Загрузка видео...

Не удалось загрузить видео

На главную

A simple bypass through IP based application blocklisting 👇 X-Forwarded-For can be used to bypass the IP based blocklisting if the application is configured to trust this header.

WebSecAcademy's profile picture

Web Security Academy

144,223 subscribers

16,601 просмотров • 1 месяц назад •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

This video demonstrates the implementation of IP spoofing. This vulnerability can be exploited in IP-based access control systems such as web firewalls and anti-scraping systems to bypass security measures and engage in deceptive activities.
1:55

This video demonstrates the implementation of IP spoofing. This vulnerability can be exploited in IP-based access control systems such as web firewalls and anti-scraping systems to bypass security measures and engage in deceptive activities.

CFC4N

29,972 просмотров • 2 лет назад

Clear breakdown to exactly how FedNow connects to the Interledger Protocol and XRP: FedNow —> Fedline = TCP/IP based Network/Messaging System For 10,000 Banks Interledger and XRP = Frontrunners to be TCP/IP equivalent in fintech + ILP presentation on TCP/IP 🧩
0:29

Clear breakdown to exactly how FedNow connects to the Interledger Protocol and XRP: FedNow —> Fedline = TCP/IP based Network/Messaging System For 10,000 Banks Interledger and XRP = Frontrunners to be TCP/IP equivalent in fintech + ILP presentation on TCP/IP 🧩

SMQKE

198,865 просмотров • 2 лет назад

Polkadot is changing how you use the internet—delivering less trust and more truth. A secure, scalable, and resilient platform for any web-based application service. 2/19
0:37

Polkadot is changing how you use the internet—delivering less trust and more truth. A secure, scalable, and resilient platform for any web-based application service. 2/19

Polkadot

15,310 просмотров • 1 год назад

Registering IP on the Base through VFX DAO is a simple process. 🔵 With VFX DAO, IP is focused on visual media such as movies, tv series, and documentaries but it can be applied across all media types. 🎬 Check out how its done in this video. 👇
11:01

Registering IP on the Base through VFX DAO is a simple process. 🔵 With VFX DAO, IP is focused on visual media such as movies, tv series, and documentaries but it can be applied across all media types. 🎬 Check out how its done in this video. 👇

Vabble 🛡️

11,207 просмотров • 1 год назад

Cofounder of Story Protocol Legacy discusses how blockchain, AI, and IP's can be used to change the IP world from a zero sum game to a win-win situation for both IP creators and their fans ^Subscribe onto YT #kbw #story #IP #AI #blockchain #winwin
21:00

Cofounder of Story Protocol Legacy discusses how blockchain, AI, and IP's can be used to change the IP world from a zero sum game to a win-win situation for both IP creators and their fans ^Subscribe onto YT #kbw #story #IP #AI #blockchain #winwin

KBW2026

40,055 просмотров • 1 год назад

JUST IN: $PLTR x $ZETA “Marketing is just the first application, our long term goal is to build an OPERATING SYSTEM based on Athena.” – David Steinberg, CEO, Zeta Global $ZETA
1:04

JUST IN: $PLTR x $ZETA “Marketing is just the first application, our long term goal is to build an OPERATING SYSTEM based on Athena.” – David Steinberg, CEO, Zeta Global $ZETA

Wealthmatica

30,430 просмотров • 2 месяцев назад

VPN is still broken in iPadOS 27 and iOS 27 (beta 1). The device's real IP leaks during updating a VPN app while it is active. A website that periodically prints the IP was used to illustrate the leakage, Mullvad VPN used as an example👇
0:34

VPN is still broken in iPadOS 27 and iOS 27 (beta 1). The device's real IP leaks during updating a VPN app while it is active. A website that periodically prints the IP was used to illustrate the leakage, Mullvad VPN used as an example👇

Mysk 🇨🇦🇩🇪

40,335 просмотров • 3 месяцев назад

Glaze chemistry and application is one of the more difficult parts of ceramics to master, and for the most part can only be learned through experience. After a decade or so you begin to grasp it.
4:12

Glaze chemistry and application is one of the more difficult parts of ceramics to master, and for the most part can only be learned through experience. After a decade or so you begin to grasp it.

The Artist known as Jess

11,900 просмотров • 13 дней назад

In the Netherlands, they've used bus stop bypasses for decades. This is partially why the Dutch cycle 1,108km a year and the English cycle 97km a year. The data on bus stop bypass safety is clear, which is why anti-bus stop bypass campaigners ignore it.
1:24

In the Netherlands, they've used bus stop bypasses for decades. This is partially why the Dutch cycle 1,108km a year and the English cycle 97km a year. The data on bus stop bypass safety is clear, which is why anti-bus stop bypass campaigners ignore it.

Jon Burke 🌍

221,251 просмотров • 1 год назад

Confused about Yuga Labs selling cryptopunks IP for only $20m? Allow me to explain: "Infinite Node Foundation" or whatever is an arms length non-profit. There's overlap between boards on Yuga and Node foundation. Extremely tax advantageous to move the IP from one hand to the other. The acquisition price was never disclosed but let's assume it was 400m for cryptopunks IP for sake of argument. Yuga then realizes they overpaid for IP that can't monetize without public blowback after the woke punks fiasco. Yuga "sells" the IP to their associated non-profit booking a -380m loss on paper they can use for offsetting taxes. Meanwhile they still control the IP at arms length and are able to profit from the IP (they can be a little more creative under the banner of non-profit) "By why not donate the punk IP and get the full write off?" Zero chance it would command the same appraisal as it did in 2021 so better to use cost basis and have Yuga corp take the loss on paper. This is purely my speculation on how this went down based on the 7 years I spent working in the fine art / non-profit world.
0:30

Confused about Yuga Labs selling cryptopunks IP for only $20m? Allow me to explain: "Infinite Node Foundation" or whatever is an arms length non-profit. There's overlap between boards on Yuga and Node foundation. Extremely tax advantageous to move the IP from one hand to the other. The acquisition price was never disclosed but let's assume it was 400m for cryptopunks IP for sake of argument. Yuga then realizes they overpaid for IP that can't monetize without public blowback after the woke punks fiasco. Yuga "sells" the IP to their associated non-profit booking a -380m loss on paper they can use for offsetting taxes. Meanwhile they still control the IP at arms length and are able to profit from the IP (they can be a little more creative under the banner of non-profit) "By why not donate the punk IP and get the full write off?" Zero chance it would command the same appraisal as it did in 2021 so better to use cost basis and have Yuga corp take the loss on paper. This is purely my speculation on how this went down based on the 7 years I spent working in the fine art / non-profit world.

karbon 🐺🦊

82,070 просмотров • 1 год назад

A heavy build up for traffic heading to Busega on the Northern bypass. This was taken at 6.30am on my way to work. Avoid the route if you can. I’m happy though that Kampala is going to breathe.
0:26

A heavy build up for traffic heading to Busega on the Northern bypass. This was taken at 6.30am on my way to work. Avoid the route if you can. I’m happy though that Kampala is going to breathe.

Simon Kaggwa Njala

50,441 просмотров • 8 месяцев назад

My challenge is actually based on a bug I found in Apollo Server; in its default configuration, it uses the same blacklist-based approach to prevent CSRF. I was able to bypass it and use it as an XS-Leak in default configs. I’ll be writing a detailed write-up soon about it :)
0:36

My challenge is actually based on a bug I found in Apollo Server; in its default configuration, it uses the same blacklist-based approach to prevent CSRF. I was able to bypass it and use it as an XS-Leak in default configs. I’ll be writing a detailed write-up soon about it :)

AmirMohammad Safari

28,856 просмотров • 5 месяцев назад

🚢 Asked about the Ansar Allah opening a second choke point in the Red Sea, Energy Secretary Chris Wright says a “bypass to the bypass” already exists: “called the Suez Canal.” Tankers can route through the Red Sea via Suez rather than south to Bab al-Mandab, he says, alongside a parallel pipeline, with both being used to divert more oil “as we speak.”
1:03

🚢 Asked about the Ansar Allah opening a second choke point in the Red Sea, Energy Secretary Chris Wright says a “bypass to the bypass” already exists: “called the Suez Canal.” Tankers can route through the Red Sea via Suez rather than south to Bab al-Mandab, he says, alongside a parallel pipeline, with both being used to divert more oil “as we speak.”

Drop Site

37,128 просмотров • 1 месяц назад

Lakemba, Sydney mosque's $22,000 proposal to blast Islamic call to prayer from loudspeakers knocked back by council. But the group behind the proposal says the objections are based on Islamophobia, and a new application will be submitted.
1:59

Lakemba, Sydney mosque's $22,000 proposal to blast Islamic call to prayer from loudspeakers knocked back by council. But the group behind the proposal says the objections are based on Islamophobia, and a new application will be submitted.

WaltzingRNLilydale

102,342 просмотров • 1 год назад

How to enable full observability and automatic analytics for your LLM-based application. It takes one library + one line of code, and you get a ton of information for free. This is a no-brainer.
6:26

How to enable full observability and automatic analytics for your LLM-based application. It takes one library + one line of code, and you get a ton of information for free. This is a no-brainer.

Santiago

17,532 просмотров • 4 месяцев назад