Sign in Subscribe

IW Team

👩‍💻IW Weekly #74: RCE through Dependency Confusion, 2FA bypass in Meta, Client side Prototype pollution and its prevention, Paywall bypass, SSRF tricks and many more..

Welcome to the #IWWeekly74 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2 Job Alerts and a Special Item 🫢 Read, upskill yourself and spread love to the community 💝 Excited? Let’s jump

👩‍💻IW Weekly #73: ATO in Shopify Stores, CVE-2023-36809, Risks in Cross-Chain Bridges, Bypassing Firewalls, Hacking iOS Apps, Uncovering Zenbleed and many more..

Welcome to the #IWWeekly73 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2 Job Alerts and a Special Item 🫢 Read, upskill yourself and spread love to the community 💝 Excited? Let’s jump

👩‍💻IW Weekly #72: GraphQL Hacking, SSO Vulnerabilities, Race Condition Vulnerabilities, SQLMap & Server Side Request Forgery Tips, Sandwich Attack and many more..

Welcome to the #IWWeekly72 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2 Job Alerts and a Special Item 🫢 Read, upskill yourself and spread love to the community 💝 Excited? Let’s jump

👩‍💻IW Weekly #71: Introduction to AD pentesting, XSS via exported activity, using HOTW to leak CSRF token, full access to airline points, SSRFs and many more..

Welcome to the #IWWeekly71 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2 Job Alerts and a Special Item 🫢 Read, upskill yourself and spread love to the community 💝 Excited? Let’s jump

👩‍💻IW Weekly #70: NFT Bridge Vulnerability, CVE-2023-3519 Deep Analysis, RCE in Huawei Theme Manager, Preauth RCE in Metabase, Chaining Bugs for Session Hijack and many more..

The team at @assetnote unveils a game-changer: Pre-Auth RCE in Metabase (CVE-2023-38646). Get the scoop on this critical vulnerability! Welcome to the #IWWeekly70 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2

👩‍💻IW Weekly #69: OpenSSH RCE, Xamarin Applications Reverse Engineering, Puzzled XSS, CVE-2023-3519 analysis, XSS and CORS bypass and many more..

@assetnote's comprehensive analysis delves into CVE-2023-3519, exposing insights on vulnerabilities in Citrix ADC and NetScaler Gateway. Welcome to the #IWWeekly69 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2 GitHub

👩‍💻IW Weekly #68: Account Takeover using Custom OTP, CVE-2023-36934, Investigating EC2 , XSS in hidden inputs , macOS user's real name brute-forced with mDNS and many more..

Read how @FingerprintJs shares their finding which reveals a user's first name without permissions using the mDNS protocol. Welcome to the #IWWeekly68 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4 Threads, 3 Videos,

👩‍💻IW Weekly #67: Joining Google as Red Teamer, Finding 100 vulnerabilities, Tale of DOM-XSS, Impactful SSRF, Busting fake Privacy Policy and many more..

@GrahamHelton3’s journey from perseverance to perfection paid off as he tactfully mapped his way to Google, realizing his dreams as a Red Teamer." Welcome to the #IWWeekly67 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5

👩‍💻IW Weekly #66: Citrix Gateaway-XSS, Web cache Deception, DNS Analyzer, ATO to XSS in GarphQL API, AWS S3 Bucket Leaks, $250K Coinbase API Hack and many more…

Unveil the power of Account Takeover (ATO) via Stored XSS vulnerability in a GraphQL API, explored in this enlightening bug writeup by @pmnh_. Welcome to the #IWWeekly66 - the Monday newsletter that brings the best in Infosec straight to your inbox. To help you out, we have 5 Articles, 4