The Power of Recon

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Relative Path File Injection (RPFI) is a technique that builds upon the Relative Path Overwrite (RPO) technique, allowing for injection of arbitrary files into the target application.

   Read : pick 1
2. /02

   Ngo on how how they discovered CVE-2024-0200, a deceptively simple, one-liner vulnerability turned it into one of the most impactful bugs in GitHub’s bug bounty history.

   Read : pick 2
3. /03

   Godfather Orwa's "The Power of Recon" talk explores top intel gathering and vulnerability spotting techniques

   Watch : Godfather Orwa's "The Power of Recon" talk explores top intel gathering and vulnerability spotting techniques
4. /04

   Digging for SSRF in NextJS apps (CVE-2024-34351)

   The term 'static' might imply a lack of functionality and minimal risk. Yet, these frameworks often rely on numerous underlying APIs and logic, presenting a considerable attack surface.

   Read : Digging for SSRF in NextJS apps (CVE-2024-34351)
5. /05

   Hacking Apple: SQL Injection to Remote Code Execution

   Exploring the source code of Masa/Mura CMS.

   Read : Hacking Apple: SQL Injection to Remote Code Execution