A new recon source: DuckDuckGo Tracker Radar

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   A writeup for a challenge to demonstrate how the content-type header can be used to fool the browser into treating the HTTP response body in unexpected ways.

   Read : pick 1
2. /02

   A new recon source: DuckDuckGo Tracker Radar

   This is not a block list, but a data set of the most common third party domains on the web with information about their behavior, classification and ownership.

   Read : A new recon source: DuckDuckGo Tracker Radar
3. /03

   OFFZONE Moscow talk: HTTP Request Splitting vulnerabilities exploitation by Sergey Bobrov

   Watch : OFFZONE Moscow talk: HTTP Request Splitting vulnerabilities exploitation by Sergey Bobrov
4. /04

   Hacker Tweets Explained

   LiveOverflow explains what you can learn from a Rhynorater tweet on exploiting tricky XSS.

   Watch : Hacker Tweets Explained
5. /05

   Testing the Limits of Prompt Injection Defence

   Uncovering the unique complexities of securing LLMs from prompt injection attacks.

   Read : Testing the Limits of Prompt Injection Defence