Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

How did I test the IDOR vulnerability that leads to all user Data leakage? 1:Change the /me endpoint to /users. 2.Change the GET method to the POST method. 3.Add the Content-Type: application/json header. 4.Add this payload to the HTTP request body. {"ids":["1"]} #bugbountytips

Aydin Naserifard

1,740 subscribers

41,434 Aufrufe • vor 3 Jahren •via X (Twitter)

Wissenschaft & Technologie Bildung #bugbountytips

Anya Rossi• Live Now

Private livecam show

8 Kommentare

Profilbild von st0x_r0

st0x_r0vor 3 Jahren

Hey bro, how did you find out about this loophole?🤔🤔

Profilbild von Aydin Naserifard

Aydin Naserifardvor 3 Jahren

the rest, you know. Just for point number 4, there was no ids parameter, which should have been seen in the response with the /users or /me endpoints. I tried the hit-and-trial method.

Profilbild von ashu (logic-cracker)

ashu (logic-cracker)vor 1 Jahr

reallly nice thank you bro really appreaciated .........

Profilbild von 0xm1racle

0xm1raclevor 3 Jahren

Im curious how this vulnerability occured

Profilbild von Aydin Naserifard

Aydin Naserifardvor 3 Jahren

the rest, you know. Just for point number 4, there was no ids parameter, which should have been seen in the response with the /users endpoint. I tried the hit-and-trial method.

Profilbild von Md. Amin Ullah Sheikh

Md. Amin Ullah Sheikhvor 3 Jahren

Great bro

Profilbild von huntk1ng

huntk1ngvor 3 Jahren

@SaveToNotion #tweets #idor

Profilbild von tjmald

tjmaldvor 3 Jahren

@SaveToNotion #Tweet #idor

Ähnliche Videos

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

Web Security Academy

26,242 Aufrufe • vor 1 Jahr

SAMSUNG USER I FOUND A WAY TO EMBED VIDEO 😭😭😭 1. click post video 2. change the ' to twitter 3. post

SAMSUNG USER I FOUND A WAY TO EMBED VIDEO 😭😭😭 1. click post video 2. change the ' to twitter 3. post

red 🍿 dbte era

1,150,407 Aufrufe • vor 1 Monat

The method is simple: 1 Start with simple ingredients. 2 Build a brand people trust over decades. 3 Sell company to a financial party that maximizes profit over all. 4 Slowly over time add ingredients that hyper-palliative, addictive and injurious to health. Taste test:

Brian Roemmele

110,948 Aufrufe • vor 1 Jahr

You can turn on the "Agent mode" of Gemini Code Assist to make it 10x better This enables Gemini to use tools and even MCPs: 1. Press Ctrl/Cmd+Shift+P 2. Type "Open User Settings (JSON)" and select it 3. Add this line to the file: "geminicodeassist.updateChannel": "Insiders" 4. Save and click on the reload button That's it!

You can turn on the "Agent mode" of Gemini Code Assist to make it 10x better This enables Gemini to use tools and even MCPs: 1. Press Ctrl/Cmd+Shift+P 2. Type "Open User Settings (JSON)" and select it 3. Add this line to the file: "geminicodeassist.updateChannel": "Insiders" 4. Save and click on the reload button That's it!

Paul Couvert

143,760 Aufrufe • vor 1 Jahr

Did you know that you can change an image by asking Grok imagine ? In the example, I made two changes: 1. I asked to change the background. 2. I asked to change the eye color.

Did you know that you can change an image by asking Grok imagine ? In the example, I made two changes: 1. I asked to change the background. 2. I asked to change the eye color.

Déborah

1,657,785 Aufrufe • vor 11 Monaten

How to “fix” the Spotify logo in iOS 1. Download the logo 2. Open Shortcuts 3. Click + to add a new 4. Add the Open (App) action 5. On the (App) and select Spotify 6. Dropdown menu > Rename 7. Dropdown menu > Add To Home Screen 8. Switch to Image and select the downloaded photo

éric salinas 💜✝️

35,188 Aufrufe • vor 2 Monaten

In 1986, Brian Tracy reveals the method that allows you to bend reality itself: “If you want to change your life, change your. . .”

In 1986, Brian Tracy reveals the method that allows you to bend reality itself: “If you want to change your life, change your. . .”

GrindBuddy

86,673 Aufrufe • vor 1 Jahr

A new toolbox loading method will be added to etaHEN 2.1B, this method should be 20x more stable than the current method and will only take up to 10 secs to re-add the toolbox WITH kstuff active, down from 2 mins. here's a preview on 4.03

A new toolbox loading method will be added to etaHEN 2.1B, this method should be 20x more stable than the current method and will only take up to 10 secs to re-add the toolbox WITH kstuff active, down from 2 mins. here's a preview on 4.03

LM

21,212 Aufrufe • vor 1 Jahr

Use mpp dot dev guides upgrade-x402.md as reference. Add mppx to my existing x402 server. Use the Tempo payment method with USDC. Keep the same pricing and route structure. Add mppx.charge to each paid endpoint. Point out areas where I could benefit from adding sessions.

Use mpp dot dev guides upgrade-x402.md as reference. Add mppx to my existing x402 server. Use the Tempo payment method with USDC. Keep the same pricing and route structure. Add mppx.charge to each paid endpoint. Point out areas where I could benefit from adding sessions.

Georgios Konstantopoulos

16,319 Aufrufe • vor 3 Monaten

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,682 Aufrufe • vor 1 Jahr

They didn’t want to add deadzones to Black ops 1 & 2… so I did. Link in the replies!

They didn’t want to add deadzones to Black ops 1 & 2… so I did. Link in the replies!

Rara

155,846 Aufrufe • vor 21 Tagen

Reporter: The US company could change the algorithm to push different content? Vance: The US company will have control on how the algorithm pushes content to users.

Reporter: The US company could change the algorithm to push different content? Vance: The US company will have control on how the algorithm pushes content to users.

Acyn

46,703 Aufrufe • vor 10 Monaten

This is the fastest way to edit any pictures using English. This is the first app I've seen supporting voice-controlled AI editing. I'm using the Genspark mobile app here, with their newly released Photo Genius feature. You can see how fast this works in the video below. Here is what I did: 1. I asked the agent to change my outfit to a suit 2. I asked it to make me wear a baseball hat 3. I asked it to make me smile 4. I asked it to change the background 5. I asked to show an old lady walking by

This is the fastest way to edit any pictures using English. This is the first app I've seen supporting voice-controlled AI editing. I'm using the Genspark mobile app here, with their newly released Photo Genius feature. You can see how fast this works in the video below. Here is what I did: 1. I asked the agent to change my outfit to a suit 2. I asked it to make me wear a baseball hat 3. I asked it to make me smile 4. I asked it to change the background 5. I asked to show an old lady walking by

Santiago

90,760 Aufrufe • vor 10 Monaten

How to manually check for CL.TE Request Smuggling Vulnerabilities: 1️⃣ See if a GET request accepts POST 2️⃣ See if it accepts HTTP/1 3️⃣ Disable "Update Content-Length" 4️⃣ Send with CL & TE headers: POST / HTTP/1.1 Host: Content-Length: 6 Transfer-Encoding: chunked 0 G 5️⃣ Send request twice. If you receive a response like "Unrecognized method GPOST", you've just confirmed a CL.TE vulnerability! Try this out for yourself in our CL.TE lab:

How to manually check for CL.TE Request Smuggling Vulnerabilities: 1️⃣ See if a GET request accepts POST 2️⃣ See if it accepts HTTP/1 3️⃣ Disable "Update Content-Length" 4️⃣ Send with CL & TE headers: POST / HTTP/1.1 Host: Content-Length: 6 Transfer-Encoding: chunked 0 G 5️⃣ Send request twice. If you receive a response like "Unrecognized method GPOST", you've just confirmed a CL.TE vulnerability! Try this out for yourself in our CL.TE lab:

Web Security Academy

27,902 Aufrufe • vor 11 Monaten

Still using Game Design Documents as a solo indie dev? This is how the cool kids are designing indie games now: 1. Add your game to the database 2. Pick from references 3. Add your twist 4. Download the Godot assets 5. Profit Get the Ludonaut Gameplay Library, link below:

Still using Game Design Documents as a solo indie dev? This is how the cool kids are designing indie games now: 1. Add your game to the database 2. Pick from references 3. Add your twist 4. Download the Godot assets 5. Profit Get the Ludonaut Gameplay Library, link below:

Ludonauta

455,185 Aufrufe • vor 1 Monat

This is the basic practice method that helped me get to a plus handicap

This is the basic practice method that helped me get to a plus handicap

Jon Sherman

70,765 Aufrufe • vor 1 Jahr

this is the EASIEST method to build a viral app on your first try. 1. search for existing apps on t:)ktok 2. look at viral vids 3. build the viral feature 4. add your own twist after i’ve seen the SAME viral feature in 3 different couple apps today. are you doing this?

this is the EASIEST method to build a viral app on your first try. 1. search for existing apps on t:)ktok 2. look at viral vids 3. build the viral feature 4. add your own twist after i’ve seen the SAME viral feature in 3 different couple apps today. are you doing this?

Simone Canc

76,085 Aufrufe • vor 7 Monaten

Why did the Auschwitz death toll change from 4 million to 1 million?

Why did the Auschwitz death toll change from 4 million to 1 million?

Noah’s Ark 🚢

22,285 Aufrufe • vor 3 Monaten