Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Why spend time manually converting JSON to XML to test for XXE? Just ask Burp AI in Repeater: it handles the transformation and delivers the exploit. Ben Sadeghipour demonstrates this massive shortcut for finding complex, overlooked bugs. 👇

Burp_Suite's profile picture

Burp Suite

138,402 subscribers

17,965 görüntüleme • 9 ay önce •via X (Twitter)

Bilim & Teknoloji
LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

SQLi just got much easier with Burp AI! 🤯 Watch Ben Sadeghipour demonstrate 👀 Burp AI doesn't just find the SQL injection, it automates the entire process: 👉 Determines column count. 👉 Extracts database and table names. 👉 Launches the full exploit to dump data! 💥 Stop worrying about manual steps and let AI handle the full attack chain 👇
1:12

SQLi just got much easier with Burp AI! 🤯 Watch Ben Sadeghipour demonstrate 👀 Burp AI doesn't just find the SQL injection, it automates the entire process: 👉 Determines column count. 👉 Extracts database and table names. 👉 Launches the full exploit to dump data! 💥 Stop worrying about manual steps and let AI handle the full attack chain 👇

Web Security Academy

11,069 görüntüleme • 9 ay önce

Have you tried Shadow Repeater? It's an AI-powered Extension for Burp Repeater that auto-mutates requests, does intelligent fuzzes in the background, and surfaces surprising findings to Burp Organizer, helping to uncover bypasses and hidden attack paths faster. Learn more 👇
0:28

Have you tried Shadow Repeater? It's an AI-powered Extension for Burp Repeater that auto-mutates requests, does intelligent fuzzes in the background, and surfaces surprising findings to Burp Organizer, helping to uncover bypasses and hidden attack paths faster. Learn more 👇

Burp Suite

12,140 görüntüleme • 6 ay önce

🚨 Ben Leo goes to Bradford for GB News to explore why the council is in massive debt, and why it has been given city of culture status. Must watch👇👇😳
5:25

🚨 Ben Leo goes to Bradford for GB News to explore why the council is in massive debt, and why it has been given city of culture status. Must watch👇👇😳

Patriotic 🇬🇧 Nation

68,308 görüntüleme • 1 yıl önce

in etaHEN 2.1B, you won't have to edit the shn/json/mc4.txt files in the root of the cheats folder or reboot after manually adding new cheats with the new Reload Cheats option in the Cheats menu, This feature will make it easier for cheat makers to test their cheats
0:46

in etaHEN 2.1B, you won't have to edit the shn/json/mc4.txt files in the root of the cheats folder or reboot after manually adding new cheats with the new Reload Cheats option in the Cheats menu, This feature will make it easier for cheat makers to test their cheats

LM

21,448 görüntüleme • 1 yıl önce

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec
0:28

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,682 görüntüleme • 1 yıl önce

here's how to create video like that with AI in 3 mins: - upload admin photo to Claude - ask for JSON prompt for this photo - go to nano banana pro - generate - veo/infinitetalk for lipsync done. it has never been this easy to create content that sells it in just a few minutes
0:43

here's how to create video like that with AI in 3 mins: - upload admin photo to Claude - ask for JSON prompt for this photo - go to nano banana pro - generate - veo/infinitetalk for lipsync done. it has never been this easy to create content that sells it in just a few minutes

MAX

50,320 görüntüleme • 6 ay önce

🚨 BREAKING: Google just dropped the most practical AI release of 2025. It handles your emails, data, docs, meetings and does it with context. This is AI that actually saves time. Here’s everything they announced (and why it matters for your team):
1:35

🚨 BREAKING: Google just dropped the most practical AI release of 2025. It handles your emails, data, docs, meetings and does it with context. This is AI that actually saves time. Here’s everything they announced (and why it matters for your team):

Brendan Jowett

1,168,287 görüntüleme • 1 yıl önce

Today we're introducing Claude for Marketing. The first AI agent that doesn't just track your brand in AI answers but ranks it all from your chat. Just ask. It reads your visibility, pinpoints what's wrong and handles the fix.
0:53

Today we're introducing Claude for Marketing. The first AI agent that doesn't just track your brand in AI answers but ranks it all from your chat. Just ask. It reads your visibility, pinpoints what's wrong and handles the fix.

CrowdReply

290,037 görüntüleme • 21 gün önce

i discovered the dumbest AI hack that saves me 3 hours per project instead of asking AI for "the best" solution i just ask: > Create a test page with 10 variations of this hero section then i pick the best one in 30 seconds why tf did i waste years deciding manually
0:25

i discovered the dumbest AI hack that saves me 3 hours per project instead of asking AI for "the best" solution i just ask: > Create a test page with 10 variations of this hero section then i pick the best one in 30 seconds why tf did i waste years deciding manually

Melvyn • Builder

31,845 görüntüleme • 6 ay önce

IT JUST GOT CHEAPER FOR AI VIDEO! I've refined the Selfie AI Video Prompt to get accurate results 99% of the time. Want the prompt and tutorial? Comment PROPMT and I'll send it to you and show you IN DETAIL how I was able to get results like this 👇👇
2:04

IT JUST GOT CHEAPER FOR AI VIDEO! I've refined the Selfie AI Video Prompt to get accurate results 99% of the time. Want the prompt and tutorial? Comment PROPMT and I'll send it to you and show you IN DETAIL how I was able to get results like this 👇👇

Murray Frost

124,413 görüntüleme • 1 yıl önce

AI provides in-depth knowledge of adrenochrome... Now you just have to ask yourself, who feeds this AI with this information and why is it allowed to talk about it in such detail? - The floodgates are open
2:36

AI provides in-depth knowledge of adrenochrome... Now you just have to ask yourself, who feeds this AI with this information and why is it allowed to talk about it in such detail? - The floodgates are open

War Correspondent

162,999 görüntüleme • 1 yıl önce

Congrats to 10x Science on their $4.8M seed! They're building AI for molecular-level protein characterization, a process that today requires specialized scientists spending weeks or months manually interpreting complex data. Their platform delivers the same insights in minutes.
2:39

Congrats to 10x Science on their $4.8M seed! They're building AI for molecular-level protein characterization, a process that today requires specialized scientists spending weeks or months manually interpreting complex data. Their platform delivers the same insights in minutes.

Y Combinator

102,573 görüntüleme • 3 ay önce

Whitaker: We are in the middle of a massive transformation where Europe is taking over the conventional defense of the continent and they've agreed to spend 5% but the capabilities have deteriorated significantly and it will take some time for them to generate things like warships that they can provide to ensure passage.
1:02

Whitaker: We are in the middle of a massive transformation where Europe is taking over the conventional defense of the continent and they've agreed to spend 5% but the capabilities have deteriorated significantly and it will take some time for them to generate things like warships that they can provide to ensure passage.

Acyn

19,979 görüntüleme • 4 ay önce

Asked @Framer Agents to build an Infinity Grid for my free 3D cute icon set, and it works perfectly. Not just basic edits, the agents handled complex interactions I'd normally code manually. Prompt below 👇
0:28

Asked @Framer Agents to build an Infinity Grid for my free 3D cute icon set, and it works perfectly. Not just basic edits, the agents handled complex interactions I'd normally code manually. Prompt below 👇

Tran Mau Tri Tam ✪

37,727 görüntüleme • 1 ay önce

Screenshots just landed in /agent 🖼️ No need for custom selectors or complex logic. Just ask the Firecrawl /agent to "get a screenshot" along with your data. Try it out now 👇
0:24

Screenshots just landed in /agent 🖼️ No need for custom selectors or complex logic. Just ask the Firecrawl /agent to "get a screenshot" along with your data. Try it out now 👇

Firecrawl

19,033 görüntüleme • 7 ay önce

For too long, the Swamp has enabled a coordinated push to bring in massive foreign populations and exploit taxpayer resources. It’s time to hit PAUSE and prioritize the American people and Western values.
0:47

For too long, the Swamp has enabled a coordinated push to bring in massive foreign populations and exploit taxpayer resources. It’s time to hit PAUSE and prioritize the American people and Western values.

Chip Roy

19,268 görüntüleme • 8 ay önce

Why you’re slowmaxxing by not updating Dexscreener via Terminal 👇 - You’re manually cropping banners - You’re manually entering coin info - You’re manually entering payment info Save time in the moments which matter most. Switch to Terminal for faster Dex updates.
0:35

Why you’re slowmaxxing by not updating Dexscreener via Terminal 👇 - You’re manually cropping banners - You’re manually entering coin info - You’re manually entering payment info Save time in the moments which matter most. Switch to Terminal for faster Dex updates.

Terminal

86,564 görüntüleme • 5 ay önce

(1/2) Today we’re starting to test a new way to seamlessly go deeper in AI Mode directly from the Search results page on mobile, globally. This brings us closer to our vision for Search: just ask whatever’s on your mind – no matter how long or complex – and find exactly what you need. You shouldn’t have to think about where or how to ask your question.
0:31

(1/2) Today we’re starting to test a new way to seamlessly go deeper in AI Mode directly from the Search results page on mobile, globally. This brings us closer to our vision for Search: just ask whatever’s on your mind – no matter how long or complex – and find exactly what you need. You shouldn’t have to think about where or how to ask your question.

Robby Stein

215,859 görüntüleme • 8 ay önce

Here's a time lapse video showing my 360 hypervisor exploit triggering in ~18.5 minutes. This is a pretty average time for the exploit with about 40% success rate. People asked if it works on winchester and I don't think there's any reason it won't but I don't have one to test on
2:07

Here's a time lapse video showing my 360 hypervisor exploit triggering in ~18.5 minutes. This is a pretty average time for the exploit with about 40% success rate. People asked if it works on winchester and I don't think there's any reason it won't but I don't have one to test on

Ryan M

73,643 görüntüleme • 1 yıl önce

East Tennesseans don't ask for a whole lot, but they're concerned about how this place handles their money. We spend too much, and the next Speaker of the House needs to be able to right those wrongs.
0:51

East Tennesseans don't ask for a whole lot, but they're concerned about how this place handles their money. We spend too much, and the next Speaker of the House needs to be able to right those wrongs.

Rep. Tim Burchett

33,443 görüntüleme • 1 yıl önce