/Hive Five #109 · Feb 20, 2023
Find Linux Kernel bugs and Escape, How to Bug Bounty in 2023, Server-side prototype pollution
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Top 10 Web Hacking Techniques of 2022, the 16th edition of the annual community-powered effort to identify the most important and innovative web security research published in the last year.
Read : pick 1 -
Recon2022: Breaking the Glass Sandbox - Find Linux Kernel Bugs and Escape
chompie’s Recon2022 talk.
Watch : Recon2022: Breaking the Glass Sandbox - Find Linux Kernel Bugs and Escape -
VPNs, Proxies and Secure Tunnels Explained (Deepdive)
What is a secure “tunnel”?
Watch : VPNs, Proxies and Secure Tunnels Explained (Deepdive) -
How to Bug Bounty in 2023 by NahamSec
Watch : How to Bug Bounty in 2023 by NahamSec -
Server-side prototype pollution: Black-box detection without the DoS
Server-side prototype pollution is hard to detect black-box without causing a DoS. In this post, they introduce a range of safe detection techniques, which they’ve also implemented in an open source Burp Suite extension.
Read : Server-side prototype pollution: Black-box detection without the DoS