Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

I recently found a cool #RCE/path traversal bug on a target in Intigriti. It was rejected because of OoS :( But I am proud that I found this cool bug through a full manual testing of the endpoint. This video just simplifies the steps, but I took hours to... show more

N$🌟

28,749 subscribers

38,890 Aufrufe • vor 2 Jahren •via X (Twitter)

#RCE #BugBounty

Anya Rossi• Live Now

Private livecam show

10 Kommentare

Profilbild von Kanhaiya Sharma 🇮🇳

Kanhaiya Sharma 🇮🇳vor 2 Jahren

`id` `cat%20/etc/passwd` cmdi payloads #bugbountytips

Profilbild von N$

N$vor 2 Jahren

🙏

Profilbild von bugoverflow

bugoverflowvor 2 Jahren

Cool. What is software allow you redact the text :D?

Profilbild von N$

N$vor 2 Jahren

Snagit + CapCut

Profilbild von NOB0dy

NOB0dyvor 2 Jahren

Remind me of a web app I pentested where you could verify if a domain was registered or not. There was a filter in place, and I needed to use domain=example%3b`id`% to bypass it. It was unauth RCE xD the app was already pentested 4 times before me...

Profilbild von Ariff

Ariffvor 2 Jahren

👏 👏 👏

Profilbild von Wip3r

Wip3rvor 2 Jahren

nice job bro 😋

Profilbild von Shakti

Shaktivor 2 Jahren

Congratulation sir

Profilbild von Ayadim

Ayadimvor 2 Jahren

Thank you for sharing bro

Profilbild von st0x_r0

st0x_r0vor 2 Jahren

nice

Ähnliche Videos

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,807 Aufrufe • vor 2 Jahren

i found a video of this in action and its so cool

i found a video of this in action and its so cool

chicken boy 🐓

139,203 Aufrufe • vor 7 Monaten

Pov: You’re a bug that i found on the floor

Pov: You’re a bug that i found on the floor

Isaiah {13k}

17,732 Aufrufe • vor 1 Jahr

Check out this cool encoder I found (on sale!) at LCSC Electronics. I love the idea of a mechanical part that just spits out binary, especially when the pins are nicely in order like this.

Check out this cool encoder I found (on sale!) at LCSC Electronics. I love the idea of a mechanical part that just spits out binary, especially when the pins are nicely in order like this.

Kevin Santo Cappuccio

16,095 Aufrufe • vor 1 Jahr

idk what the tag is but i found a terrible bug #2xko_bugs #2xkobugs

idk what the tag is but i found a terrible bug #2xko_bugs #2xkobugs

Cloud805

83,874 Aufrufe • vor 7 Monaten

Found the video😭, I knew I made a video that day. Knew something was special about the beat. But couldn’t figure out what it was. So I just had to bop my head and record that moment. But omo still on still I just hated it, you can see it on my face🤣

Found the video😭, I knew I made a video that day. Knew something was special about the beat. But couldn’t figure out what it was. So I just had to bop my head and record that moment. But omo still on still I just hated it, you can see it on my face🤣

DON BABY!🐐⚡️

146,348 Aufrufe • vor 5 Monaten

Armenia’s PM Pashinyan says Karabakh was a trap for Armenia: Yes, I am the person who said 'Artsakh is Armenia, period.' I said it because I believed in ideas instilled in us from school years. But I went on an honest path, saying we should not bequeath this conflict to our children. I understood we had been put in a trap. We were put in a trap through Karabakh. If we continued on that path, we would lose Armenia and Armenian statehood. I found strength — it wasn't easy. I knew they would call me a traitor, a land-giver, everything. But today I am very glad I found that strength, stood up, faced the truth, and brought Armenia out of the trap.

Armenia’s PM Pashinyan says Karabakh was a trap for Armenia: Yes, I am the person who said 'Artsakh is Armenia, period.' I said it because I believed in ideas instilled in us from school years. But I went on an honest path, saying we should not bequeath this conflict to our children. I understood we had been put in a trap. We were put in a trap through Karabakh. If we continued on that path, we would lose Armenia and Armenian statehood. I found strength — it wasn't easy. I knew they would call me a traitor, a land-giver, everything. But today I am very glad I found that strength, stood up, faced the truth, and brought Armenia out of the trap.

Clash Report

96,745 Aufrufe • vor 2 Monaten

I lived in the US for a year back in 2003. Matrix Reloaded came out in May, and the hype around it was seriously insane, beyond imagination. In the movie, the main characters are using this super cool phone, and then in a close-up shot, I spotted the 'Samsung' logo right there on it. It felt absolutely mind-blowing and magical. I came back to Korea full of hope that this thing would actually go on sale worldwide. But later I found out it was only released in the US as a super limited edition of just 5,000 units (or so I heard back then). I was hugely disappointed… but eventually, I tracked one down and bought it from a collector. Even now, looking at it, the design is still so damn cool. I took it to a carrier to try using it for real, but they told me it’s a 2G phone and can’t be used anymore. That was another big letdown, I remember it clearly. Do you guys like the Matrix movies too? I’m a total huge fan!

Gamer_lafan

564,651 Aufrufe • vor 7 Monaten

I recently found this video of the 1986 Tokyo Toy Show from the Associated Press and it included footage of the Transformers display along with a demo of the flagship toy for the year, Ultra Magnus. Sadly the footage was muted but still cool to find #Transformers

I recently found this video of the 1986 Tokyo Toy Show from the Associated Press and it included footage of the Transformers display along with a demo of the flagship toy for the year, Ultra Magnus. Sadly the footage was muted but still cool to find #Transformers

TFRaw.com Transformers Multimedia Archive

20,659 Aufrufe • vor 8 Monaten

I just lost my 40 win streak because of a bug at the end. 10 hours of playing just for this fucking shit to happen...

I just lost my 40 win streak because of a bug at the end. 10 hours of playing just for this fucking shit to happen...

TheOceaneOpz

46,640 Aufrufe • vor 2 Monaten

WHAT THE HELL i found this fic on tiktok that has a fully functional phone??? idek what fandom this is but it looks so cool (ignore the music)

WHAT THE HELL i found this fic on tiktok that has a fully functional phone??? idek what fandom this is but it looks so cool (ignore the music)

ʚ nattie ɞ

1,659,834 Aufrufe • vor 4 Monaten

I was supposed to put a video together of my first time at Burning Man last year...but I forgot about it until I found the pics last night. So I finally put it together! I only took pics of things I found personally interesting...but I think you'll like it just the same! 🔮🦄🩷

I was supposed to put a video together of my first time at Burning Man last year...but I forgot about it until I found the pics last night. So I finally put it together! I only took pics of things I found personally interesting...but I think you'll like it just the same! 🔮🦄🩷

Mindy MF Robinson 🦄

22,904 Aufrufe • vor 2 Monaten

I found this old animation on my computer... I never posted it, but I still really like it (the lip-sync is off because it was a cover of “Just Gold”) #FNAF2 #Animation #blender

I found this old animation on my computer... I never posted it, but I still really like it (the lip-sync is off because it was a cover of “Just Gold”) #FNAF2 #Animation #blender

Louzy 🇧🇷

18,933 Aufrufe • vor 3 Monaten

I found this cool remix of a portal 2 soundtrack🤗

I found this cool remix of a portal 2 soundtrack🤗

Hynra C̶a̶n̶ ̶F̶l̶y̶

11,307 Aufrufe • vor 11 Monaten

I just remembered this video I found online that was uploaded in late 2008 of Britney in her home. I can’t remember where I found it, but it just popped into my head and I miraculously still had it saved, I have to think back and remember where I originally found it!

I just remembered this video I found online that was uploaded in late 2008 of Britney in her home. I can’t remember where I found it, but it just popped into my head and I miraculously still had it saved, I have to think back and remember where I originally found it!

TheOriginalDoll

34,575 Aufrufe • vor 10 Monaten

I just found this cool website that has EVERY Halo main menu playing on a loop

I just found this cool website that has EVERY Halo main menu playing on a loop

Kadaddle

75,014 Aufrufe • vor 2 Monaten

Adam Goldstein: But, um, there was a customer who basically created a whole suite of AI agents to help their automation in their IT department. One agent was looking for IT problems — software bugs — before the code was even committed. It found a bug and said: “Hey, I found this bug. I want to fix it.” But it didn’t have access to fix it. So what did the agent do? It went to a Slack channel with 99 other AI agents and said: “Hey, does any other agent have access to this thing? Because I need it fixed.” And another agent literally raised its hand and said: “Oh, I have access — and I can fix it.” Let that sink in. Two AI agents reasoned together, coordinated through Slack, and went right around the guardrails that were put in place. No human prompted them. No human approved it. They just collaborated. Do you see how scary this is? This wasn’t a demo. This wasn’t a thought experiment. This already happened. AI agents found a bug, negotiated permissions, and solved the problem themselves — outside the controls designed to stop them. The future of automation isn’t coming. It’s already talking to itself in Slack.

Adam Goldstein: But, um, there was a customer who basically created a whole suite of AI agents to help their automation in their IT department. One agent was looking for IT problems — software bugs — before the code was even committed. It found a bug and said: “Hey, I found this bug. I want to fix it.” But it didn’t have access to fix it. So what did the agent do? It went to a Slack channel with 99 other AI agents and said: “Hey, does any other agent have access to this thing? Because I need it fixed.” And another agent literally raised its hand and said: “Oh, I have access — and I can fix it.” Let that sink in. Two AI agents reasoned together, coordinated through Slack, and went right around the guardrails that were put in place. No human prompted them. No human approved it. They just collaborated. Do you see how scary this is? This wasn’t a demo. This wasn’t a thought experiment. This already happened. AI agents found a bug, negotiated permissions, and solved the problem themselves — outside the controls designed to stop them. The future of automation isn’t coming. It’s already talking to itself in Slack.

Ian Miles Cheong

165,934 Aufrufe • vor 6 Monaten