Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

PentestGPT can now find XSS vulnerabilities for you!

PentestGPT's profile picture

HackerAI

21,611 subscribers

69,087 görüntüleme • 1 yıl önce •via X (Twitter)

EğitimBilim & Teknoloji
LIVE

Anya Rossi• Live Now

Private livecam show

9 Yorum

Fat profil fotoğrafı
Fat1 yıl önce

PentestGPT is not finding the XSS for you dalfox by @hahwul is 🤷‍♂️

PentestGPT profil fotoğrafı
PentestGPT1 yıl önce

@hahwul True. A really lovely tool built by @hahwul, and thanks to him for making it open-source.

Shail Patel profil fotoğrafı
Shail Patel1 yıl önce

Lmao, and the plugin is paid

vin profil fotoğrafı
vin1 yıl önce

that is hot, will probably use

Navid profil fotoğrafı
Navid1 yıl önce

@voorivex

Jerry Decoder profil fotoğrafı
Jerry Decoder1 yıl önce

Also guys if don't mind add these too if want Echidna,Hacken-Fuzz,foundry,ChainFuzz,Harvey,sFuzz/Deze are mutation testers that we certainly need Sumo,Certoa Gambit and vertigo

heretoreadbugs profil fotoğrafı
heretoreadbugs1 yıl önce

bro AI is so from 2022

HEX profil fotoğrafı
HEX1 yıl önce

چی شد😂

Medivdev profil fotoğrafı
Medivdev1 yıl önce

@Hyunfix1 Hacking made simple

Benzer Videolar

PentestGPT can now think?! Available to Pro and Team users.
0:40

PentestGPT can now think?! Available to Pro and Team users.

HackerAI

17,621 görüntüleme • 1 yıl önce

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.
4:07

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.

Gospel

12,567 görüntüleme • 7 ay önce

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:
0:28

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:

Alvaro Cintas

79,813 görüntüleme • 1 yıl önce

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇
0:56

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇

Burp Suite

12,147 görüntüleme • 7 ay önce

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,652 görüntüleme • 2 yıl önce

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.
0:40

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.

OpenAI Developers

1,715,624 görüntüleme • 3 ay önce

Software vulnerabilities can be notoriously time-consuming for developers to find and fix. Today, we’re sharing details about CodeMender: our new AI agent that uses Gemini Deep Think to automatically patch critical software vulnerabilities. 🧵
1:12

Software vulnerabilities can be notoriously time-consuming for developers to find and fix. Today, we’re sharing details about CodeMender: our new AI agent that uses Gemini Deep Think to automatically patch critical software vulnerabilities. 🧵

Google DeepMind

367,767 görüntüleme • 8 ay önce

Claude Security is now in public beta for Claude Enterprise customers. Claude scans your codebase for vulnerabilities, validates each finding to cut false positives, and suggests patches you can review and approve.
0:50

Claude Security is now in public beta for Claude Enterprise customers. Claude scans your codebase for vulnerabilities, validates each finding to cut false positives, and suggests patches you can review and approve.

Claude

4,895,109 görüntüleme • 1 ay önce

Pedro YCH is now open! 5 Slots for now, you can find them over on my VGen! #VGenOpen miau
0:28

Pedro YCH is now open! 5 Slots for now, you can find them over on my VGen! #VGenOpen miau

🚨

275,559 görüntüleme • 2 yıl önce

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.
0:55

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.

Burp Suite

19,365 görüntüleme • 8 ay önce

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam
1:27

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

AnonKryptiQuz

13,181 görüntüleme • 1 yıl önce

You can now find me on TikTok (tonyiommiofficial)🤘
0:28

You can now find me on TikTok (tonyiommiofficial)🤘

Tony Iommi

22,864 görüntüleme • 8 ay önce

You can now restore deleted chats. Find them in the Archive tab for up to 30 days.
0:26

You can now restore deleted chats. Find them in the Archive tab for up to 30 days.

v0

13,235 görüntüleme • 11 ay önce

💡Tool Showcase: Valhalla. Valhalla finds vulnerable devices on Shodan, it can also scan a list of domains to find vulnerabilities. Link: Credit:
8:40

💡Tool Showcase: Valhalla. Valhalla finds vulnerable devices on Shodan, it can also scan a list of domains to find vulnerabilities. Link: Credit:

Dark Web Informer

18,899 görüntüleme • 1 yıl önce

DOGE now has a website where you can submit your suggestions for deregulation or any rules/policies that you find extremely burdensome for consideration.
2:56

DOGE now has a website where you can submit your suggestions for deregulation or any rules/policies that you find extremely burdensome for consideration.

Insurrection Barbie

20,543 görüntüleme • 1 yıl önce

You can now find me on the Playboy Club 💋
0:22

You can now find me on the Playboy Club 💋

Emery

61,414 görüntüleme • 1 yıl önce

Do not use the script tag when testing for XSS
0:51

Do not use the script tag when testing for XSS

Bug Bounty Reports Explained

41,260 görüntüleme • 2 yıl önce

Lance Twiggs GunShyMartyr SafetySwipe Pull everything you can find right now.
1:40

Lance Twiggs GunShyMartyr SafetySwipe Pull everything you can find right now.

0HOUR

50,584 görüntüleme • 9 ay önce

How many can YOU find? See how many Easter eggs you can spot in #TransformersOne, now on Digital.
0:36

How many can YOU find? See how many Easter eggs you can spot in #TransformersOne, now on Digital.

Transformers

407,889 görüntüleme • 1 yıl önce