/Hive Five #92 · Oct 24, 2022
Why web tech is like this, Chrome browser exploitation, and hacker healthcare
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
$29,000 GitLab - Arbitrary File Read using symlinks
This video is about a vulnerability in GitLab that allowed reading any files from the server. The reporter, William Bowling, was rewarded $29,000 of bug bounty.
Watch : $29,000 GitLab - Arbitrary File Read using symlinks -
[CVE-2022-1786] A Journey To The Dawn
Back in April, they found a 0-day vulnerability in the Linux kernel and exploited it on Google’s kCTF platform. They reported the bug to Linux kernel security team and helped them fix the vulnerability.
Read : [CVE-2022-1786] A Journey To The Dawn -
Keynote - Why web tech is like this - Steve Sanderson
Ever wondered why browsers look like they do? Why we use port 80, or why it’s img src=… and not image source=… ? How did JS and CSS take over, and what could there have been instead? Who invented modern web dev tooling, and how have your favourite server and client frameworks been battling?
Watch : Keynote - Why web tech is like this - Steve Sanderson -
Chrome Browser Exploitation, Part 1 - Introduction to V8 and JavaScript Internals
Web browsers, our extensive gateway to the internet. Browsers today play a vital role in modern organizations as more and more software applications are delivered to users via a web browser in the form of web applications.
Read : Chrome Browser Exploitation, Part 1 - Introduction to V8 and JavaScript Internals -
Basic recon to RCE III
For the 3rd and the last episode of the series, they’re going to continue with the same target as the episode 2.
Read : Basic recon to RCE III