/Hive Five #43 · Nov 8, 2021
Magic
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
How do you tell if a problem is caused by DNS?
A lot of people have server issues (“my server is down! or it’s slow!“), but they can’t tell if the problem is caused by DNS or not.
Read : How do you tell if a problem is caused by DNS? -
Sitecore Experience Platform Pre-Auth RCE
One of the missions at Assetnote is to secure the attack surfaces of enterprises around the world. In order to achieve that goal, their security research team cannot solely rely on the public disclosure of vulnerabilities.
Read : Sitecore Experience Platform Pre-Auth RCE -
API Tokens - A Tedious Survey
Read : API Tokens - A Tedious Survey -
Anatomy of a Terminal Emulator
We’ll talk about the different parts of the terminal and how they interact, build a small program to read input from the shell and understand how it’s interpreted, discuss how to create a user interface in the terminal and finally see how we can use all of this to cause some mischief.
Read : Anatomy of a Terminal Emulator -
Introducing CookieMonster: a tool for breaking stateless authentication
When you log into a website, many web frameworks will issue you a cookie as proof that you have correctly authenticated. In the past, this token was just a random identifier that was assigned to the user in the application's database.
Read : Introducing CookieMonster: a tool for breaking stateless authentication