HACKING postMessage() FOR BEGINNERS!

Hi! I'm a pentester and a bug bounty hunter who's learning everyday and sharing useful resources as I move along. Subscribe to my channel because I'll be sharing my knowledge in new videos regularly. SIGN UP ON Intigriti: http://go.intigriti.com/farah BUY ME A COFFEE: https://www.buymeacoffee.com/farahhawa SOCIAL MEDIA: Follow me on Twitter:   / farah_hawaa   Follow me on Instagram:   / farah_hawaa   Connect with me on LinkedIn:   / farah-hawa-a012b8162   TIME STAMPS: 0:43 Same-Origin Policy 1:14 When is postMessage() used 2:26 Parent window code 3:16 Child window code 4:11 Bug 1- Sender's origin not validated: 5:32 Bug 2- Target origin not specified: postMessage() LABS: https://github.com/t4kemyh4nd/postMes... https://github.com/shurmajee/postmess... RESOURCES FOR postMessage(): https://developer.mozilla.org/en-US/d... https://www.mcafee.com/blogs/enterpri... https://jlajara.gitlab.io/web/2020/06...   / exploiting-post-message-to-steal-users-coo...   Video editor: https://www.fiverr.com/pixelstudios1