正在加载视频...

视频加载失败

返回首页

PentestGPT can now find XSS vulnerabilities for you!

PentestGPT's profile picture

HackerAI

21,611 subscribers

69,087 次观看 • 1 年前 •via X (Twitter)

教育科学技术
LIVE

Anya Rossi• Live Now

Private livecam show

9 条评论

Fat 的头像
Fat1 年前

PentestGPT is not finding the XSS for you dalfox by @hahwul is 🤷‍♂️

PentestGPT 的头像
PentestGPT1 年前

@hahwul True. A really lovely tool built by @hahwul, and thanks to him for making it open-source.

Shail Patel 的头像
Shail Patel1 年前

Lmao, and the plugin is paid

vin 的头像
vin1 年前

that is hot, will probably use

Navid 的头像
Navid1 年前

@voorivex

Jerry Decoder 的头像
Jerry Decoder1 年前

Also guys if don't mind add these too if want Echidna,Hacken-Fuzz,foundry,ChainFuzz,Harvey,sFuzz/Deze are mutation testers that we certainly need Sumo,Certoa Gambit and vertigo

heretoreadbugs 的头像
heretoreadbugs1 年前

bro AI is so from 2022

HEX 的头像
HEX1 年前

چی شد😂

Medivdev 的头像
Medivdev1 年前

@Hyunfix1 Hacking made simple

相关视频

PentestGPT can now think?! Available to Pro and Team users.
0:40

PentestGPT can now think?! Available to Pro and Team users.

HackerAI

17,621 次观看 • 1 年前

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.
4:07

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.

Gospel

12,744 次观看 • 7 个月前

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:
0:28

This is such a powerful AI coding workflow. You can now use Cursor or Windsurf for coding, and let CodeRabbit’s AI agent refactor messy code, help you debug, and find security vulnerabilities. Here’s how:

Alvaro Cintas

79,813 次观看 • 1 年前

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇
0:56

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇

Burp Suite

12,147 次观看 • 7 个月前

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,652 次观看 • 2 年前

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.
0:40

We're introducing Codex Security. An application security agent that helps you secure your codebase by finding vulnerabilities, validating them, and proposing fixes you can review and patch. Now, teams can focus on the vulnerabilities that matter and ship code faster.

OpenAI Developers

1,715,780 次观看 • 3 个月前

Software vulnerabilities can be notoriously time-consuming for developers to find and fix. Today, we’re sharing details about CodeMender: our new AI agent that uses Gemini Deep Think to automatically patch critical software vulnerabilities. 🧵
1:12

Software vulnerabilities can be notoriously time-consuming for developers to find and fix. Today, we’re sharing details about CodeMender: our new AI agent that uses Gemini Deep Think to automatically patch critical software vulnerabilities. 🧵

Google DeepMind

367,796 次观看 • 8 个月前

Claude Security is now in public beta for Claude Enterprise customers. Claude scans your codebase for vulnerabilities, validates each finding to cut false positives, and suggests patches you can review and approve.
0:50

Claude Security is now in public beta for Claude Enterprise customers. Claude scans your codebase for vulnerabilities, validates each finding to cut false positives, and suggests patches you can review and approve.

Claude

4,897,616 次观看 • 1 个月前

Pedro YCH is now open! 5 Slots for now, you can find them over on my VGen! #VGenOpen miau
0:28

Pedro YCH is now open! 5 Slots for now, you can find them over on my VGen! #VGenOpen miau

🚨🛡

275,610 次观看 • 2 年前

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.
0:55

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.

Burp Suite

19,365 次观看 • 8 个月前

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam
1:27

BeeXSS is an automated tool to detect Blind XSS vulnerabilities in web applications. It injects payload, bypasses WAFs, and identifies backend execution flaws. Check it out here: #CyberSecurity #BlindXSS #Pentesting #BugBounty #hackingtools #redteam

AnonKryptiQuz

13,181 次观看 • 1 年前

You can now find me on TikTok (tonyiommiofficial)🤘
0:28

You can now find me on TikTok (tonyiommiofficial)🤘

Tony Iommi

22,864 次观看 • 8 个月前

You can now restore deleted chats. Find them in the Archive tab for up to 30 days.
0:26

You can now restore deleted chats. Find them in the Archive tab for up to 30 days.

v0

13,235 次观看 • 11 个月前

💡Tool Showcase: Valhalla. Valhalla finds vulnerable devices on Shodan, it can also scan a list of domains to find vulnerabilities. Link: Credit:
8:40

💡Tool Showcase: Valhalla. Valhalla finds vulnerable devices on Shodan, it can also scan a list of domains to find vulnerabilities. Link: Credit:

Dark Web Informer

18,899 次观看 • 1 年前

DOGE now has a website where you can submit your suggestions for deregulation or any rules/policies that you find extremely burdensome for consideration.
2:56

DOGE now has a website where you can submit your suggestions for deregulation or any rules/policies that you find extremely burdensome for consideration.

Insurrection Barbie

20,543 次观看 • 1 年前

You can now find me on the Playboy Club 💋
0:22

You can now find me on the Playboy Club 💋

Emery

61,414 次观看 • 1 年前

Lance Twiggs GunShyMartyr SafetySwipe Pull everything you can find right now.
1:40

Lance Twiggs GunShyMartyr SafetySwipe Pull everything you can find right now.

0HOUR

50,584 次观看 • 9 个月前

How many can YOU find? See how many Easter eggs you can spot in #TransformersOne, now on Digital.
0:36

How many can YOU find? See how many Easter eggs you can spot in #TransformersOne, now on Digital.

Transformers

407,889 次观看 • 1 年前

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:
0:50

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:

Claude

26,199,330 次观看 • 4 个月前