👩‍💻IW Weekly #99: Top 10 hacking techniques of 2023, CSP Bypass, Multiple XSS on Joomla, XSS on ChatGPT, Meteor subdomain takeover, Length filter bypass to SQL Injection, Nomulus pentest and many more…

Welcome to the #IWWeekly99 - the Monday newsletter that brings the best in Infosec straight to your inbox.

To help you out, we have 5 Articles, 4 Threads, 3 Videos, 2 Job Alerts and a Special Item 🫢

Read, upskill yourself and spread love to the community 💝

Excited? Let’s jump in 👇

📝 5 Infosec Articles

1. Learn the 10 hottest web hacking techniques used in 2023 as discussed by @PortSwigger. 
2. The blog by @joaxcar reveals the Content Security Policy (CSP) bypass on PortSwigger.net by leveraging Google Script resources. 
3. In their latest blog, @GoogleVRP team published their security findings on the Nomulus -Google product. 
4. The team at @sonarsource has come up with detailed analysis of the multiple XSS vulnerabilities they found on Joomla CMS.
5. Gain insights into defeating length filters for successful SQL injection, as shared by @SynackRedTeam member @kuldeepdotexe .

🧵4 Trending Tweets

1. Threat modeling can be hard to integrate into an SDLC, @abhaybhargav shares his two cents on the same.
2. Read about how @RonMasas found an XSS on ChatGPT.
3. Ever heard of “balancing XSS payloads”? @vidocsecurity talks about a methodology to finding XSS without just spraying and praying with random payloads.
4. @young_vanda_ shares their methodology on taking over Meteor subdomains.

📽️ 3 Insightful Videos

1. n a recent video, @_JohnHammond shares valuable hacking tricks to keep in mind .
2. @NahamSec, delves into efficient XSS hunting techniques for 2024, providing valuable insights for cybersecurity enthusiasts and bug hunters.
3. Gain insights into starting malware analysis with  @_JohnHammond.

💼 2 Job Alerts

1. Netflix is looking for Security Engineers for United States locations.  
2. Join @GitHubSecurity’s security team as Senior Product Security Engineer to help manage their Bug bounty Program.

🎁 1 Special Item

1. Solve the weekly challenge by @yeswehack.

Watch “Essential Skills for the next-generation of AppSec Engineers” by Abhay Bhargav at IWCON2023

That’s all for this week. Hope you enjoyed these incredible finds and learned something new from today’s newsletter. Meet you again next week hacker, until then keep pushing 💪

This newsletter would not have been made possible without our amazing ambassadors.

Resource contribution by: Hardik Singh, Ayush Singh, Tuhin Bose, Manan, Ansh Patel

Newsletter formatting by: Hardik Singh, Ayush Singh, Manan, Shlok

Lots of love
Editorial team,
Infosec Writeups