Virtual Sticker Swap, Bot Bounty, and Mid-Year Reflection & Planning

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   ToolTime - WayMore (Historical Content Discovery)

   Jason Haddix takes a look at WayMore by xnl-h4ck3r.

   Watch : ToolTime - WayMore (Historical Content Discovery)
2. /02

   MetaMask - stealing ETH by exploiting clickjacking - $120,000 bug bounty

   Watch : MetaMask - stealing ETH by exploiting clickjacking - $120,000 bug bounty
3. /03

   A Deeper Look at Hacking Laws

   A deeper look into the german hacking laws to see what kind of actions are illegal. There are some surprising edge cases and lots of room for debates.

   Watch : A Deeper Look at Hacking Laws
4. /04

   Two faces of the same PDF document

   In this article, they introduce a parser differential attack targeting PDF readers. The attack makes it possible to create a malicious PDF document which presents different content based on the reader application used.

   Read : Two faces of the same PDF document
5. /05

   Building on an AppSec Pipeline with Burp Suite data - Part 1

   In this two part series Willis is going to take Burp Suite Project files as input from the command line, parse them, and then feed them into a testing pipeline. Part 2.

   Read : Building on an AppSec Pipeline with Burp Suite data - Part 1