Канал: InfoSec

Mac Academy - Microsoft Word tutorial, circa 1989

Mac Academy - Microsoft Word tutorial, circa 1989

NeovimKickstart

NeovimKickstart

Web cache poisoning with an unkeyed header

Web cache poisoning with an unkeyed header

OAuth account hijacking via redirect_uri

OAuth account hijacking via redirect_uri

Natural Reader AI Text to Speech

Natural Reader AI Text to Speech

XSS Stored Exploit Demo

XSS Stored Exploit Demo

HTTP 2 request smuggling via CRLF injection

HTTP 2 request smuggling via CRLF injection

VimBeGood Demo

VimBeGood Demo

Lab: H2.CL request smuggling

Lab: H2.CL request smuggling

Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE vuln 2023 EDIT

Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE vuln 2023 EDIT

Editor tech tips from ThePrimeagen. Cut an edited for brevity and more humor.

Editor tech tips from ThePrimeagen. Cut an edited for brevity and more humor.

Web cache poisoning Demo. Edit October 2022 . Port Swigger, Burp Suite.

Web cache poisoning Demo. Edit October 2022 . Port Swigger, Burp Suite.

Authentication bypass via OAuth implicit flow

Authentication bypass via OAuth implicit flow

HTTP Request Smuggling. By pass front-end security

HTTP Request Smuggling. By pass front-end security

Lab: H2.CL request smuggling (includes extra background technical explanation)

Lab: H2.CL request smuggling (includes extra background technical explanation)

Web cache poisoning demonstration

Web cache poisoning demonstration

Buffer Overflow Development

Buffer Overflow Development

HTTP Request Smuggling Exploit Labs (updated Nov 2021)

HTTP Request Smuggling Exploit Labs (updated Nov 2021)

HTTP Request Smuggling Walkthroughs & Methodology

HTTP Request Smuggling Walkthroughs & Methodology

HTTP Request Smuggling in Real Time.. unedited, (kinda).

HTTP Request Smuggling in Real Time.. unedited, (kinda).

Lab: Exploiting HTTP request smuggling to bypass front-end security. See notes in description

Lab: Exploiting HTTP request smuggling to bypass front-end security. See notes in description

Bashrc GREP Shortcut

Bashrc GREP Shortcut

Hack a Domain Controller: Responder.py & multirelayx.py

Hack a Domain Controller: Responder.py & multirelayx.py

How to set up a Windows Domain Controller 2016 for Dunder Mifflin in Virtual Box.

How to set up a Windows Domain Controller 2016 for Dunder Mifflin in Virtual Box.

Using Vim to code in C on Linux - A demonstration for beginners.

Using Vim to code in C on Linux - A demonstration for beginners.

Just Grep. No Cat.

Just Grep. No Cat.

.NET C#

.NET C#

Eternal Blue/ MS17-010. Using the real exploit written in Python.

Eternal Blue/ MS17-010. Using the real exploit written in Python.

Burp Suite. Live Demo.

Burp Suite. Live Demo.

BSides Vancouver VM-Walk-through/demo

BSides Vancouver VM-Walk-through/demo