Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2023.03.16.md

Google IAP Authorization bypass allowed access to Internal Environment Leading to Zero Interaction Account takeover Exploiting the Source Engine (Part 1) -https://blog.agilehunt.com/blogs/security/msrc-critical-google-iap-authorization-bypass-allows-access-to-internal-envirnment-leading-to-zero-interaction-account-takeover

Hacking Together an ASM Platform Using ProjectDiscovery Tools - https://blog.projectdiscovery.io/asm-platform-using-projectdiscovery-tools/

Exploiting the Source Engine (Part 1) - https://ctf.re/source-engine/exploitation/reverse-engineering/2018/08/02/source-engine-1/

Exploiting a Critical Spoofing Vulnerability in Windows CryptoAPI - https://www.akamai.com/blog/security-research/exploiting-critical-spoofing-vulnerability-microsoft-cryptoapi

A comprehensive synopsis of 217 subdomain takeover reports - https://www.cyjax.com/2022/10/24/a-comprehensive-synopsis-of-217-subdomain-takeover-reports/

#informatyka