/Hive Five #122 · May 22, 2023
STÖK is back, WTF is information disclosure, and a $1MM bounty
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Off By One Security Stream strives to bring more technical focused content to the community
Make sure to check out the “Live” tab where they cover a range of topics, such as a deep dive series into the Windows OS exploit mitigations introduced by Microsoft.
Watch : Off By One Security Stream strives to bring more technical focused content to the community -
In this bug bounty basics, InsiderPhD covers information disclosure
One of the more interesting bugs because they’re so varied in their technicality.
Watch : In this bug bounty basics, InsiderPhD covers information disclosure -
STÖK is back!
In this video he talks about escaping the grind and decompiling python 3.9 pyc files to find vulnerabilites. He’s been reversing apps to get a deeper insight into what happens underneath the hood using vscode and codeql to identify vulnerabilites.
Watch : STÖK is back! -
How to turn a write-based path traversal into a critical
This video presents an analysis of disclosed bug bounty reports about write-based path traversal vulnerabilities. Specifically, it’s about what files you should write to show the maximum impact of a path traversal like this, ideally escalating it to RCE.
Watch : How to turn a write-based path traversal into a critical