Fearless CORS, JavaScript Analysis, and Subdomain Takeovers

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Jason Haddix shares his ultimate workflow for simple and easy JavaScript Analysis

   Often you can find juicy hidden endpoints, parameters, and domains buried in JS.

   Read : Jason Haddix shares his ultimate workflow for simple and easy JavaScript Analysis
2. /02

   inversecos announced their new training company Xintra and also released their first course: Attacking and Defending Azure/M365.

   Read : pick 2
3. /03

   Fearless CORS: a design philosophy for CORS middleware libraries (and a Go implementation)

   In this post, jub0bs investigates the reasons for developers’ difficulties with CORS and derives Fearless CORS, a design philosophy for better CORS middleware libraries.

   Read : Fearless CORS: a design philosophy for CORS middleware libraries (and a Go implementation)
4. /04

   Subdomain Takeover with HuskyHacks

   In which they explore this dangerous misconfiguration and steal each other’s domains.

   Watch : Subdomain Takeover with HuskyHacks
5. /05

   Ethernaut - 0 - Hello Ethernaut walkthrough

   The Ethernaut is a Web3/Solidity based wargame inspired by overthewire.org, played in the Ethereum Virtual Machine.

   Watch : Ethernaut - 0 - Hello Ethernaut walkthrough