🐝 Hive Five #4 - “No one can make you feel inferior without your consent.” ― Eleanor Roosevelt

Hi friends,

Greetings from the hive!

I hope you had an awesome week! Mine was filled to the brim with all kinds of dev work.

On Friday I had an epiphany: "Life is short. Hack it.". From now on that'll be my mantra.

It means that everyone's unique. Just find what you want to do, and go do it. Use your unfair advantage.

It's okay to be scared, we all are, just keep going. Be better than yesterday.

Now that we're all fired up let's kick off this week's Hive Five!

The Bee's Knees

• Template Injection in Action - A 2-hour workshop, by GoSecure, on Template Injection. It consists of six labs, an hour long video, covering five different template engines.

• The Secret Parameter, LFR, and Potential RCE in NodeJS Apps - A great write-up by CAPTAINFREAK on a common setup of NodeJS + Express + HBS with a potentially critical vulnerability.

• New campaign targeting security researchers - As if 2020 wasn't crazy enough, we start 2021 off with a bang. The Threat Analysis Group has identified an ongoing campaign targeting security researchers working on vulnerability research and development at different companies and organizations.

• What happened with GameStop? - It's not David vs Goliath. It's Goliath vs. Goliath, with David as a fig leaf, former Wall Street professional Alexis Goldstein explains.

• Thread dedicated to Tunneling/PortForwarding tricks: Tunneling and port-forwarding can be a struggle, I know it can be for me. @infosec_scarlet explains concepts for successful tests.

Buzzworthy

• Two solutions for the January 2021 Initigriti XSS Challenge

• Twitter thread: Can someone please teach me how to make passive income?

• Discovering Cloud Assets Externally, with CloudEnum

• BurpSuiteSharpener

• The Computer Revolution Hasn't Happened Yet

• Here's how a researcher broke into Microsoft VS Code's GitHub

• How We Hacked Azure Functions and Escaped Docker

• 30 Books That I Will Re-Read For The Rest of My Life

Song of the Week: SOPHIE - UNISIL

Video of the Week: Bug Bounty Fundamentals: Scope

Tweet of the Week: NahamSec with an important announcement

TikTok of the Week: Your CS101 professor could never

🙏🏻 Support

If you enjoy this content, a quick share would be awesome.

Select links are affiliates that I get a kickback from. They must pass curation, no exceptions.​

❤️ Don't bee a stranger

I'd love to hear your thoughts! You can reach me on Twitter, or replying to this email also works.​Until next week, take care of yourself and each other,

securibee 🐝