Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

A simple bypass through IP based application blocklisting 👇 X-Forwarded-For can be used to bypass the IP based blocklisting if the application is configured to trust this header.

WebSecAcademy's profile picture

Web Security Academy

144,223 subscribers

16,601 görüntüleme • 1 ay önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

This video demonstrates the implementation of IP spoofing. This vulnerability can be exploited in IP-based access control systems such as web firewalls and anti-scraping systems to bypass security measures and engage in deceptive activities.
1:55

This video demonstrates the implementation of IP spoofing. This vulnerability can be exploited in IP-based access control systems such as web firewalls and anti-scraping systems to bypass security measures and engage in deceptive activities.

CFC4N

29,972 görüntüleme • 2 yıl önce

Clear breakdown to exactly how FedNow connects to the Interledger Protocol and XRP: FedNow —> Fedline = TCP/IP based Network/Messaging System For 10,000 Banks Interledger and XRP = Frontrunners to be TCP/IP equivalent in fintech + ILP presentation on TCP/IP 🧩
0:29

Clear breakdown to exactly how FedNow connects to the Interledger Protocol and XRP: FedNow —> Fedline = TCP/IP based Network/Messaging System For 10,000 Banks Interledger and XRP = Frontrunners to be TCP/IP equivalent in fintech + ILP presentation on TCP/IP 🧩

SMQKE

198,865 görüntüleme • 2 yıl önce

Polkadot is changing how you use the internet—delivering less trust and more truth. A secure, scalable, and resilient platform for any web-based application service. 2/19
0:37

Polkadot is changing how you use the internet—delivering less trust and more truth. A secure, scalable, and resilient platform for any web-based application service. 2/19

Polkadot

15,310 görüntüleme • 1 yıl önce

Registering IP on the Base through VFX DAO is a simple process. 🔵 With VFX DAO, IP is focused on visual media such as movies, tv series, and documentaries but it can be applied across all media types. 🎬 Check out how its done in this video. 👇
11:01

Registering IP on the Base through VFX DAO is a simple process. 🔵 With VFX DAO, IP is focused on visual media such as movies, tv series, and documentaries but it can be applied across all media types. 🎬 Check out how its done in this video. 👇

Vabble 🛡️

11,207 görüntüleme • 1 yıl önce

Cofounder of Story Protocol Legacy discusses how blockchain, AI, and IP's can be used to change the IP world from a zero sum game to a win-win situation for both IP creators and their fans ^Subscribe onto YT #kbw #story #IP #AI #blockchain #winwin
21:00

Cofounder of Story Protocol Legacy discusses how blockchain, AI, and IP's can be used to change the IP world from a zero sum game to a win-win situation for both IP creators and their fans ^Subscribe onto YT #kbw #story #IP #AI #blockchain #winwin

KBW2026

40,055 görüntüleme • 1 yıl önce

JUST IN: $PLTR x $ZETA “Marketing is just the first application, our long term goal is to build an OPERATING SYSTEM based on Athena.” – David Steinberg, CEO, Zeta Global $ZETA
1:04

JUST IN: $PLTR x $ZETA “Marketing is just the first application, our long term goal is to build an OPERATING SYSTEM based on Athena.” – David Steinberg, CEO, Zeta Global $ZETA

Wealthmatica

30,430 görüntüleme • 2 ay önce

VPN is still broken in iPadOS 27 and iOS 27 (beta 1). The device's real IP leaks during updating a VPN app while it is active. A website that periodically prints the IP was used to illustrate the leakage, Mullvad VPN used as an example👇
0:34

VPN is still broken in iPadOS 27 and iOS 27 (beta 1). The device's real IP leaks during updating a VPN app while it is active. A website that periodically prints the IP was used to illustrate the leakage, Mullvad VPN used as an example👇

Mysk 🇨🇦🇩🇪

40,335 görüntüleme • 3 ay önce

Glaze chemistry and application is one of the more difficult parts of ceramics to master, and for the most part can only be learned through experience. After a decade or so you begin to grasp it.
4:12

Glaze chemistry and application is one of the more difficult parts of ceramics to master, and for the most part can only be learned through experience. After a decade or so you begin to grasp it.

The Artist known as Jess

11,900 görüntüleme • 13 gün önce

In the Netherlands, they've used bus stop bypasses for decades. This is partially why the Dutch cycle 1,108km a year and the English cycle 97km a year. The data on bus stop bypass safety is clear, which is why anti-bus stop bypass campaigners ignore it.
1:24

In the Netherlands, they've used bus stop bypasses for decades. This is partially why the Dutch cycle 1,108km a year and the English cycle 97km a year. The data on bus stop bypass safety is clear, which is why anti-bus stop bypass campaigners ignore it.

Jon Burke 🌍

221,251 görüntüleme • 1 yıl önce

Confused about Yuga Labs selling cryptopunks IP for only $20m? Allow me to explain: "Infinite Node Foundation" or whatever is an arms length non-profit. There's overlap between boards on Yuga and Node foundation. Extremely tax advantageous to move the IP from one hand to the other. The acquisition price was never disclosed but let's assume it was 400m for cryptopunks IP for sake of argument. Yuga then realizes they overpaid for IP that can't monetize without public blowback after the woke punks fiasco. Yuga "sells" the IP to their associated non-profit booking a -380m loss on paper they can use for offsetting taxes. Meanwhile they still control the IP at arms length and are able to profit from the IP (they can be a little more creative under the banner of non-profit) "By why not donate the punk IP and get the full write off?" Zero chance it would command the same appraisal as it did in 2021 so better to use cost basis and have Yuga corp take the loss on paper. This is purely my speculation on how this went down based on the 7 years I spent working in the fine art / non-profit world.
0:30

Confused about Yuga Labs selling cryptopunks IP for only $20m? Allow me to explain: "Infinite Node Foundation" or whatever is an arms length non-profit. There's overlap between boards on Yuga and Node foundation. Extremely tax advantageous to move the IP from one hand to the other. The acquisition price was never disclosed but let's assume it was 400m for cryptopunks IP for sake of argument. Yuga then realizes they overpaid for IP that can't monetize without public blowback after the woke punks fiasco. Yuga "sells" the IP to their associated non-profit booking a -380m loss on paper they can use for offsetting taxes. Meanwhile they still control the IP at arms length and are able to profit from the IP (they can be a little more creative under the banner of non-profit) "By why not donate the punk IP and get the full write off?" Zero chance it would command the same appraisal as it did in 2021 so better to use cost basis and have Yuga corp take the loss on paper. This is purely my speculation on how this went down based on the 7 years I spent working in the fine art / non-profit world.

karbon 🐺🦊

82,070 görüntüleme • 1 yıl önce

A heavy build up for traffic heading to Busega on the Northern bypass. This was taken at 6.30am on my way to work. Avoid the route if you can. I’m happy though that Kampala is going to breathe.
0:26

A heavy build up for traffic heading to Busega on the Northern bypass. This was taken at 6.30am on my way to work. Avoid the route if you can. I’m happy though that Kampala is going to breathe.

Simon Kaggwa Njala

50,441 görüntüleme • 8 ay önce

My challenge is actually based on a bug I found in Apollo Server; in its default configuration, it uses the same blacklist-based approach to prevent CSRF. I was able to bypass it and use it as an XS-Leak in default configs. I’ll be writing a detailed write-up soon about it :)
0:36

My challenge is actually based on a bug I found in Apollo Server; in its default configuration, it uses the same blacklist-based approach to prevent CSRF. I was able to bypass it and use it as an XS-Leak in default configs. I’ll be writing a detailed write-up soon about it :)

AmirMohammad Safari

28,856 görüntüleme • 5 ay önce

🚢 Asked about the Ansar Allah opening a second choke point in the Red Sea, Energy Secretary Chris Wright says a “bypass to the bypass” already exists: “called the Suez Canal.” Tankers can route through the Red Sea via Suez rather than south to Bab al-Mandab, he says, alongside a parallel pipeline, with both being used to divert more oil “as we speak.”
1:03

🚢 Asked about the Ansar Allah opening a second choke point in the Red Sea, Energy Secretary Chris Wright says a “bypass to the bypass” already exists: “called the Suez Canal.” Tankers can route through the Red Sea via Suez rather than south to Bab al-Mandab, he says, alongside a parallel pipeline, with both being used to divert more oil “as we speak.”

Drop Site

37,128 görüntüleme • 1 ay önce

Lakemba, Sydney mosque's $22,000 proposal to blast Islamic call to prayer from loudspeakers knocked back by council. But the group behind the proposal says the objections are based on Islamophobia, and a new application will be submitted.
1:59

Lakemba, Sydney mosque's $22,000 proposal to blast Islamic call to prayer from loudspeakers knocked back by council. But the group behind the proposal says the objections are based on Islamophobia, and a new application will be submitted.

WaltzingRNLilydale

102,342 görüntüleme • 1 yıl önce

How to enable full observability and automatic analytics for your LLM-based application. It takes one library + one line of code, and you get a ton of information for free. This is a no-brainer.
6:26

How to enable full observability and automatic analytics for your LLM-based application. It takes one library + one line of code, and you get a ton of information for free. This is a no-brainer.

Santiago

17,532 görüntüleme • 4 ay önce