Все публикации

0:25:19

Decoding Spotify Barcodes - Defcon 32 Coin Challenge Solution [2024]

0:30:31

XSS via CSPT and Open Redirect - Solution to August '24 Challenge (Defcon)

0:02:57

Intigriti Kick off 2024

0:12:58

Exploiting Insecure Output Handling in LLMs

0:11:32

Indirect Prompt Injection

0:05:41

Exploiting Vulnerabilities in LLM APIs

0:09:28

Exploiting LLM APIs with Excessive Agency

0:10:36

Performing CSRF Exploits Over GraphQL

0:04:53

Misconfig Mapper - Hacker Tools

0:07:12

Bypassing GraphQL Brute Force Protections

0:07:51

Finding a Hidden GraphQL Endpoint

0:06:47

Accessing Private GraphQL Posts

0:11:51

Prototype Poisoning and Unicode Case Mapping Collision - Solution to March '24 Challenge

0:18:50

Introduction to GraphQL Attacks

0:18:18

Aggressive Scanning in Bug Bounty (and how to avoid it)

0:10:37

Exploiting Server-side Parameter Pollution in a REST URL

0:24:30

Common Scoping Mistakes

0:11:26

Exploiting Server-side Parameter Pollution in a Query String

0:14:11

Understanding Scope, Ethics and Code of Conduct (CoC)

0:07:20

Exploiting a Mass Assignment Vulnerability

0:21:15

Unicode Normalization and Cookie Path Precedence - Solution to February (Valentines) '24 Challenge

0:07:10

Finding and Exploiting an Unused API Endpoint

0:07:34

Exploiting an API Endpoint using Documentation

0:24:22

DOM Clobbering, CSPP (axios) and XSS - Unintended Solutions to January '24 Challenge