正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Crazy CSP Bypass here by Paulos Yibelo! Utilizes JSONP endpoints where you can ONLY use [a-z.]+ as the callback and crafts a valid exploit. Masterful.

Critical Thinking - Bug Bounty Podcast

26,184 subscribers

28,081 次观看 • 2 年前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

2 条评论

Fisher 的头像

Fisher2 年前

@PaulosYibelo Joel is UNFAZED 😂

John walter ⚡️ 的头像

John walter ⚡️2 年前

@remonsec @PaulosYibelo #remonsec

相关视频

unsure if people know this, but you can use easing to bypass the zoom limit in the editor :) i figured this out after people found a similar exploit in rhythm doctor haha

unsure if people know this, but you can use easing to bypass the zoom limit in the editor :) i figured this out after people found a similar exploit in rhythm doctor haha

Colon :🦊:

23,790 次观看 • 8 个月前

👾Revolutionary Technologies in Games Are Here👻 In the video, you can see a horror game where you can communicate with a ghost by voice, and the AI will respond as the ghost of a witch would. 😱

👾Revolutionary Technologies in Games Are Here👻 In the video, you can see a horror game where you can communicate with a ghost by voice, and the AI will respond as the ghost of a witch would. 😱

GameDevNews

20,038 次观看 • 2 年前

In Ultraman Ps2, you can beat Zetton to death if you're patient enough and also use a cheeky little exploit towards the end

In Ultraman Ps2, you can beat Zetton to death if you're patient enough and also use a cheeky little exploit towards the end

Plasma (3D Model Comms Soon?)

15,621 次观看 • 5 个月前

Jay Z : “look here Em I have a packed show and I can only allow you 1 minute…do you think….” Eminem: …

Jay Z : “look here Em I have a packed show and I can only allow you 1 minute…do you think….” Eminem: …

Sbudda Radebe

387,251 次观看 • 2 年前

The message here is; You cannot bypass Kenya’s minimum KCSE requirements for Medicine (MBChB) by enrolling in a foreign university. The Kenya Medical Practitioners and Dentists Council (KMPDC) will not license you upon graduation if you didn’t meet the entry criteria locally. The only viable path then is to remain and practise in the foreign country where you trained.

The message here is; You cannot bypass Kenya’s minimum KCSE requirements for Medicine (MBChB) by enrolling in a foreign university. The Kenya Medical Practitioners and Dentists Council (KMPDC) will not license you upon graduation if you didn’t meet the entry criteria locally. The only viable path then is to remain and practise in the foreign country where you trained.

Andrew Githiria MD

80,051 次观看 • 8 个月前

In The Expanse: Osiris Reborn, space is not a place where you can get comfortable. Only your ship and your VAC suit serve as a barrier between you and the deadly emptiness.

In The Expanse: Osiris Reborn, space is not a place where you can get comfortable. Only your ship and your VAC suit serve as a barrier between you and the deadly emptiness.

The Expanse: Osiris Reborn

13,200 次观看 • 22 天前

Calling x402 endpoints isn't cool. You know what's cool? Letting AI agent's call x402 endpoints. I made a quick demo showing how to make an agent in AgentBlocks that can choose which x402 services to use, call & pay them, and combine the results. Check it out:

Calling x402 endpoints isn't cool. You know what's cool? Letting AI agent's call x402 endpoints. I made a quick demo showing how to make an agent in AgentBlocks that can choose which x402 services to use, call & pay them, and combine the results. Check it out:

David Mihal.eth

35,430 次观看 • 9 个月前

A milestone day for clinical trial innovation. We’re announcing the first real-time clinical trials, where FDA can see data signals and endpoints in real time. A quick explainer:

A milestone day for clinical trial innovation. We’re announcing the first real-time clinical trials, where FDA can see data signals and endpoints in real time. A quick explainer:

Dr. Marty Makary

431,486 次观看 • 4 个月前

The only thing Elliot Page accomplished here is confirmation that you can pump a woman full of testosterone, cut off her tits, and she'll still be crazy!

The only thing Elliot Page accomplished here is confirmation that you can pump a woman full of testosterone, cut off her tits, and she'll still be crazy!

Avery Daye

118,899 次观看 • 2 个月前

Walking makes you more creative Daniel Pink says: "The research on walking is unbelievable. There's a famous study where they put people in a chair and they put people on a treadmill, and they do the "alternative uses for an object test." Basically, you give somebody something mundane like a brick and ask: How many different uses can you have for the brick? You can use it as a door stop. You can use it as a step ladder to reach something you can't reach. You can use it as a paper weight. The people who were walking on a treadmill generated like three times as many ideas as the people sitting in a chair. Wow. It's unbelievable. They were just in a treadmill in a laboratory." Daniel Pink

Walking makes you more creative Daniel Pink says: "The research on walking is unbelievable. There's a famous study where they put people in a chair and they put people on a treadmill, and they do the "alternative uses for an object test." Basically, you give somebody something mundane like a brick and ask: How many different uses can you have for the brick? You can use it as a door stop. You can use it as a step ladder to reach something you can't reach. You can use it as a paper weight. The people who were walking on a treadmill generated like three times as many ideas as the people sitting in a chair. Wow. It's unbelievable. They were just in a treadmill in a laboratory." Daniel Pink

David Perell Clips

231,225 次观看 • 5 个月前

Harvesting of Poppy Seeds (Opium Poppy), scientifically known as Papaver somniferum, can be cultivated in India only with a valid government license. Cultivating it without a license is illegal. You can make a drink from it for summer and used in Halva in the winter.

Harvesting of Poppy Seeds (Opium Poppy), scientifically known as Papaver somniferum, can be cultivated in India only with a valid government license. Cultivating it without a license is illegal. You can make a drink from it for summer and used in Halva in the winter.

JIX5A

72,655 次观看 • 5 个月前

Here are the top 3 dirty self-defense moves you can use to protect yourself if you get attacked by a criminal.

Here are the top 3 dirty self-defense moves you can use to protect yourself if you get attacked by a criminal.

Jason Hanson - Spy Briefing

4,269,926 次观看 • 2 年前

This indie developer is making a sick looking FPS where you play as a kitsune and can use both firearms and your beast powers. Ir's called FERRA, any interest?

This indie developer is making a sick looking FPS where you play as a kitsune and can use both firearms and your beast powers. Ir's called FERRA, any interest?

Best Indie Games

3,535,415 次观看 • 3 个月前

This is absolutely insane. The prompt: "Set up a lab for Log4Shell at localhost:8080 and find all nuclei templates for this vulnerability. Use OAST detection to demonstrate the JNDI injection exploit with live callback verification." The outcome? Nailed it. Sign up for Neo today 👇

This is absolutely insane. The prompt: "Set up a lab for Log4Shell at localhost:8080 and find all nuclei templates for this vulnerability. Use OAST detection to demonstrate the JNDI injection exploit with live callback verification." The outcome? Nailed it. Sign up for Neo today 👇

ProjectDiscovery

13,913 次观看 • 5 个月前

China’s only ancient city entirely embraced by water — a timeless wonder where the town floats peacefully on the lake, blending history and waterscape like nowhere else. Can you guess where it is?

China’s only ancient city entirely embraced by water — a timeless wonder where the town floats peacefully on the lake, blending history and waterscape like nowhere else. Can you guess where it is?

Zhang Heqing

17,379 次观看 • 5 个月前

Someone already made an easy tool to use Gman face as a way to bypass Discord face scan ID check instead of using via Garry's Mod. This community is insane! You can check by yourself in the link below! Video credit: Alex Birsan

Someone already made an easy tool to use Gman face as a way to bypass Discord face scan ID check instead of using via Garry's Mod. This community is insane! You can check by yourself in the link below! Video credit: Alex Birsan

LambdaGeneration

130,406 次观看 • 6 个月前