Read the Bleeping RFC, Meth to Netflix, and Speedrunning Web3 Bug Hunts

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   RTFR (Read The Bleeping RFC), a talk by securinti @ NahamCon 2022 EU

   Find out how to read RFC's to find unique vulnerabilities.

   Watch : RTFR (Read The Bleeping RFC), a talk by securinti @ NahamCon 2022 EU
2. /02

   Meth to Netflix: ThePrimeagen story

   One of Twitch's most entertaining streamers shares his background and lessons learned.

   Watch : Meth to Netflix: ThePrimeagen story
3. /03

   I Hope This Sticks: Analyzing ClipboardEvent Listeners for Stored XSS

   When is copy-paste payloads not self-XSS? When it’s stored XSS. Recently, spaceraccoon reviewed Zoom’s code to uncover an interesting attack vector. Along the way, they dived into the ClipboardEvent and DataTransfer web APIs and learned a lot about dynamic drag-and-drop internals.

   Read : I Hope This Sticks: Analyzing ClipboardEvent Listeners for Stored XSS
4. /04

   Twelve Days of ZAPmas: Day 1 - Setting Up ZAP

   A run down some of the ins and outs of working with OWASP Zed Attack Proxy (ZAP).

   Read : Twelve Days of ZAPmas: Day 1 - Setting Up ZAP
5. /05

   Better Make Sure Your Password Manager Is Secure

   As part of a security analysis, kuekerino (T / M), ubahnverleih (T / M) and parzel (T / M) examined the password management solution Passwordstate of Click Studios and identified multiple high severity vulnerabilities (CVE-2022-3875, CVE-2022-3876, CVE-2022-3877).

   Read : Better Make Sure Your Password Manager Is Secure