David Bombal cover image

David Bombal

Latest episodes

undefined
Aug 8, 2024 • 1h 11min

#473: How to be Invisible Online using Expert OSINT techniques

Big shoutout to KASM for sponsoring this video. KASM workspaces supports the OSINT Community Efforts by providing the following products: Kasm Community Edition: https://kasmweb.com/community-edition Kasm Cloud OSINT: https://kasmweb.com/cloud-personal Kasm Workspaces OSINT Platform for Professionals/: https://kasmweb.com/osint Kasm Infrastructure/Apps for OSINT Collection: https://registry.kasmweb.com/1.0/ // MJ Banias’ SOCIALS // LinkedIn: / mjbanias Cloak and Dagger Podcast (Spotify): https://open.spotify.com/show/6mT8zDM... The Debrief: https://thedebrief.org/podcasts/ Instagram: / mjbanias X: https://x.com/mjbanias Website: https://www.bullshithunting.com/ // Ritu Gill’ SOCIALS // LinkedIn: / ritugill-osinttechniques OSINT Techniques website: https://www.osinttechniques.com/ Instagram: https://www.osinttechniques.com/ X: https://x.com/osinttechniques YouTube: / @forensicosint Forensic OSINT website: https://www.forensicosint.com/ TikTok: / osint.techniques // Rae Baker’s SOCIALS // Website: https://www.raebaker.net/ LinkedIn: linkedin.com/in/raebakerosint X: https://x.com/wondersmith_rae // Eliot Higgins’ SOCIALS // Bellingcat website: https://www.bellingcat.com/author/eli... X: https://x.com/eliothiggins // Books // The UFO People: A Curious Culture by MJ Banias: USA: https://amzn.to/3xP5Jme UK: https://amzn.to/4cOrzoK Deep Dive: Exploring the Real-world Value of Open Source Intelligence by Rae Baker and Micah Hoffman: USA: https://amzn.to/3xFN9gv UK: https://amzn.to/3zJSy6z We Are Bellingcat: Global Crime, Online Sleuths, and the Bold Future of News by Eliot Higgins: USA: https://amzn.to/3RXNa64 UK: https://amzn.to/4cvYP4B // YouTube video REFERENCE // Top 10 FREE OSINT tools (with demos): • Top 10 FREE OSINT tools (with demos) ... Deep Dive OSINT: • Deep Dive OSINT (Hacking, Shodan and ... Best Hacking Python Book: • Best Hacking Python Book? She Hacked Me: • She hacked me! // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 00:00 - Coming up 00:41 - Sponsored Section: KASM Workspaces demo 06:26 - Intro 06:46 - MJ’s Journey in OSINT 11:14 - Starting an OSINT Company 11:55 - Teaching Background 12:34 - Years in OSINT 13:19 - Advice for People Starting Out 15:44 - What It Means to Do OSINT 16:54 - Recommended Tools for OSINT 19:03 - Meet Ritu Gil 19:09 - Characteristics of a Good OSINT Investigator 20:03 - Knowing When to Give Up 20:43 - Soft Skills vs Technical Skills 22:17 - Ritu’s Advice on How to Get Started 23:24 - Are There Jobs in OSINT? 24:39 - Forensic OSINT Demo 26:41 - Tinder Vulnerabilities 30:51 - Next Guest Intro 32:04 - Rae Baker 32:33 - Tools Rae Uses 34:11 - From Graphic Design to OSINT 37:56 - Volunteering to Learn 39:10 - Next Guest Intro 40:10 - Eliot Higgins 40:19 - Eliot’s Background into OSINT 41:44 - Bellingcat 44:27 - No Degree Needed to Start 45:37 - Useful Tools to Use 47:19 - Advice for People Starting Out 48:36 - Communities to Join 51:50 - Recommended Books 53:03 - How MJ Got the Job 55:53 - MJ Shares an OSINT Story 01:02:44 - Importance of a Team 01:08:15 - Conclusion 01:10:34 - Outro Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only.
undefined
Aug 8, 2024 • 1h 22min

#472: Hacking Roadmap to Success: AMA with The Cyber Mentor and FREE training!

A big shoutout to TCM Security for sponsoring this video. Register now to receive a 50% discount on your first month at the TCM Security Academy, potentially making your most significant step toward a career in ethical hacking. Go here: https://davidbombal.wiki/3vQsqWm // FREE Training // Ethical Hacking in 15 Hours - 2023 Edition - Learn to Hack! (Part 1): • Ethical Hacking in 15 Hours - 2023 Ed... Ethical Hacking in 12 Hours - Full Course - Learn to Hack: • Ethical Hacking in 12 Hours - Full Co... Open-Source Intelligence (OSINT) in 5 Hours - Full Course - Learn OSINT: • Open-Source Intelligence (OSINT) in 5... // TCM Security SOCIAL// LinkedIn : / tcm-security-inc Twitter : / tcmsecurity YouTube (The Cyber Mentor): / thecybermentor Discord: / discord Instagram: / tcmsecurity Facebook: / tcmsecure TikTok: / tcmsecurity Academy Website: https://academy.tcm-sec.com/ TCM Certifications: https://certifications.tcm-sec.com/ Discord: / discord Website: https://tcm-sec.com/ Breach Point Website: https://breachpoint.com/ // Heath Adam’s SOCIAL // LinkedIn: / heathadams // YouTube Video REFERENCE // Real World Windows Pentest Tutorial (Demos of 5 Active Directory Hacks): • Real World Windows Pentest Tutorial (... My Entrepreneurial Journey – Episode 1: • My Entrepreneurial Journey - Episode ... // Books REFERENCE // They ask you Answer by Marcus Sheridan: US: https://amzn.to/4eVDFyv UK: https://amzn.to/45NKRIO 12 Months to $1 Million by Ryan Daniel Moran: US: https://amzn.to/3VLFwwY UK: https://amzn.to/4cEMOtb // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 00:00 - Coming up 00:32 - Introduction 01:08 - Certifications in TCM 06:06 - Exploring TCM Offerings 08:04 - Advanced Courses in TCM 09:29 - Red Team vs. Blue Team 10:14 - Video Learning vs. Reading 10:51 - Cloud Penetration Testing 12:06 - Hacking Certifications Roadmap 15:55 - Preparation Before PNPT 16:46 - Career Prospects with PNPT 17:31 - Degree vs. Certificate Requirements 19:37 - Job Opportunities without Certificates 21:21 - CCNA vs. Network+ 22:30 - Red Team Certificates for Blue Teaming 23:07 - Essential Skills for Penetration Testers 24:20 - Job Search Advice 27:09 - Relevance of Previous Job Skills 28:04 - Programming Skills Requirement 30:04 - AI in Cybersecurity 32:11 - Starting a Career in Cybersecurity 33:05 - Heath Adams' Journey 37:17 - Changing Your Life 38:25 - Achieving Work-Life Balance 41:01 - Job Opportunities in Cybersecurity 44:20 - Getting Started in Cybersecurity 45:24 - Entrepreneurial Journey 50:39 - Advice from Heath Adams 53:07 - Starting a Penetration Testing Company 54:36 - Importance of Social Media 55:25 - Courses on Starting a Cyber Business 56:24 - More Advice from Heath Adams 59:23 - Pricing Your Services 01:01:18 - Continuous Learning 01:03:07 - Realities of Cybersecurity 01:05:24 - Remote vs. In-Person Work 01:08:13 - Studying, Burnout, and Motivation 01:10:58 - Competing with Yourself 01:12:51 - Recommended Tools 01:15:38 - Debunking Cyber Myths 01:18:38 - How to Get in Touch 01:20:38 - Outro Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #cybersecurity #hack #hacker
undefined
Jun 25, 2024 • 23min

#471: Hack your water and electricity! Myth or Reality?

Big Thank You to Cisco for sponsoring my trip to Cisco Live and this video! // Joe Marshall’s SOCIALS // X: https://x.com/immortanjo3 LinkedIn: / joeics Cisco Blogs: https://blogs.cisco.com/author/joemar... Cisco Talos: https://www.talosintelligence.com/ // Webpages REFERENCE // https://blog.talosintelligence.com/pr... https://edition.cnn.com/2023/11/21/po... https://blog.talosintelligence.com/ho... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only.
undefined
Jun 7, 2024 • 35min

#470: The Future of Cybersecurity with Cisco & Splunk's $28 billion investment!

Cisco and Splunk's $28B partnership enhances threat detection and response in cybersecurity. Integration of Cisco Security Cloud with Splunk to provide unified threat detection workflow. Emphasis on AI tools for developer productivity and future technology integration for cybersecurity advancements.
undefined
Jun 6, 2024 • 23min

#469: The Cisco NVIDIA AI Network is here!

Big Thank You to Cisco for sponsoring my trip to Cisco Live and this video! Cisco Reveals Nexus HyperFabric AI Clusters, A New Simplified Data Center Infrastructure Solution with NVIDIA for Generative AI: - The new solution will combine Cisco and NVIDIA innovation to simplify the deployment of generative AI applications, providing IT visibility and analytics across the entire AI infrastructure stack. - Cisco Nexus HyperFabric AI clusters make it easy for enterprise customers to build infrastructure to run generative AI models and inference applications without deep IT knowledge and skills. - Exclusive cloud management capabilities help customers easily deploy, manage and monitor data centers, colocation facilities and edge sites. // Jonathan’s SOCIALS // LinkedIn: / jonathandavidson1 X: https://x.com/jonathandavidsn Cisco Blogs: https://blogs.cisco.com/author/jonath... // YouTube Video REFERENCE // Cyber Security and Networking just changed!: • Cybersecurity and Networking just cha... AI superpowered networks? (NVIDIA and Cisco joins forces): • AI superpowered networks? (NVIDIA and... // Webpage REFERENCE // https://www.techtarget.com/searchnetw... https://www.thousandeyes.com https://www.techrepublic.com/article/... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // MENU // 00:00 - Coming Up 01:08 - Intro 01:18 - Cisco Nexus HyperFabric 01:55 - Ray-Ban Glasses 02:15 - Digital Experience Assurance 03:08 - Cisco Nexus HyperFabric 03:30 - Cisco Networking Cloud Network 04:24 - Privacy 05:05 - Cisco Nvidia Partnership 09:32 - A.I Privacy 11:35 - A.I Without The Network? 13:10 - Data Center Enerygy Use 14:47 - Cisco's Investment into A.I 15:49 - Visual Resilience 19:18 - Meraki 21:25 - What Would Jonathan Tell His Younger Self? 23:01 - Outro // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only.
undefined
May 21, 2024 • 44min

#468: You have to look out for these hacks in 2024! (plus get FREE training)

Big thank you to Cisco for sponsoring this video! (And for the FREE Ethical Hacking Training!) // Free Ethical Hacking course // Free Ethical Hacking course: https://skillsforall.com/course/ethic... // Talos Report // 2024 Q1 Trends: https://blog.talosintelligence.com/ta... These are the threats you need to be aware of in 2024 from the Talos Report: * Talos IR also observed a variety of threats in engagements, including data theft extortion, brute-force activ- ity targeting VPNs, and the previously seen commodity loader Gootloader. * Talos IR responded to new variants of Phobos and Akira ransomware for the first time this quarter as well as the previously seen LockBit and Black Basta ransomware operations. * A recent Talos IR engagement suggests that Akira has returned to using encryption as an additional extortion method, now deploying a multipronged attack strategy to target Windows and Linux ma- chines. * Security researchers discovered an MFA bypassing phishing kit called “Tycoon 2FA” that has since become one of the most widespread phishing kits. However, this has yet to appear in any Talos IR engagements. Firewalls getting hacked: ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices: https://blog.talosintelligence.com/ar... AI voice cloning: The use of voice cloning of voice mails to sound authentic. Attackers use voice clones to phone help desk and reset passwords etc. 2FA is a major issue: "Users accepting unauthorized MFA push notifications was the top observed security weakness, accounting for 25 percent of engagements this quarter. The lack of proper MFA implementation closely followed, accounting for 21 percent of engagements, a 44 percent decrease from the previous quarter" // Martin Lee’s SOCIAL // Twitter / X: / mlee_security LinkedIn: / martinlee Talos Blog: http://blogs.cisco.com/tag/trac/ Security Website: https://sec.cloudapps.cisco.com/secur... Cisco Blog: https://blogs.cisco.com/author/martinlee // Book // Cyber Threat Intelligence by Martin Lee: USA: https://amzn.to/4dJ2LQj UK: https://amzn.to/3K3TqVH // Articles MENTIONED // Talos Incident Response Threat Summary for Jan- March 2024: https://blog.talosintelligence.com/co... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MY STUFF // https://www.amazon.com/shop/davidbombal Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #ai #iphone #android
undefined
May 1, 2024 • 1h 54min

#467: Your VPN won't protect you 😱

Rob Braxman, a public interest hacker and technologist, shares compelling insights on the dangers of mass surveillance and digital manipulation. He discusses how machines are already influencing our lives and warns against relying solely on VPNs for privacy. Braxman highlights the concerning reality that technology, like Neuralink, could turn our world into a Skynet scenario. Through his expertise, he emphasizes the importance of awareness and proactive measures to safeguard personal privacy in an increasingly monitored society.
undefined
May 1, 2024 • 38min

#466: The new AI Cyber Defense you need to know about

Is this the beginning of a new type of firewall that will replace or augment traditional firewalls? Is AI now eating firewalls; and will we still be using them in future? Big thank you to Cisco for sponsoring this video and my trip to McLaren. // Jeetu Patel’s SOCIAL// LinkedIn: / jeetupatel X: / jpatel41 Cisco Newsroom: https://newsroom.cisco.com/c/r/newsro... // Tom Gillis’ SOCIAL // LinkedIn: / tomgillis1 X: https://x.com/_tomgillis Cisco Newsroom: https://newsroom.cisco.com/c/r/newsro... // Craig Connor's SOCIALS // LinkedIn: / craigconnors X: https://x.com/egregious Cisco: https://blogs.cisco.com/author/connorsc // Article REFERENCE // https://venturebeat.com/security/new-... // Book REFERENCE // Learning eBPF by Liz Rice: USA: https://amzn.to/4d2OI7V UK: https://amzn.to/49Kan1R // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #firewall #hacker #cybersecurity
undefined
May 1, 2024 • 58min

#465: Next Gen Hackers protecting our world

A big shoutout to TCM Security for sponsoring this video. Register now to receive a 50% discount on your first month at the TCM Security Academy, potentially making your most significant step toward a career in ethical hacking. Go here: https://davidbombal.wiki/3vQsqWm Farah works at Meta and shares her amazing story of going from studying mass media, to hacking and now working at Meta. Did you know that Facebook and Meta have a bug bounty program that allows you to legally hack them and get paid? Go here: / whitehat // Farah Hawa’s SOCIAL// YouTube: / @farahhawa LinkedIn: / farah-hawa-a012b8162 X: https://x.com/farah_hawaa Instagram: / farah_hawaa // Resources REFERENCE // YouTube videos: 2023 Path to Hacking Success: • 2023 Path to Hacking Success: Top 3 B... Bug Bounty: Get paid to hack PayPal and TikTok // Featuring Nahamsec: • Bug Bounty: Get paid to hack PayPal a... My updated bug bounty resources: • my updated bug bounty resources YouTube channels: thenewboston: / @thenewboston Websites: hackerone: https://www.hackerone.com/ hacker101: https://www.hacker101.com/ Burp Suite on PortSwigger: https://portswigger.net/support/burp-... PortSwigger Web Security Academy: https://portswigger.net/web-security Firefox Source Docs: https://developer.mozilla.org/en-US/ Pentester Land: https://pentester.land/ Infosec: https://infosec-conferences.com/ Vickie Li Blog: https://vickieli.dev/ Subfinder: https://github.com/projectdiscovery/s... Sublist3r: https://github.com/aboul3la/Sublist3r Frida: https://frida.re/ Meta Bug Bounty Program: / whitehat Books: Real World Bug Hunting by Peter Yaworski USA: https://amzn.to/3JmRven UK: https://amzn.to/4d3S5M0 Bug Bounty Bootcamp by Vickie Li USA: https://amzn.to/3xGa4rz UK: https://amzn.to/49PwPa0 // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #facebook #hack #hacking
undefined
Apr 22, 2024 • 1h 40min

#464: Black Hat Bash: Bash Scripting for Hackers and Pentesters (Bonus: GraphQL and Drone hacking)

Big thanks to Brilliant for sponsoring this video! To try everything Brilliant has to offer for free for a full 30 days and 20% discount visit: https://Brilliant.org/DavidBombal I interview Dolev Farhi and Nick Aleks - the authors of Black Hat Bash and Black Hat GraphQL. Why should you learn either of these? Good reasons including $50K bug bounties :) // Books // Black Hat Bash: USA: https://amzn.to/3JebZWJ UK: https://amzn.to/3PXnk1i Black Hat GraphQL: USA: https://amzn.to/43Y3Ork UK: https://amzn.to/3xtle2J Hacking API’s by Corey J Ball: https://amzn.to/3TQnp89 US and https://amzn.to/3vXYQxX UK // Dolev Farhi’s SOCIAL// GitHub: https://github.com/dolevf X: https://x.com/dolevfarhi // Nick Aleks’ SOCIAL // X: https://x.com/nick_aleks LinkedIn: / nick-aleks-2b35389 GitHub: https://github.com/nicholasaleks // Source LINK // https://github.com/nicholasaleks/Damn... // YouTube videos REFERENCE // Free API Hacking course!: • Free API Hacking course! Free Hacking API courses (And how to use AI to help you hack): • Free Hacking API courses (And how to ... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com Disclaimer: This video is for educational purposes only. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode