Skip to content
/ Bee Gagliardi Ecosystem Engineer

/Hive Five #44 · Nov 15, 2021

Hyper scheduling

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

  1. We Know Which Private Keys Are Bad

    Asymmetric private keys are among the most often leaked out. A new open source tool driftwood will immediately tell you if one is sensitive. Read full blog post.

    Watch : We Know Which Private Keys Are Bad
  2. Advice for young hackers. Getting started in cybersecurity

    In this video, they talk about their journey in cybersecurity, how they learned their skills, and what newcomers can do to get started.

    Watch : Advice for young hackers. Getting started in cybersecurity
  3. honoki/bugbounty-openvpn-socks

    This project uses Docker to run multiple VPN tunnels simultaneously from the same machine, and exposes a SOCKS proxy for each separate VPN connection. If you are using tools without built-in proxy support, you can use proxychains to force everything through the proxy regardless.

    Read : honoki/bugbounty-openvpn-socks
  4. ChaosDB Explained - Azure's Cosmos DB Vulnerability Walkthrough

    This is the full story of the Azure ChaosDB Vulnerability that was discovered and disclosed by the Wiz Research Team, where they were able to gain complete unrestricted access to the databases of several thousand Microsoft Azure customers.

    Read : ChaosDB Explained - Azure's Cosmos DB Vulnerability Walkthrough
  5. Secondary Contexts by 0xAwali

    A collection of over 100 different examples of secondary context related vulnerabilities in web applications.

    Read : Secondary Contexts by 0xAwali

Get the next one in your inbox. Join 4,300+ readers.

Most Mondays. Under 10 minutes.