/Hive Five #162 · Feb 26, 2024
Go Go Bug Bounty Gadgets
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel discuss the concept of gadgets and how they can be used to escalate the impact of vulnerabilities. They talk through things like HTML injection, image injection, CRLF injection, web cache deception, and more.
Watch : pick 1 -
This video introduces Fabric—an open-source project for augmenting humans using AI
It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.
Watch : This video introduces Fabric—an open-source project for augmenting humans using AI -
Top 10 web hacking techniques of 2023, the 17th edition of the annual community-powered effort to identify the most innovative must-read web security research published last year.
Read : pick 3 -
A collection of full-stack resources for programmers
The goal of this page is to make you a more proficient developer. You'll find only resources that the curator found truly inspiring, or that have become timeless classics
Read : A collection of full-stack resources for programmers -
Go Go XSS Gadgets: Chaining a DOM Clobbering Exploit in the Wild
The takeaway is to keep track of origins, headers, CSP rules, and JavaScript files in your Burp state when you’re bug bounty hunting.
Read : Go Go XSS Gadgets: Chaining a DOM Clobbering Exploit in the Wild