Saved You One Click

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   An XSS on Facebook via PNGs & Wonky Content Types

   Content uploaded to Facebook is stored on their CDN, which is served via various domains (most of which are sub-domains of either akamaihd or fbcdn).

   Read : An XSS on Facebook via PNGs & Wonky Content Types
2. /02

   Sudo Exploit for Ubuntu 20.04 LTS

   This is the end. We finally develop a working sudoedit exploit for Ubuntu 20.04.

   Watch : Sudo Exploit for Ubuntu 20.04 LTS
3. /03

   100 hours of bug bounty on a public Hackerone program - Bounty vlog #1 Stripe

   Watch : 100 hours of bug bounty on a public Hackerone program - Bounty vlog #1 Stripe
4. /04

   "Zero-Days" Without Incident - Compromising Angular via Expired npm Publisher Email Domains

   Recently Matthew took an interest in the npm registry due to it’s critical role in the security of managing packages for all of JavaScript and Node. Bonus read.

   Read : "Zero-Days" Without Incident - Compromising Angular via Expired npm Publisher Email Domains
5. /05

   Top 10 web hacking techniques of 2021

   Welcome to the Top 10 (new) Web Hacking Techniques of 2021, the latest iteration of our annual community-powered effort to identify the most significant web security research released in the last year.

   Read : Top 10 web hacking techniques of 2021