Загрузка видео...

Не удалось загрузить видео

На главную

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk...

WebSecAcademy's profile picture

Web Security Academy

142,749 subscribers

26,360 просмотров • 1 год назад •via X (Twitter)

Наука и технологииОбразование
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 2

Фото профиля A_dude
A_dude1 год назад

What's the impact pls?

Фото профиля SecBriefs | Making Cybersecurity Simple
SecBriefs | Making Cybersecurity Simple1 год назад

🧠Studying for #CompTIA #Security+ but struggling with #Cybersecurity terms?🔍 Cybersecurity Dictionary for Everyone covers everything you need to know and is available on Amazon!🔐 🚀Boost your Security+ prep with it today!💡

Похожие видео

How to manually check for CL.TE Request Smuggling Vulnerabilities: 1️⃣ See if a GET request accepts POST 2️⃣ See if it accepts HTTP/1 3️⃣ Disable "Update Content-Length" 4️⃣ Send with CL & TE headers: POST / HTTP/1.1 Host: Content-Length: 6 Transfer-Encoding: chunked 0 G 5️⃣ Send request twice. If you receive a response like "Unrecognized method GPOST", you've just confirmed a CL.TE vulnerability! Try this out for yourself in our CL.TE lab:
0:30

How to manually check for CL.TE Request Smuggling Vulnerabilities: 1️⃣ See if a GET request accepts POST 2️⃣ See if it accepts HTTP/1 3️⃣ Disable "Update Content-Length" 4️⃣ Send with CL & TE headers: POST / HTTP/1.1 Host: Content-Length: 6 Transfer-Encoding: chunked 0 G 5️⃣ Send request twice. If you receive a response like "Unrecognized method GPOST", you've just confirmed a CL.TE vulnerability! Try this out for yourself in our CL.TE lab:

Web Security Academy

27,993 просмотров • 1 год назад

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec
0:28

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,781 просмотров • 1 год назад

Supabase now provides a free easy-to-use corn job scheduler! Configure the job from the dashboard and set it to send an HTTP request or call a database or edge function periodically! View the history of the past jobs that it ran so that you can debug when something goes wrong!
0:34

Supabase now provides a free easy-to-use corn job scheduler! Configure the job from the dashboard and set it to send an HTTP request or call a database or edge function periodically! View the history of the past jobs that it ran so that you can debug when something goes wrong!

Tyler Shukert

24,247 просмотров • 1 год назад

Daily testnet interactions on Arc 🪂 1. Arc Pay-Link - go to: - Create a link to request testnet USDC - Add your wallet and the amount you want - Share the link with anyone - they click and send you the USDC 2. Veero - go to: • Save a wallet as a contact for recurring payments • Pick a contact • Enter amount • Send send usdc to your saved contacts anytime. 3. Mint arc × omnihub NFT:
1:00

Daily testnet interactions on Arc 🪂 1. Arc Pay-Link - go to: - Create a link to request testnet USDC - Add your wallet and the amount you want - Share the link with anyone - they click and send you the USDC 2. Veero - go to: • Save a wallet as a contact for recurring payments • Pick a contact • Enter amount • Send send usdc to your saved contacts anytime. 3. Mint arc × omnihub NFT:

Big-Abdul

15,990 просмотров • 4 месяцев назад

How to Find Path Delimiter Issues with Burp Suite Intruder Sometimes web servers treat special characters (like ; or ?) differently in URLs. This can lead to security issues like web cache deception or access control problems. Here's how you can test for path delimiter discrepancies: 1️⃣ Capture the Request Find a request you want to test GET /my-account HTTP/2 2️⃣ Right click the request and "Send to Intruder". In Intruder, highlight add a new position after /my-account followed by abc. It should look like this: GET /my-account§§abc HTTP/2 Attack Type = Sniper (only changing one spot). Payload: Paste a list of special characters, like this: ! # $ % & ' ( ) * + , - . / : ; = ? @ [ \ ] _ ~ ... A full list of delimiters can be found here: 3️⃣ Start the Attack Press Start Attack. Look at the Status, Length, and Response columns. Watch for differences (like bigger/smaller pages, changes to status code or different behavior) and if you notice something different then you've likely found a delimiter discrepancy! 🎉 Why is this important? When special characters confuse the server or cache, you might find: 🔸 Web cache deception: Caching personal pages by accident 🔸 Access bypass: Skipping security checks 🔸 Leaked info: Seeing data you shouldn't Try this lab for yourself and dive even deeper into how to exploit this when you find it: #BugBounty #WebSecurity #BurpSuite #EthicalHacking #Cybersecurity
0:27

How to Find Path Delimiter Issues with Burp Suite Intruder Sometimes web servers treat special characters (like ; or ?) differently in URLs. This can lead to security issues like web cache deception or access control problems. Here's how you can test for path delimiter discrepancies: 1️⃣ Capture the Request Find a request you want to test GET /my-account HTTP/2 2️⃣ Right click the request and "Send to Intruder". In Intruder, highlight add a new position after /my-account followed by abc. It should look like this: GET /my-account§§abc HTTP/2 Attack Type = Sniper (only changing one spot). Payload: Paste a list of special characters, like this: ! # $ % & ' ( ) * + , - . / : ; = ? @ [ \ ] _ ~ ... A full list of delimiters can be found here: 3️⃣ Start the Attack Press Start Attack. Look at the Status, Length, and Response columns. Watch for differences (like bigger/smaller pages, changes to status code or different behavior) and if you notice something different then you've likely found a delimiter discrepancy! 🎉 Why is this important? When special characters confuse the server or cache, you might find: 🔸 Web cache deception: Caching personal pages by accident 🔸 Access bypass: Skipping security checks 🔸 Leaked info: Seeing data you shouldn't Try this lab for yourself and dive even deeper into how to exploit this when you find it: #BugBounty #WebSecurity #BurpSuite #EthicalHacking #Cybersecurity

Web Security Academy

18,220 просмотров • 1 год назад

Production traffic is not uniform. You get a few requests that need your best model, but most are simple questions and lookups you can solve with cheaper, faster models. The most expensive mistake you can make today is sending every request to your strongest model. You need routing. Period. This is the simplest trick to improve the architecture of whatever you are building. Please, don't implement routing yourself. You don't have to. I'm currently working with TrueFoundry's Auto Routing. It reads each request, classifies it as simple, medium, or complex, and sends it to the model assigned to that tier. You have two choices: 1. Send every request to the free heuristic classifier to score signals such as technical vocabulary, code, prompt length, and multi-step reasoning. 2. Send the request to an LLM classifier when its difficulty requires a more nuanced judgment. The beauty of using routing is that nothing changes in your code. You still call a single endpoint model, but routing works behind the scenes to pair every request with the best possible model. TrueFoundry ran several experiments with two different setups: 1. Send every request to Claude Opus 2. Send every request to a router with Haiku, Sonnet, and Opus The first experiment ran 550 deterministically graded academic prompts through every setup. Auto Routing was 69% cheaper while retaining 98% of the baseline quality. The second experiment ran three production-shaped workloads through every setup, using user chats, developer chats, and long agent tasks. Auto Routing was 80% cheaper. Thanks to the TrueFoundry team for partnering with me on this post.
1:28

Production traffic is not uniform. You get a few requests that need your best model, but most are simple questions and lookups you can solve with cheaper, faster models. The most expensive mistake you can make today is sending every request to your strongest model. You need routing. Period. This is the simplest trick to improve the architecture of whatever you are building. Please, don't implement routing yourself. You don't have to. I'm currently working with TrueFoundry's Auto Routing. It reads each request, classifies it as simple, medium, or complex, and sends it to the model assigned to that tier. You have two choices: 1. Send every request to the free heuristic classifier to score signals such as technical vocabulary, code, prompt length, and multi-step reasoning. 2. Send the request to an LLM classifier when its difficulty requires a more nuanced judgment. The beauty of using routing is that nothing changes in your code. You still call a single endpoint model, but routing works behind the scenes to pair every request with the best possible model. TrueFoundry ran several experiments with two different setups: 1. Send every request to Claude Opus 2. Send every request to a router with Haiku, Sonnet, and Opus The first experiment ran 550 deterministically graded academic prompts through every setup. Auto Routing was 69% cheaper while retaining 98% of the baseline quality. The second experiment ran three production-shaped workloads through every setup, using user chats, developer chats, and long agent tasks. Auto Routing was 80% cheaper. Thanks to the TrueFoundry team for partnering with me on this post.

Santiago

13,446 просмотров • 2 дней назад

This is the state of few new breed of so called educated liberal Bong girls, insulting Rabindra Nath Tagore and the National Anthem. Request Kolkata Police to have a look at this video, and if possible send these girls to rehabilitation center.
0:29

This is the state of few new breed of so called educated liberal Bong girls, insulting Rabindra Nath Tagore and the National Anthem. Request Kolkata Police to have a look at this video, and if possible send these girls to rehabilitation center.

Oxomiya Jiyori 🇮🇳

414,617 просмотров • 3 лет назад

Participating on the Xlayer Campaign, we build YieldOracle. YieldOracle (YieldOracle HQ ) is an AI-powered portfolio Onchain AI decisions If you're looking for something to actually interact with on X Layer, here's a quick guide on how to use the protocol Visit: - Connect testnet EVM wallet - Request Xlayer faucet here: [ - Click the 'Faucet' to request 'Test USDC' and 'Test X layer ETH' - Head back to the homepage and perform swaps / Request Quote and perform swap - Drop address in comment box for potential raffle The platform gives the asset: - AI Score - BUY / HOLD / AVOID signal with confidence level - Supply APY with Risk factors You can also open the Full Analysis to understand why the AI gave that particular rating. Docs: Use a burner wallet for task - Will update as it goes.
1:05

Participating on the Xlayer Campaign, we build YieldOracle. YieldOracle (YieldOracle HQ ) is an AI-powered portfolio Onchain AI decisions If you're looking for something to actually interact with on X Layer, here's a quick guide on how to use the protocol Visit: - Connect testnet EVM wallet - Request Xlayer faucet here: [ - Click the 'Faucet' to request 'Test USDC' and 'Test X layer ETH' - Head back to the homepage and perform swaps / Request Quote and perform swap - Drop address in comment box for potential raffle The platform gives the asset: - AI Score - BUY / HOLD / AVOID signal with confidence level - Supply APY with Risk factors You can also open the Full Analysis to understand why the AI gave that particular rating. Docs: Use a burner wallet for task - Will update as it goes.

〽️ᄃﾑt 🐾

42,289 просмотров • 23 дней назад

Brand new to the GitHub Copilot app? We got you covered! Start building something awesome in seconds with app ideas from the home screen. Pick something that resonates with you, send the prompt, watch Copilot create a folder, scaffold the project, and open the built-in canvas browser. Experience Autopilot and Auto model selection that routes to the best available model based on the request. When you are done ask for it to create you a repo on GitHub, pick and polish the UI, or add more fun features. Shout out to rc for adding this feature!
1:18

Brand new to the GitHub Copilot app? We got you covered! Start building something awesome in seconds with app ideas from the home screen. Pick something that resonates with you, send the prompt, watch Copilot create a folder, scaffold the project, and open the built-in canvas browser. Experience Autopilot and Auto model selection that routes to the best available model based on the request. When you are done ask for it to create you a repo on GitHub, pick and polish the UI, or add more fun features. Shout out to rc for adding this feature!

GitHub Copilot App, CLI, & SDK Log

38,021 просмотров • 2 месяцев назад

United States Attorney for the District of Columbia Jeanine Pirro blasts the Federal Reserve over its response to her legal request, accusing Chairman Powell of politicizing the matter: “My request in this case with the Federal Reserve was a legal request, and the chairman of the Federal Reserve, Powell, chose not to give a legal response. Instead, he chose to politicize and publicize it. We are talking about a billion dollars in cost overruns. Talk about fiscal irresponsibility. Talk about bureaucratic bloat. We’re not talking about a million, ten million, or a hundred million. We’re talking about a billion dollars in cost overruns in D.C., and something that is purely in my lane as the United States Attorney, lying before Congress.”
0:57

United States Attorney for the District of Columbia Jeanine Pirro blasts the Federal Reserve over its response to her legal request, accusing Chairman Powell of politicizing the matter: “My request in this case with the Federal Reserve was a legal request, and the chairman of the Federal Reserve, Powell, chose not to give a legal response. Instead, he chose to politicize and publicize it. We are talking about a billion dollars in cost overruns. Talk about fiscal irresponsibility. Talk about bureaucratic bloat. We’re not talking about a million, ten million, or a hundred million. We’re talking about a billion dollars in cost overruns in D.C., and something that is purely in my lane as the United States Attorney, lying before Congress.”

Sean Hannity 🇺🇸

172,950 просмотров • 8 месяцев назад

Why use five tools when you only need one? 👀 Lefty integrates every step of the gifting process: you can add your products, identify the right talent, handle delivery, and sync with your existing tech stack. It’s end-to-end automation designed for the modern marketer. Send us a demo request to become a one: #marketer #seeding #gifting #influencemarketing #ugc #influencermarketing #marketing #ugc #lefty
1:17

Why use five tools when you only need one? 👀 Lefty integrates every step of the gifting process: you can add your products, identify the right talent, handle delivery, and sync with your existing tech stack. It’s end-to-end automation designed for the modern marketer. Send us a demo request to become a one: #marketer #seeding #gifting #influencemarketing #ugc #influencermarketing #marketing #ugc #lefty

Lefty.io

10,841 просмотров • 6 месяцев назад

HOLY SHLIT. Nancy Pelosi is now claiming that she and others "begged" Trump to send in the National Guard on Jan 6th. Another LIE Here is a video of Pelosi ADMITTING that she was responsible for the failed security on Jan 6th, and a letter from DC Mayor Muriel Bowser ADMITTING they did not request the National Guard. Just more Democrats attempting to rewrite history with their lies.
0:41

HOLY SHLIT. Nancy Pelosi is now claiming that she and others "begged" Trump to send in the National Guard on Jan 6th. Another LIE Here is a video of Pelosi ADMITTING that she was responsible for the failed security on Jan 6th, and a letter from DC Mayor Muriel Bowser ADMITTING they did not request the National Guard. Just more Democrats attempting to rewrite history with their lies.

Libs of TikTok

1,165,370 просмотров • 1 год назад

i made a website with all of my fav mugs whenever i go out to somewhere nice i'd always flip the plates upside down and write down nice ceramic brands you can put some on the famous SÆTTER shelf and then send the shelf to your partner (as a gift request :D) this is very inspired by ben and Justin Farrugia and Karissa's reminder of the shelf
0:22

i made a website with all of my fav mugs whenever i go out to somewhere nice i'd always flip the plates upside down and write down nice ceramic brands you can put some on the famous SÆTTER shelf and then send the shelf to your partner (as a gift request :D) this is very inspired by ben and Justin Farrugia and Karissa's reminder of the shelf

jen

43,198 просмотров • 2 месяцев назад

I just built an AI ghostwriter that is designed to mimic your unique voice (and no it won’t sound like an AI wrote it) here’s how it works: - you give it a tweet request - using NLP we finds similar tweets that you have previously posted about the same topic - the AI learns the topic, your content structure, your vocabulary, everything - we returns a tweet in the same fashion as if you wrote it yourself I recorded a walkthrough on how to build this yourself (including the code). reply to this tweet w/ the word “content” & I’ll send it to you (must be following so I can DM)
0:24

I just built an AI ghostwriter that is designed to mimic your unique voice (and no it won’t sound like an AI wrote it) here’s how it works: - you give it a tweet request - using NLP we finds similar tweets that you have previously posted about the same topic - the AI learns the topic, your content structure, your vocabulary, everything - we returns a tweet in the same fashion as if you wrote it yourself I recorded a walkthrough on how to build this yourself (including the code). reply to this tweet w/ the word “content” & I’ll send it to you (must be following so I can DM)

Tyler

24,009 просмотров • 1 год назад

We audited over 70 projects this week. You can now find some of the projects you came across in the trenches and wondered: What does it do? Does it generate revenue? Is there a connection between that revenue and the token? You can review them for free on our list. If there’s a coin you want us to audit, just send its contract address through the “Request an Audit” button.
0:23

We audited over 70 projects this week. You can now find some of the projects you came across in the trenches and wondered: What does it do? Does it generate revenue? Is there a connection between that revenue and the token? You can review them for free on our list. If there’s a coin you want us to audit, just send its contract address through the “Request an Audit” button.

Kemal Hiçyılmaz

47,155 просмотров • 10 дней назад

My agent is now paying for its own data. No API key. No account. No credit card. Check the video I recorded. This uses the x402 open protocol built by Coinbase, along with a simple skill. This is an open protocol governed by the Linux Foundation. To complete a goal, an agent can now search for an actor on the Apify Store, pay for it, and use it without any human intervention. The way it works is pretty simple: 1. Your agent finds an Actor it wants to use 2. It sends a request 3. The Actor sends back an HTTP 402 "Payment Required" response 4. Agent authorizes payment from a wallet in USDC on Base 5. The Actor runs 6. User receives the result The model is pay-as-you-go: the agent authorizes a spending ceiling, pays only for usage, and the remaining balance is automatically settled. This brings an entire marketplace of AI tools into the agentic economy. Here is the skill you need. Add it to your agent, and it will take care of everything for you: If you want to know how this works, including what you can do with $1, read this post: Thanks to the Apify team for partnering with me on this post.
5:56

My agent is now paying for its own data. No API key. No account. No credit card. Check the video I recorded. This uses the x402 open protocol built by Coinbase, along with a simple skill. This is an open protocol governed by the Linux Foundation. To complete a goal, an agent can now search for an actor on the Apify Store, pay for it, and use it without any human intervention. The way it works is pretty simple: 1. Your agent finds an Actor it wants to use 2. It sends a request 3. The Actor sends back an HTTP 402 "Payment Required" response 4. Agent authorizes payment from a wallet in USDC on Base 5. The Actor runs 6. User receives the result The model is pay-as-you-go: the agent authorizes a spending ceiling, pays only for usage, and the remaining balance is automatically settled. This brings an entire marketplace of AI tools into the agentic economy. Here is the skill you need. Add it to your agent, and it will take care of everything for you: If you want to know how this works, including what you can do with $1, read this post: Thanks to the Apify team for partnering with me on this post.

Santiago

26,962 просмотров • 2 месяцев назад

My message to Elon Musk: It's time to ban porn on X. There are many reasons why it's a good idea to eliminate this inherited issue. The most important is the prolific, and often monetized, presence of CSAM material. I have teams ready to relay evidence at your request. Just let us know where to send it. X is such an important platform, and it's time to ensure demons aren't profiting from the abuse of children. As new troves of Epstein documents are getting exposed, and the nation’s attention is on this issue, now's the time to deal with it.
2:33

My message to Elon Musk: It's time to ban porn on X. There are many reasons why it's a good idea to eliminate this inherited issue. The most important is the prolific, and often monetized, presence of CSAM material. I have teams ready to relay evidence at your request. Just let us know where to send it. X is such an important platform, and it's time to ensure demons aren't profiting from the abuse of children. As new troves of Epstein documents are getting exposed, and the nation’s attention is on this issue, now's the time to deal with it.

Andrew Kolvet

161,278 просмотров • 7 месяцев назад