{"podcast":{"title":"CyberCode Academy","slug":"cybercode-academy-7578615","podcast_index_feed_id":7578615,"rss_url":"https://www.spreaker.com/show/6790974/episodes/feed","website_url":"https://www.spreaker.com/podcast/cybercode-academy--6790974","image_url":"https://d3wo5wojvuv7l.cloudfront.net/t_rss_itunes_square_1400/images.spreaker.com/original/5f51ccc7b22fdba95149ffa6346f1533.jpg","author":"CyberCode Academy","episode_count":297,"summary":"Welcome to CyberCode Academy — your audio classroom for Programming and Cybersecurity. 🎧 Each course is divided into a series of short, focused episodes that take you from beginner to advanced level — one lesson at a time. From Python and web development to ethical hacking and digital defense, our content transforms complex concepts into simple, engaging audio learning. Study anywhere, anytime — and level up your skills with CyberCode Academy. 🚀 Learn. Code. Secure. You can listen and download our episodes for free on more than 10 different platforms: https://linktr.ee/cybercode_academy","last_synced_at":"2026-07-13T14:17:20.596630+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615"},"episode":{"title":"Course 38 - Web Security Known Web Attacks | Episode 3: RFD, Mutation XSS, and RPO","slug":"course-38-web-security-known-web-attacks-episode-3-rfd-mutation-xss-and-rpo","published_at":"2026-07-04T06:00:02+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-38-web-security-known-web-attacks-episode-3-rfd-mutation-xss-and-rpo","show_page_url":"https://stenobird.com/podcast/cybercode-academy-7578615","url":"https://www.spreaker.com/episode/course-38-web-security-known-web-attacks-episode-3-rfd-mutation-xss-and-rpo--72711731","audio_url":"https://dts.podtrac.com/redirect.mp3/api.spreaker.com/download/episode/72711731/weaponizing_browser_logic_for_web_attacks.mp3","summary":"In this lesson, you’ll learn about: Reflected File Download (RFD), Mutation XSS (mXSS), and Relative Path Overwrite (RPO) XSS1. Reflected File Download (RFD)🔹 Definition: A vulnerability where user input is reflected into a response that the browser treats as a downloadable file 🔹 How it works (high-level): Attacker crafts a URL Server reflects input into response Browser downloads it as a file (e.g., .bat, .cmd) 👉 Key Insight The attack relies more on social engineering than pure technical exploitation2. Why RFD is Dangerous🔹 Core risk: User executes a malicious file thinking it’s legitimate 🔹 Attack characteristics: File appears trusted (same domain) Filename can be manipulated Content may contain system commands 👉 Key Insight Trust in the source (domain) is what makes this attack effective3. Advanced RFD Scenario🔹 More dangerous variant: Malicious script modifies browser behavior 🔹 Example impact: Weakens browser protections Enables further data access 👉 Key Insight RFD can act as an entry point for deeper compromise4. Mutation XSS (mXSS)🔹 Definition: A type of XSS where safe input becomes dangerous after browser processing 🔹 Root cause: Browser mutates (transforms) HTML internally 👉 Key Insight The payload is not dangerous initially—it becomes dangerous after parsing5. How mXSS HappensUsing JavaScript:🔹 Scenario: Application inserts sanitized input into DOM Browser reinterprets it via innerHTML Encoded content becomes executable 👉 Key Insight Security filters can fail due to DOM re-parsing behavior6. Why mXSS Is Tricky🔹 Challenges: Payload looks harmless Bypasses traditional filters Depends on browser quirks 👉 Key Insight mXSS exploits differences between sanitization and rendering7. Relative Path Overwrite (RPO) XSS🔹 Definition: Exploits how browsers resolve relat…","meta_description":"In this lesson, you’ll learn about: Reflected File Download (RFD), Mutation XSS (mXSS), and Relative Path Overwrite (RPO) XSS1. Reflected File Download (R…","key_points":[],"chapters":[],"topics":[],"duration_seconds":987,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/cybercode-academy-7578615/episodes/course-38-web-security-known-web-attacks-episode-3-rfd-mutation-xss-and-rpo/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-38-web-security-known-web-attacks-episode-3-rfd-mutation-xss-and-rpo.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}