<h3 id="heading-links">Links</h3>
<ul>
<li><a target="_blank" href="https://portswigger.net/web-security/ssrf/url-validation-bypass-cheat-sheet">URL validation bypass cheat sheet | PortSwigger</a>
</li>
<li><a target="_blank" href="https://www.youtube.com/playlist?app=desktop&amp;list=PLMoaZm9nyKaNRN0SoR_PBVYc_RAhbZdG4&amp;si=w9DowKDlYt071M9P">Learn AWS Pentesting | Tyler Ramsbey</a>
</li>
<li><a target="_blank" href="https://www.youtube.com/playlist?list=PLonlF40eS6nzPfbOv5NHv5SpUOcPH7daP">Burp Suite - Deep Dive | Cristi Vlad</a>
</li>
<li><a target="_blank" href="https://embracethered.com/blog/posts/2024/m365-copilot-prompt-injection-tool-invocation-and-data-exfil-using-ascii-smuggling/">Microsoft Copilot: From Prompt Injection to Exfiltration of Personal Information</a>
</li>
<li><a target="_blank" href="https://github.com/pushsecurity/saas-attacks">SaaS attack techniques</a>
</li>
<li><a target="_blank" href="https://www.ostering.com/blog/2022/03/07/capec-stride-mapping/">CAPEC-STRIDE Mapping</a>
</li>
<li><a target="_blank" href="https://portswigger.net/research/gotta-cache-em-all">Gotta cache 'em all: bending the rules of web cache exploitation</a>
</li>
</ul>

### Links

* [URL validation bypass cheat sheet | PortSwigger](https://portswigger.net/web-security/ssrf/url-validation-bypass-cheat-sheet)
    
* [Learn AWS Pentesting | Tyler Ramsbey](https://www.youtube.com/playlist?app=desktop&list=PLMoaZm9nyKaNRN0SoR_PBVYc_RAhbZdG4&si=w9DowKDlYt071M9P)
    
* [Burp Suite - Deep Dive | Cristi Vlad](https://www.youtube.com/playlist?list=PLonlF40eS6nzPfbOv5NHv5SpUOcPH7daP)
    
* [Microsoft Copilot: From Prompt Injection to Exfiltration of Personal Information](https://embracethered.com/blog/posts/2024/m365-copilot-prompt-injection-tool-invocation-and-data-exfil-using-ascii-smuggling/)
    
* [SaaS attack techniques](https://github.com/pushsecurity/saas-attacks)
    
* [CAPEC-STRIDE Mapping](https://www.ostering.com/blog/2022/03/07/capec-stride-mapping/)
    
* [Gotta cache 'em all: bending the rules of web cache exploitation](https://portswigger.net/research/gotta-cache-em-all)

AppSec Newsletter 0036

Tornando a vida do security champion um pouco mais fácil a cada dia =)
