I miss the old internet

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Live web app hacking using Caido with it’s co-founder sytten

   Caido is a lightweight web security auditing toolkit.

   Watch : Live web app hacking using Caido with it’s co-founder sytten
2. /02

   A hacker interview with Ryan Montgomery aka 0day

   Watch : A hacker interview with Ryan Montgomery aka 0day
3. /03

   Full Disclosure - DOM-based XSS And Failures In Bug Bounty Hunting

   Kuldeep shares a bug bounty failure and 3 actionable takeaways.

   Read : Full Disclosure - DOM-based XSS And Failures In Bug Bounty Hunting
4. /04

   Hunting for Nginx Alias Traversals in the wild

   This article delves into the intricacies of Nginx, focusing on the location and alias directives that are central to how Nginx handles specific URLs.

   Read : Hunting for Nginx Alias Traversals in the wild
5. /05

   Patch Diffing CVE-2023-28121 to Compromise a WooCommerce

   Back in March 2023, Julien noticed an interesting security advisory that was published by Wordfence about a critical “Authentication Bypass and Privilege Escalation” (aka CVE-2023-28121) affecting the “WooCommerce Payments” plugin which has more than 600.

   Read : Patch Diffing CVE-2023-28121 to Compromise a WooCommerce