/Hive Five #90 · Oct 10, 2022
Taking control of your time, RCE via GitHub import, and the origin of XSS
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Dissect
A collection of Python libraries and tools to facilitate enterprise-scale incident response and forensics. Build from various parsers and implementations of file formats, developed by Fox-IT.
Read : Dissect -
Rhynorater Talks About Grafana SSRF, Picking Bug Bounty Targets, and His Favorite Hacking Tools!
Watch : Rhynorater Talks About Grafana SSRF, Picking Bug Bounty Targets, and His Favorite Hacking Tools! -
The Origin of Cross-Site Scripting (XSS) - Hacker Etymology
Why is it called "XSS"? Where does it come from and who influenced this type of website vulnerability?
Watch : The Origin of Cross-Site Scripting (XSS) - Hacker Etymology -
BruCON 0x0E recordings
an annual security and hacker conference providing two days of an interesting atmosphere for open discussions of critical infosec issues, privacy, information technology and its cultural/technical implications on society.
Watch : BruCON 0x0E recordings -
Reflecting on 2 Years of Bug Bounty
In September 2022, h1pmnh celebrated 2 years doing bug bounty as the anniversary of their first paid bounty on HackerOne passed.
Read : Reflecting on 2 Years of Bug Bounty