/Hive Five #133 · Aug 7, 2023
How to Study Bug Bounty Hunting
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
HTML Over the Wire - A new web app architecture pattern is being adopted by many popular frameworks
Let’s talk about risk! TL;DR: Early web applications made you wait after every click until it could render an HTML response on the server and send it back.
Read : HTML Over the Wire - A new web app architecture pattern is being adopted by many popular frameworks -
CSRFing VS Code’s Debug Adapter Protocol
Local debug adapter TCP servers, deployed as part of a Debug Adapter Protocol (DAP) implementation used by VS Code, Visual Studio and other development tools, are vulnerable to cross-site request forgery (CSRF) from malicious JavaScript executed in the IDE user’s web browser.
Read : CSRFing VS Code’s Debug Adapter Protocol -
Hahwul is excited to announce the release of his toy project called ‘Noir’
It’s a source code analysis tool that identifies API endpoints, methods, parameters, and more within the source code, providing various formats of output.
Read : Hahwul is excited to announce the release of his toy project called ‘Noir’ -
How to Study Bug Bounty Hunting
Learning how to hack and applying it to bug bounty can be approached in a variety of ways. While there isn’t a clear-cut path to follow, simply providing a list of recommended resources isn’t always very helpful to all types of learners.
Read : How to Study Bug Bounty Hunting -
Leaked Secrets and Unlimited Miles: Hacking the Largest Rewards Vendor
Between March 2023 and May 2023, they identified multiple security vulnerabilities within points[.]com, the backend provider for a significant portion of airline and hotel rewards programs.
Read : Leaked Secrets and Unlimited Miles: Hacking the Largest Rewards Vendor