Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

AnonKryptiQuz's profile picture

AnonKryptiQuz

1,568 subscribers

13,181 Aufrufe • vor 1 Jahr •via X (Twitter)

Wissenschaft & Technologie#CyberSecurity#BlindXSS#Pentesting#BugBounty#hackingtools#redteam
LIVE

Anya Rossi• Live Now

Private livecam show

5 Kommentare

Profilbild von Juani Kaupert 🇦🇷
Juani Kaupert 🇦🇷vor 1 Jahr

The music 🚬

Profilbild von An0nT3ch
An0nT3chvor 1 Jahr

hey bro, I will make couple of pull requests as I have identified some little problems in the code, love ya mate

Profilbild von AnonKryptiQuz
AnonKryptiQuzvor 1 Jahr

Sure, you're more than welcome to do so.

Profilbild von xss0r
xss0rvor 1 Jahr

nice tool, but it would be better if you gaved a credits to owner of the payloads, since you used all payloads from Anyways thanks for sharing

Profilbild von AnonKryptiQuz
AnonKryptiQuzvor 1 Jahr

Some of your payloads seem inspired by @XssReport Great work from your team nonetheless, keep it up! If you have any suggestions or improvements, feel free to share.

Ähnliche Videos

Injectra is a Python tool for injecting custom payloads into files using their magic numbers. It supports file types like zip, jpg, docx, and more. Check it out: #CyberSecurity #Pentesting #PayloadInjection #hackingtools #RedTeam #infosec #bugbounty
1:21

Injectra is a Python tool for injecting custom payloads into files using their magic numbers. It supports file types like zip, jpg, docx, and more. Check it out: #CyberSecurity #Pentesting #PayloadInjection #hackingtools #RedTeam #infosec #bugbounty

AnonKryptiQuz

24,054 Aufrufe • vor 1 Jahr

TimeVault automates finding information disclosure vulnerabilities by effortlessly filtering sensitive files and uncovering hidden data. Check it out: Team: mohd farzaan @hexsh1dow haq enver #CyberSecurity #BugBounty #OSINT #hackingtools #InfoSec
1:14

TimeVault automates finding information disclosure vulnerabilities by effortlessly filtering sensitive files and uncovering hidden data. Check it out: Team: mohd farzaan @hexsh1dow haq enver #CyberSecurity #BugBounty #OSINT #hackingtools #InfoSec

AnonKryptiQuz

13,964 Aufrufe • vor 1 Jahr

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss
0:21

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss

Today Cyber News

34,216 Aufrufe • vor 2 Jahren

🚀 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter NextSploit is a tool that detects and exploits CVE-2025-29927, a security flaw in Next.js Check it out: CREDIT:AnonKryptiQuz #CyberSecurity #Pentesting #NextJS #Exploit #CTF #EthicalHacking #RedTeam #infosec
1:56

🚀 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter NextSploit is a tool that detects and exploits CVE-2025-29927, a security flaw in Next.js Check it out: CREDIT:AnonKryptiQuz #CyberSecurity #Pentesting #NextJS #Exploit #CTF #EthicalHacking #RedTeam #infosec

X

13,290 Aufrufe • vor 1 Jahr

XBOW is the world’s first fully automated web pentester. It previously scored an unprecedented 75% on renowned web pentesting benchmarks from PentesterLab and PortSwigger. So we decided to give it a harder challenge: competing against humans.
3:31

XBOW is the world’s first fully automated web pentester. It previously scored an unprecedented 75% on renowned web pentesting benchmarks from PentesterLab and PortSwigger. So we decided to give it a harder challenge: competing against humans.

XBOW

261,188 Aufrufe • vor 2 Jahren

Olympix is officially in Live Beta! Olympix is a proactive DevSecOps tool that employs static analysis to empower smart contract developers to detect vulnerabilities in real-time. Developers can leverage Olympix to assist them in creating robust and secure code Try it here:
0:49

Olympix is officially in Live Beta! Olympix is a proactive DevSecOps tool that employs static analysis to empower smart contract developers to detect vulnerabilities in real-time. Developers can leverage Olympix to assist them in creating robust and secure code Try it here:

Olympix

12,816 Aufrufe • vor 2 Jahren

ANTHROPIC'S NEW AI MODEL "MYTHOS" IS SO POWERFUL THE COMPANY WON'T RELEASE IT TO THE PUBLIC YET Instead, they're giving it to 11 companies first through "Project Glasswing" to find cybersecurity vulnerabilities before bad actors can. The partners: Amazon, Apple, Broadcom, Nvidia, Google, and others. The model wasn't built for cybersecurity. It was built to be an automated AI researcher, an AI that helps build better AI. But those same capabilities make it a serious tool for both offensive and defensive cyber operations. OpenAI reportedly has a similar model codenamed "SPU" going through the same slow rollout process. Palisade Research: "Anthropic is a little ahead, but not overwhelmingly ahead. They don't necessarily have a permanent moat here."
6:38

ANTHROPIC'S NEW AI MODEL "MYTHOS" IS SO POWERFUL THE COMPANY WON'T RELEASE IT TO THE PUBLIC YET Instead, they're giving it to 11 companies first through "Project Glasswing" to find cybersecurity vulnerabilities before bad actors can. The partners: Amazon, Apple, Broadcom, Nvidia, Google, and others. The model wasn't built for cybersecurity. It was built to be an automated AI researcher, an AI that helps build better AI. But those same capabilities make it a serious tool for both offensive and defensive cyber operations. OpenAI reportedly has a similar model codenamed "SPU" going through the same slow rollout process. Palisade Research: "Anthropic is a little ahead, but not overwhelmingly ahead. They don't necessarily have a permanent moat here."

WOLF

80,158 Aufrufe • vor 4 Monaten

The Blackbox CLI is now open source. Smart debugging, automated project setup, and multi-agent execution to run multiple coding agents in parallel. Check out the code, contribute, or report any issues here
0:21

The Blackbox CLI is now open source. Smart debugging, automated project setup, and multi-agent execution to run multiple coding agents in parallel. Check out the code, contribute, or report any issues here

BLACKBOX AI

14,117 Aufrufe • vor 7 Monaten

The Microsoft Designer app is now generally available. It's an AI-powered tool that turns your words into designs… free on web and mobile, and available in over 80 languages. Try it out here:
0:30

The Microsoft Designer app is now generally available. It's an AI-powered tool that turns your words into designs… free on web and mobile, and available in over 80 languages. Try it out here:

Yusuf Mehdi

27,796 Aufrufe • vor 2 Jahren

Built an MCP tool to generate 3D models and use them in ThreeJS or any app seamlessly. Check it out 🙏
0:27

Built an MCP tool to generate 3D models and use them in ThreeJS or any app seamlessly. Check it out 🙏

Visionary x AI

152,108 Aufrufe • vor 1 Jahr

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity
1:32

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

Web Security Academy

26,360 Aufrufe • vor 1 Jahr

Here's a reminder of our transparency tool, the Saakuru $SKR Portal. Have you already examined it and figured out how it works? Check it out here: Leave your questions in the comments if anything is unclear.👇With Silotech.eth
0:24

Here's a reminder of our transparency tool, the Saakuru $SKR Portal. Have you already examined it and figured out how it works? Check it out here: Leave your questions in the comments if anything is unclear.👇With Silotech.eth

Saakuru Protocol 👾

162,985 Aufrufe • vor 2 Jahren

Want to build your own v0 or AI agent? Three open-source templates you should check out: 1. Have an AI create a deployment and users "claim" it 2. AI chatbot with code generation / execution 3. Slackbot with tool calling
5:06

Sensitive content

Want to build your own v0 or AI agent? Three open-source templates you should check out: 1. Have an AI create a deployment and users "claim" it 2. AI chatbot with code generation / execution 3. Slackbot with tool calling

Lee Robinson

50,851 Aufrufe • vor 1 Jahr

My friend Manaf and I have created an AI hacker! 👨‍💻 It can find 0-days in web applications with 0% false positives, and it also works on CTF challenges! What you see ⬇️ is Haicker solving a web challenge from UMassCTF 2025 (only 45/557 teams were able to solve it!)
1:29

My friend Manaf and I have created an AI hacker! 👨‍💻 It can find 0-days in web applications with 0% false positives, and it also works on CTF challenges! What you see ⬇️ is Haicker solving a web challenge from UMassCTF 2025 (only 45/557 teams were able to solve it!)

pilvar (Philippe Dourassov)

36,007 Aufrufe • vor 1 Jahr

➡️ Sometimes, the best way to capture information is with a clear diagram! Our latest AI tool, AI Diagrams, takes simple text and turns it into the visual of your choice. From there, easily save the result to your Evernote account, or copy/download it directly from the web. Check it out below👇and try the tool for yourself:
0:23

➡️ Sometimes, the best way to capture information is with a clear diagram! Our latest AI tool, AI Diagrams, takes simple text and turns it into the visual of your choice. From there, easily save the result to your Evernote account, or copy/download it directly from the web. Check it out below👇and try the tool for yourself:

Evernote

16,827 Aufrufe • vor 11 Monaten

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you
0:32

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

Johann Rehberger

117,565 Aufrufe • vor 1 Jahr