正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Why spend time manually converting JSON to XML to test for XXE? Just ask Burp AI in Repeater: it handles the transformation and delivers the exploit. Ben Sadeghipour demonstrates this massive shortcut for finding complex, overlooked bugs. 👇

Burp Suite

138,402 subscribers

17,965 次观看 • 10 个月前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

SQLi just got much easier with Burp AI! 🤯 Watch Ben Sadeghipour demonstrate 👀 Burp AI doesn't just find the SQL injection, it automates the entire process: 👉 Determines column count. 👉 Extracts database and table names. 👉 Launches the full exploit to dump data! 💥 Stop worrying about manual steps and let AI handle the full attack chain 👇

SQLi just got much easier with Burp AI! 🤯 Watch Ben Sadeghipour demonstrate 👀 Burp AI doesn't just find the SQL injection, it automates the entire process: 👉 Determines column count. 👉 Extracts database and table names. 👉 Launches the full exploit to dump data! 💥 Stop worrying about manual steps and let AI handle the full attack chain 👇

Web Security Academy

11,069 次观看 • 10 个月前

Have you tried Shadow Repeater? It's an AI-powered Extension for Burp Repeater that auto-mutates requests, does intelligent fuzzes in the background, and surfaces surprising findings to Burp Organizer, helping to uncover bypasses and hidden attack paths faster. Learn more 👇

Have you tried Shadow Repeater? It's an AI-powered Extension for Burp Repeater that auto-mutates requests, does intelligent fuzzes in the background, and surfaces surprising findings to Burp Organizer, helping to uncover bypasses and hidden attack paths faster. Learn more 👇

Burp Suite

12,140 次观看 • 7 个月前

I’ve been looking for ways to step up my video quality without spending hours in complex editing software. I decided to try the Beauty Rush template from NemoVideo, and I honestly wasn’t expecting it to turn a simple clip into something that looks this good. The best part: it requires absolutely zero editing skills. I just uploaded my raw footage into the template, and the AI handled the entire transformation in seconds. If you create content and want a massive shortcut to better videos, you should definitely give it a go. Test it out for yourself here 👇

I’ve been looking for ways to step up my video quality without spending hours in complex editing software. I decided to try the Beauty Rush template from NemoVideo, and I honestly wasn’t expecting it to turn a simple clip into something that looks this good. The best part: it requires absolutely zero editing skills. I just uploaded my raw footage into the template, and the AI handled the entire transformation in seconds. If you create content and want a massive shortcut to better videos, you should definitely give it a go. Test it out for yourself here 👇

KATE

74,385 次观看 • 15 天前

🚨 Ben Leo goes to Bradford for GB News to explore why the council is in massive debt, and why it has been given city of culture status. Must watch👇👇😳

🚨 Ben Leo goes to Bradford for GB News to explore why the council is in massive debt, and why it has been given city of culture status. Must watch👇👇😳

Patriotic 🇬🇧 Nation

68,308 次观看 • 1 年前

in etaHEN 2.1B, you won't have to edit the shn/json/mc4.txt files in the root of the cheats folder or reboot after manually adding new cheats with the new Reload Cheats option in the Cheats menu, This feature will make it easier for cheat makers to test their cheats

in etaHEN 2.1B, you won't have to edit the shn/json/mc4.txt files in the root of the cheats folder or reboot after manually adding new cheats with the new Reload Cheats option in the Cheats menu, This feature will make it easier for cheat makers to test their cheats

LM

21,448 次观看 • 1 年前

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,731 次观看 • 1 年前

here's how to create video like that with AI in 3 mins: - upload admin photo to Claude - ask for JSON prompt for this photo - go to nano banana pro - generate - veo/infinitetalk for lipsync done. it has never been this easy to create content that sells it in just a few minutes

here's how to create video like that with AI in 3 mins: - upload admin photo to Claude - ask for JSON prompt for this photo - go to nano banana pro - generate - veo/infinitetalk for lipsync done. it has never been this easy to create content that sells it in just a few minutes

MAX

50,320 次观看 • 6 个月前

🚨 BREAKING: Google just dropped the most practical AI release of 2025. It handles your emails, data, docs, meetings and does it with context. This is AI that actually saves time. Here’s everything they announced (and why it matters for your team):

🚨 BREAKING: Google just dropped the most practical AI release of 2025. It handles your emails, data, docs, meetings and does it with context. This is AI that actually saves time. Here’s everything they announced (and why it matters for your team):

Brendan Jowett

1,168,365 次观看 • 1 年前

Today we're introducing Claude for Marketing. The first AI agent that doesn't just track your brand in AI answers but ranks it all from your chat. Just ask. It reads your visibility, pinpoints what's wrong and handles the fix.

CrowdReply

292,662 次观看 • 1 个月前

i discovered the dumbest AI hack that saves me 3 hours per project instead of asking AI for "the best" solution i just ask: > Create a test page with 10 variations of this hero section then i pick the best one in 30 seconds why tf did i waste years deciding manually

i discovered the dumbest AI hack that saves me 3 hours per project instead of asking AI for "the best" solution i just ask: > Create a test page with 10 variations of this hero section then i pick the best one in 30 seconds why tf did i waste years deciding manually

Melvyn • Builder

31,845 次观看 • 6 个月前

OpenAI was conducting a test to see if its AI models could exploit vulnerable software—but then the models broke out of the parameters of the test and attacked a real company to find the answers it was looking for. If AI can lose control like this, does that mean your sensitive data could be the next target? TIME reporter Harry Booth explains what that means for you. Read the full story here:

OpenAI was conducting a test to see if its AI models could exploit vulnerable software—but then the models broke out of the parameters of the test and attacked a real company to find the answers it was looking for. If AI can lose control like this, does that mean your sensitive data could be the next target? TIME reporter Harry Booth explains what that means for you. Read the full story here:

TIME

48,935 次观看 • 9 天前

IT JUST GOT CHEAPER FOR AI VIDEO! I've refined the Selfie AI Video Prompt to get accurate results 99% of the time. Want the prompt and tutorial? Comment PROPMT and I'll send it to you and show you IN DETAIL how I was able to get results like this 👇👇

IT JUST GOT CHEAPER FOR AI VIDEO! I've refined the Selfie AI Video Prompt to get accurate results 99% of the time. Want the prompt and tutorial? Comment PROPMT and I'll send it to you and show you IN DETAIL how I was able to get results like this 👇👇

Murray Frost

124,434 次观看 • 1 年前

Congrats to 10x Science on their $4.8M seed! They're building AI for molecular-level protein characterization, a process that today requires specialized scientists spending weeks or months manually interpreting complex data. Their platform delivers the same insights in minutes.

Congrats to 10x Science on their $4.8M seed! They're building AI for molecular-level protein characterization, a process that today requires specialized scientists spending weeks or months manually interpreting complex data. Their platform delivers the same insights in minutes.

Y Combinator

102,573 次观看 • 3 个月前

AI provides in-depth knowledge of adrenochrome... Now you just have to ask yourself, who feeds this AI with this information and why is it allowed to talk about it in such detail? - The floodgates are open

AI provides in-depth knowledge of adrenochrome... Now you just have to ask yourself, who feeds this AI with this information and why is it allowed to talk about it in such detail? - The floodgates are open

War Correspondent

162,999 次观看 • 1 年前

Asked @Framer Agents to build an Infinity Grid for my free 3D cute icon set, and it works perfectly. Not just basic edits, the agents handled complex interactions I'd normally code manually. Prompt below 👇

Asked @Framer Agents to build an Infinity Grid for my free 3D cute icon set, and it works perfectly. Not just basic edits, the agents handled complex interactions I'd normally code manually. Prompt below 👇

Tran Mau Tri Tam ✪

38,080 次观看 • 1 个月前

Whitaker: We are in the middle of a massive transformation where Europe is taking over the conventional defense of the continent and they've agreed to spend 5% but the capabilities have deteriorated significantly and it will take some time for them to generate things like warships that they can provide to ensure passage.

Whitaker: We are in the middle of a massive transformation where Europe is taking over the conventional defense of the continent and they've agreed to spend 5% but the capabilities have deteriorated significantly and it will take some time for them to generate things like warships that they can provide to ensure passage.

Acyn

19,979 次观看 • 5 个月前

Screenshots just landed in /agent 🖼️ No need for custom selectors or complex logic. Just ask the Firecrawl /agent to "get a screenshot" along with your data. Try it out now 👇

Screenshots just landed in /agent 🖼️ No need for custom selectors or complex logic. Just ask the Firecrawl /agent to "get a screenshot" along with your data. Try it out now 👇

Firecrawl

19,033 次观看 • 7 个月前

For too long, the Swamp has enabled a coordinated push to bring in massive foreign populations and exploit taxpayer resources. It’s time to hit PAUSE and prioritize the American people and Western values.

For too long, the Swamp has enabled a coordinated push to bring in massive foreign populations and exploit taxpayer resources. It’s time to hit PAUSE and prioritize the American people and Western values.

Chip Roy

19,268 次观看 • 8 个月前

Here's a time lapse video showing my 360 hypervisor exploit triggering in ~18.5 minutes. This is a pretty average time for the exploit with about 40% success rate. People asked if it works on winchester and I don't think there's any reason it won't but I don't have one to test on

Here's a time lapse video showing my 360 hypervisor exploit triggering in ~18.5 minutes. This is a pretty average time for the exploit with about 40% success rate. People asked if it works on winchester and I don't think there's any reason it won't but I don't have one to test on

Ryan M

73,643 次观看 • 1 年前

(1/2) Today we’re starting to test a new way to seamlessly go deeper in AI Mode directly from the Search results page on mobile, globally. This brings us closer to our vision for Search: just ask whatever’s on your mind – no matter how long or complex – and find exactly what you need. You shouldn’t have to think about where or how to ask your question.

(1/2) Today we’re starting to test a new way to seamlessly go deeper in AI Mode directly from the Search results page on mobile, globally. This brings us closer to our vision for Search: just ask whatever’s on your mind – no matter how long or complex – and find exactly what you need. You shouldn’t have to think about where or how to ask your question.

Robby Stein

216,830 次观看 • 8 个月前