👩💻IW Weekly #88: Process Injection, Race Condition, CLRF to XSS in Snapchat, Active Directory Guide, Main App Hacking Methodology, CSP Research, CORS Misconfigurations and many more…
Welcome to the #IWWeekly88 - the Monday newsletter that brings the best in Infosec straight to your inbox.
To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2 Job Alerts and a Special Item 🫢
Read, upskill yourself and spread love to the community 💝
Excited? Let’s jump in 👇
GuidedHacking is the best resource to learn reverse engineering, covering a wide range of topics including malware analysis, exploit development & game hacking. In addition to 10 courses, we have 440+ video tutorials, thousands of text tutorials, source codes & comprehensive guides.
📝 5 Infosec Articles
- Explore stealthy process injection techniques in r-tec's recent blog post.
- @a7med.ctf found an interesting way to escalate a CRLF vulnerability to XSS in a domain belonging to Snapchat.
- @JerrySh43332033 details his chaotic yet successful exploitation of a race condition using cURL.
- @shubhdeepp shares his tale on how he was able to find a vulnerability due to a third-party integration.
- @zer1t0 pens an excellent active directory guide covering essential aspects and terms for pentesters to navigate potential active directory network attacks.
🧵4 Trending Tweets
- @7h3h4ckv157 compiles resources discussing EDR and AV bypass techniques.
- @Jayesh25_ expertly shares essential tips on approaching bug bounties with restricted scope, providing valuable insights for the community.
- Gain insights into bug bounty strategies as @Jayesh25_ shares tips on dealing with wide scope targets.
- @Jayesh25_ shares expertise on CORS misconfigurations, offering valuable tips and guidance for the community.
📽️ 3 Insightful Videos
- In the recent @ctbbpodcast episode, the hosts discuss CSP Research, Iframe Hopping, JS Hoisting and more.
- @InsiderPhD shows us how to approach the main application of a program and shares her tips.
- Learn what are ports, services and other network fundamentals that every hacker and cybersecurity professional should know via this latest video by @davidbombal.
💼 2 Job Alerts
- CyberNX Technologies is hiring for an Associate Security Consultant at Mumbai. Interested folks, do apply.
- Bugcrowd is hiring across the globe for roles such as AppSec Engineer, Senior DevOps Engineer and more.
🎁 1 Special Item
- Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.
IWCON 2023 CTF Registrations Now Open
For the first time ever, IWCON is hosting a CTF. 🎊
Difficulty level: Easy to Medium.
Share this with your CTF player and bug bounty hunter friends so they don’t miss out on this fun challenge.
On episode 1 of IW Studio's first live interview series "Screenside Chats", we have Vivek Ramachandran, Founder and CEO, SquareX. Checkout the interview here
That’s all for this week. Hope you enjoyed these incredible finds and learned something new from today’s newsletter. Meet you again next week hacker, until then keep pushing 💪
This newsletter would not have been made possible without our amazing ambassadors.
Resource contribution by: Nikhil A Memane, Hardik Singh, Ayush Singh, Bhavesh Harmalkar, Bimal Kumar Sahoo, Vinay Kumar, Tuhin Bose, Mohit Khemchandani, Rachit Arora, Eeshan V
Newsletter formatting by: Bhavesh Harmalkar, Manan, Nithin R, Shlok, Rachit Arora
Lots of love
Editorial team,
Infosec Writeups