DEFCON and friends

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   How to Hack APIs in 2021

   Written by Hakluke and Farah Hawa.

   Read : How to Hack APIs in 2021
2. /02

   Just Gopher It - Escalating a Blind SSRF to RCE for $15k

   This was discovered on the main scope of one of Hackerone’s longest-running, largest bug bounty programs.

   Read : Just Gopher It - Escalating a Blind SSRF to RCE for $15k
3. /03

   Jan Schaumann talks about TLDs

   You know, .com, .org, .net, .gov, .vermögensberatung and .香港 - those.

   Read : Jan Schaumann talks about TLDs
4. /04

   How to Use WPScan With ethicalhack3r

   Ever wondered how to properly use WPScan? Well you're in luck! NahamSec had the chance to sit down with WPScan's author, ethicalhack3r, and get a walkthrough during an episode of Live Recon!

   Watch : How to Use WPScan With ethicalhack3r