正在加载视频...

视频加载失败

Many don’t realize they already have a powerful, fully autonomous, free hackbot on their computer. If you’re using Cursor, you’ve got it. Here's Cursor solving a PortSwigger webacademy SQL injection lab! #bugbounty

30,903 次观看 • 11 个月前 •via X (Twitter)

12 条评论

sw33tLie 的头像
sw33tLie11 个月前

Yes, I know...the lab hints at the vuln type, and the models are likely trained on PortSwigger solutions. But here’s the thing: I tested it on real bug bounty reports, too. And it works quite well. Better than you may expect :)

director 的头像
director11 个月前

@PortSwigger

sw33tLie 的头像
sw33tLie11 个月前

@PortSwigger this is cool too!

Defiance Investments 的头像
Defiance Investments11 个月前

🟩HOOX - Daily Target 2X Robinhood ETF HOOX offers 200% daily price exposure on HOOD. Investing involves risk. Principal loss is possible. Defiance Daily Target 2X Long HOOD ETF is distributed by Foreside Fund Services LLC. Read the prospectus at

payloadartist 的头像
payloadartist11 个月前

@PortSwigger low hanging fruits can be easily automated, period ;)

TESS 的头像
TESS11 个月前

@PortSwigger Hahaha 🤥

0xTeles 的头像
0xTeles11 个月前

@PortSwigger lmao, a new competitor to @Xbow

MorningStar 的头像
MorningStar11 个月前

@PortSwigger Try gemini-cli with proper rules for code review its very good & even it can perform your recon workflow, analyse /make request response etc

Ciarán Cotter 的头像
Ciarán Cotter11 个月前

@PortSwigger @mikey96_bh

bsysop 的头像
bsysop11 个月前

@PortSwigger That’s really cool! 🔥

ུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུ 的头像
ུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུ11 个月前

@PortSwigger Looks cool! Which LLM is this and is it all free?

sw33tLie 的头像
sw33tLie11 个月前

@PortSwigger Gemini 2.5 pro! I have the cursor pro plan and it's included (up to a certain number of prompts ofc)

相关视频