ITSEC Newsletter 2024-11-28

Author

Henrik Falk
November 28, 2024

Spelunking in Comments and Documentation for Security Footguns

Doing a full security assessment of every third-party component is not feasible during an engagement, but documentation and comments for these projects have given me a lot of insight quickly.

blog.includesecurity.com/2024/11/spelunking-in-comments-and-documentation-for-security-footguns

Extending Burp Suite for fun and profit – The Montoya way – Part 8

Today, we will look at a new way to extend the scanner implemented in Burp Suite since last year, namely BChecks. This new feature allows you to add checks to the Active and Passive Scanner without developing dedicated extensions. Checks are specified in a language similar to YAML and saved in .bcheck files.

security.humanativaspa.it/extending-burp-suite-for-fun-and-profit-the-montoya-way-part-8

Stop Using Predictable Bucket Names: A Failed Attempt at Hacking Satellites

Services like S3 having a global namespace, anyone can create a bucket called securityrunners-packages-region so long as it has not already been created. So what would happen if an attacker created securityrunners-packages-us-west-2 and an engineer decided to start exploring deploying resources in that region. Well now an attacker can arbitrarily execute code on your systems.

www.securityrunners.io/post/stop-using-predictable-bucket-names-a-failed-attempt-at-hacking-satellites