Extreme Ownership

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Fabio Viggiani & Fredrik Alexandersson - Gone in 45 min, War stories from Incident Response

   Watch : Fabio Viggiani & Fredrik Alexandersson - Gone in 45 min, War stories from Incident Response
2. /02

   Introduction to Bash Programming

   Bash is one of the most flexible programming languages and it's especially useful for infosec and bug bounty automation.

   Watch : Introduction to Bash Programming
3. /03

   Building a POC for CVE-2021-40438

   If you’re blue team and want to know what an exploit for this looks like for filtering purposes they’ve added that information for you in the conclusions section. one-liner.

   Read : Building a POC for CVE-2021-40438
4. /04

   BT’s Metaversal Album Treasure Hunt Solution

   The musical artist known as BT recently launched his 14th album as an interactive NFT experience on the Arweave blockchain called Metaversal. Part of this experience was a multiple day long puzzle treasure hunt.

   Read : BT’s Metaversal Album Treasure Hunt Solution
5. /05

   SAML Padding Oracle

   ArcGIS is a family of software providing geographic information system services. In this blogpost they show how they found and exploited an AES-CBC padding oracle in this flow. (Via PentesterLab)

   Read : SAML Padding Oracle