Using Discord Bots for OSINT Investigations

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   After Okta was breached, they recommended sanitizing all credentials and cookies/session tokens within HAR files—Cloudflare said: hold my beer, and released such a tool.

   Read : pick 1
2. /02

   The Beginner's Guide to Blind XSS (Cross-Site Scripting)

   Watch : The Beginner's Guide to Blind XSS (Cross-Site Scripting)
3. /03

   Pieter Levels: The Indie Hacker’s Guide to AI Startups

   He claims that "Indie Hacking is dead." Yet, Pieter runs several indie AI startups (and a few traditional ones), totaling $250,000 in revenue every month.

   Watch : Pieter Levels: The Indie Hacker’s Guide to AI Startups
4. /04

   HITB2023HKT D2T1 talk by Yassine Aboukir: Hunting For Amazon Cognito Security Misconfigurations

   Watch : HITB2023HKT D2T1 talk by Yassine Aboukir: Hunting For Amazon Cognito Security Misconfigurations
5. /05

   Citrix Bleed: Leaking Session Tokens with CVE-2023-4966

   It's time for another round Citrix Patch Diffing! Earlier this month Citrix released a security bulletin which mentioned "unauthenticated buffer-related vulnerabilities" and two CVEs. These issues affected Citrix NetScaler ADC and NetScaler Gateway.

   Read : Citrix Bleed: Leaking Session Tokens with CVE-2023-4966