正在加载视频...

视频加载失败

返回首页

I recently found a cool #RCE/path traversal bug on a target in Intigriti. It was rejected because of OoS :( But I am proud that I found this cool bug through a full manual testing of the endpoint. This video just simplifies the steps, but I took hours to...

__nav1n_'s profile picture

N$🌟

28,749 subscribers

38,890 次观看 • 2 年前 •via X (Twitter)

#RCE#BugBounty
LIVE

Anya Rossi• Live Now

Private livecam show

10 条评论

Kanhaiya Sharma 🇮🇳 的头像
Kanhaiya Sharma 🇮🇳2 年前

`id` `cat%20/etc/passwd` cmdi payloads #bugbountytips

N$ 的头像
N$2 年前

🙏

bugoverflow 的头像
bugoverflow2 年前

Cool. What is software allow you redact the text :D?

N$ 的头像
N$2 年前

Snagit + CapCut

NOB0dy 的头像
NOB0dy2 年前

Remind me of a web app I pentested where you could verify if a domain was registered or not. There was a filter in place, and I needed to use domain=example%3b`id`% to bypass it. It was unauth RCE xD the app was already pentested 4 times before me...

Ariff 的头像
Ariff2 年前

👏 👏 👏

Wip3r 的头像
Wip3r2 年前

nice job bro 😋

Shakti 的头像
Shakti2 年前

Congratulation sir

Ayadim 的头像
Ayadim2 年前

Thank you for sharing bro

st0x_r0 的头像
st0x_r02 年前

nice

相关视频

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

77,055 次观看 • 2 年前

Got this visual bug at the end of Act 2 of E-day. I legit thought it was just a cool stylistic choice at first and was a tiny bit bummed out that when I reloaded the save after a death it went away lol
0:33

Got this visual bug at the end of Act 2 of E-day. I legit thought it was just a cool stylistic choice at first and was a tiny bit bummed out that when I reloaded the save after a death it went away lol

Nerbit

82,188 次观看 • 4 天前

i found a video of this in action and its so cool
0:29

i found a video of this in action and its so cool

chicken boy 🐓

139,203 次观看 • 8 个月前

Pov: You’re a bug that i found on the floor
0:20

Pov: You’re a bug that i found on the floor

Isaiah {13k}

17,732 次观看 • 1 年前

Check out this cool encoder I found (on sale!) at LCSC Electronics. I love the idea of a mechanical part that just spits out binary, especially when the pins are nicely in order like this.
0:39

Check out this cool encoder I found (on sale!) at LCSC Electronics. I love the idea of a mechanical part that just spits out binary, especially when the pins are nicely in order like this.

Kevin Santo Cappuccio

16,095 次观看 • 1 年前

idk what the tag is but i found a terrible bug #2xko_bugs #2xkobugs
1:00

idk what the tag is but i found a terrible bug #2xko_bugs #2xkobugs

Cloud805

83,874 次观看 • 8 个月前

Found the video😭, I knew I made a video that day. Knew something was special about the beat. But couldn’t figure out what it was. So I just had to bop my head and record that moment. But omo still on still I just hated it, you can see it on my face🤣
0:58

Found the video😭, I knew I made a video that day. Knew something was special about the beat. But couldn’t figure out what it was. So I just had to bop my head and record that moment. But omo still on still I just hated it, you can see it on my face🤣

DON BABY!🐐⚡️

146,348 次观看 • 7 个月前

Armenia’s PM Pashinyan says Karabakh was a trap for Armenia: Yes, I am the person who said 'Artsakh is Armenia, period.' I said it because I believed in ideas instilled in us from school years. But I went on an honest path, saying we should not bequeath this conflict to our children. I understood we had been put in a trap. We were put in a trap through Karabakh. If we continued on that path, we would lose Armenia and Armenian statehood. I found strength — it wasn't easy. I knew they would call me a traitor, a land-giver, everything. But today I am very glad I found that strength, stood up, faced the truth, and brought Armenia out of the trap.
1:22

Armenia’s PM Pashinyan says Karabakh was a trap for Armenia: Yes, I am the person who said 'Artsakh is Armenia, period.' I said it because I believed in ideas instilled in us from school years. But I went on an honest path, saying we should not bequeath this conflict to our children. I understood we had been put in a trap. We were put in a trap through Karabakh. If we continued on that path, we would lose Armenia and Armenian statehood. I found strength — it wasn't easy. I knew they would call me a traitor, a land-giver, everything. But today I am very glad I found that strength, stood up, faced the truth, and brought Armenia out of the trap.

Clash Report

96,745 次观看 • 4 个月前

I lived in the US for a year back in 2003. Matrix Reloaded came out in May, and the hype around it was seriously insane, beyond imagination. In the movie, the main characters are using this super cool phone, and then in a close-up shot, I spotted the 'Samsung' logo right there on it. It felt absolutely mind-blowing and magical. I came back to Korea full of hope that this thing would actually go on sale worldwide. But later I found out it was only released in the US as a super limited edition of just 5,000 units (or so I heard back then). I was hugely disappointed… but eventually, I tracked one down and bought it from a collector. Even now, looking at it, the design is still so damn cool. I took it to a carrier to try using it for real, but they told me it’s a 2G phone and can’t be used anymore. That was another big letdown, I remember it clearly. Do you guys like the Matrix movies too? I’m a total huge fan!
0:59

I lived in the US for a year back in 2003. Matrix Reloaded came out in May, and the hype around it was seriously insane, beyond imagination. In the movie, the main characters are using this super cool phone, and then in a close-up shot, I spotted the 'Samsung' logo right there on it. It felt absolutely mind-blowing and magical. I came back to Korea full of hope that this thing would actually go on sale worldwide. But later I found out it was only released in the US as a super limited edition of just 5,000 units (or so I heard back then). I was hugely disappointed… but eventually, I tracked one down and bought it from a collector. Even now, looking at it, the design is still so damn cool. I took it to a carrier to try using it for real, but they told me it’s a 2G phone and can’t be used anymore. That was another big letdown, I remember it clearly. Do you guys like the Matrix movies too? I’m a total huge fan!

Gamer_lafan

564,861 次观看 • 8 个月前

i cant figure out a single word in this song but its still cool
2:33

i cant figure out a single word in this song but its still cool

hyun

50,514 次观看 • 3 个月前

I recently found this video of the 1986 Tokyo Toy Show from the Associated Press and it included footage of the Transformers display along with a demo of the flagship toy for the year, Ultra Magnus. Sadly the footage was muted but still cool to find #Transformers
0:55

I recently found this video of the 1986 Tokyo Toy Show from the Associated Press and it included footage of the Transformers display along with a demo of the flagship toy for the year, Ultra Magnus. Sadly the footage was muted but still cool to find #Transformers

TFRaw.com Transformers Multimedia Archive

20,659 次观看 • 9 个月前

I just lost my 40 win streak because of a bug at the end. 10 hours of playing just for this fucking shit to happen...
0:30

I just lost my 40 win streak because of a bug at the end. 10 hours of playing just for this fucking shit to happen...

TheOceaneOpz

46,655 次观看 • 3 个月前

WHAT THE HELL i found this fic on tiktok that has a fully functional phone??? idek what fandom this is but it looks so cool (ignore the music)
0:45

WHAT THE HELL i found this fic on tiktok that has a fully functional phone??? idek what fandom this is but it looks so cool (ignore the music)

ʚ nattie ɞ

1,659,834 次观看 • 6 个月前

I was supposed to put a video together of my first time at Burning Man last year...but I forgot about it until I found the pics last night. So I finally put it together! I only took pics of things I found personally interesting...but I think you'll like it just the same! 🔮🦄🩷
2:47

I was supposed to put a video together of my first time at Burning Man last year...but I forgot about it until I found the pics last night. So I finally put it together! I only took pics of things I found personally interesting...but I think you'll like it just the same! 🔮🦄🩷

Mindy MF Robinson 🦄

22,904 次观看 • 3 个月前

I found this old animation on my computer... I never posted it, but I still really like it (the lip-sync is off because it was a cover of “Just Gold”) #FNAF2 #Animation #blender
0:23

I found this old animation on my computer... I never posted it, but I still really like it (the lip-sync is off because it was a cover of “Just Gold”) #FNAF2 #Animation #blender

Louzy 🇧🇷

18,933 次观看 • 5 个月前

I found this cool remix of a portal 2 soundtrack🤗
0:48

I found this cool remix of a portal 2 soundtrack🤗

Hynra C̶a̶n̶ ̶F̶l̶y̶

11,307 次观看 • 1 年前

I just remembered this video I found online that was uploaded in late 2008 of Britney in her home. I can’t remember where I found it, but it just popped into my head and I miraculously still had it saved, I have to think back and remember where I originally found it!
0:29

I just remembered this video I found online that was uploaded in late 2008 of Britney in her home. I can’t remember where I found it, but it just popped into my head and I miraculously still had it saved, I have to think back and remember where I originally found it!

TheOriginalDoll

34,575 次观看 • 1 年前