#penetration-testing

In this video I share my thoughts on the difficulty/feasibility of developing your own exploits as a penetration tester.

Many people have complained about a rise in spam or robocalls. Media have acted dismissive of these facts, but could these robo and spam calls be an indicator of a future attack. We discussed with a consultant

Recently, hackers found a way to abuse Microsoft support similar in architecture to the dreaded sim-swaps we see growing every year. While this comes as a shock to some, I've warned these type of attacks

In this video I exploit the vulnerable machine called Quaoar from vulnhub. My demonstrations usually go in two parts. Part one is about getting inside the server - so finding a way in. And part two is

This is the second part of my walkthrough for Bob, a vulnerable virtual machine from vulnhub. In the first part of this walkthrough I demonstrated how you get into the server, which was not a pretty big

So, in this video I discuss about my focus with my youtube channel in the next period of time. I'm not specifically defining the period of time, because the focus might change as I go along my journey.

Back again with another demonstration of penetration testing. In this video we're going through Bob, an easily exploitable machine from vulnhub. I've been doing a lot of demonstrations from vulnhub recently

This ain't the first video of Gynvael that I recommend here. In my view, Gynvael Coldwind is one of the most knowledgeable figures in cybersecurity that I know of - who has a lot of hands-on experience.

In this video I demonstrate how I exploit another vulnerable machine from HackTheBox. For those who don't know, HTB is a platform where cybersecurity people can grow their skills in a safe and legal

Adrian Crenshaw, one of the greatest popularizer and person to bring awareness on cybersecurity has posted (a couple of years ago) on his channel the videos and demonstrations that were presented at ISSA

The team at BugCrowd, a platform for bug bounty programs, has posted a series to help people interested in getting into the field. I would have to say, bug bounty is pretty lucrative when it comes to

So far, I've been able to exploit about 20 servers from hackthebox.eu. In this video I demonstrate how I completely pwned (got into and escalated my privileges to the top user account) for the machine

Folks at Talos Intelligence Group have made a public released of their research on the VPNFilter, a malware that targets wireless routers around the world. Their first public release about their work was

There's this popular book on penetration testing titled Violent Python. It's been written by T. J. O'Connor and was published in 2012. Professor Sam Bowne held a workshop at BSidesSF this April and made

This is probably one of the longest videos on my Youtube channel. Still waiting for @dtube to become a reliable platform (I've been waiting for months) so that I can keep uploading my videos there without

One of the ways in which I teach myself reverse engineering is through hands-on practice. So, I take these binaries that are hosted on crackmes.one and I try to reverse them. In this context, reversing

In the previous demonstration, the first part of this walkthrough for DerpNStink vulnerable machine, we've managed to get inside the server by exploiting different services. Now, in this part, our purpose

Ok, so if you've been following my stuff, you know that I'm into Professor Sam Bowne's course from the Community College of San Francisco. So far, we've been going through some basics in this class, such

In this video I demonstrate how I get into and own a vulnerable virtual machine from hackthebox.eu. This box, as its name might suggest, is vulnerable to a shellshock exploit. For those who don't know,

Alexis Ahmed from Hackersploit youtube channel just made a insightful review on PentestBox, that was just recently released. So, the premise behind PentestBox is that it comes as a very good lightweight