Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

PentestGPT can now find XSS vulnerabilities for you!

HackerAI

21,611 subscribers

69,087 views • 1 year ago •via X (Twitter)

Education Science & Technology

Anya Rossi• Live Now

Private livecam show

9 Comments

Fat1 year ago

PentestGPT is not finding the XSS for you dalfox by @hahwul is 🤷‍♂️

PentestGPT1 year ago

@hahwul True. A really lovely tool built by @hahwul, and thanks to him for making it open-source.

Shail Patel1 year ago

Lmao, and the plugin is paid

vin1 year ago

that is hot, will probably use

Navid1 year ago

@voorivex

Jerry Decoder1 year ago

Also guys if don't mind add these too if want Echidna,Hacken-Fuzz,foundry,ChainFuzz,Harvey,sFuzz/Deze are mutation testers that we certainly need Sumo,Certoa Gambit and vertigo

heretoreadbugs1 year ago

bro AI is so from 2022

HEX1 year ago

چی شد😂

Medivdev1 year ago

@Hyunfix1 Hacking made simple

Related Videos

PentestGPT can now think?! Available to Pro and Team users.

PentestGPT can now think?! Available to Pro and Team users.

HackerAI

17,621 views • 1 year ago

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.

Gospel

12,567 views • 7 months ago

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:

Alvaro Cintas

79,803 views • 1 year ago

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇

Burp Suite

12,147 views • 6 months ago

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,598 views • 2 years ago

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.

OpenAI Developers

1,715,207 views • 3 months ago

Software vulnerabilities can be notoriously time-consuming for developers to find and fix. Today, we’re sharing details about CodeMender: our new AI agent that uses Gemini Deep Think to automatically patch critical software vulnerabilities. 🧵

Software vulnerabilities can be notoriously time-consuming for developers to find and fix. Today, we’re sharing details about CodeMender: our new AI agent that uses Gemini Deep Think to automatically patch critical software vulnerabilities. 🧵

Google DeepMind

367,734 views • 8 months ago

Claude Security is now in public beta for Claude Enterprise customers. Claude scans your codebase for vulnerabilities, validates each finding to cut false positives, and suggests patches you can review and approve.

Claude Security is now in public beta for Claude Enterprise customers. Claude scans your codebase for vulnerabilities, validates each finding to cut false positives, and suggests patches you can review and approve.

Claude

4,890,135 views • 1 month ago

Pedro YCH is now open! 5 Slots for now, you can find them over on my VGen! #VGenOpen miau

Pedro YCH is now open! 5 Slots for now, you can find them over on my VGen! #VGenOpen miau

🚨

275,559 views • 2 years ago

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.

Burp Suite

19,365 views • 7 months ago

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

AnonKryptiQuz

13,181 views • 1 year ago

You can now find me on TikTok (tonyiommiofficial)🤘

You can now find me on TikTok (tonyiommiofficial)🤘

Tony Iommi

22,864 views • 7 months ago

You can now restore deleted chats. Find them in the Archive tab for up to 30 days.

You can now restore deleted chats. Find them in the Archive tab for up to 30 days.

v0

13,235 views • 10 months ago

💡Tool Showcase: Valhalla. Valhalla finds vulnerable devices on Shodan, it can also scan a list of domains to find vulnerabilities. Link: Credit:

💡Tool Showcase: Valhalla. Valhalla finds vulnerable devices on Shodan, it can also scan a list of domains to find vulnerabilities. Link: Credit:

Dark Web Informer

18,899 views • 1 year ago

DOGE now has a website where you can submit your suggestions for deregulation or any rules/policies that you find extremely burdensome for consideration.

DOGE now has a website where you can submit your suggestions for deregulation or any rules/policies that you find extremely burdensome for consideration.

Insurrection Barbie

20,543 views • 1 year ago

You can now find me on the Playboy Club 💋

You can now find me on the Playboy Club 💋

Emery

61,414 views • 1 year ago

Lance Twiggs GunShyMartyr SafetySwipe Pull everything you can find right now.

Lance Twiggs GunShyMartyr SafetySwipe Pull everything you can find right now.

0HOUR

50,584 views • 8 months ago

How many can YOU find? See how many Easter eggs you can spot in #TransformersOne, now on Digital.

How many can YOU find? See how many Easter eggs you can spot in #TransformersOne, now on Digital.

Transformers

407,889 views • 1 year ago

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:

Claude

26,185,492 views • 3 months ago