Table of Contents
🎁 Giveaway!!!
The Arcanum team has a gift for you! They are giving away Bug Chaining, Escalation, and Advanced Client-Side to one lucky High Signal newsletter subscriber! If you aren't familiar with it yet, you should be! It’s a fantastic 4-hour recorded expansion to TBHM created by legends xssdoctor and jhaddix.
%20TBHM%20Day%20One%202.5.png)
There are two steps to participate. First, you must be subscribed to the newsletter. Second, you must enter the same email address you used to subscribe in the form (link below). The form helps screen out inactive members who wouldn't even open this post to win, so active readers like you have a better chance!
If you haven't completed both steps yet, you have until December 16th to do so. The winner will be selected on December 17th. If you win, you will receive an email from us on that day.
🔥 Top Picks
Clickjacking is like art, and Lyra is an outstanding artist. Companies and platforms underestimate their impact, but it can be critical. You must dive into this because she got a Google bounty using this new technique!
Keeping the incredible client-side content streak, we have another banger by Jorian. His consistency in delivering excellent research will never cease to amaze me. If you are having trouble because your XSS won’t trigger because of a redirect, this one is for you.
Did you know you can also submit content you think belongs on BugBountyDaily?
🕰 Old But Gold
I like this one because of the extra step: reading Tornado’s code and understanding it. I believe every time we go a bit further, where no one wants to go, we will find new bugs.
🎮 CTF Time
If you haven’t tried 7urb0’s challenges yet, you should! Start with Challenge One - Strange XSS, then move on to Challenge Two - Stranger XSS. By the way, the official write-ups have already been posted on the CTBB Lab website.
If you don’t know Renwa, know that he’s an incredible hacker. He created this challenge, which I'm currently trying to solve. Beware: it will drain your soul and time, but it’s 100% worth it!