Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

🚀 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter NextSploit is a tool that detects and exploits CVE-2025-29927, a security flaw in Next.js Check it out: CREDIT:AnonKryptiQuz #CyberSecurity #Pentesting #NextJS #Exploit #CTF #EthicalHacking #RedTeam #infosec

X

35,351 subscribers

13,284 views • 1 year ago •via X (Twitter)

Science & Technology #CyberSecurity #Pentesting #NextJS #Exploit #CTF #EthicalHacking

Anya Rossi• Live Now

Private livecam show

4 Comments

manish1 year ago

@AnonKryptiQuz this is not work

SecBriefs | Making Cybersecurity Simple1 year ago

🇺🇸 A New Chapter for America—it’s time to put cybersecurity first! 🚨 Cybersecurity = National Security A safer nation begins with informed citizens. Take the first step to understanding and protecting with the CYBERSECURITY DICTIONARY for Everyone:

manish1 year ago

@AnonKryptiQuz sorry

Pascal1 year ago

@AnonKryptiQuz Woow will definitely be checking this out

Related Videos

Want to learn a way to find those hard-hitting critical vulnerabilities? 🐛 CVE-2025-29927 is a vulnerability in Next.JS that can lead to a complete authorization bypass. Watch the video below to get a quick peek and then try the lab yourself 👇

Want to learn a way to find those hard-hitting critical vulnerabilities? 🐛 CVE-2025-29927 is a vulnerability in Next.JS that can lead to a complete authorization bypass. Watch the video below to get a quick peek and then try the lab yourself 👇

HackingHub

12,505 views • 8 months ago

Injectra is a Python tool for injecting custom payloads into files using their magic numbers. It supports file types like zip, jpg, docx, and more. Check it out: #CyberSecurity #Pentesting #PayloadInjection #hackingtools #RedTeam #infosec #bugbounty

Injectra is a Python tool for injecting custom payloads into files using their magic numbers. It supports file types like zip, jpg, docx, and more. Check it out: #CyberSecurity #Pentesting #PayloadInjection #hackingtools #RedTeam #infosec #bugbounty

AnonKryptiQuz

24,054 views • 1 year ago

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

AnonKryptiQuz

13,181 views • 1 year ago

#BlueDucky is still a relevant tool to scan and identify vulnerable #Bluetooth devices (CVE-2023-45866). Don't postpone updates of your devices in 2025 #NetHunter

#BlueDucky is still a relevant tool to scan and identify vulnerable #Bluetooth devices (CVE-2023-45866). Don't postpone updates of your devices in 2025 #NetHunter

Mobile Hacker

53,734 views • 1 year ago

Excited to launch OpenHack! 🚀 A fully open source agentic security scanner to hunt and verify security vulnerabilities. Upto 40x cheaper, it is on par with Claude Opus 4.6 on CVE-Bench for finding logic based vulnerabilities in web apps.

Excited to launch OpenHack! 🚀 A fully open source agentic security scanner to hunt and verify security vulnerabilities. Upto 40x cheaper, it is on par with Claude Opus 4.6 on CVE-Bench for finding logic based vulnerabilities in web apps.

Ananay

14,113 views • 1 month ago

CVE-2025-68613: n8n RCE Vulnerability Exploit/PoC: n8n has a critical security flaw that lets authenticated users execute arbitrary code through its workflow expression system. When users configure workflows, the expressions they provide can sometimes be evaluated without proper isolation from the underlying runtime environment.

CVE-2025-68613: n8n RCE Vulnerability Exploit/PoC: n8n has a critical security flaw that lets authenticated users execute arbitrary code through its workflow expression system. When users configure workflows, the expressions they provide can sometimes be evaluated without proper isolation from the underlying runtime environment.

Dark Web Informer

76,778 views • 6 months ago

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

Johann Rehberger

117,538 views • 11 months ago

🚨 POC for CVE-2025-55182 that works on Next.js 16.0.6 Here are the exact, battle-tested queries you need — Censys, Shodan, FOFA, ZoomEye, Quake, BinaryEdge, and Nuclei matchers — all tuned specifically to find Next.js RSC / React Server Components instances vulnerable to CVE-2025-55182 (React2Shell). ⸻ ✅ 1. SHODAN QUERY (380K+ ASSETS) Find all servers leaking RSC Server Actions: Basic Query "Vary: RSC, Next-Router-State-Tree" More Aggressive Variant http.headers.vary:"RSC" AND http.headers.vary:"Next-Router-State-Tree" Superwide Coverage "Next-Router-State-Tree" OR "x-nextjs-cache" OR "server-actions" OR "__RSC__" Focused on Vulnerable Cache Indicators "x-nextjs-cache: HIT" "Next-Router-State-Tree" ⸻ ✅ 2. CENSYS QUERY (270K+ ASSETS) (match the screenshot you posted) Exact Censys Search services.http.response.headers.vary: "RSC, Next-Router-State-Tree" Safer Multi-Matcher services.http.response.headers.vary: "RSC" AND services.http.response.headers.vary: "Next-Router-State-Tree" Detect RSC Payload Exposure (critical) services.http.response.body: "__RSC__" Detect Flight Data Leaks services.http.response.body: "server-reference-manifest" ⸻ ✅ 3. FOFA QUERY (CHINA’S OSINT GIANT) (VERY POWERFUL for RSC/Next.js) Exact Header Based header="Next-Router-State-Tree" && header="RSC" Alternative (match screenshot patterns) "Next-Router-State-Tree" && "x-nextjs-cache" For massive result count body="__RSC__" || header="server-actions" ⸻ ✅ 4. ZOOMEYE QUERY ZoomEye scans often catch Node.js apps Shodan misses. Exact Unicode-Ready Query "Next-Router-State-Tree" && "RSC" Advanced app:"Next.js" && header:"RSC" ⸻ ✅ 5. QUAKE SEARCH (360K+ MATCHES) header:"Next-Router-State-Tree" AND header:"RSC" ⸻ ✅ 6. BINARYEDGE QUERY http.response.headers.vary:"Next-Router-State-Tree" ⸻ ✅ 7. QUERY headers:"Next-Router-State-Tree" && headers:"RSC" ⸻ 🎯 8. NUCLEI MATCHER (to detect RSC without scanning payloads) If you want a nuclei detector you can plug into your scanner: matchers: - type: word part: header words: - "RSC" - "Next-Router-State-Tree" - "server-actions" - "__RSC__" ⸻ 🚩 BONUS — THE MOST ADVANCED CROSS-ENGINE QUERY Use this when you want maximum global coverage: "Next-Router-State-Tree" OR "RSC" OR "__RSC__" OR "server-actions" OR "x-nextjs-cache" OR "Next-Server-Action" This identifies: •Next.js App Router •RSC endpoints •Server Actions •Flight data APIs •Pages exposing cache HITs (required for exploitation) •Systems likely vulnerable to CVE-2025-55182 (React2Shell)

🚨 POC for CVE-2025-55182 that works on Next.js 16.0.6 Here are the exact, battle-tested queries you need — Censys, Shodan, FOFA, ZoomEye, Quake, BinaryEdge, and Nuclei matchers — all tuned specifically to find Next.js RSC / React Server Components instances vulnerable to CVE-2025-55182 (React2Shell). ⸻ ✅ 1. SHODAN QUERY (380K+ ASSETS) Find all servers leaking RSC Server Actions: Basic Query "Vary: RSC, Next-Router-State-Tree" More Aggressive Variant http.headers.vary:"RSC" AND http.headers.vary:"Next-Router-State-Tree" Superwide Coverage "Next-Router-State-Tree" OR "x-nextjs-cache" OR "server-actions" OR "RSC" Focused on Vulnerable Cache Indicators "x-nextjs-cache: HIT" "Next-Router-State-Tree" ⸻ ✅ 2. CENSYS QUERY (270K+ ASSETS) (match the screenshot you posted) Exact Censys Search services.http.response.headers.vary: "RSC, Next-Router-State-Tree" Safer Multi-Matcher services.http.response.headers.vary: "RSC" AND services.http.response.headers.vary: "Next-Router-State-Tree" Detect RSC Payload Exposure (critical) services.http.response.body: "RSC" Detect Flight Data Leaks services.http.response.body: "server-reference-manifest" ⸻ ✅ 3. FOFA QUERY (CHINA’S OSINT GIANT) (VERY POWERFUL for RSC/Next.js) Exact Header Based header="Next-Router-State-Tree" && header="RSC" Alternative (match screenshot patterns) "Next-Router-State-Tree" && "x-nextjs-cache" For massive result count body="RSC" || header="server-actions" ⸻ ✅ 4. ZOOMEYE QUERY ZoomEye scans often catch Node.js apps Shodan misses. Exact Unicode-Ready Query "Next-Router-State-Tree" && "RSC" Advanced app:"Next.js" && header:"RSC" ⸻ ✅ 5. QUAKE SEARCH (360K+ MATCHES) header:"Next-Router-State-Tree" AND header:"RSC" ⸻ ✅ 6. BINARYEDGE QUERY http.response.headers.vary:"Next-Router-State-Tree" ⸻ ✅ 7. QUERY headers:"Next-Router-State-Tree" && headers:"RSC" ⸻ 🎯 8. NUCLEI MATCHER (to detect RSC without scanning payloads) If you want a nuclei detector you can plug into your scanner: matchers: - type: word part: header words: - "RSC" - "Next-Router-State-Tree" - "server-actions" - "RSC" ⸻ 🚩 BONUS — THE MOST ADVANCED CROSS-ENGINE QUERY Use this when you want maximum global coverage: "Next-Router-State-Tree" OR "RSC" OR "RSC" OR "server-actions" OR "x-nextjs-cache" OR "Next-Server-Action" This identifies: •Next.js App Router •RSC endpoints •Server Actions •Flight data APIs •Pages exposing cache HITs (required for exploitation) •Systems likely vulnerable to CVE-2025-55182 (React2Shell)

X

10,469 views • 7 months ago

and what a year it was here's to you, 2025 🖤

and what a year it was here's to you, 2025 🖤

X

914,556 views • 6 months ago

Offensive Security notes 🔥📢 Embarking on the OSCP journey? Check out this insightful guide on "How to Pass OSCP Like a Boss"’. 🚀 #OSCP #Cybersecurity #InfoSec #EthicalHacking If you'd like to receive these notes 100% Free For First 1000 User's.. Simply: 1. Follow (So I Will Dm) 📥 2. Like and Repost 3. Comment “ Send ” to receive your copies!! 📚 "I do not own this content. For any issues or concerns, please contact the rightful owner directly."

Offensive Security notes 🔥📢 Embarking on the OSCP journey? Check out this insightful guide on "How to Pass OSCP Like a Boss"’. 🚀 #OSCP #Cybersecurity #InfoSec #EthicalHacking If you'd like to receive these notes 100% Free For First 1000 User's.. Simply: 1. Follow (So I Will Dm) 📥 2. Like and Repost 3. Comment “ Send ” to receive your copies!! 📚 "I do not own this content. For any issues or concerns, please contact the rightful owner directly."

X

118,422 views • 2 years ago

someone built an AI RED TEAM that maps your entire attack surface as a knowledge graph, finds every vulnerability, then EXPLOITS them to root access AUTONOMOUSLY its called RedAmon, 9,000 templates. 17 node types, actual Metasploit shells, not reports, no pentesters needed 6 phases of autonomous recon: subdomain discovery, port scanning, http probing, resource enumeration, vulnerability scanning, MITRE mapping every finding stored in a Neo4j graph with 17 node types and 20+ relationship types. the AI reasons about the graph, finds attack paths, and runs actual Metasploit exploits, actual shells stress-tested with zero vulnerability data, zero exploit modules, one instruction find a CVE and exploit it, it went from empty database to root-level RCE in 20 steps, researched the exploit on the web, crafted a custom deserialization payload, debugged itself when the first attempt failed next try, the server responded with root access, the highest privilege level on any Linux system. full control over everything the target was running node-serialize 0.0.4, a package with a critical deserialization flaw (CVE-2017-5941, CVSS 9.8), the server takes your cookie, decodes it, and passes it straight into unserialize() which executes any code inside it, the AI figured this out on its own with no hints built on LangGraph + MCP tool servers for naabu, nuclei, curl, metasploit. hunts leaked secrets across GitHub repos, 40+ regex patterns for AWS keys, Stripe tokens, database creds

someone built an AI RED TEAM that maps your entire attack surface as a knowledge graph, finds every vulnerability, then EXPLOITS them to root access AUTONOMOUSLY its called RedAmon, 9,000 templates. 17 node types, actual Metasploit shells, not reports, no pentesters needed 6 phases of autonomous recon: subdomain discovery, port scanning, http probing, resource enumeration, vulnerability scanning, MITRE mapping every finding stored in a Neo4j graph with 17 node types and 20+ relationship types. the AI reasons about the graph, finds attack paths, and runs actual Metasploit exploits, actual shells stress-tested with zero vulnerability data, zero exploit modules, one instruction find a CVE and exploit it, it went from empty database to root-level RCE in 20 steps, researched the exploit on the web, crafted a custom deserialization payload, debugged itself when the first attempt failed next try, the server responded with root access, the highest privilege level on any Linux system. full control over everything the target was running node-serialize 0.0.4, a package with a critical deserialization flaw (CVE-2017-5941, CVSS 9.8), the server takes your cookie, decodes it, and passes it straight into unserialize() which executes any code inside it, the AI figured this out on its own with no hints built on LangGraph + MCP tool servers for naabu, nuclei, curl, metasploit. hunts leaked secrets across GitHub repos, 40+ regex patterns for AWS keys, Stripe tokens, database creds

chiefofautism

70,129 views • 4 months ago

🚨Android SSL Pinning Bypass using Noxer🚨 👉Automate your Android penetration testing lab setup using Nox Emulator. Noxer is a powerful Python script designed for automating Android penetration testing tasks within the Nox Player emulator. It simplifies setup, enhances stability, manages Frida Server, removes unwanted bloatware, integrates BurpSuite certificates, and much more! ©️ Tool made by Chetanya Sharma 🔗Noxer: . . . . . #InfoSec #CyberSecurity #cybersec #informationsecurity #redteam #redteaming #kali #kalilinux #linuxubuntu #Linux #linuxfan #linuxuser #osint #android #hacking #hacker #hackers #hackerman #mrrobot #elliotalderson #ethicalhacker #ethicalhackers #cyber #techie #technerd #technerds #cyberattack #cyberattacks #pentest #pentesting #sslpinning

🚨Android SSL Pinning Bypass using Noxer🚨 👉Automate your Android penetration testing lab setup using Nox Emulator. Noxer is a powerful Python script designed for automating Android penetration testing tasks within the Nox Player emulator. It simplifies setup, enhances stability, manages Frida Server, removes unwanted bloatware, integrates BurpSuite certificates, and much more! ©️ Tool made by Chetanya Sharma 🔗Noxer: . . . . . #InfoSec #CyberSecurity #cybersec #informationsecurity #redteam #redteaming #kali #kalilinux #linuxubuntu #Linux #linuxfan #linuxuser #osint #android #hacking #hacker #hackers #hackerman #mrrobot #elliotalderson #ethicalhacker #ethicalhackers #cyber #techie #technerd #technerds #cyberattack #cyberattacks #pentest #pentesting #sslpinning

Brut 🇮🇳

28,326 views • 1 year ago

I found a vulnerability in Oracle VirtualBox (CVE-2026-21957) back in September 2025. It can be turned into AAR/AAW, and then escaping the VM is pretty easy. I originally planned to find a vulnerability for Pwn2Own, but since I found the vuln in September, sitting on a practical vuln for that long didn’t feel very ethical, so I eventually reported it to ZDI. But I still finished the exploitation + demo video as practice.

I found a vulnerability in Oracle VirtualBox (CVE-2026-21957) back in September 2025. It can be turned into AAR/AAW, and then escaping the VM is pretty easy. I originally planned to find a vulnerability for Pwn2Own, but since I found the vuln in September, sitting on a practical vuln for that long didn’t feel very ethical, so I eventually reported it to ZDI. But I still finished the exploitation + demo video as practice.

NiNi

92,860 views • 5 months ago

Cybersecurity is national security, and that requires a national approach. NSA has locations and opportunities to contribute to an important mission all over the country, including in Alaska, Colorado, Georgia, Hawaii, Texas, and Utah. Interested in joining our team? Check out #cybermonth #womenincyber

Cybersecurity is national security, and that requires a national approach. NSA has locations and opportunities to contribute to an important mission all over the country, including in Alaska, Colorado, Georgia, Hawaii, Texas, and Utah. Interested in joining our team? Check out #cybermonth #womenincyber

NSA Cyber

20,798 views • 1 year ago

🚀 It’s a wrap! In 2024, Trust Wallet reached 140M+ users, launched passkey smart wallets, earned ISO certification, prevented $450M in scams, and beyond. Check out the recap 👇 A huge thanks to our Community for making it all possible. Here’s to leading Web3 in 2025!

🚀 It’s a wrap! In 2024, Trust Wallet reached 140M+ users, launched passkey smart wallets, earned ISO certification, prevented $450M in scams, and beyond. Check out the recap 👇 A huge thanks to our Community for making it all possible. Here’s to leading Web3 in 2025!

Trust Wallet

177,079 views • 1 year ago

I carried out an attack today on my iPhone 12 Pro using the flipper zero. The Flipper device has a feature in the BLE spamming app that exploits a zero-day vulnerability related to BLE spamming. It sends specific packets that trigger BLE pop-ups, causing the phone to crash and require a force reboot once it is locked. This vulnerability affects the latest iOS 17 versions. If you’re not using your Bluetooth, is better you turn it off❤️ #pentesting #flipperzero

I carried out an attack today on my iPhone 12 Pro using the flipper zero. The Flipper device has a feature in the BLE spamming app that exploits a zero-day vulnerability related to BLE spamming. It sends specific packets that trigger BLE pop-ups, causing the phone to crash and require a force reboot once it is locked. This vulnerability affects the latest iOS 17 versions. If you’re not using your Bluetooth, is better you turn it off❤️ #pentesting #flipperzero

Nana Sei Anyemedu

106,520 views • 2 years ago

New video out on my YouTube channel where I reflect on my 2024 and what's coming in 2025! Go watch it now: A lot more is coming on my channel in 2025, so hit that subscribe button! 🇺🇸🇺🦅

New video out on my YouTube channel where I reflect on my 2024 and what's coming in 2025! Go watch it now: A lot more is coming on my channel in 2025, so hit that subscribe button! 🇺🇸🇺🦅

Colby Covington

15,462 views • 1 year ago

🎉🚀 Introducing Noya (YC W23) 🚀🎉 Noya is a wireframing tool that generates designs & code. Try it out: Noya lets you work in low-fidelity wireframes, while still producing high-fidelity designs and React prototypes to share with your team.

🎉🚀 Introducing Noya (YC W23) 🚀🎉 Noya is a wireframing tool that generates designs & code. Try it out: Noya lets you work in low-fidelity wireframes, while still producing high-fidelity designs and React prototypes to share with your team.

Devin Abbott

108,304 views • 3 years ago