Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

Created a private bookmarklet packed with features to extract hidden paths, URLs and endpoints. It fetches data from HTML elements, inline scripts, quoted strings, performance logs and even external JavaScript files for deep reconnaissance.

Coffin

32,109 subscribers

21,918 Aufrufe • vor 1 Jahr •via X (Twitter)

Wissenschaft & Technologie Nachrichten & Politik Bildung

Anya Rossi• Live Now

Private livecam show

11 Kommentare

Profilbild von Coffin

Coffinvor 1 Jahr

1. HTML element attributes: <a>, <script>, <img>, <link>, <form> → href, src, action 2. Inline HTML & JS using regex: Matches url(), href=, src=, action=, url:, endpoint:, path:, route: 3. Quoted strings in HTML: Extracts path-like patterns from "..." and '...' 4. Browser resource list: performance.getEntriesByType("resource") 5. External JavaScript files: Fetches and scans each <script src="..."> using regex for embedded paths

Profilbild von hasht

hashtvor 1 Jahr

Crazy🔥🔥🔥

Profilbild von Jyotirmoy Karmakar 🇮🇳

Jyotirmoy Karmakar 🇮🇳vor 1 Jahr

Wow

Profilbild von Gospel

Gospelvor 1 Jahr

👑❤

Profilbild von QWERTY

QWERTYvor 1 Jahr

Thanks brother for sharing real knowledge

Profilbild von payphone

payphonevor 1 Jahr

Nice! Can you make it public? :) <3

Profilbild von Coffin

Coffinvor 1 Jahr

maybe soon..

Profilbild von f̴a̴i̴r̴y̴t̴a̴l̴e̴w̴o̴r̴l̴d̴ 💫

f̴a̴i̴r̴y̴t̴a̴l̴e̴w̴o̴r̴l̴d̴ 💫vor 1 Jahr

🔥

Profilbild von L0C4LH057

L0C4LH057vor 1 Jahr

I think I've made a chrome extension with the same functionality but even though slightly different, but I'll like to test this one as well!🤞👍

Profilbild von Chetan Chinchulkar

Chetan Chinchulkarvor 1 Jahr

Very useful... making it opensource?

Profilbild von Coffin

Coffinvor 1 Jahr

soon..

Ähnliche Videos

Code Execution If you ask Grok to generate code, you can quickly see how it runs in a “preview” tab. You can preview HTML snippets, run Python, C++, Javascript, Typescript and bash scripts.

Code Execution If you ask Grok to generate code, you can quickly see how it runs in a “preview” tab. You can preview HTML snippets, run Python, C++, Javascript, Typescript and bash scripts.

Grok

560,652 Aufrufe • vor 1 Jahr

Hidden or disabled fields are commonly overlooked, but they can still open the door to some cool bugs. Try creating a bookmarklet to instantly reveal these fields. Here are some quick examples you can copy and paste: 🔖 Enable all disabled or readonly fields: javascript:(function(){document.querySelectorAll('[disabled],[readonly]').forEach(el=>{el.removeAttribute('disabled');el.removeAttribute('readonly');});})(); 🔖 Unhide elements styled with display: none: javascript:(function(){document.querySelectorAll('[style*="display: none"]').forEach(el=>{

Hidden or disabled fields are commonly overlooked, but they can still open the door to some cool bugs. Try creating a bookmarklet to instantly reveal these fields. Here are some quick examples you can copy and paste: 🔖 Enable all disabled or readonly fields: javascript:(function(){document.querySelectorAll('[disabled],[readonly]').forEach(el=>{el.removeAttribute('disabled');el.removeAttribute('readonly');});})(); 🔖 Unhide elements styled with display: none: javascript:(function(){document.querySelectorAll('[style*="display: none"]').forEach(el=>{

André Baptista

47,348 Aufrufe • vor 1 Jahr

For the last couple months, our team has been working hard on a few paradigm-changing features for HTML Canvas. One of them is the ability to have HTML elements in a canvas. Here's a ThreeJS demo with a live HTML texture.

For the last couple months, our team has been working hard on a few paradigm-changing features for HTML Canvas. One of them is the ability to have HTML elements in a canvas. Here's a ThreeJS demo with a live HTML texture.

Fernando Serboncini

682,632 Aufrufe • vor 2 Jahren

Automatically extract URL and IP endpoints from Android app to a txt file using apk2url Fast and useful tool for pentesters, bug bounty hunters, or malware analyst

Automatically extract URL and IP endpoints from Android app to a txt file using apk2url Fast and useful tool for pentesters, bug bounty hunters, or malware analyst

Mobile Hacker

127,687 Aufrufe • vor 3 Jahren

This is my assignment for a Hong Kong based startup for Backend Engineer role In the interview we discussed on how to build scalable Multi upload function for large files and how do we generate presigned urls for short time ... Doubled down on building the presigned function and here it is what I built for now it can view presigned urls asset and download those from the bucket, its a really simple implementation of what large video recording system have in their main infrastructure ... built with go, minio, psql and simple html

This is my assignment for a Hong Kong based startup for Backend Engineer role In the interview we discussed on how to build scalable Multi upload function for large files and how do we generate presigned urls for short time ... Doubled down on building the presigned function and here it is what I built for now it can view presigned urls asset and download those from the bucket, its a really simple implementation of what large video recording system have in their main infrastructure ... built with go, minio, psql and simple html

Mrinal

58,864 Aufrufe • vor 7 Monaten

Batch parsing used to mean writing API scripts. Now it's a button. 🦙 Parse or extract across up to 10,000 files in one run, straight from the LlamaParse UI. Point it at a folder and go — no code required. Available now on all paid plans. Bring your files and start parsing 👉

Batch parsing used to mean writing API scripts. Now it's a button. 🦙 Parse or extract across up to 10,000 files in one run, straight from the LlamaParse UI. Point it at a folder and go — no code required. Available now on all paid plans. Bring your files and start parsing 👉

LlamaIndex 🦙

11,792 Aufrufe • vor 3 Monaten

Paths are Wayfinder's plugin marketplace. Community-created tools...skills, scripts, and strategies that fast-forward you from ideas to outcomes. Install Paths directly into your Shell's chat to strengthen your agent. Secured by $PROMPT. Coming shortly

Paths are Wayfinder's plugin marketplace. Community-created tools...skills, scripts, and strategies that fast-forward you from ideas to outcomes. Install Paths directly into your Shell's chat to strengthen your agent. Secured by $PROMPT. Coming shortly

Wayfinder Foundation 🧭

14,392 Aufrufe • vor 5 Monaten

Introducing the Box HTML editor. Create, edit, preview, and collaborate on HTML files directly in Box, no additional downloads, no external tools, no re-uploads. Your HTML files can now operate in the same governed space as the rest of your enterprise content, with seamless Box AI access built in from the start.

Introducing the Box HTML editor. Create, edit, preview, and collaborate on HTML files directly in Box, no additional downloads, no external tools, no re-uploads. Your HTML files can now operate in the same governed space as the rest of your enterprise content, with seamless Box AI access built in from the start.

Box

3,405,237 Aufrufe • vor 4 Monaten

Today, we're launching Parallel Extract, a new API in our Agent Tools bundle. When given a URL, Extract fetches all content from that page and returns it in markdown, either in full detail or in a compressed form for better token efficiency.

Today, we're launching Parallel Extract, a new API in our Agent Tools bundle. When given a URL, Extract fetches all content from that page and returns it in markdown, either in full detail or in a compressed form for better token efficiency.

Parallel Web Systems

160,200 Aufrufe • vor 11 Monaten

Browserbase integrates with @box, allowing your browser agents to save and analyze downloaded files. Watch an agent download safety data, save it to Box, extract what’s in the PDF, and then decide whether it’s compliant.

Browserbase integrates with @box, allowing your browser agents to save and analyze downloaded files. Watch an agent download safety data, save it to Box, extract what’s in the PDF, and then decide whether it’s compliant.

Browserbase

139,711 Aufrufe • vor 3 Monaten

Our first Generative AI short course in JavaScript! GitHub recently reported that JavaScript is again the world’s most popular programming language. To support web developers exploring and developing with generative AI, we just launched a new short course in JavaScript taught by Jacob Lee, founding engineer at . In Build LLM Apps with LangChain.js you’ll learn elements common in AI development, including: (i) Using data loaders to pull data from common sources such as PDFs, websites, and databases (ii) Prompts, which are used to provide the LLM context (iii) Modules to support RAG such as text splitters and integrations with vector stores (iv) Working with different models to write applications that are not vendor-specific (v) Parsers, which extract and format the output for your downstream code to process You’ll also build with the LangChain Expression Language, which lets you easily compose sequences (also called chains) of modules to perform complex tasks using LLMs. Putting all this together, you’ll also work on a conversational question-answering LLM application capable of using external data as context. Please sign up here:

Our first Generative AI short course in JavaScript! GitHub recently reported that JavaScript is again the world’s most popular programming language. To support web developers exploring and developing with generative AI, we just launched a new short course in JavaScript taught by Jacob Lee, founding engineer at . In Build LLM Apps with LangChain.js you’ll learn elements common in AI development, including: (i) Using data loaders to pull data from common sources such as PDFs, websites, and databases (ii) Prompts, which are used to provide the LLM context (iii) Modules to support RAG such as text splitters and integrations with vector stores (iv) Working with different models to write applications that are not vendor-specific (v) Parsers, which extract and format the output for your downstream code to process You’ll also build with the LangChain Expression Language, which lets you easily compose sequences (also called chains) of modules to perform complex tasks using LLMs. Putting all this together, you’ll also work on a conversational question-answering LLM application capable of using external data as context. Please sign up here:

Andrew Ng

284,512 Aufrufe • vor 2 Jahren

Miami, rendered in javascript 13,725 real buildings, roads, coastline, and moving traffic, all recreated from scratch using open map data No blender, No 3js, No external deps.

Miami, rendered in javascript 13,725 real buildings, roads, coastline, and moving traffic, all recreated from scratch using open map data No blender, No 3js, No external deps.

Nathan Wilbanks

19,706 Aufrufe • vor 1 Monat

These are my notes from 2022, when I first started learning HTML, CSS, and JavaScript! 😄

These are my notes from 2022, when I first started learning HTML, CSS, and JavaScript! 😄

Kamna Bhadoriya

11,660 Aufrufe • vor 1 Jahr

Somehow, Chrome 130+ started parsing the hostname from javascript URLs again and this can be used for a constrained XSS 🤯 This was the second solution for the recent CTF challenge.

Somehow, Chrome 130+ started parsing the hostname from javascript URLs again and this can be used for a constrained XSS 🤯 This was the second solution for the recent CTF challenge.

André Baptista

25,305 Aufrufe • vor 1 Jahr

The 3rd Maricopa County 2020 Election audit performed by a source not brought in by the county found MILLIONS of deleted files, confirmed internet access, bootable drives, voter data from other states, anonymous users logging into the EMS and running unknown scripts to alter the machines, confirmed remote access from outside IP addresses, and election data, results, and logs wiped the day before the 3rd audit. The Arizona 2020 Election was stolen.

The 3rd Maricopa County 2020 Election audit performed by a source not brought in by the county found MILLIONS of deleted files, confirmed internet access, bootable drives, voter data from other states, anonymous users logging into the EMS and running unknown scripts to alter the machines, confirmed remote access from outside IP addresses, and election data, results, and logs wiped the day before the 3rd audit. The Arizona 2020 Election was stolen.

The SCIF

81,507 Aufrufe • vor 3 Monaten

Gemini 4 Argon built a 3D periodic table synced to Tom Lehrer’s song, “The Elements.” Created in @Antigravity, it animates orbiting electrons, atomic data, and light spectra.

Gemini 4 Argon built a 3D periodic table synced to Tom Lehrer’s song, “The Elements.” Created in @Antigravity, it animates orbiting electrons, atomic data, and light spectra.

Google DeepMind

658,386 Aufrufe • vor 8 Tagen