Sensitive content

This media may contain sensitive content.

Loading video...

Video Failed to Load

Go Home

Subscribe here for stories. http:// And get free access here. 👉🏻 http:// Confirm your YouTube subscription here 👉🏻 http://

Rogan__Hardy's profile picture

Rogan Hardy

163,610 subscribers

729,211 views • 1 month ago •via X (Twitter)

NSFW
LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec
0:28

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,818 views • 1 year ago

Every HTTP Method Explained GET POST PUT DELETE and More
2:51

Every HTTP Method Explained GET POST PUT DELETE and More

The Cybersecurity guy

12,202 views • 4 months ago

All of us watching this card right now 🍿 🎟️Buy WARDLEY vs DUBOIS HERE -->http: #WardleyDubois | Live NOW on DAZN
0:27

All of us watching this card right now 🍿 🎟️Buy WARDLEY vs DUBOIS HERE -->http: #WardleyDubois | Live NOW on DAZN

DAZN Boxing

23,230 views • 4 months ago

Microsoft CTO Kevin Scott says MCP is becoming the HTTP of the agentic web. Like HTTP, it's lightweight, composable, and interoperable. Microsoft is betting on MCP as the backbone for agent communication, scale, and evolution.
1:08

Microsoft CTO Kevin Scott says MCP is becoming the HTTP of the agentic web. Like HTTP, it's lightweight, composable, and interoperable. Microsoft is betting on MCP as the backbone for agent communication, scale, and evolution.

vitrupo

115,827 views • 1 year ago

[New Blog] NetHunter Hacker IX How to use MANA Toolkit to create Wi-Fi rogue access point to intercept HTTP traffic and prevent getting hacked
0:58

[New Blog] NetHunter Hacker IX How to use MANA Toolkit to create Wi-Fi rogue access point to intercept HTTP traffic and prevent getting hacked

Mobile Hacker

35,578 views • 3 years ago

AI Agent unlocking content behind a "HTTP 402 Payment Required" #Nano paywall. The payment address/amount to unlock is communicated by the paywall using HTTP headers, and the AI Agent uses its own Nano wallet to pay for and read the content. #AIAgents will use $XNO 🤖
0:26

AI Agent unlocking content behind a "HTTP 402 Payment Required" #Nano paywall. The payment address/amount to unlock is communicated by the paywall using HTTP headers, and the AI Agent uses its own Nano wallet to pay for and read the content. #AIAgents will use $XNO 🤖

NanoCharts Ӿ 📊

19,656 views • 1 year ago

BOOOM! transformers now has a baked-in http server w/ OpenAI spec compatible API Launch it with `transformers serve` and connect your favorite apps. Here I'm running 👋 Jan with local transformers and hot-swappable models. There is preliminary tool call support as well!
0:28

BOOOM! transformers now has a baked-in http server w/ OpenAI spec compatible API Launch it with `transformers serve` and connect your favorite apps. Here I'm running 👋 Jan with local transformers and hot-swappable models. There is preliminary tool call support as well!

Lysandre

24,806 views • 1 year ago

It is possible for hackers to capture your credentials or any sensitive information via MITM while you're browsing through unencrypted connection ( HTTP ).
1:47

It is possible for hackers to capture your credentials or any sensitive information via MITM while you're browsing through unencrypted connection ( HTTP ).

Gospel

41,176 views • 1 year ago

GAMES+ = free games + deals + beta access Gamesmaxxing starts here. Subscribe now to claim your 7 day free trial.
1:03

GAMES+ = free games + deals + beta access Gamesmaxxing starts here. Subscribe now to claim your 7 day free trial.

GAMES.GG

986,265 views • 4 months ago

Folks, here is my MedBed hack set up at home.. I don’t just talk the talk, I walk the walk.. I believe this is why I have recovered so fast from my health scare. I feel great and I’m back in the gym. Get started with http//: and use code Nino25 for single items and Nino30 for bundled items. I’m a believer!
1:00

Folks, here is my MedBed hack set up at home.. I don’t just talk the talk, I walk the walk.. I believe this is why I have recovered so fast from my health scare. I feel great and I’m back in the gym. Get started with http//: and use code Nino25 for single items and Nino30 for bundled items. I’m a believer!

David Nino Rodriguez

56,114 views • 3 months ago

❌3 PASSING DRILLS❌ Ballers ⚽️ Download our APP for free here 👉🏻
0:43

❌3 PASSING DRILLS❌ Ballers ⚽️ Download our APP for free here 👉🏻

Joner Football

37,400 views • 1 year ago

Who knew there were so many similarities between being an NFL offensive lineman and playing golf? Andrew Whitworth joined this week’s episode of the Vanity Index Podcast to talk about his passion for the game, playing golf at 6’7”, his golf beef with another pro athlete, getting an ace vs. scoring a touchdown and more. Listen on Spotify: http:// Listen on Apple: http://
1:32

Who knew there were so many similarities between being an NFL offensive lineman and playing golf? Andrew Whitworth joined this week’s episode of the Vanity Index Podcast to talk about his passion for the game, playing golf at 6’7”, his golf beef with another pro athlete, getting an ace vs. scoring a touchdown and more. Listen on Spotify: http:// Listen on Apple: http://

Skratch

11,947 views • 6 months ago

💾 Vibe coded an entire dial-up TCP/IP stack for my TUI OS to get to the internet so it can now too browse the web It uses the same ISP as does which is (a real dial up provider) and then the browser routes you to my HTTP-proxy (because it doesn't support HTTPS yet) so you can open modern websites with it WebSocket → HDLC framing → PPP → LCP/EAP/IPCP → IPv4 → UDP → DNS (one round trip) → IPv4 → TCP (3-way handshake) → HTTP/1.0 → HTTP reverse proxy → HTML parse → render in OS browser -> render in your browser Also we have some techno in the music player now (not good yet) VERY GEEKY 🤓
2:06

💾 Vibe coded an entire dial-up TCP/IP stack for my TUI OS to get to the internet so it can now too browse the web It uses the same ISP as does which is (a real dial up provider) and then the browser routes you to my HTTP-proxy (because it doesn't support HTTPS yet) so you can open modern websites with it WebSocket → HDLC framing → PPP → LCP/EAP/IPCP → IPv4 → UDP → DNS (one round trip) → IPv4 → TCP (3-way handshake) → HTTP/1.0 → HTTP reverse proxy → HTML parse → render in OS browser -> render in your browser Also we have some techno in the music player now (not good yet) VERY GEEKY 🤓

@levelsio

130,858 views • 5 months ago

Let's play a game. You can signup to get access to applications like the terminal browser, Archē, [...] But: I get a public key, you get a private key and must provide a signature. There's no UI, only HTTP. What signature? Up to you to find out. Sign: username={username} Go.
0:40

Let's play a game. You can signup to get access to applications like the terminal browser, Archē, [...] But: I get a public key, you get a private key and must provide a signature. There's no UI, only HTTP. What signature? Up to you to find out. Sign: username={username} Go.

wavefnx

30,708 views • 10 months ago

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity
1:32

HTTP Request Smuggling Lab Walkthrough: Confirming a CL.TE vulnerability via differential responses. How to identify CLTE Vulnerabilities: 1. Send request to repeater 2. Downgrade protocol to HTTP/1.1 3. Disable "Update Content-Length" 4. Set Content-Length to 6 5. Add "Transfer-Encoding: chunked" heading 6. Send a chunk with an invalid chunk size If the backend times out, this indicates a potential CLTE vulnerability. Confirm the vulnerability with differential responses: 7. Create and send the attack request: - Replace previous chunk with a terminating chunk. - Add a smuggled request after the chunked body. - Append X-ignore: X (without a newline) and send. 8. Send a normal request to repeater, downgrade to HTTP/1.1 and send immediately after the attack request. If the response to the normal request is 404 instead of 200, the backend was poisoned! 🤮 Well done! To learn more about HTTP Request Smuggling and take on this lab yourself, head over the the Web Security Academy now #requestsmuggling #pentesting #bugbounty #hacking #cybersecurity

Web Security Academy

26,360 views • 1 year ago

MASSIVE upgrade to our universal bridge API and widget. ⬩5k+ routes added ⬩automated multi step onramp ⬩fast and cheap ⬩webhooks for every tx ⬩new widget UI ⬩new http API just watch
5:58

MASSIVE upgrade to our universal bridge API and widget. ⬩5k+ routes added ⬩automated multi step onramp ⬩fast and cheap ⬩webhooks for every tx ⬩new widget UI ⬩new http API just watch

Joaquim

20,204 views • 1 year ago