👩💻IW Weekly #87: Okta for Red Teamers, Hijacking OAuth, Account Hijacking via Invite Flows, Full Time Bug Bounty Hunting, Unpredictable IDs in IDOR and many more…
Welcome to the #IWWeekly87 - the Monday newsletter that brings the best in Infosec straight to your inbox.
To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2 Job Alerts and a Special Item 🫢
Read, upskill yourself and spread love to the community 💝
Excited? Let’s jump in 👇
📝 5 Infosec Articles
- Want to explore everything from Okta to prevention and detection recommendations for the blue team? Check out Okta for Red Teamers Perimeter Edition by @nickvangilder
- Discover how hijacking OAuth Code is done via Reverse Proxy for Account Takeover as shared by @omidxrz, who provides valuable insights and strategies.
- @decoder_it explains the purposes of cert publishers and permissions granted to them in configuration partitions.
- Join the journey of Gabriel Schneider discovering a free Burp Collaborator with Cloudflare Workers
- Know how to efficiently check thousands of endpoints for potential Cross Site Scripting vulnerabilities in a very short time?? @ott3rly made it easy for us.
🧵4 Trending Tweets
- Dive into the insightful bug bounty tips by @Jayesh25_ on Account Hijacking via Invite Flows
- Explore the Chrome bug bounty world with an interactive tree diagram! Discover the ins and outs of submissions, rewards, and commits, artfully created by @rebane2001.
- Unveil the secrets of tackling unpredictable IDs in IDOR or RBAC issues with tips from @Jayesh25_
- Struggling to pick the right bug bounty program? @0xblackbird has your back! Discover how to choose a program to hunt on.
📽️ 3 Insightful Videos
- Dive into the world of full-time bug bounty hunting with Justin 'rhynorater' Gardner from @criticalthinkingpodcast, as he shares a wealth of insights, expert advice, and real-life lessons in his latest video on BugBountyReportsExplained's YouTube channel.
- Join Justin in uncovering the complexities of SAML in the newest episode of @criticalthinkingpodcast.
- Join @gregxsunday from BugBountyReportsExplained in a deep dive into the world of Remote Code Execution (RCE) with an illuminating case study.
💼 2 Job Alerts
- Unmissable chance at SecurityBoat in Pune,India. Looking for talented individuals in graphic designing, business development and many more.
- Payatu in Pune, India is offering jobs for individuals who have hands-on experience on Security appliances,SIEM tools and others.
🎁 1 Special Item
- LEAKEY is a bash script which checks and validates for leaked credentials.
The much-awaited cybersecurity conference IWCON is now back with edition 3.0 on 16 and 17 December 2023. With 16 amazing speakers, this year is going to be a blast of learning and networking. TICKETS NOW OPEN FOR SALE! Go grab yours today.
That’s all for this week. Hope you enjoyed these incredible finds and learned something new from today’s newsletter. Meet you again next week hacker, until then keep pushing 💪
This newsletter would not have been made possible without our amazing ambassadors.
Resource contribution by: Nikhil A Memane, Bhavesh Harmalkar, Tuhin Bose, Shlok
Newsletter formatting by: Ayush Singh, Hardik Singh, Nithin R, Eeshan V, AnuPallavi
Lots of love
Editorial team,
Infosec Writeups