Загрузка видео...

Не удалось загрузить видео

На главную

I recently found a cool #RCE/path traversal bug on a target in Intigriti. It was rejected because of OoS :( But I am proud that I found this cool bug through a full manual testing of the endpoint. This video just simplifies the steps, but I took hours to...

__nav1n_'s profile picture

N$🌟

28,749 subscribers

38,890 просмотров • 2 лет назад •via X (Twitter)

#RCE#BugBounty
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 10

Фото профиля Kanhaiya Sharma 🇮🇳
Kanhaiya Sharma 🇮🇳2 лет назад

`id` `cat%20/etc/passwd` cmdi payloads #bugbountytips

Фото профиля N$
N$2 лет назад

🙏

Фото профиля bugoverflow
bugoverflow2 лет назад

Cool. What is software allow you redact the text :D?

Фото профиля N$
N$2 лет назад

Snagit + CapCut

Фото профиля NOB0dy
NOB0dy2 лет назад

Remind me of a web app I pentested where you could verify if a domain was registered or not. There was a filter in place, and I needed to use domain=example%3b`id`% to bypass it. It was unauth RCE xD the app was already pentested 4 times before me...

Фото профиля Ariff
Ariff2 лет назад

👏 👏 👏

Фото профиля Wip3r
Wip3r2 лет назад

nice job bro 😋

Фото профиля Shakti
Shakti2 лет назад

Congratulation sir

Фото профиля Ayadim
Ayadim2 лет назад

Thank you for sharing bro

Фото профиля st0x_r0
st0x_r02 лет назад

nice

Похожие видео

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,821 просмотров • 2 лет назад

i found a video of this in action and its so cool
0:29

i found a video of this in action and its so cool

chicken boy 🐓

139,203 просмотров • 7 месяцев назад

Pov: You’re a bug that i found on the floor
0:20

Pov: You’re a bug that i found on the floor

Isaiah {13k}

17,732 просмотров • 1 год назад

Check out this cool encoder I found (on sale!) at LCSC Electronics. I love the idea of a mechanical part that just spits out binary, especially when the pins are nicely in order like this.
0:39

Check out this cool encoder I found (on sale!) at LCSC Electronics. I love the idea of a mechanical part that just spits out binary, especially when the pins are nicely in order like this.

Kevin Santo Cappuccio

16,095 просмотров • 1 год назад

idk what the tag is but i found a terrible bug #2xko_bugs #2xkobugs
1:00

idk what the tag is but i found a terrible bug #2xko_bugs #2xkobugs

Cloud805

83,874 просмотров • 7 месяцев назад

Found the video😭, I knew I made a video that day. Knew something was special about the beat. But couldn’t figure out what it was. So I just had to bop my head and record that moment. But omo still on still I just hated it, you can see it on my face🤣
0:58

Found the video😭, I knew I made a video that day. Knew something was special about the beat. But couldn’t figure out what it was. So I just had to bop my head and record that moment. But omo still on still I just hated it, you can see it on my face🤣

DON BABY!🐐⚡️

146,348 просмотров • 5 месяцев назад

Armenia’s PM Pashinyan says Karabakh was a trap for Armenia: Yes, I am the person who said 'Artsakh is Armenia, period.' I said it because I believed in ideas instilled in us from school years. But I went on an honest path, saying we should not bequeath this conflict to our children. I understood we had been put in a trap. We were put in a trap through Karabakh. If we continued on that path, we would lose Armenia and Armenian statehood. I found strength — it wasn't easy. I knew they would call me a traitor, a land-giver, everything. But today I am very glad I found that strength, stood up, faced the truth, and brought Armenia out of the trap.
1:22

Armenia’s PM Pashinyan says Karabakh was a trap for Armenia: Yes, I am the person who said 'Artsakh is Armenia, period.' I said it because I believed in ideas instilled in us from school years. But I went on an honest path, saying we should not bequeath this conflict to our children. I understood we had been put in a trap. We were put in a trap through Karabakh. If we continued on that path, we would lose Armenia and Armenian statehood. I found strength — it wasn't easy. I knew they would call me a traitor, a land-giver, everything. But today I am very glad I found that strength, stood up, faced the truth, and brought Armenia out of the trap.

Clash Report

96,745 просмотров • 2 месяцев назад

I found a pretty good Paul Harvey AI.... and it spit out this, after a few hours work this evening. It's not perfect, but it's what I heard in my head when I wrote this, and it's very cool to finally hear it in his voice.
2:12

I found a pretty good Paul Harvey AI.... and it spit out this, after a few hours work this evening. It's not perfect, but it's what I heard in my head when I wrote this, and it's very cool to finally hear it in his voice.

🍊🍊Capt'n Bo🍊🍊

67,341 просмотров • 1 год назад

I lived in the US for a year back in 2003. Matrix Reloaded came out in May, and the hype around it was seriously insane, beyond imagination. In the movie, the main characters are using this super cool phone, and then in a close-up shot, I spotted the 'Samsung' logo right there on it. It felt absolutely mind-blowing and magical. I came back to Korea full of hope that this thing would actually go on sale worldwide. But later I found out it was only released in the US as a super limited edition of just 5,000 units (or so I heard back then). I was hugely disappointed… but eventually, I tracked one down and bought it from a collector. Even now, looking at it, the design is still so damn cool. I took it to a carrier to try using it for real, but they told me it’s a 2G phone and can’t be used anymore. That was another big letdown, I remember it clearly. Do you guys like the Matrix movies too? I’m a total huge fan!
0:59

I lived in the US for a year back in 2003. Matrix Reloaded came out in May, and the hype around it was seriously insane, beyond imagination. In the movie, the main characters are using this super cool phone, and then in a close-up shot, I spotted the 'Samsung' logo right there on it. It felt absolutely mind-blowing and magical. I came back to Korea full of hope that this thing would actually go on sale worldwide. But later I found out it was only released in the US as a super limited edition of just 5,000 units (or so I heard back then). I was hugely disappointed… but eventually, I tracked one down and bought it from a collector. Even now, looking at it, the design is still so damn cool. I took it to a carrier to try using it for real, but they told me it’s a 2G phone and can’t be used anymore. That was another big letdown, I remember it clearly. Do you guys like the Matrix movies too? I’m a total huge fan!

Gamer_lafan

564,651 просмотров • 7 месяцев назад

I recently found this video of the 1986 Tokyo Toy Show from the Associated Press and it included footage of the Transformers display along with a demo of the flagship toy for the year, Ultra Magnus. Sadly the footage was muted but still cool to find #Transformers
0:55

I recently found this video of the 1986 Tokyo Toy Show from the Associated Press and it included footage of the Transformers display along with a demo of the flagship toy for the year, Ultra Magnus. Sadly the footage was muted but still cool to find #Transformers

TFRaw.com Transformers Multimedia Archive

20,659 просмотров • 8 месяцев назад

WHAT THE HELL i found this fic on tiktok that has a fully functional phone??? idek what fandom this is but it looks so cool (ignore the music)
0:45

WHAT THE HELL i found this fic on tiktok that has a fully functional phone??? idek what fandom this is but it looks so cool (ignore the music)

ʚ nattie ɞ

1,659,834 просмотров • 4 месяцев назад

I just lost my 40 win streak because of a bug at the end. 10 hours of playing just for this fucking shit to happen...
0:30

I just lost my 40 win streak because of a bug at the end. 10 hours of playing just for this fucking shit to happen...

TheOceaneOpz

46,640 просмотров • 2 месяцев назад

I was supposed to put a video together of my first time at Burning Man last year...but I forgot about it until I found the pics last night. So I finally put it together! I only took pics of things I found personally interesting...but I think you'll like it just the same! 🔮🦄🩷
2:47

I was supposed to put a video together of my first time at Burning Man last year...but I forgot about it until I found the pics last night. So I finally put it together! I only took pics of things I found personally interesting...but I think you'll like it just the same! 🔮🦄🩷

Mindy MF Robinson 🦄

22,904 просмотров • 2 месяцев назад

I found this old animation on my computer... I never posted it, but I still really like it (the lip-sync is off because it was a cover of “Just Gold”) #FNAF2 #Animation #blender
0:23

I found this old animation on my computer... I never posted it, but I still really like it (the lip-sync is off because it was a cover of “Just Gold”) #FNAF2 #Animation #blender

Louzy 🇧🇷

18,933 просмотров • 3 месяцев назад

I found this cool remix of a portal 2 soundtrack🤗
0:48

I found this cool remix of a portal 2 soundtrack🤗

Hynra C̶a̶n̶ ̶F̶l̶y̶

11,307 просмотров • 11 месяцев назад

I just remembered this video I found online that was uploaded in late 2008 of Britney in her home. I can’t remember where I found it, but it just popped into my head and I miraculously still had it saved, I have to think back and remember where I originally found it!
0:29

I just remembered this video I found online that was uploaded in late 2008 of Britney in her home. I can’t remember where I found it, but it just popped into my head and I miraculously still had it saved, I have to think back and remember where I originally found it!

TheOriginalDoll

34,575 просмотров • 10 месяцев назад

Adam Goldstein: But, um, there was a customer who basically created a whole suite of AI agents to help their automation in their IT department. One agent was looking for IT problems — software bugs — before the code was even committed. It found a bug and said: “Hey, I found this bug. I want to fix it.” But it didn’t have access to fix it. So what did the agent do? It went to a Slack channel with 99 other AI agents and said: “Hey, does any other agent have access to this thing? Because I need it fixed.” And another agent literally raised its hand and said: “Oh, I have access — and I can fix it.” Let that sink in. Two AI agents reasoned together, coordinated through Slack, and went right around the guardrails that were put in place. No human prompted them. No human approved it. They just collaborated. Do you see how scary this is? This wasn’t a demo. This wasn’t a thought experiment. This already happened. AI agents found a bug, negotiated permissions, and solved the problem themselves — outside the controls designed to stop them. The future of automation isn’t coming. It’s already talking to itself in Slack.
1:04

Adam Goldstein: But, um, there was a customer who basically created a whole suite of AI agents to help their automation in their IT department. One agent was looking for IT problems — software bugs — before the code was even committed. It found a bug and said: “Hey, I found this bug. I want to fix it.” But it didn’t have access to fix it. So what did the agent do? It went to a Slack channel with 99 other AI agents and said: “Hey, does any other agent have access to this thing? Because I need it fixed.” And another agent literally raised its hand and said: “Oh, I have access — and I can fix it.” Let that sink in. Two AI agents reasoned together, coordinated through Slack, and went right around the guardrails that were put in place. No human prompted them. No human approved it. They just collaborated. Do you see how scary this is? This wasn’t a demo. This wasn’t a thought experiment. This already happened. AI agents found a bug, negotiated permissions, and solved the problem themselves — outside the controls designed to stop them. The future of automation isn’t coming. It’s already talking to itself in Slack.

Ian Miles

166,359 просмотров • 6 месяцев назад