There’s work and there’s your life’s work

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   The Bug Bounty Podcast is back with it’s 215th episode: DEF CON, HardwearIO, Broken Caching, and Dropping Headers.

   Watch : pick 1
2. /02

   The story behind archive[.]today: On the trail of the mysterious guerrilla archivist of the Internet

   Read : The story behind archive[.]today: On the trail of the mysterious guerrilla archivist of the Internet
3. /03

   RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044)

   Over the last year or so, we’ve seen the mass exploitation of managed file transfer software. From GoAnywhere MFT, MOVEIt, and Assetnotes’ own work on Citrix Sharefile.

   Read : RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044)
4. /04

   Exploiting HTTP Parsers Inconsistencies

   Unveiling Vulnerabilities in HTTP Parsers: Exploiting Inconsistencies for Security Breaches.

   Read : Exploiting HTTP Parsers Inconsistencies
5. /05

   Illwill brings us down memory lane by sharing the complete source code to Sub7 2.1.3 before their talk at BSides CT. Sub7 or SubSeven is a (RAT) Remote Access Trojan horse program originally released in 1999.

   Read : pick 5