Bug Bounty Bootcamp with Vickie lii

Hacker Talk

Player FM - Internet Radio Done Right

16 subscribers

เพิ่มแล้วเมื่อ threeปีที่ผ่านมา

เนื้อหาจัดทำโดย Firo Solutions LTD เนื้อหาพอดแคสต์ทั้งหมด รวมถึงตอน กราฟิก และคำอธิบายพอดแคสต์ได้รับการอัปโหลดและจัดหาให้โดยตรงจาก Firo Solutions LTD หรือพันธมิตรแพลตฟอร์มพอดแคสต์ของพวกเขา หากคุณเชื่อว่ามีบุคคลอื่นใช้งานที่มีลิขสิทธิ์ของคุณโดยไม่ได้รับอนุญาต คุณสามารถปฏิบัติตามขั้นตอนที่แสดงไว้ที่นี่ https://th.player.fm/legal

Insights Unlocked

1
How Anthropologie gets omnichannel right (and what to learn) 27:29

10 วันที่แล้ว27:29

ลิสต์เล่นในภายหลัง

ลิสต์

ถูกใจ

ที่ถูกใจแล้ว

27:29

Episode web page: https://tinyurl.com/2b3dz2z8 ----------------------- Rate Insights Unlocked and write a review If you appreciate Insights Unlocked , please give it a rating and a review. Visit Apple Podcasts, pull up the Insights Unlocked show page and scroll to the bottom of the screen. Below the trailers, you'll find Ratings and Reviews. Click on a star rating. Scroll down past the highlighted review and click on "Write a Review." You'll make my day. ----------------------- In this episode of Insights Unlocked , we explore the evolving landscape of omnichannel strategies with Kate MacCabe, founder of Flywheel Strategy. With nearly two decades of experience in digital strategy and product management, Kate shares her insights on bridging internal silos, leveraging customer insights, and designing omnichannel experiences that truly resonate. From the early days of DTC growth to today’s complex, multi-touchpoint customer journeys, Kate explains why omnichannel is no longer optional—it’s essential. She highlights a standout example from Anthropologie, demonstrating how brands can create a unified customer experience across digital and physical spaces. Whether you’re a marketing leader, UX strategist, or product manager, this episode is packed with actionable advice on aligning teams, integrating user feedback, and building a future-proof omnichannel strategy. Key Takeaways: ✅ Omnichannel vs. Multichannel: Many brands think they’re omnichannel, but they’re really just multichannel. Kate breaks down the difference and how to shift toward true integration. ✅ Anthropologie’s Success Story: Learn how this brand seamlessly blended physical and digital experiences to create a memorable, data-driven customer journey. ✅ User Feedback is the Secret Weapon: Discover how continuous user testing—before, during, and after a launch—helps brands fine-tune their strategies and avoid costly mistakes. ✅ Aligning Teams for Success: Cross-functional collaboration is critical. Kate shares tips on breaking down silos between marketing, product, and development teams. ✅ Emerging Tech & Omnichannel: Instead of chasing the latest tech trends, Kate advises businesses to define their strategic goals first—then leverage AI, AR, and other innovations to enhance the customer experience. Quotes from the Episode: 💬 "Omnichannel isn’t just about being everywhere; it’s about creating seamless bridges between every touchpoint a customer interacts with." – Kate MacCabe 💬 "Companies that truly listen to their users—through qualitative and quantitative insights—are the ones that thrive in today’s competitive landscape." – Kate MacCabe Resources & Links: 🔗 Learn more about Flywheel Strategy 🔗 Connect with Kate MacCabe on LinkedIn 🔗 Explore UserTesting for customer insights for marketers…

2 ปีที่แล้ว 38:02

M4A•หน้าโฮมของตอน

Our Hacker of the episode is "Vickie lii"! Vickie tells us about Bug Bounties, her new book and information security.

Tune in now!

In this episode we cover:

Background, getting into security

Getting into Bug Bounty

First Bug bounty

Hackerone, Bug crowd

Reporting Security Bugs

Coordinating bug bounties

Life as a bug bounty hunter

Interaction with engineers

Bug bounty bootcamp Book

Security as a hobby

Writing Books

How to hack web applications

Vickie's favourite types of Vulnerabilities

Template injection

IDOR

Writers block

Nostarch

Book Publishing

Bug bounty tools

Python and Bash

Make bug bounties more enjoyable

Portswinger Lab

Finding low hanging fruits

legal harbor

Caring about security researchers

Links:

https://twitter.com/vickieli7

https://en.wikipedia.org/wiki/Bug_bounty_program

https://vickieli.dev/

https://portswigger.net/web-security/all-labs

https://portswigger.net/research/server-side-template-injection

https://www.geeksforgeeks.org/insecure-direct-object-reference-idor-vulnerability/

https://nostarch.com/bug-bounty-bootcamp

Grab a copy of Vickie's book:

https://www.amazon.com/Bug-Bounty-Bootcamp-Reporting-Vulnerabilities-ebook/dp/B08YK368Y3

20 ตอน

#Tech #Hacker Talk

Hacker Talk

Bug Bounty Bootcamp with Vickie lii

Hacker Talk

16 subscribers

published 2 ปีที่แล้ว

แบ่งปัน

M4A•หน้าโฮมของตอน

Our Hacker of the episode is "Vickie lii"! Vickie tells us about Bug Bounties, her new book and information security.

Tune in now!

In this episode we cover:

Background, getting into security

Getting into Bug Bounty

First Bug bounty

Hackerone, Bug crowd

Reporting Security Bugs

Coordinating bug bounties

Life as a bug bounty hunter

Interaction with engineers

Bug bounty bootcamp Book

Security as a hobby

Writing Books

How to hack web applications

Vickie's favourite types of Vulnerabilities

Template injection

IDOR

Writers block

Nostarch

Book Publishing

Bug bounty tools

Python and Bash

Make bug bounties more enjoyable

Portswinger Lab

Finding low hanging fruits

legal harbor

Caring about security researchers

Links:

https://twitter.com/vickieli7

https://en.wikipedia.org/wiki/Bug_bounty_program

https://vickieli.dev/

https://portswigger.net/web-security/all-labs

https://portswigger.net/research/server-side-template-injection

https://www.geeksforgeeks.org/insecure-direct-object-reference-idor-vulnerability/

https://nostarch.com/bug-bounty-bootcamp

Grab a copy of Vickie's book:

https://www.amazon.com/Bug-Bounty-Bootcamp-Reporting-Vulnerabilities-ebook/dp/B08YK368Y3

20 ตอน

#Tech #Hacker Talk

ทุกตอน

Hacker Talk

1
New Year special 2024 2:04:30

15 weeksที่แล้ว2:04:30

2:04:30

Hacker Talk 2024 New Year Special Featuring: Johnny Xmas, Zagros Bingol and Filip Kalebo. Topics: infosec's 9/11 - Target.com breach Leaking TSA master keys Starting to work in information security How the information security space has changed The hackers we lost along the way RIP Kevin Mitnick RIP hacker legend Robert “Ozzie” Osband (Richard Cheshire, The Cheshire Catalyst) 2600 Hackers on planet earth Crowd strike Trends we have seen in 2024 AI as a trend The future of AI Training models AI being used to fingerprint user activity AI in continuous integration pipelines Code Reviews Backdoor in tar Vulnerabilities in the linux kernel Risks of using opensource Exploit brokers OSS Fuzz Fuzzing Quantum computers Cray super computers Michelle Simmons creates a quantum computer at home National cryptology museum in Washington dc 40 years since Chaos Computer club, 2600 and Cult of the deadcow Chaos computer camp Bornhack toorcamp hope conference Defcon Cult of the deadcow Veilid Bluesky Decentralized technologies Hawk tuah Modern Scams Web3 and Web2 Privacy Downfall of telegram Telegram giving up on privacy SimpleX chat, signal and imessage Future External Links: https://linktr.ee/johnnyxmas https://burbsec.com/ https://en.wikipedia.org/wiki/XZ_Utils_backdoor https://www.metafilter.com/203126/Tar-Trap-Caught https://en.wikipedia.org/wiki/Hack-Tic https://en.wikipedia.org/wiki/Chaos_Communication_Camp https://cultdeadcow.com/ https://2600.com/ https://toorcamp.org/experience/ https://infocondb.org/presenter/richard-cheshire-the-cheshire-catalyst https://www.imdb.com/name/nm1937010/ https://hope.net/memoriam.html https://veilid.com/ https://blog.rust.careers/post/veilid_dildog_rust_interview/ https://bornhack.dk/bornhack-2025/ https://en.wikipedia.org/wiki/DEF_CON https://en.wikipedia.org/wiki/Pavel_Durov https://www.bbc.com/news/articles/cvglp0xny3eo https://en.wikipedia.org/wiki/Bluesky https://googleprojectzero.blogspot.com/2024/10/from-naptime-to-big-sleep.html https://google.github.io/oss-fuzz/research/llms/target_generation/ https://www.visitacity.com/en/washington-dc/attractions/the-national-cryptologic-museum https://www.youtube.com/watch?v=bRj4ipIEmg0 https://www.msn.com/en-us/entertainment/celebrities/hawk-tuah-girl-haliey-welch-vanishes-after-crypto-scam-accusations-has-not-been-seen-online-for-weeks/ar-AA1waGkW https://support.apple.com/en-us/102637 https://simplex.chat/ https://en.wikipedia.org/wiki/Signal_(software) https://en.wikipedia.org/wiki/Moxie_Marlinspike…

Hacker Talk

1
Cat shaped hardware hacking with Alex Lynd 59:56

2 yearsที่แล้ว59:56

59:56

The hardware hacker, creator of the wifi-nugget, cybersecurity content creator, hak5 host and our guest of honor in this episode of Hacker Talk is Alex Lynd! In this episode, we cover: Alex background, working with hak5, content creation O.MG pentesting cable Signal intelligence Wifi hacking Hardware hacking Modifying the hardware of calculators, playing games on calculators Hacking the texas instrument ti 84 calculator Alex's first computer being the raspberry pi Starting with Linux Embedded security Hardware developer perspective Making hardware devices Making low-cost hacking devices low cost, high availability and effective hacking devices GPS implants ESP8266, 3 dollar wifi microcontroller Wardriving with esp8266 wifi nugget Making cat-shaped hardware Making a friendly and portable hardware design Learning about wifi hacking and microcontrollers USB nugget USB rubber ducky Keystroke injection attacks ATtiny85 Arduino Thought process behind creating the wifi nugget How Filip cracked his neighbors wifi Aircrack-ng Airgeddon Creating a DIY beginner hardware kit The creation of wifi nugget, the first 100 devices SpaceHuhn Maker Wifi Beacon spoofing pranks esp32 vs esp8266 wifi chip Crafting custom packets with the esp8266 chip Espressif Systems trying to stop people from using it's wifi chips for offensive purposes by locking down its software development kit. Spoofing attacks esp32 native USB mode EMulating USB connected devices for data exfiltration Auto trunked packets pmkid wifi attack Cracking wpa2 handshakes Guessing autogenerated wifi passwords Hashcat Password generator based on your local area code The best password-cracking word list Filip has ever used Funny pranks with the wifi nugget Nugget defender, see if anyone is attacking your network use Canary tokens to detect if someone is breaking into your system Bugged microsoft word and pdf documents Having an intrusion detection system in your pocket wifi honeypots Getting started designing custom printed circuit boards(PCB) Design with easyeda Creating a tv-be-gone Sourcing pcb boards Circuit board art What software to use to create boards Antenna design Omni directional antennas Yagi antennas Sourcing hardware Making it more user friendly Links: https://alexlynd.com/ https://mg.lol/blog/omg-cable/ https://github.com/HakCat-Tech/WiFi-Nugget https://education.ti.com/en/products/calculators/graphing-calculators/ti-84-plus https://en.wikipedia.org/wiki/Raspberry_Pi https://hak5.org/ https://en.wikipedia.org/wiki/ESP8266 https://retia.io/ https://twitter.com/AlexLynd https://usbnugget.com / https://shop.hak5.org/products/usb-rubber-ducky https://en.wikipedia.org/wiki/ATmega328 https://en.wikipedia.org/wiki/Arduino_Nano https://www.pcboard.ca/mini-attiny85-usb https://www.arrow.com/en/research-and-events/articles/attiny85-arduino-tutorial https://github.com/derv82/wifite2 https://en.wikipedia.org/wiki/Aircrack-ng https://www.kali.org/tools/airgeddon/ https://github.com/SpacehuhnTech/esp8266_deauther http://deauther.com/ https://spacehuhn.com/ https://ieeexplore.ieee.org/document/4529384/ https://en.wikipedia.org/wiki/ESP32 https://www.espressif.com/ https://documentation.meraki.com/MR/Other_Topics/PMKID_Vulnerability_FAQ_-_WPA%2F%2FWPA2-PSK_and_802.11r https://en.wikipedia.org/wiki/Wi-Fi_Protected_Access https://colab.research.google.com/ https://en.wikipedia.org/wiki/Hashcat https://github.com/danielmiessler/SecLists https://github.com/HakCat-Tech/Nugget-Invader https://canarytokens.org/generate https://easyeda.com/ https://www.pcbway.com/ https://www.kicad.org/ https://en.wikipedia.org/wiki/Nordic_Semiconducto r…

Hacker Talk

1
Darknet Operation Security with Sam Bent Part 1 1:12:07

2 yearsที่แล้ว1:12:07

1:12:07

Sam Bent, previously by his online handle as the Darknet Vendor "2happytimes2" is our Hacker of the episode! In this episode of Hacker Talk we get to hear, how Sam put toghter an Opsec plan that ended up protecting him against a 20 count indetment and 200 years in prison. Thanks to a bruteforce attack in the true hacker spirit he managed to get out of prison. What is it like to apply strong operation security practices in your everyday life? How does one survive and adapt to hostile environments? Join us in this thrill seeking episode of Hacker Talk, where we get to hear Sam's story. In this episode we cover: Darknet Vendor, Darknet Marketplaces Darknet Forum Administrator First Introduction to Tor Silkroad, Early Bitcoin days Bitcoin Pizza for 20 000 Bitcoins Moderating darknet forums Money laundering charges Privacy Journey into selling on the darknet Residential Security Living in Vermont, United States of America Computer support Forming information security policies Backtraq 2(Released March 2007) Yagi antenna, randomizing your mac address before you use your neighbors wifi Removing DNA from packages. Speaking at Defcon Dealing with the Department of Homeland security Social Engineering Operation security Dread Darknet Forum Dealing with Hostile Environments on the darknet and in prison Profiling yourself Importance of Adoptability Managing multiple identities Pretty good privacy(PGP) Trust on the Darknet Resumes on the Darknet Best practices for Password Managers Storing password's in "The Slip", secure convenience security How to ship mail securely Interacting with the united states judicial system Franks hearing Becoming a paralegal in Prison Writing a 200-page passion of release motion Building trust in Online Communities Links: Doingfedtime Youtube channel: https://www.youtube.com/@DoingFedTime Bitcoin talk pizza thread: https://bitcointalk.org/index.php?topic=137.0 https://en.wikipedia.org/wiki/Vermont https://en.wikipedia.org/wiki/BackTrack Sam's defcon talk: https://www.youtube.com/watch?v=NGiUhjuB22Y https://www.16personalities.com/ https://en.wikipedia.org/wiki/Pretty_Good_Privacy https://en.wikipedia.org/wiki/Silk_Road_(marketplace) https://www.shouselaw.com/ca/blog/warrant/what-does-it-mean-to-traverse-a-warrant-what-is-a-franks-motion/ https://forum.defcon.org/node/241998 https://www.darknetstats.com/seasoned-dark-web-vendor-2happytimes2-sentenced-to-5-years-in-prison/…

Hacker Talk

1
Bug Bounty Bootcamp with Vickie lii 38:02

2 yearsที่แล้ว38:02

38:02

Our Hacker of the episode is "Vickie lii"! Vickie tells us about Bug Bounties, her new book and information security. Tune in now! In this episode we cover: Background, getting into security Getting into Bug Bounty First Bug bounty Hackerone, Bug crowd Reporting Security Bugs Coordinating bug bounties Life as a bug bounty hunter Interaction with engineers Bug bounty bootcamp Book Security as a hobby Writing Books How to hack web applications Vickie's favourite types of Vulnerabilities Template injection IDOR Writers block Nostarch Book Publishing Bug bounty tools Python and Bash Make bug bounties more enjoyable Portswinger Lab Finding low hanging fruits legal harbor Caring about security researchers Links: https://twitter.com/vickieli7 https://en.wikipedia.org/wiki/Bug_bounty_program https://vickieli.dev/ https://portswigger.net/web-security/all-labs https://portswigger.net/research/server-side-template-injection https://www.geeksforgeeks.org/insecure-direct-object-reference-idor-vulnerability/ https://nostarch.com/bug-bounty-bootcamp Grab a copy of Vickie's book: https://www.amazon.com/Bug-Bounty-Bootcamp-Reporting-Vulnerabilities-ebook/dp/B08YK368Y3…

Hacker Talk

1
CodeQL with Alvaro Munoz 53:38

2 yearsที่แล้ว53:38

53:38

In this episode of Hacker Talk: One of the most powerful newer static analysis tool is CodeQL. By converting your code base into a Codeql database, you can now write queries in a read-only way, in order to find security vulnerabilities and problems in you Code-base. We wanted to know more about this declarative language called "CodeQL". Straight from Github's Security Lab, we are joined by Alvaro Munoz! Alvaro, is a Security Researcher, Leads a team of researchers that leverage Codeql to find and model vulnerabilities at Github, with a background in research related to finding remote code execution bugs through deserialization. Tune in as we get to hear the ins and out of CodeQL, how to get started, when Codeql was used to find a vulnerability in a public Covid-19 system, how to find vulnerabilities with Codeql and a lot more! Topics covered: Learning to thing outsite the box by playing Capture the flag CodeQL declarative languages Static code analysis Getting a broad view of the source code Writing queries with CodeQL to find vulnerabilities Modeling vulnerabilities with CodeQL The learning curve of CodeQL Quering github repositories for vulnerabilities Write codeql for a large amount of repositories with lgtm(use it goes before it goes EOL) Linters vs codeql CodeQL integrated with continuous integration pipelines Get started with Codeql Submit your codeql queries to Github Security Lab's Bug bounty Best practices for writing queries Thinking of the code as a database with codeql Finding vulnerabilities in Covid-19 systems Best pratices for CodeQL Reduce false possitives CodeQL with nvim(neovim) Improving vim by creating a more interactive development enviroment alternative, "neovim". LSP integration with neovim. CodeQL with Emacs Remote code execution bugs found with CodeQL. Bugs found in Radar Covid App Patterns leading to remote code execution Auditing javascript frameworks CodeQL vs other static analysis tools Capture the flag codeql challanges The future of CodeQL External links: https://lgtm.com/ https://github.com/pwntester https://neovim.io/ https://en.wikipedia.org/wiki/Language_Server_Protocol https://en.wikipedia.org/wiki/Semgrep Covid 19 tracing app - https://securitylab.github.com/research/securing-the-fight-against-covid19-through-oss/ - https://threatpost.com/german-covid-19-contact-tracing-vulnerability-rce/161419/ Github Security Lab web site: https://securitylab.github.com/ Join Github Security Lab Slack Channel: https://join.slack.com/t/ghsecuritylab/shared_invite/zt-120w4vby8-_O9u9k2hPfgbju1tddBPcg https://twitter.com/pwntester Bounty program: https://securitylab.github.com/bounties/ https://codeql.github.com/ https://codeql.github.com/docs/codeql-overview/ http://www.pwntester.com/ https://en.wikipedia.org/wiki/Abstract_syntax_tree https://en.wikipedia.org/wiki/Control_flow_analysis https://github.com/github/codeql-learninglab-actions https://github.com/anticomputer/emacs-codeql/ Special thanks too: We want to give a huge thanks to Github's Security Lab Team for making this episode a reality!…

Hacker Talk

1
SecBSD - The penetration testing distribution for the BSD community | BSDBandit on Hacker Talk 1:02:15

3 yearsที่แล้ว1:02:15

1:02:15

In this episode of Hacker Talk, we are joined by the Hacker and SecBSD contributor: The BSDBandit! Tune is as we deep into secbsd, the penetration distribution for the BSD community. In this episode we cover: Video games Kali linux meets bsd Started to hack in college mandraka linux FreeBSD 4.8 and beyond BSD vs Linux Reading the RFC's IRIX Learn from developer mailing lists OpenBSD's mailing The start of SECBSD - BSD based Penetration testing distribution SecBSD, release cyckle Documentation in the BSD world NetBSD on toasters and sega dreamcast Comparing the BSD's Porting ruby Beef to BSD Web applications as houses Webb application api's Security Penetration testing Management vs Security Researchers and developers The adventures of Hacking and learning The state of Hacking Tinkering with FreeBSD ManPages Unix Powertools book Vi Editor Having fun with Technology People code computers Time allocation and having a good schedule Rust programming Visual code studio Pentesting with Rust Mental health Taking brakes, allocating discord and Internet Relay Chat Libera.chat irc Irssi irc client Phreakers going into VoIP OpenBTS IceCast Future of IT-Security Moving everything to the browser Challenge of the episode: The BSDBandit challenges you to read one man page per day for one year Links: https://en.wikipedia.org/wiki/Mandriva_Linux https://www.freebsd.org/releases/4.8R/announce/ https://secbsd.org https://twitter.com/SecBSD https://rfcs.io/http https://www.rfc-editor.org/rfc/ https://en.wikipedia.org/wiki/IRIX https://en.wikipedia.org/wiki/Sub7 https://marc.info/?l=openbsd-misc&r=1 https://www.openbsd.org/faq/ports/guide.html https://twitter.com/CryptoBanshee_ https://beefproject.com/ https://www.oreilly.com/library/view/unix-power-tools/0596003307/ https://www.amazon.com/UNIX-PowerTools-Jerry-Peek/dp/1565922603 https://en.wikipedia.org/wiki/Vim_(text_editor) https://en.wikipedia.org/wiki/Vi https://twitter.com/bsdbandit https://crates.io/ https://www.rust-lang.org/ https://github.com/bsdbandit https://crates.io/crates/pledge https://en.wikipedia.org/wiki/Ghostscript https://en.wikipedia.org/wiki/Discord https://en.wikipedia.org/wiki/Irssi https://en.wikipedia.org/wiki/2600%3A_The_Hacker_Quarterly https://libera.chat/ https://en.wikipedia.org/wiki/OpenBTS https://icecast.org/…

Hacker Talk

1
Podman with Daniel Walsh 58:25

3 yearsที่แล้ว58:25

58:25

Hacker Talk is back! Stronger than ever with a new episode, in this episode we are all about Podman! Joining us today is Dan Walsh. One of the main people behind Podman! Dan is very knowledgeable in the (oci)container security world. We are super happy to have him on Hacker Talk and hear about Podman. Topics: Podman Podman in action book Dan's journey into Unix and Linux Following Paul cormia to redhat, CEO of redhead Redhat, working on pre-vpn Working on se-linux Container technology Security for openshift Being integrated with docker Oci images and runtimes Fork and exec Security in containers Docker daemon Design behind podman Better security in podman Combining podman with kubernetics Docker Vs systemd Full integration with systemd Buildah, docker build with podman Background story of buildah Overhead in containers Get started with migrating infrastructure to podman Gitlab runners with podman Podman on non-linux systems Docker starting to charge for Windows and Mac Podman desktop gui Linux security Sec-comp Land lock security mitigation in the Linux kernel SE-linux Encrypted virtual machines Intel-sgx with KVM virtual machines Trusting proprietary CPU encrypted environments Encrypted workloads Security at the hardware level Links https://www.manning.com/books/podman-in-action Se-linux Podman Docker https://www.youtube.com/watch?v=MmUwrP791sI Replacing docker with Podman Buildah Docker starts to charge for usage Read Dan's book: https://www.manning.com/books/podman-in-action Find more episodes of Hacker Talk at: https://anchor.fm/hacker-talk Subscribe to Hacker Talk's RSS feed: https://anchor.fm/s/7984c230/podcast/rss…

Hacker Talk

1
Social engineering | Scam calls with Mattias Borg 51:23

3 yearsที่แล้ว51:23

51:23

In this episode of Hacker Talk, we are joined by the social engineer, windows security ninja, hacker and security researcher Mattias Borg. Tune is as we get to hear about scam calls and social engineering! In this episode we cover: Social Engineering Micro-expressions How long can you get with scam calls? Windows Security Best practices Dealing with scam callers Getting more information from scam call center What happens when people fall for scam callers. Educating others Links: The Art of Human Hacking https://en.wikipedia.org/wiki/Christopher_J._Hadnagy https://twitter.com/MattiasBorg82 https://blog.sec-labs.com/ https://www.youtube.com/watch?v=YsznWl0Wc4I https://www.youtube.com/watch?v=1zTsfs4Q6IY For feedback and guest suggestions, email: podcast at firosolutions dot com…

Hacker Talk

1
Vulnhub | G0t mi1k on Hacker Talk 35:40

3 yearsที่แล้ว35:40

35:40

In this episode of Hacker Talk, we are joined by the amazing Hacker, G0t mi1k! G0t mi1k is part of the offensive security team and he also runs the database of vulnerable virtual machines, called Vulnhub. Topics: Background Getting into infosec Becoming a moderator First remote shell Backtrack Offensive security Start and background story of Vulnhub.com Encouraging people to run virtual machines Hoarding data, hosting virtual machine images The start of Exploit-db, milw0rm Curating exploits Running virtual machines with Proxmox home lab and vmwareVMware Best practices for protecting internet facing virtual machines Locking down machines The rise and fall of port knocking Single Packet Authorization Learning security by doing Understanding the entire circle of it security. Exploits in Fail2ban Writing a book as a dyslexic The importance of changing the pace of Life. Taking time away from the Keyboard. Working from home External links: https://en.wikipedia.org/wiki/Proxmox_Virtual_Environment https://www.exploit-db.com/ Single Packet Authorization https://www.vulnhub.com/ https://en.wikipedia.org/wiki/Fail2ban https://en.wikipedia.org/wiki/Port_knocking https://blog.g0tmi1k.com/ https://twitter.com/g0tmi1k https://research.securitum.com/fail2ban-remote-code-execution/…

Hacker Talk

1
Wifi Wardriving with Mike Spicer | d4rkm4tter 48:28

3 yearsที่แล้ว48:28

48:28

Today we are joined by: Mike Spicer, the builder of the Wifi Cactus, someone you can see walking around various security conference with a backpack filled with wireless monitoring goodies :) Mike wanted to see what was really happening on one of the most dangerous wifi networks in the world, this and a lot more in this episode of Hacker Talk. In this episode we cover: Questioning the dangerous assumption How dangerous is Defcon's network really? Dialup internet, warez, Hacking, Tinkering, and programming The movie Hackers from 1995 Wardriving, driving around to find internet, Orinoco gold wireless card WiFi Starting a startup wireless internet service provider company Software-defined radio Hacking Radiofrequency LoRa Helium Lori hardware Things network Lori iot Amazon sidewalk Interconnected devices 900megahertz OpenBTS BladeRF 3g stingrays WiFi Cactus, wifi kraken Wardriving with wireless antennas Pitfalls with airodump Wireless captures Wireless standards, going to WiFi 6 From one box to twelve 25 hak5 pineapples from Darren kitchen Kismet, Andrew dragon(creator of kismet) Intel nuc Live streaming data from the WiFi Cactus WiFi Cactus at Defcamp in Romania Analyzing wardriving from security conferences Pcapinator GitHub Wireshark Mdns, clear text, DNS queries to slack Building your own wardriving device Wireless penetration tests Intel ax220 PCI express WiFi adapter, 30-40 USD, native Linux support Monitoring for wireless de-authentication attacks Deploying kismet for detection with raspberry pi 4 with a 30usd Wireless adapter for starting to monitor their WiFi security Best practices for cracking wpa2 handshakes with hashcat Best security practices for setting up wireless networks Links: https://www.imagine41.com/product/orinoco-gold-wireless-networks-pc-card / https://en.wikipedia.org/wiki/Software-defined_radio https://en.wikipedia.org/wiki/Wardriving https://twitter.com/d4rkm4tter https://github.com/mspicer/pcapinator https://www.wigle.net/ https://en.wikipedia.org/wiki/LoRa https://www.helium.com https://www.kismetwireless.net/ https://www.intel.com/content/www/us/en/products/sku/189347/intel-wifi-6-ax200-gig/specifications.html We would like to give a special thanks to Feedspot for featuring us, we recommend that you check them out: https://blog.feedspot.com/hacker_podcasts/…

Hacker Talk

1
AI-Powered Super Hackers | Steve Phillips Part 2 1:08:46

3 yearsที่แล้ว1:08:46

1:08:46

Welcome back to Hacker Talk! This is part two of our conversation with Steven Phillips Steven is a really interesting developer, hacker and thinker. I personally enjoy reading his blog tryingtobeawesome.com where he covers various parts of programming, philosophy and software. Topics: "Machine Learning" being good or bad Security with machine learning Turning a stop light to a truck Algorithms What type of Artificial intelligence do we need for software James Mickens Generative Pre-trained Transformer 3 Solving bad human code datasets Global code quality How do we write good code? The progress of software how good Structured Query Language is Secure codebase's Pseudorandom Clojure Python Golang Vlang Designing The ethical source movement Code Licenses Internet Privacy End-to-end encryption Podman Browser Extensions Reaching the largest userbase for software Web assembly The onion router | Tor user adoption AI-Powered Super Hackers are a real threat and a lot more on Hacker Talk! Links: https://en.wikipedia.org/wiki/James_Mickens https://en.wikipedia.org/wiki/GPT-3 https://en.wikipedia.org/wiki/SQL https://en.wikipedia.org/wiki/Clojure https://effective.af/ https://firstdonoharm.dev/ https://www.torproject.org/ https://github.com/13o-bbr-bbq/machine_learning_security/tree/master/DeepExploit https://en.wikipedia.org/wiki/Go_(game) View part one here: https://anchor.fm/hacker-talk/episodes/Programmable-Philosophy-with-Steve-Phillips---Part-1-e1ju6b3…

Hacker Talk

1
Scanning the internet with Lucas Lundgren 58:44

3 yearsที่แล้ว58:44

58:44

In this episode of Hacker Talk, we are joined by Lucas Lundgren, is an impressive penetration tester, security researcher, and our Hacker of honor today. Lucas is known for going out on the internet and finding interesting internet-facing protocols, he has found several internet-facing critical infrastructures, prison door systems, medical x-ray file storage servers(Pacs), earthquake systems, and a lot more! In this episode we cover the following topics: Journey into hacking, radio, commodore64, Amiga 500, cracking games Time bomb viruses for Amiga 500 games Finding vulnerabilities, getting invited to conferences to speak at 13 War dialing Amiga 500, phone phreaking with modern Learning lock picking building your own port scanner Scanning the entire internet with Masscan from home with a 10gigabit connection Parsing scan results with elastic search, grep, kibana Mqtt - embedded protocol, finding and opening prison doors with MQTT, Malware with MQTT brokers Opening and closing doors in prisons in the UK Atm's with MQTT Changing oil pipelines pressure with Finding protocols to scan the internet for iscsi Hacking x-ray machines Finding hospitals x-ray records in Pax servers dating back to 1985 Problems with hospitals' x-ray storage servers Reporting security vulnerabilities Editing x-ray pictures, Malware that adds black spots on the pictures and reuploads it. Malware in metadata of the x-ray pictures X-ray malware in the wild Image recognition Making fictional earthquakes Remote code execution on doorbells Hack-rf, software-defined radio Wardriving Hacking radio Iridium Weather satellites Hacking satellites Breaking into a gas pump with wooden straws Physical penetration testing Links: https://github.com/robertdavidgraham/masscan https://en.wikipedia.org/wiki/MQTT https://www.elastic.co/kibana https://en.wikipedia.org/wiki/Picture_archiving_and_communication_system https://www.youtube.com/watch?v=o7qDVZr0t2c https://en.wikipedia.org/wiki/Barnaby_Jack https://www.iridium.com/ https://hack.cysat.eu/ Skullkeysecurity.com https://twitter.com/Acidgen…

Hacker Talk

1
Hackers on Planet Earth with Greg Newby and Mitch Altman 1:05:26

3 yearsที่แล้ว1:05:26

1:05:26

Hackers on Plant Earth - Hope with Mitch Altman and Greg Newby Hackers on Planet Earth(HOPE), is a biannual volunteer-driven hacker conference that got started in 1994. On the hacking and phone phreaking's magazine 2600 10th anniversary. In this episode of Hacker Talk, we are joined by two hackers that are behind the curtain at the HOPE conference. Greg Newby and Mitch Altman are both two impressive Hackers, helping the HOPE conference be the amazing hacking conference it is today. In this episode we cover: How Hope has evolved during the years Greg and Mitch's journey's into the hacking mindset Problems with big pharma and the importance of biohacking HOPE moving location from Hotel Pennsylvania to Saint John's University Hackerspaces exploring technology Phone phreaking Life-changing events at HOPE Demoscene with original hardware from the 1980'ies at HOPE Making 8-bit generated art and music Running a physical hacker conference Hidden gems at HOPE How can you can run your own conference Logistics behind the HOPE conference Links: https://hope.net/ https://petascale.org/ https://en.wikipedia.org/wiki/Mitch_Altman https://2600.com https://archive.org/details/HOPE-3-The_Hacker_s_Code https://en.wikipedia.org/wiki/Demoscene https://en.wikipedia.org/wiki/Hackers_on_Planet_Earth The Hacker Talk team will be at May Contain Hackers which will take place in the Netherlands at the same time as the HOPE conference. Find us for some stickers and Hacker Talk swag!…

Hacker Talk

1
Programmable Philosophy with Steve Phillips - Part 1 1:02:48

3 yearsที่แล้ว1:02:48

1:02:48

Steve Phillips, is an interesting developer, privacy advocate, hacker and thinker. Tune into this episode of Hacker Talk as we are joined by Steve Phillips in this Programmable Philosophy special. In this episode we cover: Steve's journey into technology Being able to build and utilize tools Cypherpunk Privacy, Encryption Philosophy with programming Proving philosophical theories with programming Python, Django Paul gram Putting the technologist first in companies Combining programming with entrepreneurship Going from utilizing one computer core to multithreading Clojure lisp, using all the libraries from lisp and java. Static typing Golang in 2010, From the one-year anniversary to hacker news. Golang's history. go fix - Automatically rewriting code for new API calls and dependencies. Creating software that lasts forever, making it easy for developers to upgrade old versions. Make standards that the code will use to automatically upgrade the old code, and avoid breaking core functionality. Dependency management Long build times V programming language Fast compile times in V and Go. Green threads, go routines. Efficient concurrency with low overhead. Small runtime languages. Designing encrypted protocols, threat models. Use libsodium LeapChat secure chat Securing a large number of people End-to-end encryption with web applications, not trusting the middleman Trusted service workers in modern browsers, preinstall javascript. Detecting malicious new versions of javascript code. Web assembly, practical use-cases for web assembly. Allowing users to run precompiled binaries on any platform in a browser. How Web assembly run's in a very low overhead sandbox. Docker will be replaced by podman How docker is not the silver bullet for security, alternatives to it. Trusted microservices environments. Privilege separation web assembly nano process model No need to trust the libraries that you use. Sandboxing, Electrum apps. Running C++ 20% slower with web assembly. Shopify's and Cloudflare's use of web assembly Nomad, Kubernetes is too complex Docker daemon Links: https://tryingtobeawesome.com https://www.goodreads.com/book/show/16153182-cypherpunks http://www.executablephilosophy.org/ https://en.wikipedia.org/wiki/Paul_Graham_(programmer) https://www.djangoproject.com/ https://clojure.org/guides/learn/sequential_colls https://www.educative.io/answers/what-is-a-goroutine https://vlang.io/ https://www.leapchat.org/ https://doc.libsodium.org/ https://developer.mozilla.org/en-US/docs/Web/API/Service_Worker_API https://webassembly.org/docs/security/ https://www.nomadproject.io/ https://podman.io/…

Hacker Talk

1
Black Hat Python with Tim Arnold and Justin Seitz 1:04:04

3 yearsที่แล้ว1:04:04

1:04:04

This episode is the first time the authors of the book: Black Hat Python. In today's episode of Hacker Talk Justin Seitz and Tim Arnold joins us on the show and we get to hear Tim and Justin stories about Python, Hacking and a lot more! In this episode we cover: Journey into hacking and technology Finding like-minded people, dopamine kicks Infosec community CackalackyCon Issa https://en.wikipedia.org/wiki/Information_Systems_Security_Association Tinkering Python Creating IT-security python courses From Twitter to Nostarch Exploits for Windows 10 and 64bit machines Favorite python libraries, Lxml, requests Syscalls with PyPledge, visualizing packet analysis with scapy Programming, Microsoft basic, PHP, vb6, the future with golang Virtual environments in python Workflow for programming Visual code studio, Microsoft turning good Wingware Wingide with immunity debugger Hunchly's daily dark web report Archive.is to archive .onion sites Onionscan Fresh onions Modern exploit and zeroday writing Ms08067 exploit How to write books Best practices for writing…

ขอต้อนรับสู่ Player FM!

Player FM กำลังหาเว็บ

เปิดฟังกว่า 500+ หัวข้อ

16 subscribers

ที่คล้ายกับ Hacker Talk

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

Amazon Basics Multipurpose Copy Printer Paper, 8.5 x 11 inches, 20 lb, 1 Ream, 500 Sheets, 92 Bright, White

Bounty Quick Size Paper Towels, White, 8 Family Rolls = 20 Regular Rolls (Packaging May Vary)

พอดคาสต์ที่ควรค่าแก่การฟัง

Hacker Talk « » Bug Bounty Bootcamp with Vickie lii

Bug Bounty Bootcamp with Vickie lii

พอดคาสต์ที่ควรค่าแก่การฟัง

ขอต้อนรับสู่ Player FM!

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

MAYBESTA Professional Wireless Lavalier Lapel Microphone for iPhone, iPad - Cordless Omnidirectional Condenser Recording Mic for Interview Video Podcast Vlog YouTube

Amazon Fire TV Stick HD (newest model), free and live TV, Alexa Voice Remote, smart home controls, HD streaming

Amazon Basics Multipurpose Copy Printer Paper, 8.5" x 11", 20 lb, 8 Reams, 4000 Sheets, 92 Bright, White

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

ที่คล้ายกับ Hacker Talk

คู่มืออ้างอิงด่วน

Hacker Talk « »
Bug Bounty Bootcamp with Vickie lii