Канал: gocha oqradze

GraphQL - OS Command injection

GraphQL - OS Command injection

Self reflect XSS on the portswigger web security academy JWT lab

Self reflect XSS on the portswigger web security academy JWT lab

GraphQL - Chain Introspection with SQLi

GraphQL - Chain Introspection with SQLi

Chain File Upload with XSS

Chain File Upload with XSS

Directory Listing - Active scan

Directory Listing - Active scan

Reflect XSS with Content-Type: text/xml

Reflect XSS with Content-Type: text/xml

Reflect XSS 1

Reflect XSS 1

Dom XSS2

Dom XSS2

Dom XSS1

Dom XSS1

Common Files

Common Files

Login page Brute Force with ffuf

Login page Brute Force with ffuf

JWT Attack - Exploiting X5U Header injection

JWT Attack - Exploiting X5U Header injection

JWT attack - Exploiting JKU Header injection

JWT attack - Exploiting JKU Header injection

JWT Attack - Exploiting X5C Header

JWT Attack - Exploiting X5C Header

JWT Attack - JWK - JSON Web Key injection

JWT Attack - JWK - JSON Web Key injection

JWT Attack - Weak Key - Secret Brute force with Hashcat

JWT Attack - Weak Key - Secret Brute force with Hashcat

JWT Attack - Secret Brute force with Hashcat

JWT Attack - Secret Brute force with Hashcat

JWT Attack - Signature is not checked

JWT Attack - Signature is not checked

Check Time based SQLi

Check Time based SQLi

ჯვრის ტბა

ჯვრის ტბა

XSS from jpg with Amazon S3 Bucket

XSS from jpg with Amazon S3 Bucket

From CRLF to XSS on http://yun.oppo.com

From CRLF to XSS on http://yun.oppo.com

s3 Bucket Takeover by me

s3 Bucket Takeover by me

crlf injection on https://bug.qiwi.com

crlf injection on https://bug.qiwi.com

akamai xss on https://whitelabelaktest.skyscanner.net

akamai xss on https://whitelabelaktest.skyscanner.net

Dom based xss careers.walmart.com

Dom based xss careers.walmart.com

XSS- Bypass Big-IP-ASM waf

XSS- Bypass Big-IP-ASM waf

Check xss Via Header - Jaeles

Check xss Via Header - Jaeles

jaeles plugin for burp suite

jaeles plugin for burp suite

Chirukhi River in Georgia, Adjara

Chirukhi River in Georgia, Adjara

jaeles and XSS signature (How to use jaeles)

jaeles and XSS signature (How to use jaeles)

Power of jaeles by j3ssie. Signature By me @GochaOqradze

Power of jaeles by j3ssie. Signature By me @GochaOqradze

CRLF Injection with Burp Bounty for Burp Suite

CRLF Injection with Burp Bounty for Burp Suite

ffuf + raw request + Burp Suite

ffuf + raw request + Burp Suite

File path traversal ffuf + regex

File path traversal ffuf + regex

ffuf regex

ffuf regex

Brutelogic Strip exercise solving

Brutelogic Strip exercise solving

BruteLogic propXSS

BruteLogic propXSS

RCE with Burp Suite intruder + Regex

RCE with Burp Suite intruder + Regex

Test XSS in Mozilla mobile Browser

Test XSS in Mozilla mobile Browser

Detect file path traversal by Burp Suite intruder + regext

Detect file path traversal by Burp Suite intruder + regext

Easy Reflect XSS Burp Intruder

Easy Reflect XSS Burp Intruder

Tbilisi national park, Sabaduri forest #SpendYourSummerInGeorgia

Tbilisi national park, Sabaduri forest #SpendYourSummerInGeorgia

Batumi, Georgia #spendYourSummerInGeorgia

Batumi, Georgia #spendYourSummerInGeorgia

Narikala Georgia, #SpendyoursummerInGeorgia

Narikala Georgia, #SpendyoursummerInGeorgia

Always fly like a pro

Always fly like a pro

Burp + regex = vuln||error

Burp + regex = vuln||error

ExtractEndpoints

ExtractEndpoints

burpsub

burpsub

Harvest urls from wayback and using with Eyewitness

Harvest urls from wayback and using with Eyewitness

Batumi Black Sea

Batumi Black Sea

Big bird like F-22 Raptor

Big bird like F-22 Raptor

ულამაზესი ჯვრის მონასტერი

ულამაზესი ჯვრის მონასტერი

გასეირნება წყნეთის ტყეში

გასეირნება წყნეთის ტყეში

BatumiWedding

BatumiWedding

Beautiful Wedding Day

Beautiful Wedding Day

gumbati Group

gumbati Group

2017 drone footage - All in one

2017 drone footage - All in one

დრონის კადრები სხვა კუთხით.

დრონის კადრები სხვა კუთხით.

Georgian Monasteries

Georgian Monasteries

Drone Tech Georgia

Drone Tech Georgia

Georgian Dance. Wedding day. Video shot by Dji Phantom 4 pro

Georgian Dance. Wedding day. Video shot by Dji Phantom 4 pro

Hotel Sairme

Hotel Sairme

Batumi is love

Batumi is love

Kazbegi, Georgia. 4K VideoFootage whit drone

Kazbegi, Georgia. 4K VideoFootage whit drone

fbPromo

fbPromo

Dinamo Tbilisi stadium. Bypass NFZ

Dinamo Tbilisi stadium. Bypass NFZ

Aero Photo/Video

Aero Photo/Video

Batumi. Simple Video with drone

Batumi. Simple Video with drone