Dependency Management & Supply Chain Attacks -- [TryHackMe LIVE!]
Join the Hack Smarter community: https://hacksmarter.org
--- In this video, we work our way through the excellent "Dependency Management" room on TryHackMe. Through this room we learn about security principles of dependency management, how to secure external and internal dependencies, and an understanding of dependency confusion attacks.
To learn these principles, we exploit a vulnerable S3 Bucket to steal user credentials as well as uploading a malicious program to a (simulated) Pypi repository to get remote code execution on a victim.
Enjoy!
------------------
Let's connect:
Patreon: https://www.patreon.com/user?u=85739709
Twitch: / hack_smarter
LinkedIn: / tyler-ramsbey-86221643
Discord Group: / discord