/Hive Five #91 · Oct 17, 2022
Live Hacking Event tips, the ultimate Nuclei guide, and a unique subdomain enumeration method
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Live Hacking Event tips by Justin Gardner
Over the past 6 months, he had the pleasure of participating in 5 HackerOne Live Hacking events. It has been quite the challenge to his work-life balance and his hacking skills, but after ranking in the top 5 at every event, here are some lessons he learned.
Read : Live Hacking Event tips by Justin Gardner -
The Ultimate Guide to Finding Bugs With Nuclei
Efficient, extensible, flexible, open source vulnerability scanning. Introduction Nuclei is a fast, efficient, and extensible vulnerability scanner. It can scan thousands of hosts in just a few minutes.The nuclei engine uses text-file templates to define the steps required to detect a vulnerability.
Read : The Ultimate Guide to Finding Bugs With Nuclei -
Regulator: A unique method of subdomain enumeration
combine the idea of regular language ranking with regular language induction. The goal is to be able to automagically learn regexes that capture idiosyncratic features of observed DNS data. Then, using these learned patterns, attempt to brute force for new subdomains that follow these same patterns.
Read : Regulator: A unique method of subdomain enumeration -
PiRogue tool suite
An open-source tool suite that provides a comprehensive mobile forensic and network traffic analysis platform targeting mobile devices, IoT devices, and in general any device using wi-fi to connect to the Internet.
Read : PiRogue tool suite -
Semgrep - Writing quick rules to verify ideas
When you want to quickly grep for something but the pattern is too elaborate, Semgrep comes in really handy.
Read : Semgrep - Writing quick rules to verify ideas