正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Many don’t realize they already have a powerful, fully autonomous, free hackbot on their computer. If you’re using Cursor, you’ve got it. Here's Cursor solving a PortSwigger webacademy SQL injection lab! #bugbounty

sw33tLie

10,392 subscribers

31,455 次观看 • 1 年前 •via X (Twitter)

科学技术新闻政治教育 #bugbounty

Anya Rossi• Live Now

Private livecam show

12 条评论

sw33tLie 的头像

sw33tLie1 年前

Yes, I know...the lab hints at the vuln type, and the models are likely trained on PortSwigger solutions. But here’s the thing: I tested it on real bug bounty reports, too. And it works quite well. Better than you may expect :)

director 的头像

director1 年前

@PortSwigger

sw33tLie 的头像

sw33tLie1 年前

@PortSwigger this is cool too!

Defiance Investments 的头像

Defiance Investments1 年前

🟩HOOX - Daily Target 2X Robinhood ETF HOOX offers 200% daily price exposure on HOOD. Investing involves risk. Principal loss is possible. Defiance Daily Target 2X Long HOOD ETF is distributed by Foreside Fund Services LLC. Read the prospectus at

payloadartist 的头像

payloadartist1 年前

@PortSwigger low hanging fruits can be easily automated, period ;)

TESS 的头像

TESS1 年前

@PortSwigger Hahaha 🤥

0xTeles 的头像

0xTeles1 年前

@PortSwigger lmao, a new competitor to @Xbow

MorningStar 的头像

MorningStar1 年前

@PortSwigger Try gemini-cli with proper rules for code review its very good & even it can perform your recon workflow, analyse /make request response etc

Ciarán Cotter 的头像

Ciarán Cotter1 年前

@PortSwigger @mikey96_bh

bsysop 的头像

bsysop1 年前

@PortSwigger That’s really cool! 🔥

ུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུ 的头像

ུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུུ1 年前

@PortSwigger Looks cool! Which LLM is this and is it all free?

sw33tLie 的头像

sw33tLie1 年前

@PortSwigger Gemini 2.5 pro! I have the cursor pro plan and it's included (up to a certain number of prompts ofc)

相关视频

Also, Cursor can also connect to Caido’s proxy on localhost via its embedded browser when a proxy is needed, just saying 👀. Here it used the proxy to solve a traversal sequence that had been stripped by a superfluous URL-decode from PortSwigger Labs. #BugBounty #bugbountytip

Also, Cursor can also connect to Caido’s proxy on localhost via its embedded browser when a proxy is needed, just saying 👀. Here it used the proxy to solve a traversal sequence that had been stripped by a superfluous URL-decode from PortSwigger Labs. #BugBounty #bugbountytip

Hazem

16,641 次观看 • 1 年前

Everyone expected GPT-5 to be a massive leap. But coding accuracy sits around 60% on SWE... meaning even the “best” model still ships bugs. So how do you vibe-code in 2025? One tool caught my eye: They rebuilt a Cursor app inside Cursor using their MCP to test, fix & ship. Looks crazy powerful, even if you’re non-technical. Check it out → cc TestSprite

Everyone expected GPT-5 to be a massive leap. But coding accuracy sits around 60% on SWE... meaning even the “best” model still ships bugs. So how do you vibe-code in 2025? One tool caught my eye: They rebuilt a Cursor app inside Cursor using their MCP to test, fix & ship. Looks crazy powerful, even if you’re non-technical. Check it out → cc TestSprite

Eyisha Zyer

54,968 次观看 • 1 年前

Cursor is so good that I got locked in and didn’t even realize I already burned through $200 trying to build my first iOS app 🥲🥲🥲 Does Cursor have any free credit programs I can apply for?

Cursor is so good that I got locked in and didn’t even realize I already burned through $200 trying to build my first iOS app 🥲🥲🥲 Does Cursor have any free credit programs I can apply for?

Ann Nguyen

31,674 次观看 • 6 个月前

if you’re using Cursor this is a game changer: you can reference docs from anything supabase, openai, stripe… anything. if your not already doing this. You should

if you’re using Cursor this is a game changer: you can reference docs from anything supabase, openai, stripe… anything. if your not already doing this. You should

gabe farran

54,440 次观看 • 1 年前

You've heard of SQL injection, but have you heard of NoSQL injection? In this video, we perform a full account takeover using NoSQL injection. We use the NoSQL injection to find the admin username, and reset their password! Learn this in our FREE labs 👇

You've heard of SQL injection, but have you heard of NoSQL injection? In this video, we perform a full account takeover using NoSQL injection. We use the NoSQL injection to find the admin username, and reset their password! Learn this in our FREE labs 👇

Web Security Academy

35,015 次观看 • 2 个月前

im using cursor computer almost every single day, spawning agents and letting them record demos for me of their work

im using cursor computer almost every single day, spawning agents and letting them record demos for me of their work

eric zakariasson

36,239 次观看 • 6 个月前

Cursor just got a major upgrade! Agents can onboard to your codebase, use a cloud computer to make changes, and send you a video demo of their finished work. The latency of using the remote desktop is smooooth.

Cursor just got a major upgrade! Agents can onboard to your codebase, use a cloud computer to make changes, and send you a video demo of their finished work. The latency of using the remote desktop is smooooth.

Lee Robinson

550,830 次观看 • 8 个月前

Many have asked, "How did you make the cat paw mouse cursor?" Here's my entire process:

Many have asked, "How did you make the cat paw mouse cursor?" Here's my entire process:

Samperson

666,883 次观看 • 2 年前

working with cloud agents in cursor feels the same as local, but the fact that i can shut down my computer and still have it running is amazing. one of my favorite use cases is planning in cursor, then send off to cloud agent for impl. here's a short demo

working with cloud agents in cursor feels the same as local, but the fact that i can shut down my computer and still have it running is amazing. one of my favorite use cases is planning in cursor, then send off to cloud agent for impl. here's a short demo

eric zakariasson

62,000 次观看 • 1 年前

I set the world record for cursor control with a brain computer interface using my Neuralink brain implant! #Neuralink #bci #fyp

I set the world record for cursor control with a brain computer interface using my Neuralink brain implant! #Neuralink #bci #fyp

Jake Schneider

12,883 次观看 • 1 年前

Epstein isn’t an IQ test. It’s a moral one. And if you don’t already realize that, you’ve already failed.

Epstein isn’t an IQ test. It’s a moral one. And if you don’t already realize that, you’ve already failed.

Franklin Leonard

193,501 次观看 • 11 个月前

Claude Code beats Cursor, and it's not even close! If you aren't using Claude Code yet, stop whatever you are doing. If you're already using it, I'm about to show you a trick that will make your experience a lot better.

Claude Code beats Cursor, and it's not even close! If you aren't using Claude Code yet, stop whatever you are doing. If you're already using it, I'm about to show you a trick that will make your experience a lot better.

Santiago

50,997 次观看 • 1 年前

From the outside, Cursor shouldn't have worked. They compete against the most well-funded and fastest-growing companies of all time, and *sit on top* of those same competitors to power their product. WAT. I asked Roman Ugarte (employee #15 at Cursor) how Cursor pulled it off. Roman's answer: They didn't focus on moats. They obsessed over building something useful today. 👇

From the outside, Cursor shouldn't have worked. They compete against the most well-funded and fastest-growing companies of all time, and sit on top of those same competitors to power their product. WAT. I asked Roman Ugarte (employee #15 at Cursor) how Cursor pulled it off. Roman's answer: They didn't focus on moats. They obsessed over building something useful today. 👇

Lenny Rachitsky

17,776 次观看 • 1 个月前

99% PMs don't know Cursor is GREAT for product work I made a FREE course – learn Cursor IN Cursor! 🔹 Complete guide for product work 🔹 Make PRDs, analyze data, create decks Eventually, I'll sell it for $99. For the next 24h: FREE! Follow + RT + comment "Cursor" & I'll DM it

99% PMs don't know Cursor is GREAT for product work I made a FREE course – learn Cursor IN Cursor! 🔹 Complete guide for product work 🔹 Make PRDs, analyze data, create decks Eventually, I'll sell it for $99. For the next 24h: FREE! Follow + RT + comment "Cursor" & I'll DM it

Carl Vellotti 🥞

101,088 次观看 • 11 个月前

BREAKING: NVIDIA CEO Jensen Huang reveals that NVIDIA is also using Cursor, a SpaceXAI product. “We use Cursor, SpaceXAI’s product.”

BREAKING: NVIDIA CEO Jensen Huang reveals that NVIDIA is also using Cursor, a SpaceXAI product. “We use Cursor, SpaceXAI’s product.”

DogeDesigner

105,658 次观看 • 1 个月前

I was using Opus 4.6 in Cursor and am already out of credits

I was using Opus 4.6 in Cursor and am already out of credits

Karan

25,283 次观看 • 9 个月前

You can have a little fun with Apple’s logo on their website, just try moving your cursor or finger over it 👀 #AppleEvent

Beta Profiles

61,208 次观看 • 1 年前