Sign in Subscribe

IW Team

👩‍💻IW Weekly #44: Google Cloud BI Hack, 0xbaDc0dE MEV Bot Hack, CSS Injection, Car Company Hack, Hacking Military System, DOM XSS in jQuery Selector Sink and much more…

Uncover the captivating tale of @GodfatherOrwa's Google Cloud BI hack and the critical bug discovery, in this must-read blog post. Welcome to the #IWWeekly44 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4 Threads,

👩‍💻IW Weekly #43: $27200 bounty from Facebook, API Misconfigurations, E2E encryption bypass, AzureAd tenant takeover, Billion dollar vulnerability and much more…

Bypass CloudTrail logging for undetected reconnaissance by @Frichette_n Welcome to the #IWWeekly43 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2 GitHub Repos and Tools, 1 Job Alert in today’s

👩‍💻IW Weekly #42: $1M bounty explained, GCP takeover, iOS pentesting, Smart Contract vulnerabilities, API security checklist and much more…

Take a look at how @kl_sree managed to takeover your GCP projects. Welcome to the #IWWeekly42 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2 GitHub Repos and Tools, 1 Job

👩‍💻IW Weekly #41: VueJS XSS, Critical Car-Vulnerabilities, $1000 IAP Proxy Misconfiguration in Google Cloud, Prototype Pollution Attacks, GraphQL Pentesting and much more…

Read how @samwcyo and team were able to hack the giants in automotive industry Hey 👋 Welcome to the #IWWeekly41 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2 GitHub Repos and Tools,

👩‍💻IW Weekly #40: Open Redirection Vulnerability, Misconfigured Jira, Bugs in Red Bull, ChatGPT for Security, OSCP Guide for Beginners, Bypass Authentication, and much more…

Disclosing this vulnerability in Google Smart speakers bagged the author a bounty of $100k 😲 Welcome to the #IWWeekly40 - the Monday newsletter that brings the best in Infosec straight to your inbox. We wish you a prosperous and productive new year 😊 May you find amazing bugs, earn bounties, and make

👩‍💻IW Weekly #39: $10,000 Bounty, Zero-click Account Takeover, Stored XSS, Open Redirection Vulnerability, SQL Injection, RCE, Reconnaissance Techniques, and much more…

$10,000 USD award for reporting faulty crop and trim feature in Facebook reels 😍 Welcome to the #IWWeekly39 - the Monday newsletter that brings the best in Infosec straight to your inbox. IWCON2022 finally came to a glorious end ❤️ Thank you for joining us. I hope you had a lot

👩‍💻IW Weekly #38: Cache Poisoning, XSS Payloads, Akamai and Amazon S3 buckets, Hybrid Fuzzing in Smart Contracts, SSO, Blockchain Security Audit, and much more…

Learn how to use XSS payloads that result in bounties up to $44,625. Welcome to the #IWWeekly38 - the Monday newsletter that brings the best in Infosec straight to your inbox. IWCON2022 finally came to a glorious end yesterday night ❤️ Thank you for joining us. I hope you had

👩‍💻IW Weekly #37: ChatGPT for Pentesting, Hacking Govt. Website, GraphQl Security Flaws, Bypassing WAF, SSO, MITRE ATT&CK, and much more…

Did you know ChatGPT can help you identify potential vulnerabilities and exploits for pentesting? Read about it here. Welcome to the #IWWeekly37 - the Monday newsletter that brings the best in Infosec straight to your inbox. IWCON2.0 is going live this weekend 😍 We have multiple perks in line for

👩‍💻IW Weekly #36: 1,250€ Bounty, VoIP Spoofing, SSL Pinning, Intercepting Proxy, XSS Resources, Signature-based Malware Detection, and much more…

Bounty of 1,250€ from Intigriti for VoIP spoofing vulnerability. Read about it here. Welcome to the #IWWeekly36 - the Monday newsletter that brings the best in Infosec straight to your inbox. We’re in the last 30 days of 2022 and there’s no better time to pick up

👩‍💻IW Weekly #35: HTTP Desync Attack, Mass Account Takeover, SSRF via DNS Rebinding, Exploiting CORS Misconfigurations, Hacking APIs, and much more…

@hacker_ hacked a phone company and viewed the call logs of 50M customers. Here's how he did it. Welcome to the #IWWeekly35 - the Monday newsletter that brings the best in Infosec straight to your inbox. IWCON2022’s countdown has now started! Barely 20 days are left for