Загрузка видео...

Не удалось загрузить видео

На главную

PentestGPT can now find XSS vulnerabilities for you!

PentestGPT's profile picture

HackerAI

21,611 subscribers

69,087 просмотров • 1 год назад •via X (Twitter)

ОбразованиеНаука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 9

Фото профиля Fat
Fat1 год назад

PentestGPT is not finding the XSS for you dalfox by @hahwul is 🤷‍♂️

Фото профиля PentestGPT
PentestGPT1 год назад

@hahwul True. A really lovely tool built by @hahwul, and thanks to him for making it open-source.

Фото профиля Shail Patel
Shail Patel1 год назад

Lmao, and the plugin is paid

Фото профиля vin
vin1 год назад

that is hot, will probably use

Фото профиля Navid
Navid1 год назад

@voorivex

Фото профиля Jerry Decoder
Jerry Decoder1 год назад

Also guys if don't mind add these too if want Echidna,Hacken-Fuzz,foundry,ChainFuzz,Harvey,sFuzz/Deze are mutation testers that we certainly need Sumo,Certoa Gambit and vertigo

Фото профиля heretoreadbugs
heretoreadbugs1 год назад

bro AI is so from 2022

Фото профиля HEX
HEX1 год назад

چی شد😂

Фото профиля Medivdev
Medivdev1 год назад

@Hyunfix1 Hacking made simple

Похожие видео

PentestGPT can now think?! Available to Pro and Team users.
0:40

PentestGPT can now think?! Available to Pro and Team users.

HackerAI

17,621 просмотров • 1 год назад

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.
4:07

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.

Gospel

12,567 просмотров • 7 месяцев назад

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:
0:28

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:

Alvaro Cintas

79,813 просмотров • 1 год назад

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇
0:56

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇

Burp Suite

12,147 просмотров • 7 месяцев назад

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,652 просмотров • 2 лет назад

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.
0:40

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.

OpenAI Developers

1,715,624 просмотров • 3 месяцев назад

Software vulnerabilities can be notoriously time-consuming for developers to find and fix. Today, we’re sharing details about CodeMender: our new AI agent that uses Gemini Deep Think to automatically patch critical software vulnerabilities. 🧵
1:12

Software vulnerabilities can be notoriously time-consuming for developers to find and fix. Today, we’re sharing details about CodeMender: our new AI agent that uses Gemini Deep Think to automatically patch critical software vulnerabilities. 🧵

Google DeepMind

367,788 просмотров • 8 месяцев назад

Claude Security is now in public beta for Claude Enterprise customers. Claude scans your codebase for vulnerabilities, validates each finding to cut false positives, and suggests patches you can review and approve.
0:50

Claude Security is now in public beta for Claude Enterprise customers. Claude scans your codebase for vulnerabilities, validates each finding to cut false positives, and suggests patches you can review and approve.

Claude

4,895,685 просмотров • 1 месяц назад

Pedro YCH is now open! 5 Slots for now, you can find them over on my VGen! #VGenOpen miau
0:28

Pedro YCH is now open! 5 Slots for now, you can find them over on my VGen! #VGenOpen miau

🚨

275,559 просмотров • 2 лет назад

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.
0:55

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.

Burp Suite

19,365 просмотров • 8 месяцев назад

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam
1:27

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

AnonKryptiQuz

13,181 просмотров • 1 год назад

You can now find me on TikTok (tonyiommiofficial)🤘
0:28

You can now find me on TikTok (tonyiommiofficial)🤘

Tony Iommi

22,864 просмотров • 8 месяцев назад

You can now restore deleted chats. Find them in the Archive tab for up to 30 days.
0:26

You can now restore deleted chats. Find them in the Archive tab for up to 30 days.

v0

13,235 просмотров • 11 месяцев назад

💡Tool Showcase: Valhalla. Valhalla finds vulnerable devices on Shodan, it can also scan a list of domains to find vulnerabilities. Link: Credit:
8:40

💡Tool Showcase: Valhalla. Valhalla finds vulnerable devices on Shodan, it can also scan a list of domains to find vulnerabilities. Link: Credit:

Dark Web Informer

18,899 просмотров • 1 год назад

DOGE now has a website where you can submit your suggestions for deregulation or any rules/policies that you find extremely burdensome for consideration.
2:56

DOGE now has a website where you can submit your suggestions for deregulation or any rules/policies that you find extremely burdensome for consideration.

Insurrection Barbie

20,543 просмотров • 1 год назад

You can now find me on the Playboy Club 💋
0:22

You can now find me on the Playboy Club 💋

Emery

61,414 просмотров • 1 год назад

Lance Twiggs GunShyMartyr SafetySwipe Pull everything you can find right now.
1:40

Lance Twiggs GunShyMartyr SafetySwipe Pull everything you can find right now.

0HOUR

50,584 просмотров • 9 месяцев назад

How many can YOU find? See how many Easter eggs you can spot in #TransformersOne, now on Digital.
0:36

How many can YOU find? See how many Easter eggs you can spot in #TransformersOne, now on Digital.

Transformers

407,889 просмотров • 1 год назад

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:
0:50

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:

Claude

26,195,747 просмотров • 4 месяцев назад