Загрузка видео...

Не удалось загрузить видео

На главную

Burpsuite extension to scan for leaked secrets, API endpoints, emails, URLs, domains, IP addresses, etc. in HTTP responses

jsmonsh's profile picture

Jsmon | AI-Powered Attack Surface Management

1,238 subscribers

11,313 просмотров • 7 месяцев назад •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

NEW in Brand Radar – API: AI responses endpoint now live – Save your reports for quick re-use – Cited domains & pages: add URLs to charts + see responses in nested tables Watch a quick demo 👇
0:51

NEW in Brand Radar – API: AI responses endpoint now live – Save your reports for quick re-use – Cited domains & pages: add URLs to charts + see responses in nested tables Watch a quick demo 👇

Ahrefs

200,708 просмотров • 10 месяцев назад

Rabby on your phone? Yeah, it’s that time. Set it up in seconds by syncing your addresses. Scan the QR code from the Rabby Extension to batch import your addresses. Fully offline, encrypted, and secure. Download Rabby Mobile now:
0:24

Rabby on your phone? Yeah, it’s that time. Set it up in seconds by syncing your addresses. Scan the QR code from the Rabby Extension to batch import your addresses. Fully offline, encrypted, and secure. Download Rabby Mobile now:

Rabby Wallet

43,799 просмотров • 1 год назад

ICANN: "Make Lunduke Angry, Program in Rust" The Internet Corporation for Assigned Names and Numbers (ICANN), the $150 Million / Year corporation which manages IP addresses and Top Level Domains, has a new goal: "Make Lunduke Angry".
6:08

ICANN: "Make Lunduke Angry, Program in Rust" The Internet Corporation for Assigned Names and Numbers (ICANN), the $150 Million / Year corporation which manages IP addresses and Top Level Domains, has a new goal: "Make Lunduke Angry".

The Lunduke Journal

12,237 просмотров • 6 месяцев назад

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec
0:28

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,682 просмотров • 1 год назад

ctDNA in CRC with Kristen Ciombor! Here we discuss: -recent MRD trials (DYNAMIC III, etc) -endpoints -current NCCN recs -how she uses ctDNA in clinic & approaches discussion w pts As always, Kristen has such thoughtful/balanced responses to tough q’s. Full video link below
4:14

ctDNA in CRC with Kristen Ciombor! Here we discuss: -recent MRD trials (DYNAMIC III, etc) -endpoints -current NCCN recs -how she uses ctDNA in clinic & approaches discussion w pts As always, Kristen has such thoughtful/balanced responses to tough q’s. Full video link below

Dr. Nina Niu Sanford

12,607 просмотров • 11 месяцев назад

Introducing Platforms Starter Kit v2 → It's an open-source Next.js template for you to build multi-tenant apps with custom domains in days, not months. Built with Next.js App Router and the @Vercel Domains API.
0:41

Introducing Platforms Starter Kit v2 → It's an open-source Next.js template for you to build multi-tenant apps with custom domains in days, not months. Built with Next.js App Router and the @Vercel Domains API.

Steven Tey

305,218 просмотров • 3 лет назад

🔒 Our latest video summarizes some of our best security tips from previous months. Here’s how to stay safe: 🔗 Check URLs: Scammers subtly alter legitimate URLs. Always double-check web addresses. 🎁 Watch Out for Random NFTs: Avoid interacting with random NFTs in your wallet, especially those offering rewards. ✅ Verify Addresses: Send a small amount first to new wallets to confirm their address. 🚫 Skip Token Doubling Scams: Ignore strangers promising large returns for small deposits.
1:23

🔒 Our latest video summarizes some of our best security tips from previous months. Here’s how to stay safe: 🔗 Check URLs: Scammers subtly alter legitimate URLs. Always double-check web addresses. 🎁 Watch Out for Random NFTs: Avoid interacting with random NFTs in your wallet, especially those offering rewards. ✅ Verify Addresses: Send a small amount first to new wallets to confirm their address. 🚫 Skip Token Doubling Scams: Ignore strangers promising large returns for small deposits.

Sui

109,639 просмотров • 1 год назад

Hey devs! Every time I deployed an MVP on Railway or Render free trials, sending emails with Nodemailer, smtplib, net/smtp, etc. failed because outbound SMTP ports (25, 465, 587) are strictly blocked. Plus, services like Resend force you to buy and setup a custom domain first. So I built SendLib, a dedicated, production-ready email API for devs. SendLib lets you connect a Gmail account (e.g. yourproduct@gmail.com) via Google OAuth 2.0 and gives you a secure REST API to send transactional emails (welcome emails, password resets, OTPs) from wherever your product is hosted, straight to your user's inbox. How it works: 1. Connect your product Gmail account via 1-click Google OAuth. 2. Grab an API key from your dashboard. 3. Send a single HTTP POST request from any language. Free tier: Connect up to 10 Gmail accounts & send up to 500 emails/day per account (2,000/day for Workspace). Check it out: I'd love your feedback! Thank you! 🙏
0:36

Hey devs! Every time I deployed an MVP on Railway or Render free trials, sending emails with Nodemailer, smtplib, net/smtp, etc. failed because outbound SMTP ports (25, 465, 587) are strictly blocked. Plus, services like Resend force you to buy and setup a custom domain first. So I built SendLib, a dedicated, production-ready email API for devs. SendLib lets you connect a Gmail account (e.g. [email protected]) via Google OAuth 2.0 and gives you a secure REST API to send transactional emails (welcome emails, password resets, OTPs) from wherever your product is hosted, straight to your user's inbox. How it works: 1. Connect your product Gmail account via 1-click Google OAuth. 2. Grab an API key from your dashboard. 3. Send a single HTTP POST request from any language. Free tier: Connect up to 10 Gmail accounts & send up to 500 emails/day per account (2,000/day for Workspace). Check it out: I'd love your feedback! Thank you! 🙏

Samuel Tuoyo

13,695 просмотров • 9 дней назад

Meet MiniMax Speech 2.6 — Ultra-Fast, Ultra-Human, Ultra-Smart ⚡Ultra-Fast: <250 ms latency for real-time conversational interactions 💬Smart Text Normalization for URLs, emails, dates, numbers & more 🎙️Full Voice Clone + Fluent LoRA: natural, expressive, effortless 🌍40+ languages with inline code switching Fluent anytime. In every language. 👉 API available:
1:02

Meet MiniMax Speech 2.6 — Ultra-Fast, Ultra-Human, Ultra-Smart ⚡Ultra-Fast: <250 ms latency for real-time conversational interactions 💬Smart Text Normalization for URLs, emails, dates, numbers & more 🎙️Full Voice Clone + Fluent LoRA: natural, expressive, effortless 🌍40+ languages with inline code switching Fluent anytime. In every language. 👉 API available:

Hailuo AI (MiniMax)

553,377 просмотров • 9 месяцев назад

Announcing Hermes-node Hermes can now run as a standalone CLI with Node.js-compatible APIs - no C++ embedding required. Technically, hermes-node is a Node.js API compatibility layer for Hermes. It ports Node's native bindings (fs, net, http, child_process, etc.) to Node-API and reuses Node's original lib/*.js files, allowing standard Node.js programs to run on Hermes instead of V8. It vendors libuv, c-ares, llhttp, Ada, simdutf, etc to provide the same networking and I/O stack as Node, and runs as a standalone CLI binary. In this demo: - REPL with tab completion - TypeScript HTTP server using http, fs, and path - Type annotations stripped natively by the parser — no transpiler, not even a built-in one. This is still a work in progress, though surprisingly functional. More Node modules coming, source will be published soon.
2:43

Announcing Hermes-node Hermes can now run as a standalone CLI with Node.js-compatible APIs - no C++ embedding required. Technically, hermes-node is a Node.js API compatibility layer for Hermes. It ports Node's native bindings (fs, net, http, child_process, etc.) to Node-API and reuses Node's original lib/*.js files, allowing standard Node.js programs to run on Hermes instead of V8. It vendors libuv, c-ares, llhttp, Ada, simdutf, etc to provide the same networking and I/O stack as Node, and runs as a standalone CLI binary. In this demo: - REPL with tab completion - TypeScript HTTP server using http, fs, and path - Type annotations stripped natively by the parser — no transpiler, not even a built-in one. This is still a work in progress, though surprisingly functional. More Node modules coming, source will be published soon.

Tzvetan Mikov

72,397 просмотров • 5 месяцев назад

Learn how to stay stealthy during network scans using the decoy flag in Nmap 🛡️💻 By using the -D flag, you can send duplicate packets from spoofed IP addresses alongside your own. This technique obfuscates your activity, making it much harder for anyone monitoring the network to pinpoint the actual source of the scan.
0:55

Learn how to stay stealthy during network scans using the decoy flag in Nmap 🛡️💻 By using the -D flag, you can send duplicate packets from spoofed IP addresses alongside your own. This technique obfuscates your activity, making it much harder for anyone monitoring the network to pinpoint the actual source of the scan.

NetworkChuck

31,785 просмотров • 26 дней назад

In this video federal agents conduct an illegal search and seizure. The 4th amendment prohibits requiring a person to submit to a facial scan, to remove clothing or accessories for a scan, etc, w/o cause. If ICE asks you, tell them YOU DON'T CONSENT.
2:43

In this video federal agents conduct an illegal search and seizure. The 4th amendment prohibits requiring a person to submit to a facial scan, to remove clothing or accessories for a scan, etc, w/o cause. If ICE asks you, tell them YOU DON'T CONSENT.

Rogue POTUS Staff

229,951 просмотров • 9 месяцев назад

Analyze code and scan for vulnerabilities using natural language in your terminal 🔎 → Endor Labs built a Gemini CLI Extension that acts as an MCP server to help you maintain secure dependencies.
0:35

Analyze code and scan for vulnerabilities using natural language in your terminal 🔎 → Endor Labs built a Gemini CLI Extension that acts as an MCP server to help you maintain secure dependencies.

Google for Developers

40,408 просмотров • 6 месяцев назад

We’re excited to announce we’ve opened up slots to participate in a limited preview of Llama API - our developer platform for Llama app development. This is just step 1 for our API, and we look forward to hearing the community's feedback on it as we continue to iterate. Llama API has easy one-click API key creation, interactive playgrounds to explore Llama models, and dedicated compatibility endpoints for easy integration - it’s free to use during this preview period, so get started today! Join the waitlist: Learn more about Llama API: Read more on our blog:
0:21

We’re excited to announce we’ve opened up slots to participate in a limited preview of Llama API - our developer platform for Llama app development. This is just step 1 for our API, and we look forward to hearing the community's feedback on it as we continue to iterate. Llama API has easy one-click API key creation, interactive playgrounds to explore Llama models, and dedicated compatibility endpoints for easy integration - it’s free to use during this preview period, so get started today! Join the waitlist: Learn more about Llama API: Read more on our blog:

Meta for Developers

40,655 просмотров • 1 год назад

how to send 100, 000 cold emails per month for your startup buy 83 domains create two microsoft email inboxes per domain you're going to have 166 inboxes in total connect these inboxes to a cold email software like smartlead warm the email inboxes for 20 business days
0:45

how to send 100, 000 cold emails per month for your startup buy 83 domains create two microsoft email inboxes per domain you're going to have 166 inboxes in total connect these inboxes to a cold email software like smartlead warm the email inboxes for 20 business days

Cody Schneider

68,651 просмотров • 2 лет назад

Today, we’re launching the Parallel Search API, the most accurate web search for AI agents, built using our proprietary web index and retrieval infrastructure. Traditional search ranks URLs for humans to click. AI search needs something different: the right tokens in their context window. Parallel’s Search API is built from the ground up for AI agents, resulting in higher accuracy, lower costs, and lower latency for end-to-end agentic workflows.
1:20

Today, we’re launching the Parallel Search API, the most accurate web search for AI agents, built using our proprietary web index and retrieval infrastructure. Traditional search ranks URLs for humans to click. AI search needs something different: the right tokens in their context window. Parallel’s Search API is built from the ground up for AI agents, resulting in higher accuracy, lower costs, and lower latency for end-to-end agentic workflows.

Parallel Web Systems

669,725 просмотров • 8 месяцев назад

Say goodbye to developers emails infrastructure platforms. And say Hello to: CranL emails📧—the best way to send, receive, and manage emails comes with: - API access for automations and systems - Made and hosted in Saudi Arabia 🇸🇦 and many other regions - No extra fees, included with your subscription - broadcast, webhooks, and much more! all this and more possible with our official partners at SNDR Start now, and send emails within CranL!
1:10

Say goodbye to developers emails infrastructure platforms. And say Hello to: CranL emails📧—the best way to send, receive, and manage emails comes with: - API access for automations and systems - Made and hosted in Saudi Arabia 🇸🇦 and many other regions - No extra fees, included with your subscription - broadcast, webhooks, and much more! all this and more possible with our official partners at SNDR Start now, and send emails within CranL!

CranL

65,905 просмотров • 1 месяц назад

Your app can now search the web for images. Web search in the Responses API now supports image results in addition to text results, so you can build apps that surface products, places, visual references, and source links for inspiration.
0:21

Your app can now search the web for images. Web search in the Responses API now supports image results in addition to text results, so you can build apps that surface products, places, visual references, and source links for inspiration.

OpenAI Developers

155,030 просмотров • 1 месяц назад

This developer built DeepCrawler - an AI tool that finds API endpoints on any website in under 60 seconds. Built with Next.js 14 + Hyperbrowser SDK. Clean UI, exports to Postman, works on mobile. Useful for developers and security researchers. 100% Open-source
0:21

This developer built DeepCrawler - an AI tool that finds API endpoints on any website in under 60 seconds. Built with Next.js 14 + Hyperbrowser SDK. Clean UI, exports to Postman, works on mobile. Useful for developers and security researchers. 100% Open-source

AshutoshShrivastava

78,597 просмотров • 1 год назад