30:38.200> following<00:30:38.559> thing<00:30:38.760> that<00:30:38.840> it<00:30:38.960> iterates 00:30:39.430 --> 00:30:39.440 align:start position:0% the following thing that it iterates 00:30:39.440 --> 00:30:42.590 align:start position:0% the following thing that it iterates over<00:30:40.399> um<00:30:40.760> you<00:30:40.919> can<00:30:41.120> specify<00:30:41.600> whatever<00:30:42.399> uh 00:30:42.590 --> 00:30:42.600 align:start position:0% over um you can specify whatever uh 00:30:42.600 --> 00:30:44.590 align:start position:0% over um you can specify whatever uh objects<00:30:43.120> within<00:30:43.440> that<00:30:43.679> so<00:30:44.080> definitely<00:30:44.360> be<00:30:44.480> on 00:30:44.590 --> 00:30:44.600 align:start position:0% objects within that so definitely be on 00:30:44.600 --> 00:30:46.269 align:start position:0% objects within that so definitely be on the<00:30:44.679> lookout<00:30:45.000> for<00:30:45.159> that<00:30:45.279> sort<00:30:45.480> of<00:30:45.640> syntax<00:30:46.120> as 00:30:46.269 --> 00:30:46.279 align:start position:0% the lookout for that sort of syntax as 00:30:46.279 --> 00:30:49.389 align:start position:0% the lookout for that sort of syntax as well<00:30:46.640> and<00:30:46.799> then<00:30:47.200> um<00:30:48.200> uh<00:30:48.440> also<00:30:48.720> any<00:30:48.919> references 00:30:49.389 --> 00:30:49.399 align:start position:0% well and then um uh also any references 00:30:49.399 --> 00:30:53.149 align:start position:0% well and then um uh also any references to<00:30:49.640> like<00:30:50.240> um<00:30:50.559> object.<00:30:51.159> keys<00:30:52.080> or<00:30:52.279> whatever<00:30:52.960> um 00:30:53.149 --> 00:30:53.159 align:start position:0% to like um object. keys or whatever um 00:30:53.159 --> 00:30:55.950 align:start position:0% to like um object. keys or whatever um to<00:30:53.360> get<00:30:53.519> the<00:30:53.880> actual<00:30:54.880> um<00:30:55.200> string<00:30:55.559> version<00:30:55.840> of 00:30:55.950 --> 00:30:55.960 align:start position:0% to get the actual um string version of 00:30:55.960 --> 00:30:59.750 align:start position:0% to get the actual um string version of the<00:30:56.120> keys<00:30:56.480> for<00:30:56.639> an<00:30:56.840> object 00:30:59.750 --> 00:30:59.760 align:start position:0% the keys for an object 00:30:59.760 --> 00:31:02.430 align:start position:0% the keys for an object so<00:31:00.039> let's<00:31:00.279> look<00:31:00.399> at<00:31:00.559> a<00:31:00.919> tiny<00:31:01.240> example<00:31:02.120> this<00:31:02.240> is 00:31:02.430 --> 00:31:02.440 align:start position:0% so let's look at a tiny example this is 00:31:02.440 --> 00:31:04.669 align:start position:0% so let's look at a tiny example this is the<00:31:02.760> simple<00:31:03.120> hello<00:31:03.399> world<00:31:03.679> from 00:31:04.669 --> 00:31:04.679 align:start position:0% the simple hello world from 00:31:04.679 --> 00:31:07.190 align:start position:0% the simple hello world from Express<00:31:05.679> but<00:31:05.799> if<00:31:05.960> you<00:31:06.039> look<00:31:06.279> at<00:31:06.519> using<00:31:06.880> clock 00:31:07.190 --> 00:31:07.200 align:start position:0% Express but if you look at using clock 00:31:07.200 --> 00:31:10.350 align:start position:0% Express but if you look at using clock to<00:31:07.399> count<00:31:07.840> to<00:31:08.080> count<00:31:08.480> the<00:31:08.880> line<00:31:09.080> of<00:31:09.240> codes<00:31:10.200> we 00:31:10.350 --> 00:31:10.360 align:start position:0% to count to count the line of codes we 00:31:10.360 --> 00:31:13.470 align:start position:0% to count to count the line of codes we see<00:31:10.679> there's<00:31:10.960> already<00:31:11.399> like<00:31:12.159> 177,000<00:31:13.159> line<00:31:13.320> of 00:31:13.470 --> 00:31:13.480 align:start position:0% see there's already like 177,000 line of 00:31:13.480 --> 00:31:15.149 align:start position:0% see there's already like 177,000 line of code<00:31:13.720> in<00:31:13.880> this<00:31:14.080> simple<00:31:14.480> project<00:31:14.840> because<00:31:15.039> of 00:31:15.149 --> 00:31:15.159 align:start position:0% code in this simple project because of 00:31:15.159 --> 00:31:19.029 align:start position:0% code in this simple project because of no<00:31:15.559> modules<00:31:16.559> so<00:31:16.720> this<00:31:16.840> is<00:31:17.080> crazy<00:31:18.039> and<00:31:18.799> there<00:31:18.919> is 00:31:19.029 --> 00:31:19.039 align:start position:0% no modules so this is crazy and there is 00:31:19.039 --> 00:31:20.509 align:start position:0% no modules so this is crazy and there is a<00:31:19.159> bunch<00:31:19.399> of<00:31:19.519> code<00:31:19.720> to<00:31:19.880> edit<00:31:20.120> if<00:31:20.200> you<00:31:20.320> want<00:31:20.440> to 00:31:20.509 --> 00:31:20.519 align:start position:0% a bunch of code to edit if you want to 00:31:20.519 --> 00:31:23.590 align:start position:0% a bunch of code to edit if you want to find<00:31:20.720> a<00:31:20.880> gadget<00:31:21.279> over<00:31:21.559> there<00:31:22.200> it<00:31:22.320> will<00:31:22.720> take<00:31:22.960> us 00:31:23.590 --> 00:31:23.600 align:start position:0% find a gadget over there it will take us 00:31:23.600 --> 00:31:26.909 align:start position:0% find a gadget over there it will take us uh<00:31:23.919> hours<00:31:24.440> just<00:31:24.600> to<00:31:25.039> go<00:31:25.200> around<00:31:25.559> all<00:31:25.799> this 00:31:26.909 --> 00:31:26.919 align:start position:0% uh hours just to go around all this 00:31:26.919 --> 00:31:29.230 align:start position:0% uh hours just to go around all this code<00:31:27.919> so<00:31:28.080> we're<00:31:28.279> going<00:31:28.399> to<00:31:28.519> need<00:31:28.639> some<00:31:28.799> tooling 00:31:29.230 --> 00:31:29.240 align:start position:0% code so we're going to need some tooling 00:31:29.240 --> 00:31:31.669 align:start position:0% code so we're going to need some tooling to<00:31:29.360> do<00:31:29.600> this<00:31:29.840> research<00:31:30.200> for<00:31:30.399> gadgets<00:31:30.799> for 00:31:31.669 --> 00:31:31.679 align:start position:0% to do this research for gadgets for 00:31:31.679 --> 00:31:34.230 align:start position:0% to do this research for gadgets for ourselves<00:31:32.679> so<00:31:32.840> the<00:31:32.960> first<00:31:33.200> idea<00:31:33.480> was<00:31:33.720> yeah<00:31:34.080> do 00:31:34.230 --> 00:31:34.240 align:start position:0% ourselves so the first idea was yeah do 00:31:34.240 --> 00:31:37.230 align:start position:0% ourselves so the first idea was yeah do it<00:31:34.639> by<00:31:34.840> end<00:31:35.440> no<00:31:35.720> it's<00:31:36.080> not<00:31:36.279> doable<00:31:36.919> way<00:31:37.080> too 00:31:37.230 --> 00:31:37.240 align:start position:0% it by end no it's not doable way too 00:31:37.240 --> 00:31:38.070 align:start position:0% it by end no it's not doable way too much 00:31:38.070 --> 00:31:38.080 align:start position:0% much 00:31:38.080 --> 00:31:40.549 align:start position:0% much stuff<00:31:39.080> so<00:31:39.240> my<00:31:39.399> first<00:31:39.600> idea<00:31:39.880> was<00:31:40.159> okay<00:31:40.360> I<00:31:40.480> just 00:31:40.549 --> 00:31:40.559 align:start position:0% stuff so my first idea was okay I just 00:31:40.559 --> 00:31:42.950 align:start position:0% stuff so my first idea was okay I just need<00:31:40.720> to<00:31:40.919> patch<00:31:41.159> V8<00:31:41.559> engine<00:31:42.320> so<00:31:42.519> I<00:31:42.639> can<00:31:42.799> just 00:31:42.950 --> 00:31:42.960 align:start position:0% need to patch V8 engine so I can just 00:31:42.960 --> 00:31:44.669 align:start position:0% need to patch V8 engine so I can just detect<00:31:43.279> when<00:31:43.399> a<00:31:43.519> property<00:31:43.880> is<00:31:44.000> undefined<00:31:44.440> is 00:31:44.669 --> 00:31:44.679 align:start position:0% detect when a property is undefined is 00:31:44.679 --> 00:31:47.509 align:start position:0% detect when a property is undefined is accessed<00:31:45.679> and<00:31:45.840> maybe<00:31:46.480> can<00:31:46.679> L<00:31:46.880> out<00:31:47.200> some 00:31:47.509 --> 00:31:47.519 align:start position:0% accessed and maybe can L out some 00:31:47.519 --> 00:31:49.269 align:start position:0% accessed and maybe can L out some information<00:31:48.039> for 00:31:49.269 --> 00:31:49.279 align:start position:0% information for 00:31:49.279 --> 00:31:52.710 align:start position:0% information for me<00:31:50.279> so<00:31:50.519> this<00:31:50.639> was<00:31:50.760> a<00:31:50.880> good<00:31:51.120> idea<00:31:52.120> until<00:31:52.360> I<00:31:52.480> open 00:31:52.710 --> 00:31:52.720 align:start position:0% me so this was a good idea until I open 00:31:52.720 --> 00:31:54.430 align:start position:0% me so this was a good idea until I open the<00:31:52.840> code<00:31:53.000> of<00:31:53.159> V8<00:31:53.519> and<00:31:53.919> understand<00:31:54.120> like<00:31:54.320> this 00:31:54.430 --> 00:31:54.440 align:start position:0% the code of V8 and understand like this 00:31:54.440 --> 00:31:56.950 align:start position:0% the code of V8 and understand like this is<00:31:55.080> this<00:31:55.200> is<00:31:55.440> way<00:31:55.639> too<00:31:55.799> much<00:31:56.120> code<00:31:56.720> this<00:31:56.840> is 00:31:56.950 --> 00:31:56.960 align:start position:0% is this is way too much code this is 00:31:56.960 --> 00:31:58.950 align:start position:0% is this is way too much code this is even<00:31:57.159> more<00:31:57.360> code<00:31:57.559> than<00:31:57.960> for<00:31:58.279> and<00:31:58.399> it's<00:31:58.600> way<00:31:58.760> too 00:31:58.950 --> 00:31:58.960 align:start position:0% even more code than for and it's way too 00:31:58.960 --> 00:32:00.549 align:start position:0% even more code than for and it's way too complicated<00:31:59.519> there<00:31:59.600> is<00:31:59.760> just<00:31:59.960> in<00:32:00.159> time 00:32:00.549 --> 00:32:00.559 align:start position:0% complicated there is just in time 00:32:00.559 --> 00:32:03.389 align:start position:0% complicated there is just in time optimization<00:32:01.559> there<00:32:01.720> is<00:32:02.440> everything<00:32:03.200> like 00:32:03.389 --> 00:32:03.399 align:start position:0% optimization there is everything like 00:32:03.399 --> 00:32:07.389 align:start position:0% optimization there is everything like it's<00:32:04.320> way<00:32:04.480> too<00:32:04.720> big<00:32:05.080> of<00:32:05.159> a<00:32:05.360> project<00:32:05.639> to<00:32:06.200> do<00:32:07.200> so 00:32:07.389 --> 00:32:07.399 align:start position:0% it's way too big of a project to do so 00:32:07.399 --> 00:32:08.669 align:start position:0% it's way too big of a project to do so the<00:32:07.480> other<00:32:07.679> idea<00:32:07.960> was<00:32:08.080> to<00:32:08.200> do<00:32:08.399> code 00:32:08.669 --> 00:32:08.679 align:start position:0% the other idea was to do code 00:32:08.679 --> 00:32:10.710 align:start position:0% the other idea was to do code instrumentation<00:32:09.679> take<00:32:09.880> the<00:32:10.000> code<00:32:10.279> modify<00:32:10.600> it 00:32:10.710 --> 00:32:10.720 align:start position:0% instrumentation take the code modify it 00:32:10.720 --> 00:32:12.789 align:start position:0% instrumentation take the code modify it in<00:32:10.799> a<00:32:10.960> way<00:32:11.519> uh<00:32:11.639> so<00:32:11.760> you<00:32:11.880> can<00:32:12.039> get<00:32:12.159> the<00:32:12.480> output 00:32:12.789 --> 00:32:12.799 align:start position:0% in a way uh so you can get the output 00:32:12.799 --> 00:32:13.509 align:start position:0% in a way uh so you can get the output you 00:32:13.509 --> 00:32:13.519 align:start position:0% you 00:32:13.519 --> 00:32:16.509 align:start position:0% you want<00:32:14.519> so<00:32:14.760> my<00:32:14.960> other<00:32:15.200> idea<00:32:15.519> was<00:32:15.639> to<00:32:15.840> proxify 00:32:16.509 --> 00:32:16.519 align:start position:0% want so my other idea was to proxify 00:32:16.519 --> 00:32:20.269 align:start position:0% want so my other idea was to proxify every<00:32:16.760> object<00:32:17.120> created<00:32:17.960> and<00:32:18.519> to<00:32:19.519> find<00:32:20.039> access 00:32:20.269 --> 00:32:20.279 align:start position:0% every object created and to find access 00:32:20.279 --> 00:32:22.389 align:start position:0% every object created and to find access to<00:32:20.480> keys<00:32:21.039> not<00:32:21.200> yet<00:32:21.360> defined<00:32:21.720> and<00:32:21.880> stuff<00:32:22.080> like 00:32:22.389 --> 00:32:22.399 align:start position:0% to keys not yet defined and stuff like 00:32:22.399 --> 00:32:25.509 align:start position:0% to keys not yet defined and stuff like that<00:32:23.399> but<00:32:23.639> proxify<00:32:24.120> every<00:32:24.399> object<00:32:25.200> doesn't 00:32:25.509 --> 00:32:25.519 align:start position:0% that but proxify every object doesn't 00:32:25.519 --> 00:32:27.990 align:start position:0% that but proxify every object doesn't work<00:32:25.799> very<00:32:26.000> well<00:32:26.240> because<00:32:26.440> a<00:32:26.559> lot<00:32:26.679> of<00:32:27.200> apis 00:32:27.990 --> 00:32:28.000 align:start position:0% work very well because a lot of apis 00:32:28.000 --> 00:32:29.789 align:start position:0% work very well because a lot of apis just<00:32:28.320> break<00:32:28.720> when<00:32:28.840> you<00:32:28.919> send<00:32:29.120> a<00:32:29.279> proxy<00:32:29.600> instead 00:32:29.789 --> 00:32:29.799 align:start position:0% just break when you send a proxy instead 00:32:29.799 --> 00:32:31.909 align:start position:0% just break when you send a proxy instead of<00:32:29.880> a<00:32:30.000> real<00:32:30.240> object<00:32:31.120> especially<00:32:31.600> the<00:32:31.679> low 00:32:31.909 --> 00:32:31.919 align:start position:0% of a real object especially the low 00:32:31.919 --> 00:32:33.830 align:start position:0% of a real object especially the low level<00:32:32.159> one<00:32:32.360> from<00:32:32.519> the 00:32:33.830 --> 00:32:33.840 align:start position:0% level one from the 00:32:33.840 --> 00:32:37.710 align:start position:0% level one from the GS<00:32:34.840> so<00:32:35.080> my<00:32:35.360> idea<00:32:35.600> was<00:32:35.679> to<00:32:35.799> make<00:32:36.080> oops<00:32:37.080> and<00:32:37.360> this 00:32:37.710 --> 00:32:37.720 align:start position:0% GS so my idea was to make oops and this 00:32:37.720 --> 00:32:39.269 align:start position:0% GS so my idea was to make oops and this actually 00:32:39.269 --> 00:32:39.279 align:start position:0% actually 00:32:39.279 --> 00:32:42.909 align:start position:0% actually worked<00:32:40.279> so<00:32:40.639> what<00:32:41.000> what<00:32:41.120> are<00:32:41.200> we<00:32:41.360> going<00:32:41.639> to<00:32:41.919> do 00:32:42.909 --> 00:32:42.919 align:start position:0% worked so what what are we going to do 00:32:42.919 --> 00:32:44.549 align:start position:0% worked so what what are we going to do uh<00:32:43.080> we're<00:32:43.240> going<00:32:43.320> to<00:32:43.600> pass<00:32:43.799> the<00:32:43.960> Javascript 00:32:44.549 --> 00:32:44.559 align:start position:0% uh we're going to pass the Javascript 00:32:44.559 --> 00:32:47.909 align:start position:0% uh we're going to pass the Javascript file<00:32:45.559> uh<00:32:45.720> proxify<00:32:46.200> an<00:32:46.399> object<00:32:47.360> let<00:32:47.519> me<00:32:47.799> just 00:32:47.909 --> 00:32:47.919 align:start position:0% file uh proxify an object let me just 00:32:47.919 --> 00:32:50.669 align:start position:0% file uh proxify an object let me just show<00:32:48.120> you<00:32:48.480> real 00:32:50.669 --> 00:32:50.679 align:start position:0% show you real 00:32:50.679 --> 00:32:54.310 align:start position:0% show you real quick<00:32:51.679> yeah<00:32:51.880> this<00:32:52.000> is<00:32:52.080> a<00:32:52.320> super<00:32:52.760> cool<00:32:53.760> thing 00:32:54.310 --> 00:32:54.320 align:start position:0% quick yeah this is a super cool thing 00:32:54.320 --> 00:32:57.629 align:start position:0% quick yeah this is a super cool thing yeah<00:32:54.880> being<00:32:55.120> able<00:32:55.320> to<00:32:55.480> use<00:32:55.799> the<00:32:56.320> the<00:32:56.880> proxy<00:32:57.240> API 00:32:57.629 --> 00:32:57.639 align:start position:0% yeah being able to use the the proxy API 00:32:57.639 --> 00:32:58.710 align:start position:0% yeah being able to use the the proxy API here 00:32:58.710 --> 00:32:58.720 align:start position:0% here 00:32:58.720 --> 00:33:00.990 align:start position:0% here so<00:32:58.880> we<00:32:59.000> can<00:32:59.120> create<00:32:59.320> a<00:32:59.519> proxy<00:33:00.440> uh<00:33:00.679> this<00:33:00.799> will 00:33:00.990 --> 00:33:01.000 align:start position:0% so we can create a proxy uh this will 00:33:01.000 --> 00:33:02.950 align:start position:0% so we can create a proxy uh this will proxify<00:33:01.519> this 00:33:02.950 --> 00:33:02.960 align:start position:0% proxify this 00:33:02.960 --> 00:33:05.470 align:start position:0% proxify this object<00:33:03.960> and<00:33:04.159> we<00:33:04.279> can<00:33:04.559> have<00:33:04.840> some<00:33:05.120> geta 00:33:05.470 --> 00:33:05.480 align:start position:0% object and we can have some geta 00:33:05.480 --> 00:33:07.629 align:start position:0% object and we can have some geta function<00:33:06.039> and<00:33:06.200> we<00:33:06.360> have<00:33:06.559> the<00:33:06.720> target<00:33:07.440> the 00:33:07.629 --> 00:33:07.639 align:start position:0% function and we have the target the 00:33:07.639 --> 00:33:10.389 align:start position:0% function and we have the target the object<00:33:08.159> and<00:33:08.360> the<00:33:08.559> key<00:33:09.480> and<00:33:09.639> what<00:33:09.799> we<00:33:09.919> can<00:33:10.080> do<00:33:10.279> we 00:33:10.389 --> 00:33:10.399 align:start position:0% object and the key and what we can do we 00:33:10.399 --> 00:33:11.149 align:start position:0% object and the key and what we can do we can 00:33:11.149 --> 00:33:11.159 align:start position:0% can 00:33:11.159 --> 00:33:15.509 align:start position:0% can console.log<00:33:12.159> uh<00:33:12.720> Target 00:33:15.509 --> 00:33:15.519 align:start position:0% console.log uh Target 00:33:15.519 --> 00:33:18.269 align:start position:0% console.log uh Target key<00:33:16.720> and 00:33:18.269 --> 00:33:18.279 align:start position:0% key and 00:33:18.279 --> 00:33:22.310 align:start position:0% key and return<00:33:19.360> reflected<00:33:20.360> get 00:33:22.310 --> 00:33:22.320 align:start position:0% return reflected get 00:33:22.320 --> 00:33:24.669 align:start position:0% return reflected get Target<00:33:23.320> if<00:33:23.440> you<00:33:23.559> can<00:33:23.760> guess<00:33:23.960> I've<00:33:24.120> done<00:33:24.320> this<00:33:24.559> a 00:33:24.669 --> 00:33:24.679 align:start position:0% Target if you can guess I've done this a 00:33:24.679 --> 00:33:26.750 align:start position:0% Target if you can guess I've done this a couple<00:33:24.880> of<00:33:25.000> time 00:33:26.750 --> 00:33:26.760 align:start position:0% couple of time 00:33:26.760 --> 00:33:29.710 align:start position:0% couple of time already<00:33:27.799> I<00:33:28.000> do<00:33:28.200> I'm<00:33:28.360> missing<00:33:28.639> a<00:33:28.840> parenthesis 00:33:29.710 --> 00:33:29.720 align:start position:0% already I do I'm missing a parenthesis 00:33:29.720 --> 00:33:34.350 align:start position:0% already I do I'm missing a parenthesis somewhere<00:33:30.720> I'm<00:33:30.919> like<00:33:31.519> flexing<00:33:32.519> get<00:33:32.720> Target 00:33:34.350 --> 00:33:34.360 align:start position:0% somewhere I'm like flexing get Target 00:33:34.360 --> 00:33:40.509 align:start position:0% somewhere I'm like flexing get Target look<00:33:35.360> looks<00:33:35.840> good<00:33:36.000> to 00:33:40.509 --> 00:33:40.519 align:start position:0% 00:33:40.519 --> 00:33:44.789 align:start position:0% me<00:33:41.519> I'm<00:33:41.679> missing<00:33:41.960> something<00:33:42.399> expected 00:33:44.789 --> 00:33:44.799 align:start position:0% me I'm missing something expected 00:33:44.799 --> 00:33:49.310 align:start position:0% me I'm missing something expected token<00:33:45.799> oh<00:33:45.919> maybe<00:33:46.159> it<00:33:46.240> doesn't<00:33:46.480> like<00:33:46.639> the<00:33:46.760> semic 00:33:49.310 --> 00:33:49.320 align:start position:0% token oh maybe it doesn't like the semic 00:33:49.320 --> 00:33:53.750 align:start position:0% token oh maybe it doesn't like the semic no<00:33:50.320> over<00:33:50.679> there<00:33:51.679> oh<00:33:51.880> I'm<00:33:52.000> missing<00:33:52.399> one 00:33:53.750 --> 00:33:53.760 align:start position:0% no over there oh I'm missing one 00:33:53.760 --> 00:33:56.710 align:start position:0% no over there oh I'm missing one yeah<00:33:54.760> yeah<00:33:55.120> okay<00:33:55.519> okay<00:33:55.919> and<00:33:56.039> now<00:33:56.159> if<00:33:56.240> I<00:33:56.360> try<00:33:56.519> to 00:33:56.710 --> 00:33:56.720 align:start position:0% yeah yeah okay okay and now if I try to 00:33:56.720 --> 00:33:59.190 align:start position:0% yeah yeah okay okay and now if I try to access<00:33:57.000> a<00:33:57.240> key<00:33:57.519> on<00:33:58.000> this 00:33:59.190 --> 00:33:59.200 align:start position:0% access a key on this 00:33:59.200 --> 00:34:02.029 align:start position:0% access a key on this one<00:34:00.200> I<00:34:00.360> got<00:34:00.600> my<00:34:00.720> log<00:34:00.960> function<00:34:01.320> so<00:34:01.440> I<00:34:01.559> can<00:34:01.720> log 00:34:02.029 --> 00:34:02.039 align:start position:0% one I got my log function so I can log 00:34:02.039 --> 00:34:05.110 align:start position:0% one I got my log function so I can log every<00:34:02.320> access<00:34:02.559> to<00:34:02.720> an<00:34:02.960> object<00:34:03.960> and<00:34:04.639> get<00:34:04.840> is<00:34:05.000> one 00:34:05.110 --> 00:34:05.120 align:start position:0% every access to an object and get is one 00:34:05.120 --> 00:34:06.669 align:start position:0% every access to an object and get is one of<00:34:05.279> the<00:34:05.399> ook<00:34:05.760> but<00:34:05.840> there<00:34:05.919> was<00:34:06.039> a<00:34:06.159> bunch<00:34:06.360> of<00:34:06.480> them 00:34:06.669 --> 00:34:06.679 align:start position:0% of the ook but there was a bunch of them 00:34:06.679 --> 00:34:08.430 align:start position:0% of the ook but there was a bunch of them you<00:34:06.760> can<00:34:07.000> ook<00:34:07.279> set<00:34:07.519> you<00:34:07.600> can<00:34:07.760> ook<00:34:08.000> call<00:34:08.200> you<00:34:08.280> can 00:34:08.430 --> 00:34:08.440 align:start position:0% you can ook set you can ook call you can 00:34:08.440 --> 00:34:10.589 align:start position:0% you can ook set you can ook call you can ook<00:34:08.720> whatever<00:34:09.000> you<00:34:09.079> want<00:34:09.280> on<00:34:09.399> the<00:34:09.560> object<00:34:10.520> and 00:34:10.589 --> 00:34:10.599 align:start position:0% ook whatever you want on the object and 00:34:10.599 --> 00:34:12.589 align:start position:0% ook whatever you want on the object and you<00:34:10.720> can<00:34:10.879> know<00:34:11.320> how<00:34:11.520> the<00:34:11.639> object<00:34:11.919> is<00:34:12.040> used<00:34:12.440> it's 00:34:12.589 --> 00:34:12.599 align:start position:0% you can know how the object is used it's 00:34:12.599 --> 00:34:14.950 align:start position:0% you can know how the object is used it's super<00:34:12.839> useful<00:34:13.200> when<00:34:13.320> you're<00:34:13.480> doing<00:34:13.960> debugging 00:34:14.950 --> 00:34:14.960 align:start position:0% super useful when you're doing debugging 00:34:14.960 --> 00:34:16.270 align:start position:0% super useful when you're doing debugging because<00:34:15.320> if<00:34:15.399> you<00:34:15.520> want<00:34:15.639> to<00:34:15.800> know<00:34:16.079> what's 00:34:16.270 --> 00:34:16.280 align:start position:0% because if you want to know what's 00:34:16.280 --> 00:34:18.109 align:start position:0% because if you want to know what's happening<00:34:16.760> when<00:34:16.879> you<00:34:17.079> for<00:34:17.240> example<00:34:17.919> do 00:34:18.109 --> 00:34:18.119 align:start position:0% happening when you for example do 00:34:18.119 --> 00:34:20.550 align:start position:0% happening when you for example do console<00:34:18.480> log<00:34:19.359> and<00:34:19.440> you<00:34:19.560> can<00:34:19.800> pass<00:34:20.040> your<00:34:20.200> object 00:34:20.550 --> 00:34:20.560 align:start position:0% console log and you can pass your object 00:34:20.560 --> 00:34:22.149 align:start position:0% console log and you can pass your object and<00:34:20.639> see<00:34:20.800> if<00:34:20.960> there<00:34:21.040> is<00:34:21.200> like<00:34:21.399> weird<00:34:21.760> stuff 00:34:22.149 --> 00:34:22.159 align:start position:0% and see if there is like weird stuff 00:34:22.159 --> 00:34:24.310 align:start position:0% and see if there is like weird stuff being<00:34:22.639> accessed<00:34:23.040> on<00:34:23.200> the 00:34:24.310 --> 00:34:24.320 align:start position:0% being accessed on the 00:34:24.320 --> 00:34:28.470 align:start position:0% being accessed on the object<00:34:25.320> it's<00:34:25.440> a<00:34:25.639> good<00:34:25.839> way<00:34:26.079> to<00:34:27.000> quickly<00:34:27.760> check 00:34:28.470 --> 00:34:28.480 align:start position:0% object it's a good way to quickly check 00:34:28.480 --> 00:34:30.430 align:start position:0% object it's a good way to quickly check uh<00:34:28.639> an<00:34:28.800> API<00:34:29.240> to<00:34:29.399> know<00:34:29.679> what's<00:34:29.839> happening<00:34:30.200> there 00:34:30.430 --> 00:34:30.440 align:start position:0% uh an API to know what's happening there 00:34:30.440 --> 00:34:33.069 align:start position:0% uh an API to know what's happening there this<00:34:31.000> and<00:34:31.359> that<00:34:31.520> first<00:34:31.800> parameter<00:34:32.359> there<00:34:32.879> you 00:34:33.069 --> 00:34:33.079 align:start position:0% this and that first parameter there you 00:34:33.079 --> 00:34:34.869 align:start position:0% this and that first parameter there you passed<00:34:33.320> in<00:34:33.440> an<00:34:33.560> empty<00:34:33.960> object<00:34:34.440> that's<00:34:34.679> the 00:34:34.869 --> 00:34:34.879 align:start position:0% passed in an empty object that's the 00:34:34.879 --> 00:34:36.950 align:start position:0% passed in an empty object that's the object<00:34:35.119> that<00:34:35.200> you're<00:34:35.359> proxying<00:34:36.359> yeah<00:34:36.679> you<00:34:36.760> can 00:34:36.950 --> 00:34:36.960 align:start position:0% object that you're proxying yeah you can 00:34:36.960 --> 00:34:39.230 align:start position:0% object that you're proxying yeah you can pass<00:34:37.240> whatever<00:34:37.480> you<00:34:37.599> want<00:34:37.800> over<00:34:38.040> there<00:34:38.879> okay 00:34:39.230 --> 00:34:39.240 align:start position:0% pass whatever you want over there okay 00:34:39.240 --> 00:34:41.230 align:start position:0% pass whatever you want over there okay and<00:34:39.399> then<00:34:39.679> anytime<00:34:40.000> a<00:34:40.159> getter<00:34:40.440> is<00:34:40.599> triggered 00:34:41.230 --> 00:34:41.240 align:start position:0% and then anytime a getter is triggered 00:34:41.240 --> 00:34:43.349 align:start position:0% and then anytime a getter is triggered that<00:34:41.560> get<00:34:41.839> will<00:34:42.440> run<00:34:42.720> the<00:34:42.800> target<00:34:43.119> will<00:34:43.240> be 00:34:43.349 --> 00:34:43.359 align:start position:0% that get will run the target will be 00:34:43.359 --> 00:34:46.230 align:start position:0% that get will run the target will be this<00:34:43.520> subject<00:34:44.440> okay<00:34:45.079> the<00:34:45.280> key<00:34:45.480> will<00:34:45.679> be<00:34:46.040> the 00:34:46.230 --> 00:34:46.240 align:start position:0% this subject okay the key will be the 00:34:46.240 --> 00:34:47.950 align:start position:0% this subject okay the key will be the the<00:34:46.359> key<00:34:46.520> you're<00:34:46.720> accessing<00:34:47.639> sometimes<00:34:47.839> it's 00:34:47.950 --> 00:34:47.960 align:start position:0% the key you're accessing sometimes it's 00:34:47.960 --> 00:34:49.629 align:start position:0% the key you're accessing sometimes it's a<00:34:48.119> key<00:34:48.320> sometime<00:34:48.720> it's 00:34:49.629 --> 00:34:49.639 align:start position:0% a key sometime it's 00:34:49.639 --> 00:34:52.109 align:start position:0% a key sometime it's um<00:34:50.639> it<00:34:50.760> can<00:34:50.919> be<00:34:51.040> a<00:34:51.119> symbol<00:34:51.440> or<00:34:51.560> something<00:34:51.919> like 00:34:52.109 --> 00:34:52.119 align:start position:0% um it can be a symbol or something like 00:34:52.119 --> 00:34:55.790 align:start position:0% um it can be a symbol or something like that<00:34:52.639> or 00:34:55.790 --> 00:34:55.800 align:start position:0% 00:34:55.800 --> 00:34:59.790 align:start position:0% in<00:34:56.800> uh<00:34:57.119> yes<00:34:57.960> so<00:34:58.359> this<00:34:58.480> is<00:34:58.760> yeah<00:34:58.960> this<00:34:59.040> is<00:34:59.240> how<00:34:59.520> do 00:34:59.790 --> 00:34:59.800 align:start position:0% in uh yes so this is yeah this is how do 00:34:59.800 --> 00:35:02.870 align:start position:0% in uh yes so this is yeah this is how do Vader<00:35:00.160> works<00:35:00.720> it's<00:35:00.920> basically<00:35:01.359> proxying<00:35:02.119> the 00:35:02.870 --> 00:35:02.880 align:start position:0% Vader works it's basically proxying the 00:35:02.880 --> 00:35:05.510 align:start position:0% Vader works it's basically proxying the the<00:35:03.560> classic<00:35:03.960> object<00:35:04.240> you<00:35:04.480> have<00:35:04.640> in<00:35:04.800> your<00:35:05.359> web 00:35:05.510 --> 00:35:05.520 align:start position:0% the classic object you have in your web 00:35:05.520 --> 00:35:08.310 align:start position:0% the classic object you have in your web browser<00:35:06.400> and<00:35:07.119> so<00:35:07.359> they<00:35:07.480> can<00:35:07.640> know<00:35:08.119> when<00:35:08.240> you 00:35:08.310 --> 00:35:08.320 align:start position:0% browser and so they can know when you 00:35:08.320 --> 00:35:09.870 align:start position:0% browser and so they can know when you are<00:35:08.480> accessing<00:35:08.800> it<00:35:09.000> and<00:35:09.119> they<00:35:09.240> can<00:35:09.359> know<00:35:09.599> what 00:35:09.870 --> 00:35:09.880 align:start position:0% are accessing it and they can know what 00:35:09.880 --> 00:35:10.990 align:start position:0% are accessing it and they can know what parameter<00:35:10.280> you<00:35:10.400> are<00:35:10.520> passing<00:35:10.760> to<00:35:10.880> the 00:35:10.990 --> 00:35:11.000 align:start position:0% parameter you are passing to the 00:35:11.000 --> 00:35:13.109 align:start position:0% parameter you are passing to the function<00:35:11.480> they<00:35:11.560> can<00:35:11.680> know<00:35:11.960> everything<00:35:12.960> and 00:35:13.109 --> 00:35:13.119 align:start position:0% function they can know everything and 00:35:13.119 --> 00:35:15.030 align:start position:0% function they can know everything and the<00:35:13.359> object<00:35:13.599> is<00:35:13.720> still<00:35:13.920> working<00:35:14.280> mostly<00:35:14.599> the 00:35:15.030 --> 00:35:15.040 align:start position:0% the object is still working mostly the 00:35:15.040 --> 00:35:17.630 align:start position:0% the object is still working mostly the same<00:35:16.040> one<00:35:16.160> of<00:35:16.320> the<00:35:16.520> big<00:35:16.880> big<00:35:17.079> difference<00:35:17.480> you 00:35:17.630 --> 00:35:17.640 align:start position:0% same one of the big big difference you 00:35:17.640 --> 00:35:18.829 align:start position:0% same one of the big big difference you have<00:35:17.839> like 00:35:18.829 --> 00:35:18.839 align:start position:0% have like 00:35:18.839 --> 00:35:22.510 align:start position:0% have like um<00:35:19.839> uh<00:35:20.079> structured<00:35:20.640> clone<00:35:21.560> this<00:35:21.800> function<00:35:22.240> is 00:35:22.510 --> 00:35:22.520 align:start position:0% um uh structured clone this function is 00:35:22.520 --> 00:35:25.990 align:start position:0% um uh structured clone this function is like<00:35:22.720> it's<00:35:22.800> a<00:35:22.960> deep<00:35:23.240> copy<00:35:23.920> a<00:35:24.079> builtin<00:35:25.000> um 00:35:25.990 --> 00:35:26.000 align:start position:0% like it's a deep copy a builtin um 00:35:26.000 --> 00:35:28.430 align:start position:0% like it's a deep copy a builtin um builtin<00:35:26.480> node<00:35:27.200> so<00:35:27.320> if<00:35:27.400> you<00:35:27.839> a<00:35:27.920> function<00:35:28.280> it 00:35:28.430 --> 00:35:28.440 align:start position:0% builtin node so if you a function it 00:35:28.440 --> 00:35:29.950 align:start position:0% builtin node so if you a function it will<00:35:28.800> an<00:35:28.920> object<00:35:29.160> it<00:35:29.280> will<00:35:29.440> work<00:35:29.640> but<00:35:29.720> if<00:35:29.800> you 00:35:29.950 --> 00:35:29.960 align:start position:0% will an object it will work but if you 00:35:29.960 --> 00:35:33.310 align:start position:0% will an object it will work but if you pass<00:35:30.119> a<00:35:30.240> proxy<00:35:31.040> it<00:35:31.200> will<00:35:31.480> it<00:35:31.560> will<00:35:32.079> SL<00:35:33.079> this<00:35:33.160> is 00:35:33.310 --> 00:35:33.320 align:start position:0% pass a proxy it will it will SL this is 00:35:33.320 --> 00:35:34.950 align:start position:0% pass a proxy it will it will SL this is actually<00:35:33.599> a<00:35:33.760> good<00:35:33.920> way<00:35:34.079> to<00:35:34.240> detect<00:35:34.560> is<00:35:34.720> if<00:35:34.839> an 00:35:34.950 --> 00:35:34.960 align:start position:0% actually a good way to detect is if an 00:35:34.960 --> 00:35:37.069 align:start position:0% actually a good way to detect is if an object<00:35:35.160> is<00:35:35.280> a<00:35:35.400> proxy<00:35:35.720> or<00:35:35.839> not<00:35:36.680> because<00:35:36.880> if<00:35:36.960> you 00:35:37.069 --> 00:35:37.079 align:start position:0% object is a proxy or not because if you 00:35:37.079 --> 00:35:39.109 align:start position:0% object is a proxy or not because if you look<00:35:37.200> at<00:35:37.359> P<00:35:37.560> directly<00:35:38.040> there<00:35:38.160> is<00:35:38.880> in<00:35:39.000> the 00:35:39.109 --> 00:35:39.119 align:start position:0% look at P directly there is in the 00:35:39.119 --> 00:35:40.390 align:start position:0% look at P directly there is in the console<00:35:39.440> you<00:35:39.520> can<00:35:39.640> see<00:35:39.800> it<00:35:40.040> but<00:35:40.200> from 00:35:40.390 --> 00:35:40.400 align:start position:0% console you can see it but from 00:35:40.400 --> 00:35:41.710 align:start position:0% console you can see it but from JavaScript<00:35:40.880> there<00:35:40.960> is<00:35:41.079> no<00:35:41.240> way<00:35:41.359> to<00:35:41.480> know<00:35:41.599> if 00:35:41.710 --> 00:35:41.720 align:start position:0% JavaScript there is no way to know if 00:35:41.720 --> 00:35:43.390 align:start position:0% JavaScript there is no way to know if it's<00:35:41.800> a<00:35:41.960> proxy<00:35:42.320> there<00:35:42.400> is<00:35:42.520> no<00:35:42.800> key<00:35:43.119> that<00:35:43.240> tell 00:35:43.390 --> 00:35:43.400 align:start position:0% it's a proxy there is no key that tell 00:35:43.400 --> 00:35:44.990 align:start position:0% it's a proxy there is no key that tell you<00:35:43.560> it's 00:35:44.990 --> 00:35:45.000 align:start position:0% you it's 00:35:45.000 --> 00:35:47.750 align:start position:0% you it's proxy<00:35:46.000> so<00:35:46.359> let's<00:35:46.560> go 00:35:47.750 --> 00:35:47.760 align:start position:0% proxy so let's go 00:35:47.760 --> 00:35:50.230 align:start position:0% proxy so let's go back<00:35:48.760> so<00:35:48.960> what<00:35:49.079> we<00:35:49.160> are<00:35:49.319> going<00:35:49.480> to<00:35:49.640> do<00:35:49.920> to 00:35:50.230 --> 00:35:50.240 align:start position:0% back so what we are going to do to 00:35:50.240 --> 00:35:53.309 align:start position:0% back so what we are going to do to inject<00:35:50.599> uks<00:35:51.119> into<00:35:51.520> our<00:35:51.800> JavaScript<00:35:52.319> files 00:35:53.309 --> 00:35:53.319 align:start position:0% inject uks into our JavaScript files 00:35:53.319 --> 00:35:55.309 align:start position:0% inject uks into our JavaScript files well<00:35:54.000> uh<00:35:54.280> I<00:35:54.400> need<00:35:54.640> first<00:35:54.839> to<00:35:55.000> pass<00:35:55.200> the 00:35:55.309 --> 00:35:55.319 align:start position:0% well uh I need first to pass the 00:35:55.319 --> 00:35:57.710 align:start position:0% well uh I need first to pass the JavaScript<00:35:56.000> to<00:35:56.319> get<00:35:56.480> an<00:35:56.640> IST<00:35:57.160> which<00:35:57.240> is<00:35:57.359> an 00:35:57.710 --> 00:35:57.720 align:start position:0% JavaScript to get an IST which is an 00:35:57.720 --> 00:35:59.069 align:start position:0% JavaScript to get an IST which is an stack<00:35:57.960> syntax 00:35:59.069 --> 00:35:59.079 align:start position:0% stack syntax 00:35:59.079 --> 00:36:03.630 align:start position:0% stack syntax 3<00:36:00.200> and<00:36:01.200> JavaScript<00:36:01.760> is<00:36:01.960> just<00:36:02.359> typescript<00:36:03.359> so 00:36:03.630 --> 00:36:03.640 align:start position:0% 3 and JavaScript is just typescript so 00:36:03.640 --> 00:36:05.589 align:start position:0% 3 and JavaScript is just typescript so let's<00:36:03.880> just<00:36:04.040> use<00:36:04.440> the<00:36:04.560> typescript<00:36:05.040> package<00:36:05.319> to 00:36:05.589 --> 00:36:05.599 align:start position:0% let's just use the typescript package to 00:36:05.599 --> 00:36:07.069 align:start position:0% let's just use the typescript package to pass<00:36:05.760> JavaScript<00:36:06.319> because<00:36:06.480> it's<00:36:06.640> made<00:36:06.880> by 00:36:07.069 --> 00:36:07.079 align:start position:0% pass JavaScript because it's made by 00:36:07.079 --> 00:36:09.030 align:start position:0% pass JavaScript because it's made by Microsoft<00:36:07.560> it's<00:36:07.720> pretty<00:36:08.040> good<00:36:08.640> and<00:36:08.760> if<00:36:08.839> it's 00:36:09.030 --> 00:36:09.040 align:start position:0% Microsoft it's pretty good and if it's 00:36:09.040 --> 00:36:10.309 align:start position:0% Microsoft it's pretty good and if it's good<00:36:09.200> enough<00:36:09.359> to<00:36:09.480> pass<00:36:09.680> typescript<00:36:10.119> it<00:36:10.200> should 00:36:10.309 --> 00:36:10.319 align:start position:0% good enough to pass typescript it should 00:36:10.319 --> 00:36:12.670 align:start position:0% good enough to pass typescript it should be<00:36:10.440> good<00:36:10.560> enough<00:36:10.720> to<00:36:10.880> pass<00:36:11.520> JavaScript<00:36:12.520> so 00:36:12.670 --> 00:36:12.680 align:start position:0% be good enough to pass JavaScript so 00:36:12.680 --> 00:36:15.550 align:start position:0% be good enough to pass JavaScript so this<00:36:12.760> is<00:36:13.000> typescript<00:36:13.520> S<00:36:13.880> View<00:36:14.440> it's<00:36:14.760> a<00:36:15.280> it's<00:36:15.400> a 00:36:15.550 --> 00:36:15.560 align:start position:0% this is typescript S View it's a it's a 00:36:15.560 --> 00:36:18.349 align:start position:0% this is typescript S View it's a it's a website<00:36:16.119> you<00:36:16.240> can<00:36:16.680> go<00:36:17.160> on<00:36:17.319> it<00:36:17.480> online<00:36:18.119> and<00:36:18.240> you 00:36:18.349 --> 00:36:18.359 align:start position:0% website you can go on it online and you 00:36:18.359 --> 00:36:21.349 align:start position:0% website you can go on it online and you can<00:36:18.880> type<00:36:19.119> some<00:36:19.520> typescript<00:36:20.520> or<00:36:20.800> JavaScript 00:36:21.349 --> 00:36:21.359 align:start position:0% can type some typescript or JavaScript 00:36:21.359 --> 00:36:23.630 align:start position:0% can type some typescript or JavaScript and<00:36:21.599> know<00:36:22.000> what<00:36:22.480> the<00:36:22.720> actual<00:36:23.040> syntax<00:36:23.400> tree 00:36:23.630 --> 00:36:23.640 align:start position:0% and know what the actual syntax tree 00:36:23.640 --> 00:36:26.750 align:start position:0% and know what the actual syntax tree look<00:36:23.920> like<00:36:24.880> so<00:36:25.079> here<00:36:25.200> I<00:36:25.319> create<00:36:25.640> variable<00:36:26.040> x<00:36:26.480> x 00:36:26.750 --> 00:36:26.760 align:start position:0% look like so here I create variable x x 00:36:26.760 --> 00:36:29.069 align:start position:0% look like so here I create variable x x and<00:36:26.920> we<00:36:27.040> see<00:36:27.240> it's<00:36:27.839> decoration<00:36:28.359> list<00:36:28.680> we<00:36:28.800> our 00:36:29.069 --> 00:36:29.079 align:start position:0% and we see it's decoration list we our 00:36:29.079 --> 00:36:32.230 align:start position:0% and we see it's decoration list we our viable<00:36:29.359> decoration<00:36:29.920> we<00:36:30.680> identifier<00:36:31.680> okay<00:36:32.119> I'm 00:36:32.230 --> 00:36:32.240 align:start position:0% viable decoration we identifier okay I'm 00:36:32.240 --> 00:36:34.109 align:start position:0% viable decoration we identifier okay I'm sorry<00:36:32.480> I'm<00:36:32.599> sorry<00:36:32.800> to<00:36:32.960> interrup<00:36:33.680> are<00:36:33.800> you<00:36:34.000> are 00:36:34.109 --> 00:36:34.119 align:start position:0% sorry I'm sorry to interrup are you are 00:36:34.119 --> 00:36:35.990 align:start position:0% sorry I'm sorry to interrup are you are you<00:36:34.319> typing<00:36:34.720> into<00:36:35.000> it<00:36:35.240> like<00:36:35.400> is<00:36:35.599> this<00:36:35.760> like<00:36:35.880> an 00:36:35.990 --> 00:36:36.000 align:start position:0% you typing into it like is this like an 00:36:36.000 --> 00:36:38.109 align:start position:0% you typing into it like is this like an eye<00:36:36.200> frame<00:36:36.440> right<00:36:36.520> now<00:36:36.800> yeah<00:36:36.920> it's<00:36:37.040> an<00:36:37.200> a<00:36:37.400> frame 00:36:38.109 --> 00:36:38.119 align:start position:0% eye frame right now yeah it's an a frame 00:36:38.119 --> 00:36:41.270 align:start position:0% eye frame right now yeah it's an a frame oh<00:36:38.319> my<00:36:38.760> God<00:36:39.760> this<00:36:39.920> is<00:36:40.200> so 00:36:41.270 --> 00:36:41.280 align:start position:0% oh my God this is so 00:36:41.280 --> 00:36:43.790 align:start position:0% oh my God this is so cool 00:36:43.790 --> 00:36:43.800 align:start position:0% cool 00:36:43.800 --> 00:36:48.309 align:start position:0% cool dude<00:36:44.800> chat<00:36:45.720> the<00:36:45.880> chat<00:36:46.760> oh<00:36:46.920> my<00:36:47.160> gosh<00:36:47.359> dude<00:36:47.800> okay 00:36:48.309 --> 00:36:48.319 align:start position:0% dude chat the chat oh my gosh dude okay 00:36:48.319 --> 00:36:50.030 align:start position:0% dude chat the chat oh my gosh dude okay like<00:36:48.480> seriously<00:36:48.960> this<00:36:49.079> could<00:36:49.240> be<00:36:49.359> a<00:36:49.480> startup<00:36:49.920> I 00:36:50.030 --> 00:36:50.040 align:start position:0% like seriously this could be a startup I 00:36:50.040 --> 00:36:52.710 align:start position:0% like seriously this could be a startup I think<00:36:50.520> this<00:36:50.640> is<00:36:50.920> really<00:36:51.560> this<00:36:51.680> is<00:36:51.920> sick<00:36:52.240> dude 00:36:52.710 --> 00:36:52.720 align:start position:0% think this is really this is sick dude 00:36:52.720 --> 00:36:54.750 align:start position:0% think this is really this is sick dude this<00:36:52.839> is<00:36:53.119> super<00:36:53.359> awesome<00:36:53.760> SL 00:36:54.750 --> 00:36:54.760 align:start position:0% this is super awesome SL 00:36:54.760 --> 00:36:57.670 align:start position:0% this is super awesome SL for<00:36:55.760> okay<00:36:56.119> I'm<00:36:56.240> sorry<00:36:56.760> so<00:36:56.920> yeah<00:36:57.079> so<00:36:57.240> you<00:36:57.359> can 00:36:57.670 --> 00:36:57.680 align:start position:0% for okay I'm sorry so yeah so you can 00:36:57.680 --> 00:36:59.670 align:start position:0% for okay I'm sorry so yeah so you can have<00:36:57.920> access<00:36:58.160> to<00:36:58.359> this<00:36:58.560> and<00:36:58.720> you<00:36:59.079> so<00:36:59.319> if<00:36:59.400> you 00:36:59.670 --> 00:36:59.680 align:start position:0% have access to this and you so if you 00:36:59.680 --> 00:37:01.990 align:start position:0% have access to this and you so if you access<00:36:59.960> a<00:37:00.160> property<00:37:01.160> I<00:37:01.240> have<00:37:01.359> an<00:37:01.520> expression 00:37:01.990 --> 00:37:02.000 align:start position:0% access a property I have an expression 00:37:02.000 --> 00:37:04.030 align:start position:0% access a property I have an expression statement<00:37:02.520> the<00:37:02.640> expression<00:37:03.160> statement<00:37:03.720> is<00:37:03.839> a 00:37:04.030 --> 00:37:04.040 align:start position:0% statement the expression statement is a 00:37:04.040 --> 00:37:05.829 align:start position:0% statement the expression statement is a property<00:37:04.480> access<00:37:04.800> expression<00:37:05.400> and<00:37:05.560> if<00:37:05.680> I 00:37:05.829 --> 00:37:05.839 align:start position:0% property access expression and if I 00:37:05.839 --> 00:37:07.270 align:start position:0% property access expression and if I detect<00:37:06.280> all<00:37:06.480> this<00:37:06.640> property<00:37:06.960> access 00:37:07.270 --> 00:37:07.280 align:start position:0% detect all this property access 00:37:07.280 --> 00:37:09.390 align:start position:0% detect all this property access expression<00:37:08.240> I<00:37:08.359> can<00:37:08.520> replace<00:37:08.960> them<00:37:09.200> with 00:37:09.390 --> 00:37:09.400 align:start position:0% expression I can replace them with 00:37:09.400 --> 00:37:11.430 align:start position:0% expression I can replace them with something<00:37:09.839> that<00:37:10.240> with<00:37:10.359> something<00:37:10.640> else 00:37:11.430 --> 00:37:11.440 align:start position:0% something that with something else 00:37:11.440 --> 00:37:17.470 align:start position:0% something that with something else to<00:37:12.440> to<00:37:12.640> have<00:37:13.000> a<00:37:13.119> debug 00:37:17.470 --> 00:37:17.480 align:start position:0% 00:37:17.480 --> 00:37:20.230 align:start position:0% output<00:37:18.480> so<00:37:19.079> I<00:37:19.200> need<00:37:19.359> a<00:37:19.480> tool<00:37:19.720> to<00:37:19.839> do<00:37:20.000> that 00:37:20.230 --> 00:37:20.240 align:start position:0% output so I need a tool to do that 00:37:20.240 --> 00:37:22.829 align:start position:0% output so I need a tool to do that because<00:37:20.960> it's<00:37:21.960> because<00:37:22.119> it's<00:37:22.319> way<00:37:22.440> too<00:37:22.640> long 00:37:22.829 --> 00:37:22.839 align:start position:0% because it's because it's way too long 00:37:22.839 --> 00:37:25.950 align:start position:0% because it's because it's way too long to<00:37:23.079> to<00:37:23.240> do<00:37:23.400> it<00:37:23.599> by<00:37:23.839> by<00:37:24.160> hand<00:37:25.160> so<00:37:25.359> the<00:37:25.599> the<00:37:25.680> tool 00:37:25.950 --> 00:37:25.960 align:start position:0% to to do it by by hand so the the tool 00:37:25.960 --> 00:37:28.510 align:start position:0% to to do it by by hand so the the tool is<00:37:26.119> called<00:37:26.440> PP<00:37:26.760> finder<00:37:27.800> it<00:37:27.920> helps<00:37:28.160> you<00:37:28.280> find 00:37:28.510 --> 00:37:28.520 align:start position:0% is called PP finder it helps you find 00:37:28.520 --> 00:37:31.270 align:start position:0% is called PP finder it helps you find prototype<00:37:29.119> pollution<00:37:30.119> dating<00:37:30.560> site<00:37:30.880> or 00:37:31.270 --> 00:37:31.280 align:start position:0% prototype pollution dating site or 00:37:31.280 --> 00:37:34.510 align:start position:0% prototype pollution dating site or prototype<00:37:31.720> pollution<00:37:32.160> app<00:37:32.440> who<00:37:32.640> knows<00:37:33.520> yeah 00:37:34.510 --> 00:37:34.520 align:start position:0% prototype pollution app who knows yeah 00:37:34.520 --> 00:37:35.870 align:start position:0% prototype pollution app who knows yeah uh<00:37:34.640> the<00:37:34.760> logo<00:37:35.000> is<00:37:35.079> not<00:37:35.200> the<00:37:35.319> official<00:37:35.640> one<00:37:35.800> if 00:37:35.870 --> 00:37:35.880 align:start position:0% uh the logo is not the official one if 00:37:35.880 --> 00:37:38.910 align:start position:0% uh the logo is not the official one if you<00:37:35.960> go<00:37:36.079> on<00:37:36.160> the<00:37:36.280> yes<00:37:36.760> website<00:37:37.280> it's<00:37:37.520> not<00:37:38.040> the 00:37:38.910 --> 00:37:38.920 align:start position:0% you go on the yes website it's not the 00:37:38.920 --> 00:37:41.150 align:start position:0% you go on the yes website it's not the they<00:37:39.280> ask<00:37:39.520> me<00:37:39.640> to<00:37:39.760> change<00:37:40.079> it<00:37:40.560> but<00:37:40.760> if<00:37:40.880> you<00:37:40.960> wear 00:37:41.150 --> 00:37:41.160 align:start position:0% they ask me to change it but if you wear 00:37:41.160 --> 00:37:42.630 align:start position:0% they ask me to change it but if you wear a<00:37:41.280> death<00:37:41.480> gun<00:37:41.640> you<00:37:41.680> could<00:37:41.839> have<00:37:41.960> some<00:37:42.119> stickers 00:37:42.630 --> 00:37:42.640 align:start position:0% a death gun you could have some stickers 00:37:42.640 --> 00:37:45.950 align:start position:0% a death gun you could have some stickers with<00:37:42.800> the<00:37:43.400> official<00:37:44.400> with<00:37:44.560> this<00:37:44.680> logo<00:37:45.079> which 00:37:45.950 --> 00:37:45.960 align:start position:0% with the official with this logo which 00:37:45.960 --> 00:37:49.710 align:start position:0% with the official with this logo which which<00:37:46.079> is<00:37:46.200> the<00:37:46.319> best<00:37:46.640> one<00:37:47.640> that<00:37:47.760> is 00:37:49.710 --> 00:37:49.720 align:start position:0% which is the best one that is 00:37:49.720 --> 00:37:52.630 align:start position:0% which is the best one that is amazing<00:37:50.720> so<00:37:51.040> people<00:37:51.640> what<00:37:51.760> does<00:37:51.880> he<00:37:52.040> do<00:37:52.440> they 00:37:52.630 --> 00:37:52.640 align:start position:0% amazing so people what does he do they 00:37:52.640 --> 00:37:57.790 align:start position:0% amazing so people what does he do they ask<00:37:52.880> me<00:37:53.000> to<00:37:53.200> change<00:37:53.560> it<00:37:53.839> he<00:37:54.079> says 00:37:57.790 --> 00:37:57.800 align:start position:0% 00:37:57.800 --> 00:38:00.150 align:start position:0% oh<00:37:58.000> my<00:37:58.160> God<00:37:58.520> actually<00:37:59.040> at<00:37:59.119> the<00:37:59.200> end<00:37:59.359> of<00:37:59.520> Devcon 00:38:00.150 --> 00:38:00.160 align:start position:0% oh my God actually at the end of Devcon 00:38:00.160 --> 00:38:01.790 align:start position:0% oh my God actually at the end of Devcon of<00:38:00.319> my<00:38:00.440> talk<00:38:00.680> one<00:38:00.839> guy<00:38:00.960> at<00:38:01.040> Devon<00:38:01.400> come<00:38:01.560> to<00:38:01.680> me 00:38:01.790 --> 00:38:01.800 align:start position:0% of my talk one guy at Devon come to me 00:38:01.800 --> 00:38:03.309 align:start position:0% of my talk one guy at Devon come to me and<00:38:01.920> say<00:38:02.319> oh<00:38:02.560> do<00:38:02.680> you<00:38:02.760> know<00:38:02.920> the<00:38:03.000> name<00:38:03.160> of 00:38:03.309 --> 00:38:03.319 align:start position:0% and say oh do you know the name of 00:38:03.319 --> 00:38:06.109 align:start position:0% and say oh do you know the name of Pinder<00:38:04.240> it's<00:38:04.400> kind<00:38:04.520> of<00:38:04.680> a<00:38:04.839> dick<00:38:05.079> joke<00:38:05.760> and<00:38:05.880> I 00:38:06.109 --> 00:38:06.119 align:start position:0% Pinder it's kind of a dick joke and I 00:38:06.119 --> 00:38:10.069 align:start position:0% Pinder it's kind of a dick joke and I like<00:38:06.839> yeah<00:38:07.480> yeah<00:38:08.319> I 00:38:10.069 --> 00:38:10.079 align:start position:0% like yeah yeah I 00:38:10.079 --> 00:38:13.470 align:start position:0% like yeah yeah I know<00:38:11.079> that's<00:38:11.280> hilarious<00:38:11.960> man<00:38:12.560> all<00:38:12.720> right<00:38:13.200> so 00:38:13.470 --> 00:38:13.480 align:start position:0% know that's hilarious man all right so 00:38:13.480 --> 00:38:15.790 align:start position:0% know that's hilarious man all right so the<00:38:13.599> tool<00:38:14.079> you<00:38:14.280> you're<00:38:14.480> able<00:38:14.680> to<00:38:14.920> run<00:38:15.560> code 00:38:15.790 --> 00:38:15.800 align:start position:0% the tool you you're able to run code 00:38:15.800 --> 00:38:19.550 align:start position:0% the tool you you're able to run code with<00:38:15.960> PP<00:38:16.240> finder<00:38:16.720> and<00:38:16.960> get<00:38:17.240> all<00:38:17.720> this<00:38:18.720> all<00:38:19.000> this 00:38:19.550 --> 00:38:19.560 align:start position:0% with PP finder and get all this all this 00:38:19.560 --> 00:38:23.150 align:start position:0% with PP finder and get all this all this uh<00:38:19.839> prototype<00:38:20.440> access<00:38:21.280> directly<00:38:22.280> uh<00:38:22.760> printed 00:38:23.150 --> 00:38:23.160 align:start position:0% uh prototype access directly uh printed 00:38:23.160 --> 00:38:25.870 align:start position:0% uh prototype access directly uh printed to<00:38:23.359> you<00:38:23.760> with<00:38:23.960> the<00:38:24.200> exact<00:38:24.640> line<00:38:24.839> and<00:38:25.040> colon 00:38:25.870 --> 00:38:25.880 align:start position:0% to you with the exact line and colon 00:38:25.880 --> 00:38:28.630 align:start position:0% to you with the exact line and colon what<00:38:26.000> it's<00:38:26.200> why<00:38:26.319> it's<00:38:26.480> happening 00:38:28.630 --> 00:38:28.640 align:start position:0% what it's why it's happening 00:38:28.640 --> 00:38:30.710 align:start position:0% what it's why it's happening and<00:38:28.880> because<00:38:29.119> we<00:38:29.200> are<00:38:29.440> directly<00:38:29.800> impl<00:38:30.480> uh 00:38:30.710 --> 00:38:30.720 align:start position:0% and because we are directly impl uh 00:38:30.720 --> 00:38:32.430 align:start position:0% and because we are directly impl uh implementing<00:38:31.160> it<00:38:31.319> on<00:38:31.440> the<00:38:31.560> run<00:38:31.839> time<00:38:32.200> there<00:38:32.319> is 00:38:32.430 --> 00:38:32.440 align:start position:0% implementing it on the run time there is 00:38:32.440 --> 00:38:34.069 align:start position:0% implementing it on the run time there is no<00:38:32.599> false 00:38:34.069 --> 00:38:34.079 align:start position:0% no false 00:38:34.079 --> 00:38:36.430 align:start position:0% no false positive<00:38:35.079> you<00:38:35.200> cannot<00:38:35.839> if<00:38:36.040> something<00:38:36.280> is 00:38:36.430 --> 00:38:36.440 align:start position:0% positive you cannot if something is 00:38:36.440 --> 00:38:37.990 align:start position:0% positive you cannot if something is printed<00:38:36.880> there<00:38:37.119> and<00:38:37.240> you<00:38:37.319> can<00:38:37.480> do<00:38:37.599> a<00:38:37.720> pro 00:38:37.990 --> 00:38:38.000 align:start position:0% printed there and you can do a pro 00:38:38.000 --> 00:38:40.430 align:start position:0% printed there and you can do a pro pollution<00:38:38.400> you<00:38:38.520> can<00:38:38.640> modify 00:38:40.430 --> 00:38:40.440 align:start position:0% pollution you can modify 00:38:40.440 --> 00:38:44.030 align:start position:0% pollution you can modify it<00:38:41.440> so<00:38:41.800> before<00:38:42.720> um<00:38:43.359> this<00:38:43.480> is<00:38:43.599> the<00:38:43.680> new<00:38:43.839> version 00:38:44.030 --> 00:38:44.040 align:start position:0% it so before um this is the new version 00:38:44.040 --> 00:38:47.109 align:start position:0% it so before um this is the new version of<00:38:44.160> pp<00:38:44.400> finder<00:38:44.960> from<00:38:45.400> this<00:38:45.560> year<00:38:46.280> before<00:38:46.640> you 00:38:47.109 --> 00:38:47.119 align:start position:0% of pp finder from this year before you 00:38:47.119 --> 00:38:49.030 align:start position:0% of pp finder from this year before you what<00:38:47.240> you<00:38:47.359> have<00:38:47.520> to<00:38:47.680> do<00:38:47.960> is<00:38:48.119> you<00:38:48.240> have<00:38:48.400> to<00:38:48.839> make 00:38:49.030 --> 00:38:49.040 align:start position:0% what you have to do is you have to make 00:38:49.040 --> 00:38:51.550 align:start position:0% what you have to do is you have to make your<00:38:49.280> project<00:38:49.760> copy<00:38:50.119> the<00:38:50.280> code<00:38:50.880> uh<00:38:51.000> recompile 00:38:51.550 --> 00:38:51.560 align:start position:0% your project copy the code uh recompile 00:38:51.560 --> 00:38:53.790 align:start position:0% your project copy the code uh recompile everything<00:38:51.839> with<00:38:52.000> PP<00:38:52.319> finder<00:38:53.319> and<00:38:53.480> run<00:38:53.680> the 00:38:53.790 --> 00:38:53.800 align:start position:0% everything with PP finder and run the 00:38:53.800 --> 00:38:56.430 align:start position:0% everything with PP finder and run the modified<00:38:54.240> project<00:38:54.680> to<00:38:54.880> get<00:38:55.280> the<00:38:55.720> the<00:38:55.880> actual 00:38:56.430 --> 00:38:56.440 align:start position:0% modified project to get the the actual 00:38:56.440 --> 00:38:58.349 align:start position:0% modified project to get the the actual the<00:38:56.599> actual<00:38:57.200> uh<00:38:57.440> debug 00:38:58.349 --> 00:38:58.359 align:start position:0% the actual uh debug 00:38:58.359 --> 00:39:00.990 align:start position:0% the actual uh debug logs<00:38:59.359> and<00:38:59.599> go<00:38:59.760> back<00:38:59.880> to<00:38:59.960> the<00:39:00.119> original<00:39:00.480> copy<00:39:00.839> to 00:39:00.990 --> 00:39:01.000 align:start position:0% logs and go back to the original copy to 00:39:01.000 --> 00:39:02.510 align:start position:0% logs and go back to the original copy to check<00:39:01.200> the<00:39:01.319> line<00:39:01.560> numbers<00:39:02.000> because<00:39:02.200> the<00:39:02.319> new 00:39:02.510 --> 00:39:02.520 align:start position:0% check the line numbers because the new 00:39:02.520 --> 00:39:04.470 align:start position:0% check the line numbers because the new code<00:39:02.839> is<00:39:03.000> not<00:39:03.160> the<00:39:03.240> same<00:39:03.440> anymore<00:39:04.079> after<00:39:04.319> the 00:39:04.470 --> 00:39:04.480 align:start position:0% code is not the same anymore after the 00:39:04.480 --> 00:39:06.750 align:start position:0% code is not the same anymore after the hook<00:39:04.800> so<00:39:05.520> it<00:39:05.599> was<00:39:05.760> a<00:39:05.880> bit<00:39:06.240> difficult<00:39:06.359> to<00:39:06.520> work 00:39:06.750 --> 00:39:06.760 align:start position:0% hook so it was a bit difficult to work 00:39:06.760 --> 00:39:07.550 align:start position:0% hook so it was a bit difficult to work with 00:39:07.550 --> 00:39:07.560 align:start position:0% with 00:39:07.560 --> 00:39:10.390 align:start position:0% with it<00:39:08.560> and<00:39:08.760> now<00:39:08.920> we<00:39:09.040> need<00:39:09.200> an<00:39:09.359> update<00:39:09.839> so<00:39:10.160> now<00:39:10.280> you 00:39:10.390 --> 00:39:10.400 align:start position:0% it and now we need an update so now you 00:39:10.400 --> 00:39:11.710 align:start position:0% it and now we need an update so now you need<00:39:10.560> to<00:39:10.800> install<00:39:11.079> a<00:39:11.160> project<00:39:11.359> you<00:39:11.440> want<00:39:11.560> to 00:39:11.710 --> 00:39:11.720 align:start position:0% need to install a project you want to 00:39:11.720 --> 00:39:15.589 align:start position:0% need to install a project you want to edit<00:39:12.160> run<00:39:12.359> it<00:39:12.480> with<00:39:12.640> PP<00:39:12.880> finder<00:39:13.680> and<00:39:13.960> that's<00:39:14.599> it 00:39:15.589 --> 00:39:15.599 align:start position:0% edit run it with PP finder and that's it 00:39:15.599 --> 00:39:17.950 align:start position:0% edit run it with PP finder and that's it and<00:39:15.760> we<00:39:15.880> use<00:39:16.160> some<00:39:16.560> crazy<00:39:16.920> JavaScript<00:39:17.400> magic 00:39:17.950 --> 00:39:17.960 align:start position:0% and we use some crazy JavaScript magic 00:39:17.960 --> 00:39:20.230 align:start position:0% and we use some crazy JavaScript magic that's<00:39:18.240> great<00:39:18.520> man<00:39:19.240> so<00:39:19.440> how<00:39:19.560> to<00:39:19.680> find<00:39:19.920> crazy 00:39:20.230 --> 00:39:20.240 align:start position:0% that's great man so how to find crazy 00:39:20.240 --> 00:39:22.510 align:start position:0% that's great man so how to find crazy JavaScript<00:39:20.720> magic<00:39:21.520> it's<00:39:21.680> simple<00:39:22.000> you<00:39:22.200> go<00:39:22.319> on 00:39:22.510 --> 00:39:22.520 align:start position:0% JavaScript magic it's simple you go on 00:39:22.520 --> 00:39:24.630 align:start position:0% JavaScript magic it's simple you go on the<00:39:22.839> Ducks<00:39:23.319> of 00:39:24.630 --> 00:39:24.640 align:start position:0% the Ducks of 00:39:24.640 --> 00:39:27.430 align:start position:0% the Ducks of um<00:39:25.640> uh<00:39:26.000> nodejs<00:39:26.599> and<00:39:26.720> you<00:39:26.839> look<00:39:26.960> at 00:39:27.430 --> 00:39:27.440 align:start position:0% um uh nodejs and you look at 00:39:27.440 --> 00:39:29.550 align:start position:0% um uh nodejs and you look at experimental<00:39:28.440> and<00:39:28.520> if<00:39:28.599> you<00:39:28.720> see<00:39:28.920> experimental 00:39:29.550 --> 00:39:29.560 align:start position:0% experimental and if you see experimental 00:39:29.560 --> 00:39:31.550 align:start position:0% experimental and if you see experimental this<00:39:29.640> is<00:39:29.720> the<00:39:29.880> do<00:39:30.040> you<00:39:30.119> want<00:39:30.240> to<00:39:30.440> read<00:39:31.200> Because 00:39:31.550 --> 00:39:31.560 align:start position:0% this is the do you want to read Because 00:39:31.560 --> 00:39:33.030 align:start position:0% this is the do you want to read Because this<00:39:31.680> is<00:39:31.800> where<00:39:31.920> you<00:39:32.040> find<00:39:32.280> the<00:39:32.440> bgs<00:39:32.839> and<00:39:32.960> this 00:39:33.030 --> 00:39:33.040 align:start position:0% this is where you find the bgs and this 00:39:33.040 --> 00:39:35.150 align:start position:0% this is where you find the bgs and this is<00:39:33.160> where<00:39:33.240> you<00:39:33.400> find<00:39:33.560> the<00:39:33.680> fun<00:39:33.960> stuff<00:39:34.880> that's 00:39:35.150 --> 00:39:35.160 align:start position:0% is where you find the fun stuff that's 00:39:35.160 --> 00:39:38.990 align:start position:0% is where you find the fun stuff that's great<00:39:36.160> so<00:39:36.920> node<00:39:37.640> expose<00:39:38.200> an<00:39:38.359> API<00:39:38.760> called 00:39:38.990 --> 00:39:39.000 align:start position:0% great so node expose an API called 00:39:39.000 --> 00:39:40.790 align:start position:0% great so node expose an API called experimental<00:39:39.440> loader<00:39:40.040> I<00:39:40.119> think<00:39:40.359> actually 00:39:40.790 --> 00:39:40.800 align:start position:0% experimental loader I think actually 00:39:40.800 --> 00:39:42.750 align:start position:0% experimental loader I think actually right<00:39:40.920> now<00:39:41.119> it's<00:39:41.520> only<00:39:41.800> called<00:39:42.000> loader 00:39:42.750 --> 00:39:42.760 align:start position:0% right now it's only called loader 00:39:42.760 --> 00:39:45.510 align:start position:0% right now it's only called loader because<00:39:43.480> this<00:39:43.640> talk<00:39:43.880> was<00:39:44.000> a<00:39:44.119> bit 00:39:45.510 --> 00:39:45.520 align:start position:0% because this talk was a bit 00:39:45.520 --> 00:39:47.670 align:start position:0% because this talk was a bit old<00:39:46.520> but<00:39:46.720> what<00:39:46.800> you<00:39:46.880> can<00:39:47.040> do<00:39:47.240> is<00:39:47.319> you<00:39:47.440> can 00:39:47.670 --> 00:39:47.680 align:start position:0% old but what you can do is you can 00:39:47.680 --> 00:39:50.550 align:start position:0% old but what you can do is you can define<00:39:48.160> a<00:39:48.480> custom<00:39:48.839> loger<00:39:49.520> uh<00:39:49.880> loader<00:39:50.359> that 00:39:50.550 --> 00:39:50.560 align:start position:0% define a custom loger uh loader that 00:39:50.560 --> 00:39:54.670 align:start position:0% define a custom loger uh loader that will<00:39:51.920> um<00:39:52.920> that<00:39:53.040> will<00:39:53.200> ook<00:39:53.680> the<00:39:54.040> import<00:39:54.480> from 00:39:54.670 --> 00:39:54.680 align:start position:0% will um that will ook the import from 00:39:54.680 --> 00:39:56.430 align:start position:0% will um that will ook the import from JavaScript<00:39:55.319> every<00:39:55.480> time<00:39:55.599> you<00:39:55.680> do<00:39:55.880> require<00:39:56.240> or 00:39:56.430 --> 00:39:56.440 align:start position:0% JavaScript every time you do require or 00:39:56.440 --> 00:39:58.630 align:start position:0% JavaScript every time you do require or import<00:39:57.560> go<00:39:57.680> through<00:39:57.839> your<00:39:57.960> loader<00:39:58.440> and<00:39:58.560> you 00:39:58.630 --> 00:39:58.640 align:start position:0% import go through your loader and you 00:39:58.640 --> 00:40:02.230 align:start position:0% import go through your loader and you can<00:39:58.839> modify<00:39:59.599> uh<00:39:59.720> what's 00:40:02.230 --> 00:40:02.240 align:start position:0% 00:40:02.240 --> 00:40:07.589 align:start position:0% happening<00:40:03.240> so<00:40:03.480> let's<00:40:03.640> do<00:40:03.760> a<00:40:03.880> demo<00:40:04.599> because<00:40:05.599> why 00:40:07.589 --> 00:40:07.599 align:start position:0% happening so let's do a demo because why 00:40:07.599 --> 00:40:10.470 align:start position:0% happening so let's do a demo because why not<00:40:08.599> so<00:40:08.839> I<00:40:08.960> have<00:40:09.240> this<00:40:09.599> project<00:40:10.119> and<00:40:10.240> I<00:40:10.319> can 00:40:10.470 --> 00:40:10.480 align:start position:0% not so I have this project and I can 00:40:10.480 --> 00:40:12.109 align:start position:0% not so I have this project and I can share<00:40:10.720> you<00:40:10.880> the<00:40:11.040> code<00:40:11.280> with<00:40:11.440> you<00:40:11.640> if<00:40:11.720> you<00:40:11.839> want 00:40:12.109 --> 00:40:12.119 align:start position:0% share you the code with you if you want 00:40:12.119 --> 00:40:17.750 align:start position:0% share you the code with you if you want to<00:40:13.119> to<00:40:13.359> look<00:40:13.880> it<00:40:14.880> to<00:40:15.319> to<00:40:15.480> look<00:40:15.599> at 00:40:17.750 --> 00:40:17.760 align:start position:0% to to look it to to look at 00:40:17.760 --> 00:40:20.470 align:start position:0% to to look it to to look at it<00:40:18.760> uh<00:40:18.880> this<00:40:19.000> is<00:40:19.079> a<00:40:19.240> simple<00:40:19.599> fastify<00:40:20.160> web 00:40:20.470 --> 00:40:20.480 align:start position:0% it uh this is a simple fastify web 00:40:20.480 --> 00:40:22.790 align:start position:0% it uh this is a simple fastify web server<00:40:21.480> I<00:40:21.560> use<00:40:21.720> a<00:40:21.839> another<00:40:22.119> version<00:40:22.599> because 00:40:22.790 --> 00:40:22.800 align:start position:0% server I use a another version because 00:40:22.800 --> 00:40:24.550 align:start position:0% server I use a another version because there<00:40:22.880> is<00:40:23.000> a<00:40:23.160> CV<00:40:23.520> in<00:40:23.640> this<00:40:23.800> version<00:40:24.119> I<00:40:24.240> want<00:40:24.359> to 00:40:24.550 --> 00:40:24.560 align:start position:0% there is a CV in this version I want to 00:40:24.560 --> 00:40:26.430 align:start position:0% there is a CV in this version I want to demonstrate<00:40:25.400> how<00:40:25.520> to<00:40:25.680> find<00:40:25.880> it<00:40:26.040> with<00:40:26.200> PP 00:40:26.430 --> 00:40:26.440 align:start position:0% demonstrate how to find it with PP 00:40:26.440 --> 00:40:27.829 align:start position:0% demonstrate how to find it with PP finder<00:40:26.760> even<00:40:26.920> if<00:40:27.040> it's<00:40:27.119> not 00:40:27.829 --> 00:40:27.839 align:start position:0% finder even if it's not 00:40:27.839 --> 00:40:31.069 align:start position:0% finder even if it's not pollution<00:40:28.839> so<00:40:29.800> this<00:40:29.920> is<00:40:30.119> actually<00:40:30.400> how<00:40:30.640> I<00:40:30.960> I 00:40:31.069 --> 00:40:31.079 align:start position:0% pollution so this is actually how I I 00:40:31.079 --> 00:40:31.950 align:start position:0% pollution so this is actually how I I found 00:40:31.950 --> 00:40:31.960 align:start position:0% found 00:40:31.960 --> 00:40:35.510 align:start position:0% found it<00:40:32.960> I<00:40:33.240> just<00:40:33.400> remove<00:40:33.839> the<00:40:34.000> UN<00:40:34.440> poisoning<00:40:34.960> ignore 00:40:35.510 --> 00:40:35.520 align:start position:0% it I just remove the UN poisoning ignore 00:40:35.520 --> 00:40:38.230 align:start position:0% it I just remove the UN poisoning ignore because<00:40:35.920> fify<00:40:36.520> is<00:40:37.200> automatically<00:40:37.720> removing 00:40:38.230 --> 00:40:38.240 align:start position:0% because fify is automatically removing 00:40:38.240 --> 00:40:40.109 align:start position:0% because fify is automatically removing the<00:40:38.480> Proto<00:40:38.800> keys<00:40:39.280> and<00:40:39.440> I<00:40:39.560> don't<00:40:39.720> want<00:40:39.839> to<00:40:40.000> have 00:40:40.109 --> 00:40:40.119 align:start position:0% the Proto keys and I don't want to have 00:40:40.119 --> 00:40:42.870 align:start position:0% the Proto keys and I don't want to have a<00:40:40.319> huge<00:40:41.040> code<00:40:41.280> base<00:40:41.520> from<00:40:41.680> a<00:40:41.839> Deo 00:40:42.870 --> 00:40:42.880 align:start position:0% a huge code base from a Deo 00:40:42.880 --> 00:40:45.150 align:start position:0% a huge code base from a Deo to<00:40:43.880> to<00:40:44.040> have<00:40:44.160> like<00:40:44.240> a<00:40:44.359> deot<00:40:44.640> type<00:40:44.800> pollution<00:40:45.079> I 00:40:45.150 --> 00:40:45.160 align:start position:0% to to have like a deot type pollution I 00:40:45.160 --> 00:40:48.270 align:start position:0% to to have like a deot type pollution I wanted<00:40:45.440> something<00:40:45.839> I<00:40:45.920> wanted<00:40:46.160> something 00:40:48.270 --> 00:40:48.280 align:start position:0% wanted something I wanted something 00:40:48.280 --> 00:40:54.109 align:start position:0% wanted something I wanted something simple<00:40:49.280> so<00:40:49.440> let's<00:40:49.599> put<00:40:49.760> the<00:40:49.920> terminal<00:40:50.280> over 00:40:54.109 --> 00:40:54.119 align:start position:0% 00:40:54.119 --> 00:40:58.550 align:start position:0% there<00:40:55.119> let's<00:40:55.319> just<00:40:55.520> in<00:40:55.960> install<00:40:56.319> the<00:40:56.520> project 00:40:58.550 --> 00:40:58.560 align:start position:0% there let's just in install the project 00:40:58.560 --> 00:41:00.910 align:start position:0% there let's just in install the project and<00:40:58.720> if<00:40:58.839> we<00:40:59.040> do<00:40:59.240> the<00:40:59.400> node<00:41:00.040> uh<00:41:00.240> index<00:41:00.680> so<00:41:00.839> we 00:41:00.910 --> 00:41:00.920 align:start position:0% and if we do the node uh index so we 00:41:00.920 --> 00:41:05.510 align:start position:0% and if we do the node uh index so we have<00:41:01.160> a<00:41:01.319> website<00:41:02.040> and<00:41:02.160> I<00:41:02.280> can<00:41:02.560> go<00:41:03.240> over 00:41:05.510 --> 00:41:05.520 align:start position:0% have a website and I can go over 00:41:05.520 --> 00:41:08.109 align:start position:0% have a website and I can go over there<00:41:06.520> and<00:41:06.640> this<00:41:06.720> is<00:41:06.880> just<00:41:07.040> print<00:41:07.280> hello<00:41:07.560> world 00:41:08.109 --> 00:41:08.119 align:start position:0% there and this is just print hello world 00:41:08.119 --> 00:41:10.069 align:start position:0% there and this is just print hello world this<00:41:08.240> is<00:41:08.440> what<00:41:08.599> the<00:41:08.720> the<00:41:08.839> code<00:41:09.040> was 00:41:10.069 --> 00:41:10.079 align:start position:0% this is what the the code was 00:41:10.079 --> 00:41:12.870 align:start position:0% this is what the the code was doing<00:41:11.079> uh<00:41:11.280> over<00:41:11.599> there<00:41:12.240> and<00:41:12.440> we<00:41:12.560> have<00:41:12.720> a 00:41:12.870 --> 00:41:12.880 align:start position:0% doing uh over there and we have a 00:41:12.880 --> 00:41:15.390 align:start position:0% doing uh over there and we have a function<00:41:13.280> when<00:41:13.400> you<00:41:13.520> can<00:41:13.880> get<00:41:14.000> a<00:41:14.160> config<00:41:14.880> and 00:41:15.390 --> 00:41:15.400 align:start position:0% function when you can get a config and 00:41:15.400 --> 00:41:18.109 align:start position:0% function when you can get a config and deepmerge<00:41:15.839> a<00:41:16.280> config<00:41:16.680> coming<00:41:16.960> from<00:41:17.200> outside 00:41:18.109 --> 00:41:18.119 align:start position:0% deepmerge a config coming from outside 00:41:18.119 --> 00:41:19.990 align:start position:0% deepmerge a config coming from outside so<00:41:18.280> the<00:41:18.440> deepmerge<00:41:18.760> function<00:41:19.480> is<00:41:19.599> over<00:41:19.839> there 00:41:19.990 --> 00:41:20.000 align:start position:0% so the deepmerge function is over there 00:41:20.000 --> 00:41:22.550 align:start position:0% so the deepmerge function is over there and<00:41:20.160> actually<00:41:20.440> I<00:41:20.560> generated<00:41:21.040> it<00:41:21.440> with<00:41:21.640> copilot 00:41:22.550 --> 00:41:22.560 align:start position:0% and actually I generated it with copilot 00:41:22.560 --> 00:41:24.430 align:start position:0% and actually I generated it with copilot if<00:41:22.800> ask<00:41:22.960> copilot<00:41:23.359> to<00:41:23.440> do<00:41:23.560> a<00:41:23.640> deep<00:41:23.839> Mage<00:41:24.079> it<00:41:24.160> will 00:41:24.430 --> 00:41:24.440 align:start position:0% if ask copilot to do a deep Mage it will 00:41:24.440 --> 00:41:26.870 align:start position:0% if ask copilot to do a deep Mage it will give<00:41:24.560> you<00:41:25.079> like<00:41:26.079> almost<00:41:26.400> all<00:41:26.560> the<00:41:26.680> time 00:41:26.870 --> 00:41:26.880 align:start position:0% give you like almost all the time 00:41:26.880 --> 00:41:30.950 align:start position:0% give you like almost all the time available<00:41:27.520> function<00:41:28.520> function<00:41:29.440> uh<00:41:30.319> deep 00:41:30.950 --> 00:41:30.960 align:start position:0% available function function uh deep 00:41:30.960 --> 00:41:33.109 align:start position:0% available function function uh deep assign<00:41:31.480> let's<00:41:31.640> do<00:41:31.839> deep<00:41:32.040> assign<00:41:32.400> with<00:41:32.599> like<00:41:32.839> a 00:41:33.109 --> 00:41:33.119 align:start position:0% assign let's do deep assign with like a 00:41:33.119 --> 00:41:35.670 align:start position:0% assign let's do deep assign with like a path<00:41:33.680> with<00:41:34.240> and 00:41:35.670 --> 00:41:35.680 align:start position:0% path with and 00:41:35.680 --> 00:41:39.270 align:start position:0% path with and uh<00:41:36.680> Target<00:41:37.599> path<00:41:38.240> value<00:41:38.800> and<00:41:38.920> let's<00:41:39.079> see<00:41:39.200> if 00:41:39.270 --> 00:41:39.280 align:start position:0% uh Target path value and let's see if 00:41:39.280 --> 00:41:43.150 align:start position:0% uh Target path value and let's see if it's<00:41:39.440> vulnerable<00:41:39.920> to<00:41:40.160> Pro<00:41:40.440> pollution<00:41:40.960> yeah<00:41:41.119> it 00:41:43.150 --> 00:41:43.160 align:start position:0% it's vulnerable to Pro pollution yeah it 00:41:43.160 --> 00:41:46.750 align:start position:0% it's vulnerable to Pro pollution yeah it is<00:41:44.160> so<00:41:44.480> po<00:41:44.760> pollution<00:41:45.079> is<00:41:45.240> there<00:41:45.359> to<00:41:45.560> stay 00:41:46.750 --> 00:41:46.760 align:start position:0% is so po pollution is there to stay 00:41:46.760 --> 00:41:49.190 align:start position:0% is so po pollution is there to stay because<00:41:47.760> I'm<00:41:47.839> using<00:41:48.119> Cal<00:41:48.560> all<00:41:48.680> the<00:41:48.839> time<00:41:49.079> and 00:41:49.190 --> 00:41:49.200 align:start position:0% because I'm using Cal all the time and 00:41:49.200 --> 00:41:50.829 align:start position:0% because I'm using Cal all the time and if<00:41:49.280> you<00:41:49.440> go<00:41:49.680> fast<00:41:49.920> and<00:41:50.040> you<00:41:50.200> just<00:41:50.520> don't<00:41:50.680> know 00:41:50.829 --> 00:41:50.839 align:start position:0% if you go fast and you just don't know 00:41:50.839 --> 00:41:52.109 align:start position:0% if you go fast and you just don't know what<00:41:50.920> you<00:41:51.000> are<00:41:51.079> doing<00:41:51.440> this<00:41:51.560> function<00:41:51.880> work 00:41:52.109 --> 00:41:52.119 align:start position:0% what you are doing this function work 00:41:52.119 --> 00:41:55.390 align:start position:0% what you are doing this function work all<00:41:52.280> the<00:41:52.440> time<00:41:53.040> but<00:41:53.200> you<00:41:53.359> also<00:41:53.560> do<00:41:53.839> po 00:41:55.390 --> 00:41:55.400 align:start position:0% all the time but you also do po 00:41:55.400 --> 00:42:00.150 align:start position:0% all the time but you also do po pollution<00:41:56.400> so<00:41:57.560> yeah<00:41:58.240> and<00:41:58.880> the<00:41:59.000> good<00:41:59.160> news<00:41:59.400> is 00:42:00.150 --> 00:42:00.160 align:start position:0% pollution so yeah and the good news is 00:42:00.160 --> 00:42:03.349 align:start position:0% pollution so yeah and the good news is copilot<00:42:00.599> is<00:42:00.720> trained<00:42:01.240> on<00:42:01.560> data<00:42:01.839> from<00:42:02.359> GitHub 00:42:03.349 --> 00:42:03.359 align:start position:0% copilot is trained on data from GitHub 00:42:03.359 --> 00:42:05.349 align:start position:0% copilot is trained on data from GitHub mostly<00:42:03.680> public<00:42:04.000> data<00:42:04.400> but<00:42:04.800> we<00:42:04.920> don't<00:42:05.160> know 00:42:05.349 --> 00:42:05.359 align:start position:0% mostly public data but we don't know 00:42:05.359 --> 00:42:07.349 align:start position:0% mostly public data but we don't know about<00:42:05.640> private<00:42:05.960> one<00:42:06.160> is<00:42:06.319> still<00:42:06.680> like<00:42:06.839> a<00:42:07.040> bit<00:42:07.160> of 00:42:07.349 --> 00:42:07.359 align:start position:0% about private one is still like a bit of 00:42:07.359 --> 00:42:09.470 align:start position:0% about private one is still like a bit of confusion<00:42:07.839> but<00:42:08.400> if<00:42:08.520> this<00:42:08.640> is<00:42:08.760> the<00:42:09.160> if<00:42:09.280> this<00:42:09.400> is 00:42:09.470 --> 00:42:09.480 align:start position:0% confusion but if this is the if this is 00:42:09.480 --> 00:42:11.309 align:start position:0% confusion but if this is the if this is the<00:42:09.599> codit<00:42:09.960> output<00:42:10.359> that<00:42:10.480> mean<00:42:10.680> most<00:42:10.839> of<00:42:10.960> the 00:42:11.309 --> 00:42:11.319 align:start position:0% the codit output that mean most of the 00:42:11.319 --> 00:42:14.030 align:start position:0% the codit output that mean most of the JavaScript<00:42:11.760> code<00:42:12.440> look<00:42:12.720> like<00:42:12.880> that 00:42:14.030 --> 00:42:14.040 align:start position:0% JavaScript code look like that 00:42:14.040 --> 00:42:16.109 align:start position:0% JavaScript code look like that actually 00:42:16.109 --> 00:42:16.119 align:start position:0% actually 00:42:16.119 --> 00:42:18.470 align:start position:0% actually yeah 00:42:18.470 --> 00:42:18.480 align:start position:0% yeah 00:42:18.480 --> 00:42:20.990 align:start position:0% yeah geez<00:42:19.480> so<00:42:19.680> I<00:42:19.800> have<00:42:19.920> this<00:42:20.079> function<00:42:20.559> and<00:42:20.760> I<00:42:20.839> want 00:42:20.990 --> 00:42:21.000 align:start position:0% geez so I have this function and I want 00:42:21.000 --> 00:42:24.990 align:start position:0% geez so I have this function and I want to<00:42:21.319> try<00:42:21.559> to<00:42:21.760> find<00:42:22.280> gadgets<00:42:23.280> uh<00:42:24.079> in<00:42:24.280> fastify<00:42:24.920> but 00:42:24.990 --> 00:42:25.000 align:start position:0% to try to find gadgets uh in fastify but 00:42:25.000 --> 00:42:26.630 align:start position:0% to try to find gadgets uh in fastify but if<00:42:25.079> you<00:42:25.200> look<00:42:25.319> at<00:42:25.440> fastify<00:42:26.040> there<00:42:26.119> is<00:42:26.280> already 00:42:26.630 --> 00:42:26.640 align:start position:0% if you look at fastify there is already 00:42:26.640 --> 00:42:29.230 align:start position:0% if you look at fastify there is already like<00:42:27.280> thousand<00:42:27.599> of<00:42:27.800> dependency<00:42:28.680> the<00:42:28.880> code 00:42:29.230 --> 00:42:29.240 align:start position:0% like thousand of dependency the code 00:42:29.240 --> 00:42:31.670 align:start position:0% like thousand of dependency the code everywhere<00:42:29.800> and<00:42:29.920> it's<00:42:30.240> going<00:42:30.319> to<00:42:30.480> be<00:42:31.319> super 00:42:31.670 --> 00:42:31.680 align:start position:0% everywhere and it's going to be super 00:42:31.680 --> 00:42:34.510 align:start position:0% everywhere and it's going to be super painful<00:42:32.040> to<00:42:32.240> edit<00:42:32.520> all<00:42:32.680> this<00:42:33.040> code<00:42:34.040> so<00:42:34.240> instead 00:42:34.510 --> 00:42:34.520 align:start position:0% painful to edit all this code so instead 00:42:34.520 --> 00:42:35.790 align:start position:0% painful to edit all this code so instead what<00:42:34.599> we're<00:42:34.720> going<00:42:34.800> to<00:42:34.920> do<00:42:35.040> we're<00:42:35.200> going<00:42:35.319> to 00:42:35.790 --> 00:42:35.800 align:start position:0% what we're going to do we're going to 00:42:35.800 --> 00:42:40.950 align:start position:0% what we're going to do we're going to npm<00:42:36.280> install<00:42:36.720> PP 00:42:40.950 --> 00:42:40.960 align:start position:0% 00:42:40.960 --> 00:42:43.270 align:start position:0% finder<00:42:41.960> and<00:42:42.079> it's<00:42:42.240> so<00:42:42.400> much<00:42:42.559> better<00:42:42.960> than<00:42:43.079> at 00:42:43.270 --> 00:42:43.280 align:start position:0% finder and it's so much better than at 00:42:43.280 --> 00:42:44.710 align:start position:0% finder and it's so much better than at Devcon<00:42:43.680> Because<00:42:43.839> the<00:42:43.920> Internet<00:42:44.240> was<00:42:44.440> super 00:42:44.710 --> 00:42:44.720 align:start position:0% Devcon Because the Internet was super 00:42:44.720 --> 00:42:46.349 align:start position:0% Devcon Because the Internet was super fast<00:42:44.920> and<00:42:45.079> the<00:42:45.240> project<00:42:45.559> is<00:42:45.800> quite<00:42:46.040> heavy 00:42:46.349 --> 00:42:46.359 align:start position:0% fast and the project is quite heavy 00:42:46.359 --> 00:42:48.910 align:start position:0% fast and the project is quite heavy because<00:42:46.520> of<00:42:46.800> typescript<00:42:47.800> and<00:42:47.960> it<00:42:48.079> took<00:42:48.400> like 00:42:48.910 --> 00:42:48.920 align:start position:0% because of typescript and it took like 00:42:48.920 --> 00:42:52.710 align:start position:0% because of typescript and it took like 10<00:42:49.200> minutes<00:42:49.599> just<00:42:49.800> to<00:42:50.000> to<00:42:50.119> learn<00:42:50.839> oh<00:42:51.400> no<00:42:52.400> so<00:42:52.599> now 00:42:52.710 --> 00:42:52.720 align:start position:0% 10 minutes just to to learn oh no so now 00:42:52.720 --> 00:42:54.349 align:start position:0% 10 minutes just to to learn oh no so now we<00:42:52.800> have<00:42:52.920> PP<00:42:53.160> finder<00:42:53.480> installed<00:42:53.960> so<00:42:54.079> we<00:42:54.200> can 00:42:54.349 --> 00:42:54.359 align:start position:0% we have PP finder installed so we can 00:42:54.359 --> 00:42:57.910 align:start position:0% we have PP finder installed so we can run<00:42:54.559> it<00:42:54.839> with<00:42:55.079> PP<00:42:55.920> exact 00:42:57.910 --> 00:42:57.920 align:start position:0% run it with PP exact 00:42:57.920 --> 00:42:59.990 align:start position:0% run it with PP exact so<00:42:58.079> we<00:42:58.160> have<00:42:58.280> a<00:42:58.520> nice<00:42:58.720> CLI<00:42:59.240> and<00:42:59.359> we<00:42:59.440> can<00:42:59.599> run<00:42:59.800> the 00:42:59.990 --> 00:43:00.000 align:start position:0% so we have a nice CLI and we can run the 00:43:00.000 --> 00:43:04.349 align:start position:0% so we have a nice CLI and we can run the project<00:43:00.599> again<00:43:01.000> with<00:43:01.240> run<00:43:01.760> node<00:43:02.400> index 00:43:04.349 --> 00:43:04.359 align:start position:0% project again with run node index 00:43:04.359 --> 00:43:07.710 align:start position:0% project again with run node index .js<00:43:05.359> and<00:43:05.559> this<00:43:05.720> time<00:43:06.720> we<00:43:06.880> get<00:43:07.160> all<00:43:07.440> the 00:43:07.710 --> 00:43:07.720 align:start position:0% .js and this time we get all the 00:43:07.720 --> 00:43:09.750 align:start position:0% .js and this time we get all the Prototype<00:43:08.400> the<00:43:08.680> property<00:43:09.119> access<00:43:09.440> that<00:43:09.599> are 00:43:09.750 --> 00:43:09.760 align:start position:0% Prototype the property access that are 00:43:09.760 --> 00:43:13.109 align:start position:0% Prototype the property access that are accessed<00:43:10.559> during<00:43:11.359> uh<00:43:12.160> this<00:43:12.359> during<00:43:12.559> the 00:43:13.109 --> 00:43:13.119 align:start position:0% accessed during uh this during the 00:43:13.119 --> 00:43:17.430 align:start position:0% accessed during uh this during the loadup<00:43:14.119> if<00:43:14.240> I<00:43:14.400> do<00:43:14.760> a<00:43:15.559> a<00:43:15.680> little<00:43:15.920> spacing<00:43:16.440> around 00:43:17.430 --> 00:43:17.440 align:start position:0% loadup if I do a a little spacing around 00:43:17.440 --> 00:43:18.790 align:start position:0% loadup if I do a a little spacing around I<00:43:17.559> refresh<00:43:17.960> this 00:43:18.790 --> 00:43:18.800 align:start position:0% I refresh this 00:43:18.800 --> 00:43:21.990 align:start position:0% I refresh this page<00:43:19.800> and<00:43:19.920> I<00:43:20.079> go<00:43:20.319> back<00:43:20.920> I<00:43:21.040> can<00:43:21.280> see<00:43:21.520> here<00:43:21.880> all 00:43:21.990 --> 00:43:22.000 align:start position:0% page and I go back I can see here all 00:43:22.000 --> 00:43:23.950 align:start position:0% page and I go back I can see here all the<00:43:22.119> new<00:43:22.319> property<00:43:22.640> that<00:43:22.720> have<00:43:22.839> been<00:43:23.000> accessed 00:43:23.950 --> 00:43:23.960 align:start position:0% the new property that have been accessed 00:43:23.960 --> 00:43:25.870 align:start position:0% the new property that have been accessed for<00:43:24.200> a<00:43:24.319> simple<00:43:24.680> request<00:43:25.160> with<00:43:25.359> almost<00:43:25.640> nothing 00:43:25.870 --> 00:43:25.880 align:start position:0% for a simple request with almost nothing 00:43:25.880 --> 00:43:29.710 align:start position:0% for a simple request with almost nothing on<00:43:26.000> the<00:43:26.160> page<00:43:27.000> wow<00:43:27.440> wow<00:43:28.440> and<00:43:28.559> the<00:43:28.800> super<00:43:29.040> cool 00:43:29.710 --> 00:43:29.720 align:start position:0% on the page wow wow and the super cool 00:43:29.720 --> 00:43:33.470 align:start position:0% on the page wow wow and the super cool thing<00:43:30.720> could<00:43:30.800> I<00:43:30.960> ask<00:43:31.160> about<00:43:31.400> this<00:43:31.800> the 00:43:33.470 --> 00:43:33.480 align:start position:0% thing could I ask about this the 00:43:33.480 --> 00:43:36.349 align:start position:0% thing could I ask about this the so<00:43:34.480> these<00:43:34.640> are<00:43:35.319> look<00:43:35.440> at<00:43:35.559> it<00:43:35.960> I'm<00:43:36.079> surprised 00:43:36.349 --> 00:43:36.359 align:start position:0% so these are look at it I'm surprised 00:43:36.359 --> 00:43:38.430 align:start position:0% so these are look at it I'm surprised this<00:43:36.480> didn't<00:43:36.720> like<00:43:36.880> stall<00:43:37.200> it<00:43:37.359> out<00:43:37.680> a<00:43:37.800> lot 00:43:38.430 --> 00:43:38.440 align:start position:0% this didn't like stall it out a lot 00:43:38.440 --> 00:43:39.750 align:start position:0% this didn't like stall it out a lot because<00:43:38.599> are<00:43:38.680> you<00:43:38.839> hooking<00:43:39.240> every<00:43:39.440> single 00:43:39.750 --> 00:43:39.760 align:start position:0% because are you hooking every single 00:43:39.760 --> 00:43:41.950 align:start position:0% because are you hooking every single property<00:43:40.200> add<00:43:40.599> and<00:43:40.720> logging<00:43:41.559> we'll<00:43:41.760> take<00:43:41.880> a 00:43:41.950 --> 00:43:41.960 align:start position:0% property add and logging we'll take a 00:43:41.960 --> 00:43:44.230 align:start position:0% property add and logging we'll take a look<00:43:42.079> at<00:43:42.240> the<00:43:42.480> output<00:43:42.839> of<00:43:43.040> the<00:43:43.440> modified<00:43:43.920> code 00:43:44.230 --> 00:43:44.240 align:start position:0% look at the output of the modified code 00:43:44.240 --> 00:43:46.589 align:start position:0% look at the output of the modified code it's<00:43:44.480> it's<00:43:44.599> a<00:43:44.800> mess<00:43:45.240> it's<00:43:45.520> way<00:43:45.720> slower<00:43:46.440> than 00:43:46.589 --> 00:43:46.599 align:start position:0% it's it's a mess it's way slower than 00:43:46.599 --> 00:43:48.270 align:start position:0% it's it's a mess it's way slower than the<00:43:46.720> original<00:43:47.119> one<00:43:47.400> but<00:43:47.599> when<00:43:47.720> you<00:43:47.800> do<00:43:48.040> is<00:43:48.200> you 00:43:48.270 --> 00:43:48.280 align:start position:0% the original one but when you do is you 00:43:48.280 --> 00:43:50.630 align:start position:0% the original one but when you do is you are<00:43:48.400> doing<00:43:48.640> white<00:43:49.359> white<00:43:49.520> box<00:43:49.760> editing<00:43:50.559> you 00:43:50.630 --> 00:43:50.640 align:start position:0% are doing white white box editing you 00:43:50.640 --> 00:43:52.109 align:start position:0% are doing white white box editing you don't<00:43:50.839> care<00:43:51.079> about<00:43:51.280> the<00:43:51.440> time<00:43:51.839> yeah<00:43:51.960> it's 00:43:52.109 --> 00:43:52.119 align:start position:0% don't care about the time yeah it's 00:43:52.119 --> 00:43:54.670 align:start position:0% don't care about the time yeah it's slower<00:43:52.800> but<00:43:53.160> as<00:43:53.319> long<00:43:53.480> as<00:43:53.599> it<00:43:53.760> work<00:43:54.280> I'm<00:43:54.440> fine 00:43:54.670 --> 00:43:54.680 align:start position:0% slower but as long as it work I'm fine 00:43:54.680 --> 00:43:56.430 align:start position:0% slower but as long as it work I'm fine with<00:43:54.839> it<00:43:55.160> that's<00:43:55.400> that's<00:43:55.599> awesome<00:43:56.240> but<00:43:56.359> the 00:43:56.430 --> 00:43:56.440 align:start position:0% with it that's that's awesome but the 00:43:56.440 --> 00:43:58.870 align:start position:0% with it that's that's awesome but the cool<00:43:56.640> thing<00:43:56.800> is<00:43:57.160> if<00:43:57.280> you<00:43:57.440> look<00:43:57.599> at<00:43:58.119> um<00:43:58.680> at 00:43:58.870 --> 00:43:58.880 align:start position:0% cool thing is if you look at um at 00:43:58.880 --> 00:44:00.910 align:start position:0% cool thing is if you look at um at property<00:43:59.280> inside<00:43:59.559> of<00:43:59.720> it<00:43:59.920> for<00:44:00.079> example<00:44:00.599> here 00:44:00.910 --> 00:44:00.920 align:start position:0% property inside of it for example here 00:44:00.920 --> 00:44:03.270 align:start position:0% property inside of it for example here the<00:44:01.119> request<00:44:01.640> I<00:44:01.720> can<00:44:01.960> just<00:44:02.119> click<00:44:02.359> on<00:44:02.480> it<00:44:03.160> and 00:44:03.270 --> 00:44:03.280 align:start position:0% the request I can just click on it and 00:44:03.280 --> 00:44:05.630 align:start position:0% the request I can just click on it and it<00:44:03.400> will<00:44:03.599> just<00:44:03.760> open<00:44:04.000> it<00:44:04.319> directly<00:44:05.319> on<00:44:05.520> the 00:44:05.630 --> 00:44:05.640 align:start position:0% it will just open it directly on the 00:44:05.640 --> 00:44:08.069 align:start position:0% it will just open it directly on the file<00:44:06.000> and<00:44:06.200> this<00:44:06.559> no<00:44:06.800> way<00:44:07.160> dude<00:44:07.800> some 00:44:08.069 --> 00:44:08.079 align:start position:0% file and this no way dude some 00:44:08.079 --> 00:44:10.190 align:start position:0% file and this no way dude some JavaScript 00:44:10.190 --> 00:44:10.200 align:start position:0% JavaScript 00:44:10.200 --> 00:44:12.430 align:start position:0% JavaScript editing<00:44:11.200> because<00:44:11.680> I've<00:44:11.800> been<00:44:11.920> doing<00:44:12.119> a<00:44:12.240> lot<00:44:12.359> of 00:44:12.430 --> 00:44:12.440 align:start position:0% editing because I've been doing a lot of 00:44:12.440 --> 00:44:14.670 align:start position:0% editing because I've been doing a lot of JavaScript<00:44:12.839> editing<00:44:13.319> and<00:44:13.480> it's<00:44:13.760> always 00:44:14.670 --> 00:44:14.680 align:start position:0% JavaScript editing and it's always 00:44:14.680 --> 00:44:16.309 align:start position:0% JavaScript editing and it's always difficult<00:44:14.880> to<00:44:15.040> know<00:44:15.440> where<00:44:15.839> where<00:44:16.000> the<00:44:16.119> stuff 00:44:16.309 --> 00:44:16.319 align:start position:0% difficult to know where where the stuff 00:44:16.319 --> 00:44:18.950 align:start position:0% difficult to know where where the stuff is<00:44:16.480> going<00:44:17.119> and<00:44:17.400> what's<00:44:17.640> happening<00:44:18.520> and<00:44:18.680> a<00:44:18.800> cool 00:44:18.950 --> 00:44:18.960 align:start position:0% is going and what's happening and a cool 00:44:18.960 --> 00:44:21.069 align:start position:0% is going and what's happening and a cool trick<00:44:19.160> I<00:44:19.200> want<00:44:19.359> to<00:44:19.440> share<00:44:19.680> with<00:44:19.839> you<00:44:20.040> also<00:44:20.559> if 00:44:21.069 --> 00:44:21.079 align:start position:0% trick I want to share with you also if 00:44:21.079 --> 00:44:23.309 align:start position:0% trick I want to share with you also if for<00:44:21.240> example<00:44:21.520> I'm<00:44:21.680> here<00:44:21.880> but<00:44:21.960> I<00:44:22.040> want<00:44:22.160> to<00:44:22.359> know 00:44:23.309 --> 00:44:23.319 align:start position:0% for example I'm here but I want to know 00:44:23.319 --> 00:44:25.950 align:start position:0% for example I'm here but I want to know where<00:44:23.559> I'm<00:44:23.760> I<00:44:23.839> am<00:44:24.040> coming<00:44:24.520> from<00:44:25.520> you<00:44:25.640> can<00:44:25.800> just 00:44:25.950 --> 00:44:25.960 align:start position:0% where I'm I am coming from you can just 00:44:25.960 --> 00:44:28.390 align:start position:0% where I'm I am coming from you can just do<00:44:26.119> a<00:44:26.280> console<00:44:26.920> uh 00:44:28.390 --> 00:44:28.400 align:start position:0% do a console uh 00:44:28.400 --> 00:44:34.950 align:start position:0% do a console uh Trace<00:44:29.640> here<00:44:30.640> start<00:44:30.920> the<00:44:31.119> project 00:44:34.950 --> 00:44:34.960 align:start position:0% 00:44:34.960 --> 00:44:38.030 align:start position:0% again<00:44:35.960> uh<00:44:36.119> do<00:44:36.280> the 00:44:38.030 --> 00:44:38.040 align:start position:0% again uh do the 00:44:38.040 --> 00:44:40.390 align:start position:0% again uh do the request<00:44:39.040> and<00:44:39.200> now<00:44:39.359> I<00:44:39.440> got<00:44:39.599> the<00:44:39.720> trace<00:44:40.040> so<00:44:40.160> I<00:44:40.240> can 00:44:40.390 --> 00:44:40.400 align:start position:0% request and now I got the trace so I can 00:44:40.400 --> 00:44:43.109 align:start position:0% request and now I got the trace so I can know<00:44:40.680> I<00:44:40.800> mean<00:44:41.119> as<00:44:41.319> is<00:44:41.440> on<00:44:41.720> right<00:44:41.960> log<00:44:42.520> un<00:44:42.760> respon 00:44:43.109 --> 00:44:43.119 align:start position:0% know I mean as is on right log un respon 00:44:43.119 --> 00:44:45.390 align:start position:0% know I mean as is on right log un respon C<00:44:43.319> back<00:44:43.520> so<00:44:43.640> I<00:44:43.720> know<00:44:43.920> every<00:44:44.440> everywhere<00:44:44.920> when<00:44:45.160> I 00:44:45.390 --> 00:44:45.400 align:start position:0% C back so I know every everywhere when I 00:44:45.400 --> 00:44:48.630 align:start position:0% C back so I know every everywhere when I I<00:44:45.520> was<00:44:45.920> before<00:44:46.920> but<00:44:47.640> just<00:44:48.040> keep<00:44:48.200> in<00:44:48.359> mind 00:44:48.630 --> 00:44:48.640 align:start position:0% I was before but just keep in mind 00:44:48.640 --> 00:44:50.190 align:start position:0% I was before but just keep in mind because<00:44:48.880> the<00:44:49.000> code<00:44:49.240> is<00:44:49.559> the<00:44:49.680> code<00:44:49.920> actually 00:44:50.190 --> 00:44:50.200 align:start position:0% because the code is the code actually 00:44:50.200 --> 00:44:52.510 align:start position:0% because the code is the code actually running<00:44:50.480> is<00:44:50.640> modified<00:44:51.440> all<00:44:51.640> the<00:44:51.760> line<00:44:51.960> numbers 00:44:52.510 --> 00:44:52.520 align:start position:0% running is modified all the line numbers 00:44:52.520 --> 00:44:53.990 align:start position:0% running is modified all the line numbers are<00:44:52.680> going<00:44:52.760> to<00:44:52.880> be<00:44:53.040> wrong<00:44:53.440> if<00:44:53.520> you<00:44:53.760> running 00:44:53.990 --> 00:44:54.000 align:start position:0% are going to be wrong if you running 00:44:54.000 --> 00:44:56.190 align:start position:0% are going to be wrong if you running with<00:44:54.119> Pinder<00:44:54.800> which<00:44:54.960> Trace<00:44:55.359> but<00:44:55.480> you<00:44:55.640> still 00:44:56.190 --> 00:44:56.200 align:start position:0% with Pinder which Trace but you still 00:44:56.200 --> 00:44:58.270 align:start position:0% with Pinder which Trace but you still know<00:44:56.400> the<00:44:56.520> function 00:44:58.270 --> 00:44:58.280 align:start position:0% know the function 00:44:58.280 --> 00:45:01.030 align:start position:0% know the function always<00:44:58.640> a<00:44:58.839> full<00:44:59.480> nice<00:44:59.680> little<00:44:59.880> trick<00:45:00.800> very 00:45:01.030 --> 00:45:01.040 align:start position:0% always a full nice little trick very 00:45:01.040 --> 00:45:03.630 align:start position:0% always a full nice little trick very cool<00:45:01.720> so<00:45:01.880> let's<00:45:02.079> remove<00:45:02.480> that<00:45:02.960> and<00:45:03.119> let's<00:45:03.319> try 00:45:03.630 --> 00:45:03.640 align:start position:0% cool so let's remove that and let's try 00:45:03.640 --> 00:45:06.829 align:start position:0% cool so let's remove that and let's try so<00:45:04.040> to<00:45:04.200> look<00:45:04.400> to<00:45:04.640> for<00:45:04.839> a<00:45:05.000> simple 00:45:06.829 --> 00:45:06.839 align:start position:0% so to look to for a simple 00:45:06.839 --> 00:45:09.670 align:start position:0% so to look to for a simple exploit<00:45:07.839> do<00:45:08.000> a<00:45:08.160> request<00:45:08.640> again<00:45:09.119> and<00:45:09.280> try<00:45:09.520> to 00:45:09.670 --> 00:45:09.680 align:start position:0% exploit do a request again and try to 00:45:09.680 --> 00:45:11.710 align:start position:0% exploit do a request again and try to see<00:45:09.839> if<00:45:09.960> we<00:45:10.440> if<00:45:10.559> we<00:45:10.680> spot<00:45:11.000> something 00:45:11.710 --> 00:45:11.720 align:start position:0% see if we if we spot something 00:45:11.720 --> 00:45:14.349 align:start position:0% see if we if we spot something interesting<00:45:12.720> so<00:45:13.000> fastify<00:45:13.440> is<00:45:13.559> actually<00:45:13.920> very 00:45:14.349 --> 00:45:14.359 align:start position:0% interesting so fastify is actually very 00:45:14.359 --> 00:45:16.030 align:start position:0% interesting so fastify is actually very well<00:45:14.559> made<00:45:15.040> and<00:45:15.160> there<00:45:15.280> is<00:45:15.440> not<00:45:15.559> a<00:45:15.680> lot<00:45:15.800> of 00:45:16.030 --> 00:45:16.040 align:start position:0% well made and there is not a lot of 00:45:16.040 --> 00:45:18.470 align:start position:0% well made and there is not a lot of properties<00:45:16.720> access<00:45:17.200> in<00:45:17.520> in<00:45:17.640> fastify<00:45:18.160> there<00:45:18.280> is 00:45:18.470 --> 00:45:18.480 align:start position:0% properties access in in fastify there is 00:45:18.480 --> 00:45:22.510 align:start position:0% properties access in in fastify there is way<00:45:18.680> more<00:45:18.920> in<00:45:19.480> not<00:45:19.720> GS<00:45:20.240> Nots<00:45:20.880> in<00:45:21.359> Express<00:45:22.359> but 00:45:22.510 --> 00:45:22.520 align:start position:0% way more in not GS Nots in Express but 00:45:22.520 --> 00:45:26.349 align:start position:0% way more in not GS Nots in Express but when<00:45:22.920> that<00:45:23.160> c<00:45:23.440> cut<00:45:23.640> my<00:45:23.839> eyes<00:45:24.319> what<00:45:25.000> the<00:45:26.000> content 00:45:26.349 --> 00:45:26.359 align:start position:0% when that c cut my eyes what the content 00:45:26.359 --> 00:45:28.190 align:start position:0% when that c cut my eyes what the content type<00:45:26.599> over<00:45:26.800> there 00:45:28.190 --> 00:45:28.200 align:start position:0% type over there 00:45:28.200 --> 00:45:31.710 align:start position:0% type over there and<00:45:28.319> if<00:45:28.400> you<00:45:28.520> try<00:45:28.680> to<00:45:28.800> look<00:45:28.880> at<00:45:29.040> content<00:45:29.359> type 00:45:31.710 --> 00:45:31.720 align:start position:0% and if you try to look at content type 00:45:31.720 --> 00:45:34.589 align:start position:0% and if you try to look at content type here<00:45:32.720> uh<00:45:32.920> what<00:45:33.040> we<00:45:33.160> see<00:45:33.359> it's<00:45:33.559> it's<00:45:33.800> ACC<00:45:34.200> aced 00:45:34.589 --> 00:45:34.599 align:start position:0% here uh what we see it's it's ACC aced 00:45:34.599 --> 00:45:36.390 align:start position:0% here uh what we see it's it's ACC aced when<00:45:34.720> we<00:45:34.800> try<00:45:35.040> to<00:45:35.240> get<00:45:35.440> the<00:45:35.599> other<00:45:36.160> but<00:45:36.280> the 00:45:36.390 --> 00:45:36.400 align:start position:0% when we try to get the other but the 00:45:36.400 --> 00:45:38.069 align:start position:0% when we try to get the other but the other<00:45:36.640> content<00:45:36.960> type<00:45:37.319> I<00:45:37.400> don't<00:45:37.559> know<00:45:37.760> why<00:45:37.880> it's 00:45:38.069 --> 00:45:38.079 align:start position:0% other content type I don't know why it's 00:45:38.079 --> 00:45:39.950 align:start position:0% other content type I don't know why it's it's<00:45:38.240> not<00:45:38.440> set 00:45:39.950 --> 00:45:39.960 align:start position:0% it's not set 00:45:39.960 --> 00:45:42.430 align:start position:0% it's not set yet<00:45:40.960> and<00:45:41.079> let's<00:45:41.280> try<00:45:41.440> to<00:45:41.760> modify<00:45:42.119> it<00:45:42.280> to 00:45:42.430 --> 00:45:42.440 align:start position:0% yet and let's try to modify it to 00:45:42.440 --> 00:45:44.589 align:start position:0% yet and let's try to modify it to something 00:45:44.589 --> 00:45:44.599 align:start position:0% something 00:45:44.599 --> 00:45:48.910 align:start position:0% something else<00:45:45.599> so<00:45:45.839> I<00:45:46.000> got<00:45:46.400> my<00:45:46.640> BB<00:45:47.000> set<00:45:47.240> up<00:45:47.680> over<00:45:47.920> there<00:45:48.520> so 00:45:48.910 --> 00:45:48.920 align:start position:0% else so I got my BB set up over there so 00:45:48.920 --> 00:45:51.630 align:start position:0% else so I got my BB set up over there so like<00:45:49.040> we<00:45:49.160> said<00:45:49.400> before<00:45:49.680> I<00:45:49.760> can<00:45:50.280> get<00:45:50.480> my<00:45:50.640> config 00:45:51.630 --> 00:45:51.640 align:start position:0% like we said before I can get my config 00:45:51.640 --> 00:45:54.069 align:start position:0% like we said before I can get my config and<00:45:51.800> update<00:45:52.160> the<00:45:52.319> config<00:45:53.319> and<00:45:53.440> here<00:45:53.599> I<00:45:53.760> got<00:45:53.960> I 00:45:54.069 --> 00:45:54.079 align:start position:0% and update the config and here I got I 00:45:54.079 --> 00:45:56.990 align:start position:0% and update the config and here I got I update<00:45:54.400> to<00:45:54.920> X<00:45:55.559> X32<00:45:56.240> and<00:45:56.359> the<00:45:56.440> next<00:45:56.599> time<00:45:56.680> I<00:45:56.760> get 00:45:56.990 --> 00:45:57.000 align:start position:0% update to X X32 and the next time I get 00:45:57.000 --> 00:45:59.589 align:start position:0% update to X X32 and the next time I get the<00:45:57.119> config<00:45:57.599> I<00:45:57.760> got<00:45:57.880> it<00:45:58.119> there<00:45:59.040> so<00:45:59.240> this<00:45:59.319> is<00:45:59.480> the 00:45:59.589 --> 00:45:59.599 align:start position:0% the config I got it there so this is the 00:45:59.599 --> 00:46:02.549 align:start position:0% the config I got it there so this is the simple<00:46:00.119> protype<00:46:00.480> pollution<00:46:00.800> sync<00:46:01.160> we<00:46:01.319> have 00:46:02.549 --> 00:46:02.559 align:start position:0% simple protype pollution sync we have 00:46:02.559 --> 00:46:06.190 align:start position:0% simple protype pollution sync we have earlier<00:46:03.559> so<00:46:03.720> let's<00:46:03.880> try<00:46:04.160> with 00:46:06.190 --> 00:46:06.200 align:start position:0% earlier so let's try with 00:46:06.200 --> 00:46:09.829 align:start position:0% earlier so let's try with Proto<00:46:07.200> uh<00:46:07.440> and<00:46:07.680> let's<00:46:07.920> set<00:46:08.240> the<00:46:08.480> content 00:46:09.829 --> 00:46:09.839 align:start position:0% Proto uh and let's set the content 00:46:09.839 --> 00:46:13.630 align:start position:0% Proto uh and let's set the content type<00:46:10.839> to<00:46:11.119> something<00:46:12.040> uh<00:46:12.520> something 00:46:13.630 --> 00:46:13.640 align:start position:0% type to something uh something 00:46:13.640 --> 00:46:17.109 align:start position:0% type to something uh something stupid<00:46:14.640> let's<00:46:14.920> go<00:46:15.319> and<00:46:15.559> run<00:46:15.720> it<00:46:16.000> again<00:46:16.440> and<00:46:16.640> now 00:46:17.109 --> 00:46:17.119 align:start position:0% stupid let's go and run it again and now 00:46:17.119 --> 00:46:20.829 align:start position:0% stupid let's go and run it again and now we<00:46:18.119> we<00:46:18.240> know<00:46:18.440> there<00:46:18.520> is<00:46:18.640> a<00:46:18.760> bunch<00:46:18.960> of<00:46:19.160> error<00:46:20.160> uh 00:46:20.829 --> 00:46:20.839 align:start position:0% we we know there is a bunch of error uh 00:46:20.839 --> 00:46:22.309 align:start position:0% we we know there is a bunch of error uh it's<00:46:21.119> crashing 00:46:22.309 --> 00:46:22.319 align:start position:0% it's crashing 00:46:22.319 --> 00:46:25.549 align:start position:0% it's crashing everywhere<00:46:23.640> and<00:46:24.640> so<00:46:24.880> something<00:46:25.119> is<00:46:25.280> going 00:46:25.549 --> 00:46:25.559 align:start position:0% everywhere and so something is going 00:46:25.559 --> 00:46:27.549 align:start position:0% everywhere and so something is going wrong<00:46:26.000> but<00:46:26.400> you<00:46:26.520> can<00:46:26.680> keep<00:46:26.800> it<00:46:26.920> ping<00:46:27.240> your<00:46:27.359> code 00:46:27.549 --> 00:46:27.559 align:start position:0% wrong but you can keep it ping your code 00:46:27.559 --> 00:46:29.510 align:start position:0% wrong but you can keep it ping your code with<00:46:27.680> PP<00:46:27.920> finder<00:46:28.240> try<00:46:28.440> to<00:46:28.599> look<00:46:28.960> where<00:46:29.359> where 00:46:29.510 --> 00:46:29.520 align:start position:0% with PP finder try to look where where 00:46:29.520 --> 00:46:30.990 align:start position:0% with PP finder try to look where where the<00:46:29.680> thing<00:46:29.800> is<00:46:29.960> happening<00:46:30.400> do<00:46:30.559> the<00:46:30.680> consult 00:46:30.990 --> 00:46:31.000 align:start position:0% the thing is happening do the consult 00:46:31.000 --> 00:46:34.870 align:start position:0% the thing is happening do the consult Tres<00:46:31.400> to<00:46:32.160> to<00:46:32.319> get<00:46:32.480> a<00:46:32.599> little<00:46:32.880> bit<00:46:33.319> more<00:46:33.760> to<00:46:33.960> know 00:46:34.870 --> 00:46:34.880 align:start position:0% Tres to to get a little bit more to know 00:46:34.880 --> 00:46:37.150 align:start position:0% Tres to to get a little bit more to know why<00:46:35.119> which<00:46:35.280> is<00:46:35.440> the<00:46:35.680> issue<00:46:36.559> and<00:46:36.720> the<00:46:36.839> issue<00:46:37.040> is 00:46:37.150 --> 00:46:37.160 align:start position:0% why which is the issue and the issue is 00:46:37.160 --> 00:46:38.750 align:start position:0% why which is the issue and the issue is I<00:46:37.359> going<00:46:37.480> to<00:46:37.599> tell<00:46:37.760> you<00:46:37.880> so<00:46:38.040> we<00:46:38.160> don't<00:46:38.520> spend 00:46:38.750 --> 00:46:38.760 align:start position:0% I going to tell you so we don't spend 00:46:38.760 --> 00:46:41.270 align:start position:0% I going to tell you so we don't spend too<00:46:38.880> much<00:46:39.040> time<00:46:39.200> on<00:46:39.359> it<00:46:40.200> it's<00:46:40.640> it<00:46:40.760> tried<00:46:41.040> to 00:46:41.270 --> 00:46:41.280 align:start position:0% too much time on it it's it tried to 00:46:41.280 --> 00:46:42.549 align:start position:0% too much time on it it's it tried to reply<00:46:41.640> with<00:46:41.720> the<00:46:41.839> content<00:46:42.160> tab<00:46:42.359> you<00:46:42.440> don't 00:46:42.549 --> 00:46:42.559 align:start position:0% reply with the content tab you don't 00:46:42.559 --> 00:46:44.390 align:start position:0% reply with the content tab you don't know<00:46:42.680> what<00:46:42.800> it<00:46:42.960> is<00:46:43.319> and<00:46:43.480> it's<00:46:43.760> looking<00:46:44.160> for 00:46:44.390 --> 00:46:44.400 align:start position:0% know what it is and it's looking for 00:46:44.400 --> 00:46:46.589 align:start position:0% know what it is and it's looking for application<00:46:44.839> Jon<00:46:45.400> in<00:46:45.520> the<00:46:45.640> content 00:46:46.589 --> 00:46:46.599 align:start position:0% application Jon in the content 00:46:46.599 --> 00:46:51.190 align:start position:0% application Jon in the content type<00:46:47.599> but<00:46:47.720> if<00:46:47.839> I<00:46:48.040> do<00:46:48.440> a<00:46:48.640> simple<00:46:49.359> uh<00:46:49.720> exploit<00:46:50.720> uh 00:46:51.190 --> 00:46:51.200 align:start position:0% type but if I do a simple uh exploit uh 00:46:51.200 --> 00:46:53.750 align:start position:0% type but if I do a simple uh exploit uh let's<00:46:51.440> wait<00:46:51.599> for<00:46:51.720> it<00:46:51.839> to<00:46:51.960> start<00:46:52.480> again<00:46:53.480> here 00:46:53.750 --> 00:46:53.760 align:start position:0% let's wait for it to start again here 00:46:53.760 --> 00:46:55.790 align:start position:0% let's wait for it to start again here instead<00:46:54.000> of<00:46:54.119> doing<00:46:54.359> content<00:46:54.680> type<00:46:55.280> bitk<00:46:55.720> I 00:46:55.790 --> 00:46:55.800 align:start position:0% instead of doing content type bitk I 00:46:55.800 --> 00:46:57.349 align:start position:0% instead of doing content type bitk I will<00:46:55.960> do<00:46:56.280> text 00:46:57.349 --> 00:46:57.359 align:start position:0% will do text 00:46:57.359 --> 00:46:59.950 align:start position:0% will do text HTML<00:46:58.200> and<00:46:58.319> I<00:46:58.400> will<00:46:58.599> just<00:46:58.920> add<00:46:59.200> application<00:46:59.599> Jon 00:46:59.950 --> 00:46:59.960 align:start position:0% HTML and I will just add application Jon 00:46:59.960 --> 00:47:03.030 align:start position:0% HTML and I will just add application Jon later<00:47:00.680> it<00:47:00.839> just<00:47:01.000> need<00:47:01.200> to<00:47:01.359> be<00:47:01.640> present<00:47:01.920> in<00:47:02.040> the 00:47:03.030 --> 00:47:03.040 align:start position:0% later it just need to be present in the 00:47:03.040 --> 00:47:05.750 align:start position:0% later it just need to be present in the string<00:47:04.040> and<00:47:04.280> now<00:47:04.520> when<00:47:04.680> I<00:47:04.920> do<00:47:05.119> my<00:47:05.280> request<00:47:05.680> you 00:47:05.750 --> 00:47:05.760 align:start position:0% string and now when I do my request you 00:47:05.760 --> 00:47:08.069 align:start position:0% string and now when I do my request you can<00:47:05.920> see<00:47:06.200> all<00:47:06.400> my<00:47:06.599> reply<00:47:07.040> will<00:47:07.160> be<00:47:07.359> text<00:47:07.599> HTML 00:47:08.069 --> 00:47:08.079 align:start position:0% can see all my reply will be text HTML 00:47:08.079 --> 00:47:10.870 align:start position:0% can see all my reply will be text HTML application<00:47:08.960> Jen<00:47:09.960> so<00:47:10.119> if<00:47:10.200> I<00:47:10.319> go<00:47:10.480> back<00:47:10.599> to<00:47:10.720> my 00:47:10.870 --> 00:47:10.880 align:start position:0% application Jen so if I go back to my 00:47:10.880 --> 00:47:14.390 align:start position:0% application Jen so if I go back to my index<00:47:11.359> when<00:47:11.520> I<00:47:11.680> can<00:47:11.920> I<00:47:12.000> was<00:47:12.160> able<00:47:12.400> to<00:47:12.559> do<00:47:13.119> X<00:47:13.520> name 00:47:14.390 --> 00:47:14.400 align:start position:0% index when I can I was able to do X name 00:47:14.400 --> 00:47:21.190 align:start position:0% index when I can I was able to do X name um<00:47:15.400> name<00:47:15.680> equal<00:47:16.559> Toto<00:47:17.559> it's<00:47:17.839> Toto<00:47:18.480> but<00:47:18.599> if<00:47:18.720> I<00:47:18.880> do 00:47:21.190 --> 00:47:21.200 align:start position:0% um name equal Toto it's Toto but if I do 00:47:21.200 --> 00:47:23.270 align:start position:0% um name equal Toto it's Toto but if I do script<00:47:22.200> at 00:47:23.270 --> 00:47:23.280 align:start position:0% script at 00:47:23.280 --> 00:47:25.829 align:start position:0% script at one<00:47:24.280> is<00:47:24.559> reflected<00:47:25.119> because<00:47:25.319> the<00:47:25.440> cont<00:47:25.680> type 00:47:25.829 --> 00:47:25.839 align:start position:0% one is reflected because the cont type 00:47:25.839 --> 00:47:27.950 align:start position:0% one is reflected because the cont type is<00:47:25.920> not<00:47:26.040> Jen<00:47:26.400> anymore<00:47:26.960> fif<00:47:27.319> I<00:47:27.440> still<00:47:27.599> think<00:47:27.760> is 00:47:27.950 --> 00:47:27.960 align:start position:0% is not Jen anymore fif I still think is 00:47:27.960 --> 00:47:29.510 align:start position:0% is not Jen anymore fif I still think is Jen<00:47:28.400> because<00:47:28.559> he<00:47:28.720> looking<00:47:28.960> for<00:47:29.160> application 00:47:29.510 --> 00:47:29.520 align:start position:0% Jen because he looking for application 00:47:29.520 --> 00:47:31.670 align:start position:0% Jen because he looking for application Jon<00:47:29.880> in<00:47:30.000> the<00:47:30.280> in<00:47:30.359> the<00:47:30.480> content<00:47:30.800> type<00:47:31.400> so<00:47:31.559> it's 00:47:31.670 --> 00:47:31.680 align:start position:0% Jon in the in the content type so it's 00:47:31.680 --> 00:47:34.190 align:start position:0% Jon in the in the content type so it's not<00:47:31.880> escaping<00:47:32.520> properly<00:47:33.520> but<00:47:33.720> it's<00:47:33.920> actually 00:47:34.190 --> 00:47:34.200 align:start position:0% not escaping properly but it's actually 00:47:34.200 --> 00:47:36.910 align:start position:0% not escaping properly but it's actually text<00:47:34.440> HTML<00:47:34.960> and<00:47:35.079> if<00:47:35.160> I<00:47:35.280> try<00:47:35.480> to<00:47:35.760> open<00:47:36.040> it<00:47:36.520> in<00:47:36.680> my 00:47:36.910 --> 00:47:36.920 align:start position:0% text HTML and if I try to open it in my 00:47:36.920 --> 00:47:39.470 align:start position:0% text HTML and if I try to open it in my web<00:47:37.160> browser<00:47:38.000> we<00:47:38.160> get<00:47:38.280> the 00:47:39.470 --> 00:47:39.480 align:start position:0% web browser we get the 00:47:39.480 --> 00:47:42.990 align:start position:0% web browser we get the xss<00:47:40.880> wow<00:47:41.880> another<00:47:42.119> thing<00:47:42.280> I<00:47:42.359> want<00:47:42.480> to<00:47:42.599> show<00:47:42.760> you 00:47:42.990 --> 00:47:43.000 align:start position:0% xss wow another thing I want to show you 00:47:43.000 --> 00:47:44.390 align:start position:0% xss wow another thing I want to show you with<00:47:43.160> PP<00:47:43.400> finder<00:47:43.760> there<00:47:43.839> is<00:47:43.960> a<00:47:44.040> bunch<00:47:44.240> of 00:47:44.390 --> 00:47:44.400 align:start position:0% with PP finder there is a bunch of 00:47:44.400 --> 00:47:47.750 align:start position:0% with PP finder there is a bunch of option<00:47:44.800> you<00:47:44.960> can<00:47:45.319> uh<00:47:45.480> you<00:47:45.559> can<00:47:45.760> use<00:47:46.640> so<00:47:47.000> let's 00:47:47.750 --> 00:47:47.760 align:start position:0% option you can uh you can use so let's 00:47:47.760 --> 00:47:48.990 align:start position:0% option you can uh you can use so let's do 00:47:48.990 --> 00:47:49.000 align:start position:0% do 00:47:49.000 --> 00:47:54.230 align:start position:0% do npm<00:47:50.000> PP<00:47:50.760> finder<00:47:51.760> uh<00:47:52.119> in<00:47:52.319> it<00:47:52.720> it<00:47:52.839> will<00:47:53.079> create<00:47:53.720> a 00:47:54.230 --> 00:47:54.240 align:start position:0% npm PP finder uh in it it will create a 00:47:54.240 --> 00:47:57.349 align:start position:0% npm PP finder uh in it it will create a default<00:47:54.640> config<00:47:55.079> file 00:47:57.349 --> 00:47:57.359 align:start position:0% default config file 00:47:57.359 --> 00:47:59.390 align:start position:0% default config file uh<00:47:57.480> in<00:47:57.640> my<00:47:57.800> folder<00:47:58.480> and<00:47:58.640> here<00:47:58.760> you<00:47:58.839> have<00:47:59.000> all 00:47:59.390 --> 00:47:59.400 align:start position:0% uh in my folder and here you have all 00:47:59.400 --> 00:48:01.030 align:start position:0% uh in my folder and here you have all the<00:47:59.760> configuration<00:48:00.400> there<00:48:00.480> is<00:48:00.559> a<00:48:00.720> little<00:48:00.920> bit 00:48:01.030 --> 00:48:01.040 align:start position:0% the configuration there is a little bit 00:48:01.040 --> 00:48:04.630 align:start position:0% the configuration there is a little bit of<00:48:01.200> documentation<00:48:01.920> but<00:48:02.079> it's<00:48:03.079> not<00:48:03.240> a<00:48:03.400> lot<00:48:04.319> I'm 00:48:04.630 --> 00:48:04.640 align:start position:0% of documentation but it's not a lot I'm 00:48:04.640 --> 00:48:07.430 align:start position:0% of documentation but it's not a lot I'm sorry<00:48:05.640> and<00:48:06.000> what<00:48:06.079> we<00:48:06.200> can<00:48:06.400> do<00:48:06.720> for<00:48:06.920> example 00:48:07.430 --> 00:48:07.440 align:start position:0% sorry and what we can do for example 00:48:07.440 --> 00:48:09.109 align:start position:0% sorry and what we can do for example every<00:48:07.640> time<00:48:07.800> we 00:48:09.109 --> 00:48:09.119 align:start position:0% every time we 00:48:09.119 --> 00:48:11.589 align:start position:0% every time we start<00:48:10.119> um<00:48:10.440> this<00:48:10.720> project<00:48:11.079> we<00:48:11.200> have<00:48:11.319> like<00:48:11.440> a 00:48:11.589 --> 00:48:11.599 align:start position:0% start um this project we have like a 00:48:11.599 --> 00:48:13.829 align:start position:0% start um this project we have like a bunch<00:48:12.119> of<00:48:12.440> output<00:48:13.000> which<00:48:13.119> is<00:48:13.359> just<00:48:13.720> the 00:48:13.829 --> 00:48:13.839 align:start position:0% bunch of output which is just the 00:48:13.839 --> 00:48:15.549 align:start position:0% bunch of output which is just the library 00:48:15.549 --> 00:48:15.559 align:start position:0% library 00:48:15.559 --> 00:48:17.950 align:start position:0% library loadings<00:48:16.559> and<00:48:17.119> maybe<00:48:17.359> we<00:48:17.480> don't<00:48:17.640> want<00:48:17.800> all 00:48:17.950 --> 00:48:17.960 align:start position:0% loadings and maybe we don't want all 00:48:17.960 --> 00:48:19.430 align:start position:0% loadings and maybe we don't want all this<00:48:18.079> output<00:48:18.440> because<00:48:18.680> here<00:48:18.839> it's<00:48:18.960> a<00:48:19.119> simple 00:48:19.430 --> 00:48:19.440 align:start position:0% this output because here it's a simple 00:48:19.440 --> 00:48:21.790 align:start position:0% this output because here it's a simple fastify<00:48:19.920> server<00:48:20.520> if<00:48:20.640> you<00:48:20.800> try<00:48:20.960> to<00:48:21.119> start<00:48:21.319> a<00:48:21.559> big 00:48:21.790 --> 00:48:21.800 align:start position:0% fastify server if you try to start a big 00:48:21.800 --> 00:48:23.349 align:start position:0% fastify server if you try to start a big JavaScript<00:48:22.319> project<00:48:22.640> you<00:48:22.800> have<00:48:22.920> a<00:48:23.040> bunch<00:48:23.200> of 00:48:23.349 --> 00:48:23.359 align:start position:0% JavaScript project you have a bunch of 00:48:23.359 --> 00:48:25.349 align:start position:0% JavaScript project you have a bunch of stuff<00:48:23.599> happening<00:48:24.559> before<00:48:24.760> you<00:48:24.880> can<00:48:25.000> send 00:48:25.349 --> 00:48:25.359 align:start position:0% stuff happening before you can send 00:48:25.359 --> 00:48:27.589 align:start position:0% stuff happening before you can send anything<00:48:25.800> so<00:48:25.960> all<00:48:26.119> these<00:48:26.280> Keys<00:48:26.559> even<00:48:26.960> that 00:48:27.589 --> 00:48:27.599 align:start position:0% anything so all these Keys even that 00:48:27.599 --> 00:48:29.109 align:start position:0% anything so all these Keys even that there's<00:48:27.760> a<00:48:27.839> pollution<00:48:28.119> inside<00:48:28.359> of<00:48:28.520> it<00:48:29.000> you 00:48:29.109 --> 00:48:29.119 align:start position:0% there's a pollution inside of it you 00:48:29.119 --> 00:48:32.349 align:start position:0% there's a pollution inside of it you will<00:48:29.480> be<00:48:29.640> never<00:48:29.920> able<00:48:30.079> to<00:48:30.280> reach<00:48:31.000> them<00:48:32.000> so<00:48:32.240> what 00:48:32.349 --> 00:48:32.359 align:start position:0% will be never able to reach them so what 00:48:32.359 --> 00:48:34.510 align:start position:0% will be never able to reach them so what we<00:48:32.480> can<00:48:32.640> do<00:48:32.839> we<00:48:32.960> can<00:48:33.160> do<00:48:33.400> the<00:48:33.559> lazy<00:48:33.880> start<00:48:34.200> to 00:48:34.510 --> 00:48:34.520 align:start position:0% we can do we can do the lazy start to 00:48:34.520 --> 00:48:37.390 align:start position:0% we can do we can do the lazy start to two<00:48:35.520> and<00:48:35.680> inside<00:48:35.920> our<00:48:36.079> tool<00:48:36.480> just<00:48:36.760> say<00:48:37.200> okay 00:48:37.390 --> 00:48:37.400 align:start position:0% two and inside our tool just say okay 00:48:37.400 --> 00:48:41.069 align:start position:0% two and inside our tool just say okay let's<00:48:38.079> do<00:48:39.079> uh<00:48:39.920> PP 00:48:41.069 --> 00:48:41.079 align:start position:0% let's do uh PP 00:48:41.079 --> 00:48:45.030 align:start position:0% let's do uh PP finder<00:48:42.359> start<00:48:43.359> and<00:48:43.640> now<00:48:44.000> it<00:48:44.119> should<00:48:44.400> run<00:48:44.760> only 00:48:45.030 --> 00:48:45.040 align:start position:0% finder start and now it should run only 00:48:45.040 --> 00:48:47.430 align:start position:0% finder start and now it should run only when<00:48:45.240> this<00:48:45.359> is<00:48:45.559> Rich<00:48:46.400> so<00:48:46.559> we<00:48:46.680> should<00:48:46.920> have<00:48:47.319> a 00:48:47.430 --> 00:48:47.440 align:start position:0% when this is Rich so we should have a 00:48:47.440 --> 00:48:48.950 align:start position:0% when this is Rich so we should have a little<00:48:47.640> bit<00:48:47.839> less<00:48:48.079> output<00:48:48.520> I<00:48:48.599> don't<00:48:48.760> know 00:48:48.950 --> 00:48:48.960 align:start position:0% little bit less output I don't know 00:48:48.960 --> 00:48:52.870 align:start position:0% little bit less output I don't know about<00:48:49.960> there<00:48:50.440> but<00:48:51.200> usually<00:48:51.480> you<00:48:51.599> have<00:48:51.920> less 00:48:52.870 --> 00:48:52.880 align:start position:0% about there but usually you have less 00:48:52.880 --> 00:48:55.430 align:start position:0% about there but usually you have less and<00:48:53.079> all<00:48:53.599> one<00:48:53.799> other<00:48:54.200> nice<00:48:54.599> did<00:48:54.640> you<00:48:55.160> you<00:48:55.280> just 00:48:55.430 --> 00:48:55.440 align:start position:0% and all one other nice did you you just 00:48:55.440 --> 00:48:57.430 align:start position:0% and all one other nice did you you just put<00:48:55.599> that<00:48:55.720> in<00:48:55.799> a<00:48:55.960> string<00:48:56.520> just 00:48:57.430 --> 00:48:57.440 align:start position:0% put that in a string just 00:48:57.440 --> 00:48:59.270 align:start position:0% put that in a string just that's<00:48:57.839> the<00:48:58.319> that's<00:48:58.640> that's<00:48:58.760> a<00:48:58.880> pretty<00:48:59.079> cool 00:48:59.270 --> 00:48:59.280 align:start position:0% that's the that's that's a pretty cool 00:48:59.280 --> 00:49:01.270 align:start position:0% that's the that's that's a pretty cool way<00:48:59.400> of<00:48:59.520> doing<00:48:59.760> that<00:49:00.040> I<00:49:00.119> like<00:49:00.280> that<00:49:00.480> it's<00:49:00.920> I<00:49:01.000> use 00:49:01.270 --> 00:49:01.280 align:start position:0% way of doing that I like that it's I use 00:49:01.280 --> 00:49:04.030 align:start position:0% way of doing that I like that it's I use the<00:49:01.440> ID<00:49:01.799> of<00:49:02.079> UST<00:49:02.520> strict<00:49:03.520> because<00:49:03.760> this<00:49:03.880> is 00:49:04.030 --> 00:49:04.040 align:start position:0% the ID of UST strict because this is 00:49:04.040 --> 00:49:07.390 align:start position:0% the ID of UST strict because this is actually<00:49:04.359> a<00:49:04.599> valid<00:49:04.880> syntax<00:49:05.599> in<00:49:06.599> in<00:49:06.920> JavaScript 00:49:07.390 --> 00:49:07.400 align:start position:0% actually a valid syntax in in JavaScript 00:49:07.400 --> 00:49:09.589 align:start position:0% actually a valid syntax in in JavaScript or<00:49:07.520> use<00:49:07.720> client<00:49:08.119> if<00:49:08.200> you<00:49:08.359> do<00:49:08.480> some<00:49:08.640> react 00:49:09.589 --> 00:49:09.599 align:start position:0% or use client if you do some react 00:49:09.599 --> 00:49:12.750 align:start position:0% or use client if you do some react client<00:49:09.920> with<00:49:10.119> server<00:49:11.119> that's<00:49:11.359> cool<00:49:11.640> I<00:49:11.799> like 00:49:12.750 --> 00:49:12.760 align:start position:0% client with server that's cool I like 00:49:12.760 --> 00:49:15.470 align:start position:0% client with server that's cool I like that<00:49:13.760> um<00:49:14.119> another<00:49:14.359> thing<00:49:14.480> you<00:49:14.599> can<00:49:14.799> do<00:49:15.119> is<00:49:15.359> here 00:49:15.470 --> 00:49:15.480 align:start position:0% that um another thing you can do is here 00:49:15.480 --> 00:49:16.910 align:start position:0% that um another thing you can do is here we<00:49:15.599> have<00:49:15.720> a<00:49:15.839> bunch<00:49:16.040> of<00:49:16.160> output<00:49:16.520> which<00:49:16.599> is<00:49:16.799> just 00:49:16.910 --> 00:49:16.920 align:start position:0% we have a bunch of output which is just 00:49:16.920 --> 00:49:19.230 align:start position:0% we have a bunch of output which is just the<00:49:17.040> same<00:49:17.280> one<00:49:17.839> again<00:49:18.000> and<00:49:18.240> again<00:49:19.040> sometimes 00:49:19.230 --> 00:49:19.240 align:start position:0% the same one again and again sometimes 00:49:19.240 --> 00:49:21.109 align:start position:0% the same one again and again sometimes you<00:49:19.359> want<00:49:19.520> it<00:49:19.640> sometime<00:49:19.920> you<00:49:20.000> don't<00:49:20.200> want<00:49:20.400> it 00:49:21.109 --> 00:49:21.119 align:start position:0% you want it sometime you don't want it 00:49:21.119 --> 00:49:23.950 align:start position:0% you want it sometime you don't want it and<00:49:21.240> what<00:49:21.359> you<00:49:21.440> can<00:49:21.599> do<00:49:21.760> is<00:49:21.960> just<00:49:22.480> um<00:49:23.160> log<00:49:23.480> ones 00:49:23.950 --> 00:49:23.960 align:start position:0% and what you can do is just um log ones 00:49:23.960 --> 00:49:26.789 align:start position:0% and what you can do is just um log ones put<00:49:24.119> it<00:49:24.240> to<00:49:24.880> through<00:49:25.880> and<00:49:26.040> now<00:49:26.200> you<00:49:26.319> get<00:49:26.480> the 00:49:26.789 --> 00:49:26.799 align:start position:0% put it to through and now you get the 00:49:26.799 --> 00:49:28.430 align:start position:0% put it to through and now you get the put<00:49:27.000> only 00:49:28.430 --> 00:49:28.440 align:start position:0% put only 00:49:28.440 --> 00:49:30.750 align:start position:0% put only once<00:49:29.440> well<00:49:29.880> hold<00:49:30.000> on<00:49:30.119> a<00:49:30.240> second<00:49:30.480> now<00:49:30.599> I'm 00:49:30.750 --> 00:49:30.760 align:start position:0% once well hold on a second now I'm 00:49:30.760 --> 00:49:32.470 align:start position:0% once well hold on a second now I'm thinking<00:49:31.160> how<00:49:31.280> does<00:49:31.480> that<00:49:31.720> work<00:49:32.200> how<00:49:32.319> does 00:49:32.470 --> 00:49:32.480 align:start position:0% thinking how does that work how does 00:49:32.480 --> 00:49:34.349 align:start position:0% thinking how does that work how does that<00:49:32.680> work<00:49:33.000> with<00:49:33.119> the<00:49:33.440> you<00:49:33.520> want<00:49:33.640> to<00:49:33.720> see<00:49:33.839> the 00:49:34.349 --> 00:49:34.359 align:start position:0% that work with the you want to see the 00:49:34.359 --> 00:49:37.030 align:start position:0% that work with the you want to see the output<00:49:35.359> the<00:49:35.480> string<00:49:36.079> no<00:49:36.200> no<00:49:36.359> no<00:49:36.640> I<00:49:36.760> caught<00:49:36.920> off 00:49:37.030 --> 00:49:37.040 align:start position:0% output the string no no no I caught off 00:49:37.040 --> 00:49:39.349 align:start position:0% output the string no no no I caught off on<00:49:37.160> the<00:49:37.240> string<00:49:37.559> thing<00:49:37.839> dude<00:49:38.359> like<00:49:38.920> after<00:49:39.160> the 00:49:39.349 --> 00:49:39.359 align:start position:0% on the string thing dude like after the 00:49:39.359 --> 00:49:41.349 align:start position:0% on the string thing dude like after the after<00:49:39.839> we<00:49:39.920> can<00:49:40.000> look<00:49:40.119> at<00:49:40.200> the<00:49:40.280> source<00:49:40.640> ofer<00:49:41.280> if 00:49:41.349 --> 00:49:41.359 align:start position:0% after we can look at the source ofer if 00:49:41.359 --> 00:49:43.710 align:start position:0% after we can look at the source ofer if you<00:49:41.440> want<00:49:41.920> okay<00:49:42.240> okay<00:49:43.240> uh<00:49:43.440> okay<00:49:43.559> let's 00:49:43.710 --> 00:49:43.720 align:start position:0% you want okay okay uh okay let's 00:49:43.720 --> 00:49:46.109 align:start position:0% you want okay okay uh okay let's continue<00:49:44.200> so<00:49:44.559> here<00:49:45.000> only<00:49:45.200> loging<00:49:45.599> once<00:49:45.920> so<00:49:46.040> if 00:49:46.109 --> 00:49:46.119 align:start position:0% continue so here only loging once so if 00:49:46.119 --> 00:49:48.390 align:start position:0% continue so here only loging once so if I<00:49:46.240> do<00:49:46.359> a<00:49:46.480> request<00:49:47.119> I<00:49:47.200> should<00:49:47.400> have<00:49:47.520> a<00:49:47.680> bunch<00:49:47.960> of 00:49:48.390 --> 00:49:48.400 align:start position:0% I do a request I should have a bunch of 00:49:48.400 --> 00:49:50.309 align:start position:0% I do a request I should have a bunch of uh<00:49:48.920> so<00:49:49.160> here<00:49:49.240> it's<00:49:49.359> not<00:49:49.520> polled<00:49:49.880> anymore<00:49:50.160> so<00:49:50.280> I 00:49:50.309 --> 00:49:50.319 align:start position:0% uh so here it's not polled anymore so I 00:49:50.319 --> 00:49:52.630 align:start position:0% uh so here it's not polled anymore so I don't<00:49:50.480> have<00:49:50.559> the<00:49:51.040> xss<00:49:52.040> but<00:49:52.200> I<00:49:52.240> should<00:49:52.400> have<00:49:52.520> a 00:49:52.630 --> 00:49:52.640 align:start position:0% don't have the xss but I should have a 00:49:52.640 --> 00:49:54.789 align:start position:0% don't have the xss but I should have a bunch<00:49:52.839> of<00:49:53.280> uh<00:49:53.520> outputs<00:49:54.079> but<00:49:54.200> if<00:49:54.280> I<00:49:54.400> run<00:49:54.559> it 00:49:54.789 --> 00:49:54.799 align:start position:0% bunch of uh outputs but if I run it 00:49:54.799 --> 00:49:57.109 align:start position:0% bunch of uh outputs but if I run it again<00:49:55.119> I<00:49:55.200> should<00:49:55.440> have<00:49:56.079> no<00:49:56.280> output<00:49:56.880> because 00:49:57.109 --> 00:49:57.119 align:start position:0% again I should have no output because 00:49:57.119 --> 00:49:59.630 align:start position:0% again I should have no output because everything<00:49:57.440> was<00:49:57.599> logged<00:49:58.400> already<00:49:59.400> but<00:49:59.520> this 00:49:59.630 --> 00:49:59.640 align:start position:0% everything was logged already but this 00:49:59.640 --> 00:50:01.150 align:start position:0% everything was logged already but this is<00:49:59.760> cool<00:50:00.079> because<00:50:00.480> what<00:50:00.559> I<00:50:00.680> like<00:50:00.799> to<00:50:00.880> do<00:50:01.040> when 00:50:01.150 --> 00:50:01.160 align:start position:0% is cool because what I like to do when 00:50:01.160 --> 00:50:05.109 align:start position:0% is cool because what I like to do when I'm<00:50:01.319> doing<00:50:01.599> this<00:50:01.880> I<00:50:01.960> can<00:50:02.200> just<00:50:02.440> start<00:50:03.160> uh<00:50:04.119> like 00:50:05.109 --> 00:50:05.119 align:start position:0% I'm doing this I can just start uh like 00:50:05.119 --> 00:50:08.270 align:start position:0% I'm doing this I can just start uh like I<00:50:05.200> can<00:50:05.400> start<00:50:05.599> a<00:50:05.760> further<00:50:06.400> for<00:50:06.559> example<00:50:07.319> um<00:50:08.200> I 00:50:08.270 --> 00:50:08.280 align:start position:0% I can start a further for example um I 00:50:08.280 --> 00:50:09.670 align:start position:0% I can start a further for example um I don't<00:50:08.440> have<00:50:08.599> my<00:50:08.720> adance<00:50:09.079> because<00:50:09.280> this<00:50:09.359> is<00:50:09.559> the 00:50:09.670 --> 00:50:09.680 align:start position:0% don't have my adance because this is the 00:50:09.680 --> 00:50:11.349 align:start position:0% don't have my adance because this is the the<00:50:09.799> Community<00:50:10.119> Edition<00:50:10.760> but<00:50:10.880> you<00:50:10.960> can<00:50:11.079> start 00:50:11.349 --> 00:50:11.359 align:start position:0% the Community Edition but you can start 00:50:11.359 --> 00:50:13.510 align:start position:0% the Community Edition but you can start par<00:50:11.599> minor<00:50:12.240> and<00:50:12.400> see<00:50:12.559> if<00:50:12.839> something<00:50:13.119> new<00:50:13.319> is 00:50:13.510 --> 00:50:13.520 align:start position:0% par minor and see if something new is 00:50:13.520 --> 00:50:16.470 align:start position:0% par minor and see if something new is reached<00:50:14.400> and<00:50:14.559> just<00:50:14.720> F<00:50:15.079> the<00:50:15.200> thing<00:50:15.520> and<00:50:15.720> see<00:50:16.359> and 00:50:16.470 --> 00:50:16.480 align:start position:0% reached and just F the thing and see and 00:50:16.480 --> 00:50:17.710 align:start position:0% reached and just F the thing and see and see<00:50:16.640> if<00:50:16.720> there's<00:50:16.960> something<00:50:17.200> new<00:50:17.480> and<00:50:17.599> there 00:50:17.710 --> 00:50:17.720 align:start position:0% see if there's something new and there 00:50:17.720 --> 00:50:21.109 align:start position:0% see if there's something new and there is<00:50:17.839> an<00:50:18.000> exploit<00:50:18.400> you<00:50:18.480> can<00:50:18.640> do<00:50:18.920> on<00:50:19.920> on<00:50:20.480> U<00:50:20.960> on 00:50:21.109 --> 00:50:21.119 align:start position:0% is an exploit you can do on on U on 00:50:21.119 --> 00:50:23.710 align:start position:0% is an exploit you can do on on U on fastify<00:50:21.599> I<00:50:21.720> found<00:50:21.920> out<00:50:22.400> is<00:50:23.000> if<00:50:23.079> I<00:50:23.200> try<00:50:23.359> to<00:50:23.480> do<00:50:23.599> a 00:50:23.710 --> 00:50:23.720 align:start position:0% fastify I found out is if I try to do a 00:50:23.720 --> 00:50:26.510 align:start position:0% fastify I found out is if I try to do a post<00:50:23.960> request<00:50:24.520> and<00:50:24.599> I<00:50:24.720> use<00:50:24.880> the<00:50:25.000> content<00:50:25.520> type 00:50:26.510 --> 00:50:26.520 align:start position:0% post request and I use the content type 00:50:26.520 --> 00:50:28.910 align:start position:0% post request and I use the content type and<00:50:26.839> hey<00:50:27.240> or<00:50:27.400> something<00:50:27.760> stupid<00:50:28.160> just<00:50:28.319> to<00:50:28.799> make 00:50:28.910 --> 00:50:28.920 align:start position:0% and hey or something stupid just to make 00:50:28.920 --> 00:50:31.470 align:start position:0% and hey or something stupid just to make it<00:50:29.079> pop<00:50:29.280> in<00:50:29.359> the<00:50:29.920> logs<00:50:30.920> it<00:50:31.000> will<00:50:31.160> say<00:50:31.319> oh 00:50:31.470 --> 00:50:31.480 align:start position:0% it pop in the logs it will say oh 00:50:31.480 --> 00:50:34.309 align:start position:0% it pop in the logs it will say oh unsupported<00:50:32.160> metat<00:50:32.799> type<00:50:33.799> and<00:50:33.880> I<00:50:34.000> look<00:50:34.119> at<00:50:34.240> the 00:50:34.309 --> 00:50:34.319 align:start position:0% unsupported metat type and I look at the 00:50:34.319 --> 00:50:37.150 align:start position:0% unsupported metat type and I look at the code<00:50:34.520> and<00:50:34.599> I<00:50:34.760> say<00:50:35.000> oh<00:50:35.400> there<00:50:35.559> is<00:50:36.559> my<00:50:36.760> my<00:50:36.880> input 00:50:37.150 --> 00:50:37.160 align:start position:0% code and I say oh there is my my input 00:50:37.160 --> 00:50:38.990 align:start position:0% code and I say oh there is my my input is<00:50:37.280> used<00:50:37.559> somewhere<00:50:38.000> as<00:50:38.079> a<00:50:38.240> key<00:50:38.599> and<00:50:38.760> this<00:50:38.839> is 00:50:38.990 --> 00:50:39.000 align:start position:0% is used somewhere as a key and this is 00:50:39.000 --> 00:50:41.030 align:start position:0% is used somewhere as a key and this is also<00:50:39.319> super<00:50:40.079> valuable<00:50:40.480> information<00:50:40.920> when 00:50:41.030 --> 00:50:41.040 align:start position:0% also super valuable information when 00:50:41.040 --> 00:50:43.870 align:start position:0% also super valuable information when you're<00:50:41.200> doing<00:50:41.720> JavaScript<00:50:42.640> auditing<00:50:43.640> so<00:50:43.799> I 00:50:43.870 --> 00:50:43.880 align:start position:0% you're doing JavaScript auditing so I 00:50:43.880 --> 00:50:45.710 align:start position:0% you're doing JavaScript auditing so I can<00:50:44.040> just<00:50:44.240> look<00:50:44.400> at<00:50:44.520> the<00:50:44.599> content<00:50:44.920> type<00:50:45.160> passer 00:50:45.710 --> 00:50:45.720 align:start position:0% can just look at the content type passer 00:50:45.720 --> 00:50:49.069 align:start position:0% can just look at the content type passer click<00:50:45.920> on<00:50:46.040> the<00:50:46.160> link<00:50:46.640> and<00:50:46.799> I<00:50:47.000> see<00:50:47.559> okay<00:50:48.559> so<00:50:48.799> over 00:50:49.069 --> 00:50:49.079 align:start position:0% click on the link and I see okay so over 00:50:49.079 --> 00:50:50.710 align:start position:0% click on the link and I see okay so over there<00:50:49.240> it<00:50:49.359> check<00:50:49.559> if<00:50:49.680> the<00:50:49.799> content<00:50:50.160> type<00:50:50.520> I've 00:50:50.710 --> 00:50:50.720 align:start position:0% there it check if the content type I've 00:50:50.720 --> 00:50:53.789 align:start position:0% there it check if the content type I've send<00:50:51.119> is<00:50:51.240> in<00:50:51.400> this<00:50:52.280> object<00:50:53.280> and<00:50:53.440> if<00:50:53.559> it's 00:50:53.789 --> 00:50:53.799 align:start position:0% send is in this object and if it's 00:50:53.799 --> 00:50:55.430 align:start position:0% send is in this object and if it's inside<00:50:54.079> of<00:50:54.280> this<00:50:54.520> it<00:50:54.640> will<00:50:54.839> use<00:50:55.000> it<00:50:55.160> as<00:50:55.280> a 00:50:55.430 --> 00:50:55.440 align:start position:0% inside of this it will use it as a 00:50:55.440 --> 00:50:57.190 align:start position:0% inside of this it will use it as a passer 00:50:57.190 --> 00:50:57.200 align:start position:0% passer 00:50:57.200 --> 00:50:59.030 align:start position:0% passer I<00:50:57.319> I<00:50:57.400> don't<00:50:57.559> know<00:50:57.680> what<00:50:57.799> the<00:50:57.920> custom<00:50:58.240> pass<00:50:58.599> are 00:50:59.030 --> 00:50:59.040 align:start position:0% I I don't know what the custom pass are 00:50:59.040 --> 00:51:00.710 align:start position:0% I I don't know what the custom pass are but<00:50:59.160> I<00:50:59.280> know<00:50:59.480> what<00:50:59.720> Exist<00:51:00.079> by<00:51:00.240> default<00:51:00.559> in 00:51:00.710 --> 00:51:00.720 align:start position:0% but I know what Exist by default in 00:51:00.720 --> 00:51:03.309 align:start position:0% but I know what Exist by default in JavaScript<00:51:01.480> in<00:51:01.599> an<00:51:01.799> object<00:51:02.720> so<00:51:02.920> what<00:51:03.040> happen 00:51:03.309 --> 00:51:03.319 align:start position:0% JavaScript in an object so what happen 00:51:03.319 --> 00:51:05.829 align:start position:0% JavaScript in an object so what happen if<00:51:03.400> I<00:51:03.480> send<00:51:03.680> my<00:51:03.799> content<00:51:04.079> type<00:51:04.319> to<00:51:04.640> to 00:51:05.829 --> 00:51:05.839 align:start position:0% if I send my content type to to 00:51:05.839 --> 00:51:08.750 align:start position:0% if I send my content type to to string<00:51:06.839> it<00:51:06.920> will<00:51:07.280> return<00:51:07.680> the<00:51:07.799> keys<00:51:08.240> exist<00:51:08.680> it 00:51:08.750 --> 00:51:08.760 align:start position:0% string it will return the keys exist it 00:51:08.760 --> 00:51:10.670 align:start position:0% string it will return the keys exist it will<00:51:09.119> return<00:51:09.559> the<00:51:09.680> function<00:51:09.960> to<00:51:10.200> string<00:51:10.520> but 00:51:10.670 --> 00:51:10.680 align:start position:0% will return the function to string but 00:51:10.680 --> 00:51:12.150 align:start position:0% will return the function to string but how<00:51:10.839> the<00:51:10.960> application<00:51:11.359> will 00:51:12.150 --> 00:51:12.160 align:start position:0% how the application will 00:51:12.160 --> 00:51:14.109 align:start position:0% how the application will behave<00:51:13.160> and<00:51:13.280> if<00:51:13.359> you<00:51:13.480> launch<00:51:13.839> that<00:51:14.000> you 00:51:14.109 --> 00:51:14.119 align:start position:0% behave and if you launch that you 00:51:14.119 --> 00:51:16.789 align:start position:0% behave and if you launch that you actually<00:51:14.400> crash<00:51:14.680> the<00:51:15.240> server<00:51:16.240> and<00:51:16.359> you<00:51:16.520> crash 00:51:16.789 --> 00:51:16.799 align:start position:0% actually crash the server and you crash 00:51:16.799 --> 00:51:18.870 align:start position:0% actually crash the server and you crash it<00:51:17.040> completely<00:51:17.599> outside<00:51:18.119> of<00:51:18.359> all<00:51:18.480> the<00:51:18.599> TR 00:51:18.870 --> 00:51:18.880 align:start position:0% it completely outside of all the TR 00:51:18.880 --> 00:51:21.750 align:start position:0% it completely outside of all the TR catch<00:51:19.160> so<00:51:19.319> the<00:51:19.400> server<00:51:19.640> is<00:51:19.760> just<00:51:19.960> done<00:51:20.640> that's 00:51:21.750 --> 00:51:21.760 align:start position:0% catch so the server is just done that's 00:51:21.760 --> 00:51:25.150 align:start position:0% catch so the server is just done that's crazy<00:51:22.760> so<00:51:22.880> I<00:51:23.000> reported<00:51:23.359> the<00:51:23.520> bug<00:51:23.960> to<00:51:24.960> when<00:51:25.040> I 00:51:25.150 --> 00:51:25.160 align:start position:0% crazy so I reported the bug to when I 00:51:25.160 --> 00:51:27.549 align:start position:0% crazy so I reported the bug to when I build<00:51:25.400> the<00:51:25.520> tool<00:51:26.200> is<00:51:26.400> I<00:51:26.760> I<00:51:26.880> build<00:51:27.079> a<00:51:27.160> tool<00:51:27.440> the 00:51:27.549 --> 00:51:27.559 align:start position:0% build the tool is I I build a tool the 00:51:27.559 --> 00:51:28.710 align:start position:0% build the tool is I I build a tool the next<00:51:27.720> day<00:51:27.839> I<00:51:27.920> found<00:51:28.160> this<00:51:28.280> bug<00:51:28.520> and<00:51:28.599> I 00:51:28.710 --> 00:51:28.720 align:start position:0% next day I found this bug and I 00:51:28.720 --> 00:51:30.109 align:start position:0% next day I found this bug and I submitted<00:51:29.119> it<00:51:29.280> to 00:51:30.109 --> 00:51:30.119 align:start position:0% submitted it to 00:51:30.119 --> 00:51:33.309 align:start position:0% submitted it to festify<00:51:31.119> and<00:51:31.319> so<00:51:31.640> it's<00:51:32.520> it's<00:51:32.760> patch<00:51:33.040> already 00:51:33.309 --> 00:51:33.319 align:start position:0% festify and so it's it's patch already 00:51:33.319 --> 00:51:35.510 align:start position:0% festify and so it's it's patch already this<00:51:33.480> why<00:51:33.559> I<00:51:33.640> use<00:51:33.799> an<00:51:33.880> old<00:51:34.119> version<00:51:34.720> but<00:51:35.400> this 00:51:35.510 --> 00:51:35.520 align:start position:0% this why I use an old version but this 00:51:35.520 --> 00:51:36.990 align:start position:0% this why I use an old version but this is<00:51:35.640> why<00:51:35.760> the<00:51:35.880> tool<00:51:36.079> is<00:51:36.200> powerful<00:51:36.599> it's<00:51:36.799> made 00:51:36.990 --> 00:51:37.000 align:start position:0% is why the tool is powerful it's made 00:51:37.000 --> 00:51:38.950 align:start position:0% is why the tool is powerful it's made for<00:51:37.240> protect<00:51:37.599> pollution<00:51:38.559> but<00:51:38.680> if<00:51:38.760> you<00:51:38.880> are 00:51:38.950 --> 00:51:38.960 align:start position:0% for protect pollution but if you are 00:51:38.960 --> 00:51:40.470 align:start position:0% for protect pollution but if you are trying<00:51:39.200> to<00:51:39.359> edit<00:51:39.640> any<00:51:39.799> kind<00:51:39.920> of<00:51:40.040> JavaScript 00:51:40.470 --> 00:51:40.480 align:start position:0% trying to edit any kind of JavaScript 00:51:40.480 --> 00:51:42.990 align:start position:0% trying to edit any kind of JavaScript code<00:51:40.760> it<00:51:40.839> will<00:51:41.000> help<00:51:41.200> you<00:51:41.319> a<00:51:41.440> lot<00:51:42.400> wow<00:51:42.799> that's 00:51:42.990 --> 00:51:43.000 align:start position:0% code it will help you a lot wow that's 00:51:43.000 --> 00:51:44.109 align:start position:0% code it will help you a lot wow that's really 00:51:44.109 --> 00:51:44.119 align:start position:0% really 00:51:44.119 --> 00:51:47.789 align:start position:0% really awesome<00:51:45.119> and<00:51:45.880> so<00:51:46.640> this<00:51:46.760> tool<00:51:47.000> is<00:51:47.280> more<00:51:47.640> not 00:51:47.789 --> 00:51:47.799 align:start position:0% awesome and so this tool is more not 00:51:47.799 --> 00:51:49.670 align:start position:0% awesome and so this tool is more not really<00:51:48.040> made<00:51:48.240> for<00:51:48.440> bers<00:51:49.040> but<00:51:49.160> more<00:51:49.319> for<00:51:49.480> people 00:51:49.670 --> 00:51:49.680 align:start position:0% really made for bers but more for people 00:51:49.680 --> 00:51:51.309 align:start position:0% really made for bers but more for people that<00:51:49.799> are<00:51:49.960> looking<00:51:50.160> for<00:51:50.359> new<00:51:50.640> zero<00:51:50.880> day<00:51:51.040> on<00:51:51.119> new 00:51:51.309 --> 00:51:51.319 align:start position:0% that are looking for new zero day on new 00:51:51.319 --> 00:51:54.710 align:start position:0% that are looking for new zero day on new payloads<00:51:52.200> uh<00:51:52.720> and<00:51:52.880> the<00:51:53.079> output<00:51:54.079> of<00:51:54.240> the<00:51:54.359> tool 00:51:54.710 --> 00:51:54.720 align:start position:0% payloads uh and the output of the tool 00:51:54.720 --> 00:51:57.150 align:start position:0% payloads uh and the output of the tool and<00:51:55.040> the<00:51:55.240> the<00:51:55.359> reseearch<00:51:55.559> that<00:51:56.160> the<00:51:56.240> people 00:51:57.150 --> 00:51:57.160 align:start position:0% and the the reseearch that the people 00:51:57.160 --> 00:52:01.910 align:start position:0% and the the reseearch that the people we<00:51:57.400> make<00:51:57.839> will<00:51:58.000> be<00:51:58.119> used<00:51:58.319> in 00:52:01.910 --> 00:52:01.920 align:start position:0% 00:52:01.920 --> 00:52:06.589 align:start position:0% bgy<00:52:02.920> so<00:52:03.240> in<00:52:03.400> BG<00:52:03.880> we<00:52:03.960> need<00:52:04.079> to<00:52:04.280> detect<00:52:05.079> uh<00:52:05.480> a<00:52:05.640> bug 00:52:06.589 --> 00:52:06.599 align:start position:0% bgy so in BG we need to detect uh a bug 00:52:06.599 --> 00:52:09.390 align:start position:0% bgy so in BG we need to detect uh a bug exploit<00:52:07.280> and<00:52:07.520> profit<00:52:08.200> so<00:52:08.480> let's<00:52:08.760> take 00:52:09.390 --> 00:52:09.400 align:start position:0% exploit and profit so let's take 00:52:09.400 --> 00:52:11.990 align:start position:0% exploit and profit so let's take everything<00:52:09.760> in<00:52:10.119> uh<00:52:10.400> in 00:52:11.990 --> 00:52:12.000 align:start position:0% everything in uh in 00:52:12.000 --> 00:52:16.430 align:start position:0% everything in uh in order<00:52:13.000> so<00:52:13.160> to<00:52:13.359> detect<00:52:14.359> uh<00:52:14.559> this<00:52:14.720> talk<00:52:15.000> was<00:52:15.440> made 00:52:16.430 --> 00:52:16.440 align:start position:0% order so to detect uh this talk was made 00:52:16.440 --> 00:52:18.630 align:start position:0% order so to detect uh this talk was made before<00:52:16.680> the<00:52:16.839> research<00:52:17.359> by<00:52:17.599> Port<00:52:17.880> figure<00:52:18.359> so 00:52:18.630 --> 00:52:18.640 align:start position:0% before the research by Port figure so 00:52:18.640 --> 00:52:20.750 align:start position:0% before the research by Port figure so this<00:52:18.760> is<00:52:18.880> a<00:52:19.000> different<00:52:19.359> payload<00:52:20.359> but<00:52:20.559> this<00:52:20.640> is 00:52:20.750 --> 00:52:20.760 align:start position:0% this is a different payload but this is 00:52:20.760 --> 00:52:22.190 align:start position:0% this is a different payload but this is the<00:52:20.920> the<00:52:21.000> kind<00:52:21.160> of<00:52:21.359> thing<00:52:21.520> we<00:52:21.640> want<00:52:21.799> to<00:52:22.040> to 00:52:22.190 --> 00:52:22.200 align:start position:0% the the kind of thing we want to to 00:52:22.200 --> 00:52:24.990 align:start position:0% the the kind of thing we want to to detect<00:52:23.200> so<00:52:23.359> how<00:52:23.480> can<00:52:23.599> I<00:52:23.760> detect<00:52:24.040> in<00:52:24.240> blackbox 00:52:24.990 --> 00:52:25.000 align:start position:0% detect so how can I detect in blackbox 00:52:25.000 --> 00:52:26.549 align:start position:0% detect so how can I detect in blackbox if<00:52:25.119> I<00:52:25.240> have<00:52:25.359> a<00:52:25.480> prote<00:52:25.799> pollution<00:52:26.079> or<00:52:26.200> not<00:52:26.280> on<00:52:26.359> a 00:52:26.549 --> 00:52:26.559 align:start position:0% if I have a prote pollution or not on a 00:52:26.559 --> 00:52:29.549 align:start position:0% if I have a prote pollution or not on a server<00:52:27.160> but<00:52:27.280> I<00:52:27.359> don't<00:52:27.480> want<00:52:27.599> to<00:52:27.720> crash<00:52:28.000> the 00:52:29.549 --> 00:52:29.559 align:start position:0% server but I don't want to crash the 00:52:29.559 --> 00:52:31.910 align:start position:0% server but I don't want to crash the server<00:52:30.559> so<00:52:30.799> here<00:52:30.920> I<00:52:31.000> have<00:52:31.079> a<00:52:31.200> simple<00:52:31.520> request 00:52:31.910 --> 00:52:31.920 align:start position:0% server so here I have a simple request 00:52:31.920 --> 00:52:35.270 align:start position:0% server so here I have a simple request in<00:52:32.640> Express<00:52:33.160> I<00:52:33.280> try<00:52:33.480> to<00:52:33.599> do<00:52:33.799> all<00:52:34.040> my<00:52:34.359> uh<00:52:34.640> tested 00:52:35.270 --> 00:52:35.280 align:start position:0% in Express I try to do all my uh tested 00:52:35.280 --> 00:52:37.510 align:start position:0% in Express I try to do all my uh tested test<00:52:35.559> on<00:52:35.799> L<00:52:36.119> World<00:52:36.359> server<00:52:36.760> the<00:52:36.920> simple<00:52:37.240> server 00:52:37.510 --> 00:52:37.520 align:start position:0% test on L World server the simple server 00:52:37.520 --> 00:52:40.549 align:start position:0% test on L World server the simple server you<00:52:37.640> can<00:52:37.880> have<00:52:38.160> so<00:52:38.400> there<00:52:38.480> is<00:52:38.680> no<00:52:39.200> requirement 00:52:40.549 --> 00:52:40.559 align:start position:0% you can have so there is no requirement 00:52:40.559 --> 00:52:42.510 align:start position:0% you can have so there is no requirement before<00:52:41.559> here<00:52:41.720> if<00:52:41.799> you<00:52:41.880> do<00:52:42.000> a<00:52:42.079> request<00:52:42.359> on 00:52:42.510 --> 00:52:42.520 align:start position:0% before here if you do a request on 00:52:42.520 --> 00:52:45.270 align:start position:0% before here if you do a request on express<00:52:43.000> it<00:52:43.079> will<00:52:43.280> always<00:52:43.599> give<00:52:43.720> you<00:52:44.119> a<00:52:44.319> KN<00:52:44.599> tag 00:52:45.270 --> 00:52:45.280 align:start position:0% express it will always give you a KN tag 00:52:45.280 --> 00:52:47.990 align:start position:0% express it will always give you a KN tag to<00:52:45.760> to<00:52:45.920> check<00:52:46.160> the<00:52:46.359> cache<00:52:47.000> to<00:52:47.280> tell<00:52:47.480> you<00:52:47.720> oh 00:52:47.990 --> 00:52:48.000 align:start position:0% to to check the cache to tell you oh 00:52:48.000 --> 00:52:49.950 align:start position:0% to to check the cache to tell you oh this<00:52:48.280> this<00:52:48.400> is<00:52:48.599> cash<00:52:48.960> if<00:52:49.040> you<00:52:49.359> have<00:52:49.480> it<00:52:49.640> already 00:52:49.950 --> 00:52:49.960 align:start position:0% this this is cash if you have it already 00:52:49.960 --> 00:52:52.630 align:start position:0% this this is cash if you have it already I<00:52:50.040> won't<00:52:50.200> send<00:52:50.400> you<00:52:50.880> anymore<00:52:51.880> and<00:52:52.000> if<00:52:52.079> you<00:52:52.200> send 00:52:52.630 --> 00:52:52.640 align:start position:0% I won't send you anymore and if you send 00:52:52.640 --> 00:52:55.230 align:start position:0% I won't send you anymore and if you send the<00:52:53.559> the<00:52:53.720> cach<00:52:53.960> key<00:52:54.160> with<00:52:54.280> the<00:52:54.400> if<00:52:54.640> not<00:52:54.760> match 00:52:55.230 --> 00:52:55.240 align:start position:0% the the cach key with the if not match 00:52:55.240 --> 00:52:57.309 align:start position:0% the the cach key with the if not match the<00:52:55.359> E<00:52:55.559> tag<00:52:56.119> you<00:52:56.200> will<00:52:56.520> get<00:52:56.680> a<00:52:56.799> three<00:52:56.960> or<00:52:57.119> four 00:52:57.309 --> 00:52:57.319 align:start position:0% the E tag you will get a three or four 00:52:57.319 --> 00:52:59.549 align:start position:0% the E tag you will get a three or four instead<00:52:57.559> of<00:52:57.680> a<00:52:58.000> 200<00:52:58.559> it's<00:52:58.720> just<00:52:58.960> the<00:52:59.160> the<00:52:59.280> way 00:52:59.549 --> 00:52:59.559 align:start position:0% instead of a 200 it's just the the way 00:52:59.559 --> 00:53:01.990 align:start position:0% instead of a 200 it's just the the way cash<00:52:59.799> work<00:53:00.040> in 00:53:01.990 --> 00:53:02.000 align:start position:0% cash work in 00:53:02.000 --> 00:53:05.309 align:start position:0% cash work in HTP<00:53:03.000> but<00:53:03.160> for<00:53:03.359> example<00:53:03.839> if<00:53:04.079> we<00:53:04.760> uh<00:53:04.880> manage<00:53:05.160> to 00:53:05.309 --> 00:53:05.319 align:start position:0% HTP but for example if we uh manage to 00:53:05.319 --> 00:53:07.309 align:start position:0% HTP but for example if we uh manage to do<00:53:05.520> some<00:53:05.839> pollution<00:53:06.200> on<00:53:06.400> cash<00:53:06.559> control<00:53:07.000> and 00:53:07.309 --> 00:53:07.319 align:start position:0% do some pollution on cash control and 00:53:07.319 --> 00:53:09.430 align:start position:0% do some pollution on cash control and and<00:53:07.440> force<00:53:07.680> it<00:53:07.799> to<00:53:07.960> put<00:53:08.160> no 00:53:09.430 --> 00:53:09.440 align:start position:0% and force it to put no 00:53:09.440 --> 00:53:11.950 align:start position:0% and force it to put no cash<00:53:10.440> every<00:53:10.640> time<00:53:10.760> we<00:53:10.880> do<00:53:11.000> a<00:53:11.119> request<00:53:11.520> now<00:53:11.799> even 00:53:11.950 --> 00:53:11.960 align:start position:0% cash every time we do a request now even 00:53:11.960 --> 00:53:13.750 align:start position:0% cash every time we do a request now even if<00:53:12.079> we<00:53:12.200> put<00:53:12.319> the<00:53:12.480> right<00:53:12.720> key<00:53:13.280> the<00:53:13.440> cash<00:53:13.640> is 00:53:13.750 --> 00:53:13.760 align:start position:0% if we put the right key the cash is 00:53:13.760 --> 00:53:15.829 align:start position:0% if we put the right key the cash is disabled<00:53:14.160> on<00:53:14.280> the<00:53:14.400> server<00:53:15.240> so<00:53:15.400> this<00:53:15.480> is<00:53:15.559> a<00:53:15.680> good 00:53:15.829 --> 00:53:15.839 align:start position:0% disabled on the server so this is a good 00:53:15.839 --> 00:53:19.069 align:start position:0% disabled on the server so this is a good way<00:53:15.960> to<00:53:16.119> detect<00:53:16.400> it<00:53:17.319> it<00:53:17.599> doesn't<00:53:18.000> put<00:53:18.480> so<00:53:18.720> much 00:53:19.069 --> 00:53:19.079 align:start position:0% way to detect it it doesn't put so much 00:53:19.079 --> 00:53:22.030 align:start position:0% way to detect it it doesn't put so much more<00:53:19.400> stress<00:53:19.720> on<00:53:19.880> the<00:53:20.040> server<00:53:20.480> it<00:53:20.680> reduce<00:53:21.319> the 00:53:22.030 --> 00:53:22.040 align:start position:0% more stress on the server it reduce the 00:53:22.040 --> 00:53:24.870 align:start position:0% more stress on the server it reduce the the<00:53:22.359> network<00:53:23.359> but<00:53:23.640> because<00:53:23.839> in<00:53:24.079> Express<00:53:24.640> if<00:53:24.760> I 00:53:24.870 --> 00:53:24.880 align:start position:0% the network but because in Express if I 00:53:24.880 --> 00:53:26.510 align:start position:0% the network but because in Express if I send<00:53:25.200> this<00:53:25.359> key<00:53:25.559> with<00:53:25.640> the<00:53:25.799> cash<00:53:26.040> it<00:53:26.119> will 00:53:26.510 --> 00:53:26.520 align:start position:0% send this key with the cash it will 00:53:26.520 --> 00:53:27.710 align:start position:0% send this key with the cash it will compute<00:53:26.839> the<00:53:26.920> worldall<00:53:27.119> page<00:53:27.400> and<00:53:27.559> just 00:53:27.710 --> 00:53:27.720 align:start position:0% compute the worldall page and just 00:53:27.720 --> 00:53:29.390 align:start position:0% compute the worldall page and just choose<00:53:27.960> not<00:53:28.079> to<00:53:28.200> send<00:53:28.400> you<00:53:28.520> the 00:53:29.390 --> 00:53:29.400 align:start position:0% choose not to send you the 00:53:29.400 --> 00:53:31.430 align:start position:0% choose not to send you the output<00:53:30.400> but<00:53:30.599> with<00:53:30.799> this<00:53:30.920> it<00:53:31.040> will<00:53:31.160> send<00:53:31.319> you 00:53:31.430 --> 00:53:31.440 align:start position:0% output but with this it will send you 00:53:31.440 --> 00:53:32.910 align:start position:0% output but with this it will send you the<00:53:31.520> output<00:53:31.799> anyway<00:53:32.079> so<00:53:32.160> you<00:53:32.240> can<00:53:32.400> detect<00:53:32.680> it 00:53:32.910 --> 00:53:32.920 align:start position:0% the output anyway so you can detect it 00:53:32.920 --> 00:53:34.589 align:start position:0% the output anyway so you can detect it this 00:53:34.589 --> 00:53:34.599 align:start position:0% this 00:53:34.599 --> 00:53:37.270 align:start position:0% this way<00:53:35.599> and<00:53:35.720> you<00:53:35.839> can<00:53:36.040> also<00:53:36.480> change<00:53:36.760> the<00:53:36.920> content 00:53:37.270 --> 00:53:37.280 align:start position:0% way and you can also change the content 00:53:37.280 --> 00:53:39.390 align:start position:0% way and you can also change the content type<00:53:37.640> oh<00:53:38.079> uh<00:53:38.440> this<00:53:38.599> was<00:53:38.799> the<00:53:38.920> detection<00:53:39.240> on 00:53:39.390 --> 00:53:39.400 align:start position:0% type oh uh this was the detection on 00:53:39.400 --> 00:53:41.589 align:start position:0% type oh uh this was the detection on fastify<00:53:40.280> so<00:53:40.440> we<00:53:40.520> have<00:53:40.680> a<00:53:41.000> this<00:53:41.119> is<00:53:41.200> a<00:53:41.319> simple 00:53:41.589 --> 00:53:41.599 align:start position:0% fastify so we have a this is a simple 00:53:41.599 --> 00:53:43.309 align:start position:0% fastify so we have a this is a simple detection<00:53:41.960> there<00:53:42.079> is<00:53:42.200> more<00:53:42.640> and<00:53:42.760> I<00:53:42.960> want<00:53:43.200> you 00:53:43.309 --> 00:53:43.319 align:start position:0% detection there is more and I want you 00:53:43.319 --> 00:53:45.750 align:start position:0% detection there is more and I want you to<00:53:43.480> see<00:53:43.720> the<00:53:43.920> article<00:53:44.280> from<00:53:44.480> portuga<00:53:45.400> they<00:53:45.520> are 00:53:45.750 --> 00:53:45.760 align:start position:0% to see the article from portuga they are 00:53:45.760 --> 00:53:48.230 align:start position:0% to see the article from portuga they are very<00:53:45.960> interesting<00:53:46.799> uh<00:53:47.559> detection<00:53:47.920> technique 00:53:48.230 --> 00:53:48.240 align:start position:0% very interesting uh detection technique 00:53:48.240 --> 00:53:50.670 align:start position:0% very interesting uh detection technique for<00:53:48.680> Express<00:53:49.680> but<00:53:49.799> I<00:53:49.920> have<00:53:50.040> some<00:53:50.200> for<00:53:50.359> other 00:53:50.670 --> 00:53:50.680 align:start position:0% for Express but I have some for other 00:53:50.680 --> 00:53:52.829 align:start position:0% for Express but I have some for other server<00:53:51.079> like<00:53:51.240> fastify<00:53:52.119> so<00:53:52.319> like<00:53:52.440> we<00:53:52.599> said 00:53:52.829 --> 00:53:52.839 align:start position:0% server like fastify so like we said 00:53:52.839 --> 00:53:55.589 align:start position:0% server like fastify so like we said before<00:53:53.319> we<00:53:53.400> can<00:53:53.559> change<00:53:53.799> the<00:53:53.920> content<00:53:54.280> type<00:53:54.599> to 00:53:55.589 --> 00:53:55.599 align:start position:0% before we can change the content type to 00:53:55.599 --> 00:53:58.030 align:start position:0% before we can change the content type to instead<00:53:55.839> of<00:53:56.480> mic<00:53:56.680> arm<00:53:57.119> just<00:53:57.559> literally 00:53:58.030 --> 00:53:58.040 align:start position:0% instead of mic arm just literally 00:53:58.040 --> 00:53:59.990 align:start position:0% instead of mic arm just literally snapped<00:53:58.520> off<00:53:58.640> in<00:53:58.799> my<00:53:58.960> hand<00:53:59.240> do<00:53:59.319> you<00:53:59.520> guys<00:53:59.680> see 00:53:59.990 --> 00:54:00.000 align:start position:0% snapped off in my hand do you guys see 00:54:00.000 --> 00:54:02.829 align:start position:0% snapped off in my hand do you guys see this<00:54:00.599> I<00:54:00.720> went<00:54:00.880> to<00:54:01.079> adjust<00:54:01.440> it<00:54:01.720> it<00:54:01.880> literally 00:54:02.829 --> 00:54:02.839 align:start position:0% this I went to adjust it it literally 00:54:02.839 --> 00:54:06.630 align:start position:0% this I went to adjust it it literally just<00:54:03.839> cleaved<00:54:04.280> off<00:54:04.599> sorry<00:54:05.079> sorry<00:54:05.480> I<00:54:05.640> just<00:54:06.520> yeah 00:54:06.630 --> 00:54:06.640 align:start position:0% just cleaved off sorry sorry I just yeah 00:54:06.640 --> 00:54:09.630 align:start position:0% just cleaved off sorry sorry I just yeah I'm<00:54:06.760> sorry<00:54:07.760> continue<00:54:08.760> I'm<00:54:08.880> just<00:54:08.960> GNA<00:54:09.200> hold 00:54:09.630 --> 00:54:09.640 align:start position:0% I'm sorry continue I'm just GNA hold 00:54:09.640 --> 00:54:11.950 align:start position:0% I'm sorry continue I'm just GNA hold this<00:54:10.640> so<00:54:10.799> if<00:54:10.920> you<00:54:11.000> want<00:54:11.119> to<00:54:11.240> detect<00:54:11.520> the<00:54:11.640> PO 00:54:11.950 --> 00:54:11.960 align:start position:0% this so if you want to detect the PO 00:54:11.960 --> 00:54:13.670 align:start position:0% this so if you want to detect the PO pollution<00:54:12.400> instead<00:54:12.680> of<00:54:12.920> changing<00:54:13.319> to<00:54:13.480> text 00:54:13.670 --> 00:54:13.680 align:start position:0% pollution instead of changing to text 00:54:13.680 --> 00:54:15.309 align:start position:0% pollution instead of changing to text HTML<00:54:14.160> you<00:54:14.240> can<00:54:14.440> just<00:54:14.640> change<00:54:14.920> it<00:54:15.079> to 00:54:15.309 --> 00:54:15.319 align:start position:0% HTML you can just change it to 00:54:15.319 --> 00:54:17.510 align:start position:0% HTML you can just change it to application<00:54:15.720> Jen<00:54:16.119> with<00:54:16.240> an<00:54:16.359> extra<00:54:16.680> key<00:54:17.319> and 00:54:17.510 --> 00:54:17.520 align:start position:0% application Jen with an extra key and 00:54:17.520 --> 00:54:21.349 align:start position:0% application Jen with an extra key and you<00:54:17.760> just<00:54:18.040> append<00:54:18.400> it<00:54:19.040> uh<00:54:19.880> at<00:54:20.000> the<00:54:20.119> end<00:54:21.040> and<00:54:21.200> it 00:54:21.349 --> 00:54:21.359 align:start position:0% you just append it uh at the end and it 00:54:21.359 --> 00:54:23.109 align:start position:0% you just append it uh at the end and it will<00:54:21.920> it<00:54:22.040> won't<00:54:22.240> break<00:54:22.559> anything<00:54:22.920> but<00:54:23.000> you 00:54:23.109 --> 00:54:23.119 align:start position:0% will it won't break anything but you 00:54:23.119 --> 00:54:24.750 align:start position:0% will it won't break anything but you know<00:54:23.319> this<00:54:23.520> polluted<00:54:24.000> so<00:54:24.119> you<00:54:24.200> know<00:54:24.359> you<00:54:24.440> can 00:54:24.750 --> 00:54:24.760 align:start position:0% know this polluted so you know you can 00:54:24.760 --> 00:54:27.069 align:start position:0% know this polluted so you know you can dig<00:54:24.960> it<00:54:25.400> uh<00:54:25.520> more<00:54:25.799> inside<00:54:26.079> of<00:54:26.200> it<00:54:26.559> so<00:54:26.760> is<00:54:26.880> that 00:54:27.069 --> 00:54:27.079 align:start position:0% dig it uh more inside of it so is that 00:54:27.079 --> 00:54:29.750 align:start position:0% dig it uh more inside of it so is that only<00:54:27.319> for<00:54:27.559> your<00:54:28.160> own<00:54:28.720> response<00:54:29.319> or<00:54:29.480> is<00:54:29.640> that 00:54:29.750 --> 00:54:29.760 align:start position:0% only for your own response or is that 00:54:29.760 --> 00:54:32.069 align:start position:0% only for your own response or is that for<00:54:29.960> every<00:54:30.240> resp<00:54:30.799> for<00:54:30.920> every<00:54:31.200> response<00:54:31.960> so 00:54:32.069 --> 00:54:32.079 align:start position:0% for every resp for every response so 00:54:32.079 --> 00:54:35.390 align:start position:0% for every resp for every response so this<00:54:32.160> is<00:54:33.000> yeah<00:54:33.559> so<00:54:33.720> this<00:54:33.839> is<00:54:33.920> the<00:54:34.280> issue<00:54:35.280> this 00:54:35.390 --> 00:54:35.400 align:start position:0% this is yeah so this is the issue this 00:54:35.400 --> 00:54:38.670 align:start position:0% this is yeah so this is the issue this world<00:54:35.640> talk<00:54:35.920> is<00:54:36.000> to<00:54:36.160> give<00:54:36.319> you<00:54:36.599> a<00:54:36.720> bunch<00:54:37.040> of<00:54:37.760> U 00:54:38.670 --> 00:54:38.680 align:start position:0% world talk is to give you a bunch of U 00:54:38.680 --> 00:54:40.630 align:start position:0% world talk is to give you a bunch of U payloads<00:54:39.440> so<00:54:39.760> when<00:54:39.920> the<00:54:40.119> next<00:54:40.280> time<00:54:40.400> you<00:54:40.480> find 00:54:40.630 --> 00:54:40.640 align:start position:0% payloads so when the next time you find 00:54:40.640 --> 00:54:42.870 align:start position:0% payloads so when the next time you find ation<00:54:41.640> the<00:54:41.760> server<00:54:42.000> you<00:54:42.079> can<00:54:42.160> say<00:54:42.400> oh<00:54:42.559> look<00:54:42.680> at 00:54:42.870 --> 00:54:42.880 align:start position:0% ation the server you can say oh look at 00:54:42.880 --> 00:54:44.109 align:start position:0% ation the server you can say oh look at this<00:54:43.119> I<00:54:43.200> don't<00:54:43.359> want<00:54:43.480> to<00:54:43.559> do<00:54:43.720> it<00:54:43.880> because<00:54:44.040> I 00:54:44.109 --> 00:54:44.119 align:start position:0% this I don't want to do it because I 00:54:44.119 --> 00:54:45.829 align:start position:0% this I don't want to do it because I will<00:54:44.280> break<00:54:44.559> everything<00:54:45.319> but<00:54:45.480> this<00:54:45.559> is<00:54:45.720> what 00:54:45.829 --> 00:54:45.839 align:start position:0% will break everything but this is what 00:54:45.839 --> 00:54:48.430 align:start position:0% will break everything but this is what is<00:54:45.960> doable<00:54:46.799> and<00:54:47.000> I<00:54:47.079> should<00:54:47.280> stop<00:54:47.640> there<00:54:48.319> you 00:54:48.430 --> 00:54:48.440 align:start position:0% is doable and I should stop there you 00:54:48.440 --> 00:54:51.109 align:start position:0% is doable and I should stop there you know<00:54:48.720> it's<00:54:49.720> sometimes<00:54:50.000> you<00:54:50.119> have<00:54:50.280> like<00:54:50.640> very 00:54:51.109 --> 00:54:51.119 align:start position:0% know it's sometimes you have like very 00:54:51.119 --> 00:54:53.670 align:start position:0% know it's sometimes you have like very difficult<00:54:51.400> exploit<00:54:51.960> on<00:54:52.880> on<00:54:53.040> all<00:54:53.200> and<00:54:53.359> Target 00:54:53.670 --> 00:54:53.680 align:start position:0% difficult exploit on on all and Target 00:54:53.680 --> 00:54:54.990 align:start position:0% difficult exploit on on all and Target say<00:54:53.839> oh<00:54:53.920> I<00:54:54.000> can<00:54:54.119> run<00:54:54.280> this<00:54:54.480> exploit<00:54:54.839> but<00:54:54.920> there 00:54:54.990 --> 00:54:55.000 align:start position:0% say oh I can run this exploit but there 00:54:55.000 --> 00:54:56.549 align:start position:0% say oh I can run this exploit but there is<00:54:55.079> a<00:54:55.200> chance<00:54:55.400> I<00:54:55.599> just<00:54:55.720> break<00:54:56.000> everything<00:54:56.480> are 00:54:56.549 --> 00:54:56.559 align:start position:0% is a chance I just break everything are 00:54:56.559 --> 00:54:58.430 align:start position:0% is a chance I just break everything are you<00:54:56.640> sure<00:54:56.799> you<00:54:56.880> want<00:54:57.040> me<00:54:57.119> to<00:54:57.280> run<00:54:57.520> it<00:54:58.200> and<00:54:58.359> this 00:54:58.430 --> 00:54:58.440 align:start position:0% you sure you want me to run it and this 00:54:58.440 --> 00:54:59.670 align:start position:0% you sure you want me to run it and this is<00:54:58.559> the<00:54:58.680> kind<00:54:58.799> of<00:54:58.960> payload<00:54:59.240> you<00:54:59.319> can<00:54:59.400> share 00:54:59.670 --> 00:54:59.680 align:start position:0% is the kind of payload you can share 00:54:59.680 --> 00:55:02.190 align:start position:0% is the kind of payload you can share with<00:54:59.839> the<00:55:00.079> bugti<00:55:00.599> program<00:55:00.880> and<00:55:01.000> say<00:55:01.319> okay<00:55:02.079> this 00:55:02.190 --> 00:55:02.200 align:start position:0% with the bugti program and say okay this 00:55:02.200 --> 00:55:04.030 align:start position:0% with the bugti program and say okay this is<00:55:02.400> what<00:55:02.799> should<00:55:03.000> be<00:55:03.160> doable<00:55:03.599> I<00:55:03.680> don't<00:55:03.799> want<00:55:03.920> to 00:55:04.030 --> 00:55:04.040 align:start position:0% is what should be doable I don't want to 00:55:04.040 --> 00:55:05.270 align:start position:0% is what should be doable I don't want to test<00:55:04.200> this<00:55:04.400> because<00:55:04.559> I<00:55:04.640> don't<00:55:04.760> want<00:55:04.839> to<00:55:04.960> break 00:55:05.270 --> 00:55:05.280 align:start position:0% test this because I don't want to break 00:55:05.280 --> 00:55:07.829 align:start position:0% test this because I don't want to break everything<00:55:06.280> uh<00:55:06.400> do<00:55:06.520> I<00:55:06.640> have<00:55:06.720> a<00:55:06.920> go<00:55:07.200> or<00:55:07.440> are<00:55:07.559> we 00:55:07.829 --> 00:55:07.839 align:start position:0% everything uh do I have a go or are we 00:55:07.839 --> 00:55:09.710 align:start position:0% everything uh do I have a go or are we okay<00:55:08.040> and<00:55:08.440> are<00:55:08.559> you<00:55:08.720> paying<00:55:09.400> because<00:55:09.559> if<00:55:09.640> you 00:55:09.710 --> 00:55:09.720 align:start position:0% okay and are you paying because if you 00:55:09.720 --> 00:55:12.109 align:start position:0% okay and are you paying because if you don't<00:55:09.839> want<00:55:09.960> to<00:55:10.040> pay<00:55:10.200> me<00:55:10.280> I<00:55:10.359> will<00:55:10.520> test<00:55:10.799> it<00:55:11.799> yeah 00:55:12.109 --> 00:55:12.119 align:start position:0% don't want to pay me I will test it yeah 00:55:12.119 --> 00:55:14.670 align:start position:0% don't want to pay me I will test it yeah yeah<00:55:12.400> I<00:55:12.640> I<00:55:12.839> I<00:55:12.960> think<00:55:13.400> uh<00:55:13.760> I<00:55:13.839> think<00:55:14.200> definitely 00:55:14.670 --> 00:55:14.680 align:start position:0% yeah I I I think uh I think definitely 00:55:14.680 --> 00:55:15.990 align:start position:0% yeah I I I think uh I think definitely this<00:55:14.799> is<00:55:14.920> one<00:55:15.040> of<00:55:15.119> the<00:55:15.240> ones<00:55:15.440> you<00:55:15.559> want<00:55:15.680> to<00:55:15.839> get 00:55:15.990 --> 00:55:16.000 align:start position:0% this is one of the ones you want to get 00:55:16.000 --> 00:55:19.190 align:start position:0% this is one of the ones you want to get permission<00:55:16.480> on<00:55:17.480> um<00:55:18.040> before<00:55:18.400> you<00:55:18.799> before<00:55:19.040> you 00:55:19.190 --> 00:55:19.200 align:start position:0% permission on um before you before you 00:55:19.200 --> 00:55:23.150 align:start position:0% permission on um before you before you do<00:55:19.400> it<00:55:20.040> is<00:55:20.200> there<00:55:20.960> what<00:55:21.079> is<00:55:21.200> the<00:55:21.359> best<00:55:21.640> way<00:55:22.160> to 00:55:23.150 --> 00:55:23.160 align:start position:0% do it is there what is the best way to 00:55:23.160 --> 00:55:26.150 align:start position:0% do it is there what is the best way to have<00:55:23.440> that<00:55:23.599> sort<00:55:23.760> of<00:55:24.000> high<00:55:24.280> signal<00:55:25.160> detection 00:55:26.150 --> 00:55:26.160 align:start position:0% have that sort of high signal detection 00:55:26.160 --> 00:55:28.670 align:start position:0% have that sort of high signal detection it<00:55:26.440> would<00:55:26.520> it<00:55:26.640> would<00:55:26.720> it<00:55:26.839> be<00:55:27.000> that<00:55:27.160> e<00:55:27.680> tag 00:55:28.670 --> 00:55:28.680 align:start position:0% it would it would it be that e tag 00:55:28.680 --> 00:55:31.829 align:start position:0% it would it would it be that e tag approach<00:55:29.200> or<00:55:29.799> like<00:55:30.200> without<00:55:31.079> because<00:55:31.559> when<00:55:31.680> I 00:55:31.829 --> 00:55:31.839 align:start position:0% approach or like without because when I 00:55:31.839 --> 00:55:33.510 align:start position:0% approach or like without because when I send<00:55:32.240> a<00:55:32.359> message<00:55:32.640> to<00:55:32.760> the<00:55:32.880> team<00:55:33.160> I<00:55:33.240> want<00:55:33.359> to<00:55:33.440> be 00:55:33.510 --> 00:55:33.520 align:start position:0% send a message to the team I want to be 00:55:33.520 --> 00:55:35.510 align:start position:0% send a message to the team I want to be able<00:55:33.680> to<00:55:33.799> say<00:55:33.960> like<00:55:34.160> hey<00:55:34.839> I'm<00:55:35.079> certain<00:55:35.400> that 00:55:35.510 --> 00:55:35.520 align:start position:0% able to say like hey I'm certain that 00:55:35.520 --> 00:55:36.630 align:start position:0% able to say like hey I'm certain that there's<00:55:35.680> a<00:55:35.760> server<00:55:36.079> side<00:55:36.240> prototype 00:55:36.630 --> 00:55:36.640 align:start position:0% there's a server side prototype 00:55:36.640 --> 00:55:38.870 align:start position:0% there's a server side prototype pollution<00:55:37.039> here<00:55:37.799> I<00:55:37.880> think<00:55:37.960> we<00:55:38.079> can<00:55:38.319> just<00:55:38.480> send 00:55:38.870 --> 00:55:38.880 align:start position:0% pollution here I think we can just send 00:55:38.880 --> 00:55:42.029 align:start position:0% pollution here I think we can just send them<00:55:39.559> uh<00:55:40.000> thisp<00:55:40.839> showing<00:55:41.280> them<00:55:41.480> oh<00:55:41.559> I<00:55:41.680> disabled 00:55:42.029 --> 00:55:42.039 align:start position:0% them uh thisp showing them oh I disabled 00:55:42.039 --> 00:55:44.470 align:start position:0% them uh thisp showing them oh I disabled the<00:55:42.160> cash<00:55:42.680> you<00:55:42.799> will<00:55:42.920> need<00:55:43.039> to<00:55:43.160> explain<00:55:43.640> a<00:55:43.760> lot 00:55:44.470 --> 00:55:44.480 align:start position:0% the cash you will need to explain a lot 00:55:44.480 --> 00:55:45.829 align:start position:0% the cash you will need to explain a lot yeah<00:55:44.640> and<00:55:44.720> you<00:55:44.799> can<00:55:44.960> say<00:55:45.160> oh<00:55:45.319> if<00:55:45.400> you<00:55:45.559> restart 00:55:45.829 --> 00:55:45.839 align:start position:0% yeah and you can say oh if you restart 00:55:45.839 --> 00:55:47.870 align:start position:0% yeah and you can say oh if you restart the<00:55:45.920> server<00:55:46.200> you'll<00:55:46.400> see<00:55:46.599> it's<00:55:46.799> not<00:55:47.440> the<00:55:47.559> is<00:55:47.799> is 00:55:47.870 --> 00:55:47.880 align:start position:0% the server you'll see it's not the is is 00:55:47.880 --> 00:55:49.270 align:start position:0% the server you'll see it's not the is is not<00:55:48.000> there<00:55:48.119> anymore<00:55:48.440> and<00:55:48.520> you<00:55:48.599> can<00:55:48.720> just<00:55:48.839> send 00:55:49.270 --> 00:55:49.280 align:start position:0% not there anymore and you can just send 00:55:49.280 --> 00:55:52.829 align:start position:0% not there anymore and you can just send the<00:55:49.400> slides<00:55:49.760> are<00:55:50.000> actually<00:55:50.280> online<00:55:51.160> okay 00:55:52.829 --> 00:55:52.839 align:start position:0% the slides are actually online okay 00:55:52.839 --> 00:55:55.549 align:start position:0% the slides are actually online okay gotcha<00:55:53.839> and<00:55:54.079> also<00:55:54.280> try<00:55:54.520> to<00:55:54.640> find<00:55:54.839> one<00:55:55.000> in<00:55:55.160> Kaa 00:55:55.549 --> 00:55:55.559 align:start position:0% gotcha and also try to find one in Kaa 00:55:55.559 --> 00:55:57.270 align:start position:0% gotcha and also try to find one in Kaa which<00:55:55.680> is<00:55:55.839> another<00:55:56.319> web<00:55:56.480> server<00:55:56.760> more<00:55:56.960> popular 00:55:57.270 --> 00:55:57.280 align:start position:0% which is another web server more popular 00:55:57.280 --> 00:56:01.309 align:start position:0% which is another web server more popular in<00:55:57.440> China<00:55:57.839> than<00:55:58.079> in<00:55:59.079> Europe<00:55:59.400> or<00:55:59.559> us<00:56:00.520> but 00:56:01.309 --> 00:56:01.319 align:start position:0% in China than in Europe or us but 00:56:01.319 --> 00:56:04.109 align:start position:0% in China than in Europe or us but still<00:56:02.319> and<00:56:02.960> over<00:56:03.240> there<00:56:03.359> you<00:56:03.520> can<00:56:03.960> uh 00:56:04.109 --> 00:56:04.119 align:start position:0% still and over there you can uh 00:56:04.119 --> 00:56:06.150 align:start position:0% still and over there you can uh prototype<00:56:04.799> actually<00:56:05.119> the<00:56:05.319> parameters<00:56:05.920> so 00:56:06.150 --> 00:56:06.160 align:start position:0% prototype actually the parameters so 00:56:06.160 --> 00:56:07.630 align:start position:0% prototype actually the parameters so here<00:56:06.359> the<00:56:06.480> function<00:56:06.839> take<00:56:07.039> a<00:56:07.160> parameter 00:56:07.630 --> 00:56:07.640 align:start position:0% here the function take a parameter 00:56:07.640 --> 00:56:09.750 align:start position:0% here the function take a parameter called<00:56:07.920> name<00:56:08.200> and<00:56:08.319> it<00:56:08.520> reflect 00:56:09.750 --> 00:56:09.760 align:start position:0% called name and it reflect 00:56:09.760 --> 00:56:12.990 align:start position:0% called name and it reflect it<00:56:10.760> and<00:56:10.920> if<00:56:11.119> I<00:56:11.359> do<00:56:11.599> some<00:56:11.799> protype<00:56:12.200> pollution<00:56:12.880> uh 00:56:12.990 --> 00:56:13.000 align:start position:0% it and if I do some protype pollution uh 00:56:13.000 --> 00:56:16.510 align:start position:0% it and if I do some protype pollution uh with<00:56:13.160> PP<00:56:13.559> finder<00:56:14.559> uh<00:56:14.920> and<00:56:15.039> a<00:56:15.160> name<00:56:15.400> can<00:56:15.559> I<00:56:15.680> is 00:56:16.510 --> 00:56:16.520 align:start position:0% with PP finder uh and a name can I is 00:56:16.520 --> 00:56:19.150 align:start position:0% with PP finder uh and a name can I is PP<00:56:17.520> and<00:56:17.680> the<00:56:17.799> next<00:56:18.000> time<00:56:18.160> I<00:56:18.280> do<00:56:18.640> a<00:56:18.760> research 00:56:19.150 --> 00:56:19.160 align:start position:0% PP and the next time I do a research 00:56:19.160 --> 00:56:21.150 align:start position:0% PP and the next time I do a research with<00:56:19.319> just<00:56:19.480> PP<00:56:19.799> finder<00:56:20.599> the<00:56:20.720> key<00:56:20.960> will 00:56:21.150 --> 00:56:21.160 align:start position:0% with just PP finder the key will 00:56:21.160 --> 00:56:23.990 align:start position:0% with just PP finder the key will actually<00:56:21.960> look<00:56:22.119> at<00:56:22.240> a<00:56:22.440> cache<00:56:23.280> on<00:56:23.440> how<00:56:23.880> it 00:56:23.990 --> 00:56:24.000 align:start position:0% actually look at a cache on how it 00:56:24.000 --> 00:56:25.789 align:start position:0% actually look at a cache on how it should<00:56:24.280> react<00:56:24.799> so<00:56:25.039> this<00:56:25.160> time<00:56:25.359> I<00:56:25.480> have<00:56:25.720> the 00:56:25.789 --> 00:56:25.799 align:start position:0% should react so this time I have the 00:56:25.799 --> 00:56:27.829 align:start position:0% should react so this time I have the name<00:56:26.039> can<00:56:26.119> I 00:56:27.829 --> 00:56:27.839 align:start position:0% name can I 00:56:27.839 --> 00:56:29.829 align:start position:0% name can I so<00:56:28.079> another<00:56:28.280> way<00:56:28.400> to<00:56:28.520> detect<00:56:28.839> it<00:56:29.480> another 00:56:29.829 --> 00:56:29.839 align:start position:0% so another way to detect it another 00:56:29.839 --> 00:56:34.109 align:start position:0% so another way to detect it another popular<00:56:30.720> uh<00:56:31.599> web 00:56:34.109 --> 00:56:34.119 align:start position:0% 00:56:34.119 --> 00:56:36.750 align:start position:0% server<00:56:35.119> so<00:56:35.280> now<00:56:35.400> we<00:56:35.480> know<00:56:35.680> to<00:56:35.839> detect<00:56:36.480> uh<00:56:36.599> let's 00:56:36.750 --> 00:56:36.760 align:start position:0% server so now we know to detect uh let's 00:56:36.760 --> 00:56:39.910 align:start position:0% server so now we know to detect uh let's go<00:56:36.839> to<00:56:37.480> exploitation<00:56:38.480> and<00:56:38.680> the<00:56:38.839> issue<00:56:39.160> is<00:56:39.799> when 00:56:39.910 --> 00:56:39.920 align:start position:0% go to exploitation and the issue is when 00:56:39.920 --> 00:56:41.630 align:start position:0% go to exploitation and the issue is when you<00:56:40.000> do<00:56:40.319> black<00:56:40.559> block<00:56:40.799> explo<00:56:41.160> when<00:56:41.280> you 00:56:41.630 --> 00:56:41.640 align:start position:0% you do black block explo when you 00:56:41.640 --> 00:56:43.990 align:start position:0% you do black block explo when you exploitation<00:56:42.039> on<00:56:42.160> a<00:56:42.960> on<00:56:43.079> the<00:56:43.240> blackbox 00:56:43.990 --> 00:56:44.000 align:start position:0% exploitation on a on the blackbox 00:56:44.000 --> 00:56:45.589 align:start position:0% exploitation on a on the blackbox environment<00:56:44.799> you<00:56:44.920> don't<00:56:45.079> know<00:56:45.200> what<00:56:45.319> the<00:56:45.400> code 00:56:45.589 --> 00:56:45.599 align:start position:0% environment you don't know what the code 00:56:45.599 --> 00:56:47.270 align:start position:0% environment you don't know what the code look<00:56:45.799> like<00:56:45.960> so<00:56:46.119> we<00:56:46.200> don't<00:56:46.400> know<00:56:46.760> we<00:56:47.039> we<00:56:47.119> won't 00:56:47.270 --> 00:56:47.280 align:start position:0% look like so we don't know we we won't 00:56:47.280 --> 00:56:49.150 align:start position:0% look like so we don't know we we won't be<00:56:47.359> able<00:56:47.520> to<00:56:47.599> find<00:56:47.760> the<00:56:47.920> gadget<00:56:48.799> so<00:56:49.000> my 00:56:49.150 --> 00:56:49.160 align:start position:0% be able to find the gadget so my 00:56:49.160 --> 00:56:51.710 align:start position:0% be able to find the gadget so my solution<00:56:49.559> is<00:56:50.000> well<00:56:50.319> let's<00:56:50.599> just<00:56:50.880> go<00:56:51.039> to<00:56:51.319> Every 00:56:51.710 --> 00:56:51.720 align:start position:0% solution is well let's just go to Every 00:56:51.720 --> 00:56:53.549 align:start position:0% solution is well let's just go to Every popular<00:56:52.119> JavaScript<00:56:52.599> library<00:56:53.079> and<00:56:53.240> find<00:56:53.400> a 00:56:53.549 --> 00:56:53.559 align:start position:0% popular JavaScript library and find a 00:56:53.559 --> 00:56:56.349 align:start position:0% popular JavaScript library and find a gadget<00:56:53.880> over<00:56:54.160> there<00:56:54.920> because<00:56:55.680> I<00:56:55.799> think<00:56:56.079> like 00:56:56.349 --> 00:56:56.359 align:start position:0% gadget over there because I think like 00:56:56.359 --> 00:56:58.150 align:start position:0% gadget over there because I think like in<00:56:56.520> every<00:56:56.720> code<00:56:56.920> base<00:56:57.240> at<00:56:57.359> least<00:56:57.640> like<00:56:57.799> one<00:56:57.960> of 00:56:58.150 --> 00:56:58.160 align:start position:0% in every code base at least like one of 00:56:58.160 --> 00:57:00.470 align:start position:0% in every code base at least like one of these<00:56:58.720> exists<00:56:59.119> somewhere<00:56:59.440> in<00:56:59.559> the<00:56:59.720> server<00:57:00.359> and 00:57:00.470 --> 00:57:00.480 align:start position:0% these exists somewhere in the server and 00:57:00.480 --> 00:57:03.150 align:start position:0% these exists somewhere in the server and I<00:57:00.599> have<00:57:01.039> other<00:57:01.280> payloads<00:57:01.720> for<00:57:01.920> other<00:57:02.240> kind<00:57:02.400> of 00:57:03.150 --> 00:57:03.160 align:start position:0% I have other payloads for other kind of 00:57:03.160 --> 00:57:08.589 align:start position:0% I have other payloads for other kind of Library<00:57:03.960> so<00:57:04.200> let's<00:57:04.400> just<00:57:04.559> go<00:57:04.799> a<00:57:05.000> step<00:57:05.559> a<00:57:05.760> step 00:57:08.589 --> 00:57:08.599 align:start position:0% 00:57:08.599 --> 00:57:12.549 align:start position:0% deeper<00:57:09.599> so<00:57:09.799> in<00:57:10.480> I<00:57:10.559> use<00:57:11.079> vgs<00:57:11.680> because<00:57:11.920> I'm<00:57:12.400> a 00:57:12.549 --> 00:57:12.559 align:start position:0% deeper so in I use vgs because I'm a 00:57:12.559 --> 00:57:15.549 align:start position:0% deeper so in I use vgs because I'm a view<00:57:12.799> guy<00:57:12.960> I<00:57:13.079> prefer<00:57:13.400> it<00:57:14.400> instead<00:57:14.680> of 00:57:15.549 --> 00:57:15.559 align:start position:0% view guy I prefer it instead of 00:57:15.559 --> 00:57:19.069 align:start position:0% view guy I prefer it instead of react<00:57:16.559> and<00:57:16.680> I<00:57:16.799> try<00:57:16.960> to<00:57:17.119> find<00:57:17.440> a<00:57:17.880> way<00:57:18.039> to<00:57:18.160> get<00:57:18.319> LC 00:57:19.069 --> 00:57:19.079 align:start position:0% react and I try to find a way to get LC 00:57:19.079 --> 00:57:21.270 align:start position:0% react and I try to find a way to get LC if<00:57:19.240> there<00:57:19.359> is<00:57:19.480> Ser<00:57:19.799> side<00:57:19.960> rendering<00:57:20.960> and<00:57:21.079> it's 00:57:21.270 --> 00:57:21.280 align:start position:0% if there is Ser side rendering and it's 00:57:21.280 --> 00:57:23.069 align:start position:0% if there is Ser side rendering and it's actually<00:57:21.640> super<00:57:21.920> simple<00:57:22.319> I<00:57:22.400> mean<00:57:22.559> super 00:57:23.069 --> 00:57:23.079 align:start position:0% actually super simple I mean super 00:57:23.079 --> 00:57:25.870 align:start position:0% actually super simple I mean super simple<00:57:24.079> you<00:57:24.559> have<00:57:24.720> your<00:57:25.039> classic<00:57:25.440> JavaScript 00:57:25.870 --> 00:57:25.880 align:start position:0% simple you have your classic JavaScript 00:57:25.880 --> 00:57:28.589 align:start position:0% simple you have your classic JavaScript explo<00:57:26.319> ation<00:57:26.920> uh<00:57:27.079> payload<00:57:27.799> when<00:57:27.920> you<00:57:28.079> require 00:57:28.589 --> 00:57:28.599 align:start position:0% explo ation uh payload when you require 00:57:28.599 --> 00:57:30.510 align:start position:0% explo ation uh payload when you require you<00:57:28.799> get<00:57:28.960> an<00:57:29.160> access<00:57:29.480> to<00:57:29.720> child<00:57:30.079> process<00:57:30.400> and 00:57:30.510 --> 00:57:30.520 align:start position:0% you get an access to child process and 00:57:30.520 --> 00:57:32.910 align:start position:0% you get an access to child process and you<00:57:30.599> do<00:57:30.799> exact<00:57:31.039> Sy<00:57:31.319> with<00:57:31.400> a 00:57:32.910 --> 00:57:32.920 align:start position:0% you do exact Sy with a 00:57:32.920 --> 00:57:36.190 align:start position:0% you do exact Sy with a command<00:57:33.920> and<00:57:34.240> you<00:57:34.359> can<00:57:34.520> modify<00:57:35.039> the<00:57:35.240> SSR<00:57:35.720> CSS 00:57:36.190 --> 00:57:36.200 align:start position:0% command and you can modify the SSR CSS 00:57:36.200 --> 00:57:39.950 align:start position:0% command and you can modify the SSR CSS vs<00:57:37.079> which<00:57:37.200> is<00:57:37.599> directly<00:57:38.599> uh<00:57:38.760> put<00:57:39.039> inside<00:57:39.440> the 00:57:39.950 --> 00:57:39.960 align:start position:0% vs which is directly uh put inside the 00:57:39.960 --> 00:57:42.870 align:start position:0% vs which is directly uh put inside the eval<00:57:40.440> kind<00:57:40.640> of<00:57:40.799> code<00:57:41.680> so<00:57:41.839> you<00:57:42.000> just<00:57:42.280> close<00:57:42.720> the 00:57:42.870 --> 00:57:42.880 align:start position:0% eval kind of code so you just close the 00:57:42.880 --> 00:57:44.870 align:start position:0% eval kind of code so you just close the the<00:57:43.000> parenthesis<00:57:43.920> and<00:57:44.079> you<00:57:44.280> add<00:57:44.480> your<00:57:44.720> your 00:57:44.870 --> 00:57:44.880 align:start position:0% the parenthesis and you add your your 00:57:44.880 --> 00:57:47.430 align:start position:0% the parenthesis and you add your your code<00:57:45.599> I<00:57:45.720> use<00:57:45.880> the<00:57:45.960> return<00:57:46.319> push<00:57:46.680> so<00:57:46.920> this<00:57:47.119> way 00:57:47.430 --> 00:57:47.440 align:start position:0% code I use the return push so this way 00:57:47.440 --> 00:57:49.710 align:start position:0% code I use the return push so this way it<00:57:47.520> will<00:57:47.760> give<00:57:47.960> me<00:57:48.200> give<00:57:48.319> me<00:57:48.480> the<00:57:48.599> output<00:57:49.079> of<00:57:49.240> my 00:57:49.710 --> 00:57:49.720 align:start position:0% it will give me give me the output of my 00:57:49.720 --> 00:57:52.510 align:start position:0% it will give me give me the output of my payloads<00:57:50.720> and<00:57:50.880> if<00:57:51.119> I<00:57:51.559> and<00:57:52.079> when<00:57:52.240> the<00:57:52.359> app 00:57:52.510 --> 00:57:52.520 align:start position:0% payloads and if I and when the app 00:57:52.520 --> 00:57:54.789 align:start position:0% payloads and if I and when the app render<00:57:53.000> even<00:57:53.280> if<00:57:53.400> it's<00:57:53.559> an<00:57:53.720> empty<00:57:54.440> completely 00:57:54.789 --> 00:57:54.799 align:start position:0% render even if it's an empty completely 00:57:54.799 --> 00:57:59.630 align:start position:0% render even if it's an empty completely empty<00:57:55.079> app<00:57:55.480> it<00:57:55.559> will<00:57:55.720> trigger<00:57:56.200> and<00:57:56.319> you<00:57:56.520> get 00:57:59.630 --> 00:57:59.640 align:start position:0% 00:57:59.640 --> 00:58:03.069 align:start position:0% see<00:58:00.640> another<00:58:00.880> one<00:58:01.039> I<00:58:01.119> want<00:58:01.280> to<00:58:01.599> to<00:58:01.799> test<00:58:02.240> is<00:58:02.440> GD 00:58:03.069 --> 00:58:03.079 align:start position:0% see another one I want to to test is GD 00:58:03.079 --> 00:58:05.829 align:start position:0% see another one I want to to test is GD because<00:58:03.319> GD<00:58:03.839> is<00:58:04.640> everywhere<00:58:05.079> as<00:58:05.400> is<00:58:05.520> server 00:58:05.829 --> 00:58:05.839 align:start position:0% because GD is everywhere as is server 00:58:05.839 --> 00:58:07.670 align:start position:0% because GD is everywhere as is server side<00:58:06.000> rendering<00:58:06.520> there<00:58:06.599> is<00:58:06.760> GS<00:58:07.079> D<00:58:07.440> because 00:58:07.670 --> 00:58:07.680 align:start position:0% side rendering there is GS D because 00:58:07.680 --> 00:58:08.870 align:start position:0% side rendering there is GS D because this<00:58:07.760> is<00:58:07.880> the<00:58:08.000> way<00:58:08.119> you<00:58:08.240> get<00:58:08.400> the<00:58:08.559> Dum 00:58:08.870 --> 00:58:08.880 align:start position:0% this is the way you get the Dum 00:58:08.880 --> 00:58:11.549 align:start position:0% this is the way you get the Dum implementation<00:58:09.760> in<00:58:09.880> the<00:58:10.039> server 00:58:11.549 --> 00:58:11.559 align:start position:0% implementation in the server 00:58:11.559 --> 00:58:13.950 align:start position:0% implementation in the server side<00:58:12.559> so<00:58:12.760> here<00:58:12.880> the<00:58:13.000> payload<00:58:13.400> is<00:58:13.559> way<00:58:13.720> more 00:58:13.950 --> 00:58:13.960 align:start position:0% side so here the payload is way more 00:58:13.960 --> 00:58:16.750 align:start position:0% side so here the payload is way more complicated<00:58:14.960> but<00:58:15.119> with<00:58:15.319> Pinder<00:58:15.799> it<00:58:15.960> was<00:58:16.599> quite 00:58:16.750 --> 00:58:16.760 align:start position:0% complicated but with Pinder it was quite 00:58:16.760 --> 00:58:20.990 align:start position:0% complicated but with Pinder it was quite easy<00:58:16.960> to<00:58:17.599> find<00:58:18.599> so<00:58:18.839> here<00:58:18.960> I<00:58:19.079> have<00:58:19.319> a<00:58:19.720> a<00:58:19.839> JDM<00:58:20.799> page 00:58:20.990 --> 00:58:21.000 align:start position:0% easy to find so here I have a a JDM page 00:58:21.000 --> 00:58:22.630 align:start position:0% easy to find so here I have a a JDM page that<00:58:21.160> is<00:58:21.319> render<00:58:21.720> with<00:58:21.839> a<00:58:21.960> script<00:58:22.280> I<00:58:22.400> do<00:58:22.480> not 00:58:22.630 --> 00:58:22.640 align:start position:0% that is render with a script I do not 00:58:22.640 --> 00:58:24.710 align:start position:0% that is render with a script I do not control<00:58:23.039> I<00:58:23.160> have<00:58:23.319> no<00:58:23.520> control<00:58:23.839> in<00:58:23.960> the<00:58:24.079> input 00:58:24.710 --> 00:58:24.720 align:start position:0% control I have no control in the input 00:58:24.720 --> 00:58:26.670 align:start position:0% control I have no control in the input but<00:58:24.880> I<00:58:25.000> am<00:58:25.160> able<00:58:25.480> to<00:58:26.119> do<00:58:26.280> the<00:58:26.359> protype 00:58:26.670 --> 00:58:26.680 align:start position:0% but I am able to do the protype 00:58:26.680 --> 00:58:28.870 align:start position:0% but I am able to do the protype pollution<00:58:27.240> before<00:58:28.240> so<00:58:28.440> the<00:58:28.520> first<00:58:28.680> thing<00:58:28.799> I 00:58:28.870 --> 00:58:28.880 align:start position:0% pollution before so the first thing I 00:58:28.880 --> 00:58:30.230 align:start position:0% pollution before so the first thing I want<00:58:29.000> to<00:58:29.079> set<00:58:29.359> is<00:58:29.480> the<00:58:29.599> Run<00:58:29.839> script 00:58:30.230 --> 00:58:30.240 align:start position:0% want to set is the Run script 00:58:30.240 --> 00:58:33.309 align:start position:0% want to set is the Run script dangerously<00:58:31.240> this<00:58:31.400> look<00:58:31.799> already<00:58:32.319> promising 00:58:33.309 --> 00:58:33.319 align:start position:0% dangerously this look already promising 00:58:33.319 --> 00:58:35.270 align:start position:0% dangerously this look already promising I<00:58:33.440> had<00:58:33.640> the<00:58:33.720> resource<00:58:34.079> usable<00:58:34.680> and<00:58:34.920> I<00:58:35.079> after 00:58:35.270 --> 00:58:35.280 align:start position:0% I had the resource usable and I after 00:58:35.280 --> 00:58:37.789 align:start position:0% I had the resource usable and I after that<00:58:35.400> I<00:58:35.480> do<00:58:35.640> a<00:58:35.720> lot<00:58:35.839> of<00:58:36.000> tricks<00:58:36.480> with<00:58:36.640> the<00:58:36.799> URL 00:58:37.789 --> 00:58:37.799 align:start position:0% that I do a lot of tricks with the URL 00:58:37.799 --> 00:58:41.549 align:start position:0% that I do a lot of tricks with the URL so<00:58:38.160> my<00:58:38.400> so<00:58:38.559> I<00:58:38.680> can<00:58:38.880> force<00:58:39.680> URL<00:58:40.280> control<00:58:41.280> so<00:58:41.440> if 00:58:41.549 --> 00:58:41.559 align:start position:0% so my so I can force URL control so if 00:58:41.559 --> 00:58:43.230 align:start position:0% so my so I can force URL control so if there<00:58:41.640> is<00:58:41.720> a<00:58:41.839> script<00:58:42.280> somewhere<00:58:42.559> in<00:58:42.720> my<00:58:42.920> in<00:58:43.039> my 00:58:43.230 --> 00:58:43.240 align:start position:0% there is a script somewhere in my in my 00:58:43.240 --> 00:58:45.470 align:start position:0% there is a script somewhere in my in my page<00:58:43.599> I<00:58:43.680> will<00:58:43.839> set<00:58:44.119> my<00:58:44.240> usern<00:58:44.960> the<00:58:45.119> protype 00:58:45.470 --> 00:58:45.480 align:start position:0% page I will set my usern the protype 00:58:45.480 --> 00:58:48.109 align:start position:0% page I will set my usern the protype username<00:58:46.160> to<00:58:46.480> this<00:58:47.280> and<00:58:47.520> it<00:58:47.599> will<00:58:47.799> try<00:58:48.000> to 00:58:48.109 --> 00:58:48.119 align:start position:0% username to this and it will try to 00:58:48.119 --> 00:58:51.789 align:start position:0% username to this and it will try to build<00:58:48.400> the<00:58:48.480> URL<00:58:49.440> but<00:58:49.599> because<00:58:49.960> my<00:58:50.720> um<00:58:51.200> URL<00:58:51.680> it 00:58:51.789 --> 00:58:51.799 align:start position:0% build the URL but because my um URL it 00:58:51.799 --> 00:58:53.990 align:start position:0% build the URL but because my um URL it start<00:58:52.039> with<00:58:52.240> data<00:58:52.680> it's<00:58:52.880> followed<00:58:53.359> by<00:58:53.799> this 00:58:53.990 --> 00:58:54.000 align:start position:0% start with data it's followed by this 00:58:54.000 --> 00:58:56.670 align:start position:0% start with data it's followed by this username<00:58:54.880> which<00:58:55.039> is<00:58:55.160> will<00:58:55.319> be<00:58:55.640> this 00:58:56.670 --> 00:58:56.680 align:start position:0% username which is will be this 00:58:56.680 --> 00:58:58.710 align:start position:0% username which is will be this and<00:58:56.839> followed<00:58:57.119> by<00:58:57.240> the<00:58:57.359> payload<00:58:58.160> I<00:58:58.280> just<00:58:58.440> broke 00:58:58.710 --> 00:58:58.720 align:start position:0% and followed by the payload I just broke 00:58:58.720 --> 00:59:01.390 align:start position:0% and followed by the payload I just broke the<00:58:58.880> world<00:58:59.119> Ur<00:58:59.599> Builder<00:59:00.400> and<00:59:00.680> this<00:59:00.799> will<00:59:01.280> I 00:59:01.390 --> 00:59:01.400 align:start position:0% the world Ur Builder and this will I 00:59:01.400 --> 00:59:02.750 align:start position:0% the world Ur Builder and this will I actually<00:59:01.599> trigger<00:59:02.000> JavaScript<00:59:02.400> is<00:59:02.520> where<00:59:02.680> a 00:59:02.750 --> 00:59:02.760 align:start position:0% actually trigger JavaScript is where a 00:59:02.760 --> 00:59:04.390 align:start position:0% actually trigger JavaScript is where a script<00:59:03.000> on<00:59:03.119> the<00:59:03.240> page<00:59:03.760> but<00:59:03.880> the<00:59:04.000> JavaScript 00:59:04.390 --> 00:59:04.400 align:start position:0% script on the page but the JavaScript 00:59:04.400 --> 00:59:05.829 align:start position:0% script on the page but the JavaScript will<00:59:04.520> rerun<00:59:04.799> on<00:59:04.920> the<00:59:05.000> server<00:59:05.319> so<00:59:05.440> you<00:59:05.520> get<00:59:05.680> Cod 00:59:05.829 --> 00:59:05.839 align:start position:0% will rerun on the server so you get Cod 00:59:05.839 --> 00:59:08.910 align:start position:0% will rerun on the server so you get Cod execution<00:59:06.319> once<00:59:06.520> again<00:59:07.200> wow<00:59:07.720> this<00:59:07.839> is<00:59:08.119> super 00:59:08.910 --> 00:59:08.920 align:start position:0% execution once again wow this is super 00:59:08.920 --> 00:59:10.789 align:start position:0% execution once again wow this is super awesome<00:59:09.280> so<00:59:09.440> the<00:59:09.599> scenario<00:59:10.119> where<00:59:10.359> we<00:59:10.520> would 00:59:10.789 --> 00:59:10.799 align:start position:0% awesome so the scenario where we would 00:59:10.799 --> 00:59:13.470 align:start position:0% awesome so the scenario where we would we<00:59:10.880> would<00:59:11.039> see<00:59:11.280> this<00:59:11.440> is<00:59:11.599> when<00:59:11.799> we<00:59:12.119> have<00:59:12.960> serers 00:59:13.470 --> 00:59:13.480 align:start position:0% we would see this is when we have serers 00:59:13.480 --> 00:59:17.190 align:start position:0% we would see this is when we have serers side<00:59:14.079> JS<00:59:14.920> execution<00:59:15.920> and<00:59:16.119> and<00:59:16.280> then<00:59:16.559> we<00:59:16.920> we<00:59:17.039> can 00:59:17.190 --> 00:59:17.200 align:start position:0% side JS execution and and then we we can 00:59:17.200 --> 00:59:18.910 align:start position:0% side JS execution and and then we we can do<00:59:17.640> you<00:59:17.760> find<00:59:17.880> the<00:59:18.039> prototyp<00:59:18.480> solution 00:59:18.910 --> 00:59:18.920 align:start position:0% do you find the prototyp solution 00:59:18.920 --> 00:59:20.789 align:start position:0% do you find the prototyp solution somewhere<00:59:19.720> yeah<00:59:19.839> you<00:59:19.920> find<00:59:20.480> solution 00:59:20.789 --> 00:59:20.799 align:start position:0% somewhere yeah you find solution 00:59:20.799 --> 00:59:22.470 align:start position:0% somewhere yeah you find solution somewhere<00:59:21.200> and<00:59:21.319> you<00:59:21.440> know<00:59:21.640> there<00:59:21.760> is<00:59:21.960> C<00:59:22.280> side 00:59:22.470 --> 00:59:22.480 align:start position:0% somewhere and you know there is C side 00:59:22.480 --> 00:59:26.270 align:start position:0% somewhere and you know there is C side rendering<00:59:23.480> so<00:59:23.680> they<00:59:23.760> are<00:59:23.920> using<00:59:24.200> GS<00:59:24.760> somewhere 00:59:26.270 --> 00:59:26.280 align:start position:0% rendering so they are using GS somewhere 00:59:26.280 --> 00:59:28.109 align:start position:0% rendering so they are using GS somewhere this<00:59:26.400> could<00:59:26.640> be<00:59:27.280> yeah<00:59:27.440> of<00:59:27.559> course<00:59:27.799> that<00:59:27.880> makes 00:59:28.109 --> 00:59:28.119 align:start position:0% this could be yeah of course that makes 00:59:28.119 --> 00:59:29.950 align:start position:0% this could be yeah of course that makes sense<00:59:28.400> so<00:59:28.880> this<00:59:29.039> could<00:59:29.240> be<00:59:29.520> prototype 00:59:29.950 --> 00:59:29.960 align:start position:0% sense so this could be prototype 00:59:29.960 --> 00:59:31.870 align:start position:0% sense so this could be prototype pollution<00:59:30.520> in<00:59:30.799> a<00:59:31.000> completely<00:59:31.400> different<00:59:31.599> end 00:59:31.870 --> 00:59:31.880 align:start position:0% pollution in a completely different end 00:59:31.880 --> 00:59:34.789 align:start position:0% pollution in a completely different end point<00:59:32.559> yeah<00:59:32.799> and<00:59:32.960> then<00:59:33.280> and<00:59:33.440> then<00:59:33.720> you<00:59:34.359> do<00:59:34.599> the 00:59:34.789 --> 00:59:34.799 align:start position:0% point yeah and then and then you do the 00:59:34.799 --> 00:59:38.950 align:start position:0% point yeah and then and then you do the pollution<00:59:35.480> and<00:59:35.640> then<00:59:35.880> you<00:59:36.799> uh<00:59:36.960> run<00:59:37.599> the<00:59:38.079> the<00:59:38.359> JS 00:59:38.950 --> 00:59:38.960 align:start position:0% pollution and then you uh run the the JS 00:59:38.960 --> 00:59:40.549 align:start position:0% pollution and then you uh run the the JS the<00:59:39.119> code<00:59:39.400> that<00:59:39.839> hit<00:59:40.039> the<00:59:40.119> end<00:59:40.319> point<00:59:40.440> that 00:59:40.549 --> 00:59:40.559 align:start position:0% the code that hit the end point that 00:59:40.559 --> 00:59:42.309 align:start position:0% the code that hit the end point that runs<00:59:40.760> the<00:59:40.839> JS<00:59:41.160> Dom<00:59:41.440> code<00:59:41.799> and<00:59:41.920> then<00:59:42.240> it 00:59:42.309 --> 00:59:42.319 align:start position:0% runs the JS Dom code and then it 00:59:42.319 --> 00:59:44.950 align:start position:0% runs the JS Dom code and then it triggers<00:59:42.839> this<00:59:43.599> yeah<00:59:44.119> the<00:59:44.520> but<00:59:44.680> it<00:59:44.799> will 00:59:44.950 --> 00:59:44.960 align:start position:0% triggers this yeah the but it will 00:59:44.960 --> 00:59:47.549 align:start position:0% triggers this yeah the but it will trigger<00:59:45.359> every<00:59:45.559> time<00:59:46.200> so<00:59:46.400> what<00:59:46.520> I<00:59:46.640> do<00:59:46.960> usually 00:59:47.549 --> 00:59:47.559 align:start position:0% trigger every time so what I do usually 00:59:47.559 --> 00:59:49.069 align:start position:0% trigger every time so what I do usually it's<00:59:47.799> in<00:59:47.920> my<00:59:48.079> payload<00:59:48.440> the<00:59:48.520> first<00:59:48.680> thing<00:59:48.799> I<00:59:48.920> do 00:59:49.069 --> 00:59:49.079 align:start position:0% it's in my payload the first thing I do 00:59:49.079 --> 00:59:51.710 align:start position:0% it's in my payload the first thing I do is<00:59:49.160> I<00:59:49.319> remove<00:59:49.640> the<00:59:50.000> pollution<00:59:51.000> okay<00:59:51.440> so<00:59:51.640> it 00:59:51.710 --> 00:59:51.720 align:start position:0% is I remove the pollution okay so it 00:59:51.720 --> 00:59:53.309 align:start position:0% is I remove the pollution okay so it will<00:59:51.880> trigger<00:59:52.240> once<00:59:52.520> and<00:59:52.640> once<00:59:52.799> it's<00:59:52.960> trigger 00:59:53.309 --> 00:59:53.319 align:start position:0% will trigger once and once it's trigger 00:59:53.319 --> 00:59:54.870 align:start position:0% will trigger once and once it's trigger it<00:59:53.400> will<00:59:53.520> remove<00:59:53.839> itself<00:59:54.280> it's<00:59:54.440> like<00:59:54.559> an<00:59:54.640> autod 00:59:54.870 --> 00:59:54.880 align:start position:0% it will remove itself it's like an autod 00:59:54.880 --> 00:59:56.710 align:start position:0% it will remove itself it's like an autod destruct<00:59:55.319> but<00:59:55.559> button<00:59:56.039> inside<00:59:56.400> inside<00:59:56.599> your 00:59:56.710 --> 00:59:56.720 align:start position:0% destruct but button inside inside your 00:59:56.720 --> 00:59:58.829 align:start position:0% destruct but button inside inside your payload<00:59:57.640> it's<00:59:57.760> a<00:59:57.920> good<00:59:58.079> way<00:59:58.240> to<00:59:58.400> test<00:59:58.599> it 00:59:58.829 --> 00:59:58.839 align:start position:0% payload it's a good way to test it 00:59:58.839 --> 01:00:00.789 align:start position:0% payload it's a good way to test it without<00:59:59.520> uh<01:00:00.000> breaking<01:00:00.400> everything<01:00:00.640> for 01:00:00.789 --> 01:00:00.799 align:start position:0% without uh breaking everything for 01:00:00.799 --> 01:00:03.630 align:start position:0% without uh breaking everything for everyone<01:00:01.079> all<01:00:01.200> the<01:00:01.359> time<01:00:02.200> another<01:00:02.559> thing<01:00:03.520> when 01:00:03.630 --> 01:00:03.640 align:start position:0% everyone all the time another thing when 01:00:03.640 --> 01:00:05.069 align:start position:0% everyone all the time another thing when you<01:00:03.799> testing<01:00:04.240> when<01:00:04.359> you're<01:00:04.400> are<01:00:04.520> testing<01:00:04.799> prot 01:00:05.069 --> 01:00:05.079 align:start position:0% you testing when you're are testing prot 01:00:05.079 --> 01:00:06.390 align:start position:0% you testing when you're are testing prot pollution<01:00:05.559> keep<01:00:05.720> in<01:00:05.880> mind<01:00:06.119> that<01:00:06.200> you<01:00:06.280> are 01:00:06.390 --> 01:00:06.400 align:start position:0% pollution keep in mind that you are 01:00:06.400 --> 01:00:08.589 align:start position:0% pollution keep in mind that you are polluting<01:00:06.799> the<01:00:06.920> whole<01:00:07.200> process<01:00:07.960> but<01:00:08.119> only<01:00:08.359> the 01:00:08.589 --> 01:00:08.599 align:start position:0% polluting the whole process but only the 01:00:08.599 --> 01:00:10.670 align:start position:0% polluting the whole process but only the process<01:00:09.359> is<01:00:09.520> the<01:00:09.680> server<01:00:10.119> has<01:00:10.319> multiple 01:00:10.670 --> 01:00:10.680 align:start position:0% process is the server has multiple 01:00:10.680 --> 01:00:14.069 align:start position:0% process is the server has multiple backends<01:00:11.240> because<01:00:11.720> for<01:00:12.680> load<01:00:13.000> balancing<01:00:13.960> uh 01:00:14.069 --> 01:00:14.079 align:start position:0% backends because for load balancing uh 01:00:14.079 --> 01:00:16.029 align:start position:0% backends because for load balancing uh you<01:00:14.160> need<01:00:14.319> to<01:00:14.480> be<01:00:14.640> sure<01:00:14.920> you<01:00:15.079> are<01:00:15.599> doing<01:00:15.880> your 01:00:16.029 --> 01:00:16.039 align:start position:0% you need to be sure you are doing your 01:00:16.039 --> 01:00:17.390 align:start position:0% you need to be sure you are doing your test<01:00:16.240> on<01:00:16.359> the<01:00:16.440> same<01:00:16.640> server<01:00:16.960> so<01:00:17.119> sometime<01:00:17.359> you 01:00:17.390 --> 01:00:17.400 align:start position:0% test on the same server so sometime you 01:00:17.400 --> 01:00:19.430 align:start position:0% test on the same server so sometime you need<01:00:17.520> to<01:00:17.640> run<01:00:17.839> it<01:00:18.319> multiple<01:00:18.720> time<01:00:18.960> to<01:00:19.079> be<01:00:19.200> able 01:00:19.430 --> 01:00:19.440 align:start position:0% need to run it multiple time to be able 01:00:19.440 --> 01:00:21.470 align:start position:0% need to run it multiple time to be able to<01:00:19.640> detect<01:00:19.920> it<01:00:20.160> properly<01:00:20.559> you<01:00:20.640> can<01:00:20.839> miss<01:00:21.079> s<01:00:21.319> of 01:00:21.470 --> 01:00:21.480 align:start position:0% to detect it properly you can miss s of 01:00:21.480 --> 01:00:23.190 align:start position:0% to detect it properly you can miss s of exploit<01:00:21.920> just<01:00:22.119> because<01:00:22.720> you<01:00:22.839> send<01:00:23.039> your 01:00:23.190 --> 01:00:23.200 align:start position:0% exploit just because you send your 01:00:23.200 --> 01:00:24.710 align:start position:0% exploit just because you send your exploit<01:00:23.520> on<01:00:23.680> this<01:00:23.839> on<01:00:23.960> one<01:00:24.160> server<01:00:24.520> and<01:00:24.640> you 01:00:24.710 --> 01:00:24.720 align:start position:0% exploit on this on one server and you 01:00:24.720 --> 01:00:26.789 align:start position:0% exploit on this on one server and you try<01:00:24.920> to<01:00:25.160> get<01:00:25.280> the<01:00:25.359> output<01:00:25.640> on<01:00:25.760> another<01:00:26.160> one<01:00:26.720> and 01:00:26.789 --> 01:00:26.799 align:start position:0% try to get the output on another one and 01:00:26.799 --> 01:00:28.630 align:start position:0% try to get the output on another one and you<01:00:26.920> don't<01:00:27.200> know<01:00:27.680> you<01:00:27.799> just<01:00:28.079> it's<01:00:28.280> crazy<01:00:28.559> when 01:00:28.630 --> 01:00:28.640 align:start position:0% you don't know you just it's crazy when 01:00:28.640 --> 01:00:30.150 align:start position:0% you don't know you just it's crazy when you<01:00:28.760> have<01:00:28.960> those<01:00:29.119> sort<01:00:29.240> of<01:00:29.359> expat<01:00:29.920> man<01:00:30.079> that 01:00:30.150 --> 01:00:30.160 align:start position:0% you have those sort of expat man that 01:00:30.160 --> 01:00:31.789 align:start position:0% you have those sort of expat man that are<01:00:30.280> load<01:00:30.520> balanced<01:00:30.880> across<01:00:31.240> you're<01:00:31.480> like 01:00:31.789 --> 01:00:31.799 align:start position:0% are load balanced across you're like 01:00:31.799 --> 01:00:33.549 align:start position:0% are load balanced across you're like you're<01:00:32.039> going<01:00:32.359> crazy<01:00:32.880> why<01:00:33.000> is<01:00:33.200> this<01:00:33.359> not 01:00:33.549 --> 01:00:33.559 align:start position:0% you're going crazy why is this not 01:00:33.559 --> 01:00:36.150 align:start position:0% you're going crazy why is this not working<01:00:34.160> why<01:00:34.480> and<01:00:34.640> it's<01:00:34.960> it's<01:00:35.119> load<01:00:35.400> balancing 01:00:36.150 --> 01:00:36.160 align:start position:0% working why and it's it's load balancing 01:00:36.160 --> 01:00:37.990 align:start position:0% working why and it's it's load balancing yeah<01:00:36.599> and<01:00:36.680> you<01:00:36.799> end<01:00:36.960> up<01:00:37.079> with<01:00:37.160> a<01:00:37.280> B<01:00:37.520> script 01:00:37.990 --> 01:00:38.000 align:start position:0% yeah and you end up with a B script 01:00:38.000 --> 01:00:39.589 align:start position:0% yeah and you end up with a B script doing<01:00:38.280> like<01:00:38.440> 10<01:00:38.680> times<01:00:38.880> the<01:00:39.000> same<01:00:39.200> payload 01:00:39.589 --> 01:00:39.599 align:start position:0% doing like 10 times the same payload 01:00:39.599 --> 01:00:45.510 align:start position:0% doing like 10 times the same payload just<01:00:39.680> to<01:00:39.799> be<01:00:39.960> sure<01:00:40.240> everything<01:00:40.599> is<01:00:41.119> is<01:00:41.480> uh<01:00:42.119> is 01:00:45.510 --> 01:00:45.520 align:start position:0% 01:00:45.520 --> 01:00:47.549 align:start position:0% exploited<01:00:46.520> oh<01:00:46.799> and<01:00:46.920> if<01:00:47.039> you<01:00:47.119> don't<01:00:47.319> have<01:00:47.400> a 01:00:47.549 --> 01:00:47.559 align:start position:0% exploited oh and if you don't have a 01:00:47.559 --> 01:00:49.589 align:start position:0% exploited oh and if you don't have a script<01:00:48.200> uh<01:00:48.359> on<01:00:48.480> your<01:00:48.720> page<01:00:49.160> but<01:00:49.280> you<01:00:49.400> have<01:00:49.480> an 01:00:49.589 --> 01:00:49.599 align:start position:0% script uh on your page but you have an 01:00:49.599 --> 01:00:52.270 align:start position:0% script uh on your page but you have an ey<01:00:49.799> frame<01:00:50.119> somewhere<01:00:50.599> you<01:00:50.680> can<01:00:50.920> change<01:00:51.160> it<01:00:51.359> to 01:00:52.270 --> 01:00:52.280 align:start position:0% ey frame somewhere you can change it to 01:00:52.280 --> 01:00:54.029 align:start position:0% ey frame somewhere you can change it to change<01:00:52.520> to<01:00:52.680> little<01:00:52.920> bit<01:00:53.280> and<01:00:53.520> get<01:00:53.680> the<01:00:53.799> same 01:00:54.029 --> 01:00:54.039 align:start position:0% change to little bit and get the same 01:00:54.039 --> 01:00:56.150 align:start position:0% change to little bit and get the same kind<01:00:54.200> of<01:00:54.400> exploit<01:00:55.039> just<01:00:55.440> just<01:00:55.559> change<01:00:55.720> the<01:00:56.079> the 01:00:56.150 --> 01:00:56.160 align:start position:0% kind of exploit just just change the the 01:00:56.160 --> 01:00:58.470 align:start position:0% kind of exploit just just change the the JavaScript<01:00:56.599> is 01:00:58.470 --> 01:00:58.480 align:start position:0% JavaScript is 01:00:58.480 --> 01:01:01.109 align:start position:0% JavaScript is loaded<01:00:59.480> on<01:00:59.680> fastify<01:01:00.400> yeah<01:01:00.520> I<01:01:00.640> talk<01:01:00.839> about<01:01:01.000> the 01:01:01.109 --> 01:01:01.119 align:start position:0% loaded on fastify yeah I talk about the 01:01:01.119 --> 01:01:03.349 align:start position:0% loaded on fastify yeah I talk about the content<01:01:01.480> type<01:01:02.240> I<01:01:02.319> show<01:01:02.559> you 01:01:03.349 --> 01:01:03.359 align:start position:0% content type I show you 01:01:03.359 --> 01:01:05.549 align:start position:0% content type I show you earlier<01:01:04.359> so<01:01:04.559> here<01:01:04.720> we<01:01:04.799> can<01:01:04.920> just<01:01:05.079> reply<01:01:05.400> with 01:01:05.549 --> 01:01:05.559 align:start position:0% earlier so here we can just reply with 01:01:05.559 --> 01:01:08.750 align:start position:0% earlier so here we can just reply with text<01:01:05.799> HTML<01:01:06.319> and<01:01:06.480> get<01:01:06.640> accs<01:01:07.119> on<01:01:07.280> every<01:01:07.599> page<01:01:08.599> but 01:01:08.750 --> 01:01:08.760 align:start position:0% text HTML and get accs on every page but 01:01:08.760 --> 01:01:11.109 align:start position:0% text HTML and get accs on every page but because<01:01:09.000> fastify<01:01:09.480> is<01:01:09.599> mostly<01:01:09.839> made<01:01:10.039> for<01:01:10.480> API 01:01:11.109 --> 01:01:11.119 align:start position:0% because fastify is mostly made for API 01:01:11.119 --> 01:01:14.870 align:start position:0% because fastify is mostly made for API most<01:01:11.280> of<01:01:11.680> the<01:01:12.680> front<01:01:13.160> front<01:01:13.799> front<01:01:14.119> side<01:01:14.319> stuff 01:01:14.870 --> 01:01:14.880 align:start position:0% most of the front front front side stuff 01:01:14.880 --> 01:01:16.750 align:start position:0% most of the front front front side stuff won't<01:01:15.160> care<01:01:15.359> if<01:01:15.480> it<01:01:15.640> t<01:01:16.240> over<01:01:16.400> there<01:01:16.520> it<01:01:16.599> will 01:01:16.750 --> 01:01:16.760 align:start position:0% won't care if it t over there it will 01:01:16.760 --> 01:01:18.390 align:start position:0% won't care if it t over there it will just<01:01:16.880> pass<01:01:17.079> the<01:01:17.160> gon<01:01:17.559> it<01:01:17.920> everything<01:01:18.200> will 01:01:18.390 --> 01:01:18.400 align:start position:0% just pass the gon it everything will 01:01:18.400 --> 01:01:20.630 align:start position:0% just pass the gon it everything will just<01:01:18.640> work<01:01:18.920> fine<01:01:19.599> but<01:01:19.720> if<01:01:19.799> you<01:01:19.960> go<01:01:20.079> to<01:01:20.200> the<01:01:20.319> API 01:01:20.630 --> 01:01:20.640 align:start position:0% just work fine but if you go to the API 01:01:20.640 --> 01:01:23.150 align:start position:0% just work fine but if you go to the API endpoint<01:01:21.000> you'll<01:01:21.200> get<01:01:21.359> xss<01:01:21.960> on<01:01:22.559> any<01:01:22.799> input 01:01:23.150 --> 01:01:23.160 align:start position:0% endpoint you'll get xss on any input 01:01:23.160 --> 01:01:24.510 align:start position:0% endpoint you'll get xss on any input because<01:01:23.319> it<01:01:23.400> won't<01:01:23.599> be<01:01:23.720> sanitized<01:01:24.160> instead<01:01:24.359> of 01:01:24.510 --> 01:01:24.520 align:start position:0% because it won't be sanitized instead of 01:01:24.520 --> 01:01:27.549 align:start position:0% because it won't be sanitized instead of it 01:01:27.549 --> 01:01:27.559 align:start position:0% 01:01:27.559 --> 01:01:30.670 align:start position:0% up<01:01:27.760> and<01:01:27.839> you<01:01:27.960> get<01:01:28.079> the<01:01:28.200> AL<01:01:28.599> popping<01:01:28.960> on<01:01:29.559> the<01:01:30.559> on 01:01:30.670 --> 01:01:30.680 align:start position:0% up and you get the AL popping on the on 01:01:30.680 --> 01:01:32.710 align:start position:0% up and you get the AL popping on the on your<01:01:30.920> thing<01:01:31.640> was<01:01:31.760> that<01:01:31.960> was<01:01:32.280> that<01:01:32.359> was<01:01:32.480> built 01:01:32.710 --> 01:01:32.720 align:start position:0% your thing was that was that was built 01:01:32.720 --> 01:01:34.270 align:start position:0% your thing was that was that was built into<01:01:32.960> the<01:01:33.119> slides 01:01:34.270 --> 01:01:34.280 align:start position:0% into the slides 01:01:34.280 --> 01:01:37.549 align:start position:0% into the slides though<01:01:35.280> yeah<01:01:35.720> Insanity<01:01:36.520> Insanity<01:01:37.160> I<01:01:37.280> need 01:01:37.549 --> 01:01:37.559 align:start position:0% though yeah Insanity Insanity I need 01:01:37.559 --> 01:01:38.470 align:start position:0% though yeah Insanity Insanity I need this<01:01:37.720> so 01:01:38.470 --> 01:01:38.480 align:start position:0% this so 01:01:38.480 --> 01:01:42.230 align:start position:0% this so much<01:01:39.480> um<01:01:40.319> on<01:01:40.559> axios<01:01:41.280> which<01:01:41.400> is<01:01:41.520> also<01:01:41.799> very<01:01:42.079> very 01:01:42.230 --> 01:01:42.240 align:start position:0% much um on axios which is also very very 01:01:42.240 --> 01:01:45.589 align:start position:0% much um on axios which is also very very popular<01:01:42.599> for<01:01:42.799> serite<01:01:43.359> doing<01:01:43.720> HTTP<01:01:44.520> request<01:01:45.520> uh 01:01:45.589 --> 01:01:45.599 align:start position:0% popular for serite doing HTTP request uh 01:01:45.599 --> 01:01:48.150 align:start position:0% popular for serite doing HTTP request uh we<01:01:45.720> found<01:01:45.920> a<01:01:46.039> way<01:01:46.160> to<01:01:46.319> do<01:01:47.160> some<01:01:47.319> kind<01:01:47.440> of<01:01:47.599> ssrf 01:01:48.150 --> 01:01:48.160 align:start position:0% we found a way to do some kind of ssrf 01:01:48.160 --> 01:01:50.630 align:start position:0% we found a way to do some kind of ssrf internally<01:01:49.039> and<01:01:49.319> in<01:01:49.559> some<01:01:49.880> very<01:01:50.079> specific 01:01:50.630 --> 01:01:50.640 align:start position:0% internally and in some very specific 01:01:50.640 --> 01:01:53.430 align:start position:0% internally and in some very specific condition<01:01:51.039> get<01:01:51.319> SE<01:01:52.319> the<01:01:52.480> SE<01:01:52.799> payload<01:01:53.119> is<01:01:53.160> a<01:01:53.240> bit 01:01:53.430 --> 01:01:53.440 align:start position:0% condition get SE the SE payload is a bit 01:01:53.440 --> 01:01:56.430 align:start position:0% condition get SE the SE payload is a bit crazy<01:01:53.880> but<01:01:54.000> I<01:01:54.079> want<01:01:54.200> to<01:01:54.359> show<01:01:54.559> you<01:01:55.400> the<01:01:55.559> idea<01:01:55.960> is 01:01:56.430 --> 01:01:56.440 align:start position:0% crazy but I want to show you the idea is 01:01:56.440 --> 01:01:57.990 align:start position:0% crazy but I want to show you the idea is if<01:01:56.640> on<01:01:56.799> the<01:01:56.920> server<01:01:57.279> there<01:01:57.400> is<01:01:57.559> access<01:01:57.760> to<01:01:57.880> the 01:01:57.990 --> 01:01:58.000 align:start position:0% if on the server there is access to the 01:01:58.000 --> 01:01:59.069 align:start position:0% if on the server there is access to the docker 01:01:59.069 --> 01:01:59.079 align:start position:0% docker 01:01:59.079 --> 01:02:02.069 align:start position:0% docker socket<01:02:00.079> the<01:02:00.200> docker<01:02:00.559> socket<01:02:01.079> is<01:02:01.279> actually 01:02:02.069 --> 01:02:02.079 align:start position:0% socket the docker socket is actually 01:02:02.079 --> 01:02:04.670 align:start position:0% socket the docker socket is actually just<01:02:02.200> an<01:02:02.359> HTTP<01:02:03.319> endpoint<01:02:03.960> Docker<01:02:04.440> when<01:02:04.520> you're 01:02:04.670 --> 01:02:04.680 align:start position:0% just an HTTP endpoint Docker when you're 01:02:04.680 --> 01:02:07.990 align:start position:0% just an HTTP endpoint Docker when you're doing<01:02:04.920> your<01:02:05.079> client<01:02:05.720> uh<01:02:05.960> Docker<01:02:06.960> uh<01:02:07.559> Docker 01:02:07.990 --> 01:02:08.000 align:start position:0% doing your client uh Docker uh Docker 01:02:08.000 --> 01:02:09.789 align:start position:0% doing your client uh Docker uh Docker exact<01:02:08.359> is<01:02:08.520> just<01:02:08.640> sending<01:02:08.920> HTTP<01:02:09.359> request<01:02:09.680> on 01:02:09.789 --> 01:02:09.799 align:start position:0% exact is just sending HTTP request on 01:02:09.799 --> 01:02:13.029 align:start position:0% exact is just sending HTTP request on your<01:02:09.960> own<01:02:10.520> on<01:02:10.880> the<01:02:11.000> docker<01:02:11.839> server<01:02:12.839> and 01:02:13.029 --> 01:02:13.039 align:start position:0% your own on the docker server and 01:02:13.039 --> 01:02:14.230 align:start position:0% your own on the docker server and passing<01:02:13.279> the<01:02:13.400> request<01:02:13.680> and<01:02:13.760> sending<01:02:14.000> you<01:02:14.119> the 01:02:14.230 --> 01:02:14.240 align:start position:0% passing the request and sending you the 01:02:14.240 --> 01:02:17.390 align:start position:0% passing the request and sending you the output<01:02:15.039> so<01:02:15.200> if<01:02:15.279> you<01:02:15.359> did<01:02:15.559> a<01:02:15.720> new<01:02:16.279> uh<01:02:16.760> yeah<01:02:17.079> doer 01:02:17.390 --> 01:02:17.400 align:start position:0% output so if you did a new uh yeah doer 01:02:17.400 --> 01:02:19.430 align:start position:0% output so if you did a new uh yeah doer is<01:02:17.520> basically<01:02:17.839> HTTP<01:02:18.359> and<01:02:18.760> and<01:02:18.880> Jon<01:02:19.240> all<01:02:19.319> the 01:02:19.430 --> 01:02:19.440 align:start position:0% is basically HTTP and and Jon all the 01:02:19.440 --> 01:02:20.190 align:start position:0% is basically HTTP and and Jon all the way 01:02:20.190 --> 01:02:20.200 align:start position:0% way 01:02:20.200 --> 01:02:23.029 align:start position:0% way down<01:02:21.200> yeah<01:02:21.799> and<01:02:22.119> you<01:02:22.279> you<01:02:22.359> can<01:02:22.520> do<01:02:22.640> it<01:02:22.799> like<01:02:22.960> I 01:02:23.029 --> 01:02:23.039 align:start position:0% down yeah and you you can do it like I 01:02:23.039 --> 01:02:25.230 align:start position:0% down yeah and you you can do it like I have<01:02:23.279> my<01:02:23.599> Docker<01:02:23.920> socket<01:02:24.240> over<01:02:24.520> there<01:02:24.920> and<01:02:25.079> if 01:02:25.230 --> 01:02:25.240 align:start position:0% have my Docker socket over there and if 01:02:25.240 --> 01:02:27.549 align:start position:0% have my Docker socket over there and if I<01:02:25.520> do 01:02:27.549 --> 01:02:27.559 align:start position:0% I do 01:02:27.559 --> 01:02:35.510 align:start position:0% I do uh<01:02:28.559> if<01:02:28.640> you<01:02:28.799> do<01:02:29.079> I<01:02:29.200> think<01:02:29.400> it's<01:02:30.160> K<01:02:31.160> uh<01:02:31.520> uni 01:02:35.510 --> 01:02:35.520 align:start position:0% 01:02:35.520 --> 01:02:43.349 align:start position:0% socket<01:02:36.520> and<01:02:36.720> you<01:02:36.920> get<01:02:37.480> uh<01:02:38.440> whatever 01:02:43.349 --> 01:02:43.359 align:start position:0% 01:02:43.359 --> 01:02:45.670 align:start position:0% um<01:02:44.359> I<01:02:44.440> don't<01:02:44.559> know<01:02:44.680> if<01:02:44.799> it<01:02:44.920> will<01:02:45.119> just<01:02:45.279> replace 01:02:45.670 --> 01:02:45.680 align:start position:0% um I don't know if it will just replace 01:02:45.680 --> 01:02:47.269 align:start position:0% um I don't know if it will just replace something<01:02:46.000> yeah<01:02:46.200> P<01:02:46.400> not<01:02:46.520> found<01:02:46.880> but<01:02:47.039> this<01:02:47.119> is 01:02:47.269 --> 01:02:47.279 align:start position:0% something yeah P not found but this is 01:02:47.279 --> 01:02:49.390 align:start position:0% something yeah P not found but this is actually<01:02:47.520> doing<01:02:47.720> a<01:02:47.880> HTP<01:02:48.680> request<01:02:49.039> just<01:02:49.160> to<01:02:49.279> a 01:02:49.390 --> 01:02:49.400 align:start position:0% actually doing a HTP request just to a 01:02:49.400 --> 01:02:50.630 align:start position:0% actually doing a HTP request just to a unique 01:02:50.630 --> 01:02:50.640 align:start position:0% unique 01:02:50.640 --> 01:02:54.069 align:start position:0% unique soet<01:02:51.640> and<01:02:51.799> if<01:02:51.880> you<01:02:52.079> go<01:02:52.240> to<01:02:52.559> I<01:02:52.640> think<01:02:52.799> it's<01:02:53.039> V1<01:02:53.880> uh 01:02:54.069 --> 01:02:54.079 align:start position:0% soet and if you go to I think it's V1 uh 01:02:54.079 --> 01:02:57.430 align:start position:0% soet and if you go to I think it's V1 uh let<01:02:54.200> me<01:02:54.520> check<01:02:55.520> uh 01:02:57.430 --> 01:02:57.440 align:start position:0% let me check uh 01:02:57.440 --> 01:03:00.950 align:start position:0% let me check uh IPI<01:02:58.440> no<01:02:58.599> it's<01:02:58.720> not<01:02:58.920> this<01:02:59.039> one<01:02:59.319> this<01:02:59.799> one<01:03:00.799> let's 01:03:00.950 --> 01:03:00.960 align:start position:0% IPI no it's not this one this one let's 01:03:00.960 --> 01:03:04.150 align:start position:0% IPI no it's not this one this one let's try<01:03:01.200> to<01:03:01.359> do<01:03:01.680> let's<01:03:01.880> lick<01:03:02.720> let's<01:03:02.920> lick<01:03:03.160> some 01:03:04.150 --> 01:03:04.160 align:start position:0% try to do let's lick let's lick some 01:03:04.160 --> 01:03:09.589 align:start position:0% try to do let's lick let's lick some image<01:03:05.160> SL<01:03:05.559> image 01:03:09.589 --> 01:03:09.599 align:start position:0% 01:03:09.599 --> 01:03:18.630 align:start position:0% Jen<01:03:10.599> I<01:03:10.839> [ __ ]<01:03:11.119> up<01:03:11.359> my<01:03:11.680> copy<01:03:12.520> look 01:03:18.630 --> 01:03:18.640 align:start position:0% 01:03:18.640 --> 01:03:22.349 align:start position:0% this<01:03:19.640> yeah<01:03:20.000> do<01:03:20.359> is<01:03:20.520> just<01:03:20.720> HTTP<01:03:21.359> and 01:03:22.349 --> 01:03:22.359 align:start position:0% this yeah do is just HTTP and 01:03:22.359 --> 01:03:25.109 align:start position:0% this yeah do is just HTTP and uh<01:03:23.359> oh<01:03:23.920> but<01:03:24.039> you<01:03:24.160> cannot<01:03:24.440> interact<01:03:24.799> it<01:03:24.960> with 01:03:25.109 --> 01:03:25.119 align:start position:0% uh oh but you cannot interact it with 01:03:25.119 --> 01:03:27.069 align:start position:0% uh oh but you cannot interact it with ssrf<01:03:25.599> e<01:03:26.039> because<01:03:26.240> most<01:03:26.359> of<01:03:26.480> the<01:03:26.599> time<01:03:26.839> it's<01:03:26.960> a 01:03:27.069 --> 01:03:27.079 align:start position:0% ssrf e because most of the time it's a 01:03:27.079 --> 01:03:29.309 align:start position:0% ssrf e because most of the time it's a unique<01:03:27.400> socket<01:03:27.960> so<01:03:28.119> there<01:03:28.240> is<01:03:28.400> no<01:03:28.599> URL<01:03:29.000> you<01:03:29.079> can 01:03:29.309 --> 01:03:29.319 align:start position:0% unique socket so there is no URL you can 01:03:29.319 --> 01:03:30.069 align:start position:0% unique socket so there is no URL you can go 01:03:30.069 --> 01:03:30.079 align:start position:0% go 01:03:30.079 --> 01:03:35.950 align:start position:0% go to<01:03:31.079> but<01:03:31.279> because<01:03:31.520> AOS<01:03:31.880> is<01:03:31.960> running<01:03:32.440> on<01:03:32.880> on<01:03:33.039> the 01:03:35.950 --> 01:03:35.960 align:start position:0% 01:03:35.960 --> 01:03:38.710 align:start position:0% server<01:03:36.960> because<01:03:37.160> it's<01:03:37.240> r<01:03:37.520> a<01:03:37.640> server<01:03:38.000> we<01:03:38.119> can<01:03:38.480> do 01:03:38.710 --> 01:03:38.720 align:start position:0% server because it's r a server we can do 01:03:38.720 --> 01:03:40.670 align:start position:0% server because it's r a server we can do the<01:03:38.880> pro<01:03:39.160> pollution<01:03:39.640> to<01:03:39.880> set<01:03:40.160> the<01:03:40.279> protect<01:03:40.599> the 01:03:40.670 --> 01:03:40.680 align:start position:0% the pro pollution to set the protect the 01:03:40.680 --> 01:03:43.510 align:start position:0% the pro pollution to set the protect the soet<01:03:41.079> pads<01:03:41.760> socket<01:03:42.119> Path<01:03:42.720> property<01:03:43.160> to<01:03:43.359> the 01:03:43.510 --> 01:03:43.520 align:start position:0% soet pads socket Path property to the 01:03:43.520 --> 01:03:46.549 align:start position:0% soet pads socket Path property to the Von<01:03:43.839> Docker<01:03:44.119> socket<01:03:45.039> so<01:03:45.279> now<01:03:45.559> all<01:03:45.760> the<01:03:45.920> request 01:03:46.549 --> 01:03:46.559 align:start position:0% Von Docker socket so now all the request 01:03:46.559 --> 01:03:47.990 align:start position:0% Von Docker socket so now all the request the<01:03:46.640> server<01:03:46.960> is<01:03:47.039> sending<01:03:47.400> will<01:03:47.520> be<01:03:47.640> sent<01:03:47.880> to 01:03:47.990 --> 01:03:48.000 align:start position:0% the server is sending will be sent to 01:03:48.000 --> 01:03:49.750 align:start position:0% the server is sending will be sent to the<01:03:48.119> socket<01:03:48.799> but<01:03:48.920> the<01:03:49.039> issue<01:03:49.279> is<01:03:49.400> we<01:03:49.520> don't 01:03:49.750 --> 01:03:49.760 align:start position:0% the socket but the issue is we don't 01:03:49.760 --> 01:03:52.029 align:start position:0% the socket but the issue is we don't control<01:03:50.119> the<01:03:50.279> request<01:03:50.880> we<01:03:51.240> we<01:03:51.359> we<01:03:51.520> need<01:03:51.760> to<01:03:51.880> be 01:03:52.029 --> 01:03:52.039 align:start position:0% control the request we we we need to be 01:03:52.039 --> 01:03:54.829 align:start position:0% control the request we we we need to be able<01:03:52.200> to<01:03:52.520> control<01:03:53.520> both<01:03:54.000> the<01:03:54.240> path<01:03:54.599> and<01:03:54.720> the 01:03:54.829 --> 01:03:54.839 align:start position:0% able to control both the path and the 01:03:54.839 --> 01:03:57.150 align:start position:0% able to control both the path and the content<01:03:55.160> of<01:03:55.240> the<01:03:55.359> request<01:03:55.920> the<01:03:56.079> verb 01:03:57.150 --> 01:03:57.160 align:start position:0% content of the request the verb 01:03:57.160 --> 01:03:59.750 align:start position:0% content of the request the verb everything<01:03:58.160> so<01:03:58.319> the<01:03:58.480> trick<01:03:58.760> is<01:03:59.359> uh<01:03:59.520> we<01:03:59.599> can 01:03:59.750 --> 01:03:59.760 align:start position:0% everything so the trick is uh we can 01:03:59.760 --> 01:04:01.910 align:start position:0% everything so the trick is uh we can also<01:04:00.240> pollute<01:04:00.680> data<01:04:01.160> and<01:04:01.319> data<01:04:01.559> will<01:04:01.680> be<01:04:01.799> the 01:04:01.910 --> 01:04:01.920 align:start position:0% also pollute data and data will be the 01:04:01.920 --> 01:04:04.829 align:start position:0% also pollute data and data will be the post<01:04:02.160> body<01:04:02.799> so<01:04:03.039> create<01:04:03.359> a<01:04:03.559> simple<01:04:03.960> post<01:04:04.200> body 01:04:04.829 --> 01:04:04.839 align:start position:0% post body so create a simple post body 01:04:04.839 --> 01:04:05.870 align:start position:0% post body so create a simple post body very 01:04:05.870 --> 01:04:05.880 align:start position:0% very 01:04:05.880 --> 01:04:10.829 align:start position:0% very empty<01:04:06.880> after<01:04:07.200> that<01:04:08.000> uh<01:04:09.160> sorry<01:04:10.160> after<01:04:10.440> that<01:04:10.640> we 01:04:10.829 --> 01:04:10.839 align:start position:0% empty after that uh sorry after that we 01:04:10.839 --> 01:04:13.109 align:start position:0% empty after that uh sorry after that we open<01:04:11.520> uh<01:04:11.640> the<01:04:11.799> create<01:04:12.079> container<01:04:12.559> request<01:04:13.000> so 01:04:13.109 --> 01:04:13.119 align:start position:0% open uh the create container request so 01:04:13.119 --> 01:04:14.710 align:start position:0% open uh the create container request so this<01:04:13.240> is<01:04:13.319> a<01:04:13.400> full<01:04:13.599> HTTP<01:04:14.079> request<01:04:14.400> we<01:04:14.480> want<01:04:14.599> to 01:04:14.710 --> 01:04:14.720 align:start position:0% this is a full HTTP request we want to 01:04:14.720 --> 01:04:15.710 align:start position:0% this is a full HTTP request we want to open<01:04:14.960> to<01:04:15.079> the 01:04:15.710 --> 01:04:15.720 align:start position:0% open to the 01:04:15.720 --> 01:04:18.309 align:start position:0% open to the body<01:04:16.720> and<01:04:16.880> we<01:04:17.000> open<01:04:17.359> the<01:04:17.480> start<01:04:17.760> container 01:04:18.309 --> 01:04:18.319 align:start position:0% body and we open the start container 01:04:18.319 --> 01:04:21.109 align:start position:0% body and we open the start container another<01:04:18.920> request<01:04:19.920> and<01:04:20.079> we<01:04:20.160> will<01:04:20.400> also<01:04:20.680> pollute 01:04:21.109 --> 01:04:21.119 align:start position:0% another request and we will also pollute 01:04:21.119 --> 01:04:24.109 align:start position:0% another request and we will also pollute the<01:04:21.200> content<01:04:21.559> lens<01:04:22.119> of<01:04:22.359> the<01:04:22.520> request<01:04:23.039> so<01:04:23.640> uh 01:04:24.109 --> 01:04:24.119 align:start position:0% the content lens of the request so uh 01:04:24.119 --> 01:04:26.069 align:start position:0% the content lens of the request so uh axos<01:04:24.760> will<01:04:24.920> be<01:04:25.160> will<01:04:25.279> be<01:04:25.400> sending<01:04:25.599> a<01:04:25.720> a<01:04:25.799> single 01:04:26.069 --> 01:04:26.079 align:start position:0% axos will be will be sending a a single 01:04:26.079 --> 01:04:28.789 align:start position:0% axos will be will be sending a a single request<01:04:26.400> which<01:04:26.520> is<01:04:26.720> actually<01:04:27.520> free<01:04:27.839> request 01:04:28.789 --> 01:04:28.799 align:start position:0% request which is actually free request 01:04:28.799 --> 01:04:31.870 align:start position:0% request which is actually free request uh<01:04:29.079> using<01:04:29.480> HTTP<01:04:30.400> uh<01:04:30.559> pay<01:04:30.760> planing<01:04:31.640> and<01:04:31.760> the 01:04:31.870 --> 01:04:31.880 align:start position:0% uh using HTTP uh pay planing and the 01:04:31.880 --> 01:04:33.829 align:start position:0% uh using HTTP uh pay planing and the free<01:04:32.119> request<01:04:32.480> will<01:04:32.640> run<01:04:32.880> on<01:04:33.039> the<01:04:33.200> server<01:04:33.680> and 01:04:33.829 --> 01:04:33.839 align:start position:0% free request will run on the server and 01:04:33.839 --> 01:04:36.470 align:start position:0% free request will run on the server and you<01:04:34.200> can<01:04:34.359> start<01:04:34.640> a<01:04:34.799> Docker<01:04:35.319> just<01:04:35.440> using 01:04:36.470 --> 01:04:36.480 align:start position:0% you can start a Docker just using 01:04:36.480 --> 01:04:38.950 align:start position:0% you can start a Docker just using that<01:04:37.480> so<01:04:37.680> first<01:04:37.880> you<01:04:38.000> create<01:04:38.240> your<01:04:38.359> container 01:04:38.950 --> 01:04:38.960 align:start position:0% that so first you create your container 01:04:38.960 --> 01:04:40.430 align:start position:0% that so first you create your container and<01:04:39.119> after<01:04:39.359> that<01:04:39.480> you<01:04:39.599> create<01:04:39.960> you<01:04:40.079> start<01:04:40.319> your 01:04:40.430 --> 01:04:40.440 align:start position:0% and after that you create you start your 01:04:40.440 --> 01:04:43.190 align:start position:0% and after that you create you start your container<01:04:41.240> and<01:04:41.359> the<01:04:41.480> trick<01:04:41.880> is<01:04:42.440> uh<01:04:42.599> when<01:04:42.720> you 01:04:43.190 --> 01:04:43.200 align:start position:0% container and the trick is uh when you 01:04:43.200 --> 01:04:46.029 align:start position:0% container and the trick is uh when you create<01:04:43.480> your<01:04:43.640> container<01:04:44.119> you<01:04:44.279> put<01:04:44.680> the<01:04:45.279> root 01:04:46.029 --> 01:04:46.039 align:start position:0% create your container you put the root 01:04:46.039 --> 01:04:48.349 align:start position:0% create your container you put the root file<01:04:46.359> system<01:04:46.799> as<01:04:46.920> a<01:04:47.119> volume<01:04:47.520> on<01:04:47.680> the<01:04:47.839> container 01:04:48.349 --> 01:04:48.359 align:start position:0% file system as a volume on the container 01:04:48.359 --> 01:04:50.430 align:start position:0% file system as a volume on the container so<01:04:48.520> you<01:04:48.640> are<01:04:49.400> so<01:04:49.559> you<01:04:49.720> have<01:04:49.799> full<01:04:50.000> access<01:04:50.240> of 01:04:50.430 --> 01:04:50.440 align:start position:0% so you are so you have full access of 01:04:50.440 --> 01:04:56.950 align:start position:0% so you are so you have full access of the<01:04:50.760> of<01:04:50.880> the<01:04:51.039> system<01:04:51.599> basically 01:04:56.950 --> 01:04:56.960 align:start position:0% 01:04:56.960 --> 01:04:59.630 align:start position:0% dude<01:04:57.319> this<01:04:57.440> is<01:04:57.760> uh<01:04:58.000> this<01:04:58.079> is<01:04:58.279> such<01:04:58.480> a<01:04:59.160> amazing 01:04:59.630 --> 01:04:59.640 align:start position:0% dude this is uh this is such a amazing 01:04:59.640 --> 01:05:03.269 align:start position:0% dude this is uh this is such a amazing technique<01:05:00.039> and<01:05:00.160> it<01:05:00.359> makes<01:05:00.640> you<01:05:01.440> realize<01:05:02.279> how 01:05:03.269 --> 01:05:03.279 align:start position:0% technique and it makes you realize how 01:05:03.279 --> 01:05:05.789 align:start position:0% technique and it makes you realize how just<01:05:03.680> duct<01:05:03.960> taped<01:05:04.640> together<01:05:05.000> everything<01:05:05.400> is 01:05:05.789 --> 01:05:05.799 align:start position:0% just duct taped together everything is 01:05:05.799 --> 01:05:08.029 align:start position:0% just duct taped together everything is you<01:05:05.920> know<01:05:06.200> like<01:05:06.720> like<01:05:06.880> that<01:05:07.000> you<01:05:07.119> can<01:05:07.400> just<01:05:07.920> you 01:05:08.029 --> 01:05:08.039 align:start position:0% you know like like that you can just you 01:05:08.039 --> 01:05:10.190 align:start position:0% you know like like that you can just you know<01:05:08.200> redirect<01:05:08.640> it<01:05:08.760> to<01:05:08.880> a<01:05:09.079> socket<01:05:09.480> overwrite 01:05:10.190 --> 01:05:10.200 align:start position:0% know redirect it to a socket overwrite 01:05:10.200 --> 01:05:13.109 align:start position:0% know redirect it to a socket overwrite the<01:05:10.760> the<01:05:11.240> actual<01:05:11.599> data<01:05:11.880> being<01:05:12.039> sent<01:05:12.440> overwrite 01:05:13.109 --> 01:05:13.119 align:start position:0% the the actual data being sent overwrite 01:05:13.119 --> 01:05:15.549 align:start position:0% the the actual data being sent overwrite the<01:05:13.640> you<01:05:13.760> know<01:05:14.440> content<01:05:14.839> length<01:05:15.200> and<01:05:15.319> it's 01:05:15.549 --> 01:05:15.559 align:start position:0% the you know content length and it's 01:05:15.559 --> 01:05:18.710 align:start position:0% the you know content length and it's like<01:05:16.240> it<01:05:16.440> is<01:05:16.799> awesome<01:05:17.160> dude<01:05:17.400> is<01:05:17.520> is<01:05:17.839> super<01:05:18.160> cool 01:05:18.710 --> 01:05:18.720 align:start position:0% like it is awesome dude is is super cool 01:05:18.720 --> 01:05:22.430 align:start position:0% like it is awesome dude is is super cool great<01:05:19.079> exploit<01:05:20.079> and<01:05:20.359> another<01:05:21.200> request<01:05:21.760> we<01:05:22.319> we 01:05:22.430 --> 01:05:22.440 align:start position:0% great exploit and another request we we 01:05:22.440 --> 01:05:25.750 align:start position:0% great exploit and another request we we look<01:05:22.640> at<01:05:22.880> gut<01:05:23.319> which<01:05:23.440> is<01:05:23.839> a<01:05:24.839> like<01:05:25.079> axos<01:05:25.480> but 01:05:25.750 --> 01:05:25.760 align:start position:0% look at gut which is a like axos but 01:05:25.760 --> 01:05:28.190 align:start position:0% look at gut which is a like axos but another<01:05:26.000> one<01:05:26.240> and<01:05:26.680> we<01:05:26.799> didn't<01:05:27.119> find<01:05:27.839> crazy 01:05:28.190 --> 01:05:28.200 align:start position:0% another one and we didn't find crazy 01:05:28.200 --> 01:05:30.230 align:start position:0% another one and we didn't find crazy stuff<01:05:28.480> like<01:05:28.640> that<01:05:28.880> but<01:05:29.039> we<01:05:29.200> find<01:05:29.440> some<01:05:29.960> fun 01:05:30.230 --> 01:05:30.240 align:start position:0% stuff like that but we find some fun 01:05:30.240 --> 01:05:32.109 align:start position:0% stuff like that but we find some fun stuff<01:05:30.440> you<01:05:30.559> can<01:05:30.839> force<01:05:31.160> the<01:05:31.319> path<01:05:31.599> the<01:05:31.760> port 01:05:32.109 --> 01:05:32.119 align:start position:0% stuff you can force the path the port 01:05:32.119 --> 01:05:34.789 align:start position:0% stuff you can force the path the port theost<01:05:33.039> a<01:05:33.160> bunch<01:05:33.319> of<01:05:33.480> stuff<01:05:34.119> but<01:05:34.279> all<01:05:34.400> of<01:05:34.599> this 01:05:34.789 --> 01:05:34.799 align:start position:0% theost a bunch of stuff but all of this 01:05:34.799 --> 01:05:37.190 align:start position:0% theost a bunch of stuff but all of this was<01:05:34.960> found<01:05:35.359> with<01:05:35.680> with<01:05:35.839> PP 01:05:37.190 --> 01:05:37.200 align:start position:0% was found with with PP 01:05:37.200 --> 01:05:40.870 align:start position:0% was found with with PP finder<01:05:38.200> a<01:05:38.319> bit<01:05:38.480> of<01:05:38.839> limitation<01:05:39.839> uh<01:05:40.480> right<01:05:40.680> now 01:05:40.870 --> 01:05:40.880 align:start position:0% finder a bit of limitation uh right now 01:05:40.880 --> 01:05:43.190 align:start position:0% finder a bit of limitation uh right now there<01:05:41.000> is<01:05:41.200> no<01:05:42.000> tool<01:05:42.279> to<01:05:42.440> do<01:05:42.559> it<01:05:42.680> automatically 01:05:43.190 --> 01:05:43.200 align:start position:0% there is no tool to do it automatically 01:05:43.200 --> 01:05:45.309 align:start position:0% there is no tool to do it automatically on<01:05:43.400> the<01:05:43.640> front<01:05:43.960> side<01:05:44.440> on<01:05:44.559> the<01:05:44.680> front<01:05:44.920> end<01:05:45.160> so 01:05:45.309 --> 01:05:45.319 align:start position:0% on the front side on the front end so 01:05:45.319 --> 01:05:47.829 align:start position:0% on the front side on the front end so it's<01:05:45.480> only<01:05:45.680> for<01:05:46.000> back<01:05:46.279> end<01:05:47.279> it's<01:05:47.480> very 01:05:47.829 --> 01:05:47.839 align:start position:0% it's only for back end it's very 01:05:47.839 --> 01:05:49.910 align:start position:0% it's only for back end it's very difficult<01:05:48.079> to<01:05:48.279> edit<01:05:48.640> the<01:05:48.760> node<01:05:49.000> internal<01:05:49.559> the 01:05:49.910 --> 01:05:49.920 align:start position:0% difficult to edit the node internal the 01:05:49.920 --> 01:05:51.870 align:start position:0% difficult to edit the node internal the internal<01:05:50.359> code<01:05:50.760> because<01:05:51.000> we<01:05:51.119> try<01:05:51.319> to<01:05:51.440> use<01:05:51.640> PP 01:05:51.870 --> 01:05:51.880 align:start position:0% internal code because we try to use PP 01:05:51.880 --> 01:05:55.269 align:start position:0% internal code because we try to use PP finder<01:05:52.400> on<01:05:53.400> node<01:05:53.799> actual<01:05:54.079> source<01:05:54.400> code<01:05:55.000> but 01:05:55.269 --> 01:05:55.279 align:start position:0% finder on node actual source code but 01:05:55.279 --> 01:05:57.430 align:start position:0% finder on node actual source code but node<01:05:56.079> uh<01:05:56.359> if<01:05:56.440> you<01:05:56.520> are<01:05:56.640> in<01:05:56.760> the<01:05:56.880> internals<01:05:57.319> you 01:05:57.430 --> 01:05:57.440 align:start position:0% node uh if you are in the internals you 01:05:57.440 --> 01:05:58.710 align:start position:0% node uh if you are in the internals you don't<01:05:57.559> have<01:05:57.720> access<01:05:57.920> to<01:05:58.039> console<01:05:58.359> log<01:05:58.640> you 01:05:58.710 --> 01:05:58.720 align:start position:0% don't have access to console log you 01:05:58.720 --> 01:06:00.430 align:start position:0% don't have access to console log you don't<01:05:58.880> have<01:05:59.000> access<01:05:59.240> to<01:05:59.400> map<01:06:00.039> because<01:06:00.240> it's 01:06:00.430 --> 01:06:00.440 align:start position:0% don't have access to map because it's 01:06:00.440 --> 01:06:02.470 align:start position:0% don't have access to map because it's not<01:06:00.760> there<01:06:01.039> yet<01:06:01.319> you<01:06:01.400> need<01:06:01.559> to<01:06:01.720> wait<01:06:01.920> for<01:06:02.079> it<01:06:02.240> to 01:06:02.470 --> 01:06:02.480 align:start position:0% not there yet you need to wait for it to 01:06:02.480 --> 01:06:05.910 align:start position:0% not there yet you need to wait for it to exist<01:06:03.440> so<01:06:03.960> it's<01:06:04.160> very<01:06:04.559> difficult<01:06:04.799> and<01:06:05.480> we<01:06:05.799> we 01:06:05.910 --> 01:06:05.920 align:start position:0% exist so it's very difficult and we we 01:06:05.920 --> 01:06:07.789 align:start position:0% exist so it's very difficult and we we found<01:06:06.119> some<01:06:06.279> stuff<01:06:06.599> we<01:06:06.960> we<01:06:07.160> published<01:06:07.520> a<01:06:07.640> lot 01:06:07.789 --> 01:06:07.799 align:start position:0% found some stuff we we published a lot 01:06:07.799 --> 01:06:11.430 align:start position:0% found some stuff we we published a lot of<01:06:08.240> uh<01:06:09.240> finding<01:06:09.640> we<01:06:09.799> have<01:06:10.119> but<01:06:11.039> you<01:06:11.160> won't<01:06:11.359> be 01:06:11.430 --> 01:06:11.440 align:start position:0% of uh finding we have but you won't be 01:06:11.440 --> 01:06:13.589 align:start position:0% of uh finding we have but you won't be able<01:06:11.640> to<01:06:12.000> use<01:06:12.160> it<01:06:12.319> out<01:06:12.440> of<01:06:12.559> the<01:06:12.720> box<01:06:13.039> on<01:06:13.200> not 01:06:13.589 --> 01:06:13.599 align:start position:0% able to use it out of the box on not 01:06:13.599 --> 01:06:16.390 align:start position:0% able to use it out of the box on not internals<01:06:14.599> and<01:06:14.960> also<01:06:15.279> limitation<01:06:16.039> is<01:06:16.200> some 01:06:16.390 --> 01:06:16.400 align:start position:0% internals and also limitation is some 01:06:16.400 --> 01:06:18.870 align:start position:0% internals and also limitation is some big<01:06:16.680> project<01:06:17.119> also<01:06:17.359> use<01:06:17.640> some<01:06:17.880> crazy<01:06:18.200> loader 01:06:18.870 --> 01:06:18.880 align:start position:0% big project also use some crazy loader 01:06:18.880 --> 01:06:22.150 align:start position:0% big project also use some crazy loader magic<01:06:19.599> to<01:06:19.799> works<01:06:20.520> next<01:06:20.760> GS<01:06:21.079> use<01:06:21.319> it<01:06:21.599> and<01:06:21.720> it's 01:06:22.150 --> 01:06:22.160 align:start position:0% magic to works next GS use it and it's 01:06:22.160 --> 01:06:24.069 align:start position:0% magic to works next GS use it and it's difficult<01:06:22.319> to<01:06:22.480> make<01:06:22.599> it<01:06:22.760> work<01:06:22.960> with<01:06:23.119> PP<01:06:23.359> finder 01:06:24.069 --> 01:06:24.079 align:start position:0% difficult to make it work with PP finder 01:06:24.079 --> 01:06:25.589 align:start position:0% difficult to make it work with PP finder you<01:06:24.200> can<01:06:24.400> do<01:06:24.520> it<01:06:24.680> but<01:06:24.799> it<01:06:24.880> won't<01:06:25.039> work<01:06:25.200> out<01:06:25.359> the 01:06:25.589 --> 01:06:25.599 align:start position:0% you can do it but it won't work out the 01:06:25.599 --> 01:06:28.470 align:start position:0% you can do it but it won't work out the out<01:06:25.720> of<01:06:25.839> the<01:06:25.960> box<01:06:26.640> and<01:06:27.640> I<01:06:27.760> haven't<01:06:28.000> found<01:06:28.200> a<01:06:28.319> way 01:06:28.470 --> 01:06:28.480 align:start position:0% out of the box and I haven't found a way 01:06:28.480 --> 01:06:30.390 align:start position:0% out of the box and I haven't found a way to<01:06:28.599> make<01:06:28.720> it<01:06:28.960> very<01:06:29.279> easy<01:06:29.480> to<01:06:29.640> use<01:06:29.880> for<01:06:30.079> everyone 01:06:30.390 --> 01:06:30.400 align:start position:0% to make it very easy to use for everyone 01:06:30.400 --> 01:06:31.710 align:start position:0% to make it very easy to use for everyone but<01:06:30.520> the<01:06:30.640> project<01:06:30.880> is<01:06:31.000> open<01:06:31.200> source<01:06:31.440> so<01:06:31.559> you're 01:06:31.710 --> 01:06:31.720 align:start position:0% but the project is open source so you're 01:06:31.720 --> 01:06:33.910 align:start position:0% but the project is open source so you're welcome<01:06:32.079> to<01:06:32.319> just<01:06:33.039> go<01:06:33.160> into<01:06:33.400> it<01:06:33.599> patch<01:06:33.839> the 01:06:33.910 --> 01:06:33.920 align:start position:0% welcome to just go into it patch the 01:06:33.920 --> 01:06:36.190 align:start position:0% welcome to just go into it patch the source<01:06:34.200> code<01:06:34.480> and<01:06:34.960> try<01:06:35.119> to<01:06:35.240> make<01:06:35.359> it 01:06:36.190 --> 01:06:36.200 align:start position:0% source code and try to make it 01:06:36.200 --> 01:06:38.670 align:start position:0% source code and try to make it work<01:06:37.200> and<01:06:37.359> also<01:06:37.640> earlier<01:06:38.000> I<01:06:38.079> told<01:06:38.279> you<01:06:38.559> there 01:06:38.670 --> 01:06:38.680 align:start position:0% work and also earlier I told you there 01:06:38.680 --> 01:06:40.750 align:start position:0% work and also earlier I told you there is<01:06:38.799> a<01:06:39.279> syntax<01:06:39.680> to<01:06:39.839> access<01:06:40.119> property<01:06:40.520> but<01:06:40.640> there 01:06:40.750 --> 01:06:40.760 align:start position:0% is a syntax to access property but there 01:06:40.760 --> 01:06:43.510 align:start position:0% is a syntax to access property but there is<01:06:41.160> there<01:06:41.240> is<01:06:41.359> another<01:06:42.000> one<01:06:43.000> and<01:06:43.160> there<01:06:43.279> is 01:06:43.510 --> 01:06:43.520 align:start position:0% is there is another one and there is 01:06:43.520 --> 01:06:47.230 align:start position:0% is there is another one and there is with<01:06:44.200> and<01:06:44.400> this<01:06:44.520> one<01:06:44.760> is<01:06:45.279> bit<01:06:46.000> outdated<01:06:47.000> and 01:06:47.230 --> 01:06:47.240 align:start position:0% with and this one is bit outdated and 01:06:47.240 --> 01:06:48.670 align:start position:0% with and this one is bit outdated and right<01:06:47.400> now<01:06:47.599> we<01:06:47.680> don't<01:06:47.880> support<01:06:48.160> it<01:06:48.279> with<01:06:48.440> PP 01:06:48.670 --> 01:06:48.680 align:start position:0% right now we don't support it with PP 01:06:48.680 --> 01:06:51.029 align:start position:0% right now we don't support it with PP finder<01:06:49.079> so<01:06:49.279> if<01:06:49.400> there<01:06:49.480> ispe<01:06:49.960> pollution<01:06:50.359> using 01:06:51.029 --> 01:06:51.039 align:start position:0% finder so if there ispe pollution using 01:06:51.039 --> 01:06:52.150 align:start position:0% finder so if there ispe pollution using uh 01:06:52.150 --> 01:06:52.160 align:start position:0% uh 01:06:52.160 --> 01:06:55.150 align:start position:0% uh weave<01:06:53.160> uh<01:06:53.400> it<01:06:53.480> will<01:06:53.720> be<01:06:54.559> you<01:06:54.680> won't<01:06:54.880> see<01:06:55.039> it 01:06:55.150 --> 01:06:55.160 align:start position:0% weave uh it will be you won't see it 01:06:55.160 --> 01:06:57.150 align:start position:0% weave uh it will be you won't see it with<01:06:55.599> find<01:06:56.200> I'm<01:06:56.400> sorry<01:06:56.680> but<01:06:56.799> if<01:06:56.880> you<01:06:56.960> want<01:06:57.079> to 01:06:57.150 --> 01:06:57.160 align:start position:0% with find I'm sorry but if you want to 01:06:57.160 --> 01:06:59.789 align:start position:0% with find I'm sorry but if you want to do<01:06:57.279> a<01:06:57.400> pro<01:06:57.640> request<01:06:58.160> go<01:06:58.319> for 01:06:59.789 --> 01:06:59.799 align:start position:0% do a pro request go for 01:06:59.799 --> 01:07:03.069 align:start position:0% do a pro request go for it<01:07:00.799> that's<01:07:01.000> the<01:07:01.799> that's<01:07:02.000> the<01:07:02.160> spirit<01:07:02.599> of<01:07:02.799> Open 01:07:03.069 --> 01:07:03.079 align:start position:0% it that's the that's the spirit of Open 01:07:03.079 --> 01:07:06.269 align:start position:0% it that's the that's the spirit of Open Source<01:07:03.480> yeah<01:07:03.960> don't<01:07:04.240> like<01:07:04.440> it<01:07:04.880> fix<01:07:05.119> it<01:07:05.520> yeah 01:07:06.269 --> 01:07:06.279 align:start position:0% Source yeah don't like it fix it yeah 01:07:06.279 --> 01:07:08.789 align:start position:0% Source yeah don't like it fix it yeah fix<01:07:06.720> it<01:07:07.720> but<01:07:08.000> yeah<01:07:08.119> for<01:07:08.279> everything<01:07:08.559> else<01:07:08.720> it 01:07:08.789 --> 01:07:08.799 align:start position:0% fix it but yeah for everything else it 01:07:08.799 --> 01:07:10.630 align:start position:0% fix it but yeah for everything else it should<01:07:08.960> be<01:07:09.079> working<01:07:09.720> quite<01:07:10.000> nice<01:07:10.240> out<01:07:10.400> of<01:07:10.520> the 01:07:10.630 --> 01:07:10.640 align:start position:0% should be working quite nice out of the 01:07:10.640 --> 01:07:12.829 align:start position:0% should be working quite nice out of the box<01:07:11.119> and<01:07:11.200> if<01:07:11.319> you<01:07:11.400> want<01:07:11.559> to<01:07:11.799> take<01:07:11.960> a<01:07:12.240> quick<01:07:12.480> look 01:07:12.829 --> 01:07:12.839 align:start position:0% box and if you want to take a quick look 01:07:12.839 --> 01:07:14.069 align:start position:0% box and if you want to take a quick look at 01:07:14.069 --> 01:07:14.079 align:start position:0% at 01:07:14.079 --> 01:07:17.430 align:start position:0% at um<01:07:15.079> the<01:07:15.279> code<01:07:15.760> that<01:07:16.000> generated<01:07:16.799> so<01:07:17.039> here<01:07:17.279> I've 01:07:17.430 --> 01:07:17.440 align:start position:0% um the code that generated so here I've 01:07:17.440 --> 01:07:20.390 align:start position:0% um the code that generated so here I've used<01:07:17.680> the<01:07:17.799> pp<01:07:18.039> finder<01:07:18.680> as<01:07:18.880> a<01:07:19.559> as<01:07:19.640> a<01:07:19.799> runner<01:07:20.240> so 01:07:20.390 --> 01:07:20.400 align:start position:0% used the pp finder as a as a runner so 01:07:20.400 --> 01:07:22.670 align:start position:0% used the pp finder as a as a runner so it's<01:07:20.599> the<01:07:20.760> easiest<01:07:21.079> way<01:07:21.200> to<01:07:21.319> use<01:07:21.520> it<01:07:22.400> but<01:07:22.559> what 01:07:22.670 --> 01:07:22.680 align:start position:0% it's the easiest way to use it but what 01:07:22.680 --> 01:07:24.789 align:start position:0% it's the easiest way to use it but what I<01:07:22.760> can<01:07:22.960> do<01:07:23.240> I<01:07:23.319> can<01:07:23.559> run<01:07:23.920> instead<01:07:24.160> of<01:07:24.279> doing<01:07:24.520> run 01:07:24.789 --> 01:07:24.799 align:start position:0% I can do I can run instead of doing run 01:07:24.799 --> 01:07:29.029 align:start position:0% I can do I can run instead of doing run I<01:07:24.960> can<01:07:25.079> do<01:07:25.240> comp<01:07:25.520> compile<01:07:25.960> and<01:07:26.039> I<01:07:26.160> can<01:07:26.440> compile 01:07:29.029 --> 01:07:29.039 align:start position:0% I can do comp compile and I can compile 01:07:29.039 --> 01:07:31.510 align:start position:0% I can do comp compile and I can compile index.js<01:07:30.039> let's<01:07:30.240> do<01:07:30.359> it<01:07:30.559> in 01:07:31.510 --> 01:07:31.520 align:start position:0% index.js let's do it in 01:07:31.520 --> 01:07:34.630 align:start position:0% index.js let's do it in output.<01:07:32.520> Gs<01:07:33.240> so<01:07:33.480> this<01:07:33.599> is<01:07:33.760> what<01:07:33.920> PP<01:07:34.240> finder 01:07:34.630 --> 01:07:34.640 align:start position:0% output. Gs so this is what PP finder 01:07:34.640 --> 01:07:37.069 align:start position:0% output. Gs so this is what PP finder actually<01:07:34.920> do<01:07:35.200> with<01:07:35.319> your<01:07:35.520> Javascript<01:07:36.000> file<01:07:36.880> so 01:07:37.069 --> 01:07:37.079 align:start position:0% actually do with your Javascript file so 01:07:37.079 --> 01:07:39.109 align:start position:0% actually do with your Javascript file so this<01:07:37.160> is<01:07:37.319> PP<01:07:37.599> finder<01:07:37.880> and<01:07:38.000> this<01:07:38.079> is<01:07:38.279> the<01:07:38.960> the 01:07:39.109 --> 01:07:39.119 align:start position:0% this is PP finder and this is the the 01:07:39.119 --> 01:07:41.230 align:start position:0% this is PP finder and this is the the file<01:07:39.319> and<01:07:39.440> you<01:07:39.559> see<01:07:39.760> all<01:07:39.920> the<01:07:40.039> LM<01:07:40.440> prop 01:07:41.230 --> 01:07:41.240 align:start position:0% file and you see all the LM prop 01:07:41.240 --> 01:07:43.910 align:start position:0% file and you see all the LM prop everything<01:07:41.760> is<01:07:42.240> injected<01:07:42.839> with<01:07:43.079> the<01:07:43.440> original 01:07:43.910 --> 01:07:43.920 align:start position:0% everything is injected with the original 01:07:43.920 --> 01:07:46.630 align:start position:0% everything is injected with the original line<01:07:44.200> names<01:07:44.520> and<01:07:44.920> stuff<01:07:45.160> like<01:07:45.319> that<01:07:46.279> so<01:07:46.440> if<01:07:46.559> you 01:07:46.630 --> 01:07:46.640 align:start position:0% line names and stuff like that so if you 01:07:46.640 --> 01:07:48.870 align:start position:0% line names and stuff like that so if you are<01:07:46.799> using<01:07:47.359> kaido<01:07:47.760> you<01:07:47.839> can<01:07:47.960> just<01:07:48.079> do<01:07:48.319> workflow 01:07:48.870 --> 01:07:48.880 align:start position:0% are using kaido you can just do workflow 01:07:48.880 --> 01:07:50.510 align:start position:0% are using kaido you can just do workflow that<01:07:49.160> every<01:07:49.319> time<01:07:49.520> you<01:07:49.640> load<01:07:49.839> a<01:07:49.960> Javascript 01:07:50.510 --> 01:07:50.520 align:start position:0% that every time you load a Javascript 01:07:50.520 --> 01:07:52.230 align:start position:0% that every time you load a Javascript file<01:07:50.760> you<01:07:50.839> can<01:07:51.039> pass<01:07:51.160> it<01:07:51.279> in<01:07:51.440> PP<01:07:51.680> finder<01:07:52.079> and 01:07:52.230 --> 01:07:52.240 align:start position:0% file you can pass it in PP finder and 01:07:52.240 --> 01:07:54.150 align:start position:0% file you can pass it in PP finder and get<01:07:52.359> the<01:07:52.480> output<01:07:52.799> in<01:07:52.880> the 01:07:54.150 --> 01:07:54.160 align:start position:0% get the output in the 01:07:54.160 --> 01:07:57.670 align:start position:0% get the output in the console<01:07:55.160> and<01:07:55.920> P<01:07:56.160> finder<01:07:56.559> actually<01:07:56.920> support 01:07:57.670 --> 01:07:57.680 align:start position:0% console and P finder actually support 01:07:57.680 --> 01:07:59.349 align:start position:0% console and P finder actually support when<01:07:57.760> you're<01:07:57.880> doing<01:07:58.240> compile<01:07:59.000> I<01:07:59.079> think<01:07:59.240> there 01:07:59.349 --> 01:07:59.359 align:start position:0% when you're doing compile I think there 01:07:59.359 --> 01:08:01.470 align:start position:0% when you're doing compile I think there is<01:07:59.480> an 01:08:01.470 --> 01:08:01.480 align:start position:0% is an 01:08:01.480 --> 01:08:05.230 align:start position:0% is an option<01:08:02.480> uh<01:08:02.760> oh<01:08:02.960> I<01:08:03.039> need<01:08:03.200> to<01:08:03.480> do<01:08:03.839> exact 01:08:05.230 --> 01:08:05.240 align:start position:0% option uh oh I need to do exact 01:08:05.240 --> 01:08:07.910 align:start position:0% option uh oh I need to do exact this<01:08:06.240> and<01:08:06.359> you<01:08:06.480> can<01:08:06.599> use<01:08:06.880> agent<01:08:07.480> and<01:08:07.680> make<01:08:07.839> it 01:08:07.910 --> 01:08:07.920 align:start position:0% this and you can use agent and make it 01:08:07.920 --> 01:08:09.829 align:start position:0% this and you can use agent and make it to<01:08:08.079> browser<01:08:08.440> mode<01:08:08.880> and<01:08:09.000> so<01:08:09.160> you<01:08:09.279> have<01:08:09.680> the 01:08:09.829 --> 01:08:09.839 align:start position:0% to browser mode and so you have the 01:08:09.839 --> 01:08:13.589 align:start position:0% to browser mode and so you have the color<01:08:10.200> output<01:08:10.640> also<01:08:10.880> in<01:08:11.039> your<01:08:11.680> your 01:08:13.589 --> 01:08:13.599 align:start position:0% color output also in your your 01:08:13.599 --> 01:08:16.829 align:start position:0% color output also in your your browser<01:08:14.599> that's<01:08:14.839> sick<01:08:15.160> dude<01:08:15.920> that<01:08:16.080> is<01:08:16.520> that<01:08:16.640> is 01:08:16.829 --> 01:08:16.839 align:start position:0% browser that's sick dude that is that is 01:08:16.839 --> 01:08:20.470 align:start position:0% browser that's sick dude that is that is super<01:08:17.719> super<01:08:18.120> sick<01:08:19.120> yeah<01:08:19.359> the<01:08:19.600> the<01:08:19.759> interface 01:08:20.470 --> 01:08:20.480 align:start position:0% super super sick yeah the the interface 01:08:20.480 --> 01:08:22.590 align:start position:0% super super sick yeah the the interface in<01:08:20.759> in<01:08:20.920> the<01:08:21.120> console<01:08:21.560> I<01:08:21.679> think<01:08:21.839> is<01:08:22.080> really<01:08:22.319> nice 01:08:22.590 --> 01:08:22.600 align:start position:0% in in the console I think is really nice 01:08:22.600 --> 01:08:25.070 align:start position:0% in in the console I think is really nice as<01:08:22.759> well<01:08:23.120> you<01:08:23.239> know<01:08:23.560> like<01:08:24.319> that<01:08:24.400> sort<01:08:24.560> of<01:08:24.679> thing 01:08:25.070 --> 01:08:25.080 align:start position:0% as well you know like that sort of thing 01:08:25.080 --> 01:08:26.309 align:start position:0% as well you know like that sort of thing one<01:08:25.199> thing<01:08:25.600> really<01:08:25.719> like<01:08:25.839> to<01:08:25.920> do<01:08:26.040> when<01:08:26.159> I'm 01:08:26.309 --> 01:08:26.319 align:start position:0% one thing really like to do when I'm 01:08:26.319 --> 01:08:29.390 align:start position:0% one thing really like to do when I'm debugging<01:08:26.679> an<01:08:26.799> application<01:08:27.600> is<01:08:27.759> I<01:08:27.960> do<01:08:28.640> uh<01:08:28.799> so 01:08:29.390 --> 01:08:29.400 align:start position:0% debugging an application is I do uh so 01:08:29.400 --> 01:08:30.950 align:start position:0% debugging an application is I do uh so npm 01:08:30.950 --> 01:08:30.960 align:start position:0% npm 01:08:30.960 --> 01:08:34.110 align:start position:0% npm exact<01:08:31.960> I<01:08:32.040> should<01:08:32.239> have<01:08:32.400> it 01:08:34.110 --> 01:08:34.120 align:start position:0% exact I should have it 01:08:34.120 --> 01:08:38.510 align:start position:0% exact I should have it somewhere<01:08:35.120> uh<01:08:35.319> ex<01:08:35.640> P<01:08:36.080> finder<01:08:37.080> run<01:08:37.679> node<01:08:38.279> but<01:08:38.400> I 01:08:38.510 --> 01:08:38.520 align:start position:0% somewhere uh ex P finder run node but I 01:08:38.520 --> 01:08:40.189 align:start position:0% somewhere uh ex P finder run node but I will<01:08:38.719> run<01:08:38.880> it<01:08:39.040> with 01:08:40.189 --> 01:08:40.199 align:start position:0% will run it with 01:08:40.199 --> 01:08:44.870 align:start position:0% will run it with inspect<01:08:41.199> and<01:08:41.319> I<01:08:41.440> will<01:08:41.600> run<01:08:41.880> the<01:08:42.000> index. 01:08:44.870 --> 01:08:44.880 align:start position:0% 01:08:44.880 --> 01:08:48.630 align:start position:0% GS<01:08:45.880> so<01:08:46.120> this<01:08:46.239> is<01:08:46.359> running<01:08:47.040> but<01:08:47.719> next<01:08:47.960> I<01:08:48.080> go<01:08:48.239> to 01:08:48.630 --> 01:08:48.640 align:start position:0% GS so this is running but next I go to 01:08:48.640 --> 01:08:51.269 align:start position:0% GS so this is running but next I go to Google<01:08:48.920> Chrome<01:08:49.400> I<01:08:49.560> go<01:08:49.719> to<01:08:50.199> inspect 01:08:51.269 --> 01:08:51.279 align:start position:0% Google Chrome I go to inspect 01:08:51.279 --> 01:08:53.950 align:start position:0% Google Chrome I go to inspect Tab<01:08:52.279> and<01:08:52.400> you<01:08:52.560> just<01:08:52.759> press<01:08:53.080> refresh<01:08:53.719> and<01:08:53.839> you 01:08:53.950 --> 01:08:53.960 align:start position:0% Tab and you just press refresh and you 01:08:53.960 --> 01:08:56.789 align:start position:0% Tab and you just press refresh and you should<01:08:54.199> have<01:08:54.600> your<01:08:55.839> Target<01:08:56.359> but<01:08:56.480> it's<01:08:56.640> not 01:08:56.789 --> 01:08:56.799 align:start position:0% should have your Target but it's not 01:08:56.799 --> 01:09:01.229 align:start position:0% should have your Target but it's not showing<01:08:57.159> I<01:08:57.239> don't<01:08:57.400> know<01:08:57.640> why<01:08:58.640> I<01:08:58.759> broke<01:08:59.040> the 01:09:01.229 --> 01:09:01.239 align:start position:0% 01:09:01.239 --> 01:09:05.269 align:start position:0% demo<01:09:02.239> I<01:09:02.359> know<01:09:02.560> because<01:09:02.880> the<01:09:03.520> do<01:09:03.759> remote<01:09:04.319> remote 01:09:05.269 --> 01:09:05.279 align:start position:0% demo I know because the do remote remote 01:09:05.279 --> 01:09:09.910 align:start position:0% demo I know because the do remote remote debuging<01:09:06.440> yeah<01:09:07.880> okay<01:09:08.880> so<01:09:09.120> here<01:09:09.239> I<01:09:09.359> got<01:09:09.679> my 01:09:09.910 --> 01:09:09.920 align:start position:0% debuging yeah okay so here I got my 01:09:09.920 --> 01:09:12.149 align:start position:0% debuging yeah okay so here I got my debugging<01:09:10.600> and<01:09:10.679> now<01:09:10.799> you<01:09:10.880> can<01:09:11.040> open<01:09:11.199> it<01:09:11.839> fastly 01:09:12.149 --> 01:09:12.159 align:start position:0% debugging and now you can open it fastly 01:09:12.159 --> 01:09:14.630 align:start position:0% debugging and now you can open it fastly demo<01:09:12.799> index.js<01:09:13.799> yeah<01:09:14.040> this<01:09:14.120> is<01:09:14.319> the<01:09:14.480> the 01:09:14.630 --> 01:09:14.640 align:start position:0% demo index.js yeah this is the the 01:09:14.640 --> 01:09:15.910 align:start position:0% demo index.js yeah this is the the script<01:09:14.920> I<01:09:15.000> was<01:09:15.159> debugging<01:09:15.520> and<01:09:15.600> you<01:09:15.679> can<01:09:15.799> see 01:09:15.910 --> 01:09:15.920 align:start position:0% script I was debugging and you can see 01:09:15.920 --> 01:09:17.910 align:start position:0% script I was debugging and you can see the<01:09:16.000> output<01:09:16.319> is<01:09:16.440> still<01:09:16.839> is<01:09:17.120> there<01:09:17.359> also<01:09:17.799> with 01:09:17.910 --> 01:09:17.920 align:start position:0% the output is still is there also with 01:09:17.920 --> 01:09:20.430 align:start position:0% the output is still is there also with the<01:09:18.159> nice<01:09:18.600> coloring<01:09:19.600> but<01:09:19.880> the<01:09:20.000> nice<01:09:20.199> thing 01:09:20.430 --> 01:09:20.440 align:start position:0% the nice coloring but the nice thing 01:09:20.440 --> 01:09:22.229 align:start position:0% the nice coloring but the nice thing here<01:09:20.640> is<01:09:20.799> you<01:09:20.880> can<01:09:21.159> just<01:09:21.319> do<01:09:21.520> your<01:09:22.040> type 01:09:22.229 --> 01:09:22.239 align:start position:0% here is you can just do your type 01:09:22.239 --> 01:09:23.950 align:start position:0% here is you can just do your type pollution<01:09:22.759> over<01:09:23.000> there<01:09:23.359> without<01:09:23.640> having<01:09:23.799> to 01:09:23.950 --> 01:09:23.960 align:start position:0% pollution over there without having to 01:09:23.960 --> 01:09:26.829 align:start position:0% pollution over there without having to restart<01:09:24.319> the<01:09:24.520> server<01:09:25.199> d<01:09:25.520> D<01:09:26.199> so<01:09:26.440> this<01:09:26.600> goes 01:09:26.829 --> 01:09:26.839 align:start position:0% restart the server d D so this goes 01:09:26.839 --> 01:09:28.709 align:start position:0% restart the server d D so this goes super<01:09:27.120> fast<01:09:27.319> to<01:09:27.480> do<01:09:27.719> like<01:09:27.920> testing<01:09:28.359> you<01:09:28.440> can 01:09:28.709 --> 01:09:28.719 align:start position:0% super fast to do like testing you can 01:09:28.719 --> 01:09:31.110 align:start position:0% super fast to do like testing you can test<01:09:29.040> this<01:09:29.480> okay<01:09:29.799> try<01:09:29.960> to<01:09:30.120> lend<01:09:30.359> a<01:09:30.440> new<01:09:30.640> request 01:09:31.110 --> 01:09:31.120 align:start position:0% test this okay try to lend a new request 01:09:31.120 --> 01:09:36.829 align:start position:0% test this okay try to lend a new request so<01:09:31.920> here<01:09:32.120> we<01:09:32.440> we<01:09:32.520> are<01:09:32.679> testing<01:09:34.040> uh<01:09:35.040> content 01:09:36.829 --> 01:09:36.839 align:start position:0% so here we we are testing uh content 01:09:36.839 --> 01:09:41.430 align:start position:0% so here we we are testing uh content type<01:09:37.839> and<01:09:38.000> we<01:09:38.159> say<01:09:38.520> the<01:09:38.880> text<01:09:39.679> uh 01:09:41.430 --> 01:09:41.440 align:start position:0% type and we say the text uh 01:09:41.440 --> 01:09:45.990 align:start position:0% type and we say the text uh HTML<01:09:42.440> application<01:09:43.040> J<01:09:43.560> bit<01:09:44.560> tiny<01:09:45.000> maybe 01:09:45.990 --> 01:09:46.000 align:start position:0% HTML application J bit tiny maybe 01:09:46.000 --> 01:09:48.229 align:start position:0% HTML application J bit tiny maybe application<01:09:46.480> Jon<01:09:47.480> and<01:09:47.679> now<01:09:47.839> it<01:09:47.920> should<01:09:48.080> be 01:09:48.229 --> 01:09:48.239 align:start position:0% application Jon and now it should be 01:09:48.239 --> 01:09:50.430 align:start position:0% application Jon and now it should be polluted<01:09:48.839> and<01:09:48.960> we<01:09:49.080> have<01:09:49.279> the<01:09:49.560> the<01:09:49.679> pollution 01:09:50.430 --> 01:09:50.440 align:start position:0% polluted and we have the the pollution 01:09:50.440 --> 01:09:52.110 align:start position:0% polluted and we have the the pollution wow<01:09:50.880> and<01:09:51.000> if<01:09:51.080> we<01:09:51.199> don't<01:09:51.359> want<01:09:51.520> it<01:09:51.679> anymore 01:09:52.110 --> 01:09:52.120 align:start position:0% wow and if we don't want it anymore 01:09:52.120 --> 01:09:54.030 align:start position:0% wow and if we don't want it anymore because<01:09:52.279> it's<01:09:52.480> just<01:09:52.600> breaking 01:09:54.030 --> 01:09:54.040 align:start position:0% because it's just breaking 01:09:54.040 --> 01:09:58.149 align:start position:0% because it's just breaking everything<01:09:55.040> just<01:09:55.440> delete<01:09:56.640> um<01:09:57.640> dude<01:09:57.880> I<01:09:57.960> didn't 01:09:58.149 --> 01:09:58.159 align:start position:0% everything just delete um dude I didn't 01:09:58.159 --> 01:09:59.950 align:start position:0% everything just delete um dude I didn't even<01:09:58.320> know<01:09:58.480> you<01:09:58.560> could<01:09:58.760> hook<01:09:59.000> this<01:09:59.159> into<01:09:59.440> node 01:09:59.950 --> 01:09:59.960 align:start position:0% even know you could hook this into node 01:09:59.960 --> 01:10:01.510 align:start position:0% even know you could hook this into node this<01:10:00.080> is 01:10:01.510 --> 01:10:01.520 align:start position:0% this is 01:10:01.520 --> 01:10:04.830 align:start position:0% this is crazy<01:10:02.520> and<01:10:02.679> now<01:10:02.840> it's<01:10:03.000> not<01:10:03.400> P<01:10:03.600> it<01:10:03.719> anymore<01:10:04.199> so 01:10:04.830 --> 01:10:04.840 align:start position:0% crazy and now it's not P it anymore so 01:10:04.840 --> 01:10:07.149 align:start position:0% crazy and now it's not P it anymore so wow<01:10:05.520> dude<01:10:05.920> that's<01:10:06.159> amazing<01:10:06.600> Java<01:10:07.000> the 01:10:07.149 --> 01:10:07.159 align:start position:0% wow dude that's amazing Java the 01:10:07.159 --> 01:10:10.070 align:start position:0% wow dude that's amazing Java the JavaScript<01:10:07.679> ecosystem<01:10:08.199> is<01:10:08.640> nuts<01:10:09.640> there<01:10:09.800> is 01:10:10.070 --> 01:10:10.080 align:start position:0% JavaScript ecosystem is nuts there is 01:10:10.080 --> 01:10:12.950 align:start position:0% JavaScript ecosystem is nuts there is stuff<01:10:10.600> everywhere<01:10:11.600> it's<01:10:11.880> it's<01:10:12.080> crazy<01:10:12.520> and<01:10:12.800> and 01:10:12.950 --> 01:10:12.960 align:start position:0% stuff everywhere it's it's crazy and and 01:10:12.960 --> 01:10:14.790 align:start position:0% stuff everywhere it's it's crazy and and I've<01:10:13.120> also<01:10:13.320> seen<01:10:13.600> Joel<01:10:14.000> use<01:10:14.280> this<01:10:14.440> a<01:10:14.520> couple 01:10:14.790 --> 01:10:14.800 align:start position:0% I've also seen Joel use this a couple 01:10:14.800 --> 01:10:18.350 align:start position:0% I've also seen Joel use this a couple times<01:10:15.120> like<01:10:15.280> hooking<01:10:16.159> Dev<01:10:16.480> tools<01:10:16.920> into<01:10:17.440> like 01:10:18.350 --> 01:10:18.360 align:start position:0% times like hooking Dev tools into like 01:10:18.360 --> 01:10:23.430 align:start position:0% times like hooking Dev tools into like um<01:10:18.960> browsers<01:10:20.000> in<01:10:21.000> uh<01:10:21.520> like<01:10:21.719> mobile<01:10:22.040> devices<01:10:22.679> or 01:10:23.430 --> 01:10:23.440 align:start position:0% um browsers in uh like mobile devices or 01:10:23.440 --> 01:10:27.270 align:start position:0% um browsers in uh like mobile devices or even<01:10:24.440> um<01:10:25.760> even<01:10:26.040> iot<01:10:26.480> devices<01:10:26.920> if<01:10:27.040> you<01:10:27.120> can 01:10:27.270 --> 01:10:27.280 align:start position:0% even um even iot devices if you can 01:10:27.280 --> 01:10:28.790 align:start position:0% even um even iot devices if you can figure<01:10:27.520> out<01:10:27.640> a<01:10:27.800> way<01:10:27.960> to<01:10:28.199> to<01:10:28.360> get<01:10:28.440> it<01:10:28.560> to<01:10:28.679> be 01:10:28.790 --> 01:10:28.800 align:start position:0% figure out a way to to get it to be 01:10:28.800 --> 01:10:31.830 align:start position:0% figure out a way to to get it to be configured<01:10:29.280> that<01:10:29.440> way<01:10:30.080> in<01:10:30.199> Firefox<01:10:30.719> you<01:10:30.840> can 01:10:31.830 --> 01:10:31.840 align:start position:0% configured that way in Firefox you can 01:10:31.840 --> 01:10:33.630 align:start position:0% configured that way in Firefox you can you<01:10:31.920> know<01:10:32.159> the<01:10:32.440> the<01:10:32.560> world<01:10:32.760> UI<01:10:33.080> firfox<01:10:33.400> is 01:10:33.630 --> 01:10:33.640 align:start position:0% you know the the world UI firfox is 01:10:33.640 --> 01:10:36.070 align:start position:0% you know the the world UI firfox is actually<01:10:33.840> made<01:10:34.040> with<01:10:34.199> HTML<01:10:34.719> and<01:10:34.880> CSS<01:10:35.560> and 01:10:36.070 --> 01:10:36.080 align:start position:0% actually made with HTML and CSS and 01:10:36.080 --> 01:10:39.790 align:start position:0% actually made with HTML and CSS and JavaScript<01:10:37.239> and<01:10:38.239> the<01:10:38.360> UI<01:10:38.640> of<01:10:38.760> Firefox<01:10:39.520> oh<01:10:39.679> the 01:10:39.790 --> 01:10:39.800 align:start position:0% JavaScript and the UI of Firefox oh the 01:10:39.800 --> 01:10:42.149 align:start position:0% JavaScript and the UI of Firefox oh the whole<01:10:40.040> UI<01:10:40.640> yeah<01:10:41.000> the<01:10:41.080> whole<01:10:41.440> all<01:10:41.560> the<01:10:41.719> buttons 01:10:42.149 --> 01:10:42.159 align:start position:0% whole UI yeah the whole all the buttons 01:10:42.159 --> 01:10:44.630 align:start position:0% whole UI yeah the whole all the buttons everything<01:10:42.880> the<01:10:43.880> but<01:10:44.040> you<01:10:44.159> can<01:10:44.360> actually 01:10:44.630 --> 01:10:44.640 align:start position:0% everything the but you can actually 01:10:44.640 --> 01:10:46.430 align:start position:0% everything the but you can actually debug<01:10:44.960> Firefox<01:10:45.360> with<01:10:45.480> Firefox<01:10:46.000> and<01:10:46.080> you<01:10:46.199> can 01:10:46.430 --> 01:10:46.440 align:start position:0% debug Firefox with Firefox and you can 01:10:46.440 --> 01:10:49.350 align:start position:0% debug Firefox with Firefox and you can inspect<01:10:46.800> element<01:10:47.600> the<01:10:47.719> UI<01:10:48.000> of<01:10:48.120> Firefox<01:10:48.640> itself 01:10:49.350 --> 01:10:49.360 align:start position:0% inspect element the UI of Firefox itself 01:10:49.360 --> 01:10:50.910 align:start position:0% inspect element the UI of Firefox itself so<01:10:49.480> you<01:10:49.560> can<01:10:49.800> inspect<01:10:50.120> the<01:10:50.280> console<01:10:50.719> and<01:10:50.840> you 01:10:50.910 --> 01:10:50.920 align:start position:0% so you can inspect the console and you 01:10:50.920 --> 01:10:53.750 align:start position:0% so you can inspect the console and you can<01:10:51.080> inspect<01:10:51.400> all<01:10:51.520> of<01:10:51.719> that<01:10:52.000> yeah<01:10:52.719> no<01:10:53.040> wa<01:10:53.280> wait 01:10:53.750 --> 01:10:53.760 align:start position:0% can inspect all of that yeah no wa wait 01:10:53.760 --> 01:10:56.550 align:start position:0% can inspect all of that yeah no wa wait then<01:10:54.760> could<01:10:54.920> you 01:10:56.550 --> 01:10:56.560 align:start position:0% then could you 01:10:56.560 --> 01:10:58.149 align:start position:0% then could you inspect<01:10:57.320> the 01:10:58.149 --> 01:10:58.159 align:start position:0% inspect the 01:10:58.159 --> 01:11:01.669 align:start position:0% inspect the inspector<01:10:59.159> probably<01:10:59.640> yeah<01:11:00.400> oh<01:11:00.679> my<01:11:01.040> gosh<01:11:01.520> it's 01:11:01.669 --> 01:11:01.679 align:start position:0% inspector probably yeah oh my gosh it's 01:11:01.679 --> 01:11:04.270 align:start position:0% inspector probably yeah oh my gosh it's like<01:11:01.920> Inception<01:11:02.560> there<01:11:02.960> it's<01:11:03.360> you<01:11:03.640> just<01:11:04.080> keep 01:11:04.270 --> 01:11:04.280 align:start position:0% like Inception there it's you just keep 01:11:04.280 --> 01:11:07.070 align:start position:0% like Inception there it's you just keep on<01:11:04.679> inspecting<01:11:05.679> that's 01:11:07.070 --> 01:11:07.080 align:start position:0% on inspecting that's 01:11:07.080 --> 01:11:09.470 align:start position:0% on inspecting that's hilarious<01:11:08.080> so<01:11:08.719> you<01:11:08.800> can<01:11:09.000> inspect<01:11:09.320> the 01:11:09.470 --> 01:11:09.480 align:start position:0% hilarious so you can inspect the 01:11:09.480 --> 01:11:10.709 align:start position:0% hilarious so you can inspect the inspector<01:11:09.920> oh<01:11:10.080> interesting<01:11:10.400> I<01:11:10.480> didn't<01:11:10.640> know 01:11:10.709 --> 01:11:10.719 align:start position:0% inspector oh interesting I didn't know 01:11:10.719 --> 01:11:12.390 align:start position:0% inspector oh interesting I didn't know that<01:11:11.040> so<01:11:11.280> I<01:11:11.400> can<01:11:11.520> show<01:11:11.679> you<01:11:11.880> how<01:11:12.000> it<01:11:12.120> work 01:11:12.390 --> 01:11:12.400 align:start position:0% that so I can show you how it work 01:11:12.400 --> 01:11:15.430 align:start position:0% that so I can show you how it work actually<01:11:12.840> the<01:11:13.080> the<01:11:13.239> code<01:11:13.440> for<01:11:13.640> PP<01:11:14.320> finder<01:11:15.320> yeah 01:11:15.430 --> 01:11:15.440 align:start position:0% actually the the code for PP finder yeah 01:11:15.440 --> 01:11:18.510 align:start position:0% actually the the code for PP finder yeah i'<01:11:15.600> like<01:11:15.719> to<01:11:15.840> see<01:11:16.120> that<01:11:17.040> yes<01:11:18.040> all<01:11:18.120> right<01:11:18.280> we<01:11:18.400> we 01:11:18.510 --> 01:11:18.520 align:start position:0% i' like to see that yes all right we we 01:11:18.520 --> 01:11:19.669 align:start position:0% i' like to see that yes all right we we do<01:11:18.600> have<01:11:18.679> a<01:11:18.760> couple<01:11:19.000> questions<01:11:19.320> here<01:11:19.480> real 01:11:19.669 --> 01:11:19.679 align:start position:0% do have a couple questions here real 01:11:19.679 --> 01:11:21.790 align:start position:0% do have a couple questions here real quick<01:11:19.840> let<01:11:19.960> me<01:11:20.159> let<01:11:20.239> me<01:11:20.520> um<01:11:20.800> let<01:11:20.920> me<01:11:21.280> toss<01:11:21.600> these 01:11:21.790 --> 01:11:21.800 align:start position:0% quick let me let me um let me toss these 01:11:21.800 --> 01:11:30.630 align:start position:0% quick let me let me um let me toss these out<01:11:22.800> um 01:11:30.630 --> 01:11:30.640 align:start position:0% 01:11:30.640 --> 01:11:32.830 align:start position:0% lots<01:11:30.840> of<01:11:31.040> thank<01:11:31.239> yous<01:11:31.600> lots<01:11:31.840> of<01:11:32.159> give<01:11:32.480> give<01:11:32.640> me 01:11:32.830 --> 01:11:32.840 align:start position:0% lots of thank yous lots of give give me 01:11:32.840 --> 01:11:35.470 align:start position:0% lots of thank yous lots of give give me the<01:11:33.000> slide<01:11:33.440> maker<01:11:34.000> please<01:11:35.000> I<01:11:35.080> want<01:11:35.239> to<01:11:35.320> a 01:11:35.470 --> 01:11:35.480 align:start position:0% the slide maker please I want to a 01:11:35.480 --> 01:11:37.189 align:start position:0% the slide maker please I want to a pencil<01:11:35.760> sit<01:11:36.199> at<01:11:36.320> some<01:11:36.480> point<01:11:36.719> but<01:11:36.840> it's<01:11:37.000> not 01:11:37.189 --> 01:11:37.199 align:start position:0% pencil sit at some point but it's not 01:11:37.199 --> 01:11:40.750 align:start position:0% pencil sit at some point but it's not ready<01:11:37.960> yet<01:11:38.960> uh<01:11:39.159> type<01:11:39.600> says<01:11:40.080> I<01:11:40.159> am<01:11:40.320> missing 01:11:40.750 --> 01:11:40.760 align:start position:0% ready yet uh type says I am missing 01:11:40.760 --> 01:11:43.110 align:start position:0% ready yet uh type says I am missing about<01:11:41.040> how<01:11:41.280> to<01:11:41.440> find<01:11:41.639> my<01:11:41.760> entry<01:11:42.080> points<01:11:42.800> uh<01:11:42.960> as 01:11:43.110 --> 01:11:43.120 align:start position:0% about how to find my entry points uh as 01:11:43.120 --> 01:11:45.030 align:start position:0% about how to find my entry points uh as a<01:11:43.400> as<01:11:43.480> a<01:11:43.600> hunter<01:11:43.880> for<01:11:44.040> server<01:11:44.440> side<01:11:44.600> prototype 01:11:45.030 --> 01:11:45.040 align:start position:0% a as a hunter for server side prototype 01:11:45.040 --> 01:11:46.950 align:start position:0% a as a hunter for server side prototype pollution<01:11:46.040> I<01:11:46.199> I<01:11:46.320> totally<01:11:46.560> get<01:11:46.679> it<01:11:46.760> on<01:11:46.880> the 01:11:46.950 --> 01:11:46.960 align:start position:0% pollution I I totally get it on the 01:11:46.960 --> 01:11:48.590 align:start position:0% pollution I I totally get it on the client<01:11:47.320> side<01:11:47.560> though<01:11:48.120> what<01:11:48.280> kind<01:11:48.440> of 01:11:48.590 --> 01:11:48.600 align:start position:0% client side though what kind of 01:11:48.600 --> 01:11:50.830 align:start position:0% client side though what kind of filtering<01:11:49.400> is<01:11:49.600> there<01:11:49.960> usually<01:11:50.280> in<01:11:50.440> place<01:11:50.600> for 01:11:50.830 --> 01:11:50.840 align:start position:0% filtering is there usually in place for 01:11:50.840 --> 01:11:53.390 align:start position:0% filtering is there usually in place for this<01:11:51.400> I<01:11:51.560> can<01:11:51.840> see<01:11:52.520> that<01:11:52.639> some<01:11:52.880> header<01:11:53.120> values 01:11:53.390 --> 01:11:53.400 align:start position:0% this I can see that some header values 01:11:53.400 --> 01:11:55.510 align:start position:0% this I can see that some header values are<01:11:53.560> stored<01:11:53.960> when<01:11:54.159> they<01:11:54.320> might<01:11:54.840> reuse<01:11:55.400> them 01:11:55.510 --> 01:11:55.520 align:start position:0% are stored when they might reuse them 01:11:55.520 --> 01:11:56.790 align:start position:0% are stored when they might reuse them for<01:11:55.679> other<01:11:55.840> features<01:11:56.280> can<01:11:56.360> you<01:11:56.440> show<01:11:56.639> an 01:11:56.790 --> 01:11:56.800 align:start position:0% for other features can you show an 01:11:56.800 --> 01:11:59.830 align:start position:0% for other features can you show an example<01:11:57.199> flow<01:11:57.719> from<01:11:58.280> Recon<01:11:58.719> to<01:11:58.960> verifying<01:11:59.639> the 01:11:59.830 --> 01:11:59.840 align:start position:0% example flow from Recon to verifying the 01:11:59.840 --> 01:12:01.910 align:start position:0% example flow from Recon to verifying the server<01:12:00.199> side<01:12:00.440> prototype<01:12:00.840> pollution<01:12:01.600> for<01:12:01.800> me 01:12:01.910 --> 01:12:01.920 align:start position:0% server side prototype pollution for me 01:12:01.920 --> 01:12:04.910 align:start position:0% server side prototype pollution for me it<01:12:02.040> will<01:12:02.239> be<01:12:02.560> using<01:12:03.040> the<01:12:04.000> the<01:12:04.159> payloads<01:12:04.600> I<01:12:04.679> show 01:12:04.910 --> 01:12:04.920 align:start position:0% it will be using the the payloads I show 01:12:04.920 --> 01:12:10.149 align:start position:0% it will be using the the payloads I show you<01:12:05.280> earlier<01:12:06.280> where<01:12:06.400> is<01:12:06.679> my<01:12:07.520> oh<01:12:07.600> it's 01:12:10.149 --> 01:12:10.159 align:start position:0% 01:12:10.159 --> 01:12:14.149 align:start position:0% there<01:12:11.159> uh<01:12:11.520> if<01:12:11.639> I<01:12:11.880> go 01:12:14.149 --> 01:12:14.159 align:start position:0% 01:12:14.159 --> 01:12:17.070 align:start position:0% to<01:12:15.159> where<01:12:15.280> is 01:12:17.070 --> 01:12:17.080 align:start position:0% to where is 01:12:17.080 --> 01:12:19.870 align:start position:0% to where is Express<01:12:18.080> I'm<01:12:18.239> lost<01:12:18.520> in<01:12:18.679> my 01:12:19.870 --> 01:12:19.880 align:start position:0% Express I'm lost in my 01:12:19.880 --> 01:12:22.470 align:start position:0% Express I'm lost in my slides<01:12:20.880> oh<01:12:21.040> it's<01:12:21.199> over<01:12:21.440> there<01:12:21.840> so<01:12:22.000> this<01:12:22.120> is<01:12:22.400> for 01:12:22.470 --> 01:12:22.480 align:start position:0% slides oh it's over there so this is for 01:12:22.480 --> 01:12:24.189 align:start position:0% slides oh it's over there so this is for example<01:12:22.719> the<01:12:22.840> payload<01:12:23.080> for<01:12:23.320> Express<01:12:23.840> I<01:12:23.960> said 01:12:24.189 --> 01:12:24.199 align:start position:0% example the payload for Express I said 01:12:24.199 --> 01:12:26.390 align:start position:0% example the payload for Express I said earlier<01:12:24.600> with<01:12:24.800> cash<01:12:25.480> and<01:12:25.639> the<01:12:25.760> idea<01:12:26.040> is<01:12:26.159> you 01:12:26.390 --> 01:12:26.400 align:start position:0% earlier with cash and the idea is you 01:12:26.400 --> 01:12:29.629 align:start position:0% earlier with cash and the idea is you just<01:12:27.080> try<01:12:27.440> this<01:12:27.639> in<01:12:27.880> every<01:12:28.320> parameters<01:12:29.320> uh 01:12:29.629 --> 01:12:29.639 align:start position:0% just try this in every parameters uh 01:12:29.639 --> 01:12:31.790 align:start position:0% just try this in every parameters uh different<01:12:29.920> level<01:12:30.480> nested<01:12:31.199> you<01:12:31.320> try<01:12:31.560> it 01:12:31.790 --> 01:12:31.800 align:start position:0% different level nested you try it 01:12:31.800 --> 01:12:33.870 align:start position:0% different level nested you try it everywhere<01:12:32.440> until<01:12:32.679> you<01:12:32.880> get<01:12:33.080> this<01:12:33.520> uh<01:12:33.719> this 01:12:33.870 --> 01:12:33.880 align:start position:0% everywhere until you get this uh this 01:12:33.880 --> 01:12:36.270 align:start position:0% everywhere until you get this uh this kind<01:12:34.000> of<01:12:34.159> behavior<01:12:34.639> back<01:12:35.480> the<01:12:35.600> issue<01:12:35.840> is<01:12:36.080> yeah 01:12:36.270 --> 01:12:36.280 align:start position:0% kind of behavior back the issue is yeah 01:12:36.280 --> 01:12:38.350 align:start position:0% kind of behavior back the issue is yeah there<01:12:36.360> is<01:12:36.560> no<01:12:37.120> not<01:12:37.280> a<01:12:37.400> lot<01:12:37.520> of<01:12:37.600> way<01:12:37.760> to<01:12:37.880> do<01:12:38.040> it 01:12:38.350 --> 01:12:38.360 align:start position:0% there is no not a lot of way to do it 01:12:38.360 --> 01:12:40.950 align:start position:0% there is no not a lot of way to do it but<01:12:39.320> you<01:12:39.440> can<01:12:39.560> be<01:12:39.719> smart<01:12:40.040> about<01:12:40.280> it<01:12:40.560> every<01:12:40.760> time 01:12:40.950 --> 01:12:40.960 align:start position:0% but you can be smart about it every time 01:12:40.960 --> 01:12:43.350 align:start position:0% but you can be smart about it every time you<01:12:41.719> for<01:12:41.880> example<01:12:42.199> you<01:12:42.400> patch<01:12:42.760> something<01:12:43.239> you 01:12:43.350 --> 01:12:43.360 align:start position:0% you for example you patch something you 01:12:43.360 --> 01:12:45.590 align:start position:0% you for example you patch something you do<01:12:43.600> like<01:12:43.719> a<01:12:43.840> patch<01:12:44.080> request<01:12:44.480> and<01:12:44.600> you<01:12:44.760> put<01:12:45.400> an 01:12:45.590 --> 01:12:45.600 align:start position:0% do like a patch request and you put an 01:12:45.600 --> 01:12:48.030 align:start position:0% do like a patch request and you put an object<01:12:46.400> and<01:12:46.520> you<01:12:46.600> say<01:12:46.800> oh<01:12:46.960> they're<01:12:47.199> probably 01:12:48.030 --> 01:12:48.040 align:start position:0% object and you say oh they're probably 01:12:48.040 --> 01:12:49.550 align:start position:0% object and you say oh they're probably putting<01:12:48.320> all<01:12:48.480> the<01:12:48.600> keys<01:12:48.760> of<01:12:48.960> object<01:12:49.280> on<01:12:49.400> the 01:12:49.550 --> 01:12:49.560 align:start position:0% putting all the keys of object on the 01:12:49.560 --> 01:12:50.950 align:start position:0% putting all the keys of object on the original<01:12:49.920> one<01:12:50.120> so<01:12:50.280> this<01:12:50.360> is<01:12:50.480> where<01:12:50.600> you<01:12:50.679> can 01:12:50.950 --> 01:12:50.960 align:start position:0% original one so this is where you can 01:12:50.960 --> 01:12:53.430 align:start position:0% original one so this is where you can test<01:12:51.960> also<01:12:52.400> in<01:12:52.639> the<01:12:53.040> when<01:12:53.159> there<01:12:53.280> is 01:12:53.430 --> 01:12:53.440 align:start position:0% test also in the when there is 01:12:53.440 --> 01:12:55.270 align:start position:0% test also in the when there is conversion<01:12:53.920> between<01:12:54.239> file<01:12:54.480> formats<01:12:54.880> if<01:12:55.199> can 01:12:55.270 --> 01:12:55.280 align:start position:0% conversion between file formats if can 01:12:55.280 --> 01:12:57.629 align:start position:0% conversion between file formats if can upload<01:12:55.560> for<01:12:55.639> example<01:12:55.920> some<01:12:56.159> yaml<01:12:57.159> and<01:12:57.280> you<01:12:57.360> can 01:12:57.629 --> 01:12:57.639 align:start position:0% upload for example some yaml and you can 01:12:57.639 --> 01:13:00.310 align:start position:0% upload for example some yaml and you can try<01:12:57.800> to<01:12:57.920> do<01:12:58.040> it<01:12:58.199> over<01:12:58.440> there<01:12:58.719> too<01:12:59.719> because<01:13:00.120> the 01:13:00.310 --> 01:13:00.320 align:start position:0% try to do it over there too because the 01:13:00.320 --> 01:13:02.189 align:start position:0% try to do it over there too because the library<01:13:00.840> often<01:13:01.239> will<01:13:01.440> just<01:13:01.600> publish<01:13:01.880> a<01:13:02.000> new 01:13:02.189 --> 01:13:02.199 align:start position:0% library often will just publish a new 01:13:02.199 --> 01:13:03.990 align:start position:0% library often will just publish a new object<01:13:02.440> with<01:13:02.600> the<01:13:02.719> key<01:13:02.920> Proto<01:13:03.520> and<01:13:03.800> don't 01:13:03.990 --> 01:13:04.000 align:start position:0% object with the key Proto and don't 01:13:04.000 --> 01:13:05.510 align:start position:0% object with the key Proto and don't think<01:13:04.239> about<01:13:04.440> it<01:13:04.800> because<01:13:05.000> it's<01:13:05.120> not<01:13:05.280> the 01:13:05.510 --> 01:13:05.520 align:start position:0% think about it because it's not the 01:13:05.520 --> 01:13:08.110 align:start position:0% think about it because it's not the problem<01:13:05.840> it's<01:13:06.199> it's<01:13:06.320> a<01:13:06.440> JavaScript<01:13:07.120> problem 01:13:08.110 --> 01:13:08.120 align:start position:0% problem it's it's a JavaScript problem 01:13:08.120 --> 01:13:09.629 align:start position:0% problem it's it's a JavaScript problem and<01:13:08.280> also<01:13:08.520> when<01:13:08.639> you<01:13:08.800> have<01:13:09.120> interaction 01:13:09.629 --> 01:13:09.639 align:start position:0% and also when you have interaction 01:13:09.639 --> 01:13:11.790 align:start position:0% and also when you have interaction between<01:13:09.960> different<01:13:10.320> Lang<01:13:10.639> languages<01:13:11.560> like<01:13:11.679> I 01:13:11.790 --> 01:13:11.800 align:start position:0% between different Lang languages like I 01:13:11.800 --> 01:13:13.590 align:start position:0% between different Lang languages like I said<01:13:12.040> like<01:13:12.159> from<01:13:12.520> python<01:13:12.840> to<01:13:13.040> JavaScript 01:13:13.590 --> 01:13:13.600 align:start position:0% said like from python to JavaScript 01:13:13.600 --> 01:13:15.070 align:start position:0% said like from python to JavaScript because<01:13:13.880> the<01:13:14.000> python<01:13:14.280> developers<01:13:14.679> don't<01:13:14.880> care 01:13:15.070 --> 01:13:15.080 align:start position:0% because the python developers don't care 01:13:15.080 --> 01:13:18.669 align:start position:0% because the python developers don't care about<01:13:15.320> Proto<01:13:15.920> so<01:13:16.080> they<01:13:16.159> won't<01:13:16.360> sanitize<01:13:17.120> it<01:13:18.120> um 01:13:18.669 --> 01:13:18.679 align:start position:0% about Proto so they won't sanitize it um 01:13:18.679 --> 01:13:21.229 align:start position:0% about Proto so they won't sanitize it um I<01:13:19.080> I've<01:13:19.280> also<01:13:19.520> seen<01:13:20.239> detection<01:13:20.639> of<01:13:20.800> prototype 01:13:21.229 --> 01:13:21.239 align:start position:0% I I've also seen detection of prototype 01:13:21.239 --> 01:13:24.910 align:start position:0% I I've also seen detection of prototype pollution<01:13:21.840> server<01:13:22.280> side<01:13:22.960> done<01:13:23.960> in<01:13:24.199> in<01:13:24.400> weird 01:13:24.910 --> 01:13:24.920 align:start position:0% pollution server side done in in weird 01:13:24.920 --> 01:13:28.910 align:start position:0% pollution server side done in in weird like<01:13:25.480> if<01:13:25.600> you<01:13:25.719> see<01:13:26.080> it<01:13:26.880> return<01:13:27.880> like<01:13:28.560> square 01:13:28.910 --> 01:13:28.920 align:start position:0% like if you see it return like square 01:13:28.920 --> 01:13:32.990 align:start position:0% like if you see it return like square bracket<01:13:29.400> object<01:13:29.920> object<01:13:30.920> yeah<01:13:31.639> in<01:13:31.960> in<01:13:32.159> the<01:13:32.719> H 01:13:32.990 --> 01:13:33.000 align:start position:0% bracket object object yeah in in the H 01:13:33.000 --> 01:13:35.070 align:start position:0% bracket object object yeah in in the H GTP<01:13:33.480> response<01:13:33.920> itself<01:13:34.639> that's<01:13:34.800> a<01:13:34.920> good 01:13:35.070 --> 01:13:35.080 align:start position:0% GTP response itself that's a good 01:13:35.080 --> 01:13:38.189 align:start position:0% GTP response itself that's a good indicator<01:13:35.600> that<01:13:36.080> want<01:13:36.239> to<01:13:36.840> SC<01:13:37.159> something<01:13:37.440> up 01:13:38.189 --> 01:13:38.199 align:start position:0% indicator that want to SC something up 01:13:38.199 --> 01:13:41.470 align:start position:0% indicator that want to SC something up nexts<01:13:39.199> oh<01:13:39.320> my<01:13:39.560> gosh<01:13:40.120> hold<01:13:40.239> on<01:13:40.400> here<01:13:40.520> we<01:13:40.719> go<01:13:41.280> yeah 01:13:41.470 --> 01:13:41.480 align:start position:0% nexts oh my gosh hold on here we go yeah 01:13:41.480 --> 01:13:42.590 align:start position:0% nexts oh my gosh hold on here we go yeah this<01:13:41.600> is<01:13:41.760> exactly<01:13:42.040> what<01:13:42.159> I'm<01:13:42.239> talking<01:13:42.440> about 01:13:42.590 --> 01:13:42.600 align:start position:0% this is exactly what I'm talking about 01:13:42.600 --> 01:13:47.669 align:start position:0% this is exactly what I'm talking about and<01:13:42.760> two<01:13:43.080> strings<01:13:44.080> okay<01:13:45.159> what<01:13:46.600> that's<01:13:47.600> I 01:13:47.669 --> 01:13:47.679 align:start position:0% and two strings okay what that's I 01:13:47.679 --> 01:13:49.149 align:start position:0% and two strings okay what that's I didn't<01:13:47.920> find<01:13:48.040> a<01:13:48.159> way<01:13:48.280> to<01:13:48.400> exploit<01:13:48.719> it<01:13:48.840> so<01:13:48.960> I<01:13:49.040> can 01:13:49.149 --> 01:13:49.159 align:start position:0% didn't find a way to exploit it so I can 01:13:49.159 --> 01:13:51.310 align:start position:0% didn't find a way to exploit it so I can show<01:13:49.360> it<01:13:49.520> I<01:13:49.600> don't<01:13:49.760> think<01:13:49.920> you<01:13:50.159> can<01:13:51.040> but<01:13:51.239> you 01:13:51.310 --> 01:13:51.320 align:start position:0% show it I don't think you can but you 01:13:51.320 --> 01:13:54.229 align:start position:0% show it I don't think you can but you can<01:13:51.480> do<01:13:51.760> like<01:13:52.600> stuff<01:13:53.600> it's<01:13:53.800> not<01:13:53.960> actually 01:13:54.229 --> 01:13:54.239 align:start position:0% can do like stuff it's not actually 01:13:54.239 --> 01:13:57.270 align:start position:0% can do like stuff it's not actually protyping<01:13:55.360> that<01:13:55.480> is<01:13:55.600> a<01:13:55.760> very<01:13:55.960> good<01:13:56.159> indicator 01:13:57.270 --> 01:13:57.280 align:start position:0% protyping that is a very good indicator 01:13:57.280 --> 01:14:01.030 align:start position:0% protyping that is a very good indicator of<01:13:58.280> to<01:13:58.400> see<01:13:58.560> the<01:13:58.760> native<01:13:59.159> code<01:14:00.159> yeah<01:14:00.719> and<01:14:00.920> any 01:14:01.030 --> 01:14:01.040 align:start position:0% of to see the native code yeah and any 01:14:01.040 --> 01:14:03.070 align:start position:0% of to see the native code yeah and any of<01:14:01.199> those<01:14:01.320> square<01:14:01.600> bracket<01:14:02.040> things<01:14:02.520> um<01:14:02.639> two 01:14:03.070 --> 01:14:03.080 align:start position:0% of those square bracket things um two 01:14:03.080 --> 01:14:05.310 align:start position:0% of those square bracket things um two string<01:14:03.360> is<01:14:03.560> really<01:14:03.800> often<01:14:04.080> used<01:14:04.560> has<01:14:05.080> uh 01:14:05.310 --> 01:14:05.320 align:start position:0% string is really often used has uh 01:14:05.320 --> 01:14:08.229 align:start position:0% string is really often used has uh object<01:14:05.639> own<01:14:06.080> property<01:14:07.080> um<01:14:07.520> that<01:14:07.679> is<01:14:07.880> often 01:14:08.229 --> 01:14:08.239 align:start position:0% object own property um that is often 01:14:08.239 --> 01:14:10.830 align:start position:0% object own property um that is often really<01:14:09.199> commonly<01:14:09.600> used<01:14:10.360> one<01:14:10.480> thing<01:14:10.600> you<01:14:10.679> can 01:14:10.830 --> 01:14:10.840 align:start position:0% really commonly used one thing you can 01:14:10.840 --> 01:14:13.470 align:start position:0% really commonly used one thing you can test<01:14:11.199> is<01:14:11.360> for<01:14:11.520> example<01:14:11.920> keys<01:14:12.320> if<01:14:12.400> I<01:14:12.520> do<01:14:12.760> keys<01:14:13.360> I 01:14:13.470 --> 01:14:13.480 align:start position:0% test is for example keys if I do keys I 01:14:13.480 --> 01:14:15.350 align:start position:0% test is for example keys if I do keys I got<01:14:13.639> the<01:14:13.760> same<01:14:13.960> because<01:14:14.159> Keys<01:14:14.440> doesn't<01:14:15.000> exist 01:14:15.350 --> 01:14:15.360 align:start position:0% got the same because Keys doesn't exist 01:14:15.360 --> 01:14:17.870 align:start position:0% got the same because Keys doesn't exist on<01:14:15.520> the<01:14:15.639> object<01:14:16.159> prototype<01:14:17.000> but<01:14:17.159> Keys<01:14:17.480> exist 01:14:17.870 --> 01:14:17.880 align:start position:0% on the object prototype but Keys exist 01:14:17.880 --> 01:14:22.030 align:start position:0% on the object prototype but Keys exist exist<01:14:18.239> on<01:14:18.400> the<01:14:18.560> array<01:14:19.080> prototype<01:14:20.080> so<01:14:20.239> if<01:14:20.360> I<01:14:21.040> do 01:14:22.030 --> 01:14:22.040 align:start position:0% exist on the array prototype so if I do 01:14:22.040 --> 01:14:24.430 align:start position:0% exist on the array prototype so if I do Proto<01:14:22.600> and<01:14:22.719> I<01:14:22.840> try<01:14:23.080> to<01:14:23.199> set<01:14:23.520> the<01:14:23.719> Proto<01:14:24.080> to<01:14:24.239> an 01:14:24.430 --> 01:14:24.440 align:start position:0% Proto and I try to set the Proto to an 01:14:24.440 --> 01:14:25.590 align:start position:0% Proto and I try to set the Proto to an array 01:14:25.590 --> 01:14:25.600 align:start position:0% array 01:14:25.600 --> 01:14:27.149 align:start position:0% array and<01:14:25.719> I<01:14:25.840> Tred<01:14:26.040> to<01:14:26.199> access 01:14:27.149 --> 01:14:27.159 align:start position:0% and I Tred to access 01:14:27.159 --> 01:14:33.030 align:start position:0% and I Tred to access Keys<01:14:28.159> uh<01:14:28.320> I<01:14:28.400> think<01:14:28.719> this<01:14:28.960> time<01:14:29.320> no 01:14:33.030 --> 01:14:33.040 align:start position:0% 01:14:33.040 --> 01:14:37.430 align:start position:0% uho<01:14:34.159> uh<01:14:35.159> I<01:14:35.320> think<01:14:35.639> no<01:14:35.760> it<01:14:35.840> was 01:14:37.430 --> 01:14:37.440 align:start position:0% uho uh I think no it was 01:14:37.440 --> 01:14:40.669 align:start position:0% uho uh I think no it was Constructor<01:14:38.440> I<01:14:38.560> don't<01:14:38.800> remember<01:14:39.360> but<01:14:40.360> I<01:14:40.480> had 01:14:40.669 --> 01:14:40.679 align:start position:0% Constructor I don't remember but I had 01:14:40.679 --> 01:14:42.790 align:start position:0% Constructor I don't remember but I had something<01:14:41.040> that<01:14:41.199> was<01:14:41.400> working 01:14:42.790 --> 01:14:42.800 align:start position:0% something that was working 01:14:42.800 --> 01:14:46.270 align:start position:0% something that was working Constructor<01:14:43.800> yeah<01:14:44.239> uh<01:14:44.560> Conor<01:14:45.000> is 01:14:46.270 --> 01:14:46.280 align:start position:0% Constructor yeah uh Conor is 01:14:46.280 --> 01:14:50.229 align:start position:0% Constructor yeah uh Conor is there<01:14:47.280> Constructor<01:14:48.199> like<01:14:48.760> this<01:14:49.760> no<01:14:49.920> the<01:14:50.040> keys 01:14:50.229 --> 01:14:50.239 align:start position:0% there Constructor like this no the keys 01:14:50.239 --> 01:14:51.790 align:start position:0% there Constructor like this no the keys is<01:14:50.360> still<01:14:50.639> there<01:14:51.000> I<01:14:51.080> don't<01:14:51.320> remember<01:14:51.520> I<01:14:51.600> think 01:14:51.790 --> 01:14:51.800 align:start position:0% is still there I don't remember I think 01:14:51.800 --> 01:14:53.870 align:start position:0% is still there I don't remember I think maybe<01:14:51.960> it<01:14:52.080> was<01:14:52.239> not<01:14:52.400> on<01:14:52.960> next<01:14:53.360> was<01:14:53.480> on<01:14:53.639> another 01:14:53.870 --> 01:14:53.880 align:start position:0% maybe it was not on next was on another 01:14:53.880 --> 01:15:01.310 align:start position:0% maybe it was not on next was on another Frameworks<01:14:54.760> but 01:15:01.310 --> 01:15:01.320 align:start position:0% 01:15:01.320 --> 01:15:03.910 align:start position:0% yeah<01:15:01.600> I<01:15:01.679> don't<01:15:01.840> know<01:15:02.679> stuff<01:15:02.880> is<01:15:03.000> happening 01:15:03.910 --> 01:15:03.920 align:start position:0% yeah I don't know stuff is happening 01:15:03.920 --> 01:15:05.709 align:start position:0% yeah I don't know stuff is happening that's<01:15:04.400> that's<01:15:04.639> pretty<01:15:05.159> oh<01:15:05.280> no<01:15:05.360> I<01:15:05.440> know<01:15:05.600> what 01:15:05.709 --> 01:15:05.719 align:start position:0% that's that's pretty oh no I know what 01:15:05.719 --> 01:15:07.229 align:start position:0% that's that's pretty oh no I know what you<01:15:05.800> need<01:15:05.920> to<01:15:06.000> do<01:15:06.120> you<01:15:06.199> need<01:15:06.320> to<01:15:06.440> do<01:15:06.520> it<01:15:06.760> twice<01:15:07.159> I 01:15:07.229 --> 01:15:07.239 align:start position:0% you need to do you need to do it twice I 01:15:07.239 --> 01:15:09.310 align:start position:0% you need to do you need to do it twice I think<01:15:07.480> because<01:15:07.679> the<01:15:07.840> first<01:15:08.080> time<01:15:08.440> it<01:15:08.639> tried<01:15:08.960> to 01:15:09.310 --> 01:15:09.320 align:start position:0% think because the first time it tried to 01:15:09.320 --> 01:15:11.070 align:start position:0% think because the first time it tried to check<01:15:09.560> if<01:15:09.679> the<01:15:09.800> key<01:15:10.040> exist<01:15:10.360> the<01:15:10.480> key<01:15:10.760> Proto 01:15:11.070 --> 01:15:11.080 align:start position:0% check if the key exist the key Proto 01:15:11.080 --> 01:15:12.470 align:start position:0% check if the key exist the key Proto doesn't<01:15:11.360> exist<01:15:11.560> so<01:15:11.639> you<01:15:11.719> create<01:15:11.960> a<01:15:12.080> new<01:15:12.239> one 01:15:12.470 --> 01:15:12.480 align:start position:0% doesn't exist so you create a new one 01:15:12.480 --> 01:15:13.470 align:start position:0% doesn't exist so you create a new one and<01:15:12.639> because<01:15:12.800> it<01:15:12.960> exists<01:15:13.199> already<01:15:13.360> it 01:15:13.470 --> 01:15:13.480 align:start position:0% and because it exists already it 01:15:13.480 --> 01:15:15.430 align:start position:0% and because it exists already it converted<01:15:13.880> to<01:15:14.440> so<01:15:14.560> if<01:15:14.639> I<01:15:14.719> do<01:15:14.880> two<01:15:15.040> Proto<01:15:15.360> it 01:15:15.430 --> 01:15:15.440 align:start position:0% converted to so if I do two Proto it 01:15:15.440 --> 01:15:18.870 align:start position:0% converted to so if I do two Proto it should<01:15:15.600> be<01:15:15.960> okay<01:15:16.600> so<01:15:16.760> if<01:15:16.840> I<01:15:17.000> do<01:15:17.239> this 01:15:18.870 --> 01:15:18.880 align:start position:0% should be okay so if I do this 01:15:18.880 --> 01:15:23.950 align:start position:0% should be okay so if I do this and<01:15:19.880> Proto<01:15:20.560> over<01:15:21.199> there<01:15:22.199> with 01:15:23.950 --> 01:15:23.960 align:start position:0% and Proto over there with 01:15:23.960 --> 01:15:27.750 align:start position:0% and Proto over there with B<01:15:25.040> uh<01:15:25.159> so<01:15:25.280> I<01:15:25.360> have<01:15:25.520> a<01:15:25.920> and<01:15:26.080> this<01:15:26.239> time<01:15:26.480> Keys<01:15:26.920> is<01:15:27.239> a 01:15:27.750 --> 01:15:27.760 align:start position:0% B uh so I have a and this time Keys is a 01:15:27.760 --> 01:15:30.790 align:start position:0% B uh so I have a and this time Keys is a native<01:15:28.120> code<01:15:28.560> because<01:15:29.280> wow<01:15:30.120> and<01:15:30.400> the<01:15:30.520> Proto 01:15:30.790 --> 01:15:30.800 align:start position:0% native code because wow and the Proto 01:15:30.800 --> 01:15:32.510 align:start position:0% native code because wow and the Proto disappeared<01:15:31.280> and<01:15:31.360> I've<01:15:31.520> got<01:15:31.719> a<01:15:31.880> zero<01:15:32.199> is<01:15:32.320> equal 01:15:32.510 --> 01:15:32.520 align:start position:0% disappeared and I've got a zero is equal 01:15:32.520 --> 01:15:34.229 align:start position:0% disappeared and I've got a zero is equal to<01:15:32.719> this<01:15:32.880> and<01:15:33.040> one<01:15:33.199> is<01:15:33.280> equal<01:15:33.520> to<01:15:33.719> this<01:15:33.920> and<01:15:34.040> two 01:15:34.229 --> 01:15:34.239 align:start position:0% to this and one is equal to this and two 01:15:34.239 --> 01:15:35.350 align:start position:0% to this and one is equal to this and two is<01:15:34.320> equal<01:15:34.520> to<01:15:34.679> this<01:15:34.800> and<01:15:34.960> everything<01:15:35.239> is 01:15:35.350 --> 01:15:35.360 align:start position:0% is equal to this and everything is 01:15:35.360 --> 01:15:37.590 align:start position:0% is equal to this and everything is [ __ ]<01:15:35.679> up<01:15:36.199> dude<01:15:36.480> I<01:15:36.560> think<01:15:36.679> this<01:15:36.800> is<01:15:37.320> this<01:15:37.440> is 01:15:37.590 --> 01:15:37.600 align:start position:0% [ __ ] up dude I think this is this is 01:15:37.600 --> 01:15:39.070 align:start position:0% [ __ ] up dude I think this is this is good<01:15:37.719> enough<01:15:37.960> for<01:15:38.199> Life 01:15:39.070 --> 01:15:39.080 align:start position:0% good enough for Life 01:15:39.080 --> 01:15:42.390 align:start position:0% good enough for Life Deo<01:15:40.080> that's<01:15:40.600> crazy<01:15:41.440> I<01:15:41.520> think<01:15:41.719> most<01:15:41.880> of<01:15:42.040> this<01:15:42.159> is 01:15:42.390 --> 01:15:42.400 align:start position:0% Deo that's crazy I think most of this is 01:15:42.400 --> 01:15:44.709 align:start position:0% Deo that's crazy I think most of this is actually<01:15:42.639> happening<01:15:43.400> uh<01:15:43.880> you<01:15:44.000> you<01:15:44.120> don't<01:15:44.600> I'm 01:15:44.709 --> 01:15:44.719 align:start position:0% actually happening uh you you don't I'm 01:15:44.719 --> 01:15:46.030 align:start position:0% actually happening uh you you don't I'm not<01:15:44.840> able<01:15:45.040> to<01:15:45.199> write<01:15:45.400> in<01:15:45.480> the<01:15:45.600> Prototype 01:15:46.030 --> 01:15:46.040 align:start position:0% not able to write in the Prototype 01:15:46.040 --> 01:15:47.990 align:start position:0% not able to write in the Prototype object<01:15:46.360> I'm<01:15:46.480> just<01:15:46.639> able<01:15:46.880> to<01:15:47.159> rewrite<01:15:47.840> the 01:15:47.990 --> 01:15:48.000 align:start position:0% object I'm just able to rewrite the 01:15:48.000 --> 01:15:49.790 align:start position:0% object I'm just able to rewrite the object<01:15:48.400> the<01:15:48.560> protype<01:15:48.960> of<01:15:49.199> this<01:15:49.400> specific 01:15:49.790 --> 01:15:49.800 align:start position:0% object the protype of this specific 01:15:49.800 --> 01:15:51.709 align:start position:0% object the protype of this specific object<01:15:50.800> like<01:15:50.880> I<01:15:50.960> showed<01:15:51.199> you<01:15:51.320> earlier<01:15:51.639> when 01:15:51.709 --> 01:15:51.719 align:start position:0% object like I showed you earlier when 01:15:51.719 --> 01:15:53.310 align:start position:0% object like I showed you earlier when you<01:15:51.880> rewrite<01:15:52.199> Proto<01:15:52.560> inste<01:15:52.960> instead<01:15:53.159> of 01:15:53.310 --> 01:15:53.320 align:start position:0% you rewrite Proto inste instead of 01:15:53.320 --> 01:15:55.629 align:start position:0% you rewrite Proto inste instead of writing<01:15:53.560> a<01:15:53.679> key<01:15:53.880> inside<01:15:54.080> of<01:15:54.239> it 01:15:55.629 --> 01:15:55.639 align:start position:0% writing a key inside of it 01:15:55.639 --> 01:15:58.070 align:start position:0% writing a key inside of it but<01:15:55.920> yeah<01:15:56.239> next<01:15:56.679> is<01:15:57.199> kind<01:15:57.320> of<01:15:57.480> vulnerable<01:15:57.880> to 01:15:58.070 --> 01:15:58.080 align:start position:0% but yeah next is kind of vulnerable to 01:15:58.080 --> 01:15:59.950 align:start position:0% but yeah next is kind of vulnerable to that<01:15:58.280> but<01:15:58.400> if<01:15:58.480> there<01:15:58.600> is<01:15:58.719> no<01:15:58.880> exploit<01:15:59.679> is<01:15:59.800> this 01:15:59.950 --> 01:15:59.960 align:start position:0% that but if there is no exploit is this 01:15:59.960 --> 01:16:02.750 align:start position:0% that but if there is no exploit is this a<01:16:00.080> vulnerability<01:16:00.880> I<01:16:00.960> don't<01:16:01.560> know<01:16:02.560> there's 01:16:02.750 --> 01:16:02.760 align:start position:0% a vulnerability I don't know there's 01:16:02.760 --> 01:16:04.590 align:start position:0% a vulnerability I don't know there's something<01:16:03.080> funky<01:16:03.440> going<01:16:03.639> on<01:16:03.840> there<01:16:04.000> for<01:16:04.120> sure 01:16:04.590 --> 01:16:04.600 align:start position:0% something funky going on there for sure 01:16:04.600 --> 01:16:07.510 align:start position:0% something funky going on there for sure that's<01:16:04.880> definitely<01:16:05.800> worth<01:16:06.120> looking<01:16:06.440> into<01:16:07.239> and 01:16:07.510 --> 01:16:07.520 align:start position:0% that's definitely worth looking into and 01:16:07.520 --> 01:16:10.950 align:start position:0% that's definitely worth looking into and and<01:16:07.800> so<01:16:08.760> like<01:16:09.639> and<01:16:09.760> I<01:16:09.880> actually<01:16:10.040> wanted<01:16:10.280> to<01:16:10.440> ask 01:16:10.950 --> 01:16:10.960 align:start position:0% and so like and I actually wanted to ask 01:16:10.960 --> 01:16:14.990 align:start position:0% and so like and I actually wanted to ask surrounding<01:16:11.400> this<01:16:11.600> as<01:16:11.760> well<01:16:13.120> um<01:16:14.120> what<01:16:14.280> if<01:16:14.480> you 01:16:14.990 --> 01:16:15.000 align:start position:0% surrounding this as well um what if you 01:16:15.000 --> 01:16:18.310 align:start position:0% surrounding this as well um what if you try<01:16:15.199> to<01:16:15.639> overwrite<01:16:16.639> a<01:16:17.440> property<01:16:17.880> that<01:16:18.080> can't 01:16:18.310 --> 01:16:18.320 align:start position:0% try to overwrite a property that can't 01:16:18.320 --> 01:16:21.189 align:start position:0% try to overwrite a property that can't be<01:16:18.719> overwritten<01:16:19.719> will<01:16:19.920> it<01:16:20.560> and<01:16:20.760> like<01:16:20.960> have<01:16:21.080> it 01:16:21.189 --> 01:16:21.199 align:start position:0% be overwritten will it and like have it 01:16:21.199 --> 01:16:22.990 align:start position:0% be overwritten will it and like have it throw<01:16:21.440> an<01:16:21.560> error<01:16:22.040> is<01:16:22.159> that<01:16:22.280> a<01:16:22.400> good<01:16:22.560> way<01:16:22.719> for<01:16:22.880> us 01:16:22.990 --> 01:16:23.000 align:start position:0% throw an error is that a good way for us 01:16:23.000 --> 01:16:25.750 align:start position:0% throw an error is that a good way for us to<01:16:23.199> detect<01:16:23.840> like<01:16:24.600> whether 01:16:25.750 --> 01:16:25.760 align:start position:0% to detect like whether 01:16:25.760 --> 01:16:27.470 align:start position:0% to detect like whether is<01:16:25.880> there<01:16:26.040> any<01:16:26.280> like<01:16:26.480> common<01:16:26.800> property<01:16:27.280> that 01:16:27.470 --> 01:16:27.480 align:start position:0% is there any like common property that 01:16:27.480 --> 01:16:29.430 align:start position:0% is there any like common property that that<01:16:27.600> can't<01:16:27.800> be<01:16:27.960> overwritten<01:16:28.440> like<01:16:28.639> has<01:16:28.840> own 01:16:29.430 --> 01:16:29.440 align:start position:0% that can't be overwritten like has own 01:16:29.440 --> 01:16:30.830 align:start position:0% that can't be overwritten like has own key<01:16:29.719> or<01:16:29.800> something<01:16:30.159> if<01:16:30.199> you<01:16:30.280> want<01:16:30.440> to<01:16:30.560> break 01:16:30.830 --> 01:16:30.840 align:start position:0% key or something if you want to break 01:16:30.840 --> 01:16:32.189 align:start position:0% key or something if you want to break everything<01:16:31.199> just<01:16:31.320> to<01:16:31.440> get<01:16:31.560> an<01:16:31.679> error<01:16:31.960> to<01:16:32.080> be 01:16:32.189 --> 01:16:32.199 align:start position:0% everything just to get an error to be 01:16:32.199 --> 01:16:34.550 align:start position:0% everything just to get an error to be sure<01:16:33.159> the<01:16:33.320> the<01:16:33.400> good<01:16:33.560> value<01:16:33.800> to<01:16:33.960> go<01:16:34.159> are<01:16:34.360> two 01:16:34.550 --> 01:16:34.560 align:start position:0% sure the the good value to go are two 01:16:34.560 --> 01:16:36.870 align:start position:0% sure the the good value to go are two string<01:16:35.280> because<01:16:35.480> two<01:16:35.679> string<01:16:36.199> uh<01:16:36.480> let's 01:16:36.870 --> 01:16:36.880 align:start position:0% string because two string uh let's 01:16:36.880 --> 01:16:39.390 align:start position:0% string because two string uh let's startop<01:16:37.280> this 01:16:39.390 --> 01:16:39.400 align:start position:0% startop this 01:16:39.400 --> 01:16:42.390 align:start position:0% startop this again<01:16:40.400> so<01:16:40.880> we<01:16:40.960> need<01:16:41.040> to<01:16:41.159> keep<01:16:41.280> in<01:16:41.400> mind<01:16:41.600> also 01:16:42.390 --> 01:16:42.400 align:start position:0% again so we need to keep in mind also 01:16:42.400 --> 01:16:43.950 align:start position:0% again so we need to keep in mind also usually<01:16:42.639> you<01:16:42.719> don't<01:16:42.880> have<01:16:43.040> access<01:16:43.239> to<01:16:43.400> Jon 01:16:43.950 --> 01:16:43.960 align:start position:0% usually you don't have access to Jon 01:16:43.960 --> 01:16:45.110 align:start position:0% usually you don't have access to Jon kind<01:16:44.120> of<01:16:44.280> stuff<01:16:44.440> so<01:16:44.520> you're<01:16:44.639> not<01:16:44.760> able<01:16:44.920> to<01:16:45.040> put 01:16:45.110 --> 01:16:45.120 align:start position:0% kind of stuff so you're not able to put 01:16:45.120 --> 01:16:46.669 align:start position:0% kind of stuff so you're not able to put a<01:16:45.239> function<01:16:45.520> or<01:16:45.679> something<01:16:46.199> right<01:16:46.400> right<01:16:46.560> but 01:16:46.669 --> 01:16:46.679 align:start position:0% a function or something right right but 01:16:46.679 --> 01:16:48.149 align:start position:0% a function or something right right but if<01:16:46.760> you<01:16:46.920> two<01:16:47.080> string<01:16:47.440> there<01:16:47.600> and<01:16:47.679> you<01:16:47.800> try<01:16:48.000> to 01:16:48.149 --> 01:16:48.159 align:start position:0% if you two string there and you try to 01:16:48.159 --> 01:16:50.390 align:start position:0% if you two string there and you try to do<01:16:48.320> string<01:16:48.679> that<01:16:48.960> X<01:16:49.360> it<01:16:49.440> will<01:16:49.639> throw<01:16:49.920> an<01:16:50.040> error 01:16:50.390 --> 01:16:50.400 align:start position:0% do string that X it will throw an error 01:16:50.400 --> 01:16:51.669 align:start position:0% do string that X it will throw an error but<01:16:50.520> it<01:16:50.600> will<01:16:50.800> actually<01:16:51.000> throw<01:16:51.199> an<01:16:51.280> error<01:16:51.480> in<01:16:51.560> a 01:16:51.669 --> 01:16:51.679 align:start position:0% but it will actually throw an error in a 01:16:51.679 --> 01:16:53.430 align:start position:0% but it will actually throw an error in a bunch<01:16:51.880> of<01:16:52.000> different<01:16:52.360> places<01:16:53.040> if<01:16:53.159> you<01:16:53.280> do 01:16:53.430 --> 01:16:53.440 align:start position:0% bunch of different places if you do 01:16:53.440 --> 01:16:55.350 align:start position:0% bunch of different places if you do number<01:16:53.760> X<01:16:54.120> also<01:16:54.440> an<01:16:54.520> error 01:16:55.350 --> 01:16:55.360 align:start position:0% number X also an error 01:16:55.360 --> 01:16:58.350 align:start position:0% number X also an error what<01:16:55.440> if<01:16:55.520> you<01:16:55.679> just<01:16:55.880> take<01:16:56.239> X<01:16:57.239> does<01:16:57.400> it<01:16:58.040> no<01:16:58.199> it 01:16:58.350 --> 01:16:58.360 align:start position:0% what if you just take X does it no it 01:16:58.360 --> 01:16:59.709 align:start position:0% what if you just take X does it no it works<01:16:58.639> because<01:16:58.840> the<01:16:59.000> console<01:16:59.320> is<01:16:59.400> a<01:16:59.520> bit 01:16:59.709 --> 01:16:59.719 align:start position:0% works because the console is a bit 01:16:59.719 --> 01:17:01.870 align:start position:0% works because the console is a bit smarter<01:17:00.679> but<01:17:00.800> there<01:17:00.920> is<01:17:01.080> this<01:17:01.199> one<01:17:01.360> is<01:17:01.520> stra 01:17:01.870 --> 01:17:01.880 align:start position:0% smarter but there is this one is stra 01:17:01.880 --> 01:17:04.830 align:start position:0% smarter but there is this one is stra good<01:17:02.159> and<01:17:02.280> there<01:17:02.400> is<01:17:02.560> also<01:17:03.239> the<01:17:04.159> two<01:17:04.440> value 01:17:04.830 --> 01:17:04.840 align:start position:0% good and there is also the two value 01:17:04.840 --> 01:17:07.830 align:start position:0% good and there is also the two value that<01:17:04.960> is<01:17:05.120> called<01:17:05.400> a<01:17:05.560> lot<01:17:05.840> in<01:17:06.000> internal<01:17:06.840> stuff 01:17:07.830 --> 01:17:07.840 align:start position:0% that is called a lot in internal stuff 01:17:07.840 --> 01:17:09.950 align:start position:0% that is called a lot in internal stuff so<01:17:08.120> it<01:17:08.280> will<01:17:08.440> break<01:17:09.120> and<01:17:09.360> yeah<01:17:09.520> if<01:17:09.600> you<01:17:09.719> see 01:17:09.950 --> 01:17:09.960 align:start position:0% so it will break and yeah if you see 01:17:09.960 --> 01:17:12.149 align:start position:0% so it will break and yeah if you see some<01:17:10.400> uh<01:17:10.639> object<01:17:11.080> object<01:17:11.400> popping<01:17:11.760> somewhere 01:17:12.149 --> 01:17:12.159 align:start position:0% some uh object object popping somewhere 01:17:12.159 --> 01:17:13.510 align:start position:0% some uh object object popping somewhere at<01:17:12.239> least<01:17:12.360> you<01:17:12.440> know<01:17:12.679> JavaScript<01:17:13.159> and<01:17:13.239> you<01:17:13.360> can 01:17:13.510 --> 01:17:13.520 align:start position:0% at least you know JavaScript and you can 01:17:13.520 --> 01:17:17.550 align:start position:0% at least you know JavaScript and you can start<01:17:13.760> to<01:17:13.920> look<01:17:14.120> for<01:17:14.960> pollution<01:17:16.440> yeah<01:17:17.440> because 01:17:17.550 --> 01:17:17.560 align:start position:0% start to look for pollution yeah because 01:17:17.560 --> 01:17:20.790 align:start position:0% start to look for pollution yeah because if<01:17:17.679> it's<01:17:17.800> not<01:17:17.960> JavaScript<01:17:18.679> it's<01:17:19.679> yeah<01:17:20.639> don't 01:17:20.790 --> 01:17:20.800 align:start position:0% if it's not JavaScript it's yeah don't 01:17:20.800 --> 01:17:24.470 align:start position:0% if it's not JavaScript it's yeah don't need<01:17:20.880> to<01:17:21.000> look<01:17:21.159> for<01:17:21.280> it<01:17:22.000> yeah<01:17:23.040> um<01:17:24.040> this<01:17:24.159> is<01:17:24.280> what 01:17:24.470 --> 01:17:24.480 align:start position:0% need to look for it yeah um this is what 01:17:24.480 --> 01:17:26.350 align:start position:0% need to look for it yeah um this is what also<01:17:24.960> would<01:17:25.080> say<01:17:25.239> if<01:17:25.320> you<01:17:25.440> test<01:17:25.600> for<01:17:25.719> protion 01:17:26.350 --> 01:17:26.360 align:start position:0% also would say if you test for protion 01:17:26.360 --> 01:17:28.030 align:start position:0% also would say if you test for protion first<01:17:26.600> make<01:17:26.719> sure<01:17:26.880> it's<01:17:27.040> JavaScript<01:17:27.760> if<01:17:27.840> it's 01:17:28.030 --> 01:17:28.040 align:start position:0% first make sure it's JavaScript if it's 01:17:28.040 --> 01:17:29.510 align:start position:0% first make sure it's JavaScript if it's not<01:17:28.440> don't<01:17:28.679> waste<01:17:28.880> your<01:17:29.000> time<01:17:29.239> because<01:17:29.400> you 01:17:29.510 --> 01:17:29.520 align:start position:0% not don't waste your time because you 01:17:29.520 --> 01:17:31.750 align:start position:0% not don't waste your time because you will<01:17:29.920> be<01:17:30.040> sending<01:17:30.360> a<01:17:30.480> bunch<01:17:30.719> of<01:17:30.960> requests<01:17:31.320> for 01:17:31.750 --> 01:17:31.760 align:start position:0% will be sending a bunch of requests for 01:17:31.760 --> 01:17:33.430 align:start position:0% will be sending a bunch of requests for and<01:17:31.880> there's<01:17:32.199> there's<01:17:32.800> um<01:17:33.000> we<01:17:33.120> talked<01:17:33.320> about 01:17:33.430 --> 01:17:33.440 align:start position:0% and there's there's um we talked about 01:17:33.440 --> 01:17:34.830 align:start position:0% and there's there's um we talked about this<01:17:33.560> a<01:17:33.639> little<01:17:33.760> bit<01:17:33.920> on<01:17:34.000> the<01:17:34.159> Pod<01:17:34.520> there's 01:17:34.830 --> 01:17:34.840 align:start position:0% this a little bit on the Pod there's 01:17:34.840 --> 01:17:37.990 align:start position:0% this a little bit on the Pod there's like<01:17:35.760> indirect<01:17:36.239> method<01:17:36.560> invocation<01:17:37.440> and<01:17:37.719> like 01:17:37.990 --> 01:17:38.000 align:start position:0% like indirect method invocation and like 01:17:38.000 --> 01:17:41.830 align:start position:0% like indirect method invocation and like that<01:17:38.159> sort<01:17:38.320> of<01:17:38.560> thing<01:17:39.360> that<01:17:40.159> W<01:17:40.360> with<01:17:40.520> PHP<01:17:41.400> and 01:17:41.830 --> 01:17:41.840 align:start position:0% that sort of thing that W with PHP and 01:17:41.840 --> 01:17:44.510 align:start position:0% that sort of thing that W with PHP and there<01:17:42.120> there's<01:17:42.800> like<01:17:43.120> prototype<01:17:44.120> it's<01:17:44.280> not 01:17:44.510 --> 01:17:44.520 align:start position:0% there there's like prototype it's not 01:17:44.520 --> 01:17:46.629 align:start position:0% there there's like prototype it's not prototype<01:17:44.920> pollution<01:17:45.400> but<01:17:45.600> it<01:17:45.880> it's<01:17:46.480> a 01:17:46.629 --> 01:17:46.639 align:start position:0% prototype pollution but it it's a 01:17:46.639 --> 01:17:48.990 align:start position:0% prototype pollution but it it's a similar<01:17:47.080> concept<01:17:47.480> of<01:17:47.639> using<01:17:48.000> untrusted<01:17:48.520> input 01:17:48.990 --> 01:17:49.000 align:start position:0% similar concept of using untrusted input 01:17:49.000 --> 01:17:51.070 align:start position:0% similar concept of using untrusted input and<01:17:49.120> that<01:17:49.280> input<01:17:49.600> getting<01:17:49.840> interpreted<01:17:50.440> as<01:17:50.880> an 01:17:51.070 --> 01:17:51.080 align:start position:0% and that input getting interpreted as an 01:17:51.080 --> 01:17:52.870 align:start position:0% and that input getting interpreted as an attribute<01:17:51.480> or<01:17:51.639> a<01:17:51.800> function<01:17:52.480> in<01:17:52.639> other 01:17:52.870 --> 01:17:52.880 align:start position:0% attribute or a function in other 01:17:52.880 --> 01:17:54.990 align:start position:0% attribute or a function in other languages<01:17:53.480> but<01:17:53.639> it's<01:17:53.920> not<01:17:54.360> prototype 01:17:54.990 --> 01:17:55.000 align:start position:0% languages but it's not prototype 01:17:55.000 --> 01:17:57.149 align:start position:0% languages but it's not prototype pollution<01:17:55.639> strictly<01:17:56.560> you<01:17:56.639> can<01:17:56.760> have<01:17:56.920> some 01:17:57.149 --> 01:17:57.159 align:start position:0% pollution strictly you can have some 01:17:57.159 --> 01:17:59.189 align:start position:0% pollution strictly you can have some stuff<01:17:57.440> like<01:17:57.639> that<01:17:57.840> for<01:17:57.960> example<01:17:58.840> for<01:17:58.960> example 01:17:59.189 --> 01:17:59.199 align:start position:0% stuff like that for example for example 01:17:59.199 --> 01:18:01.229 align:start position:0% stuff like that for example for example we<01:17:59.280> have<01:17:59.679> object<01:18:00.080> passes<01:18:00.560> we<01:18:00.719> contain<01:18:01.040> some 01:18:01.229 --> 01:18:01.239 align:start position:0% we have object passes we contain some 01:18:01.239 --> 01:18:07.470 align:start position:0% we have object passes we contain some passes<01:18:01.719> like<01:18:01.880> URL<01:18:02.440> and<01:18:02.520> it<01:18:02.600> will<01:18:03.040> do<01:18:04.040> x<01:18:05.120> uh<01:18:06.120> uh 01:18:07.470 --> 01:18:07.480 align:start position:0% passes like URL and it will do x uh uh 01:18:07.480 --> 01:18:10.830 align:start position:0% passes like URL and it will do x uh uh decode<01:18:08.480> component<01:18:09.000> of<01:18:09.320> X<01:18:09.840> and<01:18:09.960> we<01:18:10.080> have<01:18:10.199> this 01:18:10.830 --> 01:18:10.840 align:start position:0% decode component of X and we have this 01:18:10.840 --> 01:18:13.990 align:start position:0% decode component of X and we have this object<01:18:11.840> and<01:18:11.960> we<01:18:12.080> send<01:18:12.360> some<01:18:12.600> data<01:18:13.040> so<01:18:13.199> if<01:18:13.360> we<01:18:13.800> do 01:18:13.990 --> 01:18:14.000 align:start position:0% object and we send some data so if we do 01:18:14.000 --> 01:18:17.430 align:start position:0% object and we send some data so if we do the<01:18:14.199> pass<01:18:14.600> of<01:18:15.360> URL<01:18:16.120> and<01:18:16.280> we 01:18:17.430 --> 01:18:17.440 align:start position:0% the pass of URL and we 01:18:17.440 --> 01:18:21.310 align:start position:0% the pass of URL and we access<01:18:18.440> uh<01:18:18.840> for<01:18:18.960> example<01:18:19.239> 41<01:18:19.719> to<01:18:19.840> get<01:18:19.960> an<01:18:20.159> A<01:18:21.159> so 01:18:21.310 --> 01:18:21.320 align:start position:0% access uh for example 41 to get an A so 01:18:21.320 --> 01:18:23.110 align:start position:0% access uh for example 41 to get an A so this<01:18:21.440> is<01:18:21.480> how<01:18:21.639> it<01:18:21.760> work<01:18:22.000> but<01:18:22.280> if<01:18:22.440> this<01:18:22.520> is<01:18:22.800> user 01:18:23.110 --> 01:18:23.120 align:start position:0% this is how it work but if this is user 01:18:23.120 --> 01:18:25.350 align:start position:0% this is how it work but if this is user control<01:18:23.520> we<01:18:23.639> can<01:18:23.960> start<01:18:24.239> to<01:18:24.440> have<01:18:24.639> like<01:18:25.159> if<01:18:25.239> you 01:18:25.350 --> 01:18:25.360 align:start position:0% control we can start to have like if you 01:18:25.360 --> 01:18:26.350 align:start position:0% control we can start to have like if you do<01:18:25.560> to 01:18:26.350 --> 01:18:26.360 align:start position:0% do to 01:18:26.360 --> 01:18:30.629 align:start position:0% do to Value<01:18:27.360> not<01:18:27.480> to<01:18:27.639> Value<01:18:28.040> but<01:18:28.239> value<01:18:28.560> of<01:18:29.560> this<01:18:30.560> it 01:18:30.629 --> 01:18:30.639 align:start position:0% Value not to Value but value of this it 01:18:30.639 --> 01:18:32.390 align:start position:0% Value not to Value but value of this it will<01:18:30.840> return<01:18:31.199> itself<01:18:31.719> so<01:18:31.840> you<01:18:31.920> can<01:18:32.080> have<01:18:32.280> like 01:18:32.390 --> 01:18:32.400 align:start position:0% will return itself so you can have like 01:18:32.400 --> 01:18:34.350 align:start position:0% will return itself so you can have like some<01:18:32.560> weird<01:18:32.840> Behavior<01:18:33.239> happening<01:18:33.639> because<01:18:34.239> at 01:18:34.350 --> 01:18:34.360 align:start position:0% some weird Behavior happening because at 01:18:34.360 --> 01:18:35.790 align:start position:0% some weird Behavior happening because at one<01:18:34.520> point<01:18:34.679> you<01:18:34.880> expecting<01:18:35.199> a<01:18:35.280> string<01:18:35.560> but<01:18:35.679> now 01:18:35.790 --> 01:18:35.800 align:start position:0% one point you expecting a string but now 01:18:35.800 --> 01:18:37.990 align:start position:0% one point you expecting a string but now it's<01:18:35.920> an<01:18:36.080> object<01:18:36.360> and<01:18:36.520> maybe<01:18:37.520> weird<01:18:37.800> stuff 01:18:37.990 --> 01:18:38.000 align:start position:0% it's an object and maybe weird stuff 01:18:38.000 --> 01:18:40.950 align:start position:0% it's an object and maybe weird stuff will<01:18:38.120> be<01:18:38.480> happening<01:18:39.480> so<01:18:39.960> this<01:18:40.080> is<01:18:40.239> why<01:18:40.760> when<01:18:40.840> I 01:18:40.950 --> 01:18:40.960 align:start position:0% will be happening so this is why when I 01:18:40.960 --> 01:18:43.430 align:start position:0% will be happening so this is why when I was<01:18:41.080> testing<01:18:41.360> earlier<01:18:41.679> with<01:18:41.760> the<01:18:41.880> buch<01:18:42.120> of<01:18:42.440> A's 01:18:43.430 --> 01:18:43.440 align:start position:0% was testing earlier with the buch of A's 01:18:43.440 --> 01:18:45.270 align:start position:0% was testing earlier with the buch of A's this<01:18:43.560> is<01:18:43.840> what<01:18:43.960> I<01:18:44.040> want<01:18:44.199> to<01:18:44.360> see<01:18:44.719> if<01:18:44.880> there<01:18:45.040> is 01:18:45.270 --> 01:18:45.280 align:start position:0% this is what I want to see if there is 01:18:45.280 --> 01:18:48.149 align:start position:0% this is what I want to see if there is somewhere<01:18:46.280> one<01:18:46.440> of<01:18:46.639> my<01:18:46.920> inputs<01:18:47.520> is<01:18:47.639> in<01:18:47.800> the<01:18:48.000> key 01:18:48.149 --> 01:18:48.159 align:start position:0% somewhere one of my inputs is in the key 01:18:48.159 --> 01:18:49.870 align:start position:0% somewhere one of my inputs is in the key of<01:18:48.239> an<01:18:48.440> object<01:18:48.840> I<01:18:48.920> want<01:18:49.040> to<01:18:49.239> dig<01:18:49.440> into<01:18:49.639> it<01:18:49.800> I 01:18:49.870 --> 01:18:49.880 align:start position:0% of an object I want to dig into it I 01:18:49.880 --> 01:18:52.629 align:start position:0% of an object I want to dig into it I want<01:18:50.040> to<01:18:50.280> look<01:18:50.440> at<01:18:50.600> the<01:18:50.719> code<01:18:51.719> but<01:18:52.280> this<01:18:52.400> tool 01:18:52.629 --> 01:18:52.639 align:start position:0% want to look at the code but this tool 01:18:52.639 --> 01:18:55.350 align:start position:0% want to look at the code but this tool Pinder<01:18:53.159> is<01:18:53.320> not<01:18:53.960> run<01:18:54.199> it<01:18:54.440> get<01:18:54.560> you<01:18:55.080> get<01:18:55.199> your 01:18:55.350 --> 01:18:55.360 align:start position:0% Pinder is not run it get you get your 01:18:55.360 --> 01:18:57.790 align:start position:0% Pinder is not run it get you get your bug<01:18:55.679> it<01:18:55.760> will<01:18:55.960> be<01:18:56.320> very<01:18:56.560> much<01:18:57.199> run<01:18:57.440> it<01:18:57.679> and 01:18:57.790 --> 01:18:57.800 align:start position:0% bug it will be very much run it and 01:18:57.800 --> 01:19:00.030 align:start position:0% bug it will be very much run it and spend<01:18:58.080> hours<01:18:58.360> in<01:18:58.600> in<01:18:58.679> a<01:18:58.800> source<01:18:59.080> code<01:18:59.719> it<01:18:59.840> will 01:19:00.030 --> 01:19:00.040 align:start position:0% spend hours in in a source code it will 01:19:00.040 --> 01:19:02.310 align:start position:0% spend hours in in a source code it will just<01:19:00.199> help<01:19:00.400> you<01:19:00.560> find<01:19:00.760> the<01:19:00.920> bugs<01:19:01.480> but<01:19:02.040> it's<01:19:02.199> not 01:19:02.310 --> 01:19:02.320 align:start position:0% just help you find the bugs but it's not 01:19:02.320 --> 01:19:05.470 align:start position:0% just help you find the bugs but it's not an<01:19:02.440> automatic<01:19:03.040> uh<01:19:03.560> introspection<01:19:04.560> yeah<01:19:04.880> yeah 01:19:05.470 --> 01:19:05.480 align:start position:0% an automatic uh introspection yeah yeah 01:19:05.480 --> 01:19:09.430 align:start position:0% an automatic uh introspection yeah yeah but<01:19:05.639> I've<01:19:05.840> tried<01:19:06.600> D<01:19:06.800> Invader<01:19:07.320> from<01:19:07.880> p<01:19:08.320> sger<01:19:09.320> and 01:19:09.430 --> 01:19:09.440 align:start position:0% but I've tried D Invader from p sger and 01:19:09.440 --> 01:19:11.189 align:start position:0% but I've tried D Invader from p sger and it<01:19:09.560> worked<01:19:09.880> very<01:19:10.080> well<01:19:10.239> for<01:19:10.440> client<01:19:10.840> side<01:19:11.080> but 01:19:11.189 --> 01:19:11.199 align:start position:0% it worked very well for client side but 01:19:11.199 --> 01:19:14.750 align:start position:0% it worked very well for client side but it's<01:19:11.400> missing<01:19:11.719> a<01:19:11.880> lot<01:19:12.040> of<01:19:12.760> uh<01:19:13.440> a<01:19:13.560> lot<01:19:13.679> of<01:19:13.840> checks 01:19:14.750 --> 01:19:14.760 align:start position:0% it's missing a lot of uh a lot of checks 01:19:14.760 --> 01:19:17.510 align:start position:0% it's missing a lot of uh a lot of checks you<01:19:14.920> can<01:19:15.639> if<01:19:15.760> the<01:19:15.880> tool<01:19:16.159> said<01:19:16.400> there<01:19:16.480> is<01:19:16.679> no<01:19:17.360> no 01:19:17.510 --> 01:19:17.520 align:start position:0% you can if the tool said there is no no 01:19:17.520 --> 01:19:18.950 align:start position:0% you can if the tool said there is no no way<01:19:17.639> to<01:19:17.800> exploit<01:19:18.120> it<01:19:18.280> there<01:19:18.360> is<01:19:18.480> still<01:19:18.639> way<01:19:18.800> to 01:19:18.950 --> 01:19:18.960 align:start position:0% way to exploit it there is still way to 01:19:18.960 --> 01:19:21.550 align:start position:0% way to exploit it there is still way to exploit<01:19:19.320> it<01:19:19.960> because<01:19:20.239> a<01:19:20.320> lot<01:19:20.440> of<01:19:20.560> the<01:19:21.320> the<01:19:21.480> the 01:19:21.550 --> 01:19:21.560 align:start position:0% exploit it because a lot of the the the 01:19:21.560 --> 01:19:23.270 align:start position:0% exploit it because a lot of the the the check<01:19:21.760> are<01:19:21.920> not<01:19:22.080> made<01:19:22.320> for<01:19:22.440> example<01:19:22.880> even<01:19:23.120> the 01:19:23.270 --> 01:19:23.280 align:start position:0% check are not made for example even the 01:19:23.280 --> 01:19:26.070 align:start position:0% check are not made for example even the simple<01:19:24.040> uh 01:19:26.070 --> 01:19:26.080 align:start position:0% simple uh 01:19:26.080 --> 01:19:27.669 align:start position:0% simple uh uh 01:19:27.669 --> 01:19:27.679 align:start position:0% uh 01:19:27.679 --> 01:19:30.910 align:start position:0% uh X<01:19:28.679> in<01:19:29.080> object<01:19:29.560> they<01:19:29.679> won't<01:19:29.920> check<01:19:30.120> for<01:19:30.360> this<01:19:30.679> so 01:19:30.910 --> 01:19:30.920 align:start position:0% X in object they won't check for this so 01:19:30.920 --> 01:19:34.950 align:start position:0% X in object they won't check for this so if<01:19:31.120> your<01:19:31.400> code<01:19:31.800> if<01:19:32.360> uh<01:19:33.360> if<01:19:33.480> your<01:19:33.679> code<01:19:33.920> is<01:19:34.159> just 01:19:34.950 --> 01:19:34.960 align:start position:0% if your code if uh if your code is just 01:19:34.960 --> 01:19:36.830 align:start position:0% if your code if uh if your code is just this 01:19:36.830 --> 01:19:36.840 align:start position:0% this 01:19:36.840 --> 01:19:40.669 align:start position:0% this uh<01:19:37.840> it<01:19:37.960> won't<01:19:38.199> find<01:19:38.440> it<01:19:38.760> like<01:19:39.239> uh<01:19:40.239> but<01:19:40.360> this<01:19:40.480> is 01:19:40.669 --> 01:19:40.679 align:start position:0% uh it won't find it like uh but this is 01:19:40.679 --> 01:19:44.550 align:start position:0% uh it won't find it like uh but this is like<01:19:40.840> the<01:19:41.000> perfect<01:19:41.760> Gadget<01:19:43.000> yeah<01:19:44.000> so<01:19:44.239> don't 01:19:44.550 --> 01:19:44.560 align:start position:0% like the perfect Gadget yeah so don't 01:19:44.560 --> 01:19:45.910 align:start position:0% like the perfect Gadget yeah so don't rely<01:19:44.880> too<01:19:45.000> much<01:19:45.120> on<01:19:45.199> your<01:19:45.320> tools<01:19:45.639> because<01:19:45.800> they 01:19:45.910 --> 01:19:45.920 align:start position:0% rely too much on your tools because they 01:19:45.920 --> 01:19:47.750 align:start position:0% rely too much on your tools because they can<01:19:46.120> lie<01:19:46.320> to<01:19:46.440> you<01:19:46.880> like<01:19:47.000> I<01:19:47.159> said<01:19:47.320> even<01:19:47.520> TP 01:19:47.750 --> 01:19:47.760 align:start position:0% can lie to you like I said even TP 01:19:47.760 --> 01:19:50.629 align:start position:0% can lie to you like I said even TP finder<01:19:48.080> doesn't<01:19:48.320> support<01:19:48.600> the<01:19:48.760> we<01:19:49.400> Syntax<01:19:50.400> for 01:19:50.629 --> 01:19:50.639 align:start position:0% finder doesn't support the we Syntax for 01:19:50.639 --> 01:19:52.550 align:start position:0% finder doesn't support the we Syntax for those<01:19:50.880> we<01:19:51.000> don't<01:19:51.159> know<01:19:51.320> the<01:19:51.480> W<01:19:51.679> syntax<01:19:52.040> is<01:19:52.239> very 01:19:52.550 --> 01:19:52.560 align:start position:0% those we don't know the W syntax is very 01:19:52.560 --> 01:19:55.550 align:start position:0% those we don't know the W syntax is very cast<01:19:53.560> how<01:19:53.719> did<01:19:53.880> you<01:19:54.199> how<01:19:54.320> did<01:19:54.480> you 01:19:55.550 --> 01:19:55.560 align:start position:0% cast how did you how did you 01:19:55.560 --> 01:19:56.990 align:start position:0% cast how did you how did you hook<01:19:55.880> the<01:19:56.080> in 01:19:56.990 --> 01:19:57.000 align:start position:0% hook the in 01:19:57.000 --> 01:20:00.350 align:start position:0% hook the in syntax<01:19:58.000> the<01:19:58.159> in<01:19:58.639> with<01:19:59.320> uh<01:19:59.719> no<01:20:00.040> because<01:20:00.199> I 01:20:00.350 --> 01:20:00.360 align:start position:0% syntax the in with uh no because I 01:20:00.360 --> 01:20:02.910 align:start position:0% syntax the in with uh no because I modified<01:20:00.719> the<01:20:00.880> code<01:20:01.280> I<01:20:01.440> just<01:20:01.639> replace<01:20:02.480> uh<01:20:02.800> I 01:20:02.910 --> 01:20:02.920 align:start position:0% modified the code I just replace uh I 01:20:02.920 --> 01:20:04.830 align:start position:0% modified the code I just replace uh I just<01:20:03.040> replaced<01:20:03.360> your<01:20:03.480> source<01:20:03.760> code<01:20:04.560> if<01:20:04.679> you 01:20:04.830 --> 01:20:04.840 align:start position:0% just replaced your source code if you 01:20:04.840 --> 01:20:09.110 align:start position:0% just replaced your source code if you looked<01:20:05.440> earlier<01:20:06.440> ah<01:20:07.239> okay<01:20:08.000> the<01:20:08.159> output<01:20:08.920> yeah 01:20:09.110 --> 01:20:09.120 align:start position:0% looked earlier ah okay the output yeah 01:20:09.120 --> 01:20:10.990 align:start position:0% looked earlier ah okay the output yeah but<01:20:09.280> here<01:20:09.400> is<01:20:09.520> the<01:20:09.639> code<01:20:09.840> from<01:20:09.960> PP<01:20:10.199> finder<01:20:10.760> so<01:20:10.920> I 01:20:10.990 --> 01:20:11.000 align:start position:0% but here is the code from PP finder so I 01:20:11.000 --> 01:20:13.110 align:start position:0% but here is the code from PP finder so I have<01:20:11.159> all<01:20:11.280> the<01:20:11.440> kind<01:20:11.600> of<01:20:12.040> uh<01:20:12.280> thing<01:20:12.440> I<01:20:12.560> want<01:20:12.719> to 01:20:13.110 --> 01:20:13.120 align:start position:0% have all the kind of uh thing I want to 01:20:13.120 --> 01:20:16.350 align:start position:0% have all the kind of uh thing I want to to<01:20:13.520> ook<01:20:14.520> right<01:20:14.880> so<01:20:15.040> for<01:20:15.199> example<01:20:15.600> let's<01:20:15.840> do<01:20:16.120> the 01:20:16.350 --> 01:20:16.360 align:start position:0% to ook right so for example let's do the 01:20:16.360 --> 01:20:18.310 align:start position:0% to ook right so for example let's do the element<01:20:16.800> access<01:20:17.400> yeah<01:20:17.520> in<01:20:17.760> expression<01:20:18.159> down 01:20:18.310 --> 01:20:18.320 align:start position:0% element access yeah in expression down 01:20:18.320 --> 01:20:19.790 align:start position:0% element access yeah in expression down at<01:20:18.440> the<01:20:18.520> bottom<01:20:18.800> there<01:20:18.960> too<01:20:19.239> okay<01:20:19.480> so<01:20:19.679> every 01:20:19.790 --> 01:20:19.800 align:start position:0% at the bottom there too okay so every 01:20:19.800 --> 01:20:21.270 align:start position:0% at the bottom there too okay so every time<01:20:19.920> there's<01:20:20.199> element<01:20:20.520> access<01:20:20.840> I<01:20:21.000> look<01:20:21.159> if 01:20:21.270 --> 01:20:21.280 align:start position:0% time there's element access I look if 01:20:21.280 --> 01:20:24.229 align:start position:0% time there's element access I look if it's<01:20:21.400> anation<01:20:22.360> because<01:20:22.719> if<01:20:22.880> it's<01:20:23.520> XY<01:20:23.960> equal 01:20:24.229 --> 01:20:24.239 align:start position:0% it's anation because if it's XY equal 01:20:24.239 --> 01:20:25.750 align:start position:0% it's anation because if it's XY equal something<01:20:24.800> want<01:20:24.920> to<01:20:25.040> see<01:20:25.199> it<01:20:25.400> because<01:20:25.560> this<01:20:25.639> is 01:20:25.750 --> 01:20:25.760 align:start position:0% something want to see it because this is 01:20:25.760 --> 01:20:28.310 align:start position:0% something want to see it because this is not<01:20:26.199> potion<01:20:26.920> right<01:20:27.400> so<01:20:27.520> I<01:20:27.679> first<01:20:27.880> check<01:20:28.120> for 01:20:28.310 --> 01:20:28.320 align:start position:0% not potion right so I first check for 01:20:28.320 --> 01:20:30.669 align:start position:0% not potion right so I first check for that<01:20:29.000> after<01:20:29.320> that<01:20:29.639> I<01:20:29.760> check<01:20:29.960> for<01:20:30.120> the<01:20:30.239> super 01:20:30.669 --> 01:20:30.679 align:start position:0% that after that I check for the super 01:20:30.679 --> 01:20:32.910 align:start position:0% that after that I check for the super keyword<01:20:31.679> because<01:20:31.880> if<01:20:31.960> you<01:20:32.120> do<01:20:32.480> stuff<01:20:32.760> with 01:20:32.910 --> 01:20:32.920 align:start position:0% keyword because if you do stuff with 01:20:32.920 --> 01:20:34.550 align:start position:0% keyword because if you do stuff with super<01:20:33.280> with<01:20:33.440> class<01:20:33.639> inheritance<01:20:34.239> everything 01:20:34.550 --> 01:20:34.560 align:start position:0% super with class inheritance everything 01:20:34.560 --> 01:20:36.790 align:start position:0% super with class inheritance everything break<01:20:34.960> great<01:20:35.199> easily<01:20:35.560> and<01:20:35.679> I<01:20:35.920> say<01:20:36.199> okay<01:20:36.400> just 01:20:36.790 --> 01:20:36.800 align:start position:0% break great easily and I say okay just 01:20:36.800 --> 01:20:38.470 align:start position:0% break great easily and I say okay just just<01:20:37.159> remove 01:20:38.470 --> 01:20:38.480 align:start position:0% just remove 01:20:38.480 --> 01:20:40.870 align:start position:0% just remove that<01:20:39.480> I<01:20:39.600> look<01:20:39.800> if<01:20:39.920> it's<01:20:40.159> an<01:20:40.320> expression<01:20:40.719> or 01:20:40.870 --> 01:20:40.880 align:start position:0% that I look if it's an expression or 01:20:40.880 --> 01:20:42.550 align:start position:0% that I look if it's an expression or something<01:20:41.280> and<01:20:41.440> if<01:20:41.560> it's<01:20:41.960> uh<01:20:42.159> something<01:20:42.440> I 01:20:42.550 --> 01:20:42.560 align:start position:0% something and if it's uh something I 01:20:42.560 --> 01:20:45.030 align:start position:0% something and if it's uh something I want<01:20:42.880> I<01:20:42.960> will<01:20:43.199> replace<01:20:43.560> the<01:20:43.719> code<01:20:44.000> with<01:20:44.159> my<01:20:44.360> new 01:20:45.030 --> 01:20:45.040 align:start position:0% want I will replace the code with my new 01:20:45.040 --> 01:20:48.310 align:start position:0% want I will replace the code with my new uh<01:20:45.520> tree<01:20:46.520> okay<01:20:46.920> got<01:20:47.159> so<01:20:47.280> here<01:20:47.360> I<01:20:47.560> create<01:20:47.760> a<01:20:47.920> call 01:20:48.310 --> 01:20:48.320 align:start position:0% uh tree okay got so here I create a call 01:20:48.320 --> 01:20:50.669 align:start position:0% uh tree okay got so here I create a call so<01:20:49.080> I<01:20:49.159> don't<01:20:49.400> remember<01:20:49.840> what<01:20:50.120> the<01:20:50.320> code<01:20:50.520> is 01:20:50.669 --> 01:20:50.679 align:start position:0% so I don't remember what the code is 01:20:50.679 --> 01:20:53.350 align:start position:0% so I don't remember what the code is actually 01:20:53.350 --> 01:20:53.360 align:start position:0% 01:20:53.360 --> 01:20:57.350 align:start position:0% but<01:20:54.360> uh<01:20:54.920> create<01:20:55.239> ppf<01:20:55.679> Cod<01:20:56.000> it<01:20:56.120> will<01:20:56.400> just<01:20:56.920> uh 01:20:57.350 --> 01:20:57.360 align:start position:0% but uh create ppf Cod it will just uh 01:20:57.360 --> 01:20:59.110 align:start position:0% but uh create ppf Cod it will just uh create<01:20:57.639> new<01:20:57.800> decoration<01:20:58.360> create<01:20:58.639> variable 01:20:59.110 --> 01:20:59.120 align:start position:0% create new decoration create variable 01:20:59.120 --> 01:21:01.990 align:start position:0% create new decoration create variable and<01:20:59.560> it<01:20:59.679> will<01:20:59.840> ook<01:21:00.159> everything<01:21:01.040> for 01:21:01.990 --> 01:21:02.000 align:start position:0% and it will ook everything for 01:21:02.000 --> 01:21:04.149 align:start position:0% and it will ook everything for you<01:21:03.000> and<01:21:03.120> I<01:21:03.239> do<01:21:03.400> this<01:21:03.560> for<01:21:03.679> a<01:21:03.800> bunch<01:21:04.000> of 01:21:04.149 --> 01:21:04.159 align:start position:0% you and I do this for a bunch of 01:21:04.159 --> 01:21:07.070 align:start position:0% you and I do this for a bunch of different<01:21:04.440> Syntax<01:21:04.960> for<01:21:05.159> for<01:21:05.320> the<01:21:05.760> in<01:21:06.760> I<01:21:06.880> look 01:21:07.070 --> 01:21:07.080 align:start position:0% different Syntax for for the in I look 01:21:07.080 --> 01:21:09.510 align:start position:0% different Syntax for for the in I look if<01:21:07.239> it's<01:21:07.480> actually<01:21:07.880> a<01:21:08.159> binary<01:21:08.520> expression<01:21:09.280> and 01:21:09.510 --> 01:21:09.520 align:start position:0% if it's actually a binary expression and 01:21:09.520 --> 01:21:12.830 align:start position:0% if it's actually a binary expression and if<01:21:09.639> it's<01:21:09.880> actually<01:21:10.320> a<01:21:10.679> in<01:21:11.239> B<01:21:11.600> expression<01:21:12.560> and<01:21:12.679> I 01:21:12.830 --> 01:21:12.840 align:start position:0% if it's actually a in B expression and I 01:21:12.840 --> 01:21:15.390 align:start position:0% if it's actually a in B expression and I replace<01:21:13.239> it<01:21:13.400> with<01:21:13.560> a<01:21:13.679> call<01:21:13.960> to<01:21:14.120> PP<01:21:14.400> finder<01:21:14.880> so 01:21:15.390 --> 01:21:15.400 align:start position:0% replace it with a call to PP finder so 01:21:15.400 --> 01:21:17.229 align:start position:0% replace it with a call to PP finder so in<01:21:15.560> the<01:21:15.679> output<01:21:16.120> we<01:21:16.239> will<01:21:16.480> have<01:21:16.679> something 01:21:17.229 --> 01:21:17.239 align:start position:0% in the output we will have something 01:21:17.239 --> 01:21:22.550 align:start position:0% in the output we will have something like<01:21:17.960> uh<01:21:18.960> o.<01:21:19.840> iny<01:21:20.840> dox<01:21:21.760> and<01:21:21.880> it<01:21:21.960> will<01:21:22.320> return 01:21:22.550 --> 01:21:22.560 align:start position:0% like uh o. iny dox and it will return 01:21:22.560 --> 01:21:24.350 align:start position:0% like uh o. iny dox and it will return the<01:21:22.679> same<01:21:23.120> the<01:21:23.280> same<01:21:23.480> thing<01:21:23.840> but<01:21:23.960> I<01:21:24.040> will<01:21:24.199> check 01:21:24.350 --> 01:21:24.360 align:start position:0% the same the same thing but I will check 01:21:24.360 --> 01:21:26.790 align:start position:0% the same the same thing but I will check it<01:21:24.639> before<01:21:24.920> and<01:21:25.199> return<01:21:25.400> the<01:21:25.480> value<01:21:25.719> you<01:21:25.800> are 01:21:26.790 --> 01:21:26.800 align:start position:0% it before and return the value you are 01:21:26.800 --> 01:21:28.950 align:start position:0% it before and return the value you are expecting<01:21:27.800> gotcha<01:21:28.280> that<01:21:28.400> makes<01:21:28.600> a<01:21:28.719> lot<01:21:28.840> of 01:21:28.950 --> 01:21:28.960 align:start position:0% expecting gotcha that makes a lot of 01:21:28.960 --> 01:21:31.950 align:start position:0% expecting gotcha that makes a lot of sense<01:21:29.440> that's<01:21:29.800> great<01:21:30.800> very<01:21:31.040> cool<01:21:31.760> and<01:21:31.880> there 01:21:31.950 --> 01:21:31.960 align:start position:0% sense that's great very cool and there 01:21:31.960 --> 01:21:34.149 align:start position:0% sense that's great very cool and there is<01:21:32.080> a<01:21:32.400> bunch<01:21:32.719> of<01:21:32.920> weird<01:21:33.159> stuff<01:21:33.639> it<01:21:33.719> was<01:21:33.840> a<01:21:34.000> pain 01:21:34.149 --> 01:21:34.159 align:start position:0% is a bunch of weird stuff it was a pain 01:21:34.159 --> 01:21:37.629 align:start position:0% is a bunch of weird stuff it was a pain to<01:21:34.280> make<01:21:34.400> it<01:21:34.600> work<01:21:35.199> because<01:21:36.199> uh<01:21:36.360> in 01:21:37.629 --> 01:21:37.639 align:start position:0% to make it work because uh in 01:21:37.639 --> 01:21:39.629 align:start position:0% to make it work because uh in JavaScript<01:21:38.639> sometimes<01:21:38.840> the<01:21:39.000> function<01:21:39.440> if 01:21:39.629 --> 01:21:39.639 align:start position:0% JavaScript sometimes the function if 01:21:39.639 --> 01:21:40.910 align:start position:0% JavaScript sometimes the function if there<01:21:39.880> if<01:21:39.960> you<01:21:40.120> copy<01:21:40.320> a<01:21:40.440> function<01:21:40.760> from 01:21:40.910 --> 01:21:40.920 align:start position:0% there if you copy a function from 01:21:40.920 --> 01:21:42.950 align:start position:0% there if you copy a function from somewhere<01:21:41.239> you<01:21:41.360> cannot<01:21:41.600> use<01:21:41.800> it<01:21:41.960> anymore 01:21:42.950 --> 01:21:42.960 align:start position:0% somewhere you cannot use it anymore 01:21:42.960 --> 01:21:47.990 align:start position:0% somewhere you cannot use it anymore like<01:21:43.960> if<01:21:44.080> I<01:21:44.239> do<01:21:44.679> cons<01:21:45.679> s<01:21:46.040> equal<01:21:46.560> for<01:21:46.960> string<01:21:47.880> and 01:21:47.990 --> 01:21:48.000 align:start position:0% like if I do cons s equal for string and 01:21:48.000 --> 01:21:55.430 align:start position:0% like if I do cons s equal for string and I<01:21:48.159> do<01:21:48.760> s.<01:21:50.159> uppercase<01:21:51.159> uh<01:21:51.239> two<01:21:51.480> uppercase 01:21:55.430 --> 01:21:55.440 align:start position:0% 01:21:55.440 --> 01:21:58.229 align:start position:0% I<01:21:55.560> can<01:21:55.719> use<01:21:55.920> it<01:21:56.400> but<01:21:56.840> I<01:21:56.960> can<01:21:57.199> think<01:21:57.679> I<01:21:57.760> can<01:21:57.920> store 01:21:58.229 --> 01:21:58.239 align:start position:0% I can use it but I can think I can store 01:21:58.239 --> 01:22:00.110 align:start position:0% I can use it but I can think I can store it<01:21:58.400> somewhere<01:21:58.840> and<01:21:59.000> use<01:21:59.159> it<01:21:59.400> there<01:21:59.840> but<01:22:00.000> here 01:22:00.110 --> 01:22:00.120 align:start position:0% it somewhere and use it there but here 01:22:00.120 --> 01:22:01.550 align:start position:0% it somewhere and use it there but here I'm<01:22:00.199> not<01:22:00.320> able<01:22:00.520> to<01:22:00.600> use<01:22:00.760> it<01:22:00.880> anymore<01:22:01.280> because 01:22:01.550 --> 01:22:01.560 align:start position:0% I'm not able to use it anymore because 01:22:01.560 --> 01:22:04.669 align:start position:0% I'm not able to use it anymore because the<01:22:01.760> Z<01:22:02.080> is<01:22:02.280> not<01:22:02.600> linked<01:22:03.000> to<01:22:03.360> the<01:22:03.520> F<01:22:03.840> anymore<01:22:04.480> to 01:22:04.669 --> 01:22:04.679 align:start position:0% the Z is not linked to the F anymore to 01:22:04.679 --> 01:22:06.870 align:start position:0% the Z is not linked to the F anymore to the<01:22:04.880> string<01:22:05.280> anymore<01:22:05.880> so<01:22:06.080> it<01:22:06.239> break<01:22:06.600> and<01:22:06.760> we 01:22:06.870 --> 01:22:06.880 align:start position:0% the string anymore so it break and we 01:22:06.880 --> 01:22:08.390 align:start position:0% the string anymore so it break and we had<01:22:07.000> a<01:22:07.120> lot<01:22:07.239> of<01:22:07.320> error<01:22:07.679> like<01:22:07.800> that<01:22:07.920> in<01:22:08.080> PP 01:22:08.390 --> 01:22:08.400 align:start position:0% had a lot of error like that in PP 01:22:08.400 --> 01:22:10.590 align:start position:0% had a lot of error like that in PP finder<01:22:09.400> so<01:22:09.600> it's<01:22:09.840> what<01:22:09.960> a<01:22:10.040> lot<01:22:10.159> of<01:22:10.239> Trail<01:22:10.440> and 01:22:10.590 --> 01:22:10.600 align:start position:0% finder so it's what a lot of Trail and 01:22:10.600 --> 01:22:11.990 align:start position:0% finder so it's what a lot of Trail and error<01:22:10.880> to<01:22:11.000> find<01:22:11.199> something<01:22:11.480> that<01:22:11.679> actually 01:22:11.990 --> 01:22:12.000 align:start position:0% error to find something that actually 01:22:12.000 --> 01:22:14.390 align:start position:0% error to find something that actually work<01:22:12.880> but<01:22:13.040> I<01:22:13.120> show<01:22:13.360> you<01:22:13.800> the<01:22:13.920> payload<01:22:14.280> with 01:22:14.390 --> 01:22:14.400 align:start position:0% work but I show you the payload with 01:22:14.400 --> 01:22:16.590 align:start position:0% work but I show you the payload with nextjs<01:22:15.120> and<01:22:15.280> I'm<01:22:15.520> actually<01:22:15.760> able<01:22:15.960> to<01:22:16.199> run<01:22:16.440> to 01:22:16.590 --> 01:22:16.600 align:start position:0% nextjs and I'm actually able to run to 01:22:16.600 --> 01:22:18.910 align:start position:0% nextjs and I'm actually able to run to run<01:22:17.080> the<01:22:17.199> full<01:22:17.480> next<01:22:17.840> Frameworks<01:22:18.360> inside<01:22:18.679> PP 01:22:18.910 --> 01:22:18.920 align:start position:0% run the full next Frameworks inside PP 01:22:18.920 --> 01:22:21.830 align:start position:0% run the full next Frameworks inside PP finder<01:22:19.320> and<01:22:19.480> it<01:22:19.679> just<01:22:19.920> work<01:22:20.520> there's<01:22:20.840> nothing 01:22:21.830 --> 01:22:21.840 align:start position:0% finder and it just work there's nothing 01:22:21.840 --> 01:22:24.310 align:start position:0% finder and it just work there's nothing it<01:22:22.040> just<01:22:22.440> it's<01:22:22.600> slow<01:22:23.280> it's<01:22:23.400> slower<01:22:24.000> but<01:22:24.159> it 01:22:24.310 --> 01:22:24.320 align:start position:0% it just it's slow it's slower but it 01:22:24.320 --> 01:22:25.629 align:start position:0% it just it's slow it's slower but it it's<01:22:24.600> work<01:22:24.800> and<01:22:24.880> you<01:22:25.000> can<01:22:25.120> see<01:22:25.320> everything 01:22:25.629 --> 01:22:25.639 align:start position:0% it's work and you can see everything 01:22:25.639 --> 01:22:27.990 align:start position:0% it's work and you can see everything happening<01:22:26.600> and<01:22:26.760> in<01:22:26.840> the<01:22:27.000> framework<01:22:27.480> this<01:22:27.679> size 01:22:27.990 --> 01:22:28.000 align:start position:0% happening and in the framework this size 01:22:28.000 --> 01:22:30.910 align:start position:0% happening and in the framework this size there<01:22:28.360> is<01:22:29.360> lots<01:22:29.639> and<01:22:29.880> lots<01:22:30.040> of<01:22:30.560> stuff<01:22:30.719> to<01:22:30.840> look 01:22:30.910 --> 01:22:30.920 align:start position:0% there is lots and lots of stuff to look 01:22:30.920 --> 01:22:33.350 align:start position:0% there is lots and lots of stuff to look for<01:22:31.239> massive<01:22:31.960> yeah<01:22:32.560> so<01:22:32.719> this<01:22:32.800> is<01:22:32.920> a<01:22:33.120> really 01:22:33.350 --> 01:22:33.360 align:start position:0% for massive yeah so this is a really 01:22:33.360 --> 01:22:36.510 align:start position:0% for massive yeah so this is a really good<01:22:33.880> um<01:22:34.040> zero<01:22:34.400> day<01:22:34.600> research<01:22:35.000> tool<01:22:35.560> um<01:22:35.960> in<01:22:36.360> in 01:22:36.510 --> 01:22:36.520 align:start position:0% good um zero day research tool um in in 01:22:36.520 --> 01:22:39.350 align:start position:0% good um zero day research tool um in in JavaScript<01:22:36.960> Frameworks<01:22:37.840> okay<01:22:38.120> very<01:22:38.360> cool<01:22:39.199> um 01:22:39.350 --> 01:22:39.360 align:start position:0% JavaScript Frameworks okay very cool um 01:22:39.360 --> 01:22:41.790 align:start position:0% JavaScript Frameworks okay very cool um we<01:22:39.480> got<01:22:39.600> a<01:22:39.719> couple<01:22:40.000> questions<01:22:40.719> first<01:22:40.960> one<01:22:41.600> uh 01:22:41.790 --> 01:22:41.800 align:start position:0% we got a couple questions first one uh 01:22:41.800 --> 01:22:44.510 align:start position:0% we got a couple questions first one uh type<01:22:42.159> asked<01:22:42.880> with<01:22:43.040> a<01:22:43.159> little<01:22:43.360> bit<01:22:43.480> of<01:22:43.600> tweaking 01:22:44.510 --> 01:22:44.520 align:start position:0% type asked with a little bit of tweaking 01:22:44.520 --> 01:22:46.629 align:start position:0% type asked with a little bit of tweaking can<01:22:44.679> I<01:22:44.880> use<01:22:45.120> PP<01:22:45.480> finder<01:22:45.760> for<01:22:45.880> the<01:22:46.000> front<01:22:46.199> end 01:22:46.629 --> 01:22:46.639 align:start position:0% can I use PP finder for the front end 01:22:46.639 --> 01:22:48.390 align:start position:0% can I use PP finder for the front end for<01:22:46.800> front<01:22:46.960> end<01:22:47.120> source<01:22:47.360> code<01:22:47.560> as<01:22:47.679> well<01:22:48.239> yeah 01:22:48.390 --> 01:22:48.400 align:start position:0% for front end source code as well yeah 01:22:48.400 --> 01:22:50.470 align:start position:0% for front end source code as well yeah you<01:22:48.560> can<01:22:48.719> use<01:22:48.960> it<01:22:49.520> uh<01:22:49.679> like<01:22:49.800> I<01:22:49.920> said<01:22:50.080> if<01:22:50.159> you<01:22:50.280> do 01:22:50.470 --> 01:22:50.480 align:start position:0% you can use it uh like I said if you do 01:22:50.480 --> 01:22:53.149 align:start position:0% you can use it uh like I said if you do like<01:22:50.920> um<01:22:51.920> you<01:22:52.199> I<01:22:52.280> know<01:22:52.400> you<01:22:52.480> are<01:22:52.600> a<01:22:52.679> big<01:22:52.840> kaido 01:22:53.149 --> 01:22:53.159 align:start position:0% like um you I know you are a big kaido 01:22:53.159 --> 01:22:55.430 align:start position:0% like um you I know you are a big kaido user<01:22:53.480> over<01:22:53.679> there<01:22:53.960> but<01:22:54.080> if<01:22:54.159> you<01:22:54.280> do<01:22:54.880> um<01:22:55.239> what 01:22:55.430 --> 01:22:55.440 align:start position:0% user over there but if you do um what 01:22:55.440 --> 01:22:58.270 align:start position:0% user over there but if you do um what what's<01:22:55.600> it<01:22:55.760> called<01:22:56.360> uh<01:22:56.840> workflows<01:22:57.679> a<01:22:57.800> workflow 01:22:58.270 --> 01:22:58.280 align:start position:0% what's it called uh workflows a workflow 01:22:58.280 --> 01:23:01.270 align:start position:0% what's it called uh workflows a workflow we<01:22:58.400> can<01:22:58.600> just<01:22:59.280> hook<01:22:59.520> all<01:22:59.800> the<01:23:00.480> GS<01:23:00.840> code<01:23:01.080> and 01:23:01.270 --> 01:23:01.280 align:start position:0% we can just hook all the GS code and 01:23:01.280 --> 01:23:04.070 align:start position:0% we can just hook all the GS code and pass<01:23:01.400> it<01:23:01.480> to<01:23:02.080> Pinder<01:23:03.080> and<01:23:03.400> get<01:23:03.520> the<01:23:03.639> output<01:23:03.960> so 01:23:04.070 --> 01:23:04.080 align:start position:0% pass it to Pinder and get the output so 01:23:04.080 --> 01:23:06.910 align:start position:0% pass it to Pinder and get the output so this<01:23:04.199> will<01:23:04.400> work<01:23:04.840> fine<01:23:05.840> out<01:23:05.960> of<01:23:06.120> the<01:23:06.280> box<01:23:06.600> just 01:23:06.910 --> 01:23:06.920 align:start position:0% this will work fine out of the box just 01:23:06.920 --> 01:23:10.870 align:start position:0% this will work fine out of the box just don't<01:23:07.120> forget<01:23:07.400> to<01:23:07.600> put<01:23:08.120> the<01:23:09.120> agent 01:23:10.870 --> 01:23:10.880 align:start position:0% don't forget to put the agent 01:23:10.880 --> 01:23:13.629 align:start position:0% don't forget to put the agent browser<01:23:11.880> okay<01:23:12.280> when<01:23:12.400> you<01:23:12.520> are<01:23:12.639> compiling<01:23:13.520> but 01:23:13.629 --> 01:23:13.639 align:start position:0% browser okay when you are compiling but 01:23:13.639 --> 01:23:15.750 align:start position:0% browser okay when you are compiling but you<01:23:13.719> can<01:23:13.880> look<01:23:14.040> at<01:23:14.159> the<01:23:14.320> documentation<01:23:14.800> on<01:23:14.920> the 01:23:15.750 --> 01:23:15.760 align:start position:0% you can look at the documentation on the 01:23:15.760 --> 01:23:18.590 align:start position:0% you can look at the documentation on the GitHub<01:23:16.760> and<01:23:17.080> it<01:23:17.199> should<01:23:17.520> work<01:23:17.880> but<01:23:18.120> if<01:23:18.199> you<01:23:18.320> do 01:23:18.590 --> 01:23:18.600 align:start position:0% GitHub and it should work but if you do 01:23:18.600 --> 01:23:20.149 align:start position:0% GitHub and it should work but if you do that<01:23:18.760> you<01:23:18.840> are<01:23:19.040> going<01:23:19.120> to<01:23:19.520> you<01:23:19.600> are<01:23:19.760> going<01:23:19.920> to 01:23:20.149 --> 01:23:20.159 align:start position:0% that you are going to you are going to 01:23:20.159 --> 01:23:23.510 align:start position:0% that you are going to you are going to miss<01:23:21.159> um<01:23:21.840> the<01:23:22.000> code<01:23:22.199> inside<01:23:22.480> script<01:23:22.800> tags 01:23:23.510 --> 01:23:23.520 align:start position:0% miss um the code inside script tags 01:23:23.520 --> 01:23:25.149 align:start position:0% miss um the code inside script tags because<01:23:23.719> you<01:23:23.840> will<01:23:23.960> need<01:23:24.080> to<01:23:24.280> pass<01:23:24.600> the<01:23:24.679> script 01:23:25.149 --> 01:23:25.159 align:start position:0% because you will need to pass the script 01:23:25.159 --> 01:23:27.870 align:start position:0% because you will need to pass the script the<01:23:25.239> HTML<01:23:25.639> to<01:23:25.760> do<01:23:25.960> that<01:23:26.880> and<01:23:27.280> also<01:23:27.560> right<01:23:27.679> now 01:23:27.870 --> 01:23:27.880 align:start position:0% the HTML to do that and also right now 01:23:27.880 --> 01:23:31.910 align:start position:0% the HTML to do that and also right now PP<01:23:28.080> finder<01:23:28.440> doesn't<01:23:28.760> support<01:23:30.120> um<01:23:31.120> eval<01:23:31.639> and 01:23:31.910 --> 01:23:31.920 align:start position:0% PP finder doesn't support um eval and 01:23:31.920 --> 01:23:34.510 align:start position:0% PP finder doesn't support um eval and function<01:23:32.560> you<01:23:32.639> are<01:23:32.800> not<01:23:32.960> allowed<01:23:33.280> to<01:23:34.280> I<01:23:34.360> don't 01:23:34.510 --> 01:23:34.520 align:start position:0% function you are not allowed to I don't 01:23:34.520 --> 01:23:39.470 align:start position:0% function you are not allowed to I don't do<01:23:34.679> the<01:23:34.800> recursive<01:23:35.600> uh<01:23:35.760> hooking<01:23:36.480> inside<01:23:36.960> eval 01:23:39.470 --> 01:23:39.480 align:start position:0% 01:23:39.480 --> 01:23:43.030 align:start position:0% function<01:23:40.480> okay<01:23:41.400> that<01:23:41.520> makes<01:23:41.760> sense<01:23:42.679> and<01:23:42.920> there 01:23:43.030 --> 01:23:43.040 align:start position:0% function okay that makes sense and there 01:23:43.040 --> 01:23:45.229 align:start position:0% function okay that makes sense and there is<01:23:43.960> so<01:23:44.120> there<01:23:44.199> is<01:23:44.320> the<01:23:44.440> GitHub<01:23:44.800> thanks<01:23:44.960> for<01:23:45.120> the 01:23:45.229 --> 01:23:45.239 align:start position:0% is so there is the GitHub thanks for the 01:23:45.239 --> 01:23:47.470 align:start position:0% is so there is the GitHub thanks for the link<01:23:45.880> and<01:23:46.159> you<01:23:46.239> can<01:23:46.440> find<01:23:46.600> also<01:23:46.760> on<01:23:46.880> the<01:23:47.000> yes 01:23:47.470 --> 01:23:47.480 align:start position:0% link and you can find also on the yes 01:23:47.480 --> 01:23:49.110 align:start position:0% link and you can find also on the yes blog<01:23:47.760> if<01:23:47.840> you<01:23:47.960> search<01:23:48.159> for<01:23:48.320> PP<01:23:48.600> finder<01:23:49.040> there 01:23:49.110 --> 01:23:49.120 align:start position:0% blog if you search for PP finder there 01:23:49.120 --> 01:23:52.470 align:start position:0% blog if you search for PP finder there is<01:23:49.560> uh<01:23:49.719> all<01:23:49.880> the<01:23:50.080> payloads<01:23:50.760> I've 01:23:52.470 --> 01:23:52.480 align:start position:0% is uh all the payloads I've 01:23:52.480 --> 01:23:54.629 align:start position:0% is uh all the payloads I've shown<01:23:53.480> uh<01:23:53.719> yeah<01:23:53.880> there<01:23:53.960> is<01:23:54.040> all<01:23:54.120> the<01:23:54.199> payload 01:23:54.629 --> 01:23:54.639 align:start position:0% shown uh yeah there is all the payload 01:23:54.639 --> 01:23:58.110 align:start position:0% shown uh yeah there is all the payload and<01:23:54.719> if<01:23:54.840> you<01:23:55.040> go<01:23:55.320> to<01:23:56.080> pp.<01:23:56.719> ba.<01:23:57.159> TK<01:23:57.679> there<01:23:57.800> is<01:23:57.960> the 01:23:58.110 --> 01:23:58.120 align:start position:0% and if you go to pp. ba. TK there is the 01:23:58.120 --> 01:24:00.990 align:start position:0% and if you go to pp. ba. TK there is the slide<01:23:58.520> i'<01:23:58.920> I've<01:23:59.080> done<01:23:59.239> in<01:23:59.520> 2003<01:24:00.360> it's<01:24:00.679> almost 01:24:00.990 --> 01:24:01.000 align:start position:0% slide i' I've done in 2003 it's almost 01:24:01.000 --> 01:24:04.750 align:start position:0% slide i' I've done in 2003 it's almost the<01:24:01.080> same<01:24:01.320> but<01:24:01.480> I<01:24:01.560> think<01:24:01.800> some<01:24:02.400> colors<01:24:02.719> are 01:24:04.750 --> 01:24:04.760 align:start position:0% the same but I think some colors are 01:24:04.760 --> 01:24:07.430 align:start position:0% the same but I think some colors are broken<01:24:05.760> yeah<01:24:06.719> and<01:24:06.840> you<01:24:06.920> can<01:24:07.120> look<01:24:07.239> at<01:24:07.360> the 01:24:07.430 --> 01:24:07.440 align:start position:0% broken yeah and you can look at the 01:24:07.440 --> 01:24:09.270 align:start position:0% broken yeah and you can look at the source<01:24:07.719> code<01:24:07.920> if<01:24:08.080> you<01:24:08.480> if<01:24:08.560> you<01:24:08.679> want<01:24:08.840> to<01:24:09.159> but 01:24:09.270 --> 01:24:09.280 align:start position:0% source code if you if you want to but 01:24:09.280 --> 01:24:11.470 align:start position:0% source code if you if you want to but it's 01:24:11.470 --> 01:24:11.480 align:start position:0% it's 01:24:11.480 --> 01:24:14.350 align:start position:0% it's minified<01:24:12.480> yeah<01:24:12.679> dude<01:24:13.360> this<01:24:13.639> uh<01:24:13.800> we<01:24:13.920> definitely 01:24:14.350 --> 01:24:14.360 align:start position:0% minified yeah dude this uh we definitely 01:24:14.360 --> 01:24:17.310 align:start position:0% minified yeah dude this uh we definitely need<01:24:14.719> this<01:24:15.239> uh<01:24:15.360> to<01:24:15.520> be<01:24:15.719> released<01:24:16.400> this<01:24:16.800> this<01:24:16.920> is 01:24:17.310 --> 01:24:17.320 align:start position:0% need this uh to be released this this is 01:24:17.320 --> 01:24:19.030 align:start position:0% need this uh to be released this this is really<01:24:17.679> cool<01:24:18.159> you<01:24:18.239> might<01:24:18.400> not<01:24:18.520> see<01:24:18.679> but<01:24:18.760> I<01:24:18.880> also 01:24:19.030 --> 01:24:19.040 align:start position:0% really cool you might not see but I also 01:24:19.040 --> 01:24:21.590 align:start position:0% really cool you might not see but I also have<01:24:19.280> the<01:24:19.520> the<01:24:19.600> speaker<01:24:20.080> on<01:24:20.239> the<01:24:20.440> on<01:24:20.560> the<01:24:20.760> left 01:24:21.590 --> 01:24:21.600 align:start position:0% have the the speaker on the on the left 01:24:21.600 --> 01:24:25.030 align:start position:0% have the the speaker on the on the left H<01:24:21.760> this<01:24:21.840> one<01:24:21.960> is<01:24:22.440> you're<01:24:22.560> kidding<01:24:23.159> me<01:24:24.159> that 01:24:25.030 --> 01:24:25.040 align:start position:0% H this one is you're kidding me that 01:24:25.040 --> 01:24:26.430 align:start position:0% H this one is you're kidding me that I<01:24:25.120> know<01:24:25.239> where<01:24:25.360> I<01:24:25.440> am<01:24:25.600> and<01:24:25.719> if<01:24:25.800> I<01:24:25.920> change<01:24:26.199> over 01:24:26.430 --> 01:24:26.440 align:start position:0% I know where I am and if I change over 01:24:26.440 --> 01:24:28.350 align:start position:0% I know where I am and if I change over there<01:24:26.639> the<01:24:26.760> other<01:24:27.000> page<01:24:27.199> is<01:24:27.360> also<01:24:27.639> changing<01:24:28.159> so 01:24:28.350 --> 01:24:28.360 align:start position:0% there the other page is also changing so 01:24:28.360 --> 01:24:29.910 align:start position:0% there the other page is also changing so I<01:24:28.440> have<01:24:28.560> it<01:24:28.639> on<01:24:28.840> the<01:24:28.960> new<01:24:29.159> screen<01:24:29.560> and<01:24:29.639> you<01:24:29.760> can 01:24:29.910 --> 01:24:29.920 align:start position:0% I have it on the new screen and you can 01:24:29.920 --> 01:24:31.470 align:start position:0% I have it on the new screen and you can put<01:24:30.120> notes<01:24:30.360> over<01:24:30.560> there<01:24:30.639> I<01:24:30.760> don't<01:24:30.920> put<01:24:31.080> notes 01:24:31.470 --> 01:24:31.480 align:start position:0% put notes over there I don't put notes 01:24:31.480 --> 01:24:35.149 align:start position:0% put notes over there I don't put notes but<01:24:32.000> can<01:24:32.520> technically<01:24:33.520> wow<01:24:34.520> that's<01:24:34.800> yeah<01:24:34.920> the 01:24:35.149 --> 01:24:35.159 align:start position:0% but can technically wow that's yeah the 01:24:35.159 --> 01:24:37.669 align:start position:0% but can technically wow that's yeah the the<01:24:35.239> talk<01:24:35.480> was<01:24:35.639> released<01:24:36.159> the<01:24:36.320> first<01:24:36.560> time<01:24:36.760> in 01:24:37.669 --> 01:24:37.679 align:start position:0% the talk was released the first time in 01:24:37.679 --> 01:24:42.109 align:start position:0% the talk was released the first time in 2003<01:24:38.520> so<01:24:39.520> not3<01:24:40.159> 2023 01:24:42.109 --> 01:24:42.119 align:start position:0% 2003 so not3 2023 01:24:42.119 --> 01:24:46.950 align:start position:0% 2003 so not3 2023 sorry<01:24:43.119> where<01:24:44.000> okay<01:24:44.679> gota<01:24:45.199> I<01:24:45.280> think<01:24:45.480> it<01:24:45.960> 2023 01:24:46.950 --> 01:24:46.960 align:start position:0% sorry where okay gota I think it 2023 01:24:46.960 --> 01:24:51.870 align:start position:0% sorry where okay gota I think it 2023 yeah<01:24:47.239> 23<01:24:48.199> yeah<01:24:49.040> it's<01:24:49.159> not<01:24:49.320> it's<01:24:49.440> not<01:24:49.639> that 01:24:51.870 --> 01:24:51.880 align:start position:0% 01:24:51.880 --> 01:24:54.669 align:start position:0% all<01:24:52.880> um<01:24:53.159> and<01:24:53.360> we<01:24:53.480> did<01:24:53.639> a<01:24:53.760> lot<01:24:53.880> of<01:24:54.000> updates<01:24:54.480> just 01:24:54.669 --> 01:24:54.679 align:start position:0% all um and we did a lot of updates just 01:24:54.679 --> 01:24:57.830 align:start position:0% all um and we did a lot of updates just before<01:24:54.920> Defcon<01:24:56.080> so<01:24:57.080> a<01:24:57.159> lot<01:24:57.280> of<01:24:57.360> the<01:24:57.480> stuff<01:24:57.679> is 01:24:57.830 --> 01:24:57.840 align:start position:0% before Defcon so a lot of the stuff is 01:24:57.840 --> 01:24:59.390 align:start position:0% before Defcon so a lot of the stuff is very 01:24:59.390 --> 01:24:59.400 align:start position:0% very 01:24:59.400 --> 01:25:02.950 align:start position:0% very fresh<01:25:00.400> very<01:25:00.639> cool<01:25:01.360> let<01:25:01.639> let<01:25:01.760> me<01:25:02.080> let<01:25:02.199> me<01:25:02.600> uh<01:25:02.760> ask 01:25:02.950 --> 01:25:02.960 align:start position:0% fresh very cool let let me let me uh ask 01:25:02.960 --> 01:25:05.390 align:start position:0% fresh very cool let let me let me uh ask you<01:25:03.280> right<01:25:03.480> now<01:25:03.719> as<01:25:03.880> well<01:25:04.360> so<01:25:04.840> applying<01:25:05.239> some 01:25:05.390 --> 01:25:05.400 align:start position:0% you right now as well so applying some 01:25:05.400 --> 01:25:08.109 align:start position:0% you right now as well so applying some of<01:25:05.520> this<01:25:05.679> stuff<01:25:05.880> to<01:25:06.040> client<01:25:06.520> side<01:25:07.239> when<01:25:07.480> we<01:25:07.639> are 01:25:08.109 --> 01:25:08.119 align:start position:0% of this stuff to client side when we are 01:25:08.119 --> 01:25:10.709 align:start position:0% of this stuff to client side when we are searching<01:25:08.639> for<01:25:09.320> syns<01:25:09.800> on<01:25:09.920> the<01:25:10.040> client<01:25:10.440> side 01:25:10.709 --> 01:25:10.719 align:start position:0% searching for syns on the client side 01:25:10.719 --> 01:25:12.430 align:start position:0% searching for syns on the client side essentially<01:25:11.239> we<01:25:11.360> just<01:25:11.480> need<01:25:11.639> to<01:25:11.800> look<01:25:11.960> for 01:25:12.430 --> 01:25:12.440 align:start position:0% essentially we just need to look for 01:25:12.440 --> 01:25:16.430 align:start position:0% essentially we just need to look for areas<01:25:13.520> where<01:25:14.520> we<01:25:14.840> can<01:25:15.840> there's<01:25:16.119> some 01:25:16.430 --> 01:25:16.440 align:start position:0% areas where we can there's some 01:25:16.440 --> 01:25:18.950 align:start position:0% areas where we can there's some attribute<01:25:17.119> that<01:25:17.239> is<01:25:17.440> being<01:25:17.760> checked<01:25:18.600> and<01:25:18.760> that 01:25:18.950 --> 01:25:18.960 align:start position:0% attribute that is being checked and that 01:25:18.960 --> 01:25:20.990 align:start position:0% attribute that is being checked and that attribute<01:25:19.320> is<01:25:19.560> either<01:25:19.760> being<01:25:20.119> passed<01:25:20.440> into 01:25:20.990 --> 01:25:21.000 align:start position:0% attribute is either being passed into 01:25:21.000 --> 01:25:24.390 align:start position:0% attribute is either being passed into like<01:25:21.560> eval<01:25:22.400> the<01:25:22.560> function<01:25:23.040> Constructor<01:25:23.960> set 01:25:24.390 --> 01:25:24.400 align:start position:0% like eval the function Constructor set 01:25:24.400 --> 01:25:27.550 align:start position:0% like eval the function Constructor set time<01:25:24.639> out<01:25:25.480> like<01:25:26.000> any<01:25:26.199> of<01:25:26.400> these<01:25:26.639> gadgets 01:25:27.550 --> 01:25:27.560 align:start position:0% time out like any of these gadgets 01:25:27.560 --> 01:25:29.830 align:start position:0% time out like any of these gadgets trigger<01:25:28.320> trigger<01:25:28.800> code<01:25:29.080> execution<01:25:29.600> on<01:25:29.719> the 01:25:29.830 --> 01:25:29.840 align:start position:0% trigger trigger code execution on the 01:25:29.840 --> 01:25:32.990 align:start position:0% trigger trigger code execution on the client<01:25:30.280> side<01:25:30.920> I<01:25:31.040> I<01:25:31.159> like<01:25:31.360> to<01:25:31.600> pollute<01:25:32.159> uh<01:25:32.760> I 01:25:32.990 --> 01:25:33.000 align:start position:0% client side I I like to pollute uh I 01:25:33.000 --> 01:25:36.470 align:start position:0% client side I I like to pollute uh I frame<01:25:33.239> SS<01:25:33.960> do<01:25:34.960> because<01:25:35.280> the<01:25:35.440> SS<01:25:35.880> do<01:25:36.119> usually 01:25:36.470 --> 01:25:36.480 align:start position:0% frame SS do because the SS do usually 01:25:36.480 --> 01:25:38.910 align:start position:0% frame SS do because the SS do usually has<01:25:36.960> it<01:25:37.040> has<01:25:37.239> priority<01:25:37.639> over<01:25:37.960> SSC<01:25:38.679> so<01:25:38.840> if 01:25:38.910 --> 01:25:38.920 align:start position:0% has it has priority over SSC so if 01:25:38.920 --> 01:25:40.070 align:start position:0% has it has priority over SSC so if there's<01:25:39.080> an<01:25:39.320> frame<01:25:39.480> on<01:25:39.560> the<01:25:39.679> page<01:25:39.840> it<01:25:39.920> will 01:25:40.070 --> 01:25:40.080 align:start position:0% there's an frame on the page it will 01:25:40.080 --> 01:25:43.510 align:start position:0% there's an frame on the page it will over<01:25:40.480> it<01:25:40.600> will<01:25:41.119> uh<01:25:41.600> you<01:25:41.719> can<01:25:42.320> just<01:25:42.920> start<01:25:43.199> your 01:25:43.510 --> 01:25:43.520 align:start position:0% over it will uh you can just start your 01:25:43.520 --> 01:25:45.870 align:start position:0% over it will uh you can just start your script<01:25:43.920> there<01:25:44.520> and<01:25:44.679> inside<01:25:45.040> SS<01:25:45.520> you're<01:25:45.639> allow 01:25:45.870 --> 01:25:45.880 align:start position:0% script there and inside SS you're allow 01:25:45.880 --> 01:25:47.390 align:start position:0% script there and inside SS you're allow to<01:25:45.960> put<01:25:46.119> script<01:25:46.400> tags<01:25:46.760> and<01:25:46.880> you<01:25:47.000> don't<01:25:47.159> need<01:25:47.280> to 01:25:47.390 --> 01:25:47.400 align:start position:0% to put script tags and you don't need to 01:25:47.400 --> 01:25:50.430 align:start position:0% to put script tags and you don't need to do<01:25:47.679> events<01:25:48.239> uh<01:25:48.880> endler<01:25:49.880> just<01:25:50.040> because<01:25:50.199> of<01:25:50.320> the 01:25:50.430 --> 01:25:50.440 align:start position:0% do events uh endler just because of the 01:25:50.440 --> 01:25:52.830 align:start position:0% do events uh endler just because of the way<01:25:50.560> it<01:25:50.679> works<01:25:51.040> so<01:25:51.400> this<01:25:51.920> this<01:25:52.000> is<01:25:52.159> usually<01:25:52.480> a 01:25:52.830 --> 01:25:52.840 align:start position:0% way it works so this this is usually a 01:25:52.840 --> 01:25:55.430 align:start position:0% way it works so this this is usually a quick<01:25:53.040> win<01:25:53.520> if<01:25:53.679> there<01:25:53.760> is<01:25:53.880> a<01:25:54.000> frame<01:25:54.360> the<01:25:54.480> page 01:25:55.430 --> 01:25:55.440 align:start position:0% quick win if there is a frame the page 01:25:55.440 --> 01:25:57.750 align:start position:0% quick win if there is a frame the page that<01:25:55.840> that<01:25:55.960> is<01:25:56.159> gold<01:25:56.639> guys<01:25:56.920> listen<01:25:57.159> to<01:25:57.400> that 01:25:57.750 --> 01:25:57.760 align:start position:0% that that is gold guys listen to that 01:25:57.760 --> 01:26:00.350 align:start position:0% that that is gold guys listen to that okay<01:25:58.560> that<01:25:58.679> is<01:25:58.920> a<01:25:59.320> that<01:25:59.440> is<01:25:59.520> a<01:25:59.719> great<01:25:59.960> tip<01:26:00.159> yeah 01:26:00.350 --> 01:26:00.360 align:start position:0% okay that is a that is a great tip yeah 01:26:00.360 --> 01:26:02.870 align:start position:0% okay that is a that is a great tip yeah because<01:26:01.159> most<01:26:01.320> of<01:26:01.520> the<01:26:01.719> you<01:26:01.840> know<01:26:02.000> HTML<01:26:02.600> stuff 01:26:02.870 --> 01:26:02.880 align:start position:0% because most of the you know HTML stuff 01:26:02.880 --> 01:26:07.189 align:start position:0% because most of the you know HTML stuff it's<01:26:03.880> it's<01:26:04.119> a<01:26:04.520> it's<01:26:04.880> a<01:26:05.840> like<01:26:05.960> if<01:26:06.119> use<01:26:06.400> react<01:26:07.080> it 01:26:07.189 --> 01:26:07.199 align:start position:0% it's it's a it's a like if use react it 01:26:07.199 --> 01:26:09.030 align:start position:0% it's it's a it's a like if use react it won't<01:26:07.440> all<01:26:07.760> you<01:26:07.840> to<01:26:07.960> do<01:26:08.199> know<01:26:08.320> HTML<01:26:08.800> it<01:26:08.880> would 01:26:09.030 --> 01:26:09.040 align:start position:0% won't all you to do know HTML it would 01:26:09.040 --> 01:26:11.510 align:start position:0% won't all you to do know HTML it would say<01:26:09.199> oh<01:26:09.320> you<01:26:09.400> need<01:26:09.520> to<01:26:09.679> set<01:26:10.040> a<01:26:10.560> set<01:26:10.840> you<01:26:11.000> know 01:26:11.510 --> 01:26:11.520 align:start position:0% say oh you need to set a set you know 01:26:11.520 --> 01:26:14.030 align:start position:0% say oh you need to set a set you know Dangerously<01:26:12.159> In<01:26:12.280> know<01:26:12.400> HTML<01:26:13.320> but<01:26:13.440> usually<01:26:13.719> s 01:26:14.030 --> 01:26:14.040 align:start position:0% Dangerously In know HTML but usually s 01:26:14.040 --> 01:26:15.270 align:start position:0% Dangerously In know HTML but usually s do<01:26:14.199> is<01:26:14.320> fine<01:26:14.480> and<01:26:14.560> you<01:26:14.639> can<01:26:14.760> do<01:26:14.880> the<01:26:14.960> same<01:26:15.119> thing 01:26:15.270 --> 01:26:15.280 align:start position:0% do is fine and you can do the same thing 01:26:15.280 --> 01:26:19.109 align:start position:0% do is fine and you can do the same thing over<01:26:15.639> there<01:26:16.639> okay<01:26:17.280> um<01:26:17.560> and<01:26:17.800> we<01:26:17.880> can<01:26:18.080> just<01:26:18.719> like 01:26:19.109 --> 01:26:19.119 align:start position:0% over there okay um and we can just like 01:26:19.119 --> 01:26:20.950 align:start position:0% over there okay um and we can just like essentially<01:26:19.840> if<01:26:20.000> we<01:26:20.199> have<01:26:20.440> access<01:26:20.679> to<01:26:20.800> the 01:26:20.950 --> 01:26:20.960 align:start position:0% essentially if we have access to the 01:26:20.960 --> 01:26:24.350 align:start position:0% essentially if we have access to the object<01:26:21.239> prototype<01:26:22.159> we<01:26:22.280> can<01:26:22.560> just<01:26:23.199> set<01:26:24.080> like 01:26:24.350 --> 01:26:24.360 align:start position:0% object prototype we can just set like 01:26:24.360 --> 01:26:26.470 align:start position:0% object prototype we can just set like object<01:26:24.600> prototype<01:26:25.119> do<01:26:25.360> SRC<01:26:25.920> doc<01:26:26.159> can<01:26:26.239> you<01:26:26.400> can 01:26:26.470 --> 01:26:26.480 align:start position:0% object prototype do SRC doc can you can 01:26:26.480 --> 01:26:28.870 align:start position:0% object prototype do SRC doc can you can you<01:26:26.560> show<01:26:26.719> us<01:26:26.880> real<01:26:27.040> quick<01:26:27.520> yeah<01:26:27.600> you<01:26:28.320> protype 01:26:28.870 --> 01:26:28.880 align:start position:0% you show us real quick yeah you protype 01:26:28.880 --> 01:26:31.629 align:start position:0% you show us real quick yeah you protype and<01:26:28.960> you<01:26:29.119> try<01:26:29.679> to<01:26:30.679> you<01:26:30.840> try<01:26:31.280> uh<01:26:31.400> I<01:26:31.440> don't<01:26:31.560> know 01:26:31.629 --> 01:26:31.639 align:start position:0% and you try to you try uh I don't know 01:26:31.639 --> 01:26:33.310 align:start position:0% and you try to you try uh I don't know if<01:26:31.760> there<01:26:31.840> is<01:26:32.199> no<01:26:32.360> but<01:26:32.480> you<01:26:32.639> need<01:26:32.800> to<01:26:32.960> do<01:26:33.119> it 01:26:33.310 --> 01:26:33.320 align:start position:0% if there is no but you need to do it 01:26:33.320 --> 01:26:34.750 align:start position:0% if there is no but you need to do it before<01:26:33.560> the<01:26:33.679> page<01:26:33.920> load<01:26:34.239> or<01:26:34.400> something 01:26:34.750 --> 01:26:34.760 align:start position:0% before the page load or something 01:26:34.760 --> 01:26:37.030 align:start position:0% before the page load or something because<01:26:35.400> it<01:26:35.520> won't<01:26:35.800> just<01:26:35.960> trigger<01:26:36.360> like<01:26:36.560> this 01:26:37.030 --> 01:26:37.040 align:start position:0% because it won't just trigger like this 01:26:37.040 --> 01:26:40.750 align:start position:0% because it won't just trigger like this it<01:26:37.159> won't<01:26:37.440> it<01:26:37.520> will<01:26:37.639> need<01:26:37.840> like<01:26:37.960> a<01:26:38.159> react<01:26:39.360> uh<01:26:40.360> D 01:26:40.750 --> 01:26:40.760 align:start position:0% it won't it will need like a react uh D 01:26:40.760 --> 01:26:42.709 align:start position:0% it won't it will need like a react uh D rebild<01:26:41.239> or<01:26:41.400> something<01:26:41.679> like<01:26:41.880> that<01:26:42.400> what<01:26:42.520> if 01:26:42.709 --> 01:26:42.719 align:start position:0% rebild or something like that what if 01:26:42.719 --> 01:26:44.990 align:start position:0% rebild or something like that what if you<01:26:43.080> what<01:26:43.159> if<01:26:43.320> you<01:26:43.719> then<01:26:43.960> proceeded<01:26:44.400> to<01:26:44.679> write 01:26:44.990 --> 01:26:45.000 align:start position:0% you what if you then proceeded to write 01:26:45.000 --> 01:26:47.109 align:start position:0% you what if you then proceeded to write a<01:26:45.199> if<01:26:45.400> frame<01:26:45.560> to<01:26:45.679> the<01:26:45.800> Dom<01:26:46.159> with<01:26:46.639> document. 01:26:47.109 --> 01:26:47.119 align:start position:0% a if frame to the Dom with document. 01:26:47.119 --> 01:26:50.270 align:start position:0% a if frame to the Dom with document. create<01:26:47.719> element<01:26:48.719> uh<01:26:48.880> not<01:26:49.239> not<01:26:49.679> the<01:26:49.800> D<01:26:50.040> itself 01:26:50.270 --> 01:26:50.280 align:start position:0% create element uh not not the D itself 01:26:50.280 --> 01:26:52.790 align:start position:0% create element uh not not the D itself is<01:26:50.360> not<01:26:50.480> available<01:26:50.800> top<01:26:51.400> pollution<01:26:52.400> not<01:26:52.639> this 01:26:52.790 --> 01:26:52.800 align:start position:0% is not available top pollution not this 01:26:52.800 --> 01:26:55.390 align:start position:0% is not available top pollution not this way<01:26:53.159> but<01:26:53.320> if<01:26:53.639> but<01:26:53.840> react<01:26:54.320> the<01:26:54.440> way<01:26:54.600> it<01:26:54.800> make<01:26:55.199> the 01:26:55.390 --> 01:26:55.400 align:start position:0% way but if but react the way it make the 01:26:55.400 --> 01:26:58.229 align:start position:0% way but if but react the way it make the element<01:26:55.840> will<01:26:56.040> make<01:26:56.159> it<01:26:56.800> vulnerable<01:26:57.800> okay<01:26:58.000> in 01:26:58.229 --> 01:26:58.239 align:start position:0% element will make it vulnerable okay in 01:26:58.239 --> 01:27:01.510 align:start position:0% element will make it vulnerable okay in react<01:26:58.800> specifically<01:26:59.800> yeah<01:27:00.480> okay<01:27:00.880> but<01:27:01.119> react 01:27:01.510 --> 01:27:01.520 align:start position:0% react specifically yeah okay but react 01:27:01.520 --> 01:27:04.270 align:start position:0% react specifically yeah okay but react or<01:27:02.480> like<01:27:02.639> there<01:27:02.760> is<01:27:02.880> a<01:27:03.000> bunch<01:27:03.400> also<01:27:03.920> I<01:27:04.000> think<01:27:04.159> in 01:27:04.270 --> 01:27:04.280 align:start position:0% or like there is a bunch also I think in 01:27:04.280 --> 01:27:07.910 align:start position:0% or like there is a bunch also I think in gquery<01:27:04.719> there<01:27:05.280> is<01:27:05.600> and<01:27:05.840> if<01:27:05.920> you<01:27:06.080> can<01:27:06.800> only<01:27:07.800> you 01:27:07.910 --> 01:27:07.920 align:start position:0% gquery there is and if you can only you 01:27:07.920 --> 01:27:10.750 align:start position:0% gquery there is and if you can only you can<01:27:08.400> uh<01:27:08.560> pollute<01:27:09.040> the<01:27:09.199> fetch<01:27:09.679> function<01:27:10.679> I 01:27:10.750 --> 01:27:10.760 align:start position:0% can uh pollute the fetch function I 01:27:10.760 --> 01:27:12.109 align:start position:0% can uh pollute the fetch function I think<01:27:11.080> in<01:27:11.199> the<01:27:11.360> fetch<01:27:11.560> function<01:27:11.840> you<01:27:11.960> can 01:27:12.109 --> 01:27:12.119 align:start position:0% think in the fetch function you can 01:27:12.119 --> 01:27:14.470 align:start position:0% think in the fetch function you can modify<01:27:12.560> like<01:27:12.679> the<01:27:12.840> method<01:27:13.239> if<01:27:13.360> it's<01:27:13.560> not<01:27:13.760> set 01:27:14.470 --> 01:27:14.480 align:start position:0% modify like the method if it's not set 01:27:14.480 --> 01:27:15.990 align:start position:0% modify like the method if it's not set but<01:27:14.679> keep<01:27:14.840> in<01:27:14.960> mind<01:27:15.199> you<01:27:15.280> can<01:27:15.400> only<01:27:15.600> pollute 01:27:15.990 --> 01:27:16.000 align:start position:0% but keep in mind you can only pollute 01:27:16.000 --> 01:27:18.189 align:start position:0% but keep in mind you can only pollute the<01:27:16.119> thing<01:27:16.320> that<01:27:16.440> are<01:27:16.600> not<01:27:16.760> set<01:27:17.639> right<01:27:17.800> so<01:27:18.000> if 01:27:18.189 --> 01:27:18.199 align:start position:0% the thing that are not set right so if 01:27:18.199 --> 01:27:21.550 align:start position:0% the thing that are not set right so if someone<01:27:18.520> is<01:27:18.679> doing<01:27:19.560> um<01:27:20.440> for 01:27:21.550 --> 01:27:21.560 align:start position:0% someone is doing um for 01:27:21.560 --> 01:27:25.310 align:start position:0% someone is doing um for example<01:27:22.560> uh<01:27:22.880> fetch<01:27:24.239> so<01:27:24.440> we<01:27:24.560> have<01:27:24.679> our<01:27:24.840> Fetch 01:27:25.310 --> 01:27:25.320 align:start position:0% example uh fetch so we have our Fetch 01:27:25.320 --> 01:27:27.430 align:start position:0% example uh fetch so we have our Fetch with<01:27:25.800> Slash<01:27:26.480> and 01:27:27.430 --> 01:27:27.440 align:start position:0% with Slash and 01:27:27.440 --> 01:27:30.030 align:start position:0% with Slash and do<01:27:28.520> method 01:27:30.030 --> 01:27:30.040 align:start position:0% do method 01:27:30.040 --> 01:27:32.510 align:start position:0% do method get<01:27:31.040> here<01:27:31.199> you<01:27:31.280> will<01:27:31.480> be<01:27:31.560> able<01:27:31.760> to<01:27:31.960> pollute<01:27:32.360> the 01:27:32.510 --> 01:27:32.520 align:start position:0% get here you will be able to pollute the 01:27:32.520 --> 01:27:35.430 align:start position:0% get here you will be able to pollute the data<01:27:32.760> of<01:27:32.920> the<01:27:33.119> of<01:27:33.239> the<01:27:33.360> body<01:27:33.960> you<01:27:34.159> can<01:27:34.800> but<01:27:34.920> you 01:27:35.430 --> 01:27:35.440 align:start position:0% data of the of the body you can but you 01:27:35.440 --> 01:27:36.830 align:start position:0% data of the of the body you can but you won't<01:27:35.639> be<01:27:35.760> able<01:27:35.920> to<01:27:36.040> pollute<01:27:36.320> the<01:27:36.440> method 01:27:36.830 --> 01:27:36.840 align:start position:0% won't be able to pollute the method 01:27:36.840 --> 01:27:38.270 align:start position:0% won't be able to pollute the method because<01:27:37.000> the<01:27:37.080> method<01:27:37.320> is<01:27:37.440> already<01:27:37.760> there<01:27:38.119> it's 01:27:38.270 --> 01:27:38.280 align:start position:0% because the method is already there it's 01:27:38.280 --> 01:27:40.790 align:start position:0% because the method is already there it's explicitly<01:27:38.800> overridden<01:27:39.679> yeah<01:27:40.159> even<01:27:40.360> if<01:27:40.480> it's 01:27:40.790 --> 01:27:40.800 align:start position:0% explicitly overridden yeah even if it's 01:27:40.800 --> 01:27:43.590 align:start position:0% explicitly overridden yeah even if it's meod<01:27:41.600> undefined<01:27:42.239> is<01:27:42.400> still 01:27:43.590 --> 01:27:43.600 align:start position:0% meod undefined is still 01:27:43.600 --> 01:27:46.590 align:start position:0% meod undefined is still there<01:27:44.600> so<01:27:45.119> it<01:27:45.239> need<01:27:45.360> to<01:27:45.480> be<01:27:45.639> missing<01:27:46.440> and 01:27:46.590 --> 01:27:46.600 align:start position:0% there so it need to be missing and 01:27:46.600 --> 01:27:47.910 align:start position:0% there so it need to be missing and there's<01:27:46.840> a<01:27:47.040> little<01:27:47.280> bit<01:27:47.440> of<01:27:47.600> difference 01:27:47.910 --> 01:27:47.920 align:start position:0% there's a little bit of difference 01:27:47.920 --> 01:27:50.030 align:start position:0% there's a little bit of difference between<01:27:48.159> a<01:27:48.239> missing<01:27:48.520> key<01:27:48.679> and<01:27:48.760> an<01:27:48.920> undefining 01:27:50.030 --> 01:27:50.040 align:start position:0% between a missing key and an undefining 01:27:50.040 --> 01:27:54.510 align:start position:0% between a missing key and an undefining key<01:27:51.040> very<01:27:51.520> good<01:27:52.520> because<01:27:52.880> this<01:27:53.280> is<01:27:53.480> different 01:27:54.510 --> 01:27:54.520 align:start position:0% key very good because this is different 01:27:54.520 --> 01:27:56.430 align:start position:0% key very good because this is different from 01:27:56.430 --> 01:27:56.440 align:start position:0% from 01:27:56.440 --> 01:27:59.510 align:start position:0% from this 01:27:59.510 --> 01:27:59.520 align:start position:0% 01:27:59.520 --> 01:28:02.070 align:start position:0% right<01:28:00.520> that<01:28:00.639> makes<01:28:00.840> sense<01:28:01.400> even<01:28:01.639> if<01:28:01.760> we<01:28:02.000> all 01:28:02.070 --> 01:28:02.080 align:start position:0% right that makes sense even if we all 01:28:02.080 --> 01:28:04.189 align:start position:0% right that makes sense even if we all right<01:28:02.239> man<01:28:02.400> my<01:28:02.520> head<01:28:02.679> is<01:28:02.800> spinning<01:28:03.320> dude<01:28:03.719> this 01:28:04.189 --> 01:28:04.199 align:start position:0% right man my head is spinning dude this 01:28:04.199 --> 01:28:07.629 align:start position:0% right man my head is spinning dude this this<01:28:04.320> is<01:28:04.440> a<01:28:04.639> lot<01:28:04.800> of<01:28:05.280> uh<01:28:05.480> this<01:28:05.560> is<01:28:05.719> a<01:28:05.880> lot<01:28:06.080> of 01:28:07.629 --> 01:28:07.639 align:start position:0% this is a lot of uh this is a lot of 01:28:07.639 --> 01:28:09.629 align:start position:0% this is a lot of uh this is a lot of objectoriented<01:28:08.639> stuff<01:28:09.000> going<01:28:09.280> through<01:28:09.480> my 01:28:09.629 --> 01:28:09.639 align:start position:0% objectoriented stuff going through my 01:28:09.639 --> 01:28:11.590 align:start position:0% objectoriented stuff going through my head<01:28:09.880> right<01:28:10.000> now<01:28:10.280> with<01:28:10.400> all<01:28:10.639> this<01:28:11.040> um<01:28:11.239> but<01:28:11.440> it's 01:28:11.590 --> 01:28:11.600 align:start position:0% head right now with all this um but it's 01:28:11.600 --> 01:28:15.350 align:start position:0% head right now with all this um but it's definitely<01:28:11.960> a<01:28:12.119> cool<01:28:12.360> sector<01:28:12.639> of<01:28:12.920> bugs<01:28:13.920> um 01:28:15.350 --> 01:28:15.360 align:start position:0% definitely a cool sector of bugs um 01:28:15.360 --> 01:28:17.669 align:start position:0% definitely a cool sector of bugs um and<01:28:16.360> I<01:28:16.440> think<01:28:16.560> there's<01:28:16.840> applications<01:28:17.400> both<01:28:17.560> on 01:28:17.669 --> 01:28:17.679 align:start position:0% and I think there's applications both on 01:28:17.679 --> 01:28:19.350 align:start position:0% and I think there's applications both on the<01:28:17.760> server<01:28:18.080> side<01:28:18.239> in<01:28:18.400> on<01:28:18.480> the<01:28:18.600> client<01:28:18.960> side 01:28:19.350 --> 01:28:19.360 align:start position:0% the server side in on the client side 01:28:19.360 --> 01:28:21.590 align:start position:0% the server side in on the client side which<01:28:19.480> is<01:28:19.639> really<01:28:19.800> cool<01:28:20.000> to<01:28:20.159> see<01:28:21.040> um<01:28:21.320> let's<01:28:21.480> see 01:28:21.590 --> 01:28:21.600 align:start position:0% which is really cool to see um let's see 01:28:21.600 --> 01:28:23.950 align:start position:0% which is really cool to see um let's see what<01:28:21.719> shelfish<01:28:22.239> here<01:28:22.600> says<01:28:23.280> for<01:28:23.480> client<01:28:23.800> side 01:28:23.950 --> 01:28:23.960 align:start position:0% what shelfish here says for client side 01:28:23.960 --> 01:28:25.990 align:start position:0% what shelfish here says for client side what<01:28:24.280> could<01:28:24.400> it<01:28:24.840> be<01:28:24.960> used<01:28:25.159> for<01:28:25.400> realistically 01:28:25.990 --> 01:28:26.000 align:start position:0% what could it be used for realistically 01:28:26.000 --> 01:28:27.310 align:start position:0% what could it be used for realistically what<01:28:26.119> vulnerabilities<01:28:26.760> come<01:28:26.880> out<01:28:27.000> of<01:28:27.080> it<01:28:27.199> from 01:28:27.310 --> 01:28:27.320 align:start position:0% what vulnerabilities come out of it from 01:28:27.320 --> 01:28:29.950 align:start position:0% what vulnerabilities come out of it from the<01:28:27.400> client<01:28:27.679> side<01:28:27.800> I<01:28:27.880> mean<01:28:28.239> most<01:28:28.679> xss<01:28:29.280> mostly 01:28:29.950 --> 01:28:29.960 align:start position:0% the client side I mean most xss mostly 01:28:29.960 --> 01:28:32.270 align:start position:0% the client side I mean most xss mostly uh<01:28:30.119> but<01:28:30.239> xss<01:28:30.679> I<01:28:30.760> feel<01:28:31.000> like<01:28:31.159> it's<01:28:31.360> underrated<01:28:32.199> a 01:28:32.270 --> 01:28:32.280 align:start position:0% uh but xss I feel like it's underrated a 01:28:32.280 --> 01:28:34.750 align:start position:0% uh but xss I feel like it's underrated a lot<01:28:32.440> of<01:28:32.520> the<01:28:32.679> time<01:28:33.600> depend<01:28:34.000> where<01:28:34.119> way<01:28:34.280> trigger 01:28:34.750 --> 01:28:34.760 align:start position:0% lot of the time depend where way trigger 01:28:34.760 --> 01:28:37.390 align:start position:0% lot of the time depend where way trigger for<01:28:34.920> sure<01:28:35.159> if<01:28:35.280> it's<01:28:35.440> in<01:28:35.840> the<01:28:36.600> somewhere<01:28:37.040> weird 01:28:37.390 --> 01:28:37.400 align:start position:0% for sure if it's in the somewhere weird 01:28:37.400 --> 01:28:39.950 align:start position:0% for sure if it's in the somewhere weird and<01:28:37.760> difficult<01:28:37.960> to<01:28:38.840> to<01:28:39.000> trigger<01:28:39.560> yeah<01:28:39.719> it<01:28:39.800> can 01:28:39.950 --> 01:28:39.960 align:start position:0% and difficult to to trigger yeah it can 01:28:39.960 --> 01:28:41.910 align:start position:0% and difficult to to trigger yeah it can be<01:28:40.159> low<01:28:40.400> or<01:28:40.520> medium<01:28:40.880> bug<01:28:41.440> but<01:28:41.560> if<01:28:41.639> you<01:28:41.760> have<01:28:41.840> an 01:28:41.910 --> 01:28:41.920 align:start position:0% be low or medium bug but if you have an 01:28:41.920 --> 01:28:44.189 align:start position:0% be low or medium bug but if you have an EXs<01:28:42.280> in<01:28:42.360> the<01:28:42.480> chat<01:28:42.920> or<01:28:43.119> xss<01:28:43.600> in<01:28:43.679> a<01:28:43.840> direct 01:28:44.189 --> 01:28:44.199 align:start position:0% EXs in the chat or xss in a direct 01:28:44.199 --> 01:28:47.149 align:start position:0% EXs in the chat or xss in a direct message<01:28:44.520> in<01:28:44.600> a<01:28:44.760> mail<01:28:45.400> client<01:28:46.080> this<01:28:46.239> is<01:28:46.760> crazy 01:28:47.149 --> 01:28:47.159 align:start position:0% message in a mail client this is crazy 01:28:47.159 --> 01:28:48.910 align:start position:0% message in a mail client this is crazy because<01:28:47.440> usually<01:28:47.800> when<01:28:48.119> excess<01:28:48.600> you<01:28:48.719> have 01:28:48.910 --> 01:28:48.920 align:start position:0% because usually when excess you have 01:28:48.920 --> 01:28:51.669 align:start position:0% because usually when excess you have like<01:28:49.400> I<01:28:49.600> can<01:28:49.800> take<01:28:50.000> over<01:28:50.400> almost<01:28:50.719> all<01:28:50.880> the 01:28:51.669 --> 01:28:51.679 align:start position:0% like I can take over almost all the 01:28:51.679 --> 01:28:55.430 align:start position:0% like I can take over almost all the time<01:28:52.679> and<01:28:53.639> yeah<01:28:54.199> sort<01:28:54.320> of<01:28:54.440> worm<01:28:54.760> ability<01:28:55.360> I 01:28:55.430 --> 01:28:55.440 align:start position:0% time and yeah sort of worm ability I 01:28:55.440 --> 01:28:56.950 align:start position:0% time and yeah sort of worm ability I think<01:28:55.960> this<01:28:56.040> is<01:28:56.159> a<01:28:56.280> tip<01:28:56.440> we've<01:28:56.600> talked<01:28:56.800> about 01:28:56.950 --> 01:28:56.960 align:start position:0% think this is a tip we've talked about 01:28:56.960 --> 01:28:58.910 align:start position:0% think this is a tip we've talked about on<01:28:57.040> the<01:28:57.159> Pod<01:28:57.440> before<01:28:57.880> like<01:28:58.280> if<01:28:58.360> you<01:28:58.520> have<01:28:58.639> an 01:28:58.910 --> 01:28:58.920 align:start position:0% on the Pod before like if you have an 01:28:58.920 --> 01:29:02.350 align:start position:0% on the Pod before like if you have an xss<01:28:59.920> that<01:29:00.440> you<01:29:00.639> have<01:29:00.800> a<01:29:01.000> methodology<01:29:01.679> for 01:29:02.350 --> 01:29:02.360 align:start position:0% xss that you have a methodology for 01:29:02.360 --> 01:29:04.990 align:start position:0% xss that you have a methodology for worming<01:29:03.360> um<01:29:03.719> put<01:29:03.880> that<01:29:04.000> in<01:29:04.119> your<01:29:04.320> reports 01:29:04.990 --> 01:29:05.000 align:start position:0% worming um put that in your reports 01:29:05.000 --> 01:29:06.510 align:start position:0% worming um put that in your reports because<01:29:05.360> when<01:29:05.520> the<01:29:05.639> companies<01:29:06.000> hear<01:29:06.239> about 01:29:06.510 --> 01:29:06.520 align:start position:0% because when the companies hear about 01:29:06.520 --> 01:29:08.350 align:start position:0% because when the companies hear about that<01:29:06.800> they<01:29:07.000> just<01:29:07.280> start<01:29:07.639> shaking<01:29:08.040> a<01:29:08.159> little 01:29:08.350 --> 01:29:08.360 align:start position:0% that they just start shaking a little 01:29:08.360 --> 01:29:11.229 align:start position:0% that they just start shaking a little bit<01:29:08.600> you<01:29:08.719> know<01:29:09.000> like<01:29:09.920> uh<01:29:10.280> and<01:29:10.560> I've<01:29:10.719> had<01:29:10.960> my 01:29:11.229 --> 01:29:11.239 align:start position:0% bit you know like uh and I've had my 01:29:11.239 --> 01:29:12.950 align:start position:0% bit you know like uh and I've had my I've<01:29:11.400> had<01:29:11.560> my<01:29:11.679> bounty 01:29:12.950 --> 01:29:12.960 align:start position:0% I've had my bounty 01:29:12.960 --> 01:29:15.950 align:start position:0% I've had my bounty 1.5x<01:29:13.960> before<01:29:14.360> I<01:29:14.480> have<01:29:14.800> I<01:29:14.880> have<01:29:14.960> a<01:29:15.159> tool<01:29:15.400> to<01:29:15.639> do 01:29:15.950 --> 01:29:15.960 align:start position:0% 1.5x before I have I have a tool to do 01:29:15.960 --> 01:29:18.430 align:start position:0% 1.5x before I have I have a tool to do ex<01:29:16.320> payload<01:29:16.679> that<01:29:16.800> do<01:29:16.960> that<01:29:17.119> somewhere<01:29:17.520> I 01:29:18.430 --> 01:29:18.440 align:start position:0% ex payload that do that somewhere I 01:29:18.440 --> 01:29:21.390 align:start position:0% ex payload that do that somewhere I think<01:29:19.440> xss<01:29:19.880> tools<01:29:20.199> was<01:29:20.320> that<01:29:20.440> it<01:29:20.600> right<01:29:20.760> there 01:29:21.390 --> 01:29:21.400 align:start position:0% think xss tools was that it right there 01:29:21.400 --> 01:29:25.109 align:start position:0% think xss tools was that it right there yeah<01:29:22.040> uh<01:29:22.719> xss<01:29:23.719> tools 01:29:25.109 --> 01:29:25.119 align:start position:0% yeah uh xss tools 01:29:25.119 --> 01:29:26.629 align:start position:0% yeah uh xss tools and<01:29:25.239> it's<01:29:25.400> to<01:29:25.560> generate<01:29:25.960> payload<01:29:26.280> it's<01:29:26.360> an<01:29:26.480> old 01:29:26.629 --> 01:29:26.639 align:start position:0% and it's to generate payload it's an old 01:29:26.639 --> 01:29:29.149 align:start position:0% and it's to generate payload it's an old tool<01:29:26.960> it<01:29:27.119> need<01:29:27.679> it<01:29:27.840> really<01:29:28.040> need<01:29:28.280> some<01:29:28.520> updates 01:29:29.149 --> 01:29:29.159 align:start position:0% tool it need it really need some updates 01:29:29.159 --> 01:29:31.470 align:start position:0% tool it need it really need some updates but<01:29:29.280> there's<01:29:29.480> a<01:29:29.560> bunch<01:29:29.760> of<01:29:29.920> dock<01:29:30.119> and<01:29:30.239> you<01:29:30.480> can 01:29:31.470 --> 01:29:31.480 align:start position:0% but there's a bunch of dock and you can 01:29:31.480 --> 01:29:33.470 align:start position:0% but there's a bunch of dock and you can basically<01:29:31.800> create<01:29:32.159> your<01:29:32.600> your<01:29:32.760> payloads<01:29:33.239> like 01:29:33.470 --> 01:29:33.480 align:start position:0% basically create your your payloads like 01:29:33.480 --> 01:29:38.149 align:start position:0% basically create your your payloads like that<01:29:34.159> and<01:29:34.560> encoding<01:29:35.480> using<01:29:36.320> uh<01:29:36.760> some<01:29:37.159> wrapper 01:29:38.149 --> 01:29:38.159 align:start position:0% that and encoding using uh some wrapper 01:29:38.159 --> 01:29:39.430 align:start position:0% that and encoding using uh some wrapper and<01:29:38.239> you<01:29:38.360> can<01:29:38.480> say<01:29:38.679> okay<01:29:38.800> I<01:29:38.880> have<01:29:38.960> my<01:29:39.080> payloads 01:29:39.430 --> 01:29:39.440 align:start position:0% and you can say okay I have my payloads 01:29:39.440 --> 01:29:41.149 align:start position:0% and you can say okay I have my payloads and<01:29:39.520> I<01:29:39.600> want<01:29:39.719> to<01:29:39.840> WP<01:29:40.199> in<01:29:40.280> a<01:29:40.400> bunch<01:29:40.600> of<01:29:40.760> stuff<01:29:41.080> and 01:29:41.149 --> 01:29:41.159 align:start position:0% and I want to WP in a bunch of stuff and 01:29:41.159 --> 01:29:45.030 align:start position:0% and I want to WP in a bunch of stuff and you<01:29:41.239> can<01:29:41.400> link<01:29:41.719> them<01:29:41.880> dud<01:29:42.080> this<01:29:42.199> is<01:29:42.400> super 01:29:45.030 --> 01:29:45.040 align:start position:0% 01:29:45.040 --> 01:29:49.070 align:start position:0% cool<01:29:46.040> accesss<01:29:47.000> tools<01:29:48.000> dude<01:29:48.239> I<01:29:48.320> need<01:29:48.560> I<01:29:48.639> need<01:29:48.840> a 01:29:49.070 --> 01:29:49.080 align:start position:0% cool accesss tools dude I need I need a 01:29:49.080 --> 01:29:52.830 align:start position:0% cool accesss tools dude I need I need a a<01:29:49.400> m<01:29:50.400> it<01:29:50.520> need<01:29:51.119> small<01:29:51.400> update<01:29:51.840> this<01:29:51.960> is<01:29:52.320> uh<01:29:52.719> this 01:29:52.830 --> 01:29:52.840 align:start position:0% a m it need small update this is uh this 01:29:52.840 --> 01:29:55.430 align:start position:0% a m it need small update this is uh this is<01:29:52.920> a<01:29:53.040> bit<01:29:53.239> old<01:29:53.560> now<01:29:54.360> but<01:29:54.639> one<01:29:54.760> of<01:29:55.000> technique<01:29:55.320> I 01:29:55.430 --> 01:29:55.440 align:start position:0% is a bit old now but one of technique I 01:29:55.440 --> 01:29:59.390 align:start position:0% is a bit old now but one of technique I use<01:29:55.639> when<01:29:55.800> I<01:29:55.920> do<01:29:56.239> blind<01:29:57.119> xss<01:29:57.840> is<01:29:58.000> I<01:29:58.159> do<01:29:58.760> spider 01:29:59.390 --> 01:29:59.400 align:start position:0% use when I do blind xss is I do spider 01:29:59.400 --> 01:30:01.470 align:start position:0% use when I do blind xss is I do spider fetch<01:30:00.239> so<01:30:00.400> I<01:30:00.520> look<01:30:00.639> at<01:30:00.760> all<01:30:00.920> the<01:30:01.040> link<01:30:01.199> on<01:30:01.360> the 01:30:01.470 --> 01:30:01.480 align:start position:0% fetch so I look at all the link on the 01:30:01.480 --> 01:30:04.270 align:start position:0% fetch so I look at all the link on the page<01:30:02.320> and<01:30:02.480> I<01:30:02.560> try<01:30:02.800> to<01:30:02.880> F<01:30:03.239> them<01:30:03.440> but<01:30:03.520> I<01:30:03.639> fed<01:30:04.040> them 01:30:04.270 --> 01:30:04.280 align:start position:0% page and I try to F them but I fed them 01:30:04.280 --> 01:30:07.390 align:start position:0% page and I try to F them but I fed them with<01:30:04.400> the<01:30:04.560> option<01:30:05.239> cash<01:30:05.600> only<01:30:06.600> uh<01:30:06.719> only<01:30:07.159> only 01:30:07.390 --> 01:30:07.400 align:start position:0% with the option cash only uh only only 01:30:07.400 --> 01:30:09.750 align:start position:0% with the option cash only uh only only only<01:30:07.600> if<01:30:07.800> cached<01:30:08.520> that<01:30:08.639> mean<01:30:08.880> if<01:30:09.000> the<01:30:09.159> admin 01:30:09.750 --> 01:30:09.760 align:start position:0% only if cached that mean if the admin 01:30:09.760 --> 01:30:11.430 align:start position:0% only if cached that mean if the admin has<01:30:10.000> visit<01:30:10.239> the<01:30:10.360> link<01:30:10.719> I<01:30:10.760> will<01:30:10.960> get<01:30:11.080> the<01:30:11.239> data 01:30:11.430 --> 01:30:11.440 align:start position:0% has visit the link I will get the data 01:30:11.440 --> 01:30:12.950 align:start position:0% has visit the link I will get the data from<01:30:11.600> the<01:30:11.719> link<01:30:12.119> without<01:30:12.400> triggering<01:30:12.800> a 01:30:12.950 --> 01:30:12.960 align:start position:0% from the link without triggering a 01:30:12.960 --> 01:30:15.669 align:start position:0% from the link without triggering a request<01:30:13.840> so<01:30:14.040> I<01:30:14.159> won't<01:30:14.560> be<01:30:14.719> clicking<01:30:15.040> on<01:30:15.320> delet 01:30:15.669 --> 01:30:15.679 align:start position:0% request so I won't be clicking on delet 01:30:15.679 --> 01:30:17.669 align:start position:0% request so I won't be clicking on delet database<01:30:16.159> button<01:30:16.440> or<01:30:16.600> stuff<01:30:16.840> like<01:30:17.000> that<01:30:17.480> but<01:30:17.600> I 01:30:17.669 --> 01:30:17.679 align:start position:0% database button or stuff like that but I 01:30:17.679 --> 01:30:19.270 align:start position:0% database button or stuff like that but I will<01:30:17.800> still<01:30:18.119> be<01:30:18.239> able<01:30:18.440> to<01:30:18.520> steal<01:30:18.920> everything 01:30:19.270 --> 01:30:19.280 align:start position:0% will still be able to steal everything 01:30:19.280 --> 01:30:25.270 align:start position:0% will still be able to steal everything from<01:30:19.440> the<01:30:20.040> cash<01:30:21.040> that's<01:30:21.600> that's<01:30:21.760> a<01:30:21.960> cool<01:30:22.320> tip<01:30:23.320> I 01:30:25.270 --> 01:30:25.280 align:start position:0% from the cash that's that's a cool tip I 01:30:25.280 --> 01:30:27.149 align:start position:0% from the cash that's that's a cool tip I it's<01:30:25.520> cool<01:30:25.719> that<01:30:25.840> you<01:30:26.000> thought<01:30:26.159> of<01:30:26.400> that 01:30:27.149 --> 01:30:27.159 align:start position:0% it's cool that you thought of that 01:30:27.159 --> 01:30:28.550 align:start position:0% it's cool that you thought of that because<01:30:27.679> I<01:30:27.760> would<01:30:27.960> definitely<01:30:28.280> have<01:30:28.440> just 01:30:28.550 --> 01:30:28.560 align:start position:0% because I would definitely have just 01:30:28.560 --> 01:30:30.910 align:start position:0% because I would definitely have just been<01:30:28.760> like<01:30:28.960> grab<01:30:29.440> everything<01:30:30.119> and<01:30:30.320> then<01:30:30.600> like 01:30:30.910 --> 01:30:30.920 align:start position:0% been like grab everything and then like 01:30:30.920 --> 01:30:32.270 align:start position:0% been like grab everything and then like you<01:30:31.000> would<01:30:31.199> click<01:30:31.360> on<01:30:31.600> button<01:30:31.840> you<01:30:31.960> don't<01:30:32.119> want 01:30:32.270 --> 01:30:32.280 align:start position:0% you would click on button you don't want 01:30:32.280 --> 01:30:34.950 align:start position:0% you would click on button you don't want to<01:30:32.400> click<01:30:32.600> on<01:30:33.199> yeah<01:30:33.480> yeah<01:30:33.679> yeah<01:30:34.280> that<01:30:34.400> would<01:30:34.600> be 01:30:34.950 --> 01:30:34.960 align:start position:0% to click on yeah yeah yeah that would be 01:30:34.960 --> 01:30:36.910 align:start position:0% to click on yeah yeah yeah that would be that<01:30:35.040> would<01:30:35.239> be<01:30:35.560> really<01:30:35.760> bad<01:30:36.119> if<01:30:36.159> you<01:30:36.280> do<01:30:36.800> yeah 01:30:36.910 --> 01:30:36.920 align:start position:0% that would be really bad if you do yeah 01:30:36.920 --> 01:30:38.590 align:start position:0% that would be really bad if you do yeah if<01:30:37.000> you<01:30:37.119> do<01:30:37.400> blind<01:30:37.719> excess<01:30:38.159> you<01:30:38.239> should<01:30:38.400> be 01:30:38.590 --> 01:30:38.600 align:start position:0% if you do blind excess you should be 01:30:38.600 --> 01:30:40.430 align:start position:0% if you do blind excess you should be very<01:30:38.800> careful<01:30:39.159> on<01:30:39.400> what<01:30:39.639> link<01:30:39.960> you<01:30:40.040> are 01:30:40.430 --> 01:30:40.440 align:start position:0% very careful on what link you are 01:30:40.440 --> 01:30:44.030 align:start position:0% very careful on what link you are fetching<01:30:41.440> that's<01:30:41.600> a<01:30:41.760> great 01:30:44.030 --> 01:30:44.040 align:start position:0% 01:30:44.040 --> 01:30:46.229 align:start position:0% point<01:30:45.040> so<01:30:45.239> yeah<01:30:45.360> this<01:30:45.440> is<01:30:45.520> another<01:30:45.760> tool<01:30:46.080> maybe 01:30:46.229 --> 01:30:46.239 align:start position:0% point so yeah this is another tool maybe 01:30:46.239 --> 01:30:47.790 align:start position:0% point so yeah this is another tool maybe for<01:30:46.400> another 01:30:47.790 --> 01:30:47.800 align:start position:0% for another 01:30:47.800 --> 01:30:51.470 align:start position:0% for another talk<01:30:48.800> um<01:30:49.679> muui<01:30:50.280> says<01:30:50.800> maybe<01:30:51.080> outside<01:30:51.320> of<01:30:51.400> the 01:30:51.470 --> 01:30:51.480 align:start position:0% talk um muui says maybe outside of the 01:30:51.480 --> 01:30:52.709 align:start position:0% talk um muui says maybe outside of the scope<01:30:51.679> of<01:30:51.800> the<01:30:51.880> slides<01:30:52.199> but<01:30:52.320> would<01:30:52.440> it<01:30:52.560> be 01:30:52.709 --> 01:30:52.719 align:start position:0% scope of the slides but would it be 01:30:52.719 --> 01:30:54.510 align:start position:0% scope of the slides but would it be possible<01:30:52.960> to<01:30:53.080> share<01:30:53.400> workflow 01:30:54.510 --> 01:30:54.520 align:start position:0% possible to share workflow 01:30:54.520 --> 01:30:57.070 align:start position:0% possible to share workflow that<01:30:54.719> would<01:30:54.960> automate<01:30:55.440> the<01:30:55.560> use<01:30:55.760> of<01:30:56.040> pp<01:30:56.400> finder 01:30:57.070 --> 01:30:57.080 align:start position:0% that would automate the use of pp finder 01:30:57.080 --> 01:30:58.669 align:start position:0% that would automate the use of pp finder um<01:30:57.320> for<01:30:57.639> kaido<01:30:58.000> is<01:30:58.080> that<01:30:58.199> what<01:30:58.280> you're<01:30:58.440> talking 01:30:58.669 --> 01:30:58.679 align:start position:0% um for kaido is that what you're talking 01:30:58.679 --> 01:31:01.669 align:start position:0% um for kaido is that what you're talking about<01:30:59.320> mubi<01:31:00.320> I<01:31:00.480> think<01:31:00.880> you<01:31:01.119> going<01:31:01.239> to<01:31:01.400> need<01:31:01.520> to 01:31:01.669 --> 01:31:01.679 align:start position:0% about mubi I think you going to need to 01:31:01.679 --> 01:31:03.270 align:start position:0% about mubi I think you going to need to do<01:31:01.800> it<01:31:02.080> because<01:31:02.440> I<01:31:02.520> don't<01:31:02.639> have<01:31:02.800> kaido<01:31:03.080> on<01:31:03.159> this 01:31:03.270 --> 01:31:03.280 align:start position:0% do it because I don't have kaido on this 01:31:03.280 --> 01:31:06.189 align:start position:0% do it because I don't have kaido on this computer<01:31:04.159> yeah<01:31:04.600> but<01:31:05.199> I<01:31:05.280> think<01:31:05.440> you<01:31:05.520> can<01:31:05.800> easily 01:31:06.189 --> 01:31:06.199 align:start position:0% computer yeah but I think you can easily 01:31:06.199 --> 01:31:08.990 align:start position:0% computer yeah but I think you can easily ook<01:31:06.520> request<01:31:06.920> and<01:31:07.080> replace<01:31:07.480> the<01:31:07.639> the<01:31:07.760> body<01:31:08.080> now 01:31:08.990 --> 01:31:09.000 align:start position:0% ook request and replace the the body now 01:31:09.000 --> 01:31:12.390 align:start position:0% ook request and replace the the body now yeah<01:31:09.320> we<01:31:09.400> can<01:31:09.560> do<01:31:09.719> that<01:31:10.119> so<01:31:11.080> that<01:31:11.360> um<01:31:11.960> that<01:31:12.280> that 01:31:12.390 --> 01:31:12.400 align:start position:0% yeah we can do that so that um that that 01:31:12.400 --> 01:31:13.870 align:start position:0% yeah we can do that so that um that that should<01:31:12.600> be<01:31:12.920> that<01:31:13.040> should<01:31:13.119> be<01:31:13.360> someone<01:31:13.560> we<01:31:13.679> sh 01:31:13.870 --> 01:31:13.880 align:start position:0% should be that should be someone we sh 01:31:13.880 --> 01:31:15.750 align:start position:0% should be that should be someone we sh the<01:31:14.000> script<01:31:14.320> tomorrow<01:31:14.800> on<01:31:14.920> the 01:31:15.750 --> 01:31:15.760 align:start position:0% the script tomorrow on the 01:31:15.760 --> 01:31:19.390 align:start position:0% the script tomorrow on the Discord<01:31:16.760> that'll<01:31:17.000> be<01:31:17.679> perfect<01:31:18.679> um<01:31:19.040> all<01:31:19.159> right 01:31:19.390 --> 01:31:19.400 align:start position:0% Discord that'll be perfect um all right 01:31:19.400 --> 01:31:21.510 align:start position:0% Discord that'll be perfect um all right any<01:31:19.719> any<01:31:19.960> final<01:31:20.320> questions<01:31:20.800> y'all<01:31:21.239> this<01:31:21.360> has 01:31:21.510 --> 01:31:21.520 align:start position:0% any any final questions y'all this has 01:31:21.520 --> 01:31:24.270 align:start position:0% any any final questions y'all this has been<01:31:21.679> a<01:31:21.800> very<01:31:22.040> insightful<01:31:22.560> talk<01:31:22.800> for<01:31:23.280> uh<01:31:23.520> for 01:31:24.270 --> 01:31:24.280 align:start position:0% been a very insightful talk for uh for 01:31:24.280 --> 01:31:25.709 align:start position:0% been a very insightful talk for uh for prototype<01:31:24.679> pollution<01:31:25.040> I<01:31:25.119> definitely<01:31:25.440> feel 01:31:25.709 --> 01:31:25.719 align:start position:0% prototype pollution I definitely feel 01:31:25.719 --> 01:31:26.950 align:start position:0% prototype pollution I definitely feel like<01:31:25.880> I've<01:31:26.000> got<01:31:26.119> a<01:31:26.199> better<01:31:26.400> grip<01:31:26.600> on<01:31:26.719> how<01:31:26.840> to 01:31:26.950 --> 01:31:26.960 align:start position:0% like I've got a better grip on how to 01:31:26.960 --> 01:31:32.950 align:start position:0% like I've got a better grip on how to find<01:31:27.320> this<01:31:28.679> um<01:31:29.679> let's<01:31:29.960> see<01:31:30.960> demo<01:31:31.960> question 01:31:32.950 --> 01:31:32.960 align:start position:0% find this um let's see demo question 01:31:32.960 --> 01:31:34.270 align:start position:0% find this um let's see demo question nice<01:31:33.159> if<01:31:33.239> you<01:31:33.320> find<01:31:33.440> a<01:31:33.560> prot<01:31:33.880> pollution 01:31:34.270 --> 01:31:34.280 align:start position:0% nice if you find a prot pollution 01:31:34.280 --> 01:31:35.270 align:start position:0% nice if you find a prot pollution somewhere<01:31:34.560> and<01:31:34.639> you<01:31:34.760> don't<01:31:34.960> know<01:31:35.040> how<01:31:35.159> to 01:31:35.270 --> 01:31:35.280 align:start position:0% somewhere and you don't know how to 01:31:35.280 --> 01:31:38.750 align:start position:0% somewhere and you don't know how to exploit<01:31:35.600> it<01:31:35.800> ping<01:31:36.040> me<01:31:36.679> yeah<01:31:36.880> literally<01:31:37.840> I<01:31:38.080> I<01:31:38.440> I 01:31:38.750 --> 01:31:38.760 align:start position:0% exploit it ping me yeah literally I I I 01:31:38.760 --> 01:31:40.109 align:start position:0% exploit it ping me yeah literally I I I I<01:31:38.880> found<01:31:39.080> a<01:31:39.199> client<01:31:39.520> side<01:31:39.679> prototype 01:31:40.109 --> 01:31:40.119 align:start position:0% I found a client side prototype 01:31:40.119 --> 01:31:42.590 align:start position:0% I found a client side prototype pollution<01:31:40.920> and<01:31:41.080> I<01:31:41.280> pinged<01:31:41.639> bit<01:31:41.960> K<01:31:42.320> and<01:31:42.440> he 01:31:42.590 --> 01:31:42.600 align:start position:0% pollution and I pinged bit K and he 01:31:42.600 --> 01:31:45.149 align:start position:0% pollution and I pinged bit K and he popped<01:31:42.880> it<01:31:42.960> in<01:31:43.159> like<01:31:43.360> five<01:31:43.560> minutes<01:31:44.360> so<01:31:44.920> if<01:31:45.040> you 01:31:45.149 --> 01:31:45.159 align:start position:0% popped it in like five minutes so if you 01:31:45.159 --> 01:31:47.310 align:start position:0% popped it in like five minutes so if you find<01:31:45.360> a<01:31:45.480> prototype<01:31:45.880> pollution<01:31:46.280> ping<01:31:46.560> him<01:31:46.920> and 01:31:47.310 --> 01:31:47.320 align:start position:0% find a prototype pollution ping him and 01:31:47.320 --> 01:31:51.030 align:start position:0% find a prototype pollution ping him and uh<01:31:47.760> that<01:31:48.400> that<01:31:48.480> was<01:31:48.600> like<01:31:48.679> a<01:31:48.800> 3K<01:31:49.199> Bounty<01:31:50.040> right 01:31:51.030 --> 01:31:51.040 align:start position:0% uh that that was like a 3K Bounty right 01:31:51.040 --> 01:31:53.990 align:start position:0% uh that that was like a 3K Bounty right four<01:31:51.400> 4K<01:31:52.000> that's<01:31:52.199> right<01:31:52.480> yeah<01:31:52.679> so<01:31:52.880> that's<01:31:53.239> uh 01:31:53.990 --> 01:31:54.000 align:start position:0% four 4K that's right yeah so that's uh 01:31:54.000 --> 01:31:56.629 align:start position:0% four 4K that's right yeah so that's uh that's<01:31:54.360> that<01:31:54.480> was<01:31:54.679> perfect<01:31:55.199> so<01:31:55.760> um<01:31:56.440> yeah 01:31:56.629 --> 01:31:56.639 align:start position:0% that's that was perfect so um yeah 01:31:56.639 --> 01:31:57.990 align:start position:0% that's that was perfect so um yeah definitely<01:31:56.960> hit<01:31:57.080> him<01:31:57.199> up<01:31:57.320> for<01:31:57.440> those<01:31:57.560> sort<01:31:57.719> of 01:31:57.990 --> 01:31:58.000 align:start position:0% definitely hit him up for those sort of 01:31:58.000 --> 01:32:00.750 align:start position:0% definitely hit him up for those sort of things<01:31:59.000> um<01:31:59.679> all<01:31:59.840> right<01:32:00.199> I<01:32:00.280> think<01:32:00.440> that's<01:32:00.600> a 01:32:00.750 --> 01:32:00.760 align:start position:0% things um all right I think that's a 01:32:00.760 --> 01:32:02.950 align:start position:0% things um all right I think that's a wrap<01:32:01.159> we'll<01:32:01.560> um<01:32:01.760> we'll<01:32:01.960> go<01:32:02.080> ahead<01:32:02.280> and<01:32:02.400> upload 01:32:02.950 --> 01:32:02.960 align:start position:0% wrap we'll um we'll go ahead and upload 01:32:02.960 --> 01:32:05.790 align:start position:0% wrap we'll um we'll go ahead and upload this<01:32:03.480> uh<01:32:03.600> to<01:32:03.760> the<01:32:03.920> exclusive<01:32:04.400> content<01:32:05.320> uh 01:32:05.790 --> 01:32:05.800 align:start position:0% this uh to the exclusive content uh 01:32:05.800 --> 01:32:09.510 align:start position:0% this uh to the exclusive content uh folder<01:32:06.400> in<01:32:06.639> the<01:32:06.920> Discord<01:32:07.840> ASAP<01:32:08.840> um<01:32:09.159> and<01:32:09.320> like<01:32:09.440> I 01:32:09.510 --> 01:32:09.520 align:start position:0% folder in the Discord ASAP um and like I 01:32:09.520 --> 01:32:11.470 align:start position:0% folder in the Discord ASAP um and like I mentioned<01:32:09.880> before<01:32:10.159> we'll<01:32:10.320> see<01:32:10.480> if<01:32:10.600> we<01:32:10.679> can<01:32:10.960> get 01:32:11.470 --> 01:32:11.480 align:start position:0% mentioned before we'll see if we can get 01:32:11.480 --> 01:32:13.669 align:start position:0% mentioned before we'll see if we can get uh<01:32:11.800> the<01:32:12.000> more<01:32:12.320> high<01:32:12.520> quality<01:32:12.920> recording<01:32:13.600> uh 01:32:13.669 --> 01:32:13.679 align:start position:0% uh the more high quality recording uh 01:32:13.679 --> 01:32:15.070 align:start position:0% uh the more high quality recording uh built<01:32:13.920> out<01:32:14.119> if<01:32:14.199> you<01:32:14.320> guys<01:32:14.400> are<01:32:14.560> having<01:32:14.840> any 01:32:15.070 --> 01:32:15.080 align:start position:0% built out if you guys are having any 01:32:15.080 --> 01:32:16.390 align:start position:0% built out if you guys are having any sort<01:32:15.239> of<01:32:15.400> issues<01:32:15.639> reading<01:32:15.920> the<01:32:16.000> text<01:32:16.199> on<01:32:16.320> the 01:32:16.390 --> 01:32:16.400 align:start position:0% sort of issues reading the text on the 01:32:16.400 --> 01:32:19.870 align:start position:0% sort of issues reading the text on the screen<01:32:17.199> but<01:32:17.560> um<01:32:18.199> you<01:32:18.320> can<01:32:18.520> go<01:32:18.639> to<01:32:19.040> so<01:32:19.159> much<01:32:19.360> man 01:32:19.870 --> 01:32:19.880 align:start position:0% screen but um you can go to so much man 01:32:19.880 --> 01:32:25.229 align:start position:0% screen but um you can go to so much man pptk<01:32:20.880> there's<01:32:21.080> the<01:32:21.520> slides<01:32:22.520> okay<01:32:23.040> okay<01:32:23.360> uh<01:32:23.520> PP 01:32:25.229 --> 01:32:25.239 align:start position:0% pptk there's the slides okay okay uh PP 01:32:25.239 --> 01:32:26.790 align:start position:0% pptk there's the slides okay okay uh PP B 01:32:26.790 --> 01:32:26.800 align:start position:0% B 01:32:26.800 --> 01:32:30.030 align:start position:0% B yeah<01:32:27.800> I<01:32:27.920> got<01:32:28.040> the<01:32:28.199> domain<01:32:28.520> B.K<01:32:29.199> it's<01:32:29.400> super 01:32:30.030 --> 01:32:30.040 align:start position:0% yeah I got the domain B.K it's super 01:32:30.040 --> 01:32:32.830 align:start position:0% yeah I got the domain B.K it's super super<01:32:30.440> nice<01:32:31.440> that's<01:32:31.600> awesome<01:32:32.080> man<01:32:32.560> that's 01:32:32.830 --> 01:32:32.840 align:start position:0% super nice that's awesome man that's 01:32:32.840 --> 01:32:36.629 align:start position:0% super nice that's awesome man that's great<01:32:33.280> so<01:32:33.600> drop<01:32:33.920> that<01:32:34.520> Gotta<01:32:34.800> Love<01:32:35.480> PPS<01:32:36.480> yeah 01:32:36.629 --> 01:32:36.639 align:start position:0% great so drop that Gotta Love PPS yeah 01:32:36.639 --> 01:32:38.310 align:start position:0% great so drop that Gotta Love PPS yeah but<01:32:36.840> the<01:32:36.960> issue<01:32:37.159> with<01:32:37.440> by<01:32:37.639> domain<01:32:37.960> it's 01:32:38.310 --> 01:32:38.320 align:start position:0% but the issue with by domain it's 01:32:38.320 --> 01:32:40.189 align:start position:0% but the issue with by domain it's because<01:32:38.800> TK<01:32:39.119> it's<01:32:39.280> Blacklist<01:32:39.719> from<01:32:39.920> a<01:32:40.040> bunch 01:32:40.189 --> 01:32:40.199 align:start position:0% because TK it's Blacklist from a bunch 01:32:40.199 --> 01:32:42.470 align:start position:0% because TK it's Blacklist from a bunch of<01:32:40.400> places<01:32:41.000> oh<01:32:41.199> really<01:32:41.639> so<01:32:41.719> if<01:32:41.840> I<01:32:41.960> po<01:32:42.119> a<01:32:42.199> link<01:32:42.360> on 01:32:42.470 --> 01:32:42.480 align:start position:0% of places oh really so if I po a link on 01:32:42.480 --> 01:32:44.109 align:start position:0% of places oh really so if I po a link on Twitter<01:32:42.800> nobody<01:32:43.080> see<01:32:43.280> it<01:32:43.560> because<01:32:43.760> it's<01:32:43.880> on 01:32:44.109 --> 01:32:44.119 align:start position:0% Twitter nobody see it because it's on 01:32:44.119 --> 01:32:46.990 align:start position:0% Twitter nobody see it because it's on thek<01:32:44.880> oh<01:32:45.080> no<01:32:45.520> that's<01:32:45.760> terrible<01:32:46.760> that's 01:32:46.990 --> 01:32:47.000 align:start position:0% thek oh no that's terrible that's 01:32:47.000 --> 01:32:49.550 align:start position:0% thek oh no that's terrible that's terrible<01:32:47.760> well<01:32:48.760> all<01:32:48.880> righty<01:32:49.119> guys<01:32:49.320> thank<01:32:49.480> you 01:32:49.550 --> 01:32:49.560 align:start position:0% terrible well all righty guys thank you 01:32:49.560 --> 01:32:51.390 align:start position:0% terrible well all righty guys thank you so<01:32:49.719> much<01:32:49.880> for<01:32:50.080> listening<01:32:50.719> and<01:32:51.080> thanks<01:32:51.239> for 01:32:51.390 --> 01:32:51.400 align:start position:0% so much for listening and thanks for 01:32:51.400 --> 01:32:52.790 align:start position:0% so much for listening and thanks for coming<01:32:51.600> on<01:32:51.800> bitk<01:32:52.199> anything<01:32:52.400> else<01:32:52.520> you<01:32:52.600> want<01:32:52.719> to 01:32:52.790 --> 01:32:52.800 align:start position:0% coming on bitk anything else you want to 01:32:52.800 --> 01:32:54.590 align:start position:0% coming on bitk anything else you want to shout<01:32:53.119> before<01:32:53.320> the<01:32:53.400> end<01:32:53.679> I<01:32:53.920> guess<01:32:54.080> the<01:32:54.159> tool<01:32:54.400> is 01:32:54.590 --> 01:32:54.600 align:start position:0% shout before the end I guess the tool is 01:32:54.600 --> 01:32:57.470 align:start position:0% shout before the end I guess the tool is on<01:32:54.800> the<01:32:54.960> yes<01:32:55.119> we<01:32:55.280> hack<01:32:55.520> GitHub<01:32:56.119> right<01:32:56.560> and<01:32:57.080> um 01:32:57.470 --> 01:32:57.480 align:start position:0% on the yes we hack GitHub right and um 01:32:57.480 --> 01:32:59.590 align:start position:0% on the yes we hack GitHub right and um the<01:32:57.600> slides<01:32:57.840> are<01:32:58.040> right<01:32:58.199> there<01:32:58.360> anything<01:32:58.639> else 01:32:59.590 --> 01:32:59.600 align:start position:0% the slides are right there anything else 01:32:59.600 --> 01:33:01.510 align:start position:0% the slides are right there anything else go<01:33:00.199> check<01:33:00.400> the<01:33:00.520> blog<01:33:00.719> of<01:33:00.840> yes<01:33:01.000> Weck<01:33:01.280> we<01:33:01.360> do<01:33:01.440> a 01:33:01.510 --> 01:33:01.520 align:start position:0% go check the blog of yes Weck we do a 01:33:01.520 --> 01:33:03.310 align:start position:0% go check the blog of yes Weck we do a bunch<01:33:01.679> of<01:33:01.880> research<01:33:02.679> uh<01:33:02.840> I<01:33:02.920> don't<01:33:03.080> know<01:33:03.199> if 01:33:03.310 --> 01:33:03.320 align:start position:0% bunch of research uh I don't know if 01:33:03.320 --> 01:33:04.510 align:start position:0% bunch of research uh I don't know if there<01:33:03.400> is<01:33:03.520> a<01:33:03.639> lot<01:33:03.760> of<01:33:03.880> platform<01:33:04.199> doing<01:33:04.400> their 01:33:04.510 --> 01:33:04.520 align:start position:0% there is a lot of platform doing their 01:33:04.520 --> 01:33:07.550 align:start position:0% there is a lot of platform doing their own<01:33:04.679> research<01:33:05.119> but<01:33:05.199> we<01:33:05.360> try<01:33:05.560> to<01:33:05.719> do<01:33:05.960> it<01:33:06.960> and<01:33:07.400> if 01:33:07.550 --> 01:33:07.560 align:start position:0% own research but we try to do it and if 01:33:07.560 --> 01:33:09.629 align:start position:0% own research but we try to do it and if nobody<01:33:07.880> check<01:33:08.119> it<01:33:08.320> I<01:33:08.520> will<01:33:08.920> won't<01:33:09.159> have<01:33:09.320> my<01:33:09.440> job 01:33:09.629 --> 01:33:09.639 align:start position:0% nobody check it I will won't have my job 01:33:09.639 --> 01:33:13.350 align:start position:0% nobody check it I will won't have my job anymore<01:33:10.159> so<01:33:11.159> okay<01:33:12.040> opening<01:33:12.320> up<01:33:12.440> a<01:33:12.560> browser<01:33:12.920> tag 01:33:13.350 --> 01:33:13.360 align:start position:0% anymore so okay opening up a browser tag 01:33:13.360 --> 01:33:15.990 align:start position:0% anymore so okay opening up a browser tag right<01:33:13.880> tag<01:33:14.199> right<01:33:14.360> now<01:33:14.920> it<01:33:15.040> was<01:33:15.440> it<01:33:15.520> was<01:33:15.840> nice 01:33:15.990 --> 01:33:16.000 align:start position:0% right tag right now it was it was nice 01:33:16.000 --> 01:33:18.070 align:start position:0% right tag right now it was it was nice to<01:33:16.119> be<01:33:16.320> there<01:33:16.600> and<01:33:16.800> if<01:33:16.960> you<01:33:17.119> find<01:33:17.360> me<01:33:17.679> I<01:33:17.840> go<01:33:17.920> to<01:33:18.000> a 01:33:18.070 --> 01:33:18.080 align:start position:0% to be there and if you find me I go to a 01:33:18.080 --> 01:33:19.870 align:start position:0% to be there and if you find me I go to a bunch<01:33:18.280> of<01:33:18.360> conferences<01:33:19.040> mostly<01:33:19.280> in<01:33:19.440> Europe 01:33:19.870 --> 01:33:19.880 align:start position:0% bunch of conferences mostly in Europe 01:33:19.880 --> 01:33:21.669 align:start position:0% bunch of conferences mostly in Europe but<01:33:20.000> if<01:33:20.119> you<01:33:20.320> catch<01:33:20.480> me<01:33:20.600> over<01:33:20.800> there<01:33:21.000> say<01:33:21.239> hello 01:33:21.669 --> 01:33:21.679 align:start position:0% but if you catch me over there say hello 01:33:21.679 --> 01:33:24.310 align:start position:0% but if you catch me over there say hello and<01:33:22.400> that's<01:33:22.600> it<01:33:23.119> yeah<01:33:23.440> we<01:33:23.600> I<01:33:23.800> parted<01:33:24.119> with<01:33:24.199> him 01:33:24.310 --> 01:33:24.320 align:start position:0% and that's it yeah we I parted with him 01:33:24.320 --> 01:33:26.149 align:start position:0% and that's it yeah we I parted with him a<01:33:24.400> little<01:33:24.520> bit<01:33:24.679> in<01:33:24.840> Vegas<01:33:25.199> he's<01:33:25.800> good<01:33:25.920> guy<01:33:26.040> to 01:33:26.149 --> 01:33:26.159 align:start position:0% a little bit in Vegas he's good guy to 01:33:26.159 --> 01:33:28.070 align:start position:0% a little bit in Vegas he's good guy to have<01:33:26.360> around<01:33:26.679> so<01:33:26.840> that's<01:33:27.080> great<01:33:27.639> all<01:33:27.760> righty 01:33:28.070 --> 01:33:28.080 align:start position:0% have around so that's great all righty 01:33:28.080 --> 01:33:31.560 align:start position:0% have around so that's great all righty guys<01:33:28.560> peace