Back
Explore every episode of the podcast David Bombal
Dive into the complete episode list for David Bombal. Each episode is cataloged with detailed descriptions, making it easy to find and explore specific topics. Keep track of all episodes from your favorite podcast and never miss a moment of insightful content.
| Title | Pub. Date | Duration | |
|---|---|---|---|
| #476: New Cybersecurity Certification? | 14 Aug 2024 | 00:32:53 | |
A huge thanks to OFFSec for sponsoring this video - get your $100 discount using my link (valid until 31 August 2024): https://davidbombal.wiki/oscc
Want to win the free place? (T&C's apply)
Enter here: https://gleam.io/BS3FT/offsec-oscc-gi...
//Jeremy’s Socials//
Website: https://jeremyharbinger.com/
X: https://x.com/JeremyHarbinger
LinkedIn: / jeremy-miller-b6816987
//OffSec’s Socials//
X: https://x.com/offsectraining
Spotify: https://podcasters.spotify.com/pod/sh...
// OffSec’s OSCC link //
OSCC: https://davidbombal.wiki/oscc
// YouTube video Reference //
Dark Side of AI: • The real world truth about AI Hacking
// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
// MENU //
00:00 - Coming Up
00:46 - Sponsored Section
01:08 - Introducing Sec-100
04:11 - The Structure of Sec-100
06:43 - Crowdstrike Failure
08:20 - Style of Sec-100 Exam
11:08 - Finding your Place in Cybersecurity
13:23 - Learning General Skills
14:35 - Can I Start with SEC-100?
15:55 - Breaking Down the Course Material
18:45 - No Prior Cyber Skills Needed
21:24 - Can I Get a Job with SEC-100?
22:38 - The Length and Structure of the Exam
24:16 - Can I Retake the Exam
25:17 - Jobs to get with SEC-100
27:55 - AI in SEC-100
30:24 - Hands-On Learning
31:37 - SEC-100 Price and Giveaways
32:15 - Conclusion
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only.
#kalilinx #hacker #cybersecurity | |||
| #477: How they use Bluetooth to target your car | 12 Aug 2024 | 00:44:05 | |
Big thanks to Brilliant for sponsoring this video! To try everything Brilliant has to offer for free for a full 30 days and 20% discount visit: https://Brilliant.org/DavidBombal
// Occupy The Web Books //
Linux Basics for Hackers:
US: https://amzn.to/3wqukgC
UK: https://amzn.to/43PHFev
Getting Started Becoming a Master Hacker
US: https://amzn.to/4bmGqX2
UK: https://amzn.to/43JG2iA
Network Basics for hackers:
US: https://amzn.to/3yeYVyb
UK: https://amzn.to/4aInbGK
// OTW Discount //
Use the code BOMBAL to get a 20% discount off anything from OTW's website: https://hackers-arise.net/
// Occupy The Web SOCIAL //
X: / three_cube
Website: https://hackers-arise.net/
// YouTube videos REFERENCE //
Flipper Zero: Hottest Hacking Device!: • Flipper Zero: Hottest Hacking Device?
Flipper Zero short: • Flipper Zero vs Android Phones, iPhon...
Android Bluetooth Hacking: • Android Bluetooth Hacking
Hack like Mr Robot // Wifi, Bluetooth and Scada Hacking: • Hack like Mr Robot // WiFi, Bluetooth...
// Playlists REFERENCE //
Linux Basics for Hackers: • Linux for Hackers Tutorial (And Free ...
Mr Robot: • Hack like Mr Robot // WiFi, Bluetooth...
Hackers Arise / Occupy the Web Hacks: • Hacking Tools (with demos) that you n...
// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
// MENU //
00:00 - Intro
00:58 - Brilliant sponsored segment
03:12 - Disclaimer
03:14 - OTW books
03:50 - Theft with Bluetooth // How radio signals are vulnerable
09:56 - Scanning for Bluetooth signals
11:27 - Bluetooth scanning with Kali demo
19:58 - Bluetooth adapters
21:57 - Bluetooth scanning with Kali demo continued
23:25 - Protecting your device // Where stolen phones go
27:40 - Bluetooth scanning with DragonOS demo
31:39 - Illegal to use jammers
33:18 - Bluetooth scanning with DragonOS demo continued
38:43 - Bluetooth scanning summary
39:16 - How thieves locate your device
40:16 - Arising dangers of Bluetooth scanning
42:20 - Special discount on hackers-arise.com // OTW classes
43:27 - Conclusion
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only.
#android #iphone #bluetooth | |||
| #467: Your VPN won't protect you 😱 | 01 May 2024 | 01:53:53 | |
Big thanks to Brilliant for sponsoring this video! Get started with a free 30 day trial and 20% discount: https://Brilliant.org/DavidBombal
The machines are already tracking and watching you. And they're influencing you. The future looks bleak. Do you really want to live in a Skynet world?
I interview Rob Braxman - the Internet Privacy Guy. He's a public interest hacker and technologist. He uses his extensive knowledge of cybersecurity and tech to serve the public good. He cares about privacy. He warns you of digital manipulation, disinformation, mass surveillance.
// Rob Braxman’s SOCIAL//
YouTube:
/ @robbraxmantech
Website: https://brax.me/home/rob
GitHub: https://github.com/robbraxman
X: https://x.com/robbraxmantech
// Specific Video REFERENCE //
Is Skynet already watching you?:
• Is Skynet watching you already?
Neuralink a Weapon?:
• What is Neuralink Really For?
AI will deliver Utopia they say! Will it be an amazing world!? (Tongue in Cheek):
• AI Will Deliver UTOPIA They Say! Will...
Signet 2024: Infrastructure is Complete!:
• Skynet 2024: The Infrastructure is Co...
// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
Disclaimer: This video is for educational purposes only.
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#privacy #anonymous #hack | |||
| #377: Hacking CCTV And IP Cameras Are You Safe? | 11 May 2022 | 00:53:11 | |
Is your CCTV secured? Are your IP cameras safe? Too easy to hack?
This is my third interview with the professional hacker Occupy The Web. In this video, we discuss hacking CCTV, IP cameras and SCADA (supervisory control and data acquisition).
// MENU //
00:00 ▶️ It Didn't Stop Us!
00:43 ▶️ YouTube Is Not Realistic
02:58 ▶️ Hacking Is Boring?
04:12 ▶️ In An Alternative Universe
04:35 ▶️ High vs Low Value Targets
07:09 ▶️ Hacking Ukraine CCTV Cameras
08:04 ▶️ Why Aren't Cameras Well Protected?
10:48 ▶️ Why Hack Ukraine CCTV Cameras?
12:45 ▶️ Finding Online Systems Anywhere In The World
14:47 ▶️ Don't Cameras Have Passwords?
17:36 ▶️ Hack My Spouse//The Most Common Request
19:30 ▶️ Convert Tools To Cyrillic?
20:20 ▶️ Remote Camera Hacking
20:56 ▶️ Camera Hacking Summary
21:13 ▶️ Dictionary Attack or Brute Force for Remote Hacking?
22:32 ▶️ Remote Hacking Takes Teamwork
22:52 ▶️ Cameras Blocking Login Attempts
23:23 ▶️ Bad Practices//How To Secure CCTV Cameras
24:42 ▶️ Don't Be An Easy Target!
25:43 ▶️ Basic Security To Have On Your Systems
28:42 ▶️ Users Aren't The Flaw!
30:07 ▶️ Russia SCADA Attacks
30:38 ▶️ SCADA Swiss Army Knife
31:21 ▶️ Stealing Schneider Password Hashes
33:40 ▶️ DDoSing SCADA Systems Is Deadly
36:53 ▶️ Russian Hackers//Overrated?
40:22 ▶️ SCADA Malware Used On Ukraine Systems
42:54 ▶️ Warning//Russia Coming After Hackers
44:16 ▶️ Phishing Attempts on OTW
45:07 ▶️ How To Protect Yourself
46:00 ▶️ Social Engineering//Most Major Hacks
47:46 ▶️ Social Engineering//Pentesting
49:11 ▶️ SCADA Malware//Stuxnet
50:56 ▶️ SCADA Malware//Triton
51:25 ▶️ Bhopal Disaster//What Could Happen
52:39 ▶️ Future Videos//Leave A Comment!
// Previous videos //
OTW video 1: https://youtu.be/GudY7XYouRk
OTW video 2: https://youtu.be/uXbGQiXsRes
// David's SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Occupy The Web social //
Twitter: https://twitter.com/three_cube
// Occupy The Web books //
Linux Basics for Hackers: https://amzn.to/3JlAQXe
Getting Started Becoming a Master Hacker: https://amzn.to/3qCQbvh
// Occupy The Web Website / Hackers Arise Website //
Website: https://www.hackers-arise.com/
Shodan: https://www.hackers-arise.com/shodan
Webcams: https://www.hackers-arise.com/how-to-...
Ukraine Cameras: https://www.hackers-arise.com/post/we...
SCADA Hacking: The Key Differences between Security of SCADA and Traditional IT systems
https://davidbombal.wiki/scada1
SCADA Hacking: Finding SCADA Systems using Shodan
https://davidbombal.wiki/scada2
Shodan: Using Shodan to Find Vulnerable Russian SCADA/ICS Sites
https://davidbombal.wiki/shodan
SCADA Hacking: The Most Important SCADA/ICS Attacks in History
https://www.hackers-arise.com/post/sc...
SCADA Hacking: SCADA/ICS Protocols (Profinet/Profibus)
https://www.hackers-arise.com/post/20...
Lots of Scada content:
https://www.hackers-arise.com/scada-h...
// In the News //
Feds Uncover a ‘Swiss Army Knife’ for Hacking Industrial Control Systems: https://www.wired.com/story/pipedream...
Ukrainian power grid 'lucky' to withstand Russian cyber-attack:
https://www.bbc.co.uk/news/technology...
An Unprecedented Look at Stuxnet, the World's First Digital Weapon
https://www.wired.com/2014/11/countdo...
// Other books //
The Linux Command Line: https://amzn.to/3ihGP3j
How Linux Works: https://amzn.to/3qeCHoY
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! | |||
| #376: VPN slow? Network nightmares? How TCP really works: MTU vs MSS | 11 May 2022 | 01:07:01 | |
Wireshark TCP Deep Dive continues: You need to understand this - whats the difference between Maximum Transmission Unit (MTU) vs Maximum Segment Size (MSS).
// MENU //
00:00 ▶️ Coming Up
00:25 ▶️ Intro
00:32 ▶️ Chris introduction
00:47 ▶️ Topic: Maximum Segment Size (MSS)
01:27 ▶️ Explaining Maximum Transmission Unit (MTU)
08:42 ▶️ Interface layout
10:25 ▶️ David Bombal "War Story"
12:00 ▶️ Wireshark demo
13:26 ▶️ Increasing the MTU on your device for larger connections
16:27 ▶️ Difference between MTU and MSS
19:36 ▶️ Wireshark demo (cont'd)
24:58 ▶️ Using Path MTU Discovery
27:02 ▶️ Ping and Wireshark demo
33:32 ▶️ Cool trick for Mac system
35:08 ▶️ TCP/MSS Clamping
38:21 ▶️ Chris Greer "War Story"
51:09 ▶️ What happens if you can't capture a server
55:08 ▶️ MSS Adjustment commands
56:55 ▶️ Tunnel Path MTU Discovery
57:40 ▶️ Figuring out 1432
01:02:52 ▶️ Conclusion
01:04:48 ▶️ "Cool features" in Wireshark
Previous video: https://youtu.be/rmFX1V49K8U
// Wireshark PCAP files //
MTU PCAP: https://github.com/packetpioneer/yout...
War Story PCAP Client: https://github.com/packetpioneer/yout...
War Story PCAP Server: https://github.com/packetpioneer/yout...
Special “Thumbs Up” and “Subscribe” PCAP: https://github.com/packetpioneer/yout...
// VLAD SOCIAL //
Twitter: https://twitter.com/Packet_vlad
PMTUD Blog: http://www.packettrain.net/2016/09/21...
Thanks Vladimir Gerasimov!
// GOOD READING //
Network Implications of PMTUD: https://www.ipspace.net/kb/Internet/P...
Path MTU Discovery: https://www.ipspace.net/kb/Internet/P...
Resolve IPv4 Fragmentation, MTU, MSS, and PMTUD Issues with GRE and IPsec: https://www.cisco.com/c/en/us/support...
Configuring TCP MSS Adjustment: https://www.cisco.com/c/en/us/td/docs...
Ethernet MTU and TCP MSS Adjustment Concept for PPPoE Connections: https://www.cisco.com/c/en/us/support...
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// David SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Chris SOCIAL //
Udemy course: https://davidbombal.wiki/chriswireshark
LinkedIn: https://www.linkedin.com/in/cgreer/
YouTube: https://www.youtube.com/c/ChrisGreer
Twitter: https://twitter.com/packetpioneer
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
tcp
mss
mtu
tcp/ip
tcp ip
ipv4
wireshark
icmp
slow icmp
dropped packets
wireshark tutorial
wireshark training
packet analysis
packet capture
tcp handshake
tcp analysis
tcp connections
chris greer
wireshark chris greer
chris greer wireshark
wireshark chris
transport control protocol
how tcp works
tcp/ip
transport
protocol
packet
network mtu
maximum transmission unit
tcp mss
maximum segment size
free wireshark tutorial
network troubleshooting
tcp/ip analysis
wireshark mtu
wireshark mss
ipsec
gre
mpls
tunnels
troubleshoot slow network
troubleshooting slow networks
troubleshoot slow internet
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#wireshark #tcp #mtu | |||
| #375: Hacking APIs and Cars: You need to learn this in 2022! | 05 May 2022 | 01:07:48 | |
You need to learn how to hack APIs in 2022. This is the future battlefront! Ignore this at your own peril.
// MENU //
00:00 ▶️ Coming up
00:44 ▶️ Intro
00:53 ▶️ Alissa Knight introduction and background
02:36 ▶️ Published author and filmmaker
03:30 ▶️ Alissa Knight YouTube channel
05:02 ▶️ Book on API hacking
06:05 ▶️ The definition of hacking
10:25 ▶️ How to approach hacking
14:10 ▶️ The importance of learning
16:07 ▶️ How to start hacking APIs
22:54 ▶️ "The Desire"
25:35 ▶️ Recommended certifications
28:35 ▶️ Understanding Networking fundamentals
30:04 ▶️ Do you have to be a programmer to hack?
33:09 ▶️ Mastering tools
34:33 ▶️ Hacking APIs
38:43 ▶️ Shift left security, shield right
40:15 ▶️ Bank app developed by marketing team
42:51 ▶️ Smart phone takeover
45:10 ▶️ How to learn to hack APIs
48:11 ▶️ Process on how to hack APIs
55:05 ▶️ Implementing authorization and authentication
56:43 ▶️ APIs in nuclear plant systems
58:52 ▶️ Wifi pineapple
01:01:23 ▶️ Securing APIs in cars
01:03:18 ▶️ "Exciting times"
01:05:45 ▶️ Conclusion
Nahamsec Interview: https://youtu.be/Y2Y4Sk0PswU
// David's SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Alissa's SOCIAL //
Twitter: https://twitter.com/alissaknight
YouTube: https://www.youtube.com/alissaknight
Instagram: https://www.instagram.com/alissaknight/
LinkedIn: https://www.linkedin.com/in/alissakni...
Website: https://www.alissaknight.com/
Hacking Bank APIs: https://davidbombal.wiki/hackingbankapis
// Katie Paxton-Fear //
YouTube: https://www.youtube.com/c/InsiderPhD
Twitter: https://twitter.com/insiderphd
// David Sopas //
Twitter: https://twitter.com/dsopas
Github API mindmap: https://github.com/dsopas/MindAPI
// Hyperfocus daily task sheet //
Alissa Knight's Daily Task Sheet: https://davidbombal.wiki/dailytasks
// BOOKS //
Hacking Connected Cars - Alissa Knight: https://amzn.to/3Ke00GO
Hyper Focus - Chris Bailey: https://amzn.to/3vAocxO
Self Journal by BestSelf: https://amzn.to/3ks1BhK
Hacking APIs - Corey Ball: https://amzn.to/37PUwoI
The Official (ISC)2 CISSP CBK Reference: https://amzn.to/3vxzjJ2
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
api
apis
postman
burpsuite
hacking
hacking cars
hacking connected cars
hacking api
cyber security
information security
sans institute
cybersecurity training
cyber security training
information security training
cyber
hack
privacy
nsa
oscp
ceh
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#hacking #infosec #cyber | |||
| #374: Website Hacking Demos using Cross-Site Scripting (XSS) - it's just too easy! | 02 May 2022 | 00:34:51 | |
It's just too easy to attack websites using Cross Site Scripting (XSS). The XSS Rat demonstrates XSS attacks. XSS Rat explains and demos cross-site scripting (xss) attacks.
// MENU //
00:00 ▶️ We are taking over the world!
00:16 ▶️ Introducing//XSS Rat//Wesley
01:28 ▶️ What is XSS/ Cross Site Scripting?
02:59 ▶️ Types of XSS
05:15 ▶️ Reflected XSS
06:22 ▶️ Example of data sanitization
07:35 ▶️ Circumventing filtering with the img tag
11:01 ▶️ Sending a Reflected XSS Attack to Someone
12:01 ▶️ Using HTML comments as an attack vector
13:49 ▶️ Using single quotes to break out of the input tag
15:14 ▶️ Don't use alert() to test for XSS
17:33 ▶️ What you can do with Reflected XSS
19:26 ▶️ Stored XSS
20:31 ▶️ Using comments for XSS
21:05 ▶️ Example #1 of Stored XSS on Twitter
21:42 ▶️ Example #2 of Stored XSS
22:12 -▶️ The answer to the ultimate question of life, the universe, and everything.
22:56 ▶️ Stored vs Reflected XSS
24:22 ▶️ AngularJS/Client Side Template Injection
25:06 ▶️ Don't use JavaScript?
26:09 ▶️ Where to learn more//XSS Survival Guide
27:04 ▶️ DOM Based XSS
29:36 ▶️ List of DOM sinks
30:12 ▶️ jQuery DOM sinks
32:15 ▶️ XSS Rat Live Training
33:00 ▶️ Support XSS Rat//Wesley
34:06 ▶️ Closing//Thanks, Wesley!
// Demo Sites //
XSS Labs: https://hackxpert.com/labs/RXSS/GET/
Labs site: https://hackxpert.com/labs
Rat Site: https://hackxpert.com/ratsite
// David's SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// XSS Rat SOCIAL //
Twitter: https://twitter.com/theXSSrat
YouTube: youtube.com/c/TheXSSrat
Website: https://thexssrat.podia.com/
// XSS Rat's Udemy course //
XSS Survival Guide: https://www.udemy.com/course/xss-surv...
// XSS Rat's courses and bootcamps //
https://thexssrat.podia.com/
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
xss
cross site scripting
portswigger
ajax
jscript
javascript
xss attack
xss video tutorial
xss attack tutorial
xss explained
xss attack example
xss bug bounty
xss tutorial
xss vulnerability
xss vs csrf attack
xss example
xsser
xsssa facebook
xsssa
kali linux
penetration testing
ethical hacking
bug bounty
cross site scripting
cross-site scripting
red teaming
cyber security
kali linux install
kali linux 2022
ethical hacker course
ethical hacker
javascript
ajax
jquery
node js
node js hacking
portswigger
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#xss #javascript #hacking | |||
| #373: OSINT: You can't hide // Your privacy is dead // Best resources to get started | 25 Apr 2022 | 01:13:14 | |
You cannot hide. Your privacy is over. Want to learn OSINT? Want to learn how easy it is to find information online? Time to learn Open Source Intelligence from the best.
I think I'll move to a cave :(
OSINT Curious is a registered, non-profit 501(c)(3) organization with the United States IRS (EIN: 84-2781099); and accepts Patreon donations from individuals and sponsors. If you are a sponsor, please contact them if you want to work with them: https://osintcurio.us/funding/
// The OSINT Curious Project //
YouTube: https://www.youtube.com/c/TheOSINTCur...
Twitter: https://twitter.com/osintcurious
LinkedIn: https://www.linkedin.com/company/the-...
Website: https://osintcurio.us
Public, OSINT-focused Discord: https://iam.osintcurio.us/discord
Sponsor personally or through your company: https://osintcurio.us/funding/
// Websites mentioned //
OSINT games: https://www.osint.games/
OSINT Framework: osintframework.de
OSINT Training: myosint.training
Fitness app Strava lights up staff at military bases:
https://www.bbc.co.uk/news/technology...
https://www.theguardian.com/world/201...
// David's SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Lisette SOCIAL //
Twitter: https://twitter.com/technisette
Personal website: https://technisette.com
// Steven Harris SOCIAL //
Twitter: https://twitter.com/nixintel
LinkedIn: https://www.linkedin.com/in/steven-ha...
Personal website: https://nixintel.info/
SANS SEC487 OSINT Courses Steven teaches - https://www.sans.org/profiles/steven-...
// Micah Hoffman SOCIAL //
Twitter: https://twitter.com/webbreacher
LinkedIn: https://www.linkedin.com/in/micahhoff...
Personal website: https://webbreacher.com
Micah's OSINT Training Courses: https://myosint.training
Micah's OSINT CTF Platform: https://osint.games
// BOOKS MENTIONED //
1. Hack The World With OSINT – Chris Kubeka: https://amzn.to/3xM61I1
2. Open Source Intelligence Techniques (Ninth Ed) - Michal Bazzel: https://amzn.to/3Lb7MSX
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
osint
osint curious
google dorks
dorks
google
osintgram
osint framework
osint tools
osint tv
osint ukraine
osint tutorial
osint course
osint instagram
osint framework tutorial
cyber security
information security
open-source intelligence
open source intelligence
sans institute
cybersecurity training
cyber security training
information security training
what is osint
open source artificial intelligence
cyber
hack
privacy
nsa
oscp
ceh
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#osint #cyber #privacy | |||
| #372: Hacking networks with Python // Creating malicious packets and breaking TCP/IP rules | 25 Apr 2022 | 00:17:51 | |
Learn the basics of how to use Python and Scapy to create malicious or dodgy packets and send those into networks. Who knows what's going to happen when packets are created like these. Also learn that what they teach you about the TCP/IP model in the CCNA course isn't necessarily true in the real world.
You need to learn to code! Learn Python. Learn Networking. You are going to be very powerful and very scary if you combine knowledge of networking with Python scripting! But, do good.
Learn to code. Learn Linux. Learn Networking.
// Menu //
00:00 - Coming up
00:28 - Introduction
01:00 - How to generate dodgy packets with Scapy
01:14 - TCP/IP model
01:25 - Protocol data units
01:46 - OSI model video
02:12 - Importing Scapy into Python
04:25 - Spoof mac address
06:18 - Sending traffic into the network
08:52 - Sending weird packets
11:43 - "Advanced stuff"
15:11 - In the real world
17:17 - Conclusion
The OSI Model is a lie: https://youtu.be/apr63p7K_3A
Scapy documentation: https://scapy.net/
Playlist: https://davidbombal.wiki/scapy
// SCAPY RESOURCES //
Website: https://scapy.net/
Documentation: https://scapy.readthedocs.io/en/latest/
// SCAPY INSTALLATION //
sudo apt update
sudo apt install python3-pip
sudo pip3 install scapy
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
python
scapy
kali linux
kali
kali linux python
osi model
tcp
tcp ip
tcp/ip
tcp ip model
python scapy
ccna
ccnp
ccie
cisco routers
ccna 200-301
python scripts
linux
kali
kali linux 2022
kali linux 2021
oscp
ceh
security+
pentest+
Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites.
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#python #hacking #cyber | |||
| #371: Hacking Power Plants and Industrial Control Systems (Scada) // Ukraine Russia Cyberwar | 19 Apr 2022 | 01:06:09 | |
This is my second interview with the professional hacker Occupy The Web. In this video we discuss OSINT and hacking industrial control systems (ICS) using SCADA (supervisory control and data acquisition).
Jump to 33:40 for scada discussions.
Disclaimer: The opinions expressed by Occupy The Web in this interview are his own.
// Previous video //
OTW video 1: https://youtu.be/GudY7XYouRk
// David's SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Occupy The Web social //
Twitter: https://twitter.com/three_cube
// Occupy The Web books //
Linux Basics for Hackers: https://amzn.to/3JlAQXe
Getting Started Becoming a Master Hacker: https://amzn.to/3qCQbvh
// Occupy The Web Website / Hackers Arise Website //
Website: https://www.hackers-arise.com/
Using OSINT to find Yachts: https://davidbombal.wiki/osintyachts
Can the CIA or other Intelligence Agencies Track My Every Move: https://davidbombal.wiki/ciaphonestra...
SCADA Hacking: The Key Differences between Security of SCADA and Traditional IT systems
https://davidbombal.wiki/scada1
SCADA Hacking: Finding SCADA Systems using Shodan
https://davidbombal.wiki/scada2
Shodan: Using Shodan to Find Vulnerable Russian SCADA/ICS Sites
https://davidbombal.wiki/shodan
SCADA Hacking: The Most Important SCADA/ICS Attacks in History
https://www.hackers-arise.com/post/sc...
SCADA Hacking: SCADA/ICS Protocols (Profinet/Profibus)
https://www.hackers-arise.com/post/20...
Lots of Scada content:
https://www.hackers-arise.com/scada-h...
// In the News //
Feds Uncover a ‘Swiss Army Knife’ for Hacking Industrial Control Systems: https://www.wired.com/story/pipedream...
Ukrainian power grid 'lucky' to withstand Russian cyber-attack:
https://www.bbc.co.uk/news/technology...
An Unprecedented Look at Stuxnet, the World's First Digital Weapon
https://www.wired.com/2014/11/countdo...
// Other books //
The Linux Command Line: https://amzn.to/3ihGP3j
How Linux Works: https://amzn.to/3qeCHoY
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! | |||
| #370: I do read your comments. Interview: Another POV Russia Ukraine | 19 Apr 2022 | 00:27:03 | |
I interview a Russian about the effects of the anonymous hacks on Russian life. This interview is a response to the Occupy The Web interview posted on my channel. What do you think?
Disclaimer: The opinions expressed by Timur in this interview are his own.
// MENU //
00:00 ▶️ Coming up
00:40 ▶️ Introduction
02:38 ▶️ What's actually happening in Russia?
05:16 ▶️ Websites that are taken down
06:58 ▶️ Doing more harm than good?
08:30 ▶️ Blocked media platforms
12:01 ▶️ The struggles
16:02 ▶️ Hackerone
18:58 ▶️ IT hysteria
21:23 ▶️ One of the lucky ones
22:20 ▶️ Message to the world
24:12 ▶️ Important message
26:18 ▶️ Conclusion
Occupy the Web interview: https://youtu.be/GudY7XYouRk
Hacker X arrested in Mexico: https://youtu.be/bHBBtsG8qak
// David's SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Timur social //
Hackerone: http://hackerone.com/irisrumtub
Twitter: https://twitter.com/irisrumtub
// Occupy The Web books //
Linux Basics for Hackers: https://amzn.to/3JlAQXe
Getting Started Becoming a Master Hacker: https://amzn.to/3qCQbvh
// MY STUFF //
https://www.amazon.com/shop/davidbombal
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
ukraine
russa
occupytheweb
occupy the web
hackers arise
hackersarise
proxy
proxy chains
ddos
ukraine war
cybersecurity
ukraine cyber attack
russia ukraine news
russia vs ukraine
cyberwar
russian invasion
russia ukraine crisis
ukraine crisis
cyber security
cyberwarfare
putin
cyber attack
cyber war
russia cyberwar
russia cyber attack
cyberwar against russia
cyber security news
ukraine war
ukraine cyber attack today
russians
cybernews
ukraine 2022
ukraine news
russia ukraine conflict
anonymous
#ukraine #russia #cyberwar | |||
| #369: Computer Science isn't programming! // How to become a Master Programmer // Featuring Dr Chuck | 19 Apr 2022 | 01:18:53 | |
Is computer science the path to become a master programmer? Dr Chuck says there is a better way - and you can get it for free! He also shares his vision on how to become a master programmer - this also includes mentorship.
FREE course links below :)
// MENU //
00:00 ▶️ Introduction
01:30 ▶️ Cisco Certs as the Standard and Why Programming Doesn't Have an Equivalent
04:33 ▶️ Computer Science As the Way to Get Into Programming
09:37 ▶️ Computer Science Doesn't Make You a Master Programmer
11:25 ▶️ Why The System is Broken
14:20 ▶️ The Role of Universities in the Future of Education
22:08 ▶️ The First Half of the Path to Master Programmer
24:00 ▶️ The Second Half of the Path to Master Programmer
26:26 ▶️ What Is a Master Programmer?
31:36 ▶️ David and Dr Chuck's Experiences with Programming Courses at University
36:32 ▶️ Brief Overview of the Origin of Computer Science and What Went Wrong
44:02 ▶️ When Dr Chuck Teaches Recursion
44:56 ▶️ But Doesn't the System Actually Work? Just look at Google and Facebook
45:38 ▶️ The Idea for Google Wasn't Good Enough for a PhD
48:47 ▶️ How to Fix the System
50:43 ▶️ The Last Nut to Crack
54:22 ▶️ Open Source's Role
56:44 ▶️ You Can't Apply Until You Have Run the Gauntlet
1:00:34 ▶️ You Can Start Now
1:01:08 ▶️ The Value of Mentors
1:04:15 ▶️ The Problem with Online Platforms
1:05:37 ▶️ Why Cisco is the Standard in Networking
1:08:15 ▶️ Every Course Dr Chuck Teaches Requires Him to Write Code
1:09:29 ▶️ Quick Summary for the Plan for the Master Programmer
1:11:53 ▶️ What's the Cost Going to Be?
1:15:09 ▶️ Education Is For Everybody, Not Just the Rich
1:16:36 ▶️ Final Thoughts
1:18:33 ▶️ Thanks, Dr Chuck!
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Dr Chuck social //
Website: https://www.dr-chuck.com/
Twitter: https://twitter.com/drchuck/
YouTube: https://www.youtube.com/user/csev
Coursera: https://www.coursera.org/instructor/d...
// Python for Everybody //
Free Python course on Coursera: https://www.coursera.org/specializati...
YouTube: https://youtu.be/8DvywoWv6fI
Python for Everybody: https://www.py4e.com/
Free Python Book: http://do1.dr-chuck.com/pythonlearn/E...
Dr Chuck's Website: https://www.dr-chuck.com/
Free Python Book options: https://www.py4e.com/book
// Django for Everybody //
Website: https://www.dj4e.com/
Coursera: https://www.coursera.org/specializati...
YouTube: https://youtu.be/o0XbHvKxw7Y
// Web Applications for Everybody //
YouTube: https://youtu.be/xr6uZDRTna0
Website: https://www.wa4e.com/
Coursera: https://www.coursera.org/specializati...
// Internet History //
Coursera: https://www.coursera.org/learn/intern...
YouTube: https://youtu.be/47NRaBVxgVM
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
python
python course
python for beginners
master programmer
dr chuck
dr chuck master programmer
python mentorship
google code interview
google interview
computer science
python best course
dr chuck python
dr chuck python course
learn to code
software development
software developer
computer science
software engineer
software engineering
how to learn programming
free python course
free python course online
free python class
free python tutorial
free python training
how to learn to code
coding tutorials
how to code
learning to code
learn to code for free
learn to code python
python jobs
coding bootcamp
google code interview
python for beginners
python full course
python tutorial
python projects
python basic tutorial
python programming
python interview questions
python course
python basics
open source
#python #programming #drchuck | |||
| #368: Hacking Linux // Linux Privilege escalation // Featuring HackerSploit | 10 Apr 2022 | 01:07:08 | |
So you think Linux is secure? In this video we'll escalate our privileges on Linux to become root.
// MENU //
0:00:00 ▶️ Introduction
0:01:15 ▶️ Jump to the demo
0:01:38 ▶️ About Alexis, background and experience
0:07:38 ▶️ Starting HackerSploit
0:08:47 ▶️ Alexis and Linux
0:11:03 ▶️ Which is the preferred Linux distribution?
0:12:01 ▶️ Recommended Linux distribution for beginners
0:12:33 ▶️ LinuxJourney.com
0:12:01 ▶️ Favourite hacking distribution
0:13:51 ▶️ The PenTester Framework
0:15:21 ▶️ Best method to install a distribution
0:16:46 ▶️ Recommendations
0:18:29 ▶️ Recommended distribution for real-world pentesting
0:21:44 ▶️ Starting YouTube channel
0:22:18 ▶️ Windows vs MacOS vs Linux
0:23:30 ▶️ Recommended laptop
0:27:16 ▶️ Other advice
0:28:38 ▶️ Recommended certifications
0:30:46 ▶️ Recommended pre-requisite skills
0:33:13 ▶️ HackerSploit Linux Essential for Hackers
0:34:01 ▶️ HackerSploit Windows
0:34:26 ▶️ HackerSploit Networking Fundamentals
0:35:11 ▶️ Get your fundamentals right
0:35:29 ▶️ Dirty Pipe exploit presentation
0:43:52 ▶️ Dirty Pipe exploit demo
0:55:14 ▶️ Exploit 1
0:57:03 ▶️ Exploit 2
1:00:23 ▶️ Learning how to change scripts
1:02:14 ▶️ Recommended script language
1:04:00 ▶️ Thoughts on Golang
1:04:44 ▶️ Recommendations for learning languages
1:05:41 ▶️ Closing thoughts
// HackerSploit Linux exploit scripts //
Dirty Pipe Github page: https://github.com/AlexisAhmed/CVE-20...
Dirty Pipe Blog: https://dirtypipe.cm4all.com/
CVE details: https://cve.mitre.org/cgi-bin/cvename...
// Hackersploit Videos //
Pentesters Framework: https://www.youtube.com/watch?v=Bx3RL...
Linux for hackers: https://www.youtube.com/watch?v=T0Db6...
Windows for hackers:
Nmap series: https://www.youtube.com/watch?v=5MTZd...
Linux exploitation: https://www.youtube.com/watch?v=i-dQw...
Windows exploitation: https://www.youtube.com/watch?v=Bzmlj...
// Books //
Privilege Escalation Techniques: https://amzn.to/3xcPHjf
Automate the boring the stuff with Python: https://amzn.to/3LQA5Gl
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// HackerSploit //
LinkedIn: https://www.linkedin.com/in/alexisahmed/
YouTube: https://www.youtube.com/c/HackerSploit
Twitter: https://twitter.com/HackerSploit
Academy: https://hackersploit.academy/
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
linux
kali linux
kali linux hack
linux hacking
hacker
linux exploit
linux privilege escalation
linux hack
linux dirty pipe
linux dirty pipe explained
linux dirty pipe cve
linux dirty pipe exploit
linux privilege escalation
ethical hacking
linux priv esc
priv escalation linux
hackersploit
hacking
linux exploit
linux dirty pipe
dirty pipe linux
dirty pipe cve
linux vulnerability
linux security
linux exploits
linux kernel
linux kernel vulnerablity
dirty pipe vulnerability
#linux #linuxhack #hacking | |||
| #466: The new AI Cyber Defense you need to know about | 01 May 2024 | 00:37:46 | |
Is this the beginning of a new type of firewall that will replace or augment traditional firewalls? Is AI now eating firewalls; and will we still be using them in future?
Big thank you to Cisco for sponsoring this video and my trip to McLaren.
// Jeetu Patel’s SOCIAL//
LinkedIn:
/ jeetupatel
X:
/ jpatel41
Cisco Newsroom: https://newsroom.cisco.com/c/r/newsro...
// Tom Gillis’ SOCIAL //
LinkedIn:
/ tomgillis1
X: https://x.com/_tomgillis
Cisco Newsroom: https://newsroom.cisco.com/c/r/newsro...
// Craig Connor's SOCIALS //
LinkedIn:
/ craigconnors
X: https://x.com/egregious
Cisco: https://blogs.cisco.com/author/connorsc
// Article REFERENCE //
https://venturebeat.com/security/new-...
// Book REFERENCE //
Learning eBPF by Liz Rice:
USA: https://amzn.to/4d2OI7V
UK: https://amzn.to/49Kan1R
// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only.
#firewall #hacker #cybersecurity | |||
| #367: Troubleshooting slow networks with Wireshark // wireshark filters // Wireshark performance | 04 Apr 2022 | 01:03:23 | |
You are guilty until proven innocent! The network is slow! But is it actually a network issue? Or is it an application issue. Chris Greer explains.
// MENU //
00:00 ▶️ Introduction
00:35 ▶️ Wireshark filters introduction
02:20 ▶️ Regular IP filter
05:28 ▶️ Common filters
07:10 ▶️ Operators in filters
08:19 ▶️ Where to get the filter Power Point
08:55 ▶️ Filter shortcuts
11:20 ▶️ Filter buttons
12:10 ▶️ TCP analysis flags
15:16 ▶️ Filter buttons (cont'd)
17:15 ▶️ TCP reset
18:35 ▶️ How to apply filter as display filter
20:08 ▶️ Experience vs Theory
22:19 ▶️ Special filters
29:00 ▶️ Time filters
38:22 ▶️ Consulting scenario
49:45 ▶️ HTTPS consulting scenario
55:33 ▶️ Other filters
56:46 ▶️ How to simplify p-caps
59:29 ▶️ Signature filters
01:01:39 ▶️ Quick recap
01:02:16 ▶️ Conclusion
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
//CHRIS GREER //
LinkedIn: https://www.linkedin.com/in/cgreer/
YouTube: https://www.youtube.com/c/ChrisGreer
Twitter: https://twitter.com/packetpioneer
Pluralsight: TCP Analysis Course: https://davidbombal.wiki/tcpwireshark
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
wireshark
packet analysis
wireshark installation
wireshark filters
wireshark how to find ip address
wireshark http
wireshark ip address
wireshark wifi sniffing
wireshark tutorial
tcp analysis
packet analysis
free wireshark tutorial
tcp handshake
wireshark training
chris greer,
roubleshooting with wireshark
troubleshooting slow networks
network troubleshooting
packet capture
tcp reset
tcp connections
network protocols
packet capture using wireshark
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#wireshark #wiresharkfilters #networktroubleshooting | |||
| #366: Hacking PayPal and TikTok (legally) // Featuring Ben Sadeghipour Nahamsec | 04 Apr 2022 | 00:57:21 | |
Want to hack companies like PayPal and TikTok? What about the Department of Defense? Lots of companies that you can hack legally - and get paid doing it! This is a practical guide on how to get started hacking today.
// MENU //
00:00 ▶️ Introduction
00:17 ▶️ Who is Nahamsec?
01:18 ▶️ Different Bug Bounty Platforms
01:40 ▶️ Why Nahamsec Prefers These Platforms
02:34 ▶️ Intigriti Quick Overview
02:58 ▶️ Bugcrowd Quick Overview
03:25 ▶️ Hackerone Quick Overview
04:01 ▶️ What is Bug Bounty?
04:57 ▶️ Non-Monetary Rewards: Nahamsec's Red Bull Hack
05:57 ▶️ The Lyft, Snapchat and Undisclosed Travel Company Hack
07:02 ▶️ Interface Walkthrough
08:45 ▶️ Scope
10:18 ▶️ Top Hacker Profiles on Bug Bounty Programmes
11:04 ▶️ Profile Hacktivity Feed
13:54 ▶️ Using the site wide hacktivity feed to learn from previous bug bounties
15:31 ▶️ Getting Started: hacker101
17:24 ▶️ Getting Started: hackerone
20:58 ▶️ Submitting/Writing a Report
29:23 ▶️ Report Terminology
31:06 ▶️ How to Find a Company's Websites
33:05 ▶️ Nahamsec's Approach: Certificate Transparency
36:30 ▶️ Why NahamSec Prefers Dev Sites
38:05 ▶️ How to Find a Website's SSL Certificate
41:21 ▶️ Targeting a Company' Main Website vs Targeting Subdomains
42:25 ▶️ Researching a Company's Assets
43:43 ▶️ If You're New to the Bug Bounty Thing
47:40 ▶️ Ways to Learn
49:18 ▶️ Books to Help You Get Started Hacking
53:49 ▶️ Online Resources to Help You Get Started
55:28 ▶️ Final Advice
// Connect with David //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Connect with Nahamsec //
Twitter: https://twitter.com/nahamsec
YouTube: https://www.youtube.com/c/nahamsec
Github: https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters
Discord: https://discord.com/invite/ysndAm8
Instagram: https://www.instagram.com/nahamsec/
LinkedIn: https://www.linkedin.com/in/nahamsec/
Twitch: https://www.twitch.tv/nahamsec
Website: https://nahamsec.com/
// Nahamsec's Udemy Course//
Udemy: https://www.udemy.com/course/intro-to-bug-bounty-by-nahamsec/
// Sites //
Hackerone: https://www.hackerone.com/
Bugcrowd: https://bugcrowd.com/programs
Intigriti: https://www.intigriti.com/
// Book's recommended //
Bug Bounty Bootcamp: https://amzn.to/3K2YDeJ
Real-World Bug Hunting: https://amzn.to/3wTF9FN
Android Hacker's Handbook: https://amzn.to/3uMc509
The Web Application Hacker's Handbook: https://amzn.to/3IZ2RTr
Black Hat Python: https://amzn.to/3JYIZAV
Black Hat Python (2nd edition): https://amzn.to/379WcIV
// Creator's mentioned //
Nahamsec: https://www.youtube.com/c/Nahamsec
STÖK: https://www.youtube.com/c/STOKfredrik
LiveOverflow: https://www.youtube.com/c/LiveOverflow
Farah Hawa: https://www.youtube.com/c/FarahHawa
InsiderPhD: https://www.youtube.com/c/InsiderPhD
The Cyber Mentor: https://www.youtube.com/c/TheCyberMentor
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
bug bounty
bugbounty
hackerone
hacking
Ben Sadeghipour
NahamSec
nahamsec
cyber
security
bug bounties
ethical hacking
bug bounty hunting
burp suite
ethical hacker
pentest certificate
red teaming
bug bounty tips
bug bounty for beginners
bug bounty course
pentest basics
bugcrowd
bugbounty
hack
bugs
hackerone
bugcrowd
Intigriti
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#buybounty #hacking #hack | |||
| #365: Real World Talks: pfsense firewalls for home and business? // Featuring Tom Lawrence | 31 Mar 2022 | 00:56:46 | |
Real World Talks: pfsense firewalls for home and business? // Featuring Tom Lawrence
Are pfsense firewalls any good for home or business? Which businesses are supported by pfsense? What are the advantages and disadvantages of using pfsense? How big can they go? Lots of questions! Fortunately Tom answers these and many more in this video.
// MENU //
00:00 ▶️ Introduction
01:29 ▶️ What pfSense is and Tom's experience with pfSense
03:43 ▶️ Tom and Open Source
04:38 ▶️ The benefit of pfSense being Open Source
05:21 ▶️ Systems Tom has deployed with pfSense
07:22 ▶️ pfSense licensing cost
09:09 ▶️ Using pfSense at home
11:45 ▶️ Virtualization
12:28 ▶️ Raspberry Pi support
13:02 ▶️ Virtualization vs hardware
14:37 ▶️ Tom's recommendation for small/medium businesses
19:43 ▶️ pfSense actual cost (pfSense vs pfSense+)
22:22 ▶️ Reasons not to use pfSense
24:45 ▶️ Tom's biggest pfSense deployment
26:07 ▶️ pfSense above 10G
27:11 ▶️ pfSense and VPN
28:32 ▶️ Handling lots of VPN connections
29:29 ▶️ Advice for starting a consulting business
31:09 ▶️ Technical skills vs sales skills
32:22 ▶️ The benefit of having sales skills
35:58 ▶️ It's about the customer, not the product you use
38:02 ▶️ How Tom got his first customers
40:21 ▶️ Why Tom has a YouTube channel
43:46 ▶️ This video is not sponsored by a VPN company
43:53 ▶️ Skills to learn in 2022 to get started
48:13 ▶️ Story 1 - Hacked client
49:10 ▶️ Story 2 - That will never happen in the real world
51:28 ▶️ Story 3- We've all done it
52:40 ▶️ Final advice
54:15 ▶️ Networking with people
// David's SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Tom's SOCIAL //
Twitter: https://twitter.com/TomLawrenceTech
YouTube: https://www.youtube.com/user/TheTeckn...
Website: https://lawrencesystems.com/
LinkedIn: https://www.linkedin.com/in/lawrences...
Instagram: https://www.instagram.com/lawrencesys...
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
pfsense
pfsense router
home router
home networking
open source router
raspberry pi
pi
pfsense pi
pfsense raspberry pi
opensource
linux router
pfsense tutorial
pfsense setup
pfsense basics
pfsense course
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#pfsense #linux #firewall | |||
| #364: TLS Handshake Deep Dive and decryption with Wireshark // SSL Key Exchange Explained | 31 Mar 2022 | 01:05:39 | |
Hacking the TLS Handshake and decryption with Wireshark // SSL Deep Dive
50,157 views Mar 25, 2022 Warning! We go deep in this video to explain how the TLS handshake is completed. Warning! This is a technical deep dive and covers a lot of detail including SSL decryption and discusses RSA, Public and Private Keys, symmetric key exchange and lots more.
// Wireshark pcap //
https://davidbombal.wiki/tlsedpcap
// Ed's TLS course //
https://davidbombal.wiki/edtls49
Use coupon code: "BombalTLS" to get for $49
// MENU //
00:00 ▶️ Introduction
02:11 ▶️ How SSL/TLS is shown in a browser
02:40 ▶️ Pre-Requisites
05:15 ▶️ Data Integrity/Hashing
06:27 ▶️ Potential Problems with Hashing/man in-the-middle attack
07:32 ▶️ Message Authentication Code
10:09 ▶️ Prerequisites continued
11:51 ▶️ Symmetric Encryption
12:45 ▶️ Asymmetric Encryption
17:00 ▶️ Private and Public Keys
20:05 ▶️ Signatures
21:55 ▶️ Protocols
22:50 ▶️ SSL/TLS Handshake, Client Hello and Server Hello
28:35 ▶️ Client Hello and Server Hello in Wireshark
34:09 ▶️ Certificate
35:12 ▶️ Server Done
35:35 ▶️ Server Hello, Certificate, Server Hello Done in Wireshark
36:51 ▶️ Client Key Exchange
50:26 ▶️ Client Key Exchange in Wireshark
51:39 ▶️ Client Change Cipher Spec and Finished/Encrypted Verification
54:08 ▶️ Server Change Cipher Spec and Finished/Encrypted
56:10 ▶️ SSL/TLS Handshake in Wireshark
57:44 ▶️ Decrypting a PreMaster Key with a Private Key in Wireshark
1:03:15 ▶️ Where to get in contact with Ed to learn more
// David's SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Ed's SOCIAL //
Twitter: https://twitter.com/ed_pracnet
YouTube: https://www.youtube.com/channel/UCKmU...
// Ed's TLS course //
https://davidbombal.wiki/edtls49
Use coupon code: "BombalTLS" to get for $49
// More detail on Ed's YouTube channel and website //
Asymmetric Encryption explained from a Practical Perspective:
https://www.practicalnetworking.net/p...
RSA Algorithm:
https://www.youtube.com/watch?v=Pq8gN...
DH Algorithm:
https://www.youtube.com/watch?v=KXq06...
Practical TLS - Crypto & SSL/TLS foundation:
https://www.youtube.com/playlist?list...
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
tls
tls decryption
ssl
crypto
cryptography
ssl decryption
tls wireshark
tls decryption wireshark
tls tunnel
tls handshake
tlsp
tls explained
tls tunnel
vpn
tls protocol
tls handshake explained
tls 1.3
TLS
Transport Layer Security
Handshake
TLS Handshake
Crypto
Cryptography
security
wireshark
wireshark tutorial
wireshark packet analysis
tls decryption
tls decryption wireshark
tls 1.3 decryption
tls decryption wireshark
tls tunnel vpn free internet
tls decryption palo alto
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#tls #ssl #wireshark | |||
| #363: Interview: Hackers Arise to hack Russia // Ukraine Cyberwar | 28 Mar 2022 | 01:15:57 | |
I interview a hacker about the hackers hacking Russia in the current Ukraine cyberwar. He shares his manifesto and why he thinks it's important for you to learn hacking in 2022.
Disclaimer: The opinions expressed by Occupy The Web in this interview are his own.
Next interview: If you are a hacker based in Russia and want to be interviewed, please contact me and let's try to set up an interview.
Is this how the world ends? Another book to look at: "This Is How They Tell Me the World Ends: The Cyberweapons Arms Race" by Nicole Perlroth: https://amzn.to/3JqK1Wp
// MENU //
00:00 ▶️ Introduction
00:36 ▶️ Occupy The Web Introduction + background
03:05 ▶️ Hacking Russia
04:09 ▶️ Cyber-war
06:45 ▶️ Hacking accomplishments
09:12 ▶️ DDos Russian websites
10:18 ▶️ Russian "Iron Curtain"
11:27 ▶️ Hackers Arise DDos tutorial
13:45 ▶️ What is a white hat hacker?
16:40 ▶️ Urgency of stopping Putin
17:16 ▶️ Responsibility of hackers
18:00 ▶️ Hackers Arise manuals
19:36 ▶️ Using SDR to jam communications
20:10 ▶️ Ukrainian government asking hackers for help
21:43 ▶️ What Russians think
23:12 ▶️ Risk of being visited by a government agency
25:58 ▶️ Russian back doors
28:23 ▶️ Vulnerable systems in Russia
29:51 ▶️ Russian hackers escalation
33:52 ▶️ Linux basics for hackers book
37:53 ▶️ Opinion about CEH
39:00 ▶️ Advice for young hackers
41:59 ▶️ Opinion on OSCP
42:38 ▶️ Other certs CompTIA Security+ or eJPT
44:40 ▶️ Has the West been asleep
47:26 ▶️ Germany on the frontlines
49:18 ▶️ Russian/Ukraine war escalating cyber-security
53:05 ▶️ How to stay anonymous online
59:17 ▶️ Occupy The Web history
01:01:20 ▶️ Install Linux on hardware? What version of Linux? Kali?
01:05:09 ▶️ "Am I too old for hacking?"
01:09:13 ▶️ Hacker Arise courses
01:12:53 ▶️ Occupy The Web twitter and others
01:14:27 ▶️ Closing thoughts and manifesto
// David's SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Occupy The Web social //
Twitter: https://twitter.com/three_cube
// Occupy The Web books //
Linux Basics for Hackers: https://amzn.to/3JlAQXe
Getting Started Becoming a Master Hacker: https://amzn.to/3qCQbvh
// Occupy The Web / Hackers Arise Website //
Website: https://www.hackers-arise.com/
What is a White Hat Hacker: hhttps://davidbombal.wiki/whitehatarise
Putin's Windows XP Computer: https://davidbombal.wiki/putinxp
SDR Signals: https://davidbombal.wiki/SDRSignals
Using OSINT to find Yachts: https://davidbombal.wiki/osintyachts
// Recommended Twitter Accounts //
Lesley Carhart: https://twitter.com/hacks4pancakes
Dave Kennedy: https://twitter.com/HackingDave
Evacide: https://twitter.com/evacide
// In the News //
BBC: https://www.bbc.co.uk/news/technology...
The Guardian: https://www.theguardian.com/world/202...
Reuters: https://www.reuters.com/world/exclusi...
// Other books //
The Linux Command Line: https://amzn.to/3ihGP3j
How Linux Works: https://amzn.to/3qeCHoY
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#ukraine #russia #cyberwar | |||
| #362: How Nmap really works // And how to catch it // Stealth scan vs TCP scan // Wireshark analysis | 25 Mar 2022 | 00:44:02 | |
Chris and I go deep into what Nmap is actually sending onto the network and how you can find those dodgy packets! We then get into a real world Wireshark discussion on how to find stuff in a sea of packets.
// MENU //
0:00 ▶️ Welcome
2:15 ▶️ What is Nmap?
3:54 ▶️ TCP SYN and TCP connect scans
6:55 ▶️ Wireshark IP Filter
7:42 ▶️ Wireshark TCP Port Filter
7:57 ▶️ Stealth Scan
09:37 ▶️ Why it's called a stealth scan
11:02 ▶️ Connect() scan
11:50 ▶️ How to identify potential Nmap scans in Wireshark
15:05 ▶️ Wireshark filters to find potential stealth scans
19:08 ▶️ Nmap Port Flag
20:16 ▶️ What makes a TCP connect scan different
22:47 ▶️ What is TCP Conversation Completeness
26:16 ▶️ Wireshark filter to identify potential TCP connect scans
29:06 ▶️ Are devices good enough today to capture huge amounts of data?
31:09 ▶️ Network Traffic Monitoring Device
32:55 ▶️ How to find specific data in huge files
42:27 ▶️ Final tips for beginners in cybersecurity
43:27 ▶️ Topics for future videos
// Wireshark pcap file //
https://davidbombal.wiki/nmapstealth
// Wireshark documentation //
https://www.wireshark.org/docs/wsug_h...
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
//CHRIS GREER //
LinkedIn: https://www.linkedin.com/in/cgreer/
YouTube: https://www.youtube.com/c/ChrisGreer
Twitter: https://twitter.com/packetpioneer
Pluralsight: TCP Analysis Course: https://davidbombal.wiki/tcpwireshark
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
nmap
nmap stealth scan
nmap scan
nmap hacking
nmap scan types
wireshark
wireshark tcp
packet analysis
ccna
cisco ccna
wireshark nmap
wireshark real world
real world wireshark
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#nmap #wireshark #hacking | |||
| #361: Bug Bounty 2022 Guide: Where to focus // How to make money // How to get started today | 12 Mar 2022 | 01:05:41 | |
Is there a future for you in Bug Bounty? Can you make money out of buy bounty? Is this a full time or part time job? STÖK answers these questions and many more :)
Real answers to real world questions. Are you too young? Are you too young? Can you make lots of money in bug bounty? Is it a full time or part time job?
// MENU //
00:00 ▶️ Introduction
00:42 ▶️ Who is Stök?
02:09 ▶️ Stök's Career Journey
05:09 ▶️ How Stök got into in Bug Bounty
10:46 ▶️ What is a Race Condition and BURP?
14:26 ▶️ What is Bug Bounty?
16:30 ▶️ Hacking within scope
19:36 ▶️ Is Bug Bounty a Full-Time Job?
25:07 ▶️ Stök and Truesec
26:26 ▶️ Tips For Teenagers To Do Bug Bounty
33:50 ▶️ "Teenagers Will Do Better Than You"
34:54 ▶️ Basic Skills, Knowledge and Tips for Bug Bounty
38:40 ▶️ Guide To Starting Bug Bounty
46:00 ▶️ How To Network
48:57 ▶️ The Negatives of Bug Bounty
52:25 ▶️ Is Bug Bounty For Young People
53:50 ▶️ Advice For Young People
57:46 ▶️ Is Bug Bounty for "Older" People
01:02:10 ▶️ Learn OWASP Top 10 Vulnerable Classes
01:03:38 ▶️ The Future: Make sure you understand Web3, Blockchain and NFTs
// Connect with David //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Connect with STÖK //
Twitter: https://twitter.com/stokfredrik
YouTube: https://www.youtube.com/stokfredrik
Instagram: https://www.instagram.com/stokfredrik/
LinkedIn: https://www.linkedin.com/in/fredrikal...
Twitch: https://www.twitch.tv/stokfredrik
Website: https://www.stokfredrik.com/
Truesec: https://www.truesec.com/
If I missed something, please comment below and I'll update this list.
// Videos and people mentioned //
Top 5 tips to get started in Bug Bounty: https://youtu.be/CU9Iafc-Igs
Network Chuck interview: https://youtu.be/HbcY1HQtLms
Frans Rosén: https://twitter.com/fransrosen
Jason Haddix: https://twitter.com/Jhaddix
Ben Sadeghipour (Nahamsec): https://twitter.com/NahamSec
Adam Langley: https://twitter.com/adamtlangley
// Companies & organizations mentioned //
HackerOne: https://www.hackerone.com/
Bugcrowd: https://www.bugcrowd.com/
Intigriti: https://www.intigriti.com/
CTF Challenge: https://ctfchallenge.com/
HTB: https://davidbombal.wiki/htb
THM: https://tryhackme.com/
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
#bug bounty
#bugbounty
#hackerone
#hacking
#cyber
#security
#bug bounties
#ethical hacking
#bug bounty hunting
#burp suite
#ethical hacker
#pentest certificate
#red teaming
#bug bounty tips
#bug bounty for beginners
#bug bounty course
#pentest basics
#bugcrowd
#bugbounty
#stök
#stok
#hack
#bugs
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! | |||
| #360: Traceroute explained // Featuring Elon Musk // Demo with Windows, Linux, macOS | 10 Mar 2022 | 00:22:35 | |
Does Elon Musk actually understand how the Internet works? Can he explain traceroute and tracert properly? Well... let's see... I'll demonstrate how multiple operating systems: Windows 11, MacOS, Linux use traceroute.
There are differences including the fact that Windows uses ICMP, but macOS and Linux use UDP and ICMP.
Full Elon Musk Interview: https://youtu.be/jvGnw1sHh9M
// MENU //
0:00 ▶️ Introduction
0:08 ▶️ Elon Musk Babylon Bee interview video
1:11 ▶️ How trace route works
1:40 ▶️ What is ping?
1:48 ▶️ Internet Control Message Protocol (ICMP)
2:32 ▶️ How trace route (tracert) works on Windows
3:50 ▶️ What is a router?
4:10 ▶️ Wireshark packet captures
5:21 ▶️ Time To Live (TTL)
10:18 ▶️ Domain lookup using Whois
10:55 ▶️ Time To Live (TTL) (cont'd)
12:10 ▶️ Trace route phone application
13:43 ▶️ Submarine cable map
15:22 ▶️ Traceroute on MacOS
18:34 ▶️ UDP explanation
19:56 ▶️ Traceroute on Linux
21:42 ▶️ Conclusion
// iPhone App I used //
Name: Network Analyzer
Link: https://apps.apple.com/us/app/network...
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
elon musk
elonmusk
babylon bee
babylonbee
elon musk interview
internet
star link
traceroute
tracert
trace route
internet | |||
| #359: Hak5 badness: OMG Plug, new payloads and web flasher | 01 Mar 2022 | 00:10:58 | |
Fantastic updates from Hak5: OMG Plug, Payloads website and O.MG web flasher.
// MENU //
0:00 ▶️ Introduction
1:25 ▶️ OMG HID Device
2:20 ▶️ Demo
5:30 ▶️ New Hak5 Payloads website
6:30 ▶️ OMG Cable demonstration
7:20 ▶️ OMG Web Flasher
// Buy Hak5 coolness here //
Buy Hak5: https://davidbombal.wiki/gethak5
// PDF Instructions //
OMG Flasher instructions: https://davidbombal.wiki/omgplug
// Links //
Hak5 Payloads: https://payloads.hak5.org/
O.MG Flasher: https://o-mg.github.io/WebFlasher/
O.MG Github: https://github.com/O-MG
// Previous videos //
Interview with MG: https://youtu.be/B09CM6KaAuk
OMG Cable setup: https://youtu.be/V5mBJHotZv0
Hak5 Rubber Ducky setup: https://youtu.be/A2JNBpUotZM
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
hak5
omg plug
hak5 omg plug
hak5 plug
hak5 payloads
hak5 payloads website
hak5 omg payloads
hak5 rubber ducky
bad usb
badusb
hak5 badusb
omg cables
omg cable
rubber ducky
hak5 rubber ducky
hak5 omg cable
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#hak5 #omgplug #badusb | |||
| #358: You sure your WiFi is good enough? | 01 Mar 2022 | 00:19:43 | |
Big thanks to Cisco Meraki for sponsoring this video! Learn how to secure hybrid networks so you can stop these kinds of attacks: https://davidbombal.wiki/meraki
Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites. Only use the tools demonstrated in this video on networks you have permission to attack.
// MENU //
00:00 ▶️ Intro
02:17 ▶️ Real word example
02:58 ▶️ Hashcat file format
03:28 ▶️ Handshake capture (old mode) 10 digits
03:57 ▶️ GPU setup
04:12 ▶️ Handshake capture (old mode) 10 digits (cont'd)
06:21 ▶️ Handshake capture (new mode) 8 digits
07:57 ▶️ Handshake capture (old mode) 8 digits
09:07 ▶️ Incrementing digits
11:55 ▶️ Built-in charsets
12:22 ▶️ Cracking alphanumerical passwords
18:42 ▶️ Using wordlists
19:00 ▶️ Conclusion
// Previous Videos //
WiFi WPA/WPA2 vs hashcat and hcxdumptool: https://youtu.be/Usw0IlGbkC4
Kali Wifi Adapters: https://youtu.be/5MOsY3VNLK8
Old method using airmon-ng: https://youtu.be/WfYxrLaqlN8
Old method using GPUs: https://youtu.be/J8A8rKFZW-M
// COMMANDS //
Check GPU:
hashcat.exe -I
10 digits (Old Method):
hashcat.exe -m 2500 -a 3 10digit.hccapx ?d?d?d?d?d?d?d?d?d?d
Increment WPA2 digits (Old Method):
hashcat.exe -m 2500 -a 3 10digit.hccapx --increment --increment-min 8 --increment-max 20 ?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d
8 digits (New Method):
hashcat.exe -m 22000 8-digit-wpa2.hc22000 -a 3 ?d?d?d?d?d?d?d?d
10 digits (New Method):
hashcat.exe -m 22000 10-digit-wpa2.hc22000 -a 3 ?d?d?d?d?d?d?d?d?d?d
10 digits and alpha (New Method):
hashcat.exe -m 22000 10-digit-letters-wpa2.hc22000 -1 ?d?l?u -a 3 ?1?1?1?1?1?1?1?1?1?1
Increment digits (New Method):
hashcat.exe -m 22000 hash.hc22000 -a 3 --increment --increment-min 8 --increment-max 18 ?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d
Increment digits and alpha (New Method):
hashcat.exe -m 22000 10-digit-letters-wpa2.hc22000 -1 ?d?l?u -a 3 --increment --increment-min 8 --increment-max 12 ?1?1?1?1?1?1?1?1?1?1?1?1
// Previous Videos //
WiFi WPA/WPA2 vs hashcat and hcxdumptool: https://youtu.be/Usw0IlGbkC4
Kali Wifi Adapters: https://youtu.be/5MOsY3VNLK8
Old method using airmon-ng: https://youtu.be/WfYxrLaqlN8
Old method using GPUs: https://youtu.be/J8A8rKFZW-M
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
wifi
gpu
kali linux
kali wifi
kali
alfa
alfa network
alfa network adapter
wifi password
wpa
wpa2
hashcat
linux
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! | |||
| #465: Next Gen Hackers protecting our world | 01 May 2024 | 00:57:38 | |
A big shoutout to TCM Security for sponsoring this video. Register now to receive a 50% discount on your first month at the TCM Security Academy, potentially making your most significant step toward a career in ethical hacking. Go here: https://davidbombal.wiki/3vQsqWm
Farah works at Meta and shares her amazing story of going from studying mass media, to hacking and now working at Meta. Did you know that Facebook and Meta have a bug bounty program that allows you to legally hack them and get paid? Go here:
/ whitehat
// Farah Hawa’s SOCIAL//
YouTube:
/ @farahhawa
LinkedIn:
/ farah-hawa-a012b8162
X: https://x.com/farah_hawaa
Instagram:
/ farah_hawaa
// Resources REFERENCE //
YouTube videos:
2023 Path to Hacking Success:
• 2023 Path to Hacking Success: Top 3 B...
Bug Bounty: Get paid to hack PayPal and TikTok // Featuring Nahamsec:
• Bug Bounty: Get paid to hack PayPal a...
My updated bug bounty resources:
• my updated bug bounty resources
YouTube channels: thenewboston:
/ @thenewboston
Websites:
hackerone: https://www.hackerone.com/
hacker101: https://www.hacker101.com/
Burp Suite on PortSwigger: https://portswigger.net/support/burp-...
PortSwigger Web Security Academy: https://portswigger.net/web-security
Firefox Source Docs: https://developer.mozilla.org/en-US/
Pentester Land: https://pentester.land/
Infosec: https://infosec-conferences.com/
Vickie Li Blog: https://vickieli.dev/
Subfinder: https://github.com/projectdiscovery/s...
Sublist3r: https://github.com/aboul3la/Sublist3r
Frida: https://frida.re/
Meta Bug Bounty Program:
/ whitehat
Books:
Real World Bug Hunting by Peter Yaworski
USA: https://amzn.to/3JmRven
UK: https://amzn.to/4d3S5M0
Bug Bounty Bootcamp by Vickie Li
USA: https://amzn.to/3xGa4rz
UK: https://amzn.to/49PwPa0
// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only.
#facebook #hack #hacking | |||
| #357: Kali Linux Windows 11 App With GUI And Sound // Updated Simple Steps for 2022 Steps For 2022 | 01 Mar 2022 | 00:10:01 | |
It's now easier than ever to install Kali Linux on Windows 11 using WSL2.
// MENU //
0:00 ▶️ Introduction
1:27 ▶️ WSL installation
3:42 ▶️ Ubuntu installation
4:17 ▶️ Install Kali Linux
5:35 ▶️ Install Kali Linux GUI using Win-Kex
7:15 ▶️ Start WSL2 Kali Linux GUI
// COMMANDS //
In Windows Powershell:
wsl --install
In Kali WSL:
sudo apt update
sudo apt install -y kali-win-kex
kex --win -s
// DOCUMENTATION //
Download link:https://www.microsoft.com/en-us/p/kal...
Kali WSL Documentation: https://www.kali.org/docs/wsl/
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
wsl
wsl2
microsoft wsl
microsoft wsl 2
windows 11
windows11
windows 11 wsl
windows 11 wsl 2
wsl 2
kali linux
kali linxux install
kali linux windows 11
kali linux wsl
wsl kali linux
microsoft wsl
microsoft wsl 2
linux microsoft
microsoft linux
Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites. Only use the tools demonstrated in this video on networks you have permission to attack.
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! | |||
| #356: WiFi WPA WPA2 Vs Hashcat And Hcxdumptool | 01 Mar 2022 | 00:22:31 | |
Big thanks to Cisco Meraki for sponsoring this video! Learn how to secure hybrid networks so you can stop these kinds of attacks: https://davidbombal.wiki/meraki
Apologies for the glitches in this video 😢 .... looks like the export of this video broke.... I had lots of issues uploading the original video to YouTube and had to export again quickly and it looks like something else broke. Hopefully won't happen again 😅
Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites. Only use the tools demonstrated in this video on networks you have permission to attack.
// Previous Videos //
Kali Wifi Adapters: https://youtu.be/5MOsY3VNLK8
Old method using airmon-ng: https://youtu.be/WfYxrLaqlN8
Old method using GPUs: https://youtu.be/J8A8rKFZW-M
// COMMANDS //
sudo systemctl stop NetworkManager.service
sudo systemctl stop wpa_supplicant.service
sudo hcxdumptool -i wlan0 -o dumpfile.pcapng --active_beacon --enable_status=15
sudo systemctl start wpa_supplicant.service
sudo systemctl start NetworkManager.service
hcxpcapngtool -o hash.hc22000 -E essidlist dumpfile.pcapng
hashcat -m 22000 hash.hc22000 wordlist.txt
Windows:
hashcat.exe -m 22000 hash.hc22000 -a 3 ?d?d?d?d?d?d?d?d
hashcat.exe -m 22000 hash.hc22000 -a 3 --increment --increment-min 8 --increment-max 18 ?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com | |||
| #355: Hack WiFi With A Raspberry Pi And Kali Linux | 16 Feb 2022 | 00:14:42 | |
Hack WiFi with a Raspberry Pi and Kali Linux
// MENU //
0:00 ▶️ Introduction
0:23 ▶️ Raspberry Pi OpenFlow Switch
0:36 ▶️ Raspberry Pi 4 Model supports wifi monitor mode
2:11 ▶️ Download software (Kali Linux and Pi Imager)
3:33 ▶️ Install Kali Linux on Raspberry Pi
5:28 ▶️ Boot Kali Linux on Raspberry Pi
7:22 ▶️ Login into Kali Linux
7:53 ▶️ Use Fern to attack WiFi networks
9:55 ▶️ Use Wifite to attack WiFi networks
// PDF Instructions //
Raspberry Pi Kali Linux PDF: https://davidbombal.wiki/kalilinuxpi
// PREVIOUS VIDEOS //
Brute force Wifi WPA2 with GPU: https://youtu.be/J8A8rKFZW-M
Wifite Kali Linux: https://youtu.be/TDVM-BUChpY
Fern WiFi Kali Linux: https://youtu.be/Ezy1KTNF6dw
Raspberry Pi OpenFlow switch video 1: https://youtu.be/-G_gPet7evY
Raspberry Pi OpenFlow switch video 2: https://youtu.be/YJDXb31UwPI
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
wifi
raspberry pi
raspberry pi 4
raspberry pi 4 model b
raspberry pi wifi
raspberry pi kali linux
kali linux
raspberry pi 4 kali linux
kali linux raspberry pi
kali linux wifi
fern
fern wifi
wifite
wifite wifi
fern kali linux
wifite kali linux
fern raspberry pi
fern wifi raspberry pi
wifite raspberry pi
ethical hacking
kali linux hacking
kali linux wifi
wifi wpa2
wpa2 wifi
#wifi #raspberrypi #kalilinux | |||
| #354: How to succeed in #India | 08 Feb 2022 | 01:05:45 | |
Twitter CEO ✅ Microsoft CEO ✅ Google CEO ✅ Learn how you can succeed and follow in the footsteps of so many successful Indians in the USA and India.
Pallavi Srinivasa is a Senior Director of Product Management at Cisco and is responsible for $9B Enterprise Switching business from a Product Delivery perspective.
// MENU //
00:00 ▶️ Pallavi introduction & background
08:13 ▶️ Why are Indians successful in the tech industry?
11:05 ▶️ Q&A (Indian people and humility, culture, advice for young people)
20:10 ▶️ What do you look for in a candidate
23:27 ▶️ Tips for candidates for an interview
26:30 ▶️ Be yourself, try something, do what's right for you
30:30 ▶️ Imposter syndrome and advice (don't overthink)
34:43 ▶️ The job market in India
37:41 ▶️ Advice for LinkedIn and social media
40:28 ▶️ Advice for someone wanting to move to Canada/USA
43:36 ▶️ Advice for someone looking to work for big tech companies
45:36 ▶️ Keeping record of all work done & distinguished engineers
48:37 ▶️ Choosing between technical vs personality candidates
50:28 ▶️ Are degrees/certifications important?
52:48 ▶️ Advice for women getting into the tech business/industry
01:03:05 ▶️ Conclusion, closing thoughts and advice
// Connect with Pallavi //
LinkedIn: https://www.linkedin.com/in/pallavisr...
Twitter: https://twitter.com/Mayaloka
// Connect with David //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
india
indian ceo
indian jobs
jobs
Sundar Pichai
Parag Agrawal
Satya Nadella
interview tips
women in tech
why indians succeed in the usa
indians smart
cricket
indian heros
cisco
twitter
google
microsoft
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#india #indiajobs #indiasuccess | |||
| #353: How TCP really works // Three-way handshake // TCP/IP Deep Dive | 31 Jan 2022 | 01:01:09 | |
You need to learn TCP/IP. It's so much part of our life. Doesn't matter if you are studying for cybersecurity, or networking or something else. Learn TCP/IP.
// MENU //
00:00 ▶️ Intro
01:32 ▶️ The beginnings of TCP
03:57 ▶️ Three way handshake
07:20 ▶️ SYN meaning/explanation
08:50 ▶️ Port numbers
09:58 ▶️ What actually happens in the handshake
14:19 ▶️ Common starting TTL values
15:04 ▶️ Why we need SYN numbers
16:11 ▶️ What actually happens in the handshake (cont'd)
19:00 ▶️ Q&A (SYN,SYN-ACK,ACK - Sequence numbers - Increments - Tips)
33:01 ▶️ History of TCP
34:44 ▶️ TCP options
36:56 ▶️ TCP flags
41:53 ▶️ TCP Window - window size and scale
59:04 ▶️ MSS (Maximum Segment Size)
59:49 ▶️ SACK (Selective Acknowledgement)
01:00:13 ▶️ Conclusion
// PCAP File //
Wireshark TCP pcap file: https://davidbombal.wiki/deeptcp1
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
//CHRIS GREER //
LinkedIn: https://www.linkedin.com/in/cgreer/
YouTube: https://www.youtube.com/c/ChrisGreer
Twitter: https://twitter.com/packetpioneer
Pluralsight: TCP Analysis Course: https://davidbombal.wiki/tcpwireshark
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
wireshark
wireshark tcp
packet analysis
tcp
tcp/ip
ccna
ccnp
tcp handshake
tcp syn
tcp syn ack
ccie
tcp ip
cisco ccna
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#wireshark #tcp #hacking | |||
| #352: IT job with no experience? Are you brave enough? | 24 Jan 2022 | 00:54:45 | |
Would you be brave enough to take this job? Dumpster fire first IT job?
// Menu //
0:00 Introduction
1:25 Dumpster fire first IT job story
6:40 A story about bees
8:05 How to manage issues
10:46 CCNA reflections after job
12:55 Three months of fire
14:48 Infrastructure and others stories
21:30 Why Cisco?
23:26 Who is this kid? Imposter syndrome.
26:59 How do you get a job on a ship like this?
28:20 What is your advice to someone starting out?
31:02 Journey of networking to cloud (AWS)
34:05 How did you make the move?
36:55 Resources
39:30 Plumber to cloud engineer
41:35 Give Shala a cloud job today! :)
42:40 Life is a journey
45:52 Degrees?
46:46 Business point of view - jobs
49:20 Lessons learned
52:58 Would you grab a position that pushes you?
// Connect with David //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Connect with Shala / GiftedLane //
YouTube: https://www.youtube.com/channel/UC_qp...
Twitch: https://www.twitch.tv/giftedlane
Twitter: https://twitter.com/GiftedLane
Instagram: https://www.instagram.com/giftedlane
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
aws
azure
it
first it job
job
jobs
networking jobs
ccna
cisco
ccnp
networking
networker
cyber
cybersecurity
vmware
virtualization
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#job #ccna #aws | |||
| #351: Ex-NSA hacker tells us how to get into hacking! (2022 Edition) | 24 Jan 2022 | 00:50:06 | |
This is the path to becoming a hacker. Follow the advice and change your life!
// MENU //
0:00 Introduction - it's been a year!
2:12 We have a mission to help you
3:55 In 2022, what should I do? Neal's 3 things.
10:00 Is eJPT free?
12:00 Do I need to do something else first? Neal's opinion about various courses
18:10 Neal gets on his high horse about Metasploit.
19:05 Hackersploit has joined INE
21:18 What about Capture The Flag? Bug Bounty
22:30 How to get real world experience without having experience
26:20 Should I give up my job to get into cybersecurity?
28:35 Red vs Blue and jobs?
31:40 Hack your job: Garbage jobs
33:30 Which job should I start with to break into cyber
36:00 LinkedIn networking - make your self invisible
39:00 Meaningful connections
44:40 Would you recommend creating content
48:10 Best advice
// Previous video //
2021 video: https://youtu.be/SFbV7sTSAlA
// Connect with David //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Connect with Neal //
YouTube: https://www.youtube.com/c/cyberinsecu...
LinkedIn: https://www.linkedin.com/in/nealbridges/
Twitter: https://twitter.com/ITJunkie
// Creators mentioned //
John Hammond: https://www.youtube.com/c/JohnHammond010
Network Chuck: https://www.youtube.com/networkchuck
Hackersploit: https://www.youtube.com/c/HackerSploit
// Links //
INE: https://bit.ly/freeinetraining
Hacker One: https://www.hackerone.com/
Bug Crowd: https://bugcrowd.com/programs
OSCP: https://www.offensive-security.com/co...
eLearn Security: https://elearnsecurity.com
SANS: https://www.sans.org/
Hack the box: https://www.hackthebox.eu/
Try Hack Me: https://tryhackme.com/
CTF Time: https://ctftime.org/ctf-wtf/
CEH: https://www.eccouncil.org/programs/ce...
Cyber Blue: https://securityblue.team/
Cyber Defenders: https://cyberdefenders.org/
Did I miss something? Please comment.
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
nsa
nsa hacker
nsa hacking
ethical hacking
ceh
oscp
ine
try hack me
hack the box
hacking
ethical hacker
oscp certification
ctf for beginners
elearn security
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#hacker #hacking #nsa | |||
| #350: What Are You Going To Do In 2022? Top 5 Skills To Get! | 12 Jan 2022 | 00:12:54 | |
What are you going to do in 2022? Tops 5 skills to get!
Get these skills in 2022! Or at least get started.
Do you agree?
// MENU //
0:00 Introduction - ride waves
1:25 You cannot change the past, but use the 1% rule
2:30 First skill to learn
4:14 Second skill to learn
4:40 Path 1
5:13 Path 2
5:36 Path 3 and 4
6:05 Path 5
6:30 Path 6 and 7
7:00 Career advice
7:25 Skill 1
7:42 Skill 2
8:13 Skill 3
8:49 Skill 4
9:20 Skill 5
10:00 Skill 6
11:00 Rome was not built in one day
// BOOKS //
Atomic habits: https://amzn.to/3F8SESw
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
linux
python
golang
rust
aws
azure
gcp
cloud
networking
ccna
ccnp
ccie
api
apis
vmware
docker
kubernetes
blockchain
nft
bitcoin
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#linux #python #hacking | |||
| #349: How To Start With The Cloud In 2022 | AWS Azure And Google | 12 Jan 2022 | 01:16:11 | |
How to start with the Cloud in 2022 // AWS Azure and Google
Top 5 Cloud Certifications for 2022. AWS, Azure, GCP?
// MENU //
0:00 ▶️ I wish I had learned this!
0:52 ▶️ What is the path when I am starting out?
5:02 ▶️ Do I need to learn to code?
7:06 ▶️ This is overwhelming!
9:10 ▶️ How to learn from Bart
9:40 ▶️ Cloud resume challenge / how to get experience
11:47 ▶️ Mentorship with Bart
12:24 ▶️ The three core technologies to learn for cloud
15:50 ▶️ Networking is dead!
18:23 ▶️ Should I get a CCNA? CCNP? CCIE?
21:00 ▶️ Will networking be replaced by the cloud?
23:55 ▶️ Main interview - welcome Bart!
25:27 ▶️ I'm confused? Where do I start? Don't eat the elephant!
39:51 ▶️ Repeat: What is the path when I am starting out?
44:12 ▶️ Security path?
46:33 ▶️ Networking is dead!
54:37 ▶️ Developer / AI path?
57:50 ▶️ Three pillars
1:01:24 ▶️ Big trends that are driving the industry
1:05:00 ▶️ Other trends
1:06:20 ▶️ Do I need to learn to code?
1:13:42 ▶️ Cloud challenge
// MY SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// CONNECT WITH BART //
Twitter: https://twitter.com/cloudbart
LinkedIn: https://www.linkedin.com/in/cloudbart/
YouTube: https://www.youtube.com/channel/UCaCZ...
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
aws
azure
comptia
comptia cloud+
comptia linux+
linux
AWS Cloud Practitioner
AWS Solutions Architect
AWS Security Specialty
AZ-900
Microsoft Azure Fundamentals
AZ-104
Microsoft Certified Azure Administrator Associate
AZ-500
Azure Security Specialist
Top 5 certifications 2022
Top 10 certifications 2022
Top cloud certifications
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#aws #azure #gcp | |||
| #348: Top 5 Networking Certs For 2022 | 12 Jan 2022 | 00:12:00 | |
Top 5 Networking Certs for 2022
// MENU //
0:00 ▶️ Introduction
1:30 ▶️ Job search demonstration
3:12 ▶️ First Cert
5:02 ▶️ Second Cert
7:00 ▶️ Third Cert
7:13 ▶️ Fourth Cert
9:30 ▶️ Fifth Cert
9:51 ▶️ Gatekeepers
10:30 ▶️ David you are just a fanboy
// Videos Mentioned//
2022 Cybersecurity roadmap: How to get started? https://youtu.be/mS7qWC3CbOU
Top 5 Cloud certs: https://youtu.be/6llnxOV_aRU
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
ccna
ccnp
ccie
devnet
cisco
cisco devnet
devnet associate
networking
aruba
hpe
vmware
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#ccna #jncia #devnet | |||
| #464: Black Hat Bash: Bash Scripting for Hackers and Pentesters (Bonus: GraphQL and Drone hacking) | 22 Apr 2024 | 01:40:11 | |
Big thanks to Brilliant for sponsoring this video! To try everything Brilliant has to offer for free for a full 30 days and 20% discount visit: https://Brilliant.org/DavidBombal
I interview Dolev Farhi and Nick Aleks - the authors of Black Hat Bash and Black Hat GraphQL. Why should you learn either of these? Good reasons including $50K bug bounties :)
// Books //
Black Hat Bash:
USA: https://amzn.to/3JebZWJ
UK: https://amzn.to/3PXnk1i
Black Hat GraphQL:
USA: https://amzn.to/43Y3Ork
UK: https://amzn.to/3xtle2J
Hacking API’s by Corey J Ball: https://amzn.to/3TQnp89 US and https://amzn.to/3vXYQxX UK
// Dolev Farhi’s SOCIAL//
GitHub: https://github.com/dolevf
X: https://x.com/dolevfarhi
// Nick Aleks’ SOCIAL //
X: https://x.com/nick_aleks
LinkedIn:
/ nick-aleks-2b35389
GitHub: https://github.com/nicholasaleks
// Source LINK //
https://github.com/nicholasaleks/Damn...
// YouTube videos REFERENCE //
Free API Hacking course!:
• Free API Hacking course!
Free Hacking API courses (And how to use AI to help you hack):
• Free Hacking API courses (And how to ...
// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
Disclaimer: This video is for educational purposes only.
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! | |||
| #347: 2022 Cybersecurity Roadmap: How To Get Started? | 04 Jan 2022 | 00:25:21 | |
2022 Cybersecurity roadmap: How to get started?
How do you get started in Cybersecurity in 2022? John Hammond shows us the way.
// MENU //
0:00 ▶️ Introduction
0:48 ▶️ First thing to learn
3:55 ▶️ Do something else before that?
5:10 ▶️ Any recommended resources
6:34 ▶️ Still recommend CTFs?
9:30 ▶️ Degrees and certs required in cyber
12:04 ▶️ Recommended certs
16:10 ▶️ This sounds scary... any other certs first
18:10 ▶️ Difficult to answer
19:05 ▶️ Don't forget this!
20:00 ▶️ David pushing John for a path
21:20 ▶️ What John wishes he knew when he started
22:40 ▶️ Do what you love
John Hammond Playlist: https://davidbombal.wiki/johnhammond
// Connect with David //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// Connect with John //
YouTube: https://www.youtube.com/johnhammond010
Twitter: https://twitter.com/_johnhammond
LinkedIn: https://www.linkedin.com/in/johnhammo...
// OSCP from Offensive Security //
https://www.offensive-security.com/
// GO by example //
https://gobyexample.com/
// Hack The Box //
HTB Academy: https://davidbombal.wiki/htbacademy
HTB: https://davidbombal.wiki/htb
// Try Hack Me //
https://tryhackme.com/
// Pico CTF //
https://picoctf.org/
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
cybersecurity
cybersecurity jobs
hacking
ethical hacking
hacking jobs
john hammond
hack the box
try hack me
pico ctf
htb
thm
cyber security career
cybersecurity
cybersecurity careers
ceh
oscp
ine
elearn security
ejpt
oscp
oscp certification
ctf for beginners
first job
cybersecurity job
kali
kali linux
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#kalilinux #hacking #cybersecurity | |||
| #346: Windows 11 Hacking Using A Reverse Shell | NETCAT And Hak5 OMG Cable | 04 Jan 2022 | 00:13:12 | |
Windows 11 hacking using a reverse shell // NETCAT and Hak5 OMG Cable
Create your own virtual machine on Linode with $100 credit:
https://davidbombal.wiki/linode
* Thanks to Linode for sponsoring this video!
// MENU //
0:00 ▶️ Introduction
1:05 ▶️ Network Topology
3:40 ▶️ Method 1: Easy Method
5:09 ▶️ OMG Cable
8:00 ▶️ Method 2
// STEPS and INSTRUCTIONS //
Download this PDF for detailed instructions: https://davidbombal.wiki/netcatomg
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
hak5
netcat
rat
hak5 omg
omg cable
hak5 reverse shell
rubber ducky
windows
windows 11
windows 10
real time protection
windows anti virus
windows real time protection
Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites.
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#hak5 #netcat #reverseshell | |||
| #345: Christmas Giveaway | 04 Jan 2022 | 00:08:16 | |
Christmas Giveaway
It's Christmas! Time for gifts!
// GIVEAWAYS //
Hak5: https://davidbombal.wiki/hak5Christmas
Hack The Box: https://davidbombal.wiki/htbChristmas
Cisco Wifi: https://davidbombal.wiki/ciscoChristmas
ALFA Network: https://davidbombal.wiki/alfaChristmas
Aruba certs: https://davidbombal.wiki/arubaChristmas
Boson: https://davidbombal.wiki/bosonChristmas
Josh AWS: https://davidbombal.wiki/joshChristmas
David Bombal Membership: https://davidbombal.wiki/dbChristmas
// Buy Hak5 coolness //
Buy Hak5: https://davidbombal.wiki/gethak5
// Buy Hack The Box products //
HTB Academy: https://davidbombal.wiki/htbacademy
HTB: https://davidbombal.wiki/htb
// Buy Boson products //
Bombal CCNA Course: https://davidbombal.wiki/bosonbombal
ExSim: https://davidbombal.wiki/bosonexsim
NetSim: https://davidbombal.wiki/bosonnetsimdb
// Buy Alfa products //
https://www.amazon.com/shop/davidbomb...
// DAVID BOMBAL MEMBERSHIP //
https://courses.davidbombal.com/p/all...
// Buy Courses //
CCNA: https://davidbombal.wiki/ccna999
Wirehark: https://davidbombal.wiki/wireshark999
CompTIA Network+: https://davidbombal.wiki/network999
Ethical Hacking: https://davidbombal.wiki/hack999
CCNP ENCOR: https://davidbombal.wiki/ccnpencor999
CCNP ENARSI: https://davidbombal.wiki/ccnpenarsi999
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
wifi
hak5
thb
hackthebox
cisco
hack the box
cisco business
cisco wifi
alfa
alfa network
ceh
aws
azure
ccsp
boson
boson exsim
boson netsim
ccna
cisco ccna
blue team level 1
security blue team
AWUS036ACH
AWUS036ACHM
AWUS036ACM
AWUS036EACS
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#hackthebox #hak5 #kalilinux | |||
| #344: Is This An Attack? Wireshark Packet Analysis | SYN Attack | 04 Jan 2022 | 00:40:03 | |
Is this an attack? Wireshark Packet analysis // SYN Attack
Legit TCP flows or hacking attacks? Can Wireshark help us to decode the flows and see if the traffic is malicious?
// WIRESHARK FILE //
Download here: https://www.dropbox.com/s/pvytdvkvxl8...
// MAXMIND //
How to: https://wiki.wireshark.org/HowToUseGeoIP
Maxmind: https://www.maxmind.com/en/home
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
//CHRIS GREER //
LinkedIn: https://www.linkedin.com/in/cgreer/
YouTube: https://www.youtube.com/c/ChrisGreer
Twitter: https://twitter.com/packetpioneer
Pluralsight: TCP Analysis Course: https://davidbombal.wiki/tcpwireshark
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
wireshark
tcp
tcp/ip
tcp ip
osi
tcp model
wireshark tcp
ccna
cisco ccna
nmap
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#wireshark #tcp #nmap | |||
| #343: Minecraft Hacking With PYTHON And Log4j Netcat Reverse Shell Exploiting CVE | 22 Dec 2021 | 00:16:13 | |
Minecraft hacking with PYTHON and Log4j // Netcat reverse shell exploiting CVE
Create your own virtual machine on Linode with $100 credit:
https://davidbombal.wiki/linode
* Thanks to Linode for sponsoring this video!
It's really important that you update your servers to no longer use vulnerable versions of log4j.
// MENU //
0:00 ▶️ Introduction
1:45 ▶️ Topology and overview of problem
3:10 ▶️ Demo of rickroll attack
5:48 ▶️ Netcat reverse shell attack demo
9:17 ▶️ Entire process on a new cloud server
// SCRIPTS //
Get the code here: https://github.com/davidbombal/log4jm...
// MINECRAFT SETUP //
https://davidbombal.wiki/minecraftw11...
// JOHN's VIDEO //
John Hammond: https://youtu.be/7qoPDq41xhQ
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
minecraft
python
log4j
cve-2021-44228
java
java log4j
Log4jRCE.java
RCE
Log4Shell
minecraft log4j
minecraft windows 11
minecraft windows
minecraft server
reverse shell
windows
windows 11
windows 10
real time protection
windows anti virus
windows real time protection
python windows
windows python
Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites.
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#log4j #minecraft #python | |||
| #342: Python Keylogger Bypasses Windows 11 Defender |Convert WIFI Py To EXE | 22 Dec 2021 | 00:17:23 | |
Python keylogger bypasses Windows 11 Defender // Convert WIFI py to EXE
Learn how to convert your Python code to run as an EXE on Windows 11. The code will run on Windows without Python installed.
So, you think you need Python installed to run Python code on Windows 11? Well, think again. You also think that Windows 11 real time protection will protect you against malicious code? Well think again!
Warning: Don't download software that you don't trust. Only download software from reputable software developers and those you trust.
// MENU //
0:00 ▶️ Introduction: Warning
2:03 ▶️ Windows 11 setup: Python not installed, Windows version, anti-virus
3:12 ▶️ Demo of python code running on Windows 11:
5:42 ▶️ Demo of WiFi code
6:47 ▶️ Nuitka installation steps
10:27 ▶️ Compile Python code
13:52 ▶️ Run compiled code on Windows 11
14:25 ▶️ Be aware of Python requirements that you need to install
// SCRIPTS //
Python key: https://davidbombal.wiki/pythonkeys
Python WiFi: https://davidbombal.wiki/pythonwifi
// PDF Instructions//
Download here: https://davidbombal.wiki/pythoncompile
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
python
py to exe
py exe
python py to exe
python exe
compile python
python compile
python exe
python convert to exe
python convert py to exe
python py exe
python code
windows
windows 11
windows 10
anti virus
real time protection
windows anti virus
windows real time protection
windows 11 protection
windows 11 python
python compile
compile python code
compile python
python windows
windows python
nuitka
nuitka python
nuitka windows 11
windows 11 exe
nuitka compile
Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites.
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#python #keylogger #wifi | |||
| #341: Extract IPhone And Android EXIF Metadata From Online Photos Using PYTHON OSINT With Kali Linux | 09 Dec 2021 | 00:17:02 | |
Extract iPhone and Android EXIF metadata from online photos using PYTHON // OSINT with Kali Linux
Can you find out the locations of my photos? Put it in the comments below.
You need to learn to code! Learn Python. You are going to be very powerful and very scary if you combine knowledge of IT with Python scripting! But, do good.
// MENU //
0:00 ▶️ Introduction - why this is important
1:19 ▶️ Why you want to use this Python Script
1:52 ▶️ Online Example
2:35 ▶️ Python exe file version for Windows
2:59 ▶️ Demo of extracting exif data
6:08 ▶️ Script versus other applications
7:09 ▶️ Python exif csv script
7:45 ▶️ Remove exif data Python script
9:07 ▶️ Python is not installed on the Windows computer
9:39 ▶️ Python demo on Kali Linux - installing required software
12:20 ▶️ Create Python script on Kali Linux
13:40 ▶️ exif script demo on Kali Linux
14:36 ▶️ Remove exif script demo on Kali Linux
// PHOTOS //
Check my photos here: https://www.flickr.com/photos/1944199...
// SCRIPTS //
Python Exif script: https://davidbombal.wiki/pythonexif
Python Exif CSV script: https://davidbombal.wiki/pythonexifcsv
Python Remove Exif script: https://davidbombal.wiki/pythonexifre...
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
python
exif
osint
iphone
android
exiftool
exif data
exiftool windows 11
exiftool kali linux
kali linux
exif data iphone
exiftool mac
exif data android
exif viewer
gps
gps data
iphone gps tracker
iphone gps
android gps
apple gps
exof
osint tools
osint python
python hacking
hacking
ethical hacking
hacker,data from images
metadata
meta data
geotags
gps coordinates
gps coordinates app
gps coordinates iphone
photo location
find photo location
exif data online
Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites.
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#exif #osint #kalilinux | |||
| #340: Decrypting TLS, HTTP 2 And QUIC With Wireshark | 30 Nov 2021 | 00:27:59 | |
Decrypting TLS, HTTP/2 and QUIC with Wireshark
Learn how to decrypt HTTPS, TLS and the new QUIC protocol.
// MENU //
Introduction: 0:00
What is HTTPS vs HTTP2 vs QUIC: 1:25
What is QUIC: 6:30
How long have we been using QUIC: 9:42
Technical tour of QUIC: 10:12
Why use QUIC instead of TCP: 14:18
QUIC negotiation and support: 17:48
Steps to decrypt TLS: 19:04
Is Wireshark useless without the decryption keys: 20:04
MITM: 22:16
Advice on how do I learn Wireshark: 23:47
TCP/IP Illustrated book: 25:40
Rather focus on learning protocols instead of Wireshark: 25:54
Next video ideas: 26:35
// LINKS //
PCAP file: https://davidbombal.wiki/ssldecryptio...
Previous video: https://youtu.be/GMNOT1aZmD8
How to Decrypt SSL with Wireshark – HTTPS Decryption Guide: https://davidbombal.wiki/sslwireshark
Man in the middle Python script: https://youtu.be/O1jpck31Ask
Chris shows TLS decryption: https://youtu.be/5qecyZHL-GU
Chris Intro to Wireshark: https://youtu.be/OU-A2EmVrKQ
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
//CHRIS GREER //
LinkedIn: https://www.linkedin.com/in/cgreer/
YouTube: https://www.youtube.com/c/ChrisGreer
Twitter: https://twitter.com/packetpioneer
Pluralsight: TCP Analysis Course: https://davidbombal.wiki/tcpwireshark
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
wireshark
quic
http2
http
https
tls
ssl
https decryption
quic decryption
tls decryption
wireshark tls
wireshark ssl
https wireshark
tls wireshark
ssl wireshark
ccna
cisco ccna
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#quic#tls #wireshark | |||
| #339: Black Friday Giveaway HTB, HAK5, CCNA Live Training And More | 29 Nov 2021 | 00:09:10 | |
Black Friday Giveaway: HTB, HAK5, CCNA Live Training and more NOTE: You can still win. Winners will only be selected next week.
// GIVEAWAYS //
Hack The Box: https://davidbombal.wiki/htbbf
Hak5: https://davidbombal.wiki/hak5bf
Alfa Network: https://davidbombal.wiki/alfabf
Boson Bombal 8 weeks to CCNA: https://davidbombal.wiki/bosonbfccna
Boson NetSim: https://davidbombal.wiki/bosonbfnetsim
Boson ExSim: https://davidbombal.wiki/bosonbfexsim
Blue Team Level 1: https://davidbombal.wiki/blueteambf
// Buy Hak5 coolness //
Buy Hak5: https://davidbombal.wiki/gethak5
// Buy Courses for $9.99 //
CCNA: https://davidbombal.wiki/ccna999
Wirehark: https://davidbombal.wiki/wireshark999
CompTIA Network+: https://davidbombal.wiki/network999
Ethical Hacking: https://davidbombal.wiki/hack999
CCNP ENCOR: https://davidbombal.wiki/ccnpencor999
CCNP ENARSI: https://davidbombal.wiki/ccnpenarsi999
// Buy Hack The Box products //
HTB Academy: https://davidbombal.wiki/htbacademy
HTB: https://davidbombal.wiki/htb
// Buy Boson products //
Bombal CCNA Course: https://davidbombal.wiki/bosonbombal
ExSim: https://davidbombal.wiki/bosonexsim
NetSim: https://davidbombal.wiki/bosonnetsimdb
// Buy Alfa products //
https://www.amazon.com/shop/davidbomb...
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
hak5
alfa
alfa networks
ceh
aws
azure
ccsp
boson
boson exsim
boson netsim
ccna
cisco ccna
blue team level 1
security blue team
AWUS036ACH
AWUS036ACHM
AWUS036ACM
AWUS036EACS
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#hackthebox #hak5 #kalilinux | |||
| #338: Thanksgiving Giveaway! You Can Still Win Some Of The Giveaway | 25 Nov 2021 | 00:07:54 | |
Thanksgiving Giveaway! You can still win some of the giveaways 😀
IMPORTANT: Watch the full video so you can find the links to enter the competitions. Winners still need to be selected for Hak5, Boson, AWS, Blue Team, David Bombal membership etc. You can still win those. 😀
// Buy Kevin's Master Class here //
CCNP ENCOR MasterClass: https://www.kwtrain.com/encor-live
// Buy Hak5 coolness //
Buy Hak5: https://davidbombal.wiki/gethak5
// Buy Courses for $9.99 //
CCNA: https://davidbombal.wiki/ccna999
Wirehark: https://davidbombal.wiki/wireshark999
CompTIA Network+: https://davidbombal.wiki/network999
Ethical Hacking: https://davidbombal.wiki/hack999
CCNP ENCOR: https://davidbombal.wiki/ccnpencor999
CCNP ENARSI: https://davidbombal.wiki/ccnpenarsi999
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
hak5
apple
ceh
aws
azure
ccsp
comptia
comptia network+
boson
boson exsim
boson netsim
ccna
cisco ccna
kevin wallace
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#hak5 #aws #ccna | |||
| #463: Network Chuck Hacked YouTube! Learn how RIGHT NOW!! | 28 Mar 2024 | 01:53:53 | |
Network Chuck hacked the YouTube algorithm and has one of the best tech YouTube channels! We can all learn so much from him and his journey. From selling toilets to millions of YouTube subscribers. Learn from one of the best!
A big shoutout to Network Chuck Coffee and The Network Chuck Academy for sponsoring this video: https://store.networkchuck.com/ and https://academy.networkchuck.com/
Thanks for the coffee Chuck!
// Network Chuck’s SOCIAL//
YouTube:
/ @networkchuck
LinkedIn:
/ chuckkeith
X: https://x.com/networkchuck
Instagram:
/ networkchuck
Twitch:
/ networkchuck
// Video REFERENCE //
Network Chuck Livestream: How I make videos:
• how i make videos
// Resources REFERENCE //
YouTube channels:
Jorge Almazan:
/ jorgealmazan
CBT Nuggets:
/ @cbtnuggets
Gary Vee:
/ @garyvee
Fireship:
/ @fireship
Ali Abdaal:
/ @aliabdaal
John Hammond:
/ @_johnhammond
Jeff Geerling:
/ @jeffgeerling
Lawrence Systems:
/ @lawrencesystems
Jeremy’s IT Lab:
/ @jeremysitlab
Mr Beast:
/ @mrbeast
Books:
*The 4-Hour workweek by Timothy Ferriss:
Amazon: https://amzn.to/3xdl7rO
Amazon UK: https://amzn.to/3IQ7Wjo
Feel Good Productivity by Ali Abdaal:
Amazon: https://amzn.to/3Pwjfkm
Amazon UK: https://amzn.to/3VAIBBg
Steal like an artist by Austin Kleon:
Amazon: https://amzn.to/3VsLap0
Amazon UK: https://amzn.to/3PvQzYN UK
Atomic Habits by James Clear:
Amazon: https://amzn.to/3vmhjnE
Amazon UK: https://amzn.to/4aomD8P
Building a second brain by Tiago Forte:
Amazon: https://amzn.to/49YJ2Ka
Amazon UK: https://amzn.to/4cuzbxi
The ruthless elimination of hurry by John Mark Comer:
Amazon: https://amzn.to/4aqYsa6
Amazon UK: https://amzn.to/3VwBc66
It doesn’t have to be crazy at work by Jason Fried and David Heinemeier:
Amazon: https://amzn.to/4a2gFuN
Amazon UK: https://amzn.to/3VMhgwr
// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
Disclaimer: This video is for educational purposes only. | |||
| #337: HTTPS Decryption With Wireshark | Website TLS Decryption | 25 Nov 2021 | 00:31:13 | |
HTTPS Decryption with Wireshark // Website TLS Decryption
NOTE: Jump to 24:17 if you are only interested in the Wireshark capture and SSL decryption technical explanation. You can also follow along by downloading the Wireshark pcap using the link below.
Learn how to decrypt TLS / HTTPS traffic using Wireshark.
// MENU //
Is it important to learn Wireshark: 0:00
Will you get a better job? 2:19
Welcome Chris: 3:16
Defcon presentation: 3:40
Why TLS decryption: 5:44
Wireshark capture: 7:20
What is SSL and TLS: 8:26
How do you get the capture (Man in the middle): 9:44
Key exports for Wireshark: 11:03
Which keys are stored in the keylog: 13:56
Client and server key generation: 15:55
Process - keys and wireshark: 18:10
Wireshark capture explained: 21:00
TLS negotiation and Wireshark details: 24:17
How to import the keys into Wireshark: 29:04
// LINKS //
PCAP file: https://davidbombal.wiki/ssldecryptio...
How to Decrypt SSL with Wireshark – HTTPS Decryption Guide: https://davidbombal.wiki/sslwireshark
Man in the middle Python script: https://youtu.be/O1jpck31Ask
Chris TLS decryption: https://youtu.be/5qecyZHL-GU
Intro to Wireshark: https://youtu.be/OU-A2EmVrKQ
// MY STUFF //
https://www.amazon.com/shop/davidbombal
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
//CHRIS GREER //
LinkedIn: https://www.linkedin.com/in/cgreer/
YouTube: https://www.youtube.com/c/ChrisGreer
Twitter: https://twitter.com/packetpioneer
Pluralsight: TCP Analysis Course: https://davidbombal.wiki/tcpwireshark
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
wireshark
tls
ssl
http
https
https decryption
tls decryption
wireshark tls
wireshark ssl
https wireshark
tls wireshark
ssl wireshark
ccna
cisco ccna
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#wireshark #tls #https | |||
| #336: Is Cisco any better than Ubiquiti WiFi? | 22 Nov 2021 | 00:20:13 | |
How easy is it to configure the Cisco Small Business Access Points? Better than Ubiquiti?
Does Cisco even care about small businesses? Do they have products that help small, medium business with their network requirements. How good are their wifi products?
// Menu //
Introduction 0:00
Comparison to Unfi: 1:10
Unbox Cisco 140AC Access Point: 2:26
Cisco Phone Apps: 4:50
New Site Wizard: 5:51
WiFi settings: 7:19
Management network: 9:44
Add 140AC Access Point to the site: 10:17
Unbox Cisco 142ACM Mesh Extender: 11:58
Cisco 140AC setup completed: 13:42
Test WiFi network: 15:00
Add Cisco CBS250 switch via phone app: 15:50
Add Mesh Extender to the network: 16:56
Upgrade firmware of switches and access points: 18:20
What do you think? 19:19
// Links //
Cisco Business website: http://davidbombal.wiki/ciscobusiness
Cisco Store on Amazon: http://davidbombal.wiki/ciscoamazon
Which one should I buy? Cisco product selector: http://davidbombal.wiki/productselect...
// SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
wifi
cisco wifi
wifi small business
cisco wifi smb
smb wifi
cisco wireless
cisco business
cisco business switches
cisco 250 switch
cisco small business
cisco 350 switch
cisco 1000 switch
ubiquiti
unifi
ccna
cisco ccna
ccna 200-301
cisco business 140ac
cisco business model
cisco business 140ac review
cisco 142ac
cisco 142acm
cisco 140ac
cisco 140 access point
cisco 250 smart switches
cisco 350 smart managed switches
cisco 220 smart switchs
cisco 110 switches
unmanaged switch
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#wifi #cisco #ubiquiti | |||
| #335: Real World AUTOMATION | Top Skills, Jobs, Certs, Laptops And More | 19 Nov 2021 | 01:00:33 | |
Which skills are important for network engineers in the real world? Hank shares his top 5 skills. Are there jobs? Which certs are important? How is the real world different to the theory. Lots of great conversation with Hank Preston in this video!
// MENU //
Introduction: 0:00
Hank Preston Update: 0:35
DevNet Cert Updates: 1:09
Are there jobs? 2:46
Is DevNet for network engineers or developers: 4:50
Which certs should I take? What's the path: 7:46
What about people with more experience: 10:08
DevNet Expert - write code from scratch:: 13:13
Prerequisites for DevNet Expert: 14:54
Is DevNet for Automation or writing an app: 16:29
What are the top 5 skills / technologies for 2022: 18:40
Ansible vs Python: 23:17
If I am starting? Which first? Python / Ansible: 24:31
Fight, fight, fight: 27:46
Best OS: Linux, Windows or Mac (Part 1): 29:00
Real World Automation: 29:53
Hank transitions from DevNet to hands on: 32:39
Take aways from Real World Network Automation: 34:52
Real World needs to flexible: 39:05
What automation technologies do you use in production: 40:23
Network engineers don't need to learn this stuff! True or False: 44:48
Skills to get hired: 49:31
Best OS: Linux, Windows or Mac (Part 2): 50:29
Best laptop to buy: 51:16
What about your team? Windows / Linux / Mac: 54:50
Best DevNet Sandboxes: 56:29
Next topic? 59:10
// PLAYLIST mentioned in video //
Hank Preston videos: https://davidbombal.wiki/hankpreston
Interview with Eric Chou: https://davidbombal.wiki/erichank
// DAVID BOMBAL SOCIAL //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal
// HANK PRESTON SOCIAL //
Twitter: https://twitter.com/hfpreston
LinkedIn: https://www.linkedin.com/in/hpreston
// DEVNET //
DevNet Home Page:
http://cs.co/9002DQ3Tu
Learning Tracks (2 suggestions):
http://cs.co/9008DQ3nY
http://cs.co/9000DQ3XG
Coding Fundamentals Learning Module:
http://cs.co/9000DQ3XQ
Network Programability Basics Video Course:
http://cs.co/9005DQ3kJ
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com
python
jobs
ansible
linux
git
github
cisco
cisco nexus
nx-os
cisco ios
ios
api
rest api
restful api
ccna
devnet
cisco devnet
devnet expert
devnet associate
devnet professional
network automation
network programmability
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#python #ansible #devnet | |||
© My Podcast Data