/Hive Five #112 · Mar 13, 2023
NahamSec quit recon, Top Web3 developer mistakes, and a Docker clinic
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
NahamSec quit recon… and made $10,000 in bounties
He challenged himself to use no automation and reconnaissance.
Watch : NahamSec quit recon… and made $10,000 in bounties -
Subdomain Takeover: How a Misconfigured DNS Record Could Lead to a Huge Supply Chain Attack
This blog post discusses the discovery of a vulnerability which allowed malicious actors to claim assets.npmjs.com subdomain, and would likely have constructed a supply chain attack with.
Read : Subdomain Takeover: How a Misconfigured DNS Record Could Lead to a Huge Supply Chain Attack -
Top 6 Web3 developer mistakes (and how to prevent them)
Watch : Top 6 Web3 developer mistakes (and how to prevent them) -
CorePlague: Severe Vulnerabilities in Jenkins Server Lead to RCE
Aqua Nautilus researchers have discovered a chain of vulnerabilities, dubbed CorePlague, in the widely used Jenkins Server and Update Center (CVE-2023-27898, CVE-2023-27905).
Read : CorePlague: Severe Vulnerabilities in Jenkins Server Lead to RCE -
Faster than Rust and C++: the PERFECT hash table
Watch : Faster than Rust and C++: the PERFECT hash table