Interested in going full-time bug bounty? Check out our blueprint!

Iframe hijacking via predictable window.open target names.

Whenever you see a pop-up or change happening in an iframe, look to see the window.open call that's doing it and check the name on that.

If using a guessable iframe name, you might be able to hijack it and control the flow!