正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

HBSQLI Automated Tool for Testing Header Based Blind SQL Injection. #infosec #pentesting #bugbounty

HackGit

53,695 subscribers

37,421 次观看 • 3 年前 •via X (Twitter)

#infosec #pentesting #bugbounty

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

🔐 Certificate Ripper A CLI tool to extract server certificates #cybersecurity #pentesting #bugbounty

🔐 Certificate Ripper A CLI tool to extract server certificates #cybersecurity #pentesting #bugbounty

HackGit

96,405 次观看 • 2 年前

Offensive Security Tool: SQLMutant SQLMutant is written by Chris Abou-Chabké from Black Hat Ethical Hacking and its a comprehensive SQL injection tool. It uses a variety of techniques to detect vulnerabilities, including pattern matching, error analysis, and timing attacks, ensuring that no stone is left unturned. In addition to its powerful features, SQLMutant also integrates with Waybackurls and Arjun, enabling it to find even more parameters and merge all results together. This integration is highly beneficial as it provides automated subdomain enumeration and SQL injection testing capabilities. Requirements: To use SQLMutant, you need to have the following tools installed: figlet & lolcat: pip install lolcat & apt-get install figlet Waybackurls : go install Arjun: pip install arjun SQLMap: git clone --depth 1 sqlmap-dev Installation git clone cd SQLMutant chmod +x ./SQLMutant.sh Read the full post: #sqli #sqlinjection #hacking #bugbounty #pentesting #infosec #informationsecurity #offensivesecurity #redteam

Offensive Security Tool: SQLMutant SQLMutant is written by Chris Abou-Chabké from Black Hat Ethical Hacking and its a comprehensive SQL injection tool. It uses a variety of techniques to detect vulnerabilities, including pattern matching, error analysis, and timing attacks, ensuring that no stone is left unturned. In addition to its powerful features, SQLMutant also integrates with Waybackurls and Arjun, enabling it to find even more parameters and merge all results together. This integration is highly beneficial as it provides automated subdomain enumeration and SQL injection testing capabilities. Requirements: To use SQLMutant, you need to have the following tools installed: figlet & lolcat: pip install lolcat & apt-get install figlet Waybackurls : go install Arjun: pip install arjun SQLMap: git clone --depth 1 sqlmap-dev Installation git clone cd SQLMutant chmod +x ./SQLMutant.sh Read the full post: #sqli #sqlinjection #hacking #bugbounty #pentesting #infosec #informationsecurity #offensivesecurity #redteam

X

42,633 次观看 • 1 年前

Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. #cybersecurity #infosec #pentesting

Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. #cybersecurity #infosec #pentesting

HackGit

227,826 次观看 • 3 年前

Offensive Security Tool: SecretOpt1c SecretOpt1c is written by Chris Abou-Chabké from Black Hat Ethical Hacking and its designed for Red Team, Pentesters, and Bug Bounty Hunters. It is a very powerful and versatile tool that helps uncover sensitive information on websites using Active and Passive Techniques for Superior Accuracy. Read the full post: Installation git clone cd SecretOpt1c chmod +x ./SecretOpt1c.sh #javascript #credentials #sourcecode #hacking #bugbounty #bugbountytips #pentesting #infosec #informationsecurity #offensivesecurity #redteam

Offensive Security Tool: SecretOpt1c SecretOpt1c is written by Chris Abou-Chabké from Black Hat Ethical Hacking and its designed for Red Team, Pentesters, and Bug Bounty Hunters. It is a very powerful and versatile tool that helps uncover sensitive information on websites using Active and Passive Techniques for Superior Accuracy. Read the full post: Installation git clone cd SecretOpt1c chmod +x ./SecretOpt1c.sh #javascript #credentials #sourcecode #hacking #bugbounty #bugbountytips #pentesting #infosec #informationsecurity #offensivesecurity #redteam

X

20,768 次观看 • 1 年前

Offensive Security Tool: TerminatorZ TerminatorZ is developed by Chris Abou-Chabké from Black Hat Ethical Hacking and is an efficient web security tool designed to scan for potential vulnerabilities in your web applications. It uses a combination of advanced techniques and popular tools like 'waybackurls' and 'curl', to perform passive and quick scans, providing a rapid overview of potential issues. The results are displayed in an easy-to-read format in the terminal, with only the vulnerable findings saved for further investigation. 🟢New Version 2.0 Released! This update includes 8 NEW Proofs of Concept (POCs), bringing the total to 24 POCs, along with several other enhancements. ➡️New POCs: ◾File Upload Vulnerability ◾Command Injection ◾Host Header Injection ◾HTTP Parameter Pollution (HPP) ◾Clickjacking ◾CORS Misconfiguration ◾Sensitive Data Exposure ◾Session Fixation Read the post: Installation git clone cd TerminatorZ chmod +x ./TerminatorZ ⁠#securityassessments #pentesting #bugbounty #hacking #infosec #informationsecurity #cybersecurity #offensivesecurity #redteam

Offensive Security Tool: TerminatorZ TerminatorZ is developed by Chris Abou-Chabké from Black Hat Ethical Hacking and is an efficient web security tool designed to scan for potential vulnerabilities in your web applications. It uses a combination of advanced techniques and popular tools like 'waybackurls' and 'curl', to perform passive and quick scans, providing a rapid overview of potential issues. The results are displayed in an easy-to-read format in the terminal, with only the vulnerable findings saved for further investigation. 🟢New Version 2.0 Released! This update includes 8 NEW Proofs of Concept (POCs), bringing the total to 24 POCs, along with several other enhancements. ➡️New POCs: ◾File Upload Vulnerability ◾Command Injection ◾Host Header Injection ◾HTTP Parameter Pollution (HPP) ◾Clickjacking ◾CORS Misconfiguration ◾Sensitive Data Exposure ◾Session Fixation Read the post: Installation git clone cd TerminatorZ chmod +x ./TerminatorZ ⁠#securityassessments #pentesting #bugbounty #hacking #infosec #informationsecurity #cybersecurity #offensivesecurity #redteam

X

77,333 次观看 • 1 年前

One of the most basic ways to look for SQL injection vulns using Github Code Search 👇

One of the most basic ways to look for SQL injection vulns using Github Code Search 👇

Luke Stephens (hakluke)

115,149 次观看 • 2 年前

Race Condition + Host Header Injection + Redis(Cache)= Zero Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBounty

Race Condition + Host Header Injection + Redis(Cache)= Zero Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBounty

Sina

24,247 次观看 • 1 年前

Kraken A powerful Python-based tool designed to centralize and streamline brute-forcing tasks. Kraken provides a suite of tools for #cybersecurity professionals to efficiently perform brute-force attacks across various protocols and services. #bugbounty

Kraken A powerful Python-based tool designed to centralize and streamline brute-forcing tasks. Kraken provides a suite of tools for #cybersecurity professionals to efficiently perform brute-force attacks across various protocols and services. #bugbounty

HackGit

46,005 次观看 • 2 年前

URL validation holding you back? Don't stress, we've got your back! Our URL Validation Bypass Cheat Sheet has 200+ Payloads for all occasions! Check it out: #burpsuite #hacking #bugbounty #pentesting #cybersecurity

URL validation holding you back? Don't stress, we've got your back! Our URL Validation Bypass Cheat Sheet has 200+ Payloads for all occasions! Check it out: #burpsuite #hacking #bugbounty #pentesting #cybersecurity

Web Security Academy

34,497 次观看 • 1 年前

*** KNOXSS GIVEAWAY June 2025 *** Directions: 1. Like 2. Share 3. Be a follower Prize: KNOXSS Pro for 1 Month Results: June 10th Number of Winners: 3 Good luck! 😀 - #XSS for pros. #BugBounty #PenTesting

* KNOXSS GIVEAWAY June 2025 * Directions: 1. Like 2. Share 3. Be a follower Prize: KNOXSS Pro for 1 Month Results: June 10th Number of Winners: 3 Good luck! 😀 - #XSS for pros. #BugBounty #PenTesting

KNOXSS

21,879 次观看 • 1 年前

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty

HackGit

27,096 次观看 • 2 年前

GOODBYE TO CYBERSECURITY! Someone just open-sourced an arsenal of AI hacking tools. Not one. Not ten. Hundreds. Inside the repository: • Jailbreak frameworks for LLMs • Prompt injection testing tools • AI red team agents • Model extraction utilities • Supply chain attack demos • Automated AI pentesting frameworks These are the same categories of tools security researchers use to find vulnerabilities before attackers do. Now anyone can study them. That's both exciting... and terrifying. The biggest threat to AI isn't smarter models. It's insecure ones. If you're building with LLMs and you're not actively testing your prompts, agents, and infrastructure— You're probably shipping vulnerabilities you don't even know exist. Open source is accelerating AI. It's also accelerating AI attacks. Repository link in the comments ↓

GOODBYE TO CYBERSECURITY! Someone just open-sourced an arsenal of AI hacking tools. Not one. Not ten. Hundreds. Inside the repository: • Jailbreak frameworks for LLMs • Prompt injection testing tools • AI red team agents • Model extraction utilities • Supply chain attack demos • Automated AI pentesting frameworks These are the same categories of tools security researchers use to find vulnerabilities before attackers do. Now anyone can study them. That's both exciting... and terrifying. The biggest threat to AI isn't smarter models. It's insecure ones. If you're building with LLMs and you're not actively testing your prompts, agents, and infrastructure— You're probably shipping vulnerabilities you don't even know exist. Open source is accelerating AI. It's also accelerating AI attacks. Repository link in the comments ↓

Shruti Codes

126,325 次观看 • 1 个月前

Beta testing for Wonder Studio on 3D software is already underway! It outshines any video-to-video tool, delivering fantastic results with precise control!

Beta testing for Wonder Studio on 3D software is already underway! It outshines any video-to-video tool, delivering fantastic results with precise control!

el.cine

45,240 次观看 • 1 年前

DJI Dock 3 and FlightHub 2 enable 24/7 automated drone patrols, live multi-drone streaming, secure operations, and cloud-based 3D modeling for smarter remote monitoring. #djienterprise #flighthub2

DJI Dock 3 and FlightHub 2 enable 24/7 automated drone patrols, live multi-drone streaming, secure operations, and cloud-based 3D modeling for smarter remote monitoring. #djienterprise #flighthub2

DJI Enterprise

15,109 次观看 • 11 个月前

SCOTUS ruled 6-3 that race-based redistricting is unconstitutional. Democrats could lose up to 19 seats as "fair maps" move toward being race-blind. It’s time to stop using race as a political tool. Should Southern states start redrawing maps now? A. Yes B. No

SCOTUS ruled 6-3 that race-based redistricting is unconstitutional. Democrats could lose up to 19 seats as "fair maps" move toward being race-blind. It’s time to stop using race as a political tool. Should Southern states start redrawing maps now? A. Yes B. No

𝔉🅰𝒏 Karoline Leavitt

14,828 次观看 • 4 个月前

Ukrainian attack drones struck Belgorod State Technological University overnight. The targeted building housed Russian drone development, testing and operator training. The university had also worked on an automated UAV control system based on the Russian-made Milandr microprocessor. Footage showed a large fire, while the development center reportedly suffered significant damage. #Ukraine

Ukrainian attack drones struck Belgorod State Technological University overnight. The targeted building housed Russian drone development, testing and operator training. The university had also worked on an automated UAV control system based on the Russian-made Milandr microprocessor. Footage showed a large fire, while the development center reportedly suffered significant damage. #Ukraine

NOELREPORTS 🇪🇺 🇺🇦

48,845 次观看 • 1 个月前

Free tool: check out Rokoko's browser-based #AI #motioncapture tool Rokoko Vision The app - the new version of Rokoko Video - extracts full-body #animation from video in FBX format. Paying users can use two cameras for more accuracy #gamedev #VFX

Free tool: check out Rokoko's browser-based #AI #motioncapture tool Rokoko Vision The app - the new version of Rokoko Video - extracts full-body #animation from video in FBX format. Paying users can use two cameras for more accuracy #gamedev #VFX

CG Channel

51,649 次观看 • 3 年前

Tool testing in the stock. The cat/dog grooming gloves are actually very effective for tickling! #tickling #挠脚心 #留学生 #玉足 #foottickling #tk #footfetish #tickle #挠痒痒

Tool testing in the stock. The cat/dog grooming gloves are actually very effective for tickling! #tickling #挠脚心 #留学生 #玉足 #foottickling #tk #footfetish #tickle #挠痒痒

Lovethefj

21,028 次观看 • 6 个月前