Загрузка видео...

Не удалось загрузить видео

На главную

Crazy CSP Bypass here by Paulos Yibelo! Utilizes JSONP endpoints where you can ONLY use [a-z.]+ as the callback and crafts a valid exploit. Masterful.

ctbbpodcast's profile picture

Critical Thinking - Bug Bounty Podcast

26,184 subscribers

28,081 просмотров • 2 лет назад •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 2

Фото профиля Fisher
Fisher2 лет назад

@PaulosYibelo Joel is UNFAZED 😂

Фото профиля John walter ⚡️
John walter ⚡️2 лет назад

@remonsec @PaulosYibelo #remonsec

Похожие видео

unsure if people know this, but you can use easing to bypass the zoom limit in the editor :) i figured this out after people found a similar exploit in rhythm doctor haha
0:22

unsure if people know this, but you can use easing to bypass the zoom limit in the editor :) i figured this out after people found a similar exploit in rhythm doctor haha

Colon :🦊:

23,790 просмотров • 7 месяцев назад

👾Revolutionary Technologies in Games Are Here👻 In the video, you can see a horror game where you can communicate with a ghost by voice, and the AI will respond as the ghost of a witch would. 😱
0:31

👾Revolutionary Technologies in Games Are Here👻 In the video, you can see a horror game where you can communicate with a ghost by voice, and the AI will respond as the ghost of a witch would. 😱

GameDevNews

20,038 просмотров • 2 лет назад

In Ultraman Ps2, you can beat Zetton to death if you're patient enough and also use a cheeky little exploit towards the end
2:41

In Ultraman Ps2, you can beat Zetton to death if you're patient enough and also use a cheeky little exploit towards the end

Plasma (3D Model Comms Soon?)

15,621 просмотров • 5 месяцев назад

Jay Z : “look here Em I have a packed show and I can only allow you 1 minute…do you think….” Eminem: …
0:59

Jay Z : “look here Em I have a packed show and I can only allow you 1 minute…do you think….” Eminem: …

Sbudda Radebe

387,251 просмотров • 2 лет назад

The message here is; You cannot bypass Kenya’s minimum KCSE requirements for Medicine (MBChB) by enrolling in a foreign university. The Kenya Medical Practitioners and Dentists Council (KMPDC) will not license you upon graduation if you didn’t meet the entry criteria locally. The only viable path then is to remain and practise in the foreign country where you trained.
1:03

The message here is; You cannot bypass Kenya’s minimum KCSE requirements for Medicine (MBChB) by enrolling in a foreign university. The Kenya Medical Practitioners and Dentists Council (KMPDC) will not license you upon graduation if you didn’t meet the entry criteria locally. The only viable path then is to remain and practise in the foreign country where you trained.

Andrew Githiria MD

80,051 просмотров • 8 месяцев назад

Calling x402 endpoints isn't cool. You know what's cool? Letting AI agent's call x402 endpoints. I made a quick demo showing how to make an agent in AgentBlocks that can choose which x402 services to use, call & pay them, and combine the results. Check it out:
8:04

Calling x402 endpoints isn't cool. You know what's cool? Letting AI agent's call x402 endpoints. I made a quick demo showing how to make an agent in AgentBlocks that can choose which x402 services to use, call & pay them, and combine the results. Check it out:

David Mihal.eth

35,430 просмотров • 9 месяцев назад

The only thing Elliot Page accomplished here is confirmation that you can pump a woman full of testosterone, cut off her tits, and she'll still be crazy!
1:54

The only thing Elliot Page accomplished here is confirmation that you can pump a woman full of testosterone, cut off her tits, and she'll still be crazy!

Avery Daye

118,899 просмотров • 2 месяцев назад

Walking makes you more creative Daniel Pink says: "The research on walking is unbelievable. There's a famous study where they put people in a chair and they put people on a treadmill, and they do the "alternative uses for an object test." Basically, you give somebody something mundane like a brick and ask: How many different uses can you have for the brick? You can use it as a door stop. You can use it as a step ladder to reach something you can't reach. You can use it as a paper weight. The people who were walking on a treadmill generated like three times as many ideas as the people sitting in a chair. Wow. It's unbelievable. They were just in a treadmill in a laboratory." Daniel Pink
0:35

Walking makes you more creative Daniel Pink says: "The research on walking is unbelievable. There's a famous study where they put people in a chair and they put people on a treadmill, and they do the "alternative uses for an object test." Basically, you give somebody something mundane like a brick and ask: How many different uses can you have for the brick? You can use it as a door stop. You can use it as a step ladder to reach something you can't reach. You can use it as a paper weight. The people who were walking on a treadmill generated like three times as many ideas as the people sitting in a chair. Wow. It's unbelievable. They were just in a treadmill in a laboratory." Daniel Pink

David Perell Clips

231,225 просмотров • 5 месяцев назад

A milestone day for clinical trial innovation. We’re announcing the first real-time clinical trials, where U.S. FDA can see data signals and endpoints in real time. A quick explainer:
2:20

A milestone day for clinical trial innovation. We’re announcing the first real-time clinical trials, where U.S. FDA can see data signals and endpoints in real time. A quick explainer:

Dr. Marty Makary

431,317 просмотров • 3 месяцев назад

Harvesting of Poppy Seeds (Opium Poppy), scientifically known as Papaver somniferum, can be cultivated in India only with a valid government license. Cultivating it without a license is illegal. You can make a drink from it for summer and used in Halva in the winter.
0:26

Harvesting of Poppy Seeds (Opium Poppy), scientifically known as Papaver somniferum, can be cultivated in India only with a valid government license. Cultivating it without a license is illegal. You can make a drink from it for summer and used in Halva in the winter.

JIX5A

72,655 просмотров • 5 месяцев назад

Here are the top 3 dirty self-defense moves you can use to protect yourself if you get attacked by a criminal.
2:04

Here are the top 3 dirty self-defense moves you can use to protect yourself if you get attacked by a criminal.

Jason Hanson - Spy Briefing

4,269,926 просмотров • 2 лет назад

This is absolutely insane. The prompt: "Set up a lab for Log4Shell at localhost:8080 and find all nuclei templates for this vulnerability. Use OAST detection to demonstrate the JNDI injection exploit with live callback verification." The outcome? Nailed it. Sign up for Neo today 👇
1:27

This is absolutely insane. The prompt: "Set up a lab for Log4Shell at localhost:8080 and find all nuclei templates for this vulnerability. Use OAST detection to demonstrate the JNDI injection exploit with live callback verification." The outcome? Nailed it. Sign up for Neo today 👇

ProjectDiscovery

13,913 просмотров • 5 месяцев назад

This indie developer is making a sick looking FPS where you play as a kitsune and can use both firearms and your beast powers. Ir's called FERRA, any interest?
0:25

This indie developer is making a sick looking FPS where you play as a kitsune and can use both firearms and your beast powers. Ir's called FERRA, any interest?

Best Indie Games

3,532,480 просмотров • 3 месяцев назад

China’s only ancient city entirely embraced by water — a timeless wonder where the town floats peacefully on the lake, blending history and waterscape like nowhere else. Can you guess where it is?
0:56

China’s only ancient city entirely embraced by water — a timeless wonder where the town floats peacefully on the lake, blending history and waterscape like nowhere else. Can you guess where it is?

Zhang Heqing

17,379 просмотров • 5 месяцев назад

Someone already made an easy tool to use Gman face as a way to bypass Discord face scan ID check instead of using via Garry's Mod. This community is insane! You can check by yourself in the link below! Video credit: Alex Birsan
0:26

Someone already made an easy tool to use Gman face as a way to bypass Discord face scan ID check instead of using via Garry's Mod. This community is insane! You can check by yourself in the link below! Video credit: Alex Birsan

LambdaGeneration

130,406 просмотров • 6 месяцев назад