/Hive Five #132 · Jul 31, 2023
The key to succeed in bug bounty
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
NahamSec released all of the NahamCon2023 talks
Check out talks by ArchAngelDay, Daniel Miessler, and many more.
Watch : NahamSec released all of the NahamCon2023 talks -
The key to succeed in bug bounty
An interview with hacker and content creator NahamSec.
Watch : The key to succeed in bug bounty -
AWS Security Series: IAM Vulnerable
Learn how to create your own vulnerable playground using Terraform. Then, learn how to exploit it using 10 privilege escalation scenarios.
Watch : AWS Security Series: IAM Vulnerable -
Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646)
Metabase is an open-source business intelligence tool that lets you create charts and dashboards using data from a variety of databases and data sources.
Read : Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646) -
The Legacy of Stagefright
Every so often a piece of security research will generate a level of excitement and buzz that’s palpable. Dan Kaminsky’s DNS bug, Barnaby Jack’s ATM Jackpotting, Chris Valasek, and Charlie Miller’s Jeep hacking escapades.
Read : The Legacy of Stagefright