Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

Burpsuite extension to scan for leaked secrets, API endpoints, emails, URLs, domains, IP addresses, etc. in HTTP responses

Jsmon | AI-Powered Attack Surface Management

1,238 subscribers

11,313 Aufrufe • vor 6 Monaten •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

NEW in Brand Radar – API: AI responses endpoint now live – Save your reports for quick re-use – Cited domains & pages: add URLs to charts + see responses in nested tables Watch a quick demo 👇

Ahrefs

200,708 Aufrufe • vor 10 Monaten

Rabby on your phone? Yeah, it’s that time. Set it up in seconds by syncing your addresses. Scan the QR code from the Rabby Extension to batch import your addresses. Fully offline, encrypted, and secure. Download Rabby Mobile now:

Rabby on your phone? Yeah, it’s that time. Set it up in seconds by syncing your addresses. Scan the QR code from the Rabby Extension to batch import your addresses. Fully offline, encrypted, and secure. Download Rabby Mobile now:

Rabby Wallet

43,781 Aufrufe • vor 1 Jahr

ICANN: "Make Lunduke Angry, Program in Rust" The Internet Corporation for Assigned Names and Numbers (ICANN), the $150 Million / Year corporation which manages IP addresses and Top Level Domains, has a new goal: "Make Lunduke Angry".

ICANN: "Make Lunduke Angry, Program in Rust" The Internet Corporation for Assigned Names and Numbers (ICANN), the $150 Million / Year corporation which manages IP addresses and Top Level Domains, has a new goal: "Make Lunduke Angry".

The Lunduke Journal

12,237 Aufrufe • vor 5 Monaten

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,639 Aufrufe • vor 1 Jahr

ctDNA in CRC with Kristen Ciombor! Here we discuss: -recent MRD trials (DYNAMIC III, etc) -endpoints -current NCCN recs -how she uses ctDNA in clinic & approaches discussion w pts As always, Kristen has such thoughtful/balanced responses to tough q’s. Full video link below

ctDNA in CRC with Kristen Ciombor! Here we discuss: -recent MRD trials (DYNAMIC III, etc) -endpoints -current NCCN recs -how she uses ctDNA in clinic & approaches discussion w pts As always, Kristen has such thoughtful/balanced responses to tough q’s. Full video link below

Dr. Nina Niu Sanford

12,607 Aufrufe • vor 10 Monaten

Introducing Platforms Starter Kit v2 → It's an open-source Next.js template for you to build multi-tenant apps with custom domains in days, not months. Built with Next.js App Router and the @Vercel Domains API.

Introducing Platforms Starter Kit v2 → It's an open-source Next.js template for you to build multi-tenant apps with custom domains in days, not months. Built with Next.js App Router and the @Vercel Domains API.

Steven Tey

305,218 Aufrufe • vor 3 Jahren

🔒 Our latest video summarizes some of our best security tips from previous months. Here’s how to stay safe: 🔗 Check URLs: Scammers subtly alter legitimate URLs. Always double-check web addresses. 🎁 Watch Out for Random NFTs: Avoid interacting with random NFTs in your wallet, especially those offering rewards. ✅ Verify Addresses: Send a small amount first to new wallets to confirm their address. 🚫 Skip Token Doubling Scams: Ignore strangers promising large returns for small deposits.

🔒 Our latest video summarizes some of our best security tips from previous months. Here’s how to stay safe: 🔗 Check URLs: Scammers subtly alter legitimate URLs. Always double-check web addresses. 🎁 Watch Out for Random NFTs: Avoid interacting with random NFTs in your wallet, especially those offering rewards. ✅ Verify Addresses: Send a small amount first to new wallets to confirm their address. 🚫 Skip Token Doubling Scams: Ignore strangers promising large returns for small deposits.

Sui

109,639 Aufrufe • vor 1 Jahr

Meet MiniMax Speech 2.6 — Ultra-Fast, Ultra-Human, Ultra-Smart ⚡Ultra-Fast: <250 ms latency for real-time conversational interactions 💬Smart Text Normalization for URLs, emails, dates, numbers & more 🎙️Full Voice Clone + Fluent LoRA: natural, expressive, effortless 🌍40+ languages with inline code switching Fluent anytime. In every language. 👉 API available:

Meet MiniMax Speech 2.6 — Ultra-Fast, Ultra-Human, Ultra-Smart ⚡Ultra-Fast: <250 ms latency for real-time conversational interactions 💬Smart Text Normalization for URLs, emails, dates, numbers & more 🎙️Full Voice Clone + Fluent LoRA: natural, expressive, effortless 🌍40+ languages with inline code switching Fluent anytime. In every language. 👉 API available:

Hailuo AI-MiniMax Hub

553,343 Aufrufe • vor 8 Monaten

Learn how to stay stealthy during network scans using the decoy flag in Nmap 🛡️💻 By using the -D flag, you can send duplicate packets from spoofed IP addresses alongside your own. This technique obfuscates your activity, making it much harder for anyone monitoring the network to pinpoint the actual source of the scan.

Learn how to stay stealthy during network scans using the decoy flag in Nmap 🛡️💻 By using the -D flag, you can send duplicate packets from spoofed IP addresses alongside your own. This technique obfuscates your activity, making it much harder for anyone monitoring the network to pinpoint the actual source of the scan.

NetworkChuck

31,785 Aufrufe • vor 9 Tagen

Announcing Hermes-node Hermes can now run as a standalone CLI with Node.js-compatible APIs - no C++ embedding required. Technically, hermes-node is a Node.js API compatibility layer for Hermes. It ports Node's native bindings (fs, net, http, child_process, etc.) to Node-API and reuses Node's original lib/*.js files, allowing standard Node.js programs to run on Hermes instead of V8. It vendors libuv, c-ares, llhttp, Ada, simdutf, etc to provide the same networking and I/O stack as Node, and runs as a standalone CLI binary. In this demo: - REPL with tab completion - TypeScript HTTP server using http, fs, and path - Type annotations stripped natively by the parser — no transpiler, not even a built-in one. This is still a work in progress, though surprisingly functional. More Node modules coming, source will be published soon.

Announcing Hermes-node Hermes can now run as a standalone CLI with Node.js-compatible APIs - no C++ embedding required. Technically, hermes-node is a Node.js API compatibility layer for Hermes. It ports Node's native bindings (fs, net, http, child_process, etc.) to Node-API and reuses Node's original lib/*.js files, allowing standard Node.js programs to run on Hermes instead of V8. It vendors libuv, c-ares, llhttp, Ada, simdutf, etc to provide the same networking and I/O stack as Node, and runs as a standalone CLI binary. In this demo: - REPL with tab completion - TypeScript HTTP server using http, fs, and path - Type annotations stripped natively by the parser — no transpiler, not even a built-in one. This is still a work in progress, though surprisingly functional. More Node modules coming, source will be published soon.

Tzvetan Mikov

72,233 Aufrufe • vor 4 Monaten

In this video federal agents conduct an illegal search and seizure. The 4th amendment prohibits requiring a person to submit to a facial scan, to remove clothing or accessories for a scan, etc, w/o cause. If ICE asks you, tell them YOU DON'T CONSENT.

In this video federal agents conduct an illegal search and seizure. The 4th amendment prohibits requiring a person to submit to a facial scan, to remove clothing or accessories for a scan, etc, w/o cause. If ICE asks you, tell them YOU DON'T CONSENT.

Rogue POTUS Staff

229,951 Aufrufe • vor 8 Monaten

Analyze code and scan for vulnerabilities using natural language in your terminal 🔎 → Endor Labs built a Gemini CLI Extension that acts as an MCP server to help you maintain secure dependencies.

Analyze code and scan for vulnerabilities using natural language in your terminal 🔎 → Endor Labs built a Gemini CLI Extension that acts as an MCP server to help you maintain secure dependencies.

Google for Developers

40,408 Aufrufe • vor 6 Monaten

We’re excited to announce we’ve opened up slots to participate in a limited preview of Llama API - our developer platform for Llama app development. This is just step 1 for our API, and we look forward to hearing the community's feedback on it as we continue to iterate. Llama API has easy one-click API key creation, interactive playgrounds to explore Llama models, and dedicated compatibility endpoints for easy integration - it’s free to use during this preview period, so get started today! Join the waitlist: Learn more about Llama API: Read more on our blog:

We’re excited to announce we’ve opened up slots to participate in a limited preview of Llama API - our developer platform for Llama app development. This is just step 1 for our API, and we look forward to hearing the community's feedback on it as we continue to iterate. Llama API has easy one-click API key creation, interactive playgrounds to explore Llama models, and dedicated compatibility endpoints for easy integration - it’s free to use during this preview period, so get started today! Join the waitlist: Learn more about Llama API: Read more on our blog:

Meta for Developers

40,655 Aufrufe • vor 1 Jahr

how to send 100, 000 cold emails per month for your startup buy 83 domains create two microsoft email inboxes per domain you're going to have 166 inboxes in total connect these inboxes to a cold email software like smartlead warm the email inboxes for 20 business days

how to send 100, 000 cold emails per month for your startup buy 83 domains create two microsoft email inboxes per domain you're going to have 166 inboxes in total connect these inboxes to a cold email software like smartlead warm the email inboxes for 20 business days

Cody Schneider

68,651 Aufrufe • vor 2 Jahren

This developer built DeepCrawler - an AI tool that finds API endpoints on any website in under 60 seconds. Built with Next.js 14 + Hyperbrowser SDK. Clean UI, exports to Postman, works on mobile. Useful for developers and security researchers. 100% Open-source

This developer built DeepCrawler - an AI tool that finds API endpoints on any website in under 60 seconds. Built with Next.js 14 + Hyperbrowser SDK. Clean UI, exports to Postman, works on mobile. Useful for developers and security researchers. 100% Open-source

AshutoshShrivastava

78,597 Aufrufe • vor 1 Jahr

Your app can now search the web for images. Web search in the Responses API now supports image results in addition to text results, so you can build apps that surface products, places, visual references, and source links for inspiration.

Your app can now search the web for images. Web search in the Responses API now supports image results in addition to text results, so you can build apps that surface products, places, visual references, and source links for inspiration.

OpenAI Developers

154,480 Aufrufe • vor 1 Monat

Today, we’re launching the Parallel Search API, the most accurate web search for AI agents, built using our proprietary web index and retrieval infrastructure. Traditional search ranks URLs for humans to click. AI search needs something different: the right tokens in their context window. Parallel’s Search API is built from the ground up for AI agents, resulting in higher accuracy, lower costs, and lower latency for end-to-end agentic workflows.

Today, we’re launching the Parallel Search API, the most accurate web search for AI agents, built using our proprietary web index and retrieval infrastructure. Traditional search ranks URLs for humans to click. AI search needs something different: the right tokens in their context window. Parallel’s Search API is built from the ground up for AI agents, resulting in higher accuracy, lower costs, and lower latency for end-to-end agentic workflows.

Parallel Web Systems

669,541 Aufrufe • vor 8 Monaten

Say goodbye to developers emails infrastructure platforms. And say Hello to: CranL emails📧—the best way to send, receive, and manage emails comes with: - API access for automations and systems - Made and hosted in Saudi Arabia 🇸🇦 and many other regions - No extra fees, included with your subscription - broadcast, webhooks, and much more! all this and more possible with our official partners at SNDR Start now, and send emails within CranL!

Say goodbye to developers emails infrastructure platforms. And say Hello to: CranL emails📧—the best way to send, receive, and manage emails comes with: - API access for automations and systems - Made and hosted in Saudi Arabia 🇸🇦 and many other regions - No extra fees, included with your subscription - broadcast, webhooks, and much more! all this and more possible with our official partners at SNDR Start now, and send emails within CranL!

CranL

61,636 Aufrufe • vor 29 Tagen

Tim Tebow pulls out a map to expose the 111,000 unique IP addresses of individuals who are downloading child sexual assault material (CSAM) in the United States “These are unique IP addresses that on peer-to-peer networks are downloading, sharing, and distributing child rape images under the age of 12.” No child should be subject to sexual abuse. Every single person involved in sexually exploiting a child must be removed from society. Watch E297 of The Lila Rose Show for more.

Tim Tebow pulls out a map to expose the 111,000 unique IP addresses of individuals who are downloading child sexual assault material (CSAM) in the United States “These are unique IP addresses that on peer-to-peer networks are downloading, sharing, and distributing child rape images under the age of 12.” No child should be subject to sexual abuse. Every single person involved in sexually exploiting a child must be removed from society. Watch E297 of The Lila Rose Show for more.

Lila Rose

127,721 Aufrufe • vor 4 Monaten