{"podcast":{"title":"CyberCode Academy","slug":"cybercode-academy-7578615","podcast_index_feed_id":7578615,"rss_url":"https://www.spreaker.com/show/6790974/episodes/feed","website_url":"https://www.spreaker.com/podcast/cybercode-academy--6790974","image_url":"https://d3wo5wojvuv7l.cloudfront.net/t_rss_itunes_square_1400/images.spreaker.com/original/5f51ccc7b22fdba95149ffa6346f1533.jpg","author":"CyberCode Academy","episode_count":297,"summary":"Welcome to CyberCode Academy — your audio classroom for Programming and Cybersecurity. 🎧 Each course is divided into a series of short, focused episodes that take you from beginner to advanced level — one lesson at a time. From Python and web development to ethical hacking and digital defense, our content transforms complex concepts into simple, engaging audio learning. Study anywhere, anytime — and level up your skills with CyberCode Academy. 🚀 Learn. Code. Secure. You can listen and download our episodes for free on more than 10 different platforms: https://linktr.ee/cybercode_academy","last_synced_at":"2026-07-13T14:17:20.596630+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615"},"episode":{"title":"Course 38 - Web Security Known Web Attacks | Episode 5: SOP Fundamentals and SOME Attack Exploitation via Flash Callbacks","slug":"course-38-web-security-known-web-attacks-episode-5-sop-fundamentals-and-some-attack-exploitation-via-flash-callbacks","published_at":"2026-07-06T06:00:02+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-38-web-security-known-web-attacks-episode-5-sop-fundamentals-and-some-attack-exploitation-via-flash-callbacks","show_page_url":"https://stenobird.com/podcast/cybercode-academy-7578615","url":"https://www.spreaker.com/episode/course-38-web-security-known-web-attacks-episode-5-sop-fundamentals-and-some-attack-exploitation-via-flash-callbacks--72711737","audio_url":"https://dts.podtrac.com/redirect.mp3/api.spreaker.com/download/episode/72711737/how_some_attacks_puppeteer_your_browser.mp3","summary":"In this lesson, you’ll learn about: Same Origin Policy (SOP), its controlled exceptions, and how attackers exploit it using SOME via Flash callbacks1. What is the Same Origin Policy (SOP)🔹 Definition: A core browser security rule that restricts how documents interact 🔹 Enforced in: Web Browsers 🔹 Rule: Two URLs can interact only if all match: Protocol (HTTP / HTTPS) Host (domain) Port 👉 Key Insight SOP prevents unauthorized access between different websites2. Why SOP Exists🔹 Purpose: Protect user data (cookies, sessions, DOM) 🔹 Without SOP: Any site could read or modify another site 👉 Key Insight SOP is the foundation of web security isolation3. Soft Exclusions to SOP🔹 Allowed interactions: embedding postMessage API 🔹 Why they exist: Enable cross-origin communication safely 👉 Key Insight SOP is strict—but not absolute4. Introducing SOME (Same Origin Method Execution)🔹 Definition: A technique to execute methods across windows using references 🔹 Related concept: Reverse clickjacking 👉 Key Insight SOME doesn’t break SOP—it works around it5. Role of Flash in SOME Attacks🔹 Technology involved: Adobe Flash Player 🔹 Bridge: ActionScript ↔ JavaScript 🔹 Key function: ExternalInterface.call() 👉 Key Insight Flash acts as a bridge to execute JS indirectly6. How Flash Callbacks Become Vulnerable🔹 Weakness: Accept user-controlled input 🔹 Restrictions: Often limited to: Letters (a–z, A–Z) Numbers (0–9) Dot (.) 🔹 Still dangerous because: Can call existing JS functions 👉 Key Insight Limited input ≠ safe input7. SOME Attack Lifecycle🔹 Step-by-step: Victim visits attacker page Malicious page opens new tab Uses window.opener reference Parent tab redirected to target site Payload executes via callback 👉 Key Insight Attack uses tab relationships + timing8. DOM Manipulation via SOME🔹 Target:…","meta_description":"In this lesson, you’ll learn about: Same Origin Policy (SOP), its controlled exceptions, and how attackers exploit it using SOME via Flash callbacks1. Wha…","key_points":[],"chapters":[],"topics":[],"duration_seconds":1519,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/cybercode-academy-7578615/episodes/course-38-web-security-known-web-attacks-episode-5-sop-fundamentals-and-some-attack-exploitation-via-flash-callbacks/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-38-web-security-known-web-attacks-episode-5-sop-fundamentals-and-some-attack-exploitation-via-flash-callbacks.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}