/Hive Five #20 · May 24, 2021
Low Hanging Fruit and Peaches
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Inside Security S01E11 | Most Threat Actors suck!
Why is that? Is it just too easy with the low hanging fruit out there or are they just script kiddies? Listen to when @dlilja & @pry0cc joins Inside Security and spend the entire episode talking about this very thing.
Watch : Inside Security S01E11 | Most Threat Actors suck! -
Finding and Exploiting Unintended Functionality in Main Web App APIs
Some thoughts on how they recently found two impactful vulnerabilities in APIs. The steps and techniques below should be generic enough to help find similar API vulnerabilities — IDORs, Privilege Escalation, Information Disclosure, and more.
Read : Finding and Exploiting Unintended Functionality in Main Web App APIs -
Life’s a Peach (Fuzzer): How to Build and Use GitLab’s Open-Source Protocol Fuzzer
The Peach protocol fuzzer was a well-known protocol fuzzer whose parent company — Peach Tech — was acquired in 2020 by GitLab. While Peach Tech had previously released a Community Edition of Peach fuzzer, it lacked many key features and updates found in the commercial editions.
Read : Life’s a Peach (Fuzzer): How to Build and Use GitLab’s Open-Source Protocol Fuzzer -
MOBISEC : Mobile Security Course
material and resources for the Mobile Systems and Smartphone Security (aka Mobile Security, aka MOBISEC) course, first taught in Fall 2018 at EURECOM (Note: the material reflects the last edition, MOBISEC 2020).
Read : MOBISEC : Mobile Security Course -
Great getting started resources for new users of Burp Suite Professional
A list of resources to help you get started. Whether you're a pentester looking to do more in less time, or you want to take your bug bounty hunting to the next level, there's something here for everyone.
Read : Great getting started resources for new users of Burp Suite Professional