First Times

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   NahamCon2022 - infosec_au - Finding 0days in Enterprise Web Applications

   Watch : NahamCon2022 - infosec_au - Finding 0days in Enterprise Web Applications
2. /02

   Bug Bounty Redacted #3 - Hacking APIs & XSS, SQLi, WAF Bypass in a regional web application

   It's shubs again with his series called Bug Bounty Redacted.

   Watch : Bug Bounty Redacted #3 - Hacking APIs & XSS, SQLi, WAF Bypass in a regional web application
3. /03

   How masscan works

   Masscan is a fast port scanner capable of scanning the entire IPv4 internet in under five minutes. To achieve maximum speed, it requires a stable 10 Gigabit link and a custom network driver for Linux. In comparison, it can take weeks or even months for the naive implementation of port scanners.

   Read : How masscan works
4. /04

   How I could exploit the CVE-2022-1388, F5 BIG IP iControl Authentication bypass to RCE

   In a cyber security world there are a lots of CVEs discovered and coming out daily. Many of CVEs don’t have a corresponding exploit code.

   Read : How I could exploit the CVE-2022-1388, F5 BIG IP iControl Authentication bypass to RCE
5. /05

   What a CTF on IRC looks like — IRCPuzzles AFPC 2022

   IRCPuzzles is an IRC-based puzzle game hosted every year on April 1st. The event lasts for several days. The answers are keys to channels and contestants progress from the first level to the final level. The levels usually get progressively harder.

   Read : What a CTF on IRC looks like — IRCPuzzles AFPC 2022