正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

A simple bypass through IP based application blocklisting 👇 X-Forwarded-For can be used to bypass the IP based blocklisting if the application is configured to trust this header.

Web Security Academy

144,223 subscribers

16,601 次观看 • 1 个月前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

This video demonstrates the implementation of IP spoofing. This vulnerability can be exploited in IP-based access control systems such as web firewalls and anti-scraping systems to bypass security measures and engage in deceptive activities.

This video demonstrates the implementation of IP spoofing. This vulnerability can be exploited in IP-based access control systems such as web firewalls and anti-scraping systems to bypass security measures and engage in deceptive activities.

CFC4N

29,972 次观看 • 2 年前

Clear breakdown to exactly how FedNow connects to the Interledger Protocol and XRP: FedNow —> Fedline = TCP/IP based Network/Messaging System For 10,000 Banks Interledger and XRP = Frontrunners to be TCP/IP equivalent in fintech + ILP presentation on TCP/IP 🧩

Clear breakdown to exactly how FedNow connects to the Interledger Protocol and XRP: FedNow —> Fedline = TCP/IP based Network/Messaging System For 10,000 Banks Interledger and XRP = Frontrunners to be TCP/IP equivalent in fintech + ILP presentation on TCP/IP 🧩

SMQKE

198,865 次观看 • 2 年前

Polkadot is changing how you use the internet—delivering less trust and more truth. A secure, scalable, and resilient platform for any web-based application service. 2/19

Polkadot is changing how you use the internet—delivering less trust and more truth. A secure, scalable, and resilient platform for any web-based application service. 2/19

Polkadot

15,310 次观看 • 1 年前

Registering IP on the Base through VFX DAO is a simple process. 🔵 With VFX DAO, IP is focused on visual media such as movies, tv series, and documentaries but it can be applied across all media types. 🎬 Check out how its done in this video. 👇

Registering IP on the Base through VFX DAO is a simple process. 🔵 With VFX DAO, IP is focused on visual media such as movies, tv series, and documentaries but it can be applied across all media types. 🎬 Check out how its done in this video. 👇

Vabble 🛡️

11,207 次观看 • 1 年前

Cofounder of Story Protocol Legacy discusses how blockchain, AI, and IP's can be used to change the IP world from a zero sum game to a win-win situation for both IP creators and their fans ^Subscribe onto YT #kbw #story #IP #AI #blockchain #winwin

Cofounder of Story Protocol Legacy discusses how blockchain, AI, and IP's can be used to change the IP world from a zero sum game to a win-win situation for both IP creators and their fans ^Subscribe onto YT #kbw #story #IP #AI #blockchain #winwin

KBW2026

40,055 次观看 • 1 年前

JUST IN: $PLTR x $ZETA “Marketing is just the first application, our long term goal is to build an OPERATING SYSTEM based on Athena.” – David Steinberg, CEO, Zeta Global $ZETA

JUST IN: $PLTR x $ZETA “Marketing is just the first application, our long term goal is to build an OPERATING SYSTEM based on Athena.” – David Steinberg, CEO, Zeta Global $ZETA

Wealthmatica

30,430 次观看 • 2 个月前

VPN is still broken in iPadOS 27 and iOS 27 (beta 1). The device's real IP leaks during updating a VPN app while it is active. A website that periodically prints the IP was used to illustrate the leakage, Mullvad VPN used as an example👇

VPN is still broken in iPadOS 27 and iOS 27 (beta 1). The device's real IP leaks during updating a VPN app while it is active. A website that periodically prints the IP was used to illustrate the leakage, Mullvad VPN used as an example👇

Mysk 🇨🇦🇩🇪

40,335 次观看 • 3 个月前

Glaze chemistry and application is one of the more difficult parts of ceramics to master, and for the most part can only be learned through experience. After a decade or so you begin to grasp it.

Glaze chemistry and application is one of the more difficult parts of ceramics to master, and for the most part can only be learned through experience. After a decade or so you begin to grasp it.

The Artist known as Jess

11,900 次观看 • 13 天前

In the Netherlands, they've used bus stop bypasses for decades. This is partially why the Dutch cycle 1,108km a year and the English cycle 97km a year. The data on bus stop bypass safety is clear, which is why anti-bus stop bypass campaigners ignore it.

In the Netherlands, they've used bus stop bypasses for decades. This is partially why the Dutch cycle 1,108km a year and the English cycle 97km a year. The data on bus stop bypass safety is clear, which is why anti-bus stop bypass campaigners ignore it.

Jon Burke 🌍

221,251 次观看 • 1 年前

Confused about Yuga Labs selling cryptopunks IP for only $20m? Allow me to explain: "Infinite Node Foundation" or whatever is an arms length non-profit. There's overlap between boards on Yuga and Node foundation. Extremely tax advantageous to move the IP from one hand to the other. The acquisition price was never disclosed but let's assume it was 400m for cryptopunks IP for sake of argument. Yuga then realizes they overpaid for IP that can't monetize without public blowback after the woke punks fiasco. Yuga "sells" the IP to their associated non-profit booking a -380m loss on paper they can use for offsetting taxes. Meanwhile they still control the IP at arms length and are able to profit from the IP (they can be a little more creative under the banner of non-profit) "By why not donate the punk IP and get the full write off?" Zero chance it would command the same appraisal as it did in 2021 so better to use cost basis and have Yuga corp take the loss on paper. This is purely my speculation on how this went down based on the 7 years I spent working in the fine art / non-profit world.

Confused about Yuga Labs selling cryptopunks IP for only $20m? Allow me to explain: "Infinite Node Foundation" or whatever is an arms length non-profit. There's overlap between boards on Yuga and Node foundation. Extremely tax advantageous to move the IP from one hand to the other. The acquisition price was never disclosed but let's assume it was 400m for cryptopunks IP for sake of argument. Yuga then realizes they overpaid for IP that can't monetize without public blowback after the woke punks fiasco. Yuga "sells" the IP to their associated non-profit booking a -380m loss on paper they can use for offsetting taxes. Meanwhile they still control the IP at arms length and are able to profit from the IP (they can be a little more creative under the banner of non-profit) "By why not donate the punk IP and get the full write off?" Zero chance it would command the same appraisal as it did in 2021 so better to use cost basis and have Yuga corp take the loss on paper. This is purely my speculation on how this went down based on the 7 years I spent working in the fine art / non-profit world.

karbon 🐺🦊

82,070 次观看 • 1 年前

A heavy build up for traffic heading to Busega on the Northern bypass. This was taken at 6.30am on my way to work. Avoid the route if you can. I’m happy though that Kampala is going to breathe.

A heavy build up for traffic heading to Busega on the Northern bypass. This was taken at 6.30am on my way to work. Avoid the route if you can. I’m happy though that Kampala is going to breathe.

Simon Kaggwa Njala

50,441 次观看 • 8 个月前

My challenge is actually based on a bug I found in Apollo Server; in its default configuration, it uses the same blacklist-based approach to prevent CSRF. I was able to bypass it and use it as an XS-Leak in default configs. I’ll be writing a detailed write-up soon about it :)

My challenge is actually based on a bug I found in Apollo Server; in its default configuration, it uses the same blacklist-based approach to prevent CSRF. I was able to bypass it and use it as an XS-Leak in default configs. I’ll be writing a detailed write-up soon about it :)

AmirMohammad Safari

28,856 次观看 • 5 个月前

🚢 Asked about the Ansar Allah opening a second choke point in the Red Sea, Energy Secretary Chris Wright says a “bypass to the bypass” already exists: “called the Suez Canal.” Tankers can route through the Red Sea via Suez rather than south to Bab al-Mandab, he says, alongside a parallel pipeline, with both being used to divert more oil “as we speak.”

🚢 Asked about the Ansar Allah opening a second choke point in the Red Sea, Energy Secretary Chris Wright says a “bypass to the bypass” already exists: “called the Suez Canal.” Tankers can route through the Red Sea via Suez rather than south to Bab al-Mandab, he says, alongside a parallel pipeline, with both being used to divert more oil “as we speak.”

Drop Site

37,128 次观看 • 1 个月前

Lakemba, Sydney mosque's $22,000 proposal to blast Islamic call to prayer from loudspeakers knocked back by council. But the group behind the proposal says the objections are based on Islamophobia, and a new application will be submitted.

Lakemba, Sydney mosque's $22,000 proposal to blast Islamic call to prayer from loudspeakers knocked back by council. But the group behind the proposal says the objections are based on Islamophobia, and a new application will be submitted.

WaltzingRNLilydale

102,342 次观看 • 1 年前

How to enable full observability and automatic analytics for your LLM-based application. It takes one library + one line of code, and you get a ton of information for free. This is a no-brainer.

How to enable full observability and automatic analytics for your LLM-based application. It takes one library + one line of code, and you get a ton of information for free. This is a no-brainer.

Santiago

17,532 次观看 • 4 个月前