It’s later than you think

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Next Gen Hacker?

   atomiczsec shares their experience as a hacker and how they use their skills in cybersecurity to solve problems and pursue their interests.

   Watch : Next Gen Hacker?
2. /02

   An interview with MVH, DEFCON Black Badge, and Googler Sam Erb

   In this episode of CTBB, they talk about the importance of understanding how systems work to find vulnerabilities, and how his engineering background influences his hunting style and methodologies.

   Watch : An interview with MVH, DEFCON Black Badge, and Googler Sam Erb
3. /03

   mega7 found an SSRF in HackerOne's Analytics Reports

   The issue allowed attackers to make internal requests from our application servers by exploiting a lack of output sanitization in an error message. By crafting malicious requests, an attacker could have accessed internal AWS services and obtained temporary credentials.

   Read : mega7 found an SSRF in HackerOne's Analytics Reports
4. /04

   Trains were locking up for arbitrary reasons after being serviced at third-party workshops

   What they found after reverse engineering is wild.

   Read : Trains were locking up for arbitrary reasons after being serviced at third-party workshops
5. /05

   Blind CSS Exfiltration: exfiltrate unknown web pages

   It can extract input’s names and values, textarea name attributes, form actions and even anchor links.

   Read : Blind CSS Exfiltration: exfiltrate unknown web pages