Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

Finding a potential XSS is only the first step. Neo automatically : -> opens a real browser -> executes the payload -> confirms JavaScript execution -> captures the alert screenshot as evidence -> Introducing Neo Browser Computer Use -- an autonomous PoC collector. Finding XSS is only half the... show more

ProjectDiscovery

44,631 subscribers

14,951 Aufrufe • vor 3 Monaten •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

4 Kommentare

Profilbild von ProjectDiscovery

ProjectDiscoveryvor 3 Monaten

Most AI agents find XSS. You still have to prove it: → Open the browser → Execute the payload → Verify the alert → Capture the evidence

Profilbild von ProjectDiscovery

ProjectDiscoveryvor 3 Monaten

Neo does it automatically. No "probably vulnerable." No "please verify manually." Just a reproducible PoC with evidence.

Profilbild von Ractiurd

Ractiurdvor 3 Monaten

Everything mentioned and more Ghoulsight does it as you explained. Try it out

Profilbild von Levon Azevedo

Levon Azevedovor 3 Monaten

Discovery going autonomous was inevitable. The real question: who signs the report? A named human still has to accept responsibility for what the agent captured before it ships — or we've just swapped "trust the scanner" for "trust the agent that ran it."

Ähnliche Videos

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check Out Old Tweets Of Today Cyber News #CyberSecurity #BugBounty #infosec #xss

Today Cyber News

34,242 Aufrufe • vor 3 Jahren

Introducing the new dev-browser cli. The fastest way for an agent to use a browser is to let it write code. Just `npm i -g dev-browser` and tell your agent to "use dev-browser"

Introducing the new dev-browser cli. The fastest way for an agent to use a browser is to let it write code. Just `npm i -g dev-browser` and tell your agent to "use dev-browser"

Sawyer Hood

871,559 Aufrufe • vor 7 Monaten

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

95,499 Aufrufe • vor 6 Monaten

Prompting is temporary. We believe the future of computer use is completely unprompted. Introducing our latest research: a browser agent that predicts your next action from only the current page and your recent history.

Prompting is temporary. We believe the future of computer use is completely unprompted. Introducing our latest research: a browser agent that predicts your next action from only the current page and your recent history.

Charlie Deane

43,982 Aufrufe • vor 1 Monat

This is how you choose a default browser in iOS 17.4 in the EU. The prompt shows a list of browser options. Tapping on a browser option opens the browser's page on the App Store. What happens if any of these browsers is only available on an alternative marketplace?

This is how you choose a default browser in iOS 17.4 in the EU. The prompt shows a list of browser options. Tapping on a browser option opens the browser's page on the App Store. What happens if any of these browsers is only available on an alternative marketplace?

Mysk 🇨🇦🇩🇪

13,027 Aufrufe • vor 2 Jahren

Day 2 of Wave 10 is here! Introducing the Windsurf Browser, a fully functional browser that integrates with Cascade. You can use it like a normal browser while also selecting components, diagrams, text, logs, or anything else on the page and send it back to Cascade as context.

Day 2 of Wave 10 is here! Introducing the Windsurf Browser, a fully functional browser that integrates with Cascade. You can use it like a normal browser while also selecting components, diagrams, text, logs, or anything else on the page and send it back to Cascade as context.

Devin Desktop

153,355 Aufrufe • vor 1 Jahr

AI is only as intelligent as the data it learns from. And data is only as good as the humans behind it. Introducing Humyn Labs. Where human intelligence is not just a step, it’s the filter. 👇

AI is only as intelligent as the data it learns from. And data is only as good as the humans behind it. Introducing Humyn Labs. Where human intelligence is not just a step, it’s the filter. 👇

Team Humyn Labs

17,268 Aufrufe • vor 8 Monaten

Computer use is finally reliable. It just needed a real harness. Now there is one. Starting today, anyone can ship a SOTA browser agent, batteries included. Introducing Browserbase Agents: one prompt and one API call is all you need to automate the whole web.

Computer use is finally reliable. It just needed a real harness. Now there is one. Starting today, anyone can ship a SOTA browser agent, batteries included. Introducing Browserbase Agents: one prompt and one API call is all you need to automate the whole web.

Browserbase

96,687 Aufrufe • vor 4 Monaten

I built an autonomous 3D Python Game Visulizer Agent team with browser use and DeepSeek R1. It has 4 AI agents working as a team to open, code, run, and visualize the game in the browser - all on autopilot. 100% Opensource code with step-by-step tutorial.

I built an autonomous 3D Python Game Visulizer Agent team with browser use and DeepSeek R1. It has 4 AI agents working as a team to open, code, run, and visualize the game in the browser - all on autopilot. 100% Opensource code with step-by-step tutorial.

Shubham Saboo

20,047 Aufrufe • vor 1 Jahr

We just launched Browser Use LLM 2.0 - our fastest and most accurate web agent model yet. Here it is finding the cheapest flight across 3 airports: +46% better than Browser Use LLM 1.0 on travel tasks.

We just launched Browser Use LLM 2.0 - our fastest and most accurate web agent model yet. Here it is finding the cheapest flight across 3 airports: +46% better than Browser Use LLM 1.0 on travel tasks.

Saurav Panda

21,443 Aufrufe • vor 9 Monaten

XSS Scanner It will be hosted on a VPS and shared with the public once I finish working on it. The next step is to add parameter bruteforcing.

XSS Scanner It will be hosted on a VPS and shared with the public once I finish working on it. The next step is to add parameter bruteforcing.

Ibrahim Auwal

10,783 Aufrufe • vor 1 Jahr

We turned Jev into a general browser skill for agents: jev-browser. Give it a website and a task. The browser opens automatically, and Jev decides every click based on what's on the screen. Here's a demo:

We turned Jev into a general browser skill for agents: jev-browser. Give it a website and a task. The browser opens automatically, and Jev decides every click based on what's on the screen. Here's a demo:

AI Builder Club

34,077 Aufrufe • vor 1 Monat

[3/5] Introducing Agent Mode ✨ Agent Mode is a simple way to bootstrap an automation from scratch with Notte. Prompt a browser agent in natural language, let it execute the task step by step, then automatically convert its execution into deterministic & editable code. Open it in Automation Studio and continue iterating from there!

[3/5] Introducing Agent Mode ✨ Agent Mode is a simple way to bootstrap an automation from scratch with Notte. Prompt a browser agent in natural language, let it execute the task step by step, then automatically convert its execution into deterministic & editable code. Open it in Automation Studio and continue iterating from there!

Notte

12,101 Aufrufe • vor 10 Monaten

browser-harness exploded. some said AGI is here. but what’s the right interface? introducing Browser Use Desktop. open-source. watch the magic. 🐎👇

browser-harness exploded. some said AGI is here. but what’s the right interface? introducing Browser Use Desktop. open-source. watch the magic. 🐎👇

Magnus Müller

115,100 Aufrufe • vor 6 Monaten

Introducing developer mode for browser use in Chrome and the Codex in-app browser. Codex can use the Chrome DevTools Protocol (CDP) to debug browser issues by profiling JavaScript performance and inspecting console output, network traffic, and page state.

Introducing developer mode for browser use in Chrome and the Codex in-app browser. Codex can use the Chrome DevTools Protocol (CDP) to debug browser issues by profiling JavaScript performance and inspecting console output, network traffic, and page state.

OpenAI Developers

378,245 Aufrufe • vor 4 Monaten

"TEMET NOSCE" - KNOW THYSELF Neo becomes the One by realizing the Self is reality's source code. Cookie has the code of the one inside. Once he ate it. He slowly started to become the one. Just like how the piece of cake was coded. The oracle gave Neo the code to become the one. A cookie is a piece of information that is placed automatically on your computer's hard drive when you access certain Websites. The cookie uniquely identifies your browser to the server. 🧵

"TEMET NOSCE" - KNOW THYSELF Neo becomes the One by realizing the Self is reality's source code. Cookie has the code of the one inside. Once he ate it. He slowly started to become the one. Just like how the piece of cake was coded. The oracle gave Neo the code to become the one. A cookie is a piece of information that is placed automatically on your computer's hard drive when you access certain Websites. The cookie uniquely identifies your browser to the server. 🧵

🧬Maxpein🧬

75,457 Aufrufe • vor 1 Jahr

Creating COM hijacking payloads has never been easier than with RustPack! With COM Hijacking, you can persist on a target system by 'living' in trusted user processes, such as the Chrome browser. You only need to bring one DLL. When the user opens Chrome, for example, a C2 connection is established. 🔥 Achieving stable payload execution without crashing or freezing the target system requires an understanding of what is relevant. Additionally, lots of processes may attempt to load the hijacked CLSID; you don't want to receive 43 beacons per day from the same system. Limiting execution to a defined process is important here! 🎓 What about combining that payload with environmental keying, anti-emulation, anti-sandboxing, as well as AMSI and ETW bypasses? Doing all this yourself will take time. With RustPack, however, you can create such a payload in a few seconds, and it's stable! The video demonstrates how to create a payload DLL to execute Adaptix C2 shellcode in the Chrome browser. 🛸

Creating COM hijacking payloads has never been easier than with RustPack! With COM Hijacking, you can persist on a target system by 'living' in trusted user processes, such as the Chrome browser. You only need to bring one DLL. When the user opens Chrome, for example, a C2 connection is established. 🔥 Achieving stable payload execution without crashing or freezing the target system requires an understanding of what is relevant. Additionally, lots of processes may attempt to load the hijacked CLSID; you don't want to receive 43 beacons per day from the same system. Limiting execution to a defined process is important here! 🎓 What about combining that payload with environmental keying, anti-emulation, anti-sandboxing, as well as AMSI and ETW bypasses? Doing all this yourself will take time. With RustPack, however, you can create such a payload in a few seconds, and it's stable! The video demonstrates how to create a payload DLL to execute Adaptix C2 shellcode in the Chrome browser. 🛸

MSec Operations

16,165 Aufrufe • vor 1 Jahr

it gets worse. using Claude in Chrome? xss is making a comeback! welcome back to the 90s!

it gets worse. using Claude in Chrome? xss is making a comeback! welcome back to the 90s!

Michael Bargury

46,679 Aufrufe • vor 2 Monaten