正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Burpsuite extension to scan for leaked secrets, API endpoints, emails, URLs, domains, IP addresses, etc. in HTTP responses

Jsmon | AI-Powered Attack Surface Management

1,238 subscribers

11,313 次观看 • 6 个月前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

How to use burpsuite to test API endpoints

How to use burpsuite to test API endpoints

Abdulkadir | Cybersecurity

35,170 次观看 • 5 个月前

NEW in Brand Radar – API: AI responses endpoint now live – Save your reports for quick re-use – Cited domains & pages: add URLs to charts + see responses in nested tables Watch a quick demo 👇

Ahrefs

200,708 次观看 • 9 个月前

Rabby on your phone? Yeah, it’s that time. Set it up in seconds by syncing your addresses. Scan the QR code from the Rabby Extension to batch import your addresses. Fully offline, encrypted, and secure. Download Rabby Mobile now:

Rabby on your phone? Yeah, it’s that time. Set it up in seconds by syncing your addresses. Scan the QR code from the Rabby Extension to batch import your addresses. Fully offline, encrypted, and secure. Download Rabby Mobile now:

Rabby Wallet

43,781 次观看 • 1 年前

I integrated OpenAI’s privacy filter model into Rescriber, a browser extension that redacts sensitive info before ChatGPT sees your prompt. So now tasks like email drafting can keep names, emails, addresses, etc. masked while still getting useful output.

I integrated OpenAI’s privacy filter model into Rescriber, a browser extension that redacts sensitive info before ChatGPT sees your prompt. So now tasks like email drafting can keep names, emails, addresses, etc. masked while still getting useful output.

Tianshi Li

20,510 次观看 • 2 个月前

ICANN: "Make Lunduke Angry, Program in Rust" The Internet Corporation for Assigned Names and Numbers (ICANN), the $150 Million / Year corporation which manages IP addresses and Top Level Domains, has a new goal: "Make Lunduke Angry".

ICANN: "Make Lunduke Angry, Program in Rust" The Internet Corporation for Assigned Names and Numbers (ICANN), the $150 Million / Year corporation which manages IP addresses and Top Level Domains, has a new goal: "Make Lunduke Angry".

The Lunduke Journal

12,237 次观看 • 5 个月前

IP Addresses in 6 Min

IP Addresses in 6 Min

Security Trybe

58,325 次观看 • 10 个月前

IP Addresses in 6 Min

IP Addresses in 6 Min

Security Trybe

96,318 次观看 • 5 个月前

How Wayback URLs Can Expose JWT Tokens Per the creator of the video: "This short explains how archived URLs (Wayback Machine) can unintentionally expose JWT tokens when developers leave sensitive data in URLs or responses."

How Wayback URLs Can Expose JWT Tokens Per the creator of the video: "This short explains how archived URLs (Wayback Machine) can unintentionally expose JWT tokens when developers leave sensitive data in URLs or responses."

Dark Web Informer

30,320 次观看 • 5 个月前

Want to find HTTP Request Smuggling vulns without manually crafting weird requests? Check out HTTP Request Smuggler, a Burp Suite extension that automates it for you! Learn more:

Want to find HTTP Request Smuggling vulns without manually crafting weird requests? Check out HTTP Request Smuggler, a Burp Suite extension that automates it for you! Learn more:

Web Security Academy

11,696 次观看 • 1 年前

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,622 次观看 • 1 年前

Ejemplo de como bypassear código de estado 403 probando distintas cabeceras en la petición HTTP. #burpsuite #kalilinux #apache #sysadmin #informatica #hackingweb

Ejemplo de como bypassear código de estado 403 probando distintas cabeceras en la petición HTTP. #burpsuite #kalilinux #apache #sysadmin #informatica #hackingweb

El Pingüino De Mario

23,998 次观看 • 1 年前

Most API docs only show HTTP endpoints, but developers write code with SDKs. We're doing things differently with the Stainless Docs Platform, now available in early access. Stainless Docs are SDK-native. They update automatically when your API changes. Devs see your docs in the language of their choice with method signatures, types, and accurate code snippets.

Most API docs only show HTTP endpoints, but developers write code with SDKs. We're doing things differently with the Stainless Docs Platform, now available in early access. Stainless Docs are SDK-native. They update automatically when your API changes. Devs see your docs in the language of their choice with method signatures, types, and accurate code snippets.

Stainless

25,732 次观看 • 7 个月前

Hi everyone! I just built a WaybackURLs extension that saves you a ton of time when gathering archive URLs. it supports main domains, wildcards, specific paths and sensitive file extensions. Give it a try and let me know your feedback!

Hi everyone! I just built a WaybackURLs extension that saves you a ton of time when gathering archive URLs. it supports main domains, wildcards, specific paths and sensitive file extensions. Give it a try and let me know your feedback!

Coffin

57,957 次观看 • 8 个月前

ctDNA in CRC with Kristen Ciombor! Here we discuss: -recent MRD trials (DYNAMIC III, etc) -endpoints -current NCCN recs -how she uses ctDNA in clinic & approaches discussion w pts As always, Kristen has such thoughtful/balanced responses to tough q’s. Full video link below

ctDNA in CRC with Kristen Ciombor! Here we discuss: -recent MRD trials (DYNAMIC III, etc) -endpoints -current NCCN recs -how she uses ctDNA in clinic & approaches discussion w pts As always, Kristen has such thoughtful/balanced responses to tough q’s. Full video link below

Dr. Nina Niu Sanford

12,607 次观看 • 10 个月前

5 APIs for your next project 1. Text To Image Generation API 2. Advice API 3. Jokes API 4. NASA API 5. IP 2 Country

5 APIs for your next project 1. Text To Image Generation API 2. Advice API 3. Jokes API 4. NASA API 5. IP 2 Country

Csaba Kissi

65,140 次观看 • 2 年前

Introducing Platforms Starter Kit v2 → It's an open-source Next.js template for you to build multi-tenant apps with custom domains in days, not months. Built with Next.js App Router and the @Vercel Domains API.

Introducing Platforms Starter Kit v2 → It's an open-source Next.js template for you to build multi-tenant apps with custom domains in days, not months. Built with Next.js App Router and the @Vercel Domains API.

Steven Tey

305,202 次观看 • 3 年前

Web Analytics in the browser with DuckDB WASM: Filtering in milliseconds, instead of waiting for API responses

Web Analytics in the browser with DuckDB WASM: Filtering in milliseconds, instead of waiting for API responses

Tobias Müller

56,910 次观看 • 1 年前

Introducing support for remote MCP servers, image generation, Code Interpreter, and more in the Responses API.

Introducing support for remote MCP servers, image generation, Code Interpreter, and more in the Responses API.

OpenAI Developers

434,951 次观看 • 1 年前

Server Actions create public endpoints, so be sure to secure them like you would API routes.

Server Actions create public endpoints, so be sure to secure them like you would API routes.

Alex Sidorenko

83,586 次观看 • 1 年前