Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

PentestGPT can now find XSS vulnerabilities for you!

PentestGPT's profile picture

HackerAI

21,611 subscribers

69,087 Aufrufe • vor 1 Jahr •via X (Twitter)

BildungWissenschaft & Technologie
LIVE

Anya Rossi• Live Now

Private livecam show

9 Kommentare

Profilbild von Fat
Fatvor 1 Jahr

PentestGPT is not finding the XSS for you dalfox by @hahwul is 🤷‍♂️

Profilbild von PentestGPT
PentestGPTvor 1 Jahr

@hahwul True. A really lovely tool built by @hahwul, and thanks to him for making it open-source.

Profilbild von Shail Patel
Shail Patelvor 1 Jahr

Lmao, and the plugin is paid

Profilbild von vin
vinvor 1 Jahr

that is hot, will probably use

Profilbild von Navid
Navidvor 1 Jahr

@voorivex

Profilbild von Jerry Decoder
Jerry Decodervor 1 Jahr

Also guys if don't mind add these too if want Echidna,Hacken-Fuzz,foundry,ChainFuzz,Harvey,sFuzz/Deze are mutation testers that we certainly need Sumo,Certoa Gambit and vertigo

Profilbild von heretoreadbugs
heretoreadbugsvor 1 Jahr

bro AI is so from 2022

Profilbild von HEX
HEXvor 1 Jahr

چی شد😂

Profilbild von Medivdev
Medivdevvor 1 Jahr

@Hyunfix1 Hacking made simple

Ähnliche Videos

PentestGPT can now think?! Available to Pro and Team users.
0:40

PentestGPT can now think?! Available to Pro and Team users.

HackerAI

17,621 Aufrufe • vor 1 Jahr

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.
4:07

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.

Gospel

12,567 Aufrufe • vor 7 Monaten

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:
0:28

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:

Alvaro Cintas

79,813 Aufrufe • vor 1 Jahr

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇
0:56

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇

Burp Suite

12,147 Aufrufe • vor 7 Monaten

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,652 Aufrufe • vor 2 Jahren

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.
0:40

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.

OpenAI Developers

1,715,547 Aufrufe • vor 3 Monaten

Software vulnerabilities can be notoriously time-consuming for developers to find and fix. Today, we’re sharing details about CodeMender: our new AI agent that uses Gemini Deep Think to automatically patch critical software vulnerabilities. 🧵
1:12

Software vulnerabilities can be notoriously time-consuming for developers to find and fix. Today, we’re sharing details about CodeMender: our new AI agent that uses Gemini Deep Think to automatically patch critical software vulnerabilities. 🧵

Google DeepMind

367,767 Aufrufe • vor 8 Monaten

Claude Security is now in public beta for Claude Enterprise customers. Claude scans your codebase for vulnerabilities, validates each finding to cut false positives, and suggests patches you can review and approve.
0:50

Claude Security is now in public beta for Claude Enterprise customers. Claude scans your codebase for vulnerabilities, validates each finding to cut false positives, and suggests patches you can review and approve.

Claude

4,894,636 Aufrufe • vor 1 Monat

Pedro YCH is now open! 5 Slots for now, you can find them over on my VGen! #VGenOpen miau
0:28

Pedro YCH is now open! 5 Slots for now, you can find them over on my VGen! #VGenOpen miau

🚨

275,559 Aufrufe • vor 2 Jahren

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.
0:55

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.

Burp Suite

19,365 Aufrufe • vor 7 Monaten

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam
1:27

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

AnonKryptiQuz

13,181 Aufrufe • vor 1 Jahr

You can now find me on TikTok (tonyiommiofficial)🤘
0:28

You can now find me on TikTok (tonyiommiofficial)🤘

Tony Iommi

22,864 Aufrufe • vor 8 Monaten

You can now restore deleted chats. Find them in the Archive tab for up to 30 days.
0:26

You can now restore deleted chats. Find them in the Archive tab for up to 30 days.

v0

13,235 Aufrufe • vor 11 Monaten

💡Tool Showcase: Valhalla. Valhalla finds vulnerable devices on Shodan, it can also scan a list of domains to find vulnerabilities. Link: Credit:
8:40

💡Tool Showcase: Valhalla. Valhalla finds vulnerable devices on Shodan, it can also scan a list of domains to find vulnerabilities. Link: Credit:

Dark Web Informer

18,899 Aufrufe • vor 1 Jahr

DOGE now has a website where you can submit your suggestions for deregulation or any rules/policies that you find extremely burdensome for consideration.
2:56

DOGE now has a website where you can submit your suggestions for deregulation or any rules/policies that you find extremely burdensome for consideration.

Insurrection Barbie

20,543 Aufrufe • vor 1 Jahr

You can now find me on the Playboy Club 💋
0:22

You can now find me on the Playboy Club 💋

Emery

61,414 Aufrufe • vor 1 Jahr

Do not use the script tag when testing for XSS
0:51

Do not use the script tag when testing for XSS

Bug Bounty Reports Explained

41,260 Aufrufe • vor 2 Jahren

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:
0:50

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:

Claude

26,193,161 Aufrufe • vor 3 Monaten

Lance Twiggs GunShyMartyr SafetySwipe Pull everything you can find right now.
1:40

Lance Twiggs GunShyMartyr SafetySwipe Pull everything you can find right now.

0HOUR

50,584 Aufrufe • vor 9 Monaten