Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

How to manually check for CL.TE Request Smuggling Vulnerabilities: 1️⃣ See if a GET request accepts POST 2️⃣ See if it accepts HTTP/1 3️⃣ Disable "Update Content-Length" 4️⃣ Send with CL & TE headers: POST / HTTP/1.1 Host: Content-Length: 6 Transfer-Encoding: chunked 0 G 5️⃣ Send request twice. If... show more

Web Security Academy

140,553 subscribers

27,902 Aufrufe • vor 11 Monaten •via X (Twitter)

Gesundheit & Wellness Wissenschaft & Technologie Bildung

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

Web Security Academy

26,242 Aufrufe • vor 1 Jahr

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,639 Aufrufe • vor 1 Jahr

$How to Find Path Delimiter Issues with Burp Suite Intruder Sometimes web servers treat special characters (like ; or ?) differently in URLs. This can lead to security issues like web cache deception or access control problems. Here's how you can test for path delimiter discrepancies: 1️⃣ Capture the Request Find a request you want to test GET /my-account HTTP/2 2️⃣ Right click the request and "Send to Intruder". In Intruder, highlight add a new position after /my-account followed by abc. It should look like this: GET /my-account§§abc HTTP/2 Attack Type = Sniper (only changing one spot). Payload: Paste a list of special characters, like this: ! # $ % & ' ( ) * + , - . / : ; = ? @ [ \ ] _ ~ ... A full list of delimiters can be found here: 3️⃣ Start the Attack Press Start Attack. Look at the Status, Length, and Response columns. Watch for differences (like bigger/smaller pages, changes to status code or different behavior) and if you notice something different then you've likely found a delimiter discrepancy! 🎉 Why is this important? When special characters confuse the server or cache, you might find: 🔸 Web cache deception: Caching personal pages by accident 🔸 Access bypass: Skipping security checks 🔸 Leaked info: Seeing data you shouldn't Try this lab for yourself and dive even deeper into how to exploit this when you find it: #BugBounty #WebSecurity #BurpSuite #EthicalHacking #Cybersecurity$

How to Find Path Delimiter Issues with Burp Suite Intruder Sometimes web servers treat special characters (like ; or ?) differently in URLs. This can lead to security issues like web cache deception or access control problems. Here's how you can test for path delimiter discrepancies: 1️⃣ Capture the Request Find a request you want to test GET /my-account HTTP/2 2️⃣ Right click the request and "Send to Intruder". In Intruder, highlight add a new position after /my-account followed by abc. It should look like this: GET /my-account§§abc HTTP/2 Attack Type = Sniper (only changing one spot). Payload: Paste a list of special characters, like this: ! # $ % & ' ( ) * + , - . / : ; = ? @ [ \ ] _ ~ ... A full list of delimiters can be found here: 3️⃣ Start the Attack Press Start Attack. Look at the Status, Length, and Response columns. Watch for differences (like bigger/smaller pages, changes to status code or different behavior) and if you notice something different then you've likely found a delimiter discrepancy! 🎉 Why is this important? When special characters confuse the server or cache, you might find: 🔸 Web cache deception: Caching personal pages by accident 🔸 Access bypass: Skipping security checks 🔸 Leaked info: Seeing data you shouldn't Try this lab for yourself and dive even deeper into how to exploit this when you find it: #BugBounty #WebSecurity #BurpSuite #EthicalHacking #Cybersecurity

Web Security Academy

18,152 Aufrufe • vor 1 Jahr

Going to geek out a little so this post isn't for everyone... Building and XRP Decentralized Exchange with Token Creation with the help of AI to see how it goes. Day 1 This starts with automatically creating a wallet on the XRPL Testnet and funds it with 1000 XRP from the testnet faucet. Receive XRP Send XRP Create a new Token on the XRPL Testnet Send Tokens Set Trustlines Everything verified on the live XRPL testnet blockchain. Going to work on the DEX next. Follow along if you want to see the progress.

Going to geek out a little so this post isn't for everyone... Building and XRP Decentralized Exchange with Token Creation with the help of AI to see how it goes. Day 1 This starts with automatically creating a wallet on the XRPL Testnet and funds it with 1000 XRP from the testnet faucet. Receive XRP Send XRP Create a new Token on the XRPL Testnet Send Tokens Set Trustlines Everything verified on the live XRPL testnet blockchain. Going to work on the DEX next. Follow along if you want to see the progress.

Vincent Kennedy

101,872 Aufrufe • vor 1 Jahr

If you always don’t know what to post‼️ If your contents don’t always ‼️ If you always feel Burn out ‼️ This Video will Save you 100+ hours of work when it comes to creating content I just finished creating all my contents for next week and in this Video I walked you step by Step How to Leverage AI to do the Heavy lifting and See Results with Contents This is a must Watch for Creators that want to take their career serious, Save time and See Results Retweet + Bookmark for Later ❤️

If you always don’t know what to post‼️ If your contents don’t always ‼️ If you always feel Burn out ‼️ This Video will Save you 100+ hours of work when it comes to creating content I just finished creating all my contents for next week and in this Video I walked you step by Step How to Leverage AI to do the Heavy lifting and See Results with Contents This is a must Watch for Creators that want to take their career serious, Save time and See Results Retweet + Bookmark for Later ❤️

PARELLA™🦋(Web3righteousness)🪽

42,110 Aufrufe • vor 6 Monaten

My agent is now paying for its own data. No API key. No account. No credit card. Check the video I recorded. This uses the x402 open protocol built by Coinbase, along with a simple skill. This is an open protocol governed by the Linux Foundation. To complete a goal, an agent can now search for an actor on the Apify Store, pay for it, and use it without any human intervention. The way it works is pretty simple: 1. Your agent finds an Actor it wants to use 2. It sends a request 3. The Actor sends back an HTTP 402 "Payment Required" response 4. Agent authorizes payment from a wallet in USDC on Base 5. The Actor runs 6. User receives the result The model is pay-as-you-go: the agent authorizes a spending ceiling, pays only for usage, and the remaining balance is automatically settled. This brings an entire marketplace of AI tools into the agentic economy. Here is the skill you need. Add it to your agent, and it will take care of everything for you: If you want to know how this works, including what you can do with $1, read this post: Thanks to the Apify team for partnering with me on this post.

My agent is now paying for its own data. No API key. No account. No credit card. Check the video I recorded. This uses the x402 open protocol built by Coinbase, along with a simple skill. This is an open protocol governed by the Linux Foundation. To complete a goal, an agent can now search for an actor on the Apify Store, pay for it, and use it without any human intervention. The way it works is pretty simple: 1. Your agent finds an Actor it wants to use 2. It sends a request 3. The Actor sends back an HTTP 402 "Payment Required" response 4. Agent authorizes payment from a wallet in USDC on Base 5. The Actor runs 6. User receives the result The model is pay-as-you-go: the agent authorizes a spending ceiling, pays only for usage, and the remaining balance is automatically settled. This brings an entire marketplace of AI tools into the agentic economy. Here is the skill you need. Add it to your agent, and it will take care of everything for you: If you want to know how this works, including what you can do with $1, read this post: Thanks to the Apify team for partnering with me on this post.

Santiago

26,413 Aufrufe • vor 13 Tagen

🚨Urgent Alert: X Glitch or Hack? Fake Pro-Israel Posts Appearing on Accounts—But They're NOT Real. If you're seeing "pro-Israel" content from me it's NOT ME. or others that doesn't align with our views, STOP—it's manipulated (allegedly). Click through, and it redirects to the ACTUAL post on unrelated topics. This isn't a simple bug; it's algorithmic interference putting words in our mouths. If you see any cases of this happening I want you to screenshot it and send it to me right away. Elon Musk—this demands investigation. How deep does the compromise go? Have you noticed this happening to you as well? From: RyanMatta 🇺🇸 🦅 FOLLOW Him for updates

🚨Urgent Alert: X Glitch or Hack? Fake Pro-Israel Posts Appearing on Accounts—But They're NOT Real. If you're seeing "pro-Israel" content from me it's NOT ME. or others that doesn't align with our views, STOP—it's manipulated (allegedly). Click through, and it redirects to the ACTUAL post on unrelated topics. This isn't a simple bug; it's algorithmic interference putting words in our mouths. If you see any cases of this happening I want you to screenshot it and send it to me right away. Elon Musk—this demands investigation. How deep does the compromise go? Have you noticed this happening to you as well? From: RyanMatta 🇺🇸 🦅 FOLLOW Him for updates

Project Constitution

19,253 Aufrufe • vor 8 Monaten

📢 500,000 $PIEVERSE Red Packet Campaign Airdrop ~ part 2 pieverse launched the OKX red packet campaign with where users can send/receive packets to climb the leaderboard for bigger rewards 🤝 If you're new, first complete the setup guide (Part-1): Now here’s how to send & receive red packets 👇 🔗 go to: 1️⃣ bridge funds to x layer you’ll need: – $USDT0 on Xx layer – small amount of $OKB for gas Steps: – open rabby wallet – bridge ETH/USDT from arbitrum or base to x layer – bridge small $OKB amount for gas fee (~$0.1–$0.2 enough) – then bridge your $USDT0 (bridging may take 10–20 mins) 2️⃣ deposit into your claw – open Pieverse web – open your claw → manage – copy your deposit address – send $USDT0 there from rabby – wait & refresh You can withdraw anytime later 🤝 3️⃣ send red packets – open the pieverse telegram bot use this prompt: "send a USDT0 red packet to .pie for USDT0 on x layer." Example: send a $USDT0 red packet to smolwyne.pie for 10 $USDT0 on X Layer. – send the prompt in bot – wait for confirmation – done 👀 4️⃣ claim received packets – If someone sends you packets, the TG bot will notify you – use the claim command from the bot: "help me claim all pending redpackets" – open your claw & check balance ⚠️ claim in 24hours, otherwise it’s will expired You can: – withdraw funds – or resend packets to others 5️⃣ how to rank higher? – send packets to UNIQUE addresses – avoid repeatedly sending same address ⚠️ If you don’t have friends to exchange with, you can temporarily use my IDs: – smolwyne.pie (send today) – ishika.pie (send todey) 6️⃣ check leaderboard – open okx campaign page – check leaderboard section Campaign may run for around 10 more days 👀 7️⃣ withdraw funds after finishing: – withdraw $USDT0 back to rabby – bridge back from x layer → arbitrum/base – all done ✅ So basically: send/receive packets → rank up leaderboard → become eligible for bigger $PIEVERSE rewards. If anything is confusing, comment below 👇

📢 500,000 $PIEVERSE Red Packet Campaign Airdrop ~ part 2 pieverse launched the OKX red packet campaign with where users can send/receive packets to climb the leaderboard for bigger rewards 🤝 If you're new, first complete the setup guide (Part-1): Now here’s how to send & receive red packets 👇 🔗 go to: 1️⃣ bridge funds to x layer you’ll need: – $USDT0 on Xx layer – small amount of $OKB for gas Steps: – open rabby wallet – bridge ETH/USDT from arbitrum or base to x layer – bridge small $OKB amount for gas fee (~$0.1–$0.2 enough) – then bridge your $USDT0 (bridging may take 10–20 mins) 2️⃣ deposit into your claw – open Pieverse web – open your claw → manage – copy your deposit address – send $USDT0 there from rabby – wait & refresh You can withdraw anytime later 🤝 3️⃣ send red packets – open the pieverse telegram bot use this prompt: "send a USDT0 red packet to .pie for USDT0 on x layer." Example: send a $USDT0 red packet to smolwyne.pie for 10 $USDT0 on X Layer. – send the prompt in bot – wait for confirmation – done 👀 4️⃣ claim received packets – If someone sends you packets, the TG bot will notify you – use the claim command from the bot: "help me claim all pending redpackets" – open your claw & check balance ⚠️ claim in 24hours, otherwise it’s will expired You can: – withdraw funds – or resend packets to others 5️⃣ how to rank higher? – send packets to UNIQUE addresses – avoid repeatedly sending same address ⚠️ If you don’t have friends to exchange with, you can temporarily use my IDs: – smolwyne.pie (send today) – ishika.pie (send todey) 6️⃣ check leaderboard – open okx campaign page – check leaderboard section Campaign may run for around 10 more days 👀 7️⃣ withdraw funds after finishing: – withdraw $USDT0 back to rabby – bridge back from x layer → arbitrum/base – all done ✅ So basically: send/receive packets → rank up leaderboard → become eligible for bigger $PIEVERSE rewards. If anything is confusing, comment below 👇

wyne

23,740 Aufrufe • vor 1 Monat

🌟 Big News for 2025 🌟 Launching Marbella Casa Creative has been one of the most exciting and challenging projects so far, I’m proud to finally share it with you. Nestled in the heart of Puerto Banús, Marbella, is a vision bought to life. A place where content creators can connect, create, and grow together. Building a creative community that inspires one another and helps everyone reach new heights. This has been a passion project of mine for the longest time. A world-first Content Creators Members-Only Club, designed to give creators everything they need to produce their best work and share it with the world. I’d love for you to follow along, support the journey, and keep an eye out for some amazing events we have coming soon. And if you’re a content creator or influencer who’s as excited about this as I am, send a DM or check out the website to see how we can inspire together. This is just the beginning…

🌟 Big News for 2025 🌟 Launching Marbella Casa Creative has been one of the most exciting and challenging projects so far, I’m proud to finally share it with you. Nestled in the heart of Puerto Banús, Marbella, is a vision bought to life. A place where content creators can connect, create, and grow together. Building a creative community that inspires one another and helps everyone reach new heights. This has been a passion project of mine for the longest time. A world-first Content Creators Members-Only Club, designed to give creators everything they need to produce their best work and share it with the world. I’d love for you to follow along, support the journey, and keep an eye out for some amazing events we have coming soon. And if you’re a content creator or influencer who’s as excited about this as I am, send a DM or check out the website to see how we can inspire together. This is just the beginning…

LukeBarnatt

148,020 Aufrufe • vor 1 Jahr

Introducing The Godfather... (LinkedIn Edition) It sounds ridiculous but posting on LinkedIn changed my life. When I first started, I was a bit lost. My first startup had just failed and I didn't know what to do next. In the past 18 months, it has unlocked more opportunities than anything I've done in my career. I've hit ~400k followers, bootstrapped a SaaS biz to >$500k ARR and made a ton in brand partnerships. It has been a FORCE multiplier for me and I want nothing more than to help others to get the same opportunities. That's why I built Saywhat. Here's how it works: 1/ Sign up and when you login you'll immediately see your first post (based on your target audience) 2/ Our AI writing assistant helps shape your ideas into posts that people actually read 3/ Get feedback from both our AI and our 600+ strong community (drop your posts in our Roast My Post channel) 4/ Join our monthly live sessions where I create posts live and share what's working right now Plus you get access to our full library of post frameworks, carousel/infographic templates, and a community of people who get it. (Because building a content-led business is brutal...) The results so far are pretty good: - Median user sees 130% more impressions in 90 days - Average user gets an 800% increase - Some users have gone from 0 to 100k+ followers Despite what the haters say, it is still early on LinkedIn. It's a 3-year-old social network living inside a 23-year-old company. The opportunity is massive: - 1 BN+ professionals in one place - Less than 1% post consistently - Even fewer do it well If you've read this far, I have a thank you gift for you 👇 I created a LinkedIn starter pack that includes: - 90 mins of video content - How to define your brand positioning - Content frameworks that actually work - The exact system I used to grow to 395k+ followers and close $500k in ARR Comment "Saywhat" and retweet and I'll send you a link to the free pack. P.S. A massive thank you to Henry Hayes for being a phenomenal collaborator on this video. Your facial expressions made it 10x better! 🙌 P.P.S. if you're a company with >$10m ARR looking for more hands on help to win on LinkedIn, send me a DM

Will McTighe

15,945 Aufrufe • vor 10 Monaten

DON'T LET YOUR BITCOIN DIE WITH YOU 💀 ⚰️ Yea look, nobody likes to admit it but we all have to die one day. As I've been talking to people about their self custody lately - both Casa members and not - I hear the same thing over and over. "What happens if I die?" Many people feel pretty good about their bitcoin security for themselves. But their family members often have no idea how to use this stuff. Hardware wallet? Seed phrase stamped on metal? Shamir's secret sharing backups using SD cards, a passphrase, and a treasure hunt through the backyard with a shovel? 😵 We're solving that problem for all Casa members, starting today with Casa Inheritance. A key design principle we kept while building this was to make it as simple as possible for Recipients (your family members that will receive your bitcoin if you pass), while maintaining Casa-level security. An estate transfer is already a stressful time for family, and it can become even more stressful if you add in a crazy treasure hunt to access a fortune in bitcoin. For our basic 3 key vaults, we wanted it to be as easy as using the app. No metal plates, no need to use a hardware wallet, no magic passwords you have to keep track of or else risk messing up the asset transfer. Simplicity is security. So how does it work, in detail? A Vault Owner (Casa member) designates a Recipient (their family or friend) in the Casa app. The Recipient receives an invite to create a free Casa account. The Recipient scans a QR code provided by the Vault Owner, which contains an encrypted version of the owner's mobile key. This encrypted key is only able to be imported by the Recipient's Casa account, and the Recipient can't initially use it or see the vault balance. If the Vault Owner passes away, the Recipient can request access to the vault in their Casa app. This starts a 6 month timer, and sends a ton of notifications every month to the owner. If the owner is still alive, they can reject the request in app. If they are not, the timer will run out. When it does, the Recipient will be able to use the shared mobile key and the request a signature from the Casa Recovery Key for the shared vault. This gives them 2 out of 3 signatures, enough to access the assets. For 5 key vault users, one hardware key is shared with the Recipient. This small increase in friction for Recipients is often worth it for the increased security and resilience of a 5 key vault for larger holdings. To summarize now that you have the details: 1. Share keys and vault access during setup 2. 6 month timelock to ensure no malicious theft 3. Use shared keys and Casa key to access assets Full setup takes less than 5 minutes. Inheritance is one of the biggest problems in self custody today. If you've hodled through years of painful bear markets, you owe it to yourself and your family to not let the reward for that patience go to zero because you didn't have a plan - and we're here to make that easy. Check out the video to see how easy it really is. Like I said earlier this week - Casa is going after major problems in self-custody this year. Check this one off the list ✅. Next one coming sooner than you think 🔥.

DON'T LET YOUR BITCOIN DIE WITH YOU 💀 ⚰️ Yea look, nobody likes to admit it but we all have to die one day. As I've been talking to people about their self custody lately - both Casa members and not - I hear the same thing over and over. "What happens if I die?" Many people feel pretty good about their bitcoin security for themselves. But their family members often have no idea how to use this stuff. Hardware wallet? Seed phrase stamped on metal? Shamir's secret sharing backups using SD cards, a passphrase, and a treasure hunt through the backyard with a shovel? 😵 We're solving that problem for all Casa members, starting today with Casa Inheritance. A key design principle we kept while building this was to make it as simple as possible for Recipients (your family members that will receive your bitcoin if you pass), while maintaining Casa-level security. An estate transfer is already a stressful time for family, and it can become even more stressful if you add in a crazy treasure hunt to access a fortune in bitcoin. For our basic 3 key vaults, we wanted it to be as easy as using the app. No metal plates, no need to use a hardware wallet, no magic passwords you have to keep track of or else risk messing up the asset transfer. Simplicity is security. So how does it work, in detail? A Vault Owner (Casa member) designates a Recipient (their family or friend) in the Casa app. The Recipient receives an invite to create a free Casa account. The Recipient scans a QR code provided by the Vault Owner, which contains an encrypted version of the owner's mobile key. This encrypted key is only able to be imported by the Recipient's Casa account, and the Recipient can't initially use it or see the vault balance. If the Vault Owner passes away, the Recipient can request access to the vault in their Casa app. This starts a 6 month timer, and sends a ton of notifications every month to the owner. If the owner is still alive, they can reject the request in app. If they are not, the timer will run out. When it does, the Recipient will be able to use the shared mobile key and the request a signature from the Casa Recovery Key for the shared vault. This gives them 2 out of 3 signatures, enough to access the assets. For 5 key vault users, one hardware key is shared with the Recipient. This small increase in friction for Recipients is often worth it for the increased security and resilience of a 5 key vault for larger holdings. To summarize now that you have the details: 1. Share keys and vault access during setup 2. 6 month timelock to ensure no malicious theft 3. Use shared keys and Casa key to access assets Full setup takes less than 5 minutes. Inheritance is one of the biggest problems in self custody today. If you've hodled through years of painful bear markets, you owe it to yourself and your family to not let the reward for that patience go to zero because you didn't have a plan - and we're here to make that easy. Check out the video to see how easy it really is. Like I said earlier this week - Casa is going after major problems in self-custody this year. Check this one off the list ✅. Next one coming sooner than you think 🔥.

Nick Neuman

125,739 Aufrufe • vor 2 Jahren

I rebuilt most of OpenClaw's core in a single workflow: - 25 blocks - 29 connections - Short + long-term memory - Multi-channel (Telegram + Slack) Didn't build it manually. Stack is fully open-source. Self-host, run local models, own it end-to-end. Full walkthrough: Chapters: 00:00 - Intro 01:00 - SimClaw in action: planning my day, finding meetings, sending email 04:05 - Long-term memory capability 05:52 - Inside the workflow: how it's wired 12:09 - The plot twist 12:50 - Building an entire workflow using a single prompt 15:42 - Why this is an OS for your AI workforce 17:00 - Try it yourself If you want to see the open-source stack that powers all of this, check out Sim on GitHub and drop a star if you find it useful:

I rebuilt most of OpenClaw's core in a single workflow: - 25 blocks - 29 connections - Short + long-term memory - Multi-channel (Telegram + Slack) Didn't build it manually. Stack is fully open-source. Self-host, run local models, own it end-to-end. Full walkthrough: Chapters: 00:00 - Intro 01:00 - SimClaw in action: planning my day, finding meetings, sending email 04:05 - Long-term memory capability 05:52 - Inside the workflow: how it's wired 12:09 - The plot twist 12:50 - Building an entire workflow using a single prompt 15:42 - Why this is an OS for your AI workforce 17:00 - Try it yourself If you want to see the open-source stack that powers all of this, check out Sim on GitHub and drop a star if you find it useful:

Akshay 🚀

65,291 Aufrufe • vor 2 Monaten

If you want to trick Meta into pushing your content to 10x more people, I have a hack for you. Here's how it works: Post regular organic content, could be a routine video, lifestyle shot, whatever. But in the caption, add something like "We have a guide with our top 10 hair, skin, and nails tips. Comment ‘GUIDE’ and we'll send it to you." The content doesn’t need to mention the guide. All you’re trying to do is incentivize people to comment on your post. Then, when people start commenting "GUIDE," the algorithm sees all that engagement and pushes the post to way more people. And the content gets more reach because Meta thinks it's getting crazy engagement. The strategy works great, but it creates a massive operational problem. Now you've got hundreds of people commenting asking for the guide, and someone has to manually DM each person. That kills the whole strategy. That's where automation comes in. At Obvi we’ve been using Brandwise 🦉 for our Meta ads to handle comment moderation. It’s an AI tool that hides negative comments and keeps things clean. And they just launched DM Campaigns, which automates the entire follow-up process. When someone comments "GUIDE," it automatically sends them the guide via DM AND replies publicly "Check your DMs!" You can set triggers for any keyword, include coupon codes or custom buttons in the DMs, and it tracks revenue if you're on Shopify. So now you can take any piece of content, add a comment incentive to increase reach, and let the automation handle all the follow-up work. It's basically a virality hack that actually converts. And it’s been needed for a long time. Good move by Brandwise 🦉! #Brandwisepartner

If you want to trick Meta into pushing your content to 10x more people, I have a hack for you. Here's how it works: Post regular organic content, could be a routine video, lifestyle shot, whatever. But in the caption, add something like "We have a guide with our top 10 hair, skin, and nails tips. Comment ‘GUIDE’ and we'll send it to you." The content doesn’t need to mention the guide. All you’re trying to do is incentivize people to comment on your post. Then, when people start commenting "GUIDE," the algorithm sees all that engagement and pushes the post to way more people. And the content gets more reach because Meta thinks it's getting crazy engagement. The strategy works great, but it creates a massive operational problem. Now you've got hundreds of people commenting asking for the guide, and someone has to manually DM each person. That kills the whole strategy. That's where automation comes in. At Obvi we’ve been using Brandwise 🦉 for our Meta ads to handle comment moderation. It’s an AI tool that hides negative comments and keeps things clean. And they just launched DM Campaigns, which automates the entire follow-up process. When someone comments "GUIDE," it automatically sends them the guide via DM AND replies publicly "Check your DMs!" You can set triggers for any keyword, include coupon codes or custom buttons in the DMs, and it tracks revenue if you're on Shopify. So now you can take any piece of content, add a comment incentive to increase reach, and let the automation handle all the follow-up work. It's basically a virality hack that actually converts. And it’s been needed for a long time. Good move by Brandwise 🦉! #Brandwisepartner

Ash

11,582 Aufrufe • vor 8 Monaten

Nice to see YouTube allowing content like this pithy short circulate unimpeded. As always, Rogan serves as an excellent surrogate for the modal Chill Bro with a live and let live attitude -- within reasonable limits. "I don't care if a guy wears a dress. Wear a dress, man, if that's what you like. I don't care if you want to paint your nails, wear lipstick. I don't give a fuck. Have a good time. I want you to be happy. I'll be your friend. Just don't try to compete against women in sports. That's nuts! Don't try to make women uncomfortable by walking with your dick out in the women's locker room!" How did we get to the point where such appeals have to be made at all? Where the administrative state and civil society regard and treat them as hateful bigotry?

Nice to see YouTube allowing content like this pithy short circulate unimpeded. As always, Rogan serves as an excellent surrogate for the modal Chill Bro with a live and let live attitude -- within reasonable limits. "I don't care if a guy wears a dress. Wear a dress, man, if that's what you like. I don't care if you want to paint your nails, wear lipstick. I don't give a fuck. Have a good time. I want you to be happy. I'll be your friend. Just don't try to compete against women in sports. That's nuts! Don't try to make women uncomfortable by walking with your dick out in the women's locker room!" How did we get to the point where such appeals have to be made at all? Where the administrative state and civil society regard and treat them as hateful bigotry?

Wesley Yang

48,954 Aufrufe • vor 1 Jahr

👤 I just wanted to tell you, seeing you lately, I don't know if you've been feeling a lot of pressure, and I want to say that, actually, you still have so many fans right behind you. 👤 We've been doing a lot of things for you, constantly doing support projects and voting, so please, don't put too much pressure on yourself. 🐼 Yeah, yeah 👤 How many hours of sleep did you get yesterday? 🐼 Yesterday? 3 hours 👤 … rest well, and eat well. (OP points to the sticky note) OP post it : “We are working super hard on the pre-voting for Hao. If you win 1st place, how are you going to celebrate?” After hear and see it Zhang Hao turn to be emotional 🥺 Everyone who have xhs please send love to this OP 👇 🔗

👤 I just wanted to tell you, seeing you lately, I don't know if you've been feeling a lot of pressure, and I want to say that, actually, you still have so many fans right behind you. 👤 We've been doing a lot of things for you, constantly doing support projects and voting, so please, don't put too much pressure on yourself. 🐼 Yeah, yeah 👤 How many hours of sleep did you get yesterday? 🐼 Yesterday? 3 hours 👤 … rest well, and eat well. (OP points to the sticky note) OP post it : “We are working super hard on the pre-voting for Hao. If you win 1st place, how are you going to celebrate?” After hear and see it Zhang Hao turn to be emotional 🥺 Everyone who have xhs please send love to this OP 👇 🔗

范 𝐗𝐢𝐚𝐨 ❅

61,702 Aufrufe • vor 1 Monat

The countdown for the SocialGrow token launch has begun ⏱ If you’re reading this you’re early!🔥 Continue below to see how you can capitalize on this!👇 We believe active engagement and loyalty should be rewarded, which is why we have developed a waitlist bot for our early supporters just for our public sale 💥 Check out our demo and step by step guide to see how you can win an early whitelist spot! 👀 1️⃣ Join the waitlist via telegram by clicking this link 2️⃣ Paste the address you would like to whitelist 3️⃣ Share your Twitter handle and retweet the pinned tweet 4️⃣ Win a whitelist with points, click “Daily Streak” everyday to earn a point 5️⃣ Generate referral link to share with your friends to earn more points and climb the leaderboard to win! 6️⃣ Whitelist allocation directly correlates with the total points you earn! By accessing the SocialGrow Bot via Telegram, users can earn 1 point for each time they click Daily Streak within a 24 hour period 🔥 Additional points can be earned via referrals. The total of these points then correlate to the allocation offered to each participant, so even if you get whitelisted, don’t forget to keep referring friends 🤩 What could be more fair!? 🏆 If that’s not enough, 5 lucky people can get their hands on 5 limited fast tracked public whitelist spots by following the steps on this tweet below👇 ✅ Retweet, like & put notifications on! ✅ Join Telegram via the link in our bio! 5 winners will receive a DM! GOOD LUCK!🔥

The countdown for the SocialGrow token launch has begun ⏱ If you’re reading this you’re early!🔥 Continue below to see how you can capitalize on this!👇 We believe active engagement and loyalty should be rewarded, which is why we have developed a waitlist bot for our early supporters just for our public sale 💥 Check out our demo and step by step guide to see how you can win an early whitelist spot! 👀 1️⃣ Join the waitlist via telegram by clicking this link 2️⃣ Paste the address you would like to whitelist 3️⃣ Share your Twitter handle and retweet the pinned tweet 4️⃣ Win a whitelist with points, click “Daily Streak” everyday to earn a point 5️⃣ Generate referral link to share with your friends to earn more points and climb the leaderboard to win! 6️⃣ Whitelist allocation directly correlates with the total points you earn! By accessing the SocialGrow Bot via Telegram, users can earn 1 point for each time they click Daily Streak within a 24 hour period 🔥 Additional points can be earned via referrals. The total of these points then correlate to the allocation offered to each participant, so even if you get whitelisted, don’t forget to keep referring friends 🤩 What could be more fair!? 🏆 If that’s not enough, 5 lucky people can get their hands on 5 limited fast tracked public whitelist spots by following the steps on this tweet below👇 ✅ Retweet, like & put notifications on! ✅ Join Telegram via the link in our bio! 5 winners will receive a DM! GOOD LUCK!🔥

SocialGrowAI

176,443 Aufrufe • vor 2 Jahren

I just built a Claude Code plugin that automatically researches viral trends in any niche 🤯 Drop in your niche -> and it surfaces the hooks, angles, and topics going viral right now across Reddit, YouTube, TikTok & Reels, so you always know exactly what to post. All inside Claude Code. Perfect for DTC brands, agencies, and creators who are tired of guessing what to make. If you're spending hours "researching" content, doom-scrolling TikTok for ideas, copying competitors who are also just guessing, staring at an empty content calendar every Monday... This plugin kills the entire loop: → Drop in a keyword (your product, your niche, a competitor) → It scrapes Reddit, YouTube, TikTok & Instagram Reels → Ranks every post by real engagement → Pulls the hooks, pain points, & exact customer language that's working → Renders a clean content-brief dashboard telling you what to make No guessing. No doom-scrolling. No blank calendar. I ran it live on "magnesium for sleep" — in 3 minutes it surfaced a 5.1M-view hook and the exact complaint customers keep repeating ("it works for a few weeks, then stops"). What you get: → The top hooks already winning, with real view counts → Your customers' pains in their own words → The formats getting watched right now → 3 ready-to-shoot content ideas Built 100% in Claude Code (with Apify + Firecrawl). I created a step-by-step playbook that shows you how to build it yourself. Want access for free? > Like this post > Comment "TRENDS" And I'll send it over (must be following so I can DM)

I just built a Claude Code plugin that automatically researches viral trends in any niche 🤯 Drop in your niche -> and it surfaces the hooks, angles, and topics going viral right now across Reddit, YouTube, TikTok & Reels, so you always know exactly what to post. All inside Claude Code. Perfect for DTC brands, agencies, and creators who are tired of guessing what to make. If you're spending hours "researching" content, doom-scrolling TikTok for ideas, copying competitors who are also just guessing, staring at an empty content calendar every Monday... This plugin kills the entire loop: → Drop in a keyword (your product, your niche, a competitor) → It scrapes Reddit, YouTube, TikTok & Instagram Reels → Ranks every post by real engagement → Pulls the hooks, pain points, & exact customer language that's working → Renders a clean content-brief dashboard telling you what to make No guessing. No doom-scrolling. No blank calendar. I ran it live on "magnesium for sleep" — in 3 minutes it surfaced a 5.1M-view hook and the exact complaint customers keep repeating ("it works for a few weeks, then stops"). What you get: → The top hooks already winning, with real view counts → Your customers' pains in their own words → The formats getting watched right now → 3 ready-to-shoot content ideas Built 100% in Claude Code (with Apify + Firecrawl). I created a step-by-step playbook that shows you how to build it yourself. Want access for free? > Like this post > Comment "TRENDS" And I'll send it over (must be following so I can DM)

Mike Futia

78,474 Aufrufe • vor 1 Monat

🚨 Major announcement! For the X meetup on August 30th in Chicago, I'm offering 50% referrals!* If you help X grow, you grow! 🤠🚀 Referral links are being sent out. Ask if you want to also join. Here are ways to maximize referrals: 00:58 Include a link in your bio with your referral code. 01:10 Quote post my content. Include a link with your referral code when quote posting. You can say, “Come to the X meetup on August 30th; use my link for tickets. It is going to be amazing!” 01:28 Add links to your website, Substack, and articles. Invite everyone at the top or bottom of all your articles to come to the X meetup using your link. 01:45 Use a URL redirect or URL shortener to make the link easier to share. You can include the shorter link in all your content or printed material. 02:11 Include your referral link in all your content. For example, you can include the link in all of your videos at the bottom, encouraging people to go to the URL. This is easier when you use a URL redirect or URL shortener. 02:27 Ask your followers to use your referral link to support your work. Many people are happy to support your work. See you in Chicago! 🤠🚀 👉 Tickets: * 50% after all fees taken by Eventbrite and other payment processors to transfer funds. My preferred method of transfer will be XMoney if it is ready on time. Payouts will be sent out as soon as Eventbrite pays out for the event. Elon Musk Linda Yaccarino Maye Musk 𝙺𝚒𝚖𝚋𝚊𝚕 𝙼𝚞𝚜𝚔 🤠 Tosca Musk

🚨 Major announcement! For the X meetup on August 30th in Chicago, I'm offering 50% referrals!* If you help X grow, you grow! 🤠🚀 Referral links are being sent out. Ask if you want to also join. Here are ways to maximize referrals: 00:58 Include a link in your bio with your referral code. 01:10 Quote post my content. Include a link with your referral code when quote posting. You can say, “Come to the X meetup on August 30th; use my link for tickets. It is going to be amazing!” 01:28 Add links to your website, Substack, and articles. Invite everyone at the top or bottom of all your articles to come to the X meetup using your link. 01:45 Use a URL redirect or URL shortener to make the link easier to share. You can include the shorter link in all your content or printed material. 02:11 Include your referral link in all your content. For example, you can include the link in all of your videos at the bottom, encouraging people to go to the URL. This is easier when you use a URL redirect or URL shortener. 02:27 Ask your followers to use your referral link to support your work. Many people are happy to support your work. See you in Chicago! 🤠🚀 👉 Tickets: * 50% after all fees taken by Eventbrite and other payment processors to transfer funds. My preferred method of transfer will be XMoney if it is ready on time. Payouts will be sent out as soon as Eventbrite pays out for the event. Elon Musk Linda Yaccarino Maye Musk 𝙺𝚒𝚖𝚋𝚊𝚕 𝙼𝚞𝚜𝚔 🤠 Tosca Musk

Adam Lowisz X Meetup 🇺🇸🇵🇱🇪🇺🇬🇧🇺🇦

30,337 Aufrufe • vor 1 Jahr

One of the things I love about building Aethir Claw (Aethir) is that we're not shipping tools into a vacuum. We use them ourselves. Every day. The latest agent in our Claw series: the Graphics Design Agent. This is what Aethir's own team uses to produce media - social media creatives, blog graphics, banners, campaign assets. It's not a proof of concept sitting in a repo somewhere. It's in production, handling real workloads for a real company. If we wouldn't use it internally, we're not putting it out there. In this post I walk through exactly how to set it up and use it. I'd genuinely encourage you to try it yourself - spin it up, experiment, push it around and see what it can do. This is the latest installment in our ongoing series covering the different ways you can use the Aethir Claw agent stack. If you've been following along, you know we keep adding layers. If you're new here, this is a great place to start. More coming soon.

One of the things I love about building Aethir Claw (Aethir) is that we're not shipping tools into a vacuum. We use them ourselves. Every day. The latest agent in our Claw series: the Graphics Design Agent. This is what Aethir's own team uses to produce media - social media creatives, blog graphics, banners, campaign assets. It's not a proof of concept sitting in a repo somewhere. It's in production, handling real workloads for a real company. If we wouldn't use it internally, we're not putting it out there. In this post I walk through exactly how to set it up and use it. I'd genuinely encourage you to try it yourself - spin it up, experiment, push it around and see what it can do. This is the latest installment in our ongoing series covering the different ways you can use the Aethir Claw agent stack. If you've been following along, you know we keep adding layers. If you're new here, this is a great place to start. More coming soon.

Mark

18,767 Aufrufe • vor 3 Monaten

Sensitive content

Models/Artists: EXCITING AND MAJOR NEW ANNOUNCEMENTS 1. You can now upload any zip or pdf file to sell in your store or include in a post, up to 2gig. 2. The Media Center now has a “Files” category where you can see the files you have uploaded, create a post or a store item. 3. There are new Art categories you can choose when posting a product for sale, and that users can use to search the store. These will evolve over time and we know they don’t cover every use case yet. 4. There is a new Artists page that lists the artists on the site. There aren’t many yet, but this will obviously grow a lot. 5. The verification process now has better instructions for artists vs. video creators. 6. When you sign up, you choose whether you are an artist or on-screen talent. If you already have your account and need to update this, reach out to customer service and they can do it for you. If your current artwork fits within our TOS, go ahead and start selling your works now on JFF. If you aren’t sure, we hope to have clarity around our TOS this week, so please be patient as we get that done. Folks, this is Phase I, and we’ve done this all since Friday to try to help the NSFW artists in our community. There will be more phases as we see what is needed. We are doing our best, so if something you want isn’t there yet, send a note to customer service and help us build this area out on the site over time. We hope Phase I meets a good percentage of your immediate needs to start earning money. But we also know that our site, like ALL adult sites, will have content restrictions that will exclude some of you. That’s not our choosing or our doing. But if we want to keep our credit card processors and not deplatform everyone (like other sites just did) then we need to play by their rules. That sucks and we are sorry about that. We use adult processors, so we have a lot fewer restrictions than the other sites that are deplatforming ALL NSFW content. For those of you new to the site, we have made a VIDEO TUTORIAL (thank you, Alice Skary) on how to upload files, post them for sale, set your store as the default view of your profile, etc. You can watch that here:

JustForFans

459,289 Aufrufe • vor 2 Jahren