Nagli

@galnagli • 48,234 subscribers

hacker; head of offensive ai @wiz_io, now at @google; post-training, gemini cyber & agentic pentesting; $3,000,000 bug bounty hunter; arsenal

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

Introducing my Bug Bounty Masterclass. 100% free. I've made $2,000,000+ finding security bugs. I spent the last year turning my methodology into a complete blueprint. 4 hours of video - foundations, reconnaissance, web proxies, hands-on challenges, and certification. Finish it in a weekend and start hacking real-world applications 🐞

Introducing my Bug Bounty Masterclass. 100% free. I've made $2,000,000+ finding security bugs. I spent the last year turning my methodology into a complete blueprint. 4 hours of video - foundations, reconnaissance, web proxies, hands-on challenges, and certification. Finish it in a weekend and start hacking real-world applications 🐞

261,317 次观看 • 8 个月前

The team at OpenAI just fixed a critical account takeover vulnerability I reported few hours ago affecting #ChatGPT. It was possible to takeover someone's account, view their chat history, and access their billing information without them ever realizing it. Breakdown below 👇

The team at OpenAI just fixed a critical account takeover vulnerability I reported few hours ago affecting #ChatGPT. It was possible to takeover someone's account, view their chat history, and access their billing information without them ever realizing it. Breakdown below 👇

709,853 次观看 • 3 年前

25 minutes video on everything you need to know about reconnaissance is now live 🎥 Methodology, approach and nuances on how to find all publicly facing assets of a given company on the internet. enjoy : )

25 minutes video on everything you need to know about reconnaissance is now live 🎥 Methodology, approach and nuances on how to find all publicly facing assets of a given company on the internet. enjoy : )

36,295 次观看 • 8 个月前

It's never been easier to get pwned combining Cursor auto-run + Anthropic MCP Here is a POC using an external MCP server that parses GitHub repositories documentations turning into RCE. There are 0 AI Guardrails when asking Cursor to follow instructions coming from MCP🙃

It's never been easier to get pwned combining Cursor auto-run + Anthropic MCP Here is a POC using an external MCP server that parses GitHub repositories documentations turning into RCE. There are 0 AI Guardrails when asking Cursor to follow instructions coming from MCP🙃

46,417 次观看 • 1 年前

没有更多内容可加载