/Hive Five #32 · Aug 23, 2021
Introductions and infographics
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
From Pwn2Own 2021: A New Attack Surface on Microsoft Exchange - ProxyShell!
In April 2021, Orange Tsai from DEVCORE Research Team demonstrated a remote code execution vulnerability in Microsoft Exchange during the Pwn2Own Vancouver 2021 contest. In doing so, he earned himself $200,000.
Read : From Pwn2Own 2021: A New Attack Surface on Microsoft Exchange - ProxyShell! -
How to Hack Apple ID
Everyone knows what’s inside a computer isn’t really real. It pretends to be, sure, hiding just under the pixels — but they promise you it isn’t. In the real world, everything has a certain mooring we’re all attuned to.
Read : How to Hack Apple ID -
John Lambert's infosec infographics
Read : John Lambert's infosec infographics -
Common Open Redirection Bug Bounty Mistakes by codingo
Let's talk about open redirections, their impact, and common mistakes made when submitting them to bug bounty programs.
Watch : Common Open Redirection Bug Bounty Mistakes by codingo -
Malicious PDF Generator
Generate ten different malicious pdf files with phone-home functionality. Can be used with Burp Collaborator. Used for penetration testing and/or red-teaming etc.
Read : Malicious PDF Generator