Can't Hurt Me

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   SSRF - Lab #7 Blind SSRF with Shellshock exploitation

   This video covers Lab #7 in the SSRF module of the Web Security Academy. The site uses analytics software which fetches the URL specified in the Referer header when a product page is loaded.

   Watch : SSRF - Lab #7 Blind SSRF with Shellshock exploitation
2. /02

   Open-Source Intelligence in 5 Hours

   5 hours of free Open-Source Intelligence (OSINT) Training.

   Watch : Open-Source Intelligence in 5 Hours
3. /03

   Dissecting NTLM EPA with love & building a MitM proxy

   Have you ever come across a website using NTLM as the authentication mechanism but could not authenticate with your browser or Burp even though you had valid credentials?

   Read : Dissecting NTLM EPA with love & building a MitM proxy
4. /04

   RCE in Adobe Acrobat Reader for Android (CVE-2021-40724)

   While testing Adobe Acrobat reader app , the app has a feature which allows user to open pdfs directly from http/https url.

   Read : RCE in Adobe Acrobat Reader for Android (CVE-2021-40724)
5. /05

   120 Days of High Frequency Hunting

   kuldeep and caffeinevulns took inspiration from @infosec_au’s blog about high-frequency bug hunting and how he found 120 bugs in 120 days. After going through the blog, they decided to try to find 120 bugs in 120 days.

   Read : 120 Days of High Frequency Hunting