Recon master, ransomwhere, and AWS

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Interview with base_64 (19 y/o) | ~7000 rep on hackerone | methodology, mindset, life & more...

   Here we have someone who started his Bug Bounty journey at the very young age of 16, and now at age 19, he has almost 7000 Rep on HackerOne.

   Watch : Interview with base_64 (19 y/o) | ~7000 rep on hackerone | methodology, mindset, life & more...
2. /02

   They are all Injection Vulnerabilities! - Security Simplified

   What do SQL injections, command injections, and Cross-site scripting have in common? The answer is that they are all injection vulnerabilities.

   Watch : They are all Injection Vulnerabilities! - Security Simplified
3. /03

   Getting Partial AWS Account IDs for any Cloudfront Website

   Getting Partial AWS Account IDs for any Cloudfront Website.

   Read : Getting Partial AWS Account IDs for any Cloudfront Website
4. /04

   Mass Assignment exploitation in the wild – Escalating privileges in style

   Read : Mass Assignment exploitation in the wild – Escalating privileges in style
5. /05

   Whose app are you downloading? Link hijacking Binance’s shortlinks through AppsFlyer

   While auditing the Binance program through their public bug bounty program, they noticed that some of the site’s shortlinks were being routed through a third-party app analytics platform called AppsFlyer.

   Read : Whose app are you downloading? Link hijacking Binance’s shortlinks through AppsFlyer