<h3 id="heading-video-novo-no-canal">Vídeo novo no canal!</h3>
<div class="embed-wrapper"><div class="embed-loading"><div class="loadingRow"></div><div class="loadingRow"></div></div><a class="embed-card" href="https://www.youtube.com/watch?v=iQ-TcXrf8BE">https://www.youtube.com/watch?v=iQ-TcXrf8BE</a></div>
<p> </p>
<h3 id="heading-links">Links</h3>
<ul>
<li><p><a target="_blank" href="https://portswigger.net/research/splitting-the-email-atom">Splitting the email atom: exploiting parsers to bypass access controls</a></p>
</li>
<li><p><a target="_blank" href="https://cloudsecurityalliance.org/artifacts/using-ai-for-offensive-security">Using AI for Offensive Security</a></p>
</li>
<li><p><a target="_blank" href="https://danaepp.com/bypassing-api-rate-limiting-using-ip-rotation-in-burp-suite">Bypassing API rate limiting using IP rotation in Burp Suite</a></p>
</li>
<li><p><a target="_blank" href="https://trufflesecurity.com/blog/trufflehog-now-analyzes-permissions-of-api-keys-and-passwords">TruffleHog Now Analyzes Permissions Of API Keys and Passwords</a></p>
</li>
<li><p><a target="_blank" href="https://doubleagent.net/onavo-facebook-ssl-mitm-technical-analysis/">How did Facebook intercept their competitor's encrypted mobile app traffic?</a></p>
</li>
<li><p><a target="_blank" href="https://docs.datadoghq.com/developers/ide_plugins/vscode/#static-analysis">Datadog Extension for Visual Studio Code</a></p>
</li>
<li><p><a target="_blank" href="https://shostack.org/files/papers/Fast-Cheap-and-Good.pdf">Fast, Cheap and Good | An Unusual Trade-off Available in Threat Modeling by Adam Shostack</a></p>
</li>
</ul>
<h3 id="heading-siga-o-guia-de-appsec-nas-redes"><strong>Siga o Guia de AppSec nas redes!</strong></h3>
<ul>
<li><p>Youtube: <a target="_blank" href="http://youtube.com/@GuiadeAppSec"><strong><a href="http://youtube.com/@GuiadeAppSec" class="autolinkedURL autolinkedURL-url" target="_blank">youtube.com/@GuiadeAppSec</a></strong></a></p>
</li>
<li><p>Twitter / X: <a target="_blank" href="http://twitter.com/guiadeappsec"><strong><a href="http://twitter.com/guiadeappsec" class="autolinkedURL autolinkedURL-url" target="_blank">twitter.com/guiadeappsec</a></strong></a></p>
</li>
<li><p>Site: <a target="_blank" href="http://guiadeappsec.com.br/"><strong><a href="http://guiadeappsec.com.br" class="autolinkedURL autolinkedURL-url" target="_blank">guiadeappsec.com.br</a></strong></a></p>
</li>
</ul>


### Vídeo novo no canal!

%[https://www.youtube.com/watch?v=iQ-TcXrf8BE] 

### Links

* [Splitting the email atom: exploiting parsers to bypass access controls](https://portswigger.net/research/splitting-the-email-atom)
    
* [Using AI for Offensive Security](https://cloudsecurityalliance.org/artifacts/using-ai-for-offensive-security)
    
* [Bypassing API rate limiting using IP rotation in Burp Suite](https://danaepp.com/bypassing-api-rate-limiting-using-ip-rotation-in-burp-suite)
    
* [TruffleHog Now Analyzes Permissions Of API Keys and Passwords](https://trufflesecurity.com/blog/trufflehog-now-analyzes-permissions-of-api-keys-and-passwords)
    
* [How did Facebook intercept their competitor's encrypted mobile app traffic?](https://doubleagent.net/onavo-facebook-ssl-mitm-technical-analysis/)
    
* [Datadog Extension for Visual Studio Code](https://docs.datadoghq.com/developers/ide_plugins/vscode/#static-analysis)
    
* [Fast, Cheap and Good | An Unusual Trade-off Available in Threat Modeling by Adam Shostack](https://shostack.org/files/papers/Fast-Cheap-and-Good.pdf)
    

### **Siga o Guia de AppSec nas redes!**

* Youtube: [**youtube.com/@GuiadeAppSec**](http://youtube.com/@GuiadeAppSec)
    
* Twitter / X: [**twitter.com/guiadeappsec**](http://twitter.com/guiadeappsec)
    
* Site: [**guiadeappsec.com.br**](http://guiadeappsec.com.br/)

AppSec Newsletter 0035

Tornando a vida do security champion um pouco mais fácil a cada dia =)
