Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

My challenge is actually based on a bug I found in Apollo Server; in its default configuration, it uses the same blacklist-based approach to prevent CSRF. I was able to bypass it and use it as an XS-Leak in default configs. I’ll be writing a detailed write-up soon about... show more

AmirMohammad Safari

8,306 subscribers

28,275 views • 3 months ago •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

✨ A dream I had finally came true: I can now chat directly with my sites to build any feature or fix any bug just via Telegram I've been playing with OpenClaw for 3 weeks now and it's great but I was always too scared to run it on any production server And I was right a bit as Marc Köhlbrugge was able to hack it by social engineering and acting as if it was me, and with enough tries it believed him, and was able to modify the server, change SSH keys etc. of course I had it isolated properly on its own VPS and it didn't touch anything sensitive (as it should!) Marc then reported that bug to Peter Steinberger 🦞 who patched it fast But I wanted to try something more basic and simple, and I think maybe more secure: to just connect Claude Code on my server to Telegram which would be hard locked to only messages from me So I installed claude-code-telegram by Richard Atkinson on the server and run it as a system daemon and it works really well The cool thing is that I was already using Telegram for server errors like this: > Photo AI - ❌ Random credits giveaway failed (Attempt 30/30) with an exception: SQLSTATE[HY000]: General error: 5 database is locked So now I can just reply, "Ok fix this", and Claude Code on the server in production will try (and probably succeed) in fixing it In the video below I asked it to make show [🌳 Parks ] on the map by default on load, it did that, then I reloaded the page and it instantly worked One thing it still needs is sending actual messages while it's doing stuff which OpenClaw does really well, it's annoying to just wait while it says "Working..." but that's probably next

✨ A dream I had finally came true: I can now chat directly with my sites to build any feature or fix any bug just via Telegram I've been playing with OpenClaw for 3 weeks now and it's great but I was always too scared to run it on any production server And I was right a bit as Marc Köhlbrugge was able to hack it by social engineering and acting as if it was me, and with enough tries it believed him, and was able to modify the server, change SSH keys etc. of course I had it isolated properly on its own VPS and it didn't touch anything sensitive (as it should!) Marc then reported that bug to Peter Steinberger 🦞 who patched it fast But I wanted to try something more basic and simple, and I think maybe more secure: to just connect Claude Code on my server to Telegram which would be hard locked to only messages from me So I installed claude-code-telegram by Richard Atkinson on the server and run it as a system daemon and it works really well The cool thing is that I was already using Telegram for server errors like this: > Photo AI - ❌ Random credits giveaway failed (Attempt 30/30) with an exception: SQLSTATE[HY000]: General error: 5 database is locked So now I can just reply, "Ok fix this", and Claude Code on the server in production will try (and probably succeed) in fixing it In the video below I asked it to make show [🌳 Parks ] on the map by default on load, it did that, then I reloaded the page and it instantly worked One thing it still needs is sending actual messages while it's doing stuff which OpenClaw does really well, it's annoying to just wait while it says "Working..." but that's probably next

@levelsio

641,661 views • 4 months ago

Asmongold throws it back to some clips of Hasan's implications about Frogan's default judgement and helping out Kaceytron behind closed doors "Why'd the court say it was a default judgement then? I don't know what happened but I know what a default judgement is, u can just look it up" "This is like QAnon, well nobody understands Donald Trump and the patriots plan, just wait 2 weeks and everything is going to be revealed..can u just explain it?" "It's actually crazy how dumb these ppl are, it's so sad"

Asmongold throws it back to some clips of Hasan's implications about Frogan's default judgement and helping out Kaceytron behind closed doors "Why'd the court say it was a default judgement then? I don't know what happened but I know what a default judgement is, u can just look it up" "This is like QAnon, well nobody understands Donald Trump and the patriots plan, just wait 2 weeks and everything is going to be revealed..can u just explain it?" "It's actually crazy how dumb these ppl are, it's so sad"

yeet

31,769 views • 16 days ago

“Once national socialism has been cleansed of all its lies and distortions it will be as powerful a force as it was in the 30’s… and I’ll tell you why. It is based on the natural order of things. It is tailor made for European men and women.” -Ernst Zundel

“Once national socialism has been cleansed of all its lies and distortions it will be as powerful a force as it was in the 30’s… and I’ll tell you why. It is based on the natural order of things. It is tailor made for European men and women.” -Ernst Zundel

Uncommon Sense

70,626 views • 10 months ago

Thinking about adding this feature as a default one for my heads because I really like it! Especially on toothy mouths, when the tongue is out, it have a weird pose. This small magnet takes it in a more natural position 👅

Thinking about adding this feature as a default one for my heads because I really like it! Especially on toothy mouths, when the tongue is out, it have a weird pose. This small magnet takes it in a more natural position 👅

StuffedTailsFursuits |STF|

25,419 views • 1 year ago

Very very true! When I worked at Loyola Healthcare in Administration, I learned that the billing was based on how much money is available to use up and not what it actually costs or true price. #SchoolSessionEconomics

Very very true! When I worked at Loyola Healthcare in Administration, I learned that the billing was based on how much money is available to use up and not what it actually costs or true price. #SchoolSessionEconomics

®️SheLuv

22,179 views • 8 months ago

The violence I experienced in the past accustomed me to enduring extreme levels of pressure. The good thing is that I was able to see it as a teacher, process it, and put it at the service of the Argentine people to prevent the greatest crisis in history.

The violence I experienced in the past accustomed me to enduring extreme levels of pressure. The good thing is that I was able to see it as a teacher, process it, and put it at the service of the Argentine people to prevent the greatest crisis in history.

Milei in English - Official Account

30,231 views • 15 days ago

Few months into Web3… and it already changed my story. Same week I secured a Core i7 elitebook setup and an iPhone 16 Plus all from staying consistent, learning, and actually putting in the work in this space. This is just the beginning. I’ll be sharing more updates, insights, and opportunities as I grow. If you’re serious about Web3, tap in I’ll be dropping everything on my Telegram channel soon.

Few months into Web3… and it already changed my story. Same week I secured a Core i7 elitebook setup and an iPhone 16 Plus all from staying consistent, learning, and actually putting in the work in this space. This is just the beginning. I’ll be sharing more updates, insights, and opportunities as I grow. If you’re serious about Web3, tap in I’ll be dropping everything on my Telegram channel soon.

Kappy

13,505 views • 3 months ago

#ZVICHANAKA - Wrote this one a few nights ago as I was in a dark place and I found solace in knowing that God has my back, he loves me and he always chooses me. “Zvichanaka” means “It will be alright” 200 retweets and I’ll make it an Open Verse Challenge.

#ZVICHANAKA - Wrote this one a few nights ago as I was in a dark place and I found solace in knowing that God has my back, he loves me and he always chooses me. “Zvichanaka” means “It will be alright” 200 retweets and I’ll make it an Open Verse Challenge.

SEWE OUT NOW!🤘🏿🎸

17,377 views • 2 years ago

I just created my own web AI agent. I can give it a topic or a news URL and it will take over my computer to look it up, summarize it, and draft a post about it in my own writing style. All on its own 🤯 Here’s how you can do it too:

I just created my own web AI agent. I can give it a topic or a news URL and it will take over my computer to look it up, summarize it, and draft a post about it in my own writing style. All on its own 🤯 Here’s how you can do it too:

Alvaro Cintas

77,997 views • 1 year ago

#dream: “i will be making a smp soon, a titan smp. i don’t onow exactly who will be playing on it… it will be happening probably in a couple months” dsmp 2.0??? first one was based on hamilton this one will be based on attack on titan 😭

#dream: “i will be making a smp soon, a titan smp. i don’t onow exactly who will be playing on it… it will be happening probably in a couple months” dsmp 2.0??? first one was based on hamilton this one will be based on attack on titan 😭

mari ❤️‍🔥 ⁷

22,077 views • 1 year ago

A good quick summary of my approach to writing. If I can't write something I feel great about in 5-10 minutes, I just throw it away and start over. I don't try to massage the bad into the good, I erase the bad to make way for something better to emerge. For me, throwing it away is faster, and the outcome better, than trying to recover a piece of writing that isn't headed where I want it.

A good quick summary of my approach to writing. If I can't write something I feel great about in 5-10 minutes, I just throw it away and start over. I don't try to massage the bad into the good, I erase the bad to make way for something better to emerge. For me, throwing it away is faster, and the outcome better, than trying to recover a piece of writing that isn't headed where I want it.

Jason Fried

63,944 views • 2 years ago

Assassin’s Creed being based in Japan and then NOT using a Japanese male protagonist is stupid. We know exactly why they’re using Yasuke (THE MESSAGE) and it’s annoying. It would be as dumb as having it based in Africa and deciding to use a white male protagonist.

Assassin’s Creed being based in Japan and then NOT using a Japanese male protagonist is stupid. We know exactly why they’re using Yasuke (THE MESSAGE) and it’s annoying. It would be as dumb as having it based in Africa and deciding to use a white male protagonist.

Kaida 🌊

9,571,946 views • 2 years ago

So i bought pandan flower just to try to write it using my pengrupak (a balinese knife that specialized only for writing) because I read in hinzler’s journal that pandan flower was used as media for writing love poem. Then my friend found a rare illustration of it from a book.

So i bought pandan flower just to try to write it using my pengrupak (a balinese knife that specialized only for writing) because I read in hinzler’s journal that pandan flower was used as media for writing love poem. Then my friend found a rare illustration of it from a book.

Tante 🐇🍢

86,492 views • 6 months ago

Tommy gives an awesome answer about winning a major. "It might happen for me, it might not ... I don't want to think about it as, if it doesn't happen, oh, my God, like, all those hours I spent chasing my dreams, what was it for kind of thing." "Whatever happens in my career I will be able to look back and I gave it everything and I had an amazing time doing it."

Tommy gives an awesome answer about winning a major. "It might happen for me, it might not ... I don't want to think about it as, if it doesn't happen, oh, my God, like, all those hours I spent chasing my dreams, what was it for kind of thing." "Whatever happens in my career I will be able to look back and I gave it everything and I had an amazing time doing it."

Golf Channel

356,192 views • 4 days ago

"I rely on a $150,000/year medication to survive. If Trump enacts pharmaceutical tariffs, I don’t know if I’ll still be able to afford it. If I can’t get it, I’ll be disabled in months and dead in a few years." – Ruth

"I rely on a $150,000/year medication to survive. If Trump enacts pharmaceutical tariffs, I don’t know if I’ll still be able to afford it. If I can’t get it, I’ll be disabled in months and dead in a few years." – Ruth

Home of the Brave

12,611 views • 1 year ago

While taxiing back to parking after unloading the freight this evening, I saw a plane on approach ripping it in, and I thought, “man, I bet there’s no PAX on there.” I assumed it to be military. But once I parked and chocked my plane… I saw it was the 10 Tanker! I wish I could’ve shared the approach, it was sick.

While taxiing back to parking after unloading the freight this evening, I saw a plane on approach ripping it in, and I thought, “man, I bet there’s no PAX on there.” I assumed it to be military. But once I parked and chocked my plane… I saw it was the 10 Tanker! I wish I could’ve shared the approach, it was sick.

Colleen Loustalot ✈️

102,589 views • 1 year ago

last time i was barely able to use the sword in BR so this time i made sure to use it A LOT (Golden version soon)

last time i was barely able to use the sword in BR so this time i made sure to use it A LOT (Golden version soon)

Shany

20,211 views • 5 months ago