Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Crazy CSP Bypass here by Paulos Yibelo! Utilizes JSONP endpoints where you can ONLY use [a-z.]+ as the callback and crafts a valid exploit. Masterful.

ctbbpodcast's profile picture

Critical Thinking - Bug Bounty Podcast

26,184 subscribers

28,081 görüntüleme • 2 yıl önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

2 Yorum

Fisher profil fotoğrafı
Fisher2 yıl önce

@PaulosYibelo Joel is UNFAZED 😂

John walter ⚡️ profil fotoğrafı
John walter ⚡️2 yıl önce

@remonsec @PaulosYibelo #remonsec

Benzer Videolar

unsure if people know this, but you can use easing to bypass the zoom limit in the editor :) i figured this out after people found a similar exploit in rhythm doctor haha
0:22

unsure if people know this, but you can use easing to bypass the zoom limit in the editor :) i figured this out after people found a similar exploit in rhythm doctor haha

Colon :🦊:

23,790 görüntüleme • 7 ay önce

👾Revolutionary Technologies in Games Are Here👻 In the video, you can see a horror game where you can communicate with a ghost by voice, and the AI will respond as the ghost of a witch would. 😱
0:31

👾Revolutionary Technologies in Games Are Here👻 In the video, you can see a horror game where you can communicate with a ghost by voice, and the AI will respond as the ghost of a witch would. 😱

GameDevNews

20,038 görüntüleme • 2 yıl önce

In Ultraman Ps2, you can beat Zetton to death if you're patient enough and also use a cheeky little exploit towards the end
2:41

In Ultraman Ps2, you can beat Zetton to death if you're patient enough and also use a cheeky little exploit towards the end

Plasma (3D Model Comms Soon?)

15,621 görüntüleme • 5 ay önce

Jay Z : “look here Em I have a packed show and I can only allow you 1 minute…do you think….” Eminem: …
0:59

Jay Z : “look here Em I have a packed show and I can only allow you 1 minute…do you think….” Eminem: …

Sbudda Radebe

387,251 görüntüleme • 2 yıl önce

The message here is; You cannot bypass Kenya’s minimum KCSE requirements for Medicine (MBChB) by enrolling in a foreign university. The Kenya Medical Practitioners and Dentists Council (KMPDC) will not license you upon graduation if you didn’t meet the entry criteria locally. The only viable path then is to remain and practise in the foreign country where you trained.
1:03

The message here is; You cannot bypass Kenya’s minimum KCSE requirements for Medicine (MBChB) by enrolling in a foreign university. The Kenya Medical Practitioners and Dentists Council (KMPDC) will not license you upon graduation if you didn’t meet the entry criteria locally. The only viable path then is to remain and practise in the foreign country where you trained.

Andrew Githiria MD

80,051 görüntüleme • 8 ay önce

Calling x402 endpoints isn't cool. You know what's cool? Letting AI agent's call x402 endpoints. I made a quick demo showing how to make an agent in AgentBlocks that can choose which x402 services to use, call & pay them, and combine the results. Check it out:
8:04

Calling x402 endpoints isn't cool. You know what's cool? Letting AI agent's call x402 endpoints. I made a quick demo showing how to make an agent in AgentBlocks that can choose which x402 services to use, call & pay them, and combine the results. Check it out:

David Mihal.eth

35,430 görüntüleme • 9 ay önce

The only thing Elliot Page accomplished here is confirmation that you can pump a woman full of testosterone, cut off her tits, and she'll still be crazy!
1:54

The only thing Elliot Page accomplished here is confirmation that you can pump a woman full of testosterone, cut off her tits, and she'll still be crazy!

Avery Daye

118,899 görüntüleme • 2 ay önce

Walking makes you more creative Daniel Pink says: "The research on walking is unbelievable. There's a famous study where they put people in a chair and they put people on a treadmill, and they do the "alternative uses for an object test." Basically, you give somebody something mundane like a brick and ask: How many different uses can you have for the brick? You can use it as a door stop. You can use it as a step ladder to reach something you can't reach. You can use it as a paper weight. The people who were walking on a treadmill generated like three times as many ideas as the people sitting in a chair. Wow. It's unbelievable. They were just in a treadmill in a laboratory." Daniel Pink
0:35

Walking makes you more creative Daniel Pink says: "The research on walking is unbelievable. There's a famous study where they put people in a chair and they put people on a treadmill, and they do the "alternative uses for an object test." Basically, you give somebody something mundane like a brick and ask: How many different uses can you have for the brick? You can use it as a door stop. You can use it as a step ladder to reach something you can't reach. You can use it as a paper weight. The people who were walking on a treadmill generated like three times as many ideas as the people sitting in a chair. Wow. It's unbelievable. They were just in a treadmill in a laboratory." Daniel Pink

David Perell Clips

231,225 görüntüleme • 5 ay önce

A milestone day for clinical trial innovation. We’re announcing the first real-time clinical trials, where U.S. FDA can see data signals and endpoints in real time. A quick explainer:
2:20

A milestone day for clinical trial innovation. We’re announcing the first real-time clinical trials, where U.S. FDA can see data signals and endpoints in real time. A quick explainer:

Dr. Marty Makary

431,317 görüntüleme • 3 ay önce

Harvesting of Poppy Seeds (Opium Poppy), scientifically known as Papaver somniferum, can be cultivated in India only with a valid government license. Cultivating it without a license is illegal. You can make a drink from it for summer and used in Halva in the winter.
0:26

Harvesting of Poppy Seeds (Opium Poppy), scientifically known as Papaver somniferum, can be cultivated in India only with a valid government license. Cultivating it without a license is illegal. You can make a drink from it for summer and used in Halva in the winter.

JIX5A

72,655 görüntüleme • 5 ay önce

Here are the top 3 dirty self-defense moves you can use to protect yourself if you get attacked by a criminal.
2:04

Here are the top 3 dirty self-defense moves you can use to protect yourself if you get attacked by a criminal.

Jason Hanson - Spy Briefing

4,269,926 görüntüleme • 2 yıl önce

This indie developer is making a sick looking FPS where you play as a kitsune and can use both firearms and your beast powers. Ir's called FERRA, any interest?
0:25

This indie developer is making a sick looking FPS where you play as a kitsune and can use both firearms and your beast powers. Ir's called FERRA, any interest?

Best Indie Games

3,532,480 görüntüleme • 3 ay önce

This is absolutely insane. The prompt: "Set up a lab for Log4Shell at localhost:8080 and find all nuclei templates for this vulnerability. Use OAST detection to demonstrate the JNDI injection exploit with live callback verification." The outcome? Nailed it. Sign up for Neo today 👇
1:27

This is absolutely insane. The prompt: "Set up a lab for Log4Shell at localhost:8080 and find all nuclei templates for this vulnerability. Use OAST detection to demonstrate the JNDI injection exploit with live callback verification." The outcome? Nailed it. Sign up for Neo today 👇

ProjectDiscovery

13,913 görüntüleme • 5 ay önce

China’s only ancient city entirely embraced by water — a timeless wonder where the town floats peacefully on the lake, blending history and waterscape like nowhere else. Can you guess where it is?
0:56

China’s only ancient city entirely embraced by water — a timeless wonder where the town floats peacefully on the lake, blending history and waterscape like nowhere else. Can you guess where it is?

Zhang Heqing

17,379 görüntüleme • 5 ay önce

Someone already made an easy tool to use Gman face as a way to bypass Discord face scan ID check instead of using via Garry's Mod. This community is insane! You can check by yourself in the link below! Video credit: Alex Birsan
0:26

Someone already made an easy tool to use Gman face as a way to bypass Discord face scan ID check instead of using via Garry's Mod. This community is insane! You can check by yourself in the link below! Video credit: Alex Birsan

LambdaGeneration

130,406 görüntüleme • 6 ay önce