Anti-fragile

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Q: How to write a BUG BOUNTY report that actually gets paid?

   YES! That's one of the topics STÖK and Jason Haddix and KUGG will answer in this episode of Bounty Thursdays.

   Watch : Q: How to write a BUG BOUNTY report that actually gets paid?
2. /02

   Nahamcon 2022 - insecurenature - Cloud hacking - malware not needed

   One of my favorite talks of NahamCon.

   Watch : Nahamcon 2022 - insecurenature - Cloud hacking - malware not needed
3. /03

   NahamCon2022 - Jason Haddix (jhaddix) - The Bug Hunter’s Methodology: Application Analysis v1

   I had to do another one. One of the most anticipated talks (at least for me).

   Watch : NahamCon2022 - Jason Haddix (jhaddix) - The Bug Hunter’s Methodology: Application Analysis v1
4. /04

   mitmproxy2swagger

   A tool for automatically converting mitmproxy captures to OpenAPI 3.0 specifications. This means that you can automatically reverse-engineer REST APIs by just running the apps and capturing the traffic.

   Read : mitmproxy2swagger
5. /05

   Hunting evasive vulnerabilities

   Do you ever wonder about the vulnerabilities you've missed? Why didn't they show themselves - and will they be discovered by somebody else later?

   Read : Hunting evasive vulnerabilities