Nagli

@galnagli • 47,724 subscribers

Hacker; Red Agent & Offensive AI at @wiz_io / @Google; $3,000,000 Bug Bounty Hunter and Live Hacking Events Winner.

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

Introducing my Bug Bounty Masterclass. 100% free. I've made $2,000,000+ finding security bugs. I spent the last year turning my methodology into a complete blueprint. 4 hours of video - foundations, reconnaissance, web proxies, hands-on challenges, and certification. Finish it in a weekend and start hacking real-world applications 🐞

Introducing my Bug Bounty Masterclass. 100% free. I've made $2,000,000+ finding security bugs. I spent the last year turning my methodology into a complete blueprint. 4 hours of video - foundations, reconnaissance, web proxies, hands-on challenges, and certification. Finish it in a weekend and start hacking real-world applications 🐞

254,041 Aufrufe • vor 5 Monaten

The team at OpenAI just fixed a critical account takeover vulnerability I reported few hours ago affecting #ChatGPT. It was possible to takeover someone's account, view their chat history, and access their billing information without them ever realizing it. Breakdown below 👇

The team at OpenAI just fixed a critical account takeover vulnerability I reported few hours ago affecting #ChatGPT. It was possible to takeover someone's account, view their chat history, and access their billing information without them ever realizing it. Breakdown below 👇

708,080 Aufrufe • vor 3 Jahren

25 minutes video on everything you need to know about reconnaissance is now live 🎥 Methodology, approach and nuances on how to find all publicly facing assets of a given company on the internet. enjoy : )

25 minutes video on everything you need to know about reconnaissance is now live 🎥 Methodology, approach and nuances on how to find all publicly facing assets of a given company on the internet. enjoy : )

35,750 Aufrufe • vor 5 Monaten

It's never been easier to get pwned combining Cursor auto-run + Anthropic MCP Here is a POC using an external MCP server that parses GitHub repositories documentations turning into RCE. There are 0 AI Guardrails when asking Cursor to follow instructions coming from MCP🙃

It's never been easier to get pwned combining Cursor auto-run + Anthropic MCP Here is a POC using an external MCP server that parses GitHub repositories documentations turning into RCE. There are 0 AI Guardrails when asking Cursor to follow instructions coming from MCP🙃

46,178 Aufrufe • vor 1 Jahr

Keine weiteren Inhalte verfügbar