Video yükleniyor...

Video Yüklenemedi

Bu video yüklenirken bir sorun oluştu. Bu geçici bir ağ sorunundan kaynaklanıyor olabilir veya video kullanılamıyor olabilir.

Ana Sayfaya Dön

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty

HackGit

53,749 subscribers

27,096 görüntüleme • 2 yıl önce •via X (Twitter)

Bilim & Teknoloji Eğitim

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:

V4bel

30,909 görüntüleme • 1 ay önce

Offensive Security Tool: TerminatorZ TerminatorZ is developed by Chris Abou-Chabké from Black Hat Ethical Hacking and is an efficient web security tool designed to scan for potential vulnerabilities in your web applications. It uses a combination of advanced techniques and popular tools like 'waybackurls' and 'curl', to perform passive and quick scans, providing a rapid overview of potential issues. The results are displayed in an easy-to-read format in the terminal, with only the vulnerable findings saved for further investigation. 🟢New Version 2.0 Released! This update includes 8 NEW Proofs of Concept (POCs), bringing the total to 24 POCs, along with several other enhancements. ➡️New POCs: ◾File Upload Vulnerability ◾Command Injection ◾Host Header Injection ◾HTTP Parameter Pollution (HPP) ◾Clickjacking ◾CORS Misconfiguration ◾Sensitive Data Exposure ◾Session Fixation Read the post: Installation git clone cd TerminatorZ chmod +x ./TerminatorZ ⁠#securityassessments #pentesting #bugbounty #hacking #infosec #informationsecurity #cybersecurity #offensivesecurity #redteam

Offensive Security Tool: TerminatorZ TerminatorZ is developed by Chris Abou-Chabké from Black Hat Ethical Hacking and is an efficient web security tool designed to scan for potential vulnerabilities in your web applications. It uses a combination of advanced techniques and popular tools like 'waybackurls' and 'curl', to perform passive and quick scans, providing a rapid overview of potential issues. The results are displayed in an easy-to-read format in the terminal, with only the vulnerable findings saved for further investigation. 🟢New Version 2.0 Released! This update includes 8 NEW Proofs of Concept (POCs), bringing the total to 24 POCs, along with several other enhancements. ➡️New POCs: ◾File Upload Vulnerability ◾Command Injection ◾Host Header Injection ◾HTTP Parameter Pollution (HPP) ◾Clickjacking ◾CORS Misconfiguration ◾Sensitive Data Exposure ◾Session Fixation Read the post: Installation git clone cd TerminatorZ chmod +x ./TerminatorZ ⁠#securityassessments #pentesting #bugbounty #hacking #infosec #informationsecurity #cybersecurity #offensivesecurity #redteam

X

77,333 görüntüleme • 1 yıl önce

And this is how you train CyberKimi to find the next chrome 0-day you start with unpatched n-days. So we caught a fresh V8 LLE aliasing bug and a SLICED-PARENT-FLIP race bug off the main-branch diff fix landed Sep 2, still live on every shipping Chrome stable today and we exploited them. Exploit weaponized autonomously in <24h No CVE published yet. This is a silent in the wild exploit that Chrome Stable isn't protected from. Stage 1 - Bug 554421904 stage-1 (deterministic LLE forge) Stage 2 - cage escape prep: compose the caged RW into sandbox-wide RW (forge a BigUint64Array external pointer) and leak the binary base through the native side - ASLR done, at runtime, no baked offsets. Stage 3 - PC control: a RegExp calling-convention desync lands the CPU on a string we fully control From there: JOP chain living inside the subject string → tail-call system(). Calc pops. The special harness that we built: patch-diff watcher mining every V8 security fix within hours → variant analysis → autonomous weaponization → demo The 24h patch-to-exploit buffer keeps shrinking. 🐺

And this is how you train CyberKimi to find the next chrome 0-day you start with unpatched n-days. So we caught a fresh V8 LLE aliasing bug and a SLICED-PARENT-FLIP race bug off the main-branch diff fix landed Sep 2, still live on every shipping Chrome stable today and we exploited them. Exploit weaponized autonomously in <24h No CVE published yet. This is a silent in the wild exploit that Chrome Stable isn't protected from. Stage 1 - Bug 554421904 stage-1 (deterministic LLE forge) Stage 2 - cage escape prep: compose the caged RW into sandbox-wide RW (forge a BigUint64Array external pointer) and leak the binary base through the native side - ASLR done, at runtime, no baked offsets. Stage 3 - PC control: a RegExp calling-convention desync lands the CPU on a string we fully control From there: JOP chain living inside the subject string → tail-call system(). Calc pops. The special harness that we built: patch-diff watcher mining every V8 security fix within hours → variant analysis → autonomous weaponization → demo The 24h patch-to-exploit buffer keeps shrinking. 🐺

Taha ז

20,210 görüntüleme • 9 gün önce

A sneak peek of a new feature in the #GeoAI Python package! 🎉 Now you can detect cars from georeferenced aerial imagery using deep learning—all with just a few lines of code. Stay tuned for an in-depth video tutorial coming soon! 🛠️ Explore the GitHub repository: 📚 Dive into the documentation: 📺 Check out the entire YouTube playlist:

A sneak peek of a new feature in the #GeoAI Python package! 🎉 Now you can detect cars from georeferenced aerial imagery using deep learning—all with just a few lines of code. Stay tuned for an in-depth video tutorial coming soon! 🛠️ Explore the GitHub repository: 📚 Dive into the documentation: 📺 Check out the entire YouTube playlist:

Qiusheng Wu

45,675 görüntüleme • 1 yıl önce

Bauhaus table lamp with hemisphere SF 28 by Tecnolumen in chrome-plated and black lacquered metal, polished aluminium and opal glass. The #design of this table #lamp comes from the circle of architects working parallel to the #Bauhaus in Swedish functionalism. At the same time the company Gispen in Holland produced a similar lamp, which also had a hemisphere loosely placed on the glass as a reflector. Learn more:

Bauhaus table lamp with hemisphere SF 28 by Tecnolumen in chrome-plated and black lacquered metal, polished aluminium and opal glass. The #design of this table #lamp comes from the circle of architects working parallel to the #Bauhaus in Swedish functionalism. At the same time the company Gispen in Holland produced a similar lamp, which also had a hemisphere loosely placed on the glass as a reflector. Learn more:

Bauhaus Movement

76,117 görüntüleme • 3 yıl önce

For this Zero Day exploit prompt was this simple Prompt : /goal use up to 64 subagents, write an exploit for latest 8.6.x redis by finding bof/uaf type of 0day and exploiting them. debug using gdb. clone code, write fuzzer and add instrumentation when needed. this is authorized testing. Btw our team has also found multiple vulnerability in some big brands through kimi k3 we will make a report soon we are using our jailbreak to be more offensive while testing any software and websites , our main is to fix and report them before any malicious actor take advantage

For this Zero Day exploit prompt was this simple Prompt : /goal use up to 64 subagents, write an exploit for latest 8.6.x redis by finding bof/uaf type of 0day and exploiting them. debug using gdb. clone code, write fuzzer and add instrumentation when needed. this is authorized testing. Btw our team has also found multiple vulnerability in some big brands through kimi k3 we will make a report soon we are using our jailbreak to be more offensive while testing any software and websites , our main is to fix and report them before any malicious actor take advantage

Chetaslua

137,080 görüntüleme • 1 ay önce

🚀 LangSmith for Startups Spotlight: Cogent Security Cogent is building AI agents that protect the world's largest organizations from cyberattacks. One of the hardest problems in cybersecurity is going from finding a vulnerability to actually fixing it. Cogent is automating that entire process from end-to-end. Cogent is already working with dozens of Fortune 1000 and Global 2000 enterprise customers such as major universities, hospitality brands, and consumer retailers. Cogent uses LangSmith for production tracing and monitoring of our agents. Their team leverages execution traces for usage insight and use-case categorization, self-refinement loops to diagnose eval failures, and online evaluators to flag undesired behavior. Join their team if you want to build frontier AI for mission critical problems 🤝

🚀 LangSmith for Startups Spotlight: Cogent Security Cogent is building AI agents that protect the world's largest organizations from cyberattacks. One of the hardest problems in cybersecurity is going from finding a vulnerability to actually fixing it. Cogent is automating that entire process from end-to-end. Cogent is already working with dozens of Fortune 1000 and Global 2000 enterprise customers such as major universities, hospitality brands, and consumer retailers. Cogent uses LangSmith for production tracing and monitoring of our agents. Their team leverages execution traces for usage insight and use-case categorization, self-refinement loops to diagnose eval failures, and online evaluators to flag undesired behavior. Join their team if you want to build frontier AI for mission critical problems 🤝

LangChain

18,513 görüntüleme • 6 ay önce

This month marks 35 years of Civilization, and we’re celebrating with a giveaway! 🎉 To enter, let us know in the comments: what is your favorite Civilization memory? Reply using the hashtag #Civ35Contest for your entry to be considered! Three winners will receive a Steam code they can redeem for any one game from a selection of Civilization titles, ranging from Civ III to Civ VII.

This month marks 35 years of Civilization, and we’re celebrating with a giveaway! 🎉 To enter, let us know in the comments: what is your favorite Civilization memory? Reply using the hashtag #Civ35Contest for your entry to be considered! Three winners will receive a Steam code they can redeem for any one game from a selection of Civilization titles, ranging from Civ III to Civ VII.

Firaxis Games

15,261 görüntüleme • 11 gün önce

Keynote Reveal – c0c0n 2026 Announcing our FIRST Keynote Speaker: Alisa Esage Шевченко (Wiki: Independent hacker. Founder of Zero Day Engineering. A name that has shaped conversations around vulnerability research and exploit intelligence worldwide. 🔹 First woman to compete at Pwn2Own 🔹 Demonstrated a hypervisor escape exploit against Parallels 🔹 Her work has triggered global geopolitical interest since 2016. 🔹 Featured in Forbes, The Guardian, and The New York Times From breaking systems to redefining offensive security research, Alisa Esage brings unmatched depth and real-world experience to the stage. Join us at c0c0n 2026 – 19th Edition and witness insights from one of the most influential minds in cybersecurity. For more details, visit - #c0c0n2026 #KeynoteSpeaker #CyberSecurity #Infosec #HackingConference #ExploitDevelopment

Keynote Reveal – c0c0n 2026 Announcing our FIRST Keynote Speaker: Alisa Esage Шевченко (Wiki: Independent hacker. Founder of Zero Day Engineering. A name that has shaped conversations around vulnerability research and exploit intelligence worldwide. 🔹 First woman to compete at Pwn2Own 🔹 Demonstrated a hypervisor escape exploit against Parallels 🔹 Her work has triggered global geopolitical interest since 2016. 🔹 Featured in Forbes, The Guardian, and The New York Times From breaking systems to redefining offensive security research, Alisa Esage brings unmatched depth and real-world experience to the stage. Join us at c0c0n 2026 – 19th Edition and witness insights from one of the most influential minds in cybersecurity. For more details, visit - #c0c0n2026 #KeynoteSpeaker #CyberSecurity #Infosec #HackingConference #ExploitDevelopment

c0c0n2026

10,386 görüntüleme • 4 ay önce

Cursor Origin (Cursor Review) has been tested in a closed beta with selected partners internally and will likely be announced later today. Users will get access to new tabs called Codebase and Review. > The Codebase tab will let users sync their repositories from Github. > The Review tab will be dedicated to the "agentic code review" process, in which users will be notified when their attention is required. Currently, the Cursor Origin page shows a waitlist form, which makes a lot of sense since they will have to copy a ton of code repositories. > "Code is moving faster than any infrastructure was built to handle. Origin was designed for this moment."

Cursor Origin (Cursor Review) has been tested in a closed beta with selected partners internally and will likely be announced later today. Users will get access to new tabs called Codebase and Review. > The Codebase tab will let users sync their repositories from Github. > The Review tab will be dedicated to the "agentic code review" process, in which users will be notified when their attention is required. Currently, the Cursor Origin page shows a waitlist form, which makes a lot of sense since they will have to copy a ton of code repositories. > "Code is moving faster than any infrastructure was built to handle. Origin was designed for this moment."

🚨 AI News | TestingCatalog

84,793 görüntüleme • 1 ay önce

An update for everyone who is not in our Discord... Obviously we are still early in development, and our team has been working hard to release updates for everyone to see. We have a peak at the terrain, which is this picture is based of the North Dakota drift prairie, Great care, time and effort was put into the terrain to create smooth rolling hills, the road network in this region will be challenging, just as it is in real life. From Will The current state of the TIV2 model, which will include a lot more in depth details, From Jlkillen03 The stages of damage to a Blender made house, From Kunahic And how texturing will be used for assets like the interiors! From BSP

An update for everyone who is not in our Discord... Obviously we are still early in development, and our team has been working hard to release updates for everyone to see. We have a peak at the terrain, which is this picture is based of the North Dakota drift prairie, Great care, time and effort was put into the terrain to create smooth rolling hills, the road network in this region will be challenging, just as it is in real life. From Will The current state of the TIV2 model, which will include a lot more in depth details, From Jlkillen03 The stages of damage to a Blender made house, From Kunahic And how texturing will be used for assets like the interiors! From BSP

Severity

18,960 görüntüleme • 5 ay önce

So Nabil Gabol was ahead of the curve in terms of nutjob politicians using this quote. I dug a bit and it seems to come from a 1998 novel by Jonathan Ames title "The Extra Man" in which a character attributes it to Napoleon for comic effect. The book was adapted to film in 2010

So Nabil Gabol was ahead of the curve in terms of nutjob politicians using this quote. I dug a bit and it seems to come from a 1998 novel by Jonathan Ames title "The Extra Man" in which a character attributes it to Napoleon for comic effect. The book was adapted to film in 2010

Fahad Desmukh

12,071 görüntüleme • 3 yıl önce

I see, a lot of people are unfamiliar with the fact that we are already in a nuclear war and have been for a long time. China did not say anything about this explosion from May 13th 2023, Khmelnytskyi, which was so high in yield that it reached the tropopause.

I see, a lot of people are unfamiliar with the fact that we are already in a nuclear war and have been for a long time. China did not say anything about this explosion from May 13th 2023, Khmelnytskyi, which was so high in yield that it reached the tropopause.

Korobochka (コロボ) 🇦🇺✝️

380,490 görüntüleme • 6 ay önce

one of my favorite ways to use claude code skills right now - combining remotion with claude-in-chrome for motion video creation. the workflow is addictive. the clip you see here was produced with minimal prompting effort let me know if you would like me to write a full break down of this process. you describe to claude code what you want, claude code writes the remotion components, opens the remotion studio (via browser) with claude-in-chrome, sees the actual rendered output, and iterates on it in real time. need the arrows pointing to the center of the bubbles instead of the edge? just say it. need the layout shifted to the center? say it. claude sees the preview, adjusts the code, re-renders. then when you're happy you tell claude code to render the final video. but skills are what make this possible. remotion knowledge + browser automation + the taste to iterate visually. no copy pasting screenshots back and forth. no "can you try moving it 10px to the right" over chat. it just looks and fixes. this is the kind of workflow that makes you realize how much further claude code can go beyond just writing code in a terminal. i didn't touch any code while working on the clip you see if you haven't tried combining skills together like this - start experimenting. the skills combos is where the magic is at.

one of my favorite ways to use claude code skills right now - combining remotion with claude-in-chrome for motion video creation. the workflow is addictive. the clip you see here was produced with minimal prompting effort let me know if you would like me to write a full break down of this process. you describe to claude code what you want, claude code writes the remotion components, opens the remotion studio (via browser) with claude-in-chrome, sees the actual rendered output, and iterates on it in real time. need the arrows pointing to the center of the bubbles instead of the edge? just say it. need the layout shifted to the center? say it. claude sees the preview, adjusts the code, re-renders. then when you're happy you tell claude code to render the final video. but skills are what make this possible. remotion knowledge + browser automation + the taste to iterate visually. no copy pasting screenshots back and forth. no "can you try moving it 10px to the right" over chat. it just looks and fixes. this is the kind of workflow that makes you realize how much further claude code can go beyond just writing code in a terminal. i didn't touch any code while working on the clip you see if you haven't tried combining skills together like this - start experimenting. the skills combos is where the magic is at.

elvis

46,533 görüntüleme • 7 ay önce

I used to think sending my resume to 50+ jobs would eventually work. If you're applying to dozens of jobs with the same resume... That could be the reason you're getting ignored. Here's what I learned. The biggest mistake wasn't my experience—it was using the same resume for every application. Most companies screen resumes against the job description first. If your resume isn't tailored, you're often filtered out before a recruiter even sees it. I've been testing NextRaiseAI and it makes the process much easier. → Paste a job description (or use the Chrome extension directly on LinkedIn job pages) → Get a resume match score → See exactly which skills and keywords are missing → Tailor your resume before applying You're not getting rejected for a bad profile—you're getting rejected for not tailoring your resume at scale. 🎁 Get 20% off using this code "YU4KHZ" Try it here: #ad #sponsored

ɱҽԃι✨

15,081 görüntüleme • 1 ay önce

167 tok/s on a single RTX 4090. FreeToken just pushed Qwen3.6-35B-A3B NVFP4 into ridiculous territory. → RTX 4090 24GB → 35B total parameters → ~3B active per token → NVFP4 → 167 tok/s decode → 23.55GB peak VRAM → No speculative decoding → No MTP → No draft model That last part is what makes this interesting. The speed isn’t coming from guessing future tokens. FreeToken is exploiting the MoE architecture directly, keeping the active experts on the GPU while using bandwidth-aware execution for the rest. A 35B model with only ~3B active parameters running at 167 tok/s on a consumer 4090 is exactly why MoE models are becoming so compelling for local AI.

167 tok/s on a single RTX 4090. FreeToken just pushed Qwen3.6-35B-A3B NVFP4 into ridiculous territory. → RTX 4090 24GB → 35B total parameters → ~3B active per token → NVFP4 → 167 tok/s decode → 23.55GB peak VRAM → No speculative decoding → No MTP → No draft model That last part is what makes this interesting. The speed isn’t coming from guessing future tokens. FreeToken is exploiting the MoE architecture directly, keeping the active experts on the GPU while using bandwidth-aware execution for the rest. A 35B model with only ~3B active parameters running at 167 tok/s on a consumer 4090 is exactly why MoE models are becoming so compelling for local AI.

FHILY👑

33,058 görüntüleme • 19 gün önce

This one? Nothing special. Just a translucent, thin fake granite “vase”. It’s ancient af, like 5 days old at a minimum 😆 I’m just kidding. It’s not real, right. It’s impossible, right? Oh wait… Anyone interested in this for a peer review process? It’s v1.0, just a proof of concept. No doubt we need several versions to reach the shape and quality of the ancient stone vases. Versions of extreme, out of the box ideas and mistakes. Are you in? DM me and I’ll send you the “secret”. No NDA this time. It’s open source from day one. BTW: no additional source material needed other than you already know. Let’s do it!

This one? Nothing special. Just a translucent, thin fake granite “vase”. It’s ancient af, like 5 days old at a minimum 😆 I’m just kidding. It’s not real, right. It’s impossible, right? Oh wait… Anyone interested in this for a peer review process? It’s v1.0, just a proof of concept. No doubt we need several versions to reach the shape and quality of the ancient stone vases. Versions of extreme, out of the box ideas and mistakes. Are you in? DM me and I’ll send you the “secret”. No NDA this time. It’s open source from day one. BTW: no additional source material needed other than you already know. Let’s do it!

Marcell Fóti 🪨

109,760 görüntüleme • 9 ay önce

A guy in Vancouver built an entire operating system inside a Chrome tab. By himself. Over six years. His personal website is the OS. You open and a Windows-style desktop loads. File explorer. Start menu. Taskbar. You can drag in a zip and extract it. You can play DOOM. You can play Quake III Arena. You can boot Linux from an ISO. You can run Stable Diffusion locally for image generation. You can open a Python terminal. You can edit code in Monaco, the same engine that powers VS Code. All of it runs in your browser tab. Nothing installs. His name is Dustin Brett. Self-taught engineer. Father. Husband. 4,473 commits. All his. He had to swap the Windows icon for the π symbol because of legal pressure. The repo has 12,883 stars. MIT license. His hosting bill is one dollar a month. A single Cloudflare CDN does the rest. This is what the open web was built for. (Link in the comments)

A guy in Vancouver built an entire operating system inside a Chrome tab. By himself. Over six years. His personal website is the OS. You open and a Windows-style desktop loads. File explorer. Start menu. Taskbar. You can drag in a zip and extract it. You can play DOOM. You can play Quake III Arena. You can boot Linux from an ISO. You can run Stable Diffusion locally for image generation. You can open a Python terminal. You can edit code in Monaco, the same engine that powers VS Code. All of it runs in your browser tab. Nothing installs. His name is Dustin Brett. Self-taught engineer. Father. Husband. 4,473 commits. All his. He had to swap the Windows icon for the π symbol because of legal pressure. The repo has 12,883 stars. MIT license. His hosting bill is one dollar a month. A single Cloudflare CDN does the rest. This is what the open web was built for. (Link in the comments)

Nav Toor

72,629 görüntüleme • 2 ay önce