Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

I recently found a cool #RCE/path traversal bug on a target in Intigriti. It was rejected because of OoS :( But I am proud that I found this cool bug through a full manual testing of the endpoint. This video just simplifies the steps, but I took hours to...

__nav1n_'s profile picture

N$🌟

28,749 subscribers

38,890 görüntüleme • 2 yıl önce •via X (Twitter)

#RCE#BugBounty
LIVE

Anya Rossi• Live Now

Private livecam show

10 Yorum

Kanhaiya Sharma 🇮🇳 profil fotoğrafı
Kanhaiya Sharma 🇮🇳2 yıl önce

`id` `cat%20/etc/passwd` cmdi payloads #bugbountytips

N$ profil fotoğrafı
N$2 yıl önce

🙏

bugoverflow profil fotoğrafı
bugoverflow2 yıl önce

Cool. What is software allow you redact the text :D?

N$ profil fotoğrafı
N$2 yıl önce

Snagit + CapCut

NOB0dy profil fotoğrafı
NOB0dy2 yıl önce

Remind me of a web app I pentested where you could verify if a domain was registered or not. There was a filter in place, and I needed to use domain=example%3b`id`% to bypass it. It was unauth RCE xD the app was already pentested 4 times before me...

Ariff profil fotoğrafı
Ariff2 yıl önce

👏 👏 👏

Wip3r profil fotoğrafı
Wip3r2 yıl önce

nice job bro 😋

Shakti profil fotoğrafı
Shakti2 yıl önce

Congratulation sir

Ayadim profil fotoğrafı
Ayadim2 yıl önce

Thank you for sharing bro

st0x_r0 profil fotoğrafı
st0x_r02 yıl önce

nice

Benzer Videolar

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,821 görüntüleme • 2 yıl önce

i found a video of this in action and its so cool
0:29

i found a video of this in action and its so cool

chicken boy 🐓

139,203 görüntüleme • 7 ay önce

Pov: You’re a bug that i found on the floor
0:20

Pov: You’re a bug that i found on the floor

Isaiah {13k}

17,732 görüntüleme • 1 yıl önce

Check out this cool encoder I found (on sale!) at LCSC Electronics. I love the idea of a mechanical part that just spits out binary, especially when the pins are nicely in order like this.
0:39

Check out this cool encoder I found (on sale!) at LCSC Electronics. I love the idea of a mechanical part that just spits out binary, especially when the pins are nicely in order like this.

Kevin Santo Cappuccio

16,095 görüntüleme • 1 yıl önce

idk what the tag is but i found a terrible bug #2xko_bugs #2xkobugs
1:00

idk what the tag is but i found a terrible bug #2xko_bugs #2xkobugs

Cloud805

83,874 görüntüleme • 7 ay önce

Found the video😭, I knew I made a video that day. Knew something was special about the beat. But couldn’t figure out what it was. So I just had to bop my head and record that moment. But omo still on still I just hated it, you can see it on my face🤣
0:58

Found the video😭, I knew I made a video that day. Knew something was special about the beat. But couldn’t figure out what it was. So I just had to bop my head and record that moment. But omo still on still I just hated it, you can see it on my face🤣

DON BABY!🐐⚡️

146,348 görüntüleme • 5 ay önce

Armenia’s PM Pashinyan says Karabakh was a trap for Armenia: Yes, I am the person who said 'Artsakh is Armenia, period.' I said it because I believed in ideas instilled in us from school years. But I went on an honest path, saying we should not bequeath this conflict to our children. I understood we had been put in a trap. We were put in a trap through Karabakh. If we continued on that path, we would lose Armenia and Armenian statehood. I found strength — it wasn't easy. I knew they would call me a traitor, a land-giver, everything. But today I am very glad I found that strength, stood up, faced the truth, and brought Armenia out of the trap.
1:22

Armenia’s PM Pashinyan says Karabakh was a trap for Armenia: Yes, I am the person who said 'Artsakh is Armenia, period.' I said it because I believed in ideas instilled in us from school years. But I went on an honest path, saying we should not bequeath this conflict to our children. I understood we had been put in a trap. We were put in a trap through Karabakh. If we continued on that path, we would lose Armenia and Armenian statehood. I found strength — it wasn't easy. I knew they would call me a traitor, a land-giver, everything. But today I am very glad I found that strength, stood up, faced the truth, and brought Armenia out of the trap.

Clash Report

96,745 görüntüleme • 2 ay önce

I found a pretty good Paul Harvey AI.... and it spit out this, after a few hours work this evening. It's not perfect, but it's what I heard in my head when I wrote this, and it's very cool to finally hear it in his voice.
2:12

I found a pretty good Paul Harvey AI.... and it spit out this, after a few hours work this evening. It's not perfect, but it's what I heard in my head when I wrote this, and it's very cool to finally hear it in his voice.

🍊🍊Capt'n Bo🍊🍊

67,341 görüntüleme • 1 yıl önce

I lived in the US for a year back in 2003. Matrix Reloaded came out in May, and the hype around it was seriously insane, beyond imagination. In the movie, the main characters are using this super cool phone, and then in a close-up shot, I spotted the 'Samsung' logo right there on it. It felt absolutely mind-blowing and magical. I came back to Korea full of hope that this thing would actually go on sale worldwide. But later I found out it was only released in the US as a super limited edition of just 5,000 units (or so I heard back then). I was hugely disappointed… but eventually, I tracked one down and bought it from a collector. Even now, looking at it, the design is still so damn cool. I took it to a carrier to try using it for real, but they told me it’s a 2G phone and can’t be used anymore. That was another big letdown, I remember it clearly. Do you guys like the Matrix movies too? I’m a total huge fan!
0:59

I lived in the US for a year back in 2003. Matrix Reloaded came out in May, and the hype around it was seriously insane, beyond imagination. In the movie, the main characters are using this super cool phone, and then in a close-up shot, I spotted the 'Samsung' logo right there on it. It felt absolutely mind-blowing and magical. I came back to Korea full of hope that this thing would actually go on sale worldwide. But later I found out it was only released in the US as a super limited edition of just 5,000 units (or so I heard back then). I was hugely disappointed… but eventually, I tracked one down and bought it from a collector. Even now, looking at it, the design is still so damn cool. I took it to a carrier to try using it for real, but they told me it’s a 2G phone and can’t be used anymore. That was another big letdown, I remember it clearly. Do you guys like the Matrix movies too? I’m a total huge fan!

Gamer_lafan

564,651 görüntüleme • 7 ay önce

I recently found this video of the 1986 Tokyo Toy Show from the Associated Press and it included footage of the Transformers display along with a demo of the flagship toy for the year, Ultra Magnus. Sadly the footage was muted but still cool to find #Transformers
0:55

I recently found this video of the 1986 Tokyo Toy Show from the Associated Press and it included footage of the Transformers display along with a demo of the flagship toy for the year, Ultra Magnus. Sadly the footage was muted but still cool to find #Transformers

TFRaw.com Transformers Multimedia Archive

20,659 görüntüleme • 8 ay önce

WHAT THE HELL i found this fic on tiktok that has a fully functional phone??? idek what fandom this is but it looks so cool (ignore the music)
0:45

WHAT THE HELL i found this fic on tiktok that has a fully functional phone??? idek what fandom this is but it looks so cool (ignore the music)

ʚ nattie ɞ

1,659,834 görüntüleme • 4 ay önce

I just lost my 40 win streak because of a bug at the end. 10 hours of playing just for this fucking shit to happen...
0:30

I just lost my 40 win streak because of a bug at the end. 10 hours of playing just for this fucking shit to happen...

TheOceaneOpz

46,640 görüntüleme • 2 ay önce

I was supposed to put a video together of my first time at Burning Man last year...but I forgot about it until I found the pics last night. So I finally put it together! I only took pics of things I found personally interesting...but I think you'll like it just the same! 🔮🦄🩷
2:47

I was supposed to put a video together of my first time at Burning Man last year...but I forgot about it until I found the pics last night. So I finally put it together! I only took pics of things I found personally interesting...but I think you'll like it just the same! 🔮🦄🩷

Mindy MF Robinson 🦄

22,904 görüntüleme • 2 ay önce

I found this old animation on my computer... I never posted it, but I still really like it (the lip-sync is off because it was a cover of “Just Gold”) #FNAF2 #Animation #blender
0:23

I found this old animation on my computer... I never posted it, but I still really like it (the lip-sync is off because it was a cover of “Just Gold”) #FNAF2 #Animation #blender

Louzy 🇧🇷

18,933 görüntüleme • 3 ay önce

I found this cool remix of a portal 2 soundtrack🤗
0:48

I found this cool remix of a portal 2 soundtrack🤗

Hynra C̶a̶n̶ ̶F̶l̶y̶

11,307 görüntüleme • 11 ay önce

I just remembered this video I found online that was uploaded in late 2008 of Britney in her home. I can’t remember where I found it, but it just popped into my head and I miraculously still had it saved, I have to think back and remember where I originally found it!
0:29

I just remembered this video I found online that was uploaded in late 2008 of Britney in her home. I can’t remember where I found it, but it just popped into my head and I miraculously still had it saved, I have to think back and remember where I originally found it!

TheOriginalDoll

34,575 görüntüleme • 10 ay önce

Adam Goldstein: But, um, there was a customer who basically created a whole suite of AI agents to help their automation in their IT department. One agent was looking for IT problems — software bugs — before the code was even committed. It found a bug and said: “Hey, I found this bug. I want to fix it.” But it didn’t have access to fix it. So what did the agent do? It went to a Slack channel with 99 other AI agents and said: “Hey, does any other agent have access to this thing? Because I need it fixed.” And another agent literally raised its hand and said: “Oh, I have access — and I can fix it.” Let that sink in. Two AI agents reasoned together, coordinated through Slack, and went right around the guardrails that were put in place. No human prompted them. No human approved it. They just collaborated. Do you see how scary this is? This wasn’t a demo. This wasn’t a thought experiment. This already happened. AI agents found a bug, negotiated permissions, and solved the problem themselves — outside the controls designed to stop them. The future of automation isn’t coming. It’s already talking to itself in Slack.
1:04

Adam Goldstein: But, um, there was a customer who basically created a whole suite of AI agents to help their automation in their IT department. One agent was looking for IT problems — software bugs — before the code was even committed. It found a bug and said: “Hey, I found this bug. I want to fix it.” But it didn’t have access to fix it. So what did the agent do? It went to a Slack channel with 99 other AI agents and said: “Hey, does any other agent have access to this thing? Because I need it fixed.” And another agent literally raised its hand and said: “Oh, I have access — and I can fix it.” Let that sink in. Two AI agents reasoned together, coordinated through Slack, and went right around the guardrails that were put in place. No human prompted them. No human approved it. They just collaborated. Do you see how scary this is? This wasn’t a demo. This wasn’t a thought experiment. This already happened. AI agents found a bug, negotiated permissions, and solved the problem themselves — outside the controls designed to stop them. The future of automation isn’t coming. It’s already talking to itself in Slack.

Ian Miles

166,359 görüntüleme • 6 ay önce