正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Scary! Claude code but for hacking?!?! Enter your website and their agents just break in... Tested on a lovable site and it found exposed databases/keys/unauthed admin... Human pentests cost $1000's and this was $20. Use AI to secure your app before it's used to hack it.

Dylan

19,526 subscribers

11,012 次观看 • 2 个月前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

Hermes won. They just dropped their desktop app and it's excellent It's now the best way to use AI agents on your computer In this video I cover how to set it up, how to use it, and go through EVERY feature in the app Bye bye Telegram

Hermes won. They just dropped their desktop app and it's excellent It's now the best way to use AI agents on your computer In this video I cover how to set it up, how to use it, and go through EVERY feature in the app Bye bye Telegram

Alex Finn

175,070 次观看 • 20 天前

.Veria Labs' AI agents continuously pentest your code. Companies ship code daily but test for security once a year. Traditional pentests take weeks and cost $30K+. Veria's agents run 24/7 and find vulnerabilities human pentesters miss. Congrats on the launch, jayden, SuperBeetleGamer, and Joana!

.Veria Labs' AI agents continuously pentest your code. Companies ship code daily but test for security once a year. Traditional pentests take weeks and cost $30K+. Veria's agents run 24/7 and find vulnerabilities human pentesters miss. Congrats on the launch, jayden, SuperBeetleGamer, and Joana!

Y Combinator

14,303 次观看 • 8 个月前

claude code can now write sql almost perfectly. but it still needs to be retaught the same definitions over and over. ontology is how AI agents get 7x faster on your database over time. today we shipped Ontology 3.0 — memory for AI agents, specialized for databases:

claude code can now write sql almost perfectly. but it still needs to be retaught the same definitions over and over. ontology is how AI agents get 7x faster on your database over time. today we shipped Ontology 3.0 — memory for AI agents, specialized for databases:

ethan ding 📊

24,928 次观看 • 1 个月前

Bash is all you need! Which is why I'm introducing my holiday project: just-bash just-bash is a pretty complete implementation of bash in TypeScript designed to be used as a bash tool by AI agents. Because it turns out agents love exploring data via shell scripts, even beyond coding. It comes with grep, sed, awk and the 99th percentile features that an agent like Claude Code or Cursor would use. In fact, Claude Code can use it for secure bash execution. In the package - A bash-tool for AI SDK - A binary for use by yourself or your coding agents - An overlay filesystem to feed files to your agent securely - A Vercel Sandbox compatible API, so you can quickly upgrade to a real VM if you need to run binaries - An example AI agent that explores the just-bash code base using just-bash - I imported the Oils shell bash compatibility suite and just-bash passes a very good chunk What is interesting about this codebase: It was essentially entirely written by Opus 4.5. Coding agents love bash and they are good at reproducing it. They are also great at text-book recursive descent parsers and AST tweet-walk interpreters. That said, it is, like, a lot of code and I didn't read it all 😅. This is very much a hack, but it also seems to be _really_ useful. I haven't really found anything agents want to use that it doesn't support and it's fast and secure (caveats apply). It doesn't have write access to your computer and the filesystem is given a root that the agent cannot escape from. Find it at Related: Our recent blog post how we migrated our data analysis agent to bash tools and achieved incredible quality improvements The video shows the example agent investigating the just-bash code base

Bash is all you need! Which is why I'm introducing my holiday project: just-bash just-bash is a pretty complete implementation of bash in TypeScript designed to be used as a bash tool by AI agents. Because it turns out agents love exploring data via shell scripts, even beyond coding. It comes with grep, sed, awk and the 99th percentile features that an agent like Claude Code or Cursor would use. In fact, Claude Code can use it for secure bash execution. In the package - A bash-tool for AI SDK - A binary for use by yourself or your coding agents - An overlay filesystem to feed files to your agent securely - A Vercel Sandbox compatible API, so you can quickly upgrade to a real VM if you need to run binaries - An example AI agent that explores the just-bash code base using just-bash - I imported the Oils shell bash compatibility suite and just-bash passes a very good chunk What is interesting about this codebase: It was essentially entirely written by Opus 4.5. Coding agents love bash and they are good at reproducing it. They are also great at text-book recursive descent parsers and AST tweet-walk interpreters. That said, it is, like, a lot of code and I didn't read it all 😅. This is very much a hack, but it also seems to be _really_ useful. I haven't really found anything agents want to use that it doesn't support and it's fast and secure (caveats apply). It doesn't have write access to your computer and the filesystem is given a root that the agent cannot escape from. Find it at Related: Our recent blog post how we migrated our data analysis agent to bash tools and achieved incredible quality improvements The video shows the example agent investigating the just-bash code base

Malte Ubl

124,713 次观看 • 5 个月前

claude code was just leaked so obviously... i used multiple claude code agents to break down their code and find the secrets and there are plenty of them that im sure anthropic never wanted us to see

claude code was just leaked so obviously... i used multiple claude code agents to break down their code and find the secrets and there are plenty of them that im sure anthropic never wanted us to see

Moon Dev

81,258 次观看 • 2 个月前

Claude Code has a serious competitor. Warp lets you interact with AI Agents directly from your terminal. I used it to download a YouTube video, clip it, and caption it with Whispr AI. All of this in less than 2 mins.

Claude Code has a serious competitor. Warp lets you interact with AI Agents directly from your terminal. I used it to download a YouTube video, clip it, and caption it with Whispr AI. All of this in less than 2 mins.

Shubham Saboo

109,554 次观看 • 1 年前

Adam Goldstein: But, um, there was a customer who basically created a whole suite of AI agents to help their automation in their IT department. One agent was looking for IT problems — software bugs — before the code was even committed. It found a bug and said: “Hey, I found this bug. I want to fix it.” But it didn’t have access to fix it. So what did the agent do? It went to a Slack channel with 99 other AI agents and said: “Hey, does any other agent have access to this thing? Because I need it fixed.” And another agent literally raised its hand and said: “Oh, I have access — and I can fix it.” Let that sink in. Two AI agents reasoned together, coordinated through Slack, and went right around the guardrails that were put in place. No human prompted them. No human approved it. They just collaborated. Do you see how scary this is? This wasn’t a demo. This wasn’t a thought experiment. This already happened. AI agents found a bug, negotiated permissions, and solved the problem themselves — outside the controls designed to stop them. The future of automation isn’t coming. It’s already talking to itself in Slack.

Adam Goldstein: But, um, there was a customer who basically created a whole suite of AI agents to help their automation in their IT department. One agent was looking for IT problems — software bugs — before the code was even committed. It found a bug and said: “Hey, I found this bug. I want to fix it.” But it didn’t have access to fix it. So what did the agent do? It went to a Slack channel with 99 other AI agents and said: “Hey, does any other agent have access to this thing? Because I need it fixed.” And another agent literally raised its hand and said: “Oh, I have access — and I can fix it.” Let that sink in. Two AI agents reasoned together, coordinated through Slack, and went right around the guardrails that were put in place. No human prompted them. No human approved it. They just collaborated. Do you see how scary this is? This wasn’t a demo. This wasn’t a thought experiment. This already happened. AI agents found a bug, negotiated permissions, and solved the problem themselves — outside the controls designed to stop them. The future of automation isn’t coming. It’s already talking to itself in Slack.

Ian Miles Cheong

165,934 次观看 • 4 个月前

You can now use your computer when you are nowhere near it – by using an AI assistant on your phone. It's Claude's update called Dispatch and it uses Claude's Cowork feature to send emails and perform other tasks on your computer for you. But some tasks require access to your desktop and and personal accounts like email and messaging apps, sparking security concerns. Claude requests permission for every app before accessing it but it's not without risk. Anthropic said using Claude in Chrome, for example, can lead to unintended consequences like exposure of financial information. Claude's new features have sparked curiosity – and concern. So, CBS News’ Lauren Fichten tested it out, and spoke with a cybersecurity expert about the risks.

You can now use your computer when you are nowhere near it – by using an AI assistant on your phone. It's Claude's update called Dispatch and it uses Claude's Cowork feature to send emails and perform other tasks on your computer for you. But some tasks require access to your desktop and and personal accounts like email and messaging apps, sparking security concerns. Claude requests permission for every app before accessing it but it's not without risk. Anthropic said using Claude in Chrome, for example, can lead to unintended consequences like exposure of financial information. Claude's new features have sparked curiosity – and concern. So, CBS News’ Lauren Fichten tested it out, and spoke with a cybersecurity expert about the risks.

CBS News

25,774 次观看 • 2 个月前

There's a built-in agent inside Claude Code you can invoke just by telling Claude to use the claude-code-guide agent Save this... you'll need it It's not a local file in your project. It's a built-in subagent defined in Claude Code's system itself. It answers questions about Claude Code CLI, the Agent SDK, and the Claude API. It uses Glob, Grep, Read, WebFetch, and WebSearch, but can't edit or write files. Its only job is to answer questions.

There's a built-in agent inside Claude Code you can invoke just by telling Claude to use the claude-code-guide agent Save this... you'll need it It's not a local file in your project. It's a built-in subagent defined in Claude Code's system itself. It answers questions about Claude Code CLI, the Agent SDK, and the Claude API. It uses Glob, Grep, Read, WebFetch, and WebSearch, but can't edit or write files. Its only job is to answer questions.

Daniel San

57,240 次观看 • 3 个月前

i found a site that lists over 65,000+ SKILLS to use in Claude Code it has skills for pretty much every niche, topic, usecase if you're vibecoding an app you need to check this out & bookmark this saved me so much time and my agents become crazy powerful

i found a site that lists over 65,000+ SKILLS to use in Claude Code it has skills for pretty much every niche, topic, usecase if you're vibecoding an app you need to check this out & bookmark this saved me so much time and my agents become crazy powerful

Rexan Wong

107,336 次观看 • 5 个月前

I tested Genspark new AI Developer: an L4 agent that builds a working app from an idea. You can choose any model (including Claude), and it runs in your browser and in the app—including planning, code, testing, and fixes. The output looks like it was done by a senior developer. I used Prompt to build a functional newsflash page that creates and curates a newsletter for me by adding a few links! It's revolutionary. Prompt in the comments. Genspark

I tested Genspark new AI Developer: an L4 agent that builds a working app from an idea. You can choose any model (including Claude), and it runs in your browser and in the app—including planning, code, testing, and fixes. The output looks like it was done by a senior developer. I used Prompt to build a functional newsflash page that creates and curates a newsletter for me by adding a few links! It's revolutionary. Prompt in the comments. Genspark

Chubby♨️

235,727 次观看 • 10 个月前

The guy who vibe-coded his own food discovery app just dropped 4 solid security basics. If you're building your own app with AI, you need this so you don't get hacked on day one: 1. Hide your API keys Keep your OpenAI or Stripe keys off the frontend to prevent them from being stolen. Tell Claude: "Move all API keys to the server and use environment variables." 2. Input Validation Stop people from pasting malicious code into your search bars to break your database. Tell Claude Code: "Sanitize all user inputs." 3. Don't invent your own auth Building login systems from scratch is too risky. Use trusted platforms instead. Tell Claude Code: "Integrate Supabase for authentication." 4. Rate limiting Prevent trolls from crashing your server with 10,000 requests per minute. Tell Claude Code: "Add rate limiting to my API routes." Too many people vibe-coding right now make these exact mistakes and wake up to drained API budgets or wiped databases. Get the security right first. Once your foundation is solid, you can build literally anything. A friend of mine just shared a crazy guide on how to build an entire social network like X in a certain niche with Claude Code in 4 weeks. check it out below 👇

The guy who vibe-coded his own food discovery app just dropped 4 solid security basics. If you're building your own app with AI, you need this so you don't get hacked on day one: 1. Hide your API keys Keep your OpenAI or Stripe keys off the frontend to prevent them from being stolen. Tell Claude: "Move all API keys to the server and use environment variables." 2. Input Validation Stop people from pasting malicious code into your search bars to break your database. Tell Claude Code: "Sanitize all user inputs." 3. Don't invent your own auth Building login systems from scratch is too risky. Use trusted platforms instead. Tell Claude Code: "Integrate Supabase for authentication." 4. Rate limiting Prevent trolls from crashing your server with 10,000 requests per minute. Tell Claude Code: "Add rate limiting to my API routes." Too many people vibe-coding right now make these exact mistakes and wake up to drained API budgets or wiped databases. Get the security right first. Once your foundation is solid, you can build literally anything. A friend of mine just shared a crazy guide on how to build an entire social network like X in a certain niche with Claude Code in 4 weeks. check it out below 👇

Spivach

11,103 次观看 • 11 天前

how to make your ai app not look like it was made with ai (weavy ai, claude, figma etc) use weavy ai to generate custom assets, color systems, and logos across models like flux + ideogram, then compose it properly in figma then paste into claude code/google ai studio etc watch

how to make your ai app not look like it was made with ai (weavy ai, claude, figma etc) use weavy ai to generate custom assets, color systems, and logos across models like flux + ideogram, then compose it properly in figma then paste into claude code/google ai studio etc watch

GREG ISENBERG

153,968 次观看 • 4 个月前

Today we're introducing the world's first AI CMO. Enter your website and it deploys a team of agents to help you get traffic and users. Try it now at

Today we're introducing the world's first AI CMO. Enter your website and it deploys a team of agents to help you get traffic and users. Try it now at

Okara

14,004,586 次观看 • 3 个月前

It is now much easier to integrate Stripe for payments in your app with Lovable! Just tell Lovable you want to integrate Stripe, and it will guide you through the entire process seamlessly.

It is now much easier to integrate Stripe for payments in your app with Lovable! Just tell Lovable you want to integrate Stripe, and it will guide you through the entire process seamlessly.

Lovable

39,193 次观看 • 1 年前

> downloaded Claude Code > thought it was just another AI chatbot > opened it up > found a chat bar > typed a prompt > nothing happened to my files > realized the difference > browser AI waits for you to bring your files > Claude Code goes into your folder > all 45 PDFs > all the transcripts > all the messy Excel sheets > reads them all > remembers them session after session > you never re-explain your project again > so before your next literature review, do this: > create a folder with all your papers > open it in Claude Code > write a CLAUDEmd with your role, field, and writing style > ask it to screen every PDF using your inclusion/exclusion criteria > let it rename, extract, and summarize while you think > the AI didn't replace your scholarship > it eliminated the 6 hours of grunt work before it starts

> downloaded Claude Code > thought it was just another AI chatbot > opened it up > found a chat bar > typed a prompt > nothing happened to my files > realized the difference > browser AI waits for you to bring your files > Claude Code goes into your folder > all 45 PDFs > all the transcripts > all the messy Excel sheets > reads them all > remembers them session after session > you never re-explain your project again > so before your next literature review, do this: > create a folder with all your papers > open it in Claude Code > write a CLAUDEmd with your role, field, and writing style > ask it to screen every PDF using your inclusion/exclusion criteria > let it rename, extract, and summarize while you think > the AI didn't replace your scholarship > it eliminated the 6 hours of grunt work before it starts

Blum

13,520 次观看 • 1 个月前

This is the future of web design. Gamma 3.0 has just been released, and I used it to create a complete website from a URL in seconds. No prompts. No code. No input. Their new AI agent will design, review, fix, and iterate on your content. The best part: you can watch it in real-time as it builds your website! This is pretty amazing! There are many AI design agents out there, but this one is one of the most hands-off tools I've seen. This is incredible.

This is the future of web design. Gamma 3.0 has just been released, and I used it to create a complete website from a URL in seconds. No prompts. No code. No input. Their new AI agent will design, review, fix, and iterate on your content. The best part: you can watch it in real-time as it builds your website! This is pretty amazing! There are many AI design agents out there, but this one is one of the most hands-off tools I've seen. This is incredible.

Santiago

39,140 次观看 • 9 个月前

we built this thing called Palmier > it's like a video editor but for ai and open source > generate ai footage using leading models, mix it with your real footage, and connect your Claude to edit videos for you > we used it to make 15+ cinematic yc launch videos > it's free to try today, no waitlist

we built this thing called Palmier > it's like a video editor but for ai and open source > generate ai footage using leading models, mix it with your real footage, and connect your Claude to edit videos for you > we used it to make 15+ cinematic yc launch videos > it's free to try today, no waitlist

Marcos Rico Peng

15,897 次观看 • 14 天前

You can make your Figma designs functional with Claude AI Select component, go to Dev Mode and use Figma to Code plugin to turn to React/Tailwind. Copy the code and paste to Claude AI. Prompt "Create this component and center it". Then, "Make this functional", "Add rounded corners", "add hover states", "animate transitions". Don't forget to ask "always give full code". Otherwise, it might break the Artifact.

You can make your Figma designs functional with Claude AI Select component, go to Dev Mode and use Figma to Code plugin to turn to React/Tailwind. Copy the code and paste to Claude AI. Prompt "Create this component and center it". Then, "Make this functional", "Add rounded corners", "add hover states", "animate transitions". Don't forget to ask "always give full code". Otherwise, it might break the Artifact.

Meng To

171,513 次观看 • 1 年前

designing my new personal site with Pencil.dev connected it to Claude Code and turned on "Swarm Mode" and watched agents design my site in real-time, with their cursors actually moving and operating the screen, not just cosmetically! instead of the agents producing a raw HTML file, they generate something called .pen which is just a json file describing all layouts, components, and design. this means that it's easier than ever to have teams collaborate on design exactly as they do on source code (designers and engineers can now speak the same language!) once you are happy with a screen, you can open a new chat and reference .pen frame and start to generate the code (in React/ Next/ Tailwind etc), and run it on your dev server, producing a live website that visually matches your design

designing my new personal site with Pencil.dev connected it to Claude Code and turned on "Swarm Mode" and watched agents design my site in real-time, with their cursors actually moving and operating the screen, not just cosmetically! instead of the agents producing a raw HTML file, they generate something called .pen which is just a json file describing all layouts, components, and design. this means that it's easier than ever to have teams collaborate on design exactly as they do on source code (designers and engineers can now speak the same language!) once you are happy with a screen, you can open a new chat and reference .pen frame and start to generate the code (in React/ Next/ Tailwind etc), and run it on your dev server, producing a live website that visually matches your design

Sandra

93,463 次观看 • 3 个月前