/Hive Five #38 · Oct 4, 2021
The Art of Not Giving a F*ck
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
HacktivityCon 2021 talks are available
Read : HacktivityCon 2021 talks are available -
How to Create a Better Infosec Resume (with jhaddix)
This episode of Live Recon was not focused so much on the guest or doing any actual recon, but instead a workshop to help people with their resume. Whether you are a bug bounty hunter, someone with some IT or hacking.
Watch : How to Create a Better Infosec Resume (with jhaddix) -
Training XSS Muscles
XSS is all about practice. It requires a lot of time to print in the mind all vectors, payloads and tricks at our disposal. There are lots of XSS cases, each one requiring a different approach and construct to pop the alert box.
Read : Training XSS Muscles -
Prototype Pollution
An interesting vulnerability, either it is server-side or client-side. Based on the application logic, prototype pollution leads to other vulnerabilities.
Read : Prototype Pollution -
Chasing a Dream - Pre-authenticated Remote Code Execution in Dedecms
a technical review of Dedecms (or “Chasing a Dream” CMS as translated to English) including its attack surface and how it differs from other applications.
Read : Chasing a Dream - Pre-authenticated Remote Code Execution in Dedecms