Video yükleniyor...

Video Yüklenemedi

Bu video yüklenirken bir sorun oluştu. Bu geçici bir ağ sorunundan kaynaklanıyor olabilir veya video kullanılamıyor olabilir.

Ana Sayfaya Dön

How to manually check for CL.TE Request Smuggling Vulnerabilities: 1️⃣ See if a GET request accepts POST 2️⃣ See if it accepts HTTP/1 3️⃣ Disable "Update Content-Length" 4️⃣ Send with CL & TE headers: POST / HTTP/1.1 Host: Content-Length: 6 Transfer-Encoding: chunked 0 G 5️⃣ Send request twice. If... show more

Web Security Academy

143,846 subscribers

27,993 görüntüleme • 1 yıl önce •via X (Twitter)

Sağlık & İyilik Bilim & Teknoloji Eğitim

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

Web Security Academy

26,360 görüntüleme • 1 yıl önce

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,818 görüntüleme • 1 yıl önce

$How to Find Path Delimiter Issues with Burp Suite Intruder Sometimes web servers treat special characters (like ; or ?) differently in URLs. This can lead to security issues like web cache deception or access control problems. Here's how you can test for path delimiter discrepancies: 1️⃣ Capture the Request Find a request you want to test GET /my-account HTTP/2 2️⃣ Right click the request and "Send to Intruder". In Intruder, highlight add a new position after /my-account followed by abc. It should look like this: GET /my-account§§abc HTTP/2 Attack Type = Sniper (only changing one spot). Payload: Paste a list of special characters, like this: ! # $ % & ' ( ) * + , - . / : ; = ? @ [ \ ] _ ~ ... A full list of delimiters can be found here: 3️⃣ Start the Attack Press Start Attack. Look at the Status, Length, and Response columns. Watch for differences (like bigger/smaller pages, changes to status code or different behavior) and if you notice something different then you've likely found a delimiter discrepancy! 🎉 Why is this important? When special characters confuse the server or cache, you might find: 🔸 Web cache deception: Caching personal pages by accident 🔸 Access bypass: Skipping security checks 🔸 Leaked info: Seeing data you shouldn't Try this lab for yourself and dive even deeper into how to exploit this when you find it: #BugBounty #WebSecurity #BurpSuite #EthicalHacking #Cybersecurity$

How to Find Path Delimiter Issues with Burp Suite Intruder Sometimes web servers treat special characters (like ; or ?) differently in URLs. This can lead to security issues like web cache deception or access control problems. Here's how you can test for path delimiter discrepancies: 1️⃣ Capture the Request Find a request you want to test GET /my-account HTTP/2 2️⃣ Right click the request and "Send to Intruder". In Intruder, highlight add a new position after /my-account followed by abc. It should look like this: GET /my-account§§abc HTTP/2 Attack Type = Sniper (only changing one spot). Payload: Paste a list of special characters, like this: ! # $ % & ' ( ) * + , - . / : ; = ? @ [ \ ] _ ~ ... A full list of delimiters can be found here: 3️⃣ Start the Attack Press Start Attack. Look at the Status, Length, and Response columns. Watch for differences (like bigger/smaller pages, changes to status code or different behavior) and if you notice something different then you've likely found a delimiter discrepancy! 🎉 Why is this important? When special characters confuse the server or cache, you might find: 🔸 Web cache deception: Caching personal pages by accident 🔸 Access bypass: Skipping security checks 🔸 Leaked info: Seeing data you shouldn't Try this lab for yourself and dive even deeper into how to exploit this when you find it: #BugBounty #WebSecurity #BurpSuite #EthicalHacking #Cybersecurity

Web Security Academy

18,220 görüntüleme • 1 yıl önce

Going to geek out a little so this post isn't for everyone... Building and XRP Decentralized Exchange with Token Creation with the help of AI to see how it goes. Day 1 This starts with automatically creating a wallet on the XRPL Testnet and funds it with 1000 XRP from the testnet faucet. Receive XRP Send XRP Create a new Token on the XRPL Testnet Send Tokens Set Trustlines Everything verified on the live XRPL testnet blockchain. Going to work on the DEX next. Follow along if you want to see the progress.

Going to geek out a little so this post isn't for everyone... Building and XRP Decentralized Exchange with Token Creation with the help of AI to see how it goes. Day 1 This starts with automatically creating a wallet on the XRPL Testnet and funds it with 1000 XRP from the testnet faucet. Receive XRP Send XRP Create a new Token on the XRPL Testnet Send Tokens Set Trustlines Everything verified on the live XRPL testnet blockchain. Going to work on the DEX next. Follow along if you want to see the progress.

Vincent Kennedy

102,194 görüntüleme • 1 yıl önce

If you always don’t know what to post‼️ If your contents don’t always ‼️ If you always feel Burn out ‼️ This Video will Save you 100+ hours of work when it comes to creating content I just finished creating all my contents for next week and in this Video I walked you step by Step How to Leverage AI to do the Heavy lifting and See Results with Contents This is a must Watch for Creators that want to take their career serious, Save time and See Results Retweet + Bookmark for Later ❤️

If you always don’t know what to post‼️ If your contents don’t always ‼️ If you always feel Burn out ‼️ This Video will Save you 100+ hours of work when it comes to creating content I just finished creating all my contents for next week and in this Video I walked you step by Step How to Leverage AI to do the Heavy lifting and See Results with Contents This is a must Watch for Creators that want to take their career serious, Save time and See Results Retweet + Bookmark for Later ❤️

PARELLA™🦋(Web3righteousness)🪽

42,110 görüntüleme • 8 ay önce

Production traffic is not uniform. You get a few requests that need your best model, but most are simple questions and lookups you can solve with cheaper, faster models. The most expensive mistake you can make today is sending every request to your strongest model. You need routing. Period. This is the simplest trick to improve the architecture of whatever you are building. Please, don't implement routing yourself. You don't have to. I'm currently working with TrueFoundry's Auto Routing. It reads each request, classifies it as simple, medium, or complex, and sends it to the model assigned to that tier. You have two choices: 1. Send every request to the free heuristic classifier to score signals such as technical vocabulary, code, prompt length, and multi-step reasoning. 2. Send the request to an LLM classifier when its difficulty requires a more nuanced judgment. The beauty of using routing is that nothing changes in your code. You still call a single endpoint model, but routing works behind the scenes to pair every request with the best possible model. TrueFoundry ran several experiments with two different setups: 1. Send every request to Claude Opus 2. Send every request to a router with Haiku, Sonnet, and Opus The first experiment ran 550 deterministically graded academic prompts through every setup. Auto Routing was 69% cheaper while retaining 98% of the baseline quality. The second experiment ran three production-shaped workloads through every setup, using user chats, developer chats, and long agent tasks. Auto Routing was 80% cheaper. Thanks to the TrueFoundry team for partnering with me on this post.

Production traffic is not uniform. You get a few requests that need your best model, but most are simple questions and lookups you can solve with cheaper, faster models. The most expensive mistake you can make today is sending every request to your strongest model. You need routing. Period. This is the simplest trick to improve the architecture of whatever you are building. Please, don't implement routing yourself. You don't have to. I'm currently working with TrueFoundry's Auto Routing. It reads each request, classifies it as simple, medium, or complex, and sends it to the model assigned to that tier. You have two choices: 1. Send every request to the free heuristic classifier to score signals such as technical vocabulary, code, prompt length, and multi-step reasoning. 2. Send the request to an LLM classifier when its difficulty requires a more nuanced judgment. The beauty of using routing is that nothing changes in your code. You still call a single endpoint model, but routing works behind the scenes to pair every request with the best possible model. TrueFoundry ran several experiments with two different setups: 1. Send every request to Claude Opus 2. Send every request to a router with Haiku, Sonnet, and Opus The first experiment ran 550 deterministically graded academic prompts through every setup. Auto Routing was 69% cheaper while retaining 98% of the baseline quality. The second experiment ran three production-shaped workloads through every setup, using user chats, developer chats, and long agent tasks. Auto Routing was 80% cheaper. Thanks to the TrueFoundry team for partnering with me on this post.

Santiago

15,543 görüntüleme • 18 gün önce

“I make them send a d*ck pic before the date to weed them out.” Content creator Karina explains her ruthless screening rule for casual dating on Instagram and why she demands an upfront photo before agreeing to dinner: Karina: “Most of the time I find guys on the internet, on Instagram, whatever. Before we go out, I tell him to send me a picture, a d*ck pic. Just show me, because I don't want to go out with him if he’s not pretty.” Host: “This is why she’s never seen a small one! She weeded them out before.” Karina: “I have to see, because if it's ugly, I don't go. I'm done. I just need to see, because that's how I feel attracted. If it's pretty, it has to be very pretty… and if it’s perfect, okay, we can go out.” Host: “They must be so fired up. They know they have your stamp of approval before the date even starts.” Karina: “Yes! Because most of the time when I'm going on a date, I want to have sx. I'm not going on a date and not having sx. Of course I want dinner, but mostly I’m just going for s*x.” Host: “You’re like, ‘Let’s skip dinner actually.’” Karina: “If it’s ugly, I don't even answer. If I just want to bang, I want to see it before I go so I don’t get disappointed.”

Sensitive content

“I make them send a dck pic before the date to weed them out.” Content creator Karina explains her ruthless screening rule for casual dating on Instagram and why she demands an upfront photo before agreeing to dinner: Karina: “Most of the time I find guys on the internet, on Instagram, whatever. Before we go out, I tell him to send me a picture, a dck pic. Just show me, because I don't want to go out with him if he’s not pretty.” Host: “This is why she’s never seen a small one! She weeded them out before.” Karina: “I have to see, because if it's ugly, I don't go. I'm done. I just need to see, because that's how I feel attracted. If it's pretty, it has to be very pretty… and if it’s perfect, okay, we can go out.” Host: “They must be so fired up. They know they have your stamp of approval before the date even starts.” Karina: “Yes! Because most of the time when I'm going on a date, I want to have sx. I'm not going on a date and not having sx. Of course I want dinner, but mostly I’m just going for s*x.” Host: “You’re like, ‘Let’s skip dinner actually.’” Karina: “If it’s ugly, I don't even answer. If I just want to bang, I want to see it before I go so I don’t get disappointed.”

Groot_X

1,122,913 görüntüleme • 29 gün önce

Jon Taffer reveals the $8 marketing strategy that beats $5,000 ads. "If you go to a restaurant and have a flawless experience, the statistical likelihood of you coming back is about 42%. If you come back and have a second flawless experience, your likelihood of a third visit is still under 50%. But if you come back a third time, the likelihood of a fourth visit is 72%." "When you come to our restaurants, we ask if you've been here before. If you say no, we put a red cocktail napkin down. The manager introduces himself. We send you a postcard, free rib dinner, no restrictions." "At the end of the rib dinner, the manager comes up and says, you've got to try our chicken. He writes on the back of a business card, five dollars off chicken, gives it to you. You come back for the chicken dinner. The manager comes over, great, you've got to try my cheesecake. Free piece of cheesecake." "It cost me about eight dollars to get a new customer to three visits. The typical restaurant in a market like New York, your acquisition cost can be almost $1,200 for every customer you get." PS. We post daily content strictly for dedicated entrepreneurs, so if you’re one of them, make sure to follow us Entrepreneurs on X for more. Like and repost if you found value in this post:

Jon Taffer reveals the $8 marketing strategy that beats $5,000 ads. "If you go to a restaurant and have a flawless experience, the statistical likelihood of you coming back is about 42%. If you come back and have a second flawless experience, your likelihood of a third visit is still under 50%. But if you come back a third time, the likelihood of a fourth visit is 72%." "When you come to our restaurants, we ask if you've been here before. If you say no, we put a red cocktail napkin down. The manager introduces himself. We send you a postcard, free rib dinner, no restrictions." "At the end of the rib dinner, the manager comes up and says, you've got to try our chicken. He writes on the back of a business card, five dollars off chicken, gives it to you. You come back for the chicken dinner. The manager comes over, great, you've got to try my cheesecake. Free piece of cheesecake." "It cost me about eight dollars to get a new customer to three visits. The typical restaurant in a market like New York, your acquisition cost can be almost $1,200 for every customer you get." PS. We post daily content strictly for dedicated entrepreneurs, so if you’re one of them, make sure to follow us Entrepreneurs on X for more. Like and repost if you found value in this post:

Entrepreneurs on X

75,315 görüntüleme • 2 ay önce

Hey devs! Every time I deployed an MVP on Railway or Render free trials, sending emails with Nodemailer, smtplib, net/smtp, etc. failed because outbound SMTP ports (25, 465, 587) are strictly blocked. Plus, services like Resend force you to buy and setup a custom domain first. So I built SendLib, a dedicated, production-ready email API for devs. SendLib lets you connect a Gmail account (e.g. yourproduct@gmail.com) via Google OAuth 2.0 and gives you a secure REST API to send transactional emails (welcome emails, password resets, OTPs) from wherever your product is hosted, straight to your user's inbox. How it works: 1. Connect your product Gmail account via 1-click Google OAuth. 2. Grab an API key from your dashboard. 3. Send a single HTTP POST request from any language. Free tier: Connect up to 10 Gmail accounts & send up to 500 emails/day per account (2,000/day for Workspace). Check it out: I'd love your feedback! Thank you! 🙏

Hey devs! Every time I deployed an MVP on Railway or Render free trials, sending emails with Nodemailer, smtplib, net/smtp, etc. failed because outbound SMTP ports (25, 465, 587) are strictly blocked. Plus, services like Resend force you to buy and setup a custom domain first. So I built SendLib, a dedicated, production-ready email API for devs. SendLib lets you connect a Gmail account (e.g. [email protected]) via Google OAuth 2.0 and gives you a secure REST API to send transactional emails (welcome emails, password resets, OTPs) from wherever your product is hosted, straight to your user's inbox. How it works: 1. Connect your product Gmail account via 1-click Google OAuth. 2. Grab an API key from your dashboard. 3. Send a single HTTP POST request from any language. Free tier: Connect up to 10 Gmail accounts & send up to 500 emails/day per account (2,000/day for Workspace). Check it out: I'd love your feedback! Thank you! 🙏

Samuel Tuoyo

15,148 görüntüleme • 2 ay önce

My agent is now paying for its own data. No API key. No account. No credit card. Check the video I recorded. This uses the x402 open protocol built by Coinbase, along with a simple skill. This is an open protocol governed by the Linux Foundation. To complete a goal, an agent can now search for an actor on the Apify Store, pay for it, and use it without any human intervention. The way it works is pretty simple: 1. Your agent finds an Actor it wants to use 2. It sends a request 3. The Actor sends back an HTTP 402 "Payment Required" response 4. Agent authorizes payment from a wallet in USDC on Base 5. The Actor runs 6. User receives the result The model is pay-as-you-go: the agent authorizes a spending ceiling, pays only for usage, and the remaining balance is automatically settled. This brings an entire marketplace of AI tools into the agentic economy. Here is the skill you need. Add it to your agent, and it will take care of everything for you: If you want to know how this works, including what you can do with $1, read this post: Thanks to the Apify team for partnering with me on this post.

My agent is now paying for its own data. No API key. No account. No credit card. Check the video I recorded. This uses the x402 open protocol built by Coinbase, along with a simple skill. This is an open protocol governed by the Linux Foundation. To complete a goal, an agent can now search for an actor on the Apify Store, pay for it, and use it without any human intervention. The way it works is pretty simple: 1. Your agent finds an Actor it wants to use 2. It sends a request 3. The Actor sends back an HTTP 402 "Payment Required" response 4. Agent authorizes payment from a wallet in USDC on Base 5. The Actor runs 6. User receives the result The model is pay-as-you-go: the agent authorizes a spending ceiling, pays only for usage, and the remaining balance is automatically settled. This brings an entire marketplace of AI tools into the agentic economy. Here is the skill you need. Add it to your agent, and it will take care of everything for you: If you want to know how this works, including what you can do with $1, read this post: Thanks to the Apify team for partnering with me on this post.

Santiago

26,981 görüntüleme • 2 ay önce

📢 500,000 $PIEVERSE Red Packet Campaign Airdrop ~ part 2 pieverse launched the OKX red packet campaign with where users can send/receive packets to climb the leaderboard for bigger rewards 🤝 If you're new, first complete the setup guide (Part-1): Now here’s how to send & receive red packets 👇 🔗 go to: 1️⃣ bridge funds to x layer you’ll need: – $USDT0 on Xx layer – small amount of $OKB for gas Steps: – open rabby wallet – bridge ETH/USDT from arbitrum or base to x layer – bridge small $OKB amount for gas fee (~$0.1–$0.2 enough) – then bridge your $USDT0 (bridging may take 10–20 mins) 2️⃣ deposit into your claw – open Pieverse web – open your claw → manage – copy your deposit address – send $USDT0 there from rabby – wait & refresh You can withdraw anytime later 🤝 3️⃣ send red packets – open the pieverse telegram bot use this prompt: "send a USDT0 red packet to .pie for USDT0 on x layer." Example: send a $USDT0 red packet to smolwyne.pie for 10 $USDT0 on X Layer. – send the prompt in bot – wait for confirmation – done 👀 4️⃣ claim received packets – If someone sends you packets, the TG bot will notify you – use the claim command from the bot: "help me claim all pending redpackets" – open your claw & check balance ⚠️ claim in 24hours, otherwise it’s will expired You can: – withdraw funds – or resend packets to others 5️⃣ how to rank higher? – send packets to UNIQUE addresses – avoid repeatedly sending same address ⚠️ If you don’t have friends to exchange with, you can temporarily use my IDs: – smolwyne.pie (send today) – ishika.pie (send todey) 6️⃣ check leaderboard – open okx campaign page – check leaderboard section Campaign may run for around 10 more days 👀 7️⃣ withdraw funds after finishing: – withdraw $USDT0 back to rabby – bridge back from x layer → arbitrum/base – all done ✅ So basically: send/receive packets → rank up leaderboard → become eligible for bigger $PIEVERSE rewards. If anything is confusing, comment below 👇

📢 500,000 $PIEVERSE Red Packet Campaign Airdrop ~ part 2 pieverse launched the OKX red packet campaign with where users can send/receive packets to climb the leaderboard for bigger rewards 🤝 If you're new, first complete the setup guide (Part-1): Now here’s how to send & receive red packets 👇 🔗 go to: 1️⃣ bridge funds to x layer you’ll need: – $USDT0 on Xx layer – small amount of $OKB for gas Steps: – open rabby wallet – bridge ETH/USDT from arbitrum or base to x layer – bridge small $OKB amount for gas fee (~$0.1–$0.2 enough) – then bridge your $USDT0 (bridging may take 10–20 mins) 2️⃣ deposit into your claw – open Pieverse web – open your claw → manage – copy your deposit address – send $USDT0 there from rabby – wait & refresh You can withdraw anytime later 🤝 3️⃣ send red packets – open the pieverse telegram bot use this prompt: "send a USDT0 red packet to .pie for USDT0 on x layer." Example: send a $USDT0 red packet to smolwyne.pie for 10 $USDT0 on X Layer. – send the prompt in bot – wait for confirmation – done 👀 4️⃣ claim received packets – If someone sends you packets, the TG bot will notify you – use the claim command from the bot: "help me claim all pending redpackets" – open your claw & check balance ⚠️ claim in 24hours, otherwise it’s will expired You can: – withdraw funds – or resend packets to others 5️⃣ how to rank higher? – send packets to UNIQUE addresses – avoid repeatedly sending same address ⚠️ If you don’t have friends to exchange with, you can temporarily use my IDs: – smolwyne.pie (send today) – ishika.pie (send todey) 6️⃣ check leaderboard – open okx campaign page – check leaderboard section Campaign may run for around 10 more days 👀 7️⃣ withdraw funds after finishing: – withdraw $USDT0 back to rabby – bridge back from x layer → arbitrum/base – all done ✅ So basically: send/receive packets → rank up leaderboard → become eligible for bigger $PIEVERSE rewards. If anything is confusing, comment below 👇

wyne

24,194 görüntüleme • 4 ay önce

🌟 Big News for 2025 🌟 Launching Marbella Casa Creative has been one of the most exciting and challenging projects so far, I’m proud to finally share it with you. Nestled in the heart of Puerto Banús, Marbella, is a vision bought to life. A place where content creators can connect, create, and grow together. Building a creative community that inspires one another and helps everyone reach new heights. This has been a passion project of mine for the longest time. A world-first Content Creators Members-Only Club, designed to give creators everything they need to produce their best work and share it with the world. I’d love for you to follow along, support the journey, and keep an eye out for some amazing events we have coming soon. And if you’re a content creator or influencer who’s as excited about this as I am, send a DM or check out the website to see how we can inspire together. This is just the beginning…

🌟 Big News for 2025 🌟 Launching Marbella Casa Creative has been one of the most exciting and challenging projects so far, I’m proud to finally share it with you. Nestled in the heart of Puerto Banús, Marbella, is a vision bought to life. A place where content creators can connect, create, and grow together. Building a creative community that inspires one another and helps everyone reach new heights. This has been a passion project of mine for the longest time. A world-first Content Creators Members-Only Club, designed to give creators everything they need to produce their best work and share it with the world. I’d love for you to follow along, support the journey, and keep an eye out for some amazing events we have coming soon. And if you’re a content creator or influencer who’s as excited about this as I am, send a DM or check out the website to see how we can inspire together. This is just the beginning…

LukeBarnatt

148,020 görüntüleme • 1 yıl önce

Introducing The Godfather... (LinkedIn Edition) It sounds ridiculous but posting on LinkedIn changed my life. When I first started, I was a bit lost. My first startup had just failed and I didn't know what to do next. In the past 18 months, it has unlocked more opportunities than anything I've done in my career. I've hit ~400k followers, bootstrapped a SaaS biz to >$500k ARR and made a ton in brand partnerships. It has been a FORCE multiplier for me and I want nothing more than to help others to get the same opportunities. That's why I built Saywhat. Here's how it works: 1/ Sign up and when you login you'll immediately see your first post (based on your target audience) 2/ Our AI writing assistant helps shape your ideas into posts that people actually read 3/ Get feedback from both our AI and our 600+ strong community (drop your posts in our Roast My Post channel) 4/ Join our monthly live sessions where I create posts live and share what's working right now Plus you get access to our full library of post frameworks, carousel/infographic templates, and a community of people who get it. (Because building a content-led business is brutal...) The results so far are pretty good: - Median user sees 130% more impressions in 90 days - Average user gets an 800% increase - Some users have gone from 0 to 100k+ followers Despite what the haters say, it is still early on LinkedIn. It's a 3-year-old social network living inside a 23-year-old company. The opportunity is massive: - 1 BN+ professionals in one place - Less than 1% post consistently - Even fewer do it well If you've read this far, I have a thank you gift for you 👇 I created a LinkedIn starter pack that includes: - 90 mins of video content - How to define your brand positioning - Content frameworks that actually work - The exact system I used to grow to 395k+ followers and close $500k in ARR Comment "Saywhat" and retweet and I'll send you a link to the free pack. P.S. A massive thank you to Henry Hayes for being a phenomenal collaborator on this video. Your facial expressions made it 10x better! 🙌 P.P.S. if you're a company with >$10m ARR looking for more hands on help to win on LinkedIn, send me a DM

Will McTighe

16,387 görüntüleme • 1 yıl önce

DON'T LET YOUR BITCOIN DIE WITH YOU 💀 ⚰️ Yea look, nobody likes to admit it but we all have to die one day. As I've been talking to people about their self custody lately - both Casa members and not - I hear the same thing over and over. "What happens if I die?" Many people feel pretty good about their bitcoin security for themselves. But their family members often have no idea how to use this stuff. Hardware wallet? Seed phrase stamped on metal? Shamir's secret sharing backups using SD cards, a passphrase, and a treasure hunt through the backyard with a shovel? 😵 We're solving that problem for all Casa members, starting today with Casa Inheritance. A key design principle we kept while building this was to make it as simple as possible for Recipients (your family members that will receive your bitcoin if you pass), while maintaining Casa-level security. An estate transfer is already a stressful time for family, and it can become even more stressful if you add in a crazy treasure hunt to access a fortune in bitcoin. For our basic 3 key vaults, we wanted it to be as easy as using the app. No metal plates, no need to use a hardware wallet, no magic passwords you have to keep track of or else risk messing up the asset transfer. Simplicity is security. So how does it work, in detail? A Vault Owner (Casa member) designates a Recipient (their family or friend) in the Casa app. The Recipient receives an invite to create a free Casa account. The Recipient scans a QR code provided by the Vault Owner, which contains an encrypted version of the owner's mobile key. This encrypted key is only able to be imported by the Recipient's Casa account, and the Recipient can't initially use it or see the vault balance. If the Vault Owner passes away, the Recipient can request access to the vault in their Casa app. This starts a 6 month timer, and sends a ton of notifications every month to the owner. If the owner is still alive, they can reject the request in app. If they are not, the timer will run out. When it does, the Recipient will be able to use the shared mobile key and the request a signature from the Casa Recovery Key for the shared vault. This gives them 2 out of 3 signatures, enough to access the assets. For 5 key vault users, one hardware key is shared with the Recipient. This small increase in friction for Recipients is often worth it for the increased security and resilience of a 5 key vault for larger holdings. To summarize now that you have the details: 1. Share keys and vault access during setup 2. 6 month timelock to ensure no malicious theft 3. Use shared keys and Casa key to access assets Full setup takes less than 5 minutes. Inheritance is one of the biggest problems in self custody today. If you've hodled through years of painful bear markets, you owe it to yourself and your family to not let the reward for that patience go to zero because you didn't have a plan - and we're here to make that easy. Check out the video to see how easy it really is. Like I said earlier this week - Casa is going after major problems in self-custody this year. Check this one off the list ✅. Next one coming sooner than you think 🔥.

DON'T LET YOUR BITCOIN DIE WITH YOU 💀 ⚰️ Yea look, nobody likes to admit it but we all have to die one day. As I've been talking to people about their self custody lately - both Casa members and not - I hear the same thing over and over. "What happens if I die?" Many people feel pretty good about their bitcoin security for themselves. But their family members often have no idea how to use this stuff. Hardware wallet? Seed phrase stamped on metal? Shamir's secret sharing backups using SD cards, a passphrase, and a treasure hunt through the backyard with a shovel? 😵 We're solving that problem for all Casa members, starting today with Casa Inheritance. A key design principle we kept while building this was to make it as simple as possible for Recipients (your family members that will receive your bitcoin if you pass), while maintaining Casa-level security. An estate transfer is already a stressful time for family, and it can become even more stressful if you add in a crazy treasure hunt to access a fortune in bitcoin. For our basic 3 key vaults, we wanted it to be as easy as using the app. No metal plates, no need to use a hardware wallet, no magic passwords you have to keep track of or else risk messing up the asset transfer. Simplicity is security. So how does it work, in detail? A Vault Owner (Casa member) designates a Recipient (their family or friend) in the Casa app. The Recipient receives an invite to create a free Casa account. The Recipient scans a QR code provided by the Vault Owner, which contains an encrypted version of the owner's mobile key. This encrypted key is only able to be imported by the Recipient's Casa account, and the Recipient can't initially use it or see the vault balance. If the Vault Owner passes away, the Recipient can request access to the vault in their Casa app. This starts a 6 month timer, and sends a ton of notifications every month to the owner. If the owner is still alive, they can reject the request in app. If they are not, the timer will run out. When it does, the Recipient will be able to use the shared mobile key and the request a signature from the Casa Recovery Key for the shared vault. This gives them 2 out of 3 signatures, enough to access the assets. For 5 key vault users, one hardware key is shared with the Recipient. This small increase in friction for Recipients is often worth it for the increased security and resilience of a 5 key vault for larger holdings. To summarize now that you have the details: 1. Share keys and vault access during setup 2. 6 month timelock to ensure no malicious theft 3. Use shared keys and Casa key to access assets Full setup takes less than 5 minutes. Inheritance is one of the biggest problems in self custody today. If you've hodled through years of painful bear markets, you owe it to yourself and your family to not let the reward for that patience go to zero because you didn't have a plan - and we're here to make that easy. Check out the video to see how easy it really is. Like I said earlier this week - Casa is going after major problems in self-custody this year. Check this one off the list ✅. Next one coming sooner than you think 🔥.

Nick Neuman

125,739 görüntüleme • 2 yıl önce

I rebuilt most of OpenClaw's core in a single workflow: - 25 blocks - 29 connections - Short + long-term memory - Multi-channel (Telegram + Slack) Didn't build it manually. Stack is fully open-source. Self-host, run local models, own it end-to-end. Full walkthrough: Chapters: 00:00 - Intro 01:00 - SimClaw in action: planning my day, finding meetings, sending email 04:05 - Long-term memory capability 05:52 - Inside the workflow: how it's wired 12:09 - The plot twist 12:50 - Building an entire workflow using a single prompt 15:42 - Why this is an OS for your AI workforce 17:00 - Try it yourself If you want to see the open-source stack that powers all of this, check out Sim on GitHub and drop a star if you find it useful:

I rebuilt most of OpenClaw's core in a single workflow: - 25 blocks - 29 connections - Short + long-term memory - Multi-channel (Telegram + Slack) Didn't build it manually. Stack is fully open-source. Self-host, run local models, own it end-to-end. Full walkthrough: Chapters: 00:00 - Intro 01:00 - SimClaw in action: planning my day, finding meetings, sending email 04:05 - Long-term memory capability 05:52 - Inside the workflow: how it's wired 12:09 - The plot twist 12:50 - Building an entire workflow using a single prompt 15:42 - Why this is an OS for your AI workforce 17:00 - Try it yourself If you want to see the open-source stack that powers all of this, check out Sim on GitHub and drop a star if you find it useful:

Akshay 🚀

65,756 görüntüleme • 5 ay önce

Kid Buu Destroys Planet Earth [HD]💥1080Pee🔥 Original Funimation w/ Bruce Faulconer🐦‍⬛ Audio✅ (BEST! Version)💯 (Not KAI)🤮 #DragonBallZ🐉🟠 🚨Copyrights ©️Akira Toriyama, Toei Animation, and Bruce Faulconer.⚠️🔫👮 All 291 episodes of DragonBall Z are available to stream in [HD] quality on Crunchyroll.🐉🟠 / Subscriptions start at $9.99/mo 💻🖱️ Visit for more details 🖥️ Bruce Faulconer's #DBZ discography is available on Spotify. 🎵🟢 (on Mobile, it may bring to a screen to hit play, then 'Get App'. If Spotify is Installed, 'Get App' should automatically load both for you.) 📱 ⚠️This is a FANMADE re-imagination of what our childhood 'could be' today. 🤔 See Pinned Post for "Pee Universe Explained by Pee" #PeeU🌎 See Bruce's Gooses📋below to find out if joining the Pee Warriors is for You. 🚫 (I'm just a fan like you, NO Affiliations!) 🛑🛑🛑 Now that's out of the way. Thanks for being here this evening! I'll be excited to bring you guys another ✨NEW Edit!💫 tomorrow around this same time. I'm trying a few new things out with my content, to reduce posts / and overall reposts down by including everything for the day in the last post of the day. (aka this) I have been doing Goku vs Cell over the past week. (Parts 1-4) are in the comments if you would like to watch that! Lastly, let me know in the comments some of your favorite DBZ moments you would like to see in the future in HD w/ Bruce Faulconer! Thanks again for being here, and just a reminder if you enjoy my edits please give them a like! It means a lot.❤️ -Pee

Kid Buu Destroys Planet Earth [HD]💥1080Pee🔥 Original Funimation w/ Bruce Faulconer🐦‍⬛ Audio✅ (BEST! Version)💯 (Not KAI)🤮 #DragonBallZ🐉🟠 🚨Copyrights ©️Akira Toriyama, Toei Animation, and Bruce Faulconer.⚠️🔫👮 All 291 episodes of DragonBall Z are available to stream in [HD] quality on Crunchyroll.🐉🟠 / Subscriptions start at $9.99/mo 💻🖱️ Visit for more details 🖥️ Bruce Faulconer's #DBZ discography is available on Spotify. 🎵🟢 (on Mobile, it may bring to a screen to hit play, then 'Get App'. If Spotify is Installed, 'Get App' should automatically load both for you.) 📱 ⚠️This is a FANMADE re-imagination of what our childhood 'could be' today. 🤔 See Pinned Post for "Pee Universe Explained by Pee" #PeeU🌎 See Bruce's Gooses📋below to find out if joining the Pee Warriors is for You. 🚫 (I'm just a fan like you, NO Affiliations!) 🛑🛑🛑 Now that's out of the way. Thanks for being here this evening! I'll be excited to bring you guys another ✨NEW Edit!💫 tomorrow around this same time. I'm trying a few new things out with my content, to reduce posts / and overall reposts down by including everything for the day in the last post of the day. (aka this) I have been doing Goku vs Cell over the past week. (Parts 1-4) are in the comments if you would like to watch that! Lastly, let me know in the comments some of your favorite DBZ moments you would like to see in the future in HD w/ Bruce Faulconer! Thanks again for being here, and just a reminder if you enjoy my edits please give them a like! It means a lot.❤️ -Pee

DragonBallPee

23,425 görüntüleme • 22 gün önce

If you want to trick Meta into pushing your content to 10x more people, I have a hack for you. Here's how it works: Post regular organic content, could be a routine video, lifestyle shot, whatever. But in the caption, add something like "We have a guide with our top 10 hair, skin, and nails tips. Comment ‘GUIDE’ and we'll send it to you." The content doesn’t need to mention the guide. All you’re trying to do is incentivize people to comment on your post. Then, when people start commenting "GUIDE," the algorithm sees all that engagement and pushes the post to way more people. And the content gets more reach because Meta thinks it's getting crazy engagement. The strategy works great, but it creates a massive operational problem. Now you've got hundreds of people commenting asking for the guide, and someone has to manually DM each person. That kills the whole strategy. That's where automation comes in. At Obvi we’ve been using Brandwise 🦉 for our Meta ads to handle comment moderation. It’s an AI tool that hides negative comments and keeps things clean. And they just launched DM Campaigns, which automates the entire follow-up process. When someone comments "GUIDE," it automatically sends them the guide via DM AND replies publicly "Check your DMs!" You can set triggers for any keyword, include coupon codes or custom buttons in the DMs, and it tracks revenue if you're on Shopify. So now you can take any piece of content, add a comment incentive to increase reach, and let the automation handle all the follow-up work. It's basically a virality hack that actually converts. And it’s been needed for a long time. Good move by Brandwise 🦉! #Brandwisepartner

If you want to trick Meta into pushing your content to 10x more people, I have a hack for you. Here's how it works: Post regular organic content, could be a routine video, lifestyle shot, whatever. But in the caption, add something like "We have a guide with our top 10 hair, skin, and nails tips. Comment ‘GUIDE’ and we'll send it to you." The content doesn’t need to mention the guide. All you’re trying to do is incentivize people to comment on your post. Then, when people start commenting "GUIDE," the algorithm sees all that engagement and pushes the post to way more people. And the content gets more reach because Meta thinks it's getting crazy engagement. The strategy works great, but it creates a massive operational problem. Now you've got hundreds of people commenting asking for the guide, and someone has to manually DM each person. That kills the whole strategy. That's where automation comes in. At Obvi we’ve been using Brandwise 🦉 for our Meta ads to handle comment moderation. It’s an AI tool that hides negative comments and keeps things clean. And they just launched DM Campaigns, which automates the entire follow-up process. When someone comments "GUIDE," it automatically sends them the guide via DM AND replies publicly "Check your DMs!" You can set triggers for any keyword, include coupon codes or custom buttons in the DMs, and it tracks revenue if you're on Shopify. So now you can take any piece of content, add a comment incentive to increase reach, and let the automation handle all the follow-up work. It's basically a virality hack that actually converts. And it’s been needed for a long time. Good move by Brandwise 🦉! #Brandwisepartner

Ash

11,582 görüntüleme • 11 ay önce

“It genuinely was the smallest p*nis I've ever seen in my life.” Adult film star Ellie Nova shares the wild story of how she asked her best friend for permission to sleep with her boyfriend just to satisfy her curiosity about his micropenis: Ellie Nova: “I slept with a guy with a microp*nis.” Host: “Did you know that going in?” Ellie Nova: “Yes, because he was at the time my best friend's boyfriend. I brought it up to her kind of jokingly, but I was like, 'Can I try to f*ck him?' I was like, I need to see this. I was just so intrigued and so committed to figuring out what was going on.” “She laughed it off and she was like, 'Yeah, if you can get him to f*ck you. Two weeks later at a party, I managed to convince him.” Host: “How did you convince him, honestly?” Ellie Nova: “It was a lot of me just being really touchy and then being like, 'I heard that you have a really nice d*ck, like, can I see it?' And he was like, 'Oh my God, yes.' Any man with the self-awareness, if you have a microp*nis, like, this is a trap, right? I remember going into a bathroom, pulling down his pants, and then crying because of how hard I was laughing.” “It genuinely was the smallest p*nis I've ever seen in my life. But then I still let him f*ck me because I was like, I need to know what this feels like.” Host: “How did it feel?” Ellie Nova: “Women will understand what I'm saying. When you wear a thong, and it kind of pulls up into your lips a little bit not quite a wedgie, but not not a wedgie. That's what it felt like.”

Sensitive content

“It genuinely was the smallest pnis I've ever seen in my life.” Adult film star Ellie Nova shares the wild story of how she asked her best friend for permission to sleep with her boyfriend just to satisfy her curiosity about his micropenis: Ellie Nova: “I slept with a guy with a micropnis.” Host: “Did you know that going in?” Ellie Nova: “Yes, because he was at the time my best friend's boyfriend. I brought it up to her kind of jokingly, but I was like, 'Can I try to fck him?' I was like, I need to see this. I was just so intrigued and so committed to figuring out what was going on.” “She laughed it off and she was like, 'Yeah, if you can get him to fck you. Two weeks later at a party, I managed to convince him.” Host: “How did you convince him, honestly?” Ellie Nova: “It was a lot of me just being really touchy and then being like, 'I heard that you have a really nice dck, like, can I see it?' And he was like, 'Oh my God, yes.' Any man with the self-awareness, if you have a micropnis, like, this is a trap, right? I remember going into a bathroom, pulling down his pants, and then crying because of how hard I was laughing.” “It genuinely was the smallest pnis I've ever seen in my life. But then I still let him fck me because I was like, I need to know what this feels like.” Host: “How did it feel?” Ellie Nova: “Women will understand what I'm saying. When you wear a thong, and it kind of pulls up into your lips a little bit not quite a wedgie, but not not a wedgie. That's what it felt like.”

Dickson

4,375,092 görüntüleme • 1 ay önce

Nice to see YouTube allowing content like this pithy short circulate unimpeded. As always, Rogan serves as an excellent surrogate for the modal Chill Bro with a live and let live attitude -- within reasonable limits. "I don't care if a guy wears a dress. Wear a dress, man, if that's what you like. I don't care if you want to paint your nails, wear lipstick. I don't give a fuck. Have a good time. I want you to be happy. I'll be your friend. Just don't try to compete against women in sports. That's nuts! Don't try to make women uncomfortable by walking with your dick out in the women's locker room!" How did we get to the point where such appeals have to be made at all? Where the administrative state and civil society regard and treat them as hateful bigotry?

Nice to see YouTube allowing content like this pithy short circulate unimpeded. As always, Rogan serves as an excellent surrogate for the modal Chill Bro with a live and let live attitude -- within reasonable limits. "I don't care if a guy wears a dress. Wear a dress, man, if that's what you like. I don't care if you want to paint your nails, wear lipstick. I don't give a fuck. Have a good time. I want you to be happy. I'll be your friend. Just don't try to compete against women in sports. That's nuts! Don't try to make women uncomfortable by walking with your dick out in the women's locker room!" How did we get to the point where such appeals have to be made at all? Where the administrative state and civil society regard and treat them as hateful bigotry?

Wesley Yang

48,954 görüntüleme • 1 yıl önce