Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Crazy CSP Bypass here by Paulos Yibelo! Utilizes JSONP endpoints where you can ONLY use [a-z.]+ as the callback and crafts a valid exploit. Masterful.

ctbbpodcast's profile picture

Critical Thinking - Bug Bounty Podcast

26,184 subscribers

28,081 Aufrufe • vor 2 Jahren •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

2 Kommentare

Profilbild von Fisher
Fishervor 2 Jahren

@PaulosYibelo Joel is UNFAZED 😂

Profilbild von John walter ⚡️
John walter ⚡️vor 2 Jahren

@remonsec @PaulosYibelo #remonsec

Ähnliche Videos

unsure if people know this, but you can use easing to bypass the zoom limit in the editor :) i figured this out after people found a similar exploit in rhythm doctor haha
0:22

unsure if people know this, but you can use easing to bypass the zoom limit in the editor :) i figured this out after people found a similar exploit in rhythm doctor haha

Colon :🦊:

23,790 Aufrufe • vor 7 Monaten

👾Revolutionary Technologies in Games Are Here👻 In the video, you can see a horror game where you can communicate with a ghost by voice, and the AI will respond as the ghost of a witch would. 😱
0:31

👾Revolutionary Technologies in Games Are Here👻 In the video, you can see a horror game where you can communicate with a ghost by voice, and the AI will respond as the ghost of a witch would. 😱

GameDevNews

20,038 Aufrufe • vor 2 Jahren

Only in South Africa you can use a visitors visa to work and do as you please!
5:08

Only in South Africa you can use a visitors visa to work and do as you please!

Abahambe Abdul Majola🇿🇦🇷🇺

72,840 Aufrufe • vor 1 Jahr

In Ultraman Ps2, you can beat Zetton to death if you're patient enough and also use a cheeky little exploit towards the end
2:41

In Ultraman Ps2, you can beat Zetton to death if you're patient enough and also use a cheeky little exploit towards the end

Plasma (3D Model Comms Soon?)

15,621 Aufrufe • vor 5 Monaten

The message here is; You cannot bypass Kenya’s minimum KCSE requirements for Medicine (MBChB) by enrolling in a foreign university. The Kenya Medical Practitioners and Dentists Council (KMPDC) will not license you upon graduation if you didn’t meet the entry criteria locally. The only viable path then is to remain and practise in the foreign country where you trained.
1:03

The message here is; You cannot bypass Kenya’s minimum KCSE requirements for Medicine (MBChB) by enrolling in a foreign university. The Kenya Medical Practitioners and Dentists Council (KMPDC) will not license you upon graduation if you didn’t meet the entry criteria locally. The only viable path then is to remain and practise in the foreign country where you trained.

Andrew Githiria MD

79,737 Aufrufe • vor 7 Monaten

Calling x402 endpoints isn't cool. You know what's cool? Letting AI agent's call x402 endpoints. I made a quick demo showing how to make an agent in AgentBlocks that can choose which x402 services to use, call & pay them, and combine the results. Check it out:
8:04

Calling x402 endpoints isn't cool. You know what's cool? Letting AI agent's call x402 endpoints. I made a quick demo showing how to make an agent in AgentBlocks that can choose which x402 services to use, call & pay them, and combine the results. Check it out:

David Mihal.eth

35,421 Aufrufe • vor 8 Monaten

Walking makes you more creative Daniel Pink says: "The research on walking is unbelievable. There's a famous study where they put people in a chair and they put people on a treadmill, and they do the "alternative uses for an object test." Basically, you give somebody something mundane like a brick and ask: How many different uses can you have for the brick? You can use it as a door stop. You can use it as a step ladder to reach something you can't reach. You can use it as a paper weight. The people who were walking on a treadmill generated like three times as many ideas as the people sitting in a chair. Wow. It's unbelievable. They were just in a treadmill in a laboratory." Daniel Pink
0:35

Walking makes you more creative Daniel Pink says: "The research on walking is unbelievable. There's a famous study where they put people in a chair and they put people on a treadmill, and they do the "alternative uses for an object test." Basically, you give somebody something mundane like a brick and ask: How many different uses can you have for the brick? You can use it as a door stop. You can use it as a step ladder to reach something you can't reach. You can use it as a paper weight. The people who were walking on a treadmill generated like three times as many ideas as the people sitting in a chair. Wow. It's unbelievable. They were just in a treadmill in a laboratory." Daniel Pink

David Perell Clips

231,225 Aufrufe • vor 5 Monaten

The only thing Elliot Page accomplished here is confirmation that you can pump a woman full of testosterone, cut off her tits, and she'll still be crazy!
1:54

The only thing Elliot Page accomplished here is confirmation that you can pump a woman full of testosterone, cut off her tits, and she'll still be crazy!

Avery Daye

118,899 Aufrufe • vor 1 Monat

A milestone day for clinical trial innovation. We’re announcing the first real-time clinical trials, where U.S. FDA can see data signals and endpoints in real time. A quick explainer:
2:20

A milestone day for clinical trial innovation. We’re announcing the first real-time clinical trials, where U.S. FDA can see data signals and endpoints in real time. A quick explainer:

Dr. Marty Makary

431,081 Aufrufe • vor 3 Monaten

Harvesting of Poppy Seeds (Opium Poppy), scientifically known as Papaver somniferum, can be cultivated in India only with a valid government license. Cultivating it without a license is illegal. You can make a drink from it for summer and used in Halva in the winter.
0:26

Harvesting of Poppy Seeds (Opium Poppy), scientifically known as Papaver somniferum, can be cultivated in India only with a valid government license. Cultivating it without a license is illegal. You can make a drink from it for summer and used in Halva in the winter.

JIX5A

72,655 Aufrufe • vor 5 Monaten

Here are the top 3 dirty self-defense moves you can use to protect yourself if you get attacked by a criminal.
2:04

Here are the top 3 dirty self-defense moves you can use to protect yourself if you get attacked by a criminal.

Jason Hanson - Spy Briefing

4,269,926 Aufrufe • vor 2 Jahren

This indie developer is making a sick looking FPS where you play as a kitsune and can use both firearms and your beast powers. Ir's called FERRA, any interest?
0:25

This indie developer is making a sick looking FPS where you play as a kitsune and can use both firearms and your beast powers. Ir's called FERRA, any interest?

Best Indie Games

3,530,333 Aufrufe • vor 2 Monaten

This is absolutely insane. The prompt: "Set up a lab for Log4Shell at localhost:8080 and find all nuclei templates for this vulnerability. Use OAST detection to demonstrate the JNDI injection exploit with live callback verification." The outcome? Nailed it. Sign up for Neo today 👇
1:27

This is absolutely insane. The prompt: "Set up a lab for Log4Shell at localhost:8080 and find all nuclei templates for this vulnerability. Use OAST detection to demonstrate the JNDI injection exploit with live callback verification." The outcome? Nailed it. Sign up for Neo today 👇

ProjectDiscovery

13,913 Aufrufe • vor 5 Monaten

China’s only ancient city entirely embraced by water — a timeless wonder where the town floats peacefully on the lake, blending history and waterscape like nowhere else. Can you guess where it is?
0:56

China’s only ancient city entirely embraced by water — a timeless wonder where the town floats peacefully on the lake, blending history and waterscape like nowhere else. Can you guess where it is?

Zhang Heqing

17,379 Aufrufe • vor 4 Monaten

Someone already made an easy tool to use Gman face as a way to bypass Discord face scan ID check instead of using via Garry's Mod. This community is insane! You can check by yourself in the link below! Video credit: Alex Birsan
0:26

Someone already made an easy tool to use Gman face as a way to bypass Discord face scan ID check instead of using via Garry's Mod. This community is insane! You can check by yourself in the link below! Video credit: Alex Birsan

LambdaGeneration

130,406 Aufrufe • vor 5 Monaten

lygus referring to phainon as a 'prisoner of the cave' seems to be a callback to plato's allegory of the cave, where phainon as one of many prisoners is the only one who ends up seeing the truth of the 'world' beyond shadows cast on a cave wall from a fire ........
0:21

lygus referring to phainon as a 'prisoner of the cave' seems to be a callback to plato's allegory of the cave, where phainon as one of many prisoners is the only one who ends up seeing the truth of the 'world' beyond shadows cast on a cave wall from a fire ........

holic

66,500 Aufrufe • vor 1 Jahr

Only in America can you use racism as a strategy to get fired from a job and grift into right-wing media for better employment. 🇺🇸
0:28

Sensitive content

Only in America can you use racism as a strategy to get fired from a job and grift into right-wing media for better employment. 🇺🇸

Mr. Christopher

5,771,350 Aufrufe • vor 2 Jahren