/Hive Five #80 · Jul 25, 2022
Most common smart contract vulnerabilities, practical deep learning course, and ProjectDiscovery’s Best Kept Secrets
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Most common smart contract vulnerabilities by Adrian Hetman
Many of the examples will be well known to people familiar with the web3 security. What makes this interesting, is how common these vulnerabilities are even after many hacks involving them.
Read : Most common smart contract vulnerabilities by Adrian Hetman -
Practical Deep Learning
This free course is designed for people (and bunnies!) with some coding experience who want to learn how to apply deep learning and machine learning to practical problems. Deep learning can do all kinds of amazing things.
Read : Practical Deep Learning -
The Same Origin Policy - Hacker History
In 1995 Netscape invented JavaScript (LiveScript) and it marked the start of client-side web security issues. In this video we explore this history and learn about the same origin policy (SOP).
Watch : The Same Origin Policy - Hacker History -
WordPress Transposh - Exploiting a Blind SQL Injection via XSS
Here’s the story about how you could chain three of these CVEs to go from unauthenticated visitor to admin. This effectively means that an attacker could already influence the (translated) content on a WordPress site, which is shown to all visitors.
Read : WordPress Transposh - Exploiting a Blind SQL Injection via XSS -
ProjectDiscovery's Best Kept Secrets
For those unaware, ProjectDiscovery is a group of talented hackers and creators that have massively disrupted the offensive tooling industry by creating tooling that genuinely makes the lives of hackers easier.
Read : ProjectDiscovery's Best Kept Secrets