正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

AnonKryptiQuz

1,568 subscribers

13,181 次观看 • 1 年前 •via X (Twitter)

科学技术 #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

Anya Rossi• Live Now

Private livecam show

5 条评论

Juani Kaupert 🇦🇷 的头像

Juani Kaupert 🇦🇷1 年前

The music 🚬

An0nT3ch 的头像

An0nT3ch1 年前

hey bro, I will make couple of pull requests as I have identified some little problems in the code, love ya mate

AnonKryptiQuz 的头像

AnonKryptiQuz1 年前

Sure, you're more than welcome to do so.

xss0r 的头像

xss0r1 年前

nice tool, but it would be better if you gaved a credits to owner of the payloads, since you used all payloads from Anyways thanks for sharing

AnonKryptiQuz 的头像

AnonKryptiQuz1 年前

Some of your payloads seem inspired by @XssReport Great work from your team nonetheless, keep it up! If you have any suggestions or improvements, feel free to share.

相关视频

Injectra is a Python tool for injecting custom payloads into files using their magic numbers. It supports file types like zip, jpg, docx, and more. Check it out: #CyberSecurity #Pentesting #PayloadInjection #hackingtools #RedTeam #infosec #bugbounty

Injectra is a Python tool for injecting custom payloads into files using their magic numbers. It supports file types like zip, jpg, docx, and more. Check it out: #CyberSecurity #Pentesting #PayloadInjection #hackingtools #RedTeam #infosec #bugbounty

AnonKryptiQuz

24,054 次观看 • 1 年前

TimeVault automates finding information disclosure vulnerabilities by effortlessly filtering sensitive files and uncovering hidden data. Check it out: Team: mohd farzaan @hexsh1dow haq enver #CyberSecurity #BugBounty #OSINT #hackingtools #InfoSec

TimeVault automates finding information disclosure vulnerabilities by effortlessly filtering sensitive files and uncovering hidden data. Check it out: Team: mohd farzaan @hexsh1dow haq enver #CyberSecurity #BugBounty #OSINT #hackingtools #InfoSec

AnonKryptiQuz

13,964 次观看 • 1 年前

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss

Today Cyber News

34,216 次观看 • 3 年前

🚀 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter NextSploit is a tool that detects and exploits CVE-2025-29927, a security flaw in Next.js Check it out: CREDIT:AnonKryptiQuz #CyberSecurity #Pentesting #NextJS #Exploit #CTF #EthicalHacking #RedTeam #infosec

🚀 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter NextSploit is a tool that detects and exploits CVE-2025-29927, a security flaw in Next.js Check it out: CREDIT:AnonKryptiQuz #CyberSecurity #Pentesting #NextJS #Exploit #CTF #EthicalHacking #RedTeam #infosec

X

13,290 次观看 • 1 年前

XBOW is the world’s first fully automated web pentester. It previously scored an unprecedented 75% on renowned web pentesting benchmarks from PentesterLab and PortSwigger. So we decided to give it a harder challenge: competing against humans.

XBOW is the world’s first fully automated web pentester. It previously scored an unprecedented 75% on renowned web pentesting benchmarks from PentesterLab and PortSwigger. So we decided to give it a harder challenge: competing against humans.

XBOW

261,188 次观看 • 2 年前

Olympix is officially in Live Beta! Olympix is a proactive DevSecOps tool that employs static analysis to empower smart contract developers to detect vulnerabilities in real-time. Developers can leverage Olympix to assist them in creating robust and secure code Try it here:

Olympix is officially in Live Beta! Olympix is a proactive DevSecOps tool that employs static analysis to empower smart contract developers to detect vulnerabilities in real-time. Developers can leverage Olympix to assist them in creating robust and secure code Try it here:

Olympix

12,816 次观看 • 2 年前

ANTHROPIC'S NEW AI MODEL "MYTHOS" IS SO POWERFUL THE COMPANY WON'T RELEASE IT TO THE PUBLIC YET Instead, they're giving it to 11 companies first through "Project Glasswing" to find cybersecurity vulnerabilities before bad actors can. The partners: Amazon, Apple, Broadcom, Nvidia, Google, and others. The model wasn't built for cybersecurity. It was built to be an automated AI researcher, an AI that helps build better AI. But those same capabilities make it a serious tool for both offensive and defensive cyber operations. OpenAI reportedly has a similar model codenamed "SPU" going through the same slow rollout process. Palisade Research: "Anthropic is a little ahead, but not overwhelmingly ahead. They don't necessarily have a permanent moat here."

ANTHROPIC'S NEW AI MODEL "MYTHOS" IS SO POWERFUL THE COMPANY WON'T RELEASE IT TO THE PUBLIC YET Instead, they're giving it to 11 companies first through "Project Glasswing" to find cybersecurity vulnerabilities before bad actors can. The partners: Amazon, Apple, Broadcom, Nvidia, Google, and others. The model wasn't built for cybersecurity. It was built to be an automated AI researcher, an AI that helps build better AI. But those same capabilities make it a serious tool for both offensive and defensive cyber operations. OpenAI reportedly has a similar model codenamed "SPU" going through the same slow rollout process. Palisade Research: "Anthropic is a little ahead, but not overwhelmingly ahead. They don't necessarily have a permanent moat here."

WOLF

80,158 次观看 • 4 个月前

The Blackbox CLI is now open source. Smart debugging, automated project setup, and multi-agent execution to run multiple coding agents in parallel. Check out the code, contribute, or report any issues here

The Blackbox CLI is now open source. Smart debugging, automated project setup, and multi-agent execution to run multiple coding agents in parallel. Check out the code, contribute, or report any issues here

BLACKBOX AI

14,117 次观看 • 7 个月前

The Microsoft Designer app is now generally available. It's an AI-powered tool that turns your words into designs… free on web and mobile, and available in over 80 languages. Try it out here:

The Microsoft Designer app is now generally available. It's an AI-powered tool that turns your words into designs… free on web and mobile, and available in over 80 languages. Try it out here:

Yusuf Mehdi

27,804 次观看 • 2 年前

Built an MCP tool to generate 3D models and use them in ThreeJS or any app seamlessly. Check it out 🙏

Built an MCP tool to generate 3D models and use them in ThreeJS or any app seamlessly. Check it out 🙏

Visionary x AI

152,108 次观看 • 1 年前

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

Web Security Academy

26,360 次观看 • 1 年前

Here's a reminder of our transparency tool, the Saakuru $SKR Portal. Have you already examined it and figured out how it works? Check it out here: Leave your questions in the comments if anything is unclear.👇With Silotech.eth

Here's a reminder of our transparency tool, the Saakuru $SKR Portal. Have you already examined it and figured out how it works? Check it out here: Leave your questions in the comments if anything is unclear.👇With Silotech.eth

Saakuru Protocol 👾

163,009 次观看 • 2 年前

Want to build your own v0 or AI agent? Three open-source templates you should check out: 1. Have an AI create a deployment and users "claim" it 2. AI chatbot with code generation / execution 3. Slackbot with tool calling

Sensitive content

Want to build your own v0 or AI agent? Three open-source templates you should check out: 1. Have an AI create a deployment and users "claim" it 2. AI chatbot with code generation / execution 3. Slackbot with tool calling

Lee Robinson

50,851 次观看 • 1 年前

My friend Manaf and I have created an AI hacker! 👨‍💻 It can find 0-days in web applications with 0% false positives, and it also works on CTF challenges! What you see ⬇️ is Haicker solving a web challenge from UMassCTF 2025 (only 45/557 teams were able to solve it!)

My friend Manaf and I have created an AI hacker! 👨‍💻 It can find 0-days in web applications with 0% false positives, and it also works on CTF challenges! What you see ⬇️ is Haicker solving a web challenge from UMassCTF 2025 (only 45/557 teams were able to solve it!)

pilvar (Philippe Dourassov)

36,007 次观看 • 1 年前

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

Johann Rehberger

117,565 次观看 • 1 年前

➡️ Sometimes, the best way to capture information is with a clear diagram! Our latest AI tool, AI Diagrams, takes simple text and turns it into the visual of your choice. From there, easily save the result to your Evernote account, or copy/download it directly from the web. Check it out below👇and try the tool for yourself:

➡️ Sometimes, the best way to capture information is with a clear diagram! Our latest AI tool, AI Diagrams, takes simple text and turns it into the visual of your choice. From there, easily save the result to your Evernote account, or copy/download it directly from the web. Check it out below👇and try the tool for yourself:

Evernote

16,827 次观看 • 1 年前