Загрузка видео...

Не удалось загрузить видео

Возникла проблема при загрузке этого видео. Это может быть связано с временными проблемами сети или видео может быть недоступно.

На главную

How did I test the IDOR vulnerability that leads to all user Data leakage? 1:Change the /me endpoint to /users. 2.Change the GET method to the POST method. 3.Add the Content-Type: application/json header. 4.Add this payload to the HTTP request body. {"ids":["1"]} #bugbountytips

Aydin Naserifard

1,737 subscribers

41,448 просмотров • 3 лет назад •via X (Twitter)

Наука и технологии Образование #bugbountytips

Anya Rossi• Live Now

Private livecam show

Комментарии: 8

Фото профиля st0x_r0

st0x_r03 лет назад

Hey bro, how did you find out about this loophole?🤔🤔

Фото профиля Aydin Naserifard

Aydin Naserifard3 лет назад

the rest, you know. Just for point number 4, there was no ids parameter, which should have been seen in the response with the /users or /me endpoints. I tried the hit-and-trial method.

Фото профиля ashu (logic-cracker)

ashu (logic-cracker)1 год назад

reallly nice thank you bro really appreaciated .........

Фото профиля 0xm1racle

0xm1racle3 лет назад

Im curious how this vulnerability occured

Фото профиля Aydin Naserifard

Aydin Naserifard3 лет назад

the rest, you know. Just for point number 4, there was no ids parameter, which should have been seen in the response with the /users endpoint. I tried the hit-and-trial method.

Фото профиля Md. Amin Ullah Sheikh

Md. Amin Ullah Sheikh3 лет назад

Great bro

Фото профиля huntk1ng

huntk1ng3 лет назад

@SaveToNotion #tweets #idor

Фото профиля tjmald

tjmald3 лет назад

@SaveToNotion #Tweet #idor

Похожие видео

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

Web Security Academy

26,360 просмотров • 1 год назад

SAMSUNG USER I FOUND A WAY TO EMBED VIDEO 😭😭😭 1. click post video 2. change the ' to twitter 3. post

SAMSUNG USER I FOUND A WAY TO EMBED VIDEO 😭😭😭 1. click post video 2. change the ' to twitter 3. post

red 🍿 dbte era

1,153,639 просмотров • 2 месяцев назад

The method is simple: 1 Start with simple ingredients. 2 Build a brand people trust over decades. 3 Sell company to a financial party that maximizes profit over all. 4 Slowly over time add ingredients that hyper-palliative, addictive and injurious to health. Taste test:

Brian Roemmele

110,960 просмотров • 1 год назад

You can turn on the "Agent mode" of Gemini Code Assist to make it 10x better This enables Gemini to use tools and even MCPs: 1. Press Ctrl/Cmd+Shift+P 2. Type "Open User Settings (JSON)" and select it 3. Add this line to the file: "geminicodeassist.updateChannel": "Insiders" 4. Save and click on the reload button That's it!

You can turn on the "Agent mode" of Gemini Code Assist to make it 10x better This enables Gemini to use tools and even MCPs: 1. Press Ctrl/Cmd+Shift+P 2. Type "Open User Settings (JSON)" and select it 3. Add this line to the file: "geminicodeassist.updateChannel": "Insiders" 4. Save and click on the reload button That's it!

Paul Couvert

143,760 просмотров • 1 год назад

Did you know that you can change an image by asking Grok imagine ? In the example, I made two changes: 1. I asked to change the background. 2. I asked to change the eye color.

Did you know that you can change an image by asking Grok imagine ? In the example, I made two changes: 1. I asked to change the background. 2. I asked to change the eye color.

Déborah

1,657,812 просмотров • 1 год назад

How to “fix” the Spotify logo in iOS 1. Download the logo 2. Open Shortcuts 3. Click + to add a new 4. Add the Open (App) action 5. On the (App) and select Spotify 6. Dropdown menu > Rename 7. Dropdown menu > Add To Home Screen 8. Switch to Image and select the downloaded photo

éric salinas 💜✝️

35,188 просмотров • 2 месяцев назад

In 1986, Brian Tracy reveals the method that allows you to bend reality itself: “If you want to change your life, change your. . .”

In 1986, Brian Tracy reveals the method that allows you to bend reality itself: “If you want to change your life, change your. . .”

GrindBuddy

86,884 просмотров • 1 год назад

A new toolbox loading method will be added to etaHEN 2.1B, this method should be 20x more stable than the current method and will only take up to 10 secs to re-add the toolbox WITH kstuff active, down from 2 mins. here's a preview on 4.03

A new toolbox loading method will be added to etaHEN 2.1B, this method should be 20x more stable than the current method and will only take up to 10 secs to re-add the toolbox WITH kstuff active, down from 2 mins. here's a preview on 4.03

LM

21,212 просмотров • 1 год назад

Use mpp dot dev guides upgrade-x402.md as reference. Add mppx to my existing x402 server. Use the Tempo payment method with USDC. Keep the same pricing and route structure. Add mppx.charge to each paid endpoint. Point out areas where I could benefit from adding sessions.

Use mpp dot dev guides upgrade-x402.md as reference. Add mppx to my existing x402 server. Use the Tempo payment method with USDC. Keep the same pricing and route structure. Add mppx.charge to each paid endpoint. Point out areas where I could benefit from adding sessions.

Georgios Konstantopoulos

16,319 просмотров • 4 месяцев назад

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,718 просмотров • 1 год назад

They didn’t want to add deadzones to Black ops 1 & 2… so I did. Link in the replies!

They didn’t want to add deadzones to Black ops 1 & 2… so I did. Link in the replies!

Rara

157,515 просмотров • 1 месяц назад

Reporter: The US company could change the algorithm to push different content? Vance: The US company will have control on how the algorithm pushes content to users.

Reporter: The US company could change the algorithm to push different content? Vance: The US company will have control on how the algorithm pushes content to users.

Acyn

46,703 просмотров • 10 месяцев назад

This is the fastest way to edit any pictures using English. This is the first app I've seen supporting voice-controlled AI editing. I'm using the Genspark mobile app here, with their newly released Photo Genius feature. You can see how fast this works in the video below. Here is what I did: 1. I asked the agent to change my outfit to a suit 2. I asked it to make me wear a baseball hat 3. I asked it to make me smile 4. I asked it to change the background 5. I asked to show an old lady walking by

This is the fastest way to edit any pictures using English. This is the first app I've seen supporting voice-controlled AI editing. I'm using the Genspark mobile app here, with their newly released Photo Genius feature. You can see how fast this works in the video below. Here is what I did: 1. I asked the agent to change my outfit to a suit 2. I asked it to make me wear a baseball hat 3. I asked it to make me smile 4. I asked it to change the background 5. I asked to show an old lady walking by

Santiago

90,760 просмотров • 10 месяцев назад

How to manually check for CL.TE Request Smuggling Vulnerabilities: 1️⃣ See if a GET request accepts POST 2️⃣ See if it accepts HTTP/1 3️⃣ Disable "Update Content-Length" 4️⃣ Send with CL & TE headers: POST / HTTP/1.1 Host: Content-Length: 6 Transfer-Encoding: chunked 0 G 5️⃣ Send request twice. If you receive a response like "Unrecognized method GPOST", you've just confirmed a CL.TE vulnerability! Try this out for yourself in our CL.TE lab:

How to manually check for CL.TE Request Smuggling Vulnerabilities: 1️⃣ See if a GET request accepts POST 2️⃣ See if it accepts HTTP/1 3️⃣ Disable "Update Content-Length" 4️⃣ Send with CL & TE headers: POST / HTTP/1.1 Host: Content-Length: 6 Transfer-Encoding: chunked 0 G 5️⃣ Send request twice. If you receive a response like "Unrecognized method GPOST", you've just confirmed a CL.TE vulnerability! Try this out for yourself in our CL.TE lab:

Web Security Academy

27,978 просмотров • 1 год назад

Still using Game Design Documents as a solo indie dev? This is how the cool kids are designing indie games now: 1. Add your game to the database 2. Pick from references 3. Add your twist 4. Download the Godot assets 5. Profit Get the Ludonaut Gameplay Library, link below:

Still using Game Design Documents as a solo indie dev? This is how the cool kids are designing indie games now: 1. Add your game to the database 2. Pick from references 3. Add your twist 4. Download the Godot assets 5. Profit Get the Ludonaut Gameplay Library, link below:

Ludonauta

457,086 просмотров • 1 месяц назад

this is the EASIEST method to build a viral app on your first try. 1. search for existing apps on t:)ktok 2. look at viral vids 3. build the viral feature 4. add your own twist after i’ve seen the SAME viral feature in 3 different couple apps today. are you doing this?

this is the EASIEST method to build a viral app on your first try. 1. search for existing apps on t:)ktok 2. look at viral vids 3. build the viral feature 4. add your own twist after i’ve seen the SAME viral feature in 3 different couple apps today. are you doing this?

Simone Canc

76,085 просмотров • 8 месяцев назад

This is the basic practice method that helped me get to a plus handicap

This is the basic practice method that helped me get to a plus handicap

Jon Sherman

70,765 просмотров • 1 год назад

Why did the Auschwitz death toll change from 4 million to 1 million?

Why did the Auschwitz death toll change from 4 million to 1 million?

Noah’s Ark 🚢

22,285 просмотров • 3 месяцев назад