/Hive Five #104 · Jan 16, 2023
2022 High-Profile Breaches & 2023 Security Recommendations
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Live Recon Sundays is a series of interviews with hackers, and in this episode, the guest is @gf_256 discussing smart contract security
Watch : pick 1 -
The video team from Le Monde conducts open-source investigations using various techniques such as image analysis, OSINT, 3D reconstructions, and geolocation. (French with English subtitles.)
Watch : pick 2 -
Exploiting Application Logic to Phish Internal Mailing Lists
Read : Exploiting Application Logic to Phish Internal Mailing Lists -
A thread by Jason Haddix discussing the lessons that can be learned from the high-profile breaches of 2022 and recommendations for security programs in 2023.
Read : pick 4 -
Hacking Redis for fun and CTF points
This post will go through an exploit that achieves code execution in the Redis server via a memory corruption issue. It works for Redis 6.0.16, the Ubuntu 22.04 repos’ current version at the time of writing.
Read : Hacking Redis for fun and CTF points