/Hive Five #12 · Mar 29, 2021
“In three words I can sum up everything I've learned about life: it goes on.” ― Robert Frost
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Recovering a full PEM Private Key when half of it is redacted
A write-up covering how given a partially redacted PEM, the whole private key can be recovered. The Twitter user, SAXX, shared a partially redacted private RSA key in a tweet about a penetration test where they had recovered a private key.
Read : Recovering a full PEM Private Key when half of it is redacted -
TomNomNom talk about Networking Fundamentals
Let's learn a bit about networking. Slides
Watch : TomNomNom talk about Networking Fundamentals -
Hidden OAuth attack vectors
The OAuth2 authorization protocol has been under fire for the past ten years. You've probably already heard about plenty of "return_uri" tricks, token leakages, CSRF-style attacks on clients, and more.
Read : Hidden OAuth attack vectors -
Chapter 1 Security Fundamentals - Alice and Bob Learn Application Security
Tanya and guests answer and discuss questions about chapters of her book.
Watch : Chapter 1 Security Fundamentals - Alice and Bob Learn Application Security