David Bombal

David Bombal
undefined
Aug 22, 2022 • 1h 3min

#400: Free AppSec courses! #1 reason for hacks :(

#1 reason for data breaches is insecure software. Software badly needs to be made more secure - lots of opportunities here to either hack applications or help application developers secure them. Learn application security (appsec) for free with shehackspurple. // MENU // 00:00 - Let's start with a bang! 00:28 - Introduction//Tanya Janca 03:48 - What is CIA? 07:05 - Why Purple & What Big News? 11:17 - Free Secure Code Courses? 13:00 - Where to contact Tanya 13:37 - Number One Reason for Data Breaches 18:42 - How Tanya Started Out 25:19 - What is DevOps? 34:26 - The Systems Development Life Cycle 39:47 - Why Shock and Awe Doesn't Work 45:24 - Secure Code As a Job? 48:41 - Jobs and Free Training? 50:38 - Get Involved with the Hacking Community! 53:37 - log4j//What Happened? 01:01:17 - Thank You & Final Thoughts // FREE COURSES // Website: https://community.wehackpurple.com/ All Free courses: https://community.wehackpurple.com/al... Secure Coding: https://community.wehackpurple.com/co... API Security Mini Course: https://community.wehackpurple.com/co... Infrastructure as Code Mini-Course: https://community.wehackpurple.com/co... Azure Cloud Security: https://community.wehackpurple.com/co... Application Security Foundations Level 1: https://community.wehackpurple.com/co... Application Security Foundations Level 2: https://community.wehackpurple.com/co... Application Security Foundations Level 3: https://community.wehackpurple.com/co... Running DAST in a CI/CD, Successfully: https://community.wehackpurple.com/co... Scale Your Team Mini-Course: https://community.wehackpurple.com/co... // BOOKS // The Web Application Hacker’s Handbook - Ed by Dufydd Stuttard and Marcus Pinto: https://amzn.to/3vBzfHX Alice and Bob learn application security by Tanya Janca: https://amzn.to/3oMyMij // Tanya SOCIAL // YouTube: https://www.youtube.com/c/SheHacksPurple Twitter: https://twitter.com/shehackspurple LinkedIn: https://www.linkedin.com/in/tanya-janca/ Blog: https://shehackspurple.ca/ // David SOCIAL // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com app appsec owasp application security python javascript java c c++ swift php golang go rust kotlin typescript dart software hack software application hacking secure apps Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on any websites. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #hack #app #appsec
undefined
8 snips
Aug 15, 2022 • 42min

#399: Free API Hacking course!

I interview Corey Ball who wrote the book "Hacking APIs" and he tells us about his book and the free training he is making available. This is a cool announcement :) // MENU // 00:00 - Why talk about pentesting at all? 00:21 - Welcome//Corey 00:48 - What is an API and Why Care? 01:52 - Free API Hacking Course! 02:11 - Overview//Course 02:28 - Do I Need the Book to do the Course? 02:39 - Pre-reqs for Course 03:07 - Cert//When? 03:22 - Hacking APIs//Origin Story 05:34 - The Start//USPS Data Leak 07:31 - OWASP Top 10 Explained 07:49 - API1//Broken Object Level Authorization 08:46 - Testing for BOLA 09:59 - API2//Broken User Authentication 10:35 - Leaked API Keys on GitHub? 10:59 - API3//Excessive Data Exposure 12:05 - API9//Improper Asset Management 13:53 - The World is Running on APIs 14:53 - Who is this Book For? 16:19 - Set Up Hacking Lab 17:47 - You Just Need a Laptop to Start Hacking! 17:52 - Free API Hacking Tools 20:14 - What is Kiterunner 20:47 - Gobuster vs Kiterunner 21:51 - Free Wordlists! 22:05 - What is fuzzing and free fuzzing tool 23:17 - More Tools? 23:47 - How To Find APIs 25:02 - Using nmap to find APIs? 26:09 - Hacking APIs as your start in hacking 28:09 - Difference//REST//GraphQL 29:07 - Learn REST or GraphQL? 31:07 - Take a University Course? 31:44 - Hacking Certifications//Worth It? 33:42 - Being Hacked//How Corey Started 36:31 - Corey's OSCP Experience 38:09 - Hacking APIs As An Alternative Path 38:41 - Resources to Start With 39:26 - Ten Years of Experience? 39:52 - Huge Demand for Hacking APIs 40:25 - The Course is Completely Free 40:47- Breaking Barriers! 41:37 - Thank You & Final Words // Free API hacking course // APIsec Certified Expert Course: https://university.apisec.ai/ // Defcon Workshop notes // https://sway.office.com/HVrL2AXUlWGNDHqy // Books // Hacking API’s by Corey J Ball: https://amzn.to/3JOJG0E Bug Bounty Bootcamp Vickie Li: https://amzn.to/3SPCtBF // YouTube channels mentioned // InsiderPHD: https://www.youtube.com/c/InsiderPhD IppSec: https://www.youtube.com/c/ippsec/videos // Corey SOCIAL // LinkedIn: https://www.linkedin.com/in/coreyjball/ Twitter: https://twitter.com/hAPI_hacker // David SOCIAL // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com hacking api api api hacking api hacking tutorial api hacking bug bounty api hacking 101 api hacking full course api hacking tools api hacking alissa knight api hacking with postman api hacking for beginners api hacker api hacking demo api hacking kali linux api hacking course api hacking insiderphd hacking an api hack api owasp api top 10 bug bounty hacking apis no starch press hacking api no starch hacking apis pdf hacking api book hacking apis corey ball corey ball hacking apis reverse engineering private api apis for beginners rest api hacking api with postman reverse engineering for beginners hacking api key what is an api rest apis with postman for absolute beginners rest api explained #api #hack #hacking
undefined
11 snips
Aug 1, 2022 • 56min

#398: Learn AI for Free! Computerphile explains hype vs reality and how to get started.

AI just become Sentient? And will it take your job? Or is AI just a fantastic opportunity for you to get a better job? In this interview with Dr Michael Pound we discuss hype vs reality and get a quick start guide on how to learn AI. // MENU // 00:00 - Coming Up 00:45 - Intro 01:10 - Michael Pound introduction 02:49 - Will AI take our jobs? 04:55 - What is LaMDA? 08:38 - Can Python functions get lonely? 11:26 - The definition of "sentience" 11:59 - AI vs Machine Learning 18:48 - Neural Networks 19:49 - Malware example 21:59 - Stochastic Gradient Descent 22:30 - Supervised learning 23:45 - Unsupervised learning 26:03 - Reinforcement learning 27:35 - Are the robots taking over? 30:14 - What is AI really good at? 33:28 - Definition of Deep Learning 35:37 - Neural Networks 36:53 - What to learn 40:50 - Using PyTorch 43:52 - Google colab 44:48 - Study recommendations 46:16 - The demand for AI skills 48:15 - Teaching cyber security 50:06 - Final Advice 55:09 - Conclusion // Video mentions // ComputerPhile (lambda is not sentient): https://youtu.be/iBouACLc-hw Data Analysis Playlist: https://www.youtube.com/watch?v=NxYEz... Neural Networks Playlist: https://www.youtube.com/watch?v=py5by... Computer Vision Playlist: https://www.youtube.com/watch?v=C_zFh... // BOOK // Deep learning by Ian Goodfellow, Yoshua Bengio and Aaron Courville: https://amzn.to/3vmu4LP // COURSE // AI For Everyone by Andrew Ng: https://www.coursera.org/learn/ai-for... // PyTorch // Github: https://github.com/pytorch Website: https://pytorch.org/ Documentation: https://ai.facebook.com/tools/pytorch/ // Mike SOCIAL // Twitter: https://twitter.com/_mikepound YouTube: https://www.youtube.com/user/Computer... Website: https://www.nottingham.ac.uk/research... // David SOCIAL // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com lamda python neural network ai machine learning deep learning sentient google ai mike pound michael pound dr michael pound computerphile artificial intelligence google ai sentient google ai lamda google ai sentient conversation google ai alive ai jobs Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #ai #computerphile #lamda
undefined
24 snips
Aug 1, 2022 • 55min

#397: Hack Wifi from $1.80

Tech enthusiast and hacker Kody Kinzie discusses the best WiFi adapters for hacking, including the Tube U, AWUS036NHA, and WEMOS D1 Mini. He shares insights on flashing hacking tools, the differences between USB and WiFi nuggets, and the challenges of hardware development. Kinzie also talks about favorite OS, CircuitPython, rising above online hate, and the importance of continuous learning in cybersecurity.
undefined
Jul 27, 2022 • 52min

#396: The Internet just changed.

You better be aware of what just changed on the Internet. TCP is being replaced with QUIC. UDP is being used more and more instead of TCP. This affects your firewalls. It affects a lot of your network troubleshooting. HTTP/3 has been standardized. Everything is encrypted with QUIC - welcome to the new world of network troubleshooting and security. // MENU // 00:00 - The Problem with TCP 00:12 - Introducing//Robin Marx 02:12 - Clean Ship, Clean House//RFCs 03:25 - HTTP Semantics//QUIC//HTTP/3 04:17 - Why the Hell Do We Need HTTP/3? 05:05 - Why QUIC? 08:35 - QUIC & TLS Integration 10:02 - Why Use UDP? 13:50 - Replacing TCP with QUIC 14:28 - Summary So Far 15:22 - Stream Multiplexing 15:40 - Head-of-line blocking 18:40 - Why This Slows Things Down 19:29 - How QUIC Does It Differently 20:58 - TCP vs QUIC//Packet Handling 23:11 - HTTP/3 Prioritization 25:25 - Stats//QUIC Isn't Going Anywhere 26:30 - Firewalls are almost useless 27:20 - Firewalls Blocking QUIC? 28:04 - QUIC & Other Protocols? 29:20 - IPv4 & IPv6//Different for QUIC? 29:54 - Challenges for QUIC's Growth 30:43 - Connection Migration 33:33 - What About Hackers? 36:32 - How Do I Get To Use QUIC? 38:28 - Large Companies Adopting QUIC 39:09 - The Internet is Too Centralized? 40:02 - Header Compression 41:55 - Server Push 43:47 - Practical Examples with Wireshark 50:34 - Thank You & How to Contact Robin // Robin SOCIAL // Twitter: https://twitter.com/programmingart LinkedIn: https://www.linkedin.com/in/rmarx/ YouTube: https://www.youtube.com/channel/UCyqP... // Robin's Blog articles // HTTP3 core concepts Part 1: https://www.smashingmagazine.com/2021... HTTP3 core concepts Part 2: https://www.smashingmagazine.com/2021... HTTP3 core concepts Part 3: https://www.smashingmagazine.com/2021... // Chris Greer Videos // HTTPS Decryption with Wireshark: https://youtu.be/GMNOT1aZmD8 Decrypting TLS, HTTP/2 and QUIC with Wireshark: https://youtu.be/yodDbgoCnLM // David SOCIAL // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com http https quic tcp udp http/1 http/2 http/3 wireshark firewall firewall quic quic firewall http/3 firewall #http3 #quic #tcp
undefined
Jul 27, 2022 • 46min

#395: What you need to learn in 2022? Top 3 hot trends.

You want to ride waves. You want to learn the hot new topics to get ahead - especially if you are starting out. Don't focus on the stuff of yesterday. Focus on the new opportunities. Ben Sadeghipour (NahamSec) shares his suggestions about what to learn and then tells us about one that is gaining a lot of momentum in 2022. // MENU // 00:00 - Coming Up 00:29 - Intro 00:34 - The next big thing 02:09 - Opportunities in Web3 03:59 - Ride the wave 06:07 - Attack Vector & Attack Surface Management 11:39 - Going digital and digital assets 14:14 - NahamSec "Under 10 Minutes" series 15:51 - Patches that are still vulnerable 18:20 - APIs are the future 21:16 - Shodan demo 30:24 - The security issue 31:38 - Shodan vs ASM 32:38 - Out of scope assets 35:12 - NahamSec and Hadrian 38:12 - Will automation take over? 39:13 - ASM vs Inventory Management 40:49 - Getting more information about ASM 44:21 - Covering APIs on NahamSec YouTube 45:31 - Conclusion Previous video: https://youtu.be/9vaEwycet90 // Connect with David // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/davidbombal // Connect with NahamSec // Twitter: https://twitter.com/nahamsec YouTube: https://www.youtube.com/c/nahamsec Github: https://github.com/nahamsec/Resources... Discord: https://discord.com/invite/ysndAm8 Instagram: https://www.instagram.com/nahamsec/ LinkedIn: https://www.linkedin.com/in/nahamsec/ Twitch: https://www.twitch.tv/nahamsec Website: https://nahamsec.com/ // Nahamsec's Udemy Course// Udemy: https://www.udemy.com/course/intro-to... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com hack hacker shodan cyber hacking cybersecurity asm rsa attack surface management attack vector attack surface monitoring attack surface reduction bitcoin api apis postman hacking hacking api cyber security information security sans institute cybersecurity training cyber security training information security training privacy nsa oscp ceh bug bounty bugbounty hackerone hacking Ben Sadeghipour NahamSec nahamsec cyber security bug bounties ethical hacking bug bounty hunting burp suite ethical hacker Disclaimer: This video is for educational purposes only. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #cyber #hacking #jobs
undefined
Jul 18, 2022 • 1h 21min

#394: Best Hacking Python Book?

The difference between script kiddies and professionals is the difference between merely using other people's tools and writing your own. Charle Miller, from the foreword (1st edition). This is a great book if you want to learn Python for hacking and penetration testing. Sometimes the tools you want to use are not available on target systems and the only option is to use Python - so learn the tools and techniques you can use with Python in a pentest or ethical hacking situations. // MENU // 00:00 - Coming up 00:26 - Intro 00:32 - Black Hat Python has been updated! 02:52 - How Black Hat Python started 07:00 - Why Python? 08:26 - Justin Seitz's background 10:33 - "Make it work." 11:56 - Tim Arnold's background 15:21 - Simple to read for everyone 19:55 - Editor vs Integrated Development Environment (IDE) 21:06 - Learn to debug! 22:29 - Modules updated to Python 3 24:28 - The Networking chapter 27:09 - Favourite chapters 28:17 - Inspirations for the chapters 31:40 - You always learn 33:13 - Choosing Developer or Hacker 36:12 - Endless accessibility to learning material 37:08 - Is it necessary to know programming? 41:23 - Ruby knowledge for Metasploit 42:27 - Will Golang replace Python? 45:27 - Recommended coding languages 46:40 - The story of Hunchly 54:15 - From Pentester to OSINT 56:44 - Justin Seitz's stories 59:18 - How Hunchly works 01:00:52 - Will A.I. replace humans? 01:02:16 - Dark Web Mailing List 01:05:38 - Tim Arnold's story 01:09:02 - Advice for beginners 01:17:53 - Conclusion // Buy the books // Black Hat Python: https://amzn.to/3yQIdTD Grey Hat Python: https://amzn.to/3NQcA0H // Justin's SOCIAL // Twitter: https://twitter.com/jms_dot_py E-mail: justin.seitz (at) hunch.ly Website: https://www.hunch.ly/ // Tim's SOCIAL // E-mail: jtim.arnold(at)gmail.com // David's SOCIAL // Discord: https://discord.gg/davidbombal Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube Main Channel: https://www.youtube.com/davidbombal YouTube Tech Channel: https://youtube.com/channel/UCZTIRrEN... YouTube Clips Channel: https://www.youtube.com/channel/UCbY5... Apple Podcast: https://davidbombal.wiki/applepodcast // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com python black hat python no starch no starch press osint hack hacking pentesting ethical hacking penetration testing black hat python white hat python grey hat python gray hat python cyber security kali linux ethical hacking python programming penetration testing ethical hacker python for hacking python full course black hat book review how to hack cyber security course hacking books computer hacking learn black hat python python tutorial cyber security career cyber security analyst python hacker python hacking course python hacking tools scapy hack python code hack python book python hack wifi Disclaimer: This video is for educational purposes only. Please note that the links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #python #hacking #kalilinux
undefined
Jul 4, 2022 • 1h 1min

#393: 4th of July special: Path to Cybersecurity by Ex-NSA Hacker

How to move into Cyber if you are a veteran. // Neal's Top 5 Resources // 1) Onward to Opportunity: O2O Website: https://ivmf.syracuse.edu/programs/ca... Army Mil PDF: https://home.army.mil/bragg/applicati... 2) VetSec: Website: https://veteransec.org/ LinkedIn: https://www.linkedin.com/company/vete... Twitter: https://twitter.com/veteransec 3) With you With Me: Website: https://www.withyouwithme.com/ 4) Operation Code: Website: https://operationcode.org/ 5) Boots 2 Books: Website: https://www.boots2books.com/ Montgomery GI Bill: https://www.va.gov/education/about-gi... // Recommended SANS courses // GIAC Exploit Researcher and Advanced Penetration Tester (GXPN): https://www.sans.org/cyber-security-c... GIAC Certified Incident Handler (GCIH): https://www.giac.org/certifications/c... GIAC Certified Forensic Analyst (GCFA): https://www.giac.org/certifications/c... GIAC Reverse Engineering Malware (GREM): https://www.sans.org/cyber-security-c... SANS DIFR: https://www.sans.org/digital-forensic... GIAC Information Security Professional (GISP): https://www.sans.org/cyber-security-c... GIAC Security Essentials (GSEC): https://www.giac.org/certifications/s... GIAC Systems and Network Auditor (GSNA): https://www.sans.org/cyber-security-c... // Hands on // Try Hack Me: https://tryhackme.com/ Hack The Box: https://www.hackthebox.com/ Security Blue Team: https://securityblue.team/ Blue Team Labs Online: https://blueteamlabs.online/ Cyber Defenders: www.cyberdefenders.org // Degrees // Neal recommends getting a business degree. // Sites referred to in the video // Transition assistance program TAP (Neal says this is not sufficient): https://www.dol.gov/agencies/vets/pro... Cyber Insecurity YouTube channel: https://www.youtube.com/c/CyberInsecu... Josh Mason’s LinkedIn: https://www.linkedin.com/in/joshuacmason Video Ex NSA Hacker tells us how to get into hacking https://youtu.be/SFbV7sTSAlA SANS: https://www.sans.org Neal’s discord server: https://www.twitch.tv/cyber_insecurity https://cyberinsecurity.tv/ // Books // The Dichotomy of Leadership by Jocko Willink and Leif Babin https://amzn.to/3bRfFk0 Extrene ownership How US Navy Seals Lead and Win Jocko Willink and Leiff Babin https://amzn.to/3P0Ac3H // Neal's SOCIAL // YouTube: https://www.youtube.com/c/cyberinsecu... LinkedIn: https://www.linkedin.com/in/nealbridges/ Twitter: https://twitter.com/ITJunkie // Josh's SOCIAL // LinkedIn: https://www.linkedin.com/in/joshuacma... Twitter: https://twitter.com/Joshua17sc // David's SOCIAL // Discord: https://discord.gg/davidbombal Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube Main Channel: https://www.youtube.com/davidbombal YouTube Tech Channel: https://youtube.com/channel/UCZTIRrEN... YouTube Clips Channel: https://www.youtube.com/channel/UCbY5... Apple Podcast: https://davidbombal.wiki/applepodcast // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com cyber infosec vet veteran vet to cyber ethical hacker cybersecurity sans oscp comptia Disclaimer: This video is for educational purposes only. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #cyber #vet #infosec
undefined
Jul 4, 2022 • 58min

#392: OSINT tools to track you down. You cannot hide.

Never post photos on social media if you want privacy. It's amazing how easy it is to find the location of photos posted on Facebook, Instagram, Flickr or other social media platforms. You cannot hide. Your privacy is over. Time to learn Open Source Intelligence from the best. OSINT Curious is a registered, non-profit 501(c)(3) organization with the United States IRS (EIN: 84-2781099); and accepts Patreon donations from individuals and sponsors. If you are a sponsor, please contact them if you want to work with them: https://osintcurio.us/funding/ // MENU // 00:00 - Let's Find Nessie! 00:14 - The Art of Geolocation with OSINT Curious 01:31 - Image 01//Egyptian Wall 02:53 - Bing Reverse Image Search 04:15 - Image Cleanup Tools 05:17 - Removing David 05:51 - Finding David with the Cleaned Up Image 10:37 - Image 02//The Lighthouse 11:32 - Bing Visual Search 14:01 - Confirming the Location with 360 Photos 16:46 - Results May Vary 18:08 - Use Different Search Engines! 18:45 - Add-on to Speed Up Image Searching 22:56 - Image 03//Speed Test! 25:10 - Image 04//The Bridge 26:28 - Google Images vs Bing vs Yandex 28:36 - Image 05//Nessie 30:04 - Nessie in London? 30:53 - Using Observational Techniques to Find Locations 33:56 - Matching the Photo 40:14 - Using Google Street View 41:39 - Google Easter Egg 43:11 - The Google Boat? 44:58 - EXIF Data Tool//Finding Exact Location 46:59 - Image 06//The Canal 49:57 - Identifying Canal with Boat 52:20 - The Canal in Google Street View 53:33 - Cities vs Countryside 55:51 - How to Get Good 57:16 - More OSINT? Leave a Comment! Previous video: https://youtu.be/ImWJgDQ-_ek EXIF video: https://youtu.be/A_itRNhbgZk // The OSINT Curious Project // YouTube: https://www.youtube.com/c/TheOSINTCur... Twitter: https://twitter.com/osintcurious LinkedIn: https://www.linkedin.com/company/the-... Website: https://osintcurio.us Public, OSINT-focused Discord: https://iam.osintcurio.us/discord Sponsor personally or through your company: https://osintcurio.us/funding/ // Websites mentioned // Remove Background: https://www.remove.bg/ Cleanup Pictures: https://cleanup.pictures/ Search by image: https://chrome.google.com/webstore/de... RevEye: https://chrome.google.com/webstore/de... // David's SOCIAL // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/davidbombal // Lisette's SOCIAL // Twitter: https://twitter.com/technisette Personal website: https://technisette.com // Steven's SOCIAL // Twitter: https://twitter.com/nixintel LinkedIn: https://www.linkedin.com/in/steven-ha... Personal website: https://nixintel.info/ SANS SEC487 OSINT Courses Steven teaches - https://www.sans.org/profiles/steven-... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com osint open-source intelligence open source intelligence tools osint curious geolocation geolocation game facebook instagram google bing yandex geolocation google geolocation bing you cannot hide social media warning about social media google dorks dorks google osintgram osint framework osint tools osint tv osint ukraine osint tutorial osint course osint instagram osint framework tutorial cyber security information security open-source intelligence open source intelligence sans institute cybersecurity training cyber security training information security training what is osint open source artificial intelligence cyber hack privacy nsa oscp ceh Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #osint #cyber #privacy
undefined
Jul 4, 2022 • 1h 23min

#391: You are in a Cyber War. Don't be a dumb*** and try to ignore it

You are in a Cyber War. Don't try to ignore what is going on. Learn the Art of Cyberwarfare. An Investigator's Guide to Espionage, Ransomware and Organized Cybercrime. // MENU // 00:00 - Don't be a dumb*** 00:23 - Introducing//Jon Dimaggio 00:30 - Journey to Cyberwarfare 03:08 - How Jon Started Writing Professionally 06:45 - From Fired to Symantec 10:22 - Dealing with Difficult People in Charge 12:49 - How to Become an Overnight Success 16:52 - The Art of Cyberwarfare 23:43 - Who This Book is For 27:07 - Jon's Writing Assistant 27:59 - Advanced Persistent Threat//Different Animal 35:12 - WanaCry // How Jon Got Into Ransomware 42:21 - Why APTs Need to Be Handled Differently 44:54 - The Battle to Spread Awareness of APTs 47:56 - Ukraine//Election Hacking 49:50 - What to Do When Facing APTs 54:15 - Open Source As An Alternative 56:09 - How to Contact Jon 58:30 - Finding Cybercriminals//The Darkweb 1:04:45 - How to Get Into Cyberwarfare 1:10:19 - Hacking Certifications 1:14:59 - The Book Jon Uses For OSINT Tools 1:17:30 - Do the Heavy Lifting to Accomplish Your Dreams 1:20:40 - Thank You & Final Thoughts // Books // The Art of Cyberwarfare by Jon DiMaggio: https://amzn.to/3btDJJz Open Source Intelligence Techniques by Michael Bazzell: https://amzn.to/3xTnAVd // Jon's SOCIAL // Twitter: https://twitter.com/Jon__DiMaggio LinkedIn: https://www.linkedin.com/in/jondimaggio/ // David's SOCIAL // Discord: https://discord.gg/davidbombal Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube Main Channel: https://www.youtube.com/davidbombal YouTube Tech Channel: https://youtube.com/channel/UCZTIRrEN... YouTube Clips Channel: https://www.youtube.com/channel/UCbY5... YouTube Shorts Channel: https://www.youtube.com/channel/UCEyC... Apple Podcast: https://davidbombal.wiki/applepodcast Spotify Podcast: https://open.spotify.com/show/3f6k6gE... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com cyberwar cyber warfare cyberwire cyber security cyber war ukraine russia ukraine cyber attack cyber security career cyberwar russia cyber security course cyber security analyst cyber security interview questions cyber security engineer stuxnet stuxnet explained stuxnet virus malware election hacking ukraine russia ukraine cyberwar russia cyberwar iran cyberwarfare nsa usa cyberwar osint titan rain red october regin north korea russian ukraine news russia news russia ukraine war hacking cyber war on russia cyber warrior ukraine war russia ukraine crisis ukraine invasion russia ukraine conflict vladimir putin info sec russia ukraine conflict video russia ukraine news ukraine news ukraine news russia hacker hacked hacktivisim cybersec infosec info ec proxy chains tor hack russia Disclaimer: This video is for educational purposes only. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #cyberwar #hacking #ransomware

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!
App store bannerPlay store banner
Get the app