“No one can make you feel inferior without your consent.” ― Eleanor Roosevelt

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Template Injection in Action

   A 2-hour workshop, by GoSecure, on Template Injection. It consists of six labs, an hour long video, covering five different template engines.

   Read : Template Injection in Action
2. /02

   The Secret Parameter, LFR, and Potential RCE in NodeJS Apps

   A great write-up by CAPTAINFREAK on a common setup of NodeJS + Express + HBS with a potentially critical vulnerability.

   Read : The Secret Parameter, LFR, and Potential RCE in NodeJS Apps
3. /03

   New campaign targeting security researchers

   As if 2020 wasn't crazy enough, we start 2021 off with a bang. The Threat Analysis Group has identified an ongoing campaign targeting security researchers working on vulnerability research and development at different companies and organizations.

   Read : New campaign targeting security researchers
4. /04

   What happened with GameStop?

   It's not David vs Goliath. It's Goliath vs. Goliath, with David as a fig leaf, former Wall Street professional Alexis Goldstein explains.

   Read : What happened with GameStop?
5. /05

   Thread dedicated to Tunneling/PortForwarding tricks

   Tunneling and port-forwarding can be a struggle, I know it can be for me. @infosec_scarlet explains concepts for successful tests.

   Read : Thread dedicated to Tunneling/PortForwarding tricks