/Hive Five #94 · Nov 7, 2022
XSS Hunter is being deprecated, what sucks about recon, and DevOps is bullshit
/The Bee's Knees 🐝
The headline picks from this issue. The full issue has more.
-
Exploiting Static Site Generators - When Static Is Not Actually Static
Over the last ten years, we have seen the industrialization of the content management space. A decade ago, it felt like every individual and business had a dynamic WordPress blog, loaded up with a hundred plugins to do everything from add widgets to improve performance.
Read : Exploiting Static Site Generators - When Static Is Not Actually Static -
XSS Hunter is being deprecated on February 1st, 2023
To continue to utilize their subdomains post-deprecation, all users will have to take some action. For more information on next steps, please read the FAQ.
Read : XSS Hunter is being deprecated on February 1st, 2023 -
HTTP/3 Connection Contamination Made Simple - James Kettle (albinowax)
For the full technical details, check out the writeup.
Watch : HTTP/3 Connection Contamination Made Simple - James Kettle (albinowax) -
phillipwylie Talks About His Favorite Tools, Switching Careers, And Pentesting
Watch : phillipwylie Talks About His Favorite Tools, Switching Careers, And Pentesting -
The OpenSSL punycode vulnerability (CVE-2022-3602): Overview, detection, exploitation, and remediation
On November 1, 2022, the OpenSSL Project released a security advisory detailing a high-severity vulnerability in the OpenSSL library. Deployments of OpenSSL from 3.0.0 to 3.0.6 (included) are vulnerable and are fixed in version 3.0.7. The vulnerability is tracked as CVE-2022-3602.
Read : The OpenSSL punycode vulnerability (CVE-2022-3602): Overview, detection, exploitation, and remediation