Загрузка видео...

Не удалось загрузить видео

На главную

🔥XSSTRON - Chromium-based browser for XSS search The browser will automatically check for Reflected, Stored and DOM XSS vulnerabilities in the background. Also supports POST requests. When a vulnerability is found, it will display it in a new window along with an exploitation example. Link to GitHub - 👀Check...

TodayCyberNews's profile picture

Today Cyber News

15,279 subscribers

34,242 просмотров • 3 лет назад •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 3

Фото профиля PhantomOwl
PhantomOwl3 лет назад

@readwise save

Фото профиля Dhawal Suthar
Dhawal Suthar3 лет назад

@SaveToNotion #Threads

Фото профиля Oluwakomiyo
Oluwakomiyo2 лет назад

i downloaded the program but i dont know how to install do i need to install npm first?

Похожие видео

two XSS vulnerabilities. individually, each was practically useless. together, they stole your session, hijacked your OAuth token, and silently turned on your webcam. here's the chain. Zoom's web client allowed XSS in two places, and both were in self-XSS situations where you could only inject into your own context. programs usually ignore these as "No Impact." but Zoom uses OAuth for authentication. the OAuth authorization code gets passed via URL after login. if you can intercept that redirect, you get the code, you get the token, you get the account. the trick: "OAuth dirty dancing." when a victim clicks a link, the XSS on domain A sends a message to domain B using postMessage. domain B uses the XSS there to initiate an OAuth flow. the authorization code in the redirect gets sent back to the attacker. the attacker now has a valid auth code. they exchange it. full session. Bonus: Zoom's web client requests browser permissions (camera, microphone) once and remembers them. after account takeover, the attacker can silently activate those permissions in a tab the victim can't see. also: they found that the WAF could be tricked into flagging the victim as malicious by sending crafted requests that made the WAF think the victim's browser was the attacker. the victim gets blocked. denial of service via WAF frame-up. two "useless" XSS bugs. one $15,000 bounty. three attack chains. Blog:
1:21

two XSS vulnerabilities. individually, each was practically useless. together, they stole your session, hijacked your OAuth token, and silently turned on your webcam. here's the chain. Zoom's web client allowed XSS in two places, and both were in self-XSS situations where you could only inject into your own context. programs usually ignore these as "No Impact." but Zoom uses OAuth for authentication. the OAuth authorization code gets passed via URL after login. if you can intercept that redirect, you get the code, you get the token, you get the account. the trick: "OAuth dirty dancing." when a victim clicks a link, the XSS on domain A sends a message to domain B using postMessage. domain B uses the XSS there to initiate an OAuth flow. the authorization code in the redirect gets sent back to the attacker. the attacker now has a valid auth code. they exchange it. full session. Bonus: Zoom's web client requests browser permissions (camera, microphone) once and remembers them. after account takeover, the attacker can silently activate those permissions in a tab the victim can't see. also: they found that the WAF could be tricked into flagging the victim as malicious by sending crafted requests that made the WAF think the victim's browser was the attacker. the victim gets blocked. denial of service via WAF frame-up. two "useless" XSS bugs. one $15,000 bounty. three attack chains. Blog:

Het Mehta

15,047 просмотров • 3 месяцев назад

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.
4:07

I said I'm going to publish a technical article on how to test newsletter subscription functionality for BAC/XSS, I'll just drop it here instead; before we jump into testing these "newsletter subscription" features, we need to find them; here's a dork I use to find them [ site: ("subscribe"|"newsletter"|"unsubscribe") ]... most hackers don't look into these features, so this is a good opportunity; you can find vulnerabilities like XSS, IDOR/BAC, and even SQLi. In some cases the form only asks for your email, no name, country, etc. That doesn't stop you from testing XSS, but it can make IDOR testing harder to spot... if the email you enter is reflected back on the page, that's a great vector to test for XSS.

Gospel

12,881 просмотров • 11 месяцев назад

The news doesn’t stop there – GitHub Copilot is also gaining a new sense: Sight 👀👀👀 With vision for GitHub Copilot, you can use images, like a napkin sketch or a Figma wireframe, to give Copilot instructions and inspiration. Check it out:
0:53

The news doesn’t stop there – GitHub Copilot is also gaining a new sense: Sight 👀👀👀 With vision for GitHub Copilot, you can use images, like a napkin sketch or a Figma wireframe, to give Copilot instructions and inspiration. Check it out:

Thomas Dohmke

107,269 просмотров • 1 год назад

I found an AI browser that is actually awesome FlowithOS is a web browser COMPLETELY powered by AI You give it tasks, the agents work for you in the background It's like an army of AI agents working for you 24/7 Here's a guide on how it works and how you can get started today
12:09

I found an AI browser that is actually awesome FlowithOS is a web browser COMPLETELY powered by AI You give it tasks, the agents work for you in the background It's like an army of AI agents working for you 24/7 Here's a guide on how it works and how you can get started today

Alex Finn

25,490 просмотров • 10 месяцев назад

A couple months back, the team and I were debating what was our most commonly used piece of software. We landed on Chromium. So we wanted to see if we could find live vulnerabilities in it with our AI. Today, I'm excited to share that not only did our AI find a live vulnerability in Chromium – which powers Google Chrome, Brave, Microsoft Edge, and other browsers – but we also found live bugs in Safari and Firefox. You can also find Octane Security in Chrome's latest stable release: Check out the video for the details...
0:39

A couple months back, the team and I were debating what was our most commonly used piece of software. We landed on Chromium. So we wanted to see if we could find live vulnerabilities in it with our AI. Today, I'm excited to share that not only did our AI find a live vulnerability in Chromium – which powers Google Chrome, Brave, Microsoft Edge, and other browsers – but we also found live bugs in Safari and Firefox. You can also find Octane Security in Chrome's latest stable release: Check out the video for the details...

Gio

11,748 просмотров • 6 месяцев назад

Cursor now has a built-in web browser. You can say "start my app" and it will run the dev server in a terminal and then navigate the browser to localhost:3000. It can take screenshots of the page for iterating on design, and you can send DOM elements to the agent with prompts!
0:24

Cursor now has a built-in web browser. You can say "start my app" and it will run the dev server in a terminal and then navigate the browser to localhost:3000. It can take screenshots of the page for iterating on design, and you can send DOM elements to the agent with prompts!

Lee Robinson

216,307 просмотров • 11 месяцев назад

I made a remote control for your OpenClaw's browser. If your claw gets logged out of a site, it will give you a link to click. The page you open will be a 1:1 remote control version of its browser tab. Log back in, and let it continue.
0:59

I made a remote control for your OpenClaw's browser. If your claw gets logged out of a site, it will give you a link to click. The page you open will be a 1:1 remote control version of its browser tab. Log back in, and let it continue.

David Guttman

23,007 просмотров • 6 месяцев назад

OpenClaw is all the rage and skills are a huge reason why. We've revamped ours to make it easier for Claude to go from local to prod. Check out how you can use Claude, Skills, and GitHub Actions to automatically self-heal browser automation scripts.
0:49

OpenClaw is all the rage and skills are a huge reason why. We've revamped ours to make it easier for Claude to go from local to prod. Check out how you can use Claude, Skills, and GitHub Actions to automatically self-heal browser automation scripts.

Browserbase

27,978 просмотров • 8 месяцев назад

I've been having a ton of fun exploring the Realtime API from OpenAI. Today they just launched the ability to connect to it over WebRTC! 🤖🖐️ It supports Tool Calling, so check out what that looks like in Realtime function calling in any browser based app. I built a template that allows for relaying through a Cloudflare Developers Worker so you can do it too! Full 📼 in 🧵
1:00

I've been having a ton of fun exploring the Realtime API from OpenAI. Today they just launched the ability to connect to it over WebRTC! 🤖🖐️ It supports Tool Calling, so check out what that looks like in Realtime function calling in any browser based app. I built a template that allows for relaying through a Cloudflare Developers Worker so you can do it too! Full 📼 in 🧵

Craig Dennis

60,156 просмотров • 1 год назад

A link is the atomic unit of the web, but there's no simple, cross-browser way to share a bunch of links. Today we're making that possible from Arc 🔗💌 For Arc members, and non Arc members! 🧵 Here's how it came together, including building a browser in a browser…
0:25

A link is the atomic unit of the web, but there's no simple, cross-browser way to share a bunch of links. Today we're making that possible from Arc 🔗💌 For Arc members, and non Arc members! 🧵 Here's how it came together, including building a browser in a browser…

Patrick Moberg

200,738 просмотров • 3 лет назад

Chrome's new `window​.ai` feature is going to change the web forever! 🤯 It allows you to run Gemini Nano, a powerful 3.25B parameter LLM, 100% locally in your browser! We've also added experimental support to 🤗 Transformers.js, making it super easy to use! 😍 Check it out! 👇
0:34

Chrome's new `window​.ai` feature is going to change the web forever! 🤯 It allows you to run Gemini Nano, a powerful 3.25B parameter LLM, 100% locally in your browser! We've also added experimental support to 🤗 Transformers.js, making it super easy to use! 😍 Check it out! 👇

Xenova

581,782 просмотров • 2 лет назад

For 40 years the file browser hasn’t changed. Today, we’re launching with $8 million in seed funding to rebuild the file browser into something more intelligent, searchable, and delightful. The world is in the middle of a data explosion. We’re generating and using more files than ever, but the apps we’re using to manage our files don’t even understand them. It’s time for file browsers to become useful. When you search for “dog”, it should show you content with dogs in it, not just files with “dog” in the name! When you want to edit, convert, summarize, or organize a file, your browser should do that, too. Your files tell the story of your life, but when you need a specific one, you usually can’t even find it anymore. Why can’t your file browser find it for you, or cross-reference it when you have a question? Prompting can give an LLM a million tokens of context. With Poly, you can give it the next trillion. As long as we can afford it, all new users receive 100GB of free cloud storage. We can’t wait for you to try it out!
1:25

For 40 years the file browser hasn’t changed. Today, we’re launching with $8 million in seed funding to rebuild the file browser into something more intelligent, searchable, and delightful. The world is in the middle of a data explosion. We’re generating and using more files than ever, but the apps we’re using to manage our files don’t even understand them. It’s time for file browsers to become useful. When you search for “dog”, it should show you content with dogs in it, not just files with “dog” in the name! When you want to edit, convert, summarize, or organize a file, your browser should do that, too. Your files tell the story of your life, but when you need a specific one, you usually can’t even find it anymore. Why can’t your file browser find it for you, or cross-reference it when you have a question? Prompting can give an LLM a million tokens of context. With Poly, you can give it the next trillion. As long as we can afford it, all new users receive 100GB of free cloud storage. We can’t wait for you to try it out!

Abhay Agarwal

1,778,373 просмотров • 11 месяцев назад

Solana is going mainstream - it's time to ditch browser extensions, seed phrases, and clunky popups. We are excited to announce a product suite that redefines the wallet experience for new users. Check it out in our keynote below!
10:13

Solana is going mainstream - it's time to ditch browser extensions, seed phrases, and clunky popups. We are excited to announce a product suite that redefines the wallet experience for new users. Check it out in our keynote below!

TipLink (now @Fin)

481,522 просмотров • 2 лет назад

🌟 EXCITING NEWS ☝️ Stardom World has received a FRESH design! It also includes new the capability to search wrestlers by name in English. ⏩ More updates to come (hopefully soon) Check it out today, signup is still about $6 a month:
1:07

🌟 EXCITING NEWS ☝️ Stardom World has received a FRESH design! It also includes new the capability to search wrestlers by name in English. ⏩ More updates to come (hopefully soon) Check it out today, signup is still about $6 a month:

Thom Fain トム ∙フェイン

26,895 просмотров • 1 год назад

How to use Hot Wallet extension on a mobile phone? Hey everyone, today's video tutorial is about how to use HOT Protocol 🔥 on iOS Mises Browser. If this video tutorial is helpful for you, please also RT it to help others! If it doesn't answer your question, please contact for support! If Mises Browser is something you've never heard of, please take one minute to read this: Mises Browser is the world's first mobile Web3 browser that supports Chrome extensions on both Android and iOS. More than 5 million users choose Mises Browser to access Web3 applications on mobile. You can also try the 1st iOS browser which supports Chrome extension via this link: and you won't regret it! #Mises #Web3 #iPhone #Extension #Hotprotocol #wallet
2:59

How to use Hot Wallet extension on a mobile phone? Hey everyone, today's video tutorial is about how to use HOT Protocol 🔥 on iOS Mises Browser. If this video tutorial is helpful for you, please also RT it to help others! If it doesn't answer your question, please contact for support! If Mises Browser is something you've never heard of, please take one minute to read this: Mises Browser is the world's first mobile Web3 browser that supports Chrome extensions on both Android and iOS. More than 5 million users choose Mises Browser to access Web3 applications on mobile. You can also try the 1st iOS browser which supports Chrome extension via this link: and you won't regret it! #Mises #Web3 #iPhone #Extension #Hotprotocol #wallet

Mises

13,850 просмотров • 1 год назад

i kept complaining to my grok bot about my browser... so it went off and built me one. Ziwen and i took it from there. now Serein is live. an AGENTIC HARNESS for your browser >chat with claude code or codex right inside it >let them control your tabs and do the work >use the tools already on your mac i>t's free. your browser is their workspace now. links in the comments check it out👇
1:00

i kept complaining to my grok bot about my browser... so it went off and built me one. Ziwen and i took it from there. now Serein is live. an AGENTIC HARNESS for your browser >chat with claude code or codex right inside it >let them control your tabs and do the work >use the tools already on your mac i>t's free. your browser is their workspace now. links in the comments check it out👇

Avid

17,060 просмотров • 9 дней назад