David Bombal

Latest Episodes:

#435: Real World Hacking Demo with OTW Jul 10, 2023

Show notes

This is a real world demonstration of the SQL Injection attack used in the recent MOVEit hack. This is real world - not just a simple SQL attack. Big thank you to Juniper Networks for supporting the community and making training free. Go to https://juniper.net/davidbombal to get lots of training and also learn how to get certified for $50 (Associate Level). // Mr Robot Playlist // • Mr Robot // Proof of Concept // Horizon3: https://www.horizon3.ai/moveit-transf... // David's SOCIAL // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: / davidbombal // Occupy The Web social // Twitter: https://twitter.com/three_cube // OTW classes // Hacker's Arise Pro Subscription: https://hackers-arise.com/online-stor... Get 3 year's access to all live courses: https://hackers-arise.com/online-stor... // Occupy The Web books // Linux Basics for Hackers: https://amzn.to/3JlAQXe Getting Started Becoming a Master Hacker: https://amzn.to/3qCQbvh Top Hacking Books you need to read: • Top Hacking Books... // Other books // The Linux Command Line: https://amzn.to/3ihGP3j How Linux Works: https://amzn.to/3qeCHoY The Car Hacker’s Handbook by Craig Smith: https://amzn.to/3pBESSM Hacking Connected Cars by Alissa Knight: https://amzn.to/3dDUZN8 // Occupy The Web Website / Hackers Arise Website // Website: https://www.hackers-arise.com/?afmc=1d OTW Mr Robot series: https://www.hackers-arise.com/mr-robot Want to learn more from Occupy the Web? You can join his classes using these links: Hacker's Arise Pro Subscription" https://hackers-arise.com/online-stor... Get 3 year's access to all live courses: https://hackers-arise.com/online-stor... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 00:00 - Coming Up 00:55 - Juniper Free Training (Sponsored segment) 01:51 - OccupyTheWeb books and new books 03:57 - The MOVEit breach explained 05:20 - Clop website // Companies affected 08:52 - The two different vulnerabilities 10:26 - The truth about SQL Injection 12:21 - Using Shodan 14:05 - Proof of concept of the exploit 16:18 - SQL Injection example 20:35 - MOVEit hack analysis / How it was done 28:57 - CVE-2023-35708 SQL Injection vulnerability explained 30:36 - What is Taiwan Semi-Conductor (TSMC) and why they got hacked 31:01 - SQL Injection hack in the real world 32:45 - OccupyTheWeb online classes 33:46 - Union statement // Stacking queries demo 37:02 - Upcoming OccupyTheWeb courses and classes 39:50 - Conclusion MOVEit sql sql injection hack hacking hacker pegasus cybersecurity Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #hacking #cybersecurity #sql

#434: 2023 Top 3 Tips (Bug Bounty) Jul 10, 2023

Show notes

He made $100K in 2 months from Bug Bounty! Learn from one of the best! Big thanks to Brilliant for sponsoring this video! Get started with a free 30 day trial and 20% discount: https://brilliant.org/DavidBombal Ben (Nahamsec) hacks platforms legally and with their permission! He gives us his top 3 Bug Bounty tips for 2023. // Websites recommended by Ben // * https://hackerone.com * https://www.bugcrowd.com/ * https://picoctf.org/ * https://portswigger.net/web-security * https://www.intigriti.com/ * https://www.hacker101.com/ * https://www.synack.com/ // Ben’s Social // Twitch: https://www.twitch.tv/nahamsec YouTube: / nahamsec Github: https://github.com/nahamsec Instagram: https://www.instagram.com/nahamsec Twitter: https://twitter.com/NahamSec Website: https://nahamsec.com/ // Videos mentioned // Ben's $100K video: • I MADE $100,000 I... Kali Linux Nethunter Android Install in 5 minutes (Rootless): • Kali Linux NetHun... // Youtube channels recommended by Ben// @InsiderPHD: / @insiderphd @FarahHawa: / @farahhawa @STOKFredrik: / @stokfredrik @phd_security: / @phd_security @_JohnHammond: / @_johnhammond @IamJakoby: / @iamjakoby @HackerSploit: / @hackersploit @BugBountyReportsExplained: / @bugbountyreports... // Recommended Books // Atomic Habits by James Clear: https://amzn.to/46D8yDE Hacking API’s by Corey J. Ball: https://amzn.to/3NRTafh Bug Bounty Bootcamp by Vickie Li: https://amzn.to/3JAPZWS The Web Application Hacker’s Handbook 2 by Daffyd Stuttard and Marcus Pinto: https://amzn.to/3XvNmLp // MENU // 00:00 - Coming up 01:00 - Brilliant sponsored segment 02:31 - Making $100K in 2 months with bug bounty 04:43 - Top 3 tips for starting with bug bounty 06:15 - Top 3 technical tips for bug bounty 08:10 - "Don't learn to hack, hack to learn" // Consistency is key 11:32 - Top 3 free learning platforms for bug bounty 12:47 - Top 3 bug bounty platforms 15:08 - Vulnerability Disclosure Programs // How VDPs can open doors to opportunities 19:55 - Top 3 recommended YouTube channels 21:27 - Top 3 recommended books 22:17 - Top 3 technologies to understand 23:45 - Helping others // Twitch, YouTube & Twitter 25:35 - Conclusion // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com xss cross site scripting portswigger ajax jscript javascript xss attack penetration testing ethical hacking bug bounty Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #xss #hack #javascript

#433: Real Talk. Watch and Learn. Jul 03, 2023

Show notes

Watch and learn. So many truths shared in this video. A very big thank you to Cisco for sponsoring my Cisco Live trip and this video. // Fletcher's Social // LinkedIn: https://www.linkedin.com/in/fletcherp... Twitter: https://twitter.com/fletcherprevin Cisco Newsroom: https://newsroom.cisco.com/c/r/newsro... // David's SOCIAL // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: / davidbombal // MENU // 00:00 - I'm unqualified for every job 00:33 - SVP & CIO Fletcher Previn's background 03:24 - "Tech is a difficult job" 04:42 - What does a CIO do? 06:02 - What employers look for when hiring? 07:14 - Dealing with Imposter Syndrome 08:01 - Should I still apply when I don't meet all the requirements? 09:10 - Explaining the Dunning-Kruger effect 09:45 - Moving from a technical role to management 12:52 - Cisco products 13:48 - Directional vision for Cisco's networks 14:52 - Infrastructure 15:58 - Cisco defending against hackers 16:47 - Attack surface of the environment has changed with hybrid work 17:57 - What to expect for the future in tech? 19:00 - Reason why the adoption of AI is slow 19:34 - Mastery of language is the next frontier of AI 19:46 - Ai Infrastructure providers 21:15 - Networking is not dying 22:01 - Advice for your younger-self // Conclusion 22:56 - Conclusion cybersecurity jobs ai python development networking #cybersecurity #networking #ai

#432: Top 3 Cybersecurity Career Tips (from Ex-NSA Hacker) Jun 26, 2023

Show notes

Neal is back and shares his Top 3 Cybersecurity tips! There's also some very important life lessons in this video as Neal shares some life changing information. // Previous Videos // 2022: • Ex-NSA hacker tel... 2021: • Ex-NSA hacker tel... // Connect with Neal // Instagram Personal: https://www.instagram.com/it.junkie/ Instagram Cybersecurity: https://www.instagram.com/cyber.insec... YouTube: / cyberinsecurity LinkedIn: https://www.linkedin.com/in/nealbridges/ Twitter: https://twitter.com/ITJunkie All: https://linktr.ee/cyber_insecurity // Connect with David // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: / davidbombal // MENU // 00:00 - Coming up 01:27 - Neal Bridges' PGA goal // Help support Neal's journey to the PGA 03:06 - The cancer story 18:04 - Neal's top 3 tips in life 26:54 - Top 3 tips for careers 39:47 - The hacked youtube channel story 41:41 - Top 3 tips for careers (continued) 43:26 - You can get hacked 45:13 - Advice to get to higher positions (upcoming) 47:03 - Business acumen // Learn business skills 50:13 - Soft skills // Communication is key 52:43 - "I'm Robert Downey Jr." 55:17 - Technical vs Business // Find the balance 01:00:09 - Neal is back online 01:02:24 - Neal's goal to get to the PGA 01:06:02 - Conclusion nsa nsa hacker nsa hacking ethical hacking hacking ethical hacker Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #hacker #cybersecurity #nsa

#431: Pegasus Spyware: so dangerous that it should be banned? OTW explains... Jun 22, 2023

Show notes

Pegasus is used around the world to hack people's phones. It's extremely dangerous and can be used to control a phone remotely without the user knowing that is running. Big thanks to Brilliant for sponsoring this video! Get started with a free 30 day trial and 20% discount: https://brilliant.org/DavidBombal // Mr Robot Playlist // • Mr Robot // David's SOCIAL // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: / davidbombal // Occupy The Web social // Twitter: https://twitter.com/three_cube // OTW classes // Hacker's Arise Pro Subscription: https://hackers-arise.com/online-stor... Get 3 year's access to all live courses: https://hackers-arise.com/online-stor... // Occupy The Web books // Linux Basics for Hackers: https://amzn.to/3JlAQXe Getting Started Becoming a Master Hacker: https://amzn.to/3qCQbvh Top Hacking Books you need to read: • Top Hacking Books... // Other books // The Linux Command Line: https://amzn.to/3ihGP3j How Linux Works: https://amzn.to/3qeCHoY The Car Hacker’s Handbook by Craig Smith: https://amzn.to/3pBESSM Hacking Connected Cars by Alissa Knight: https://amzn.to/3dDUZN8 // Occupy The Web Website / Hackers Arise Website // Website: https://www.hackers-arise.com/?afmc=1d OTW Mr Robot series: https://www.hackers-arise.com/mr-robot Want to learn more from Occupy the Web? You can join his classes using these links: Hacker's Arise Pro Subscription" https://hackers-arise.com/online-stor... Get 3 year's access to all live courses: https://hackers-arise.com/online-stor... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 00:00 - Intro 00:22 - Brilliant Add 01:59 - OTW Books 03:54 - Pegasus overview 06:54 - Pegasus info 07:40 - Pegasus in use 08:56 - Human rights 09:25 - 0 Day malware 13:33 - Original Pegasus 1 click exploit 14:30 - How it works 16:52 - Remote access 17:48 - Malware links 19:30 - Femtocell 21:01 - Stingray 22:10 - How they work 23:50 - Pegasus 0 click exploit 24:55 - Pegasus malware 25:29 - Human rights 26:51 - ISO/Android vs malware 27:40 - Governments 29:19 - What can we do? 30:35 - Be responsible 32:01 - Governments and malware 32:51 - NSO 35:14 - Privacy 36:03 - Command and control 37:36 - Processes 38:38 - NSO developers 38:53 - Expectations 40:30 - Social engineering 43:04 Eternal blue 44:25 Chrysaor 45:23 Outro thoughts pegasus spyware hacking hacker malware Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #pegasus #iphone #andorid

#430: The Emerging Technologies of AI, Edge and Quantum computing that are important to know about. Jun 15, 2023

Show notes

Our future will not be the same. Today's VPNs and cryptography will be powerless against Quantum Computing. What does the future look like advances in AI and Quantum? A very big thank you to Cisco for sponsoring my Cisco Live trip and this video. In this video I interview Vijoy Pandey about AI and Quantum Computing (and other interesting topics) and the effect of those technologies on our security and future. // Vijoy’s Socials// Twitter: https://twitter.com/vijoy LinkedIn: https://www.linkedin.com/in/vijoy Blogs: https://blogs.cisco.com/author/vijoyp... // MENU // 00:00 - Coming up 00:28 - Intro 00:52 - Emerging Technologies Group 02:21 - AI In Cisco 02:58 - Predictive AI 03:10 - Generative AI 03:38 - How Generative AI is Being Used 08:53 - Will AI Take My Job? 09:30 - AI is a tool 10:06 - Garbage in, Garbage Out 11:01 - Responsible AI 12:12 - How Process to Deal With Responsible AI Needs to Change 13:12 - Responsible AI problems doesn't end it Responsible AI 14:58 - What is new? 16:00 - Problems Faced In Emerging Technologies 16:34 - Panoptica 19:37 - Edge 20:37 - Quantum - What we working on 23:10 - When to expect it 23:35 - Advice to the next generation 24:58 - Outro quantum quantum computing ai artificial intelligence cybersecurity networking hacker hacking hack Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #ai #quantum #hacking

#429: Cybersecurity's BIG Problem. Why it needs to change. Jun 15, 2023

Show notes

Why are hackers winning the ransomware war? A very big thank you to Cisco for sponsoring my Cisco Live trip and this video. In this video I interview Tom Gillis about why hackers are winning and how to protect ourselves against the attacks. Go here for more information about the announcements: https://newsroom.cisco.com Cisco Talos Video: • Is AI the biggest... // Tom's Socials// Twitter: https://twitter.com/_tomgillis LinkedIn: https://www.linkedin.com/in/tomgillis1 Cisco Newsroom: https://newsroom.cisco.com/c/r/newsro... // David's Social // Discord: https://discord.gg/davidbombal Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // MENU // 00:00 - Coming Up 00:39 - Intro 01:03 - How to Win Against Attackers 04:00 - Ransomware Attacks 07:09 - Zero Trust Network Access 15:35 - Cisco Multi-Cloud Defense 19:29 - The Role of A.I 22:10 - Summary 23:20 - Outro cisco cisco firewall cybersecurity networking ai artificial intelligence hacker hacking hack Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #ransomware #cybersecurity #ai

#428: Cybersecurity and Networking just changed! Jun 08, 2023

Show notes

Cybersecurity and Networking just changed with major announcements from Cisco. Cisco have announced new platforms and solutions that integrate AI and native telemetry to stop cyber attacks and better manage networks. This includes the major goal of simplification. A very big thank you to Cisco for sponsoring my Cisco Live trip and this video. In this video I interview Jeetu Patel and Jonathan Davidson about the future of networking and cybersecurity (and the effects of AI on all of us). Go here for more information about the announcements: https://newsroom.cisco.com // Jeetu's Social // Twitter: https://twitter.com/jpatel41 LinkedIn: https://www.linkedin.com/in/jeetupatel //Jonathan's Social // Twitter: https://twitter.com/jonathandavidsn LinkedIn: https://www.linkedin.com/in/jonathand... Videos mentioned: Thousand Eyes: • Go ahead, BLAME t... Cisco AI: • Will ChatGPT take... Cisco Security Products: Video coming soon Jonathan's Book: Voice of IP Fundamentals: https://amzn.to/43wFRpR // David's Social // Discord: https://discord.gg/davidbombal Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // MENU // 00:00 - Coming up 00:27 - Talking with Jonathan Davidson and Jeetu Patel 01:04 - Something big is happening // Cisco Networking Cloud 03:22 - Complex security // Cisco Security Cloud 07:10 - Making things simpler 16:48 - What to expect in the future 20:58 - Where to start 23:03 - How A.I. is changing things 28:10 - Conclusion cisco cisco firewall cybersecurity networking ai artificial intelligence Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #cisco #cybersecurity #ai

#427: I got Pwned ... and so did you! (you're likely in the 12 Billion) Jun 08, 2023

Show notes

Our data is out there! Have I Been Pwned. Yes, and so have you (most likely) because of all the data breaches taking place every day. 12 Billion accounts have been compromised. This is a security nightmare! Check if your data was found in a data breach: E-mail address: https://haveibeenpwned.com/ Password: https://haveibeenpwned.com/Passwords Pwned Websites: https://haveibeenpwned.com/PwnedWebsites // Troy’s SOCIAL // Youtube: / troyhuntdotcom Website: https://www.troyhunt.com/ Website: https://haveibeenpwned.com/ Twitter: https://twitter.com/troyhunt Facebook: https://www.facebook.com/troyahunt LinkedIn: https://www.linkedin.com/in/troyhunt // David's SOCIAL // Discord: https://discord.gg/davidbombal Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com hack hacker hacking infosec information security pwned have i been pwned data breach data leak Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #hack #pentester #hacked

#426: What's the Future of AI in Cybersecurity and Hacking (are we doomed)? Jun 08, 2023

Show notes

Is AI going to end the world? No more jobs in Cybersecurity? Are we going to survive the attacks? Big thanks to Brilliant for sponsoring this video! Get started with a free 30 day trial and 20% discount: https://brilliant.org/DavidBombal // Mr Robot Playlist // • Mr Robot // David's SOCIAL // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: / davidbombal // Occupy The Web social // Twitter: https://twitter.com/three_cube // OTW classes // Hacker's Arise Pro Subscription: https://hackers-arise.com/online-stor... Get 3 year's access to all live courses: https://hackers-arise.com/online-stor... // Occupy The Web books // Linux Basics for Hackers: https://amzn.to/3JlAQXe Getting Started Becoming a Master Hacker: https://amzn.to/3qCQbvh Top Hacking Books you need to read: • Top Hacking Books... // Other books // The Linux Command Line: https://amzn.to/3ihGP3j How Linux Works: https://amzn.to/3qeCHoY The Car Hacker’s Handbook by Craig Smith: https://amzn.to/3pBESSM Hacking Connected Cars by Alissa Knight: https://amzn.to/3dDUZN8 // Occupy The Web Website / Hackers Arise Website // Website: https://www.hackers-arise.com/?afmc=1d OTW Mr Robot series: https://www.hackers-arise.com/mr-robot Want to learn more from Occupy the Web? You can join his classes using these links: Hacker's Arise Pro Subscription" https://hackers-arise.com/online-stor... Get 3 year's access to all live courses: https://hackers-arise.com/online-stor... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 00:00 Coming Up 00:32 Thanks Brilliant! (Sponsor) 02:05 Why this video? 03:35 Cyber Security Future 04:51 AI 06:03 Don't Fall Behind 07:29 ChatGPT 08:47 AI Helps Both Sides 10:14 AI Spear Phishing 14:26 Asking AI Who Is OTW? 16:12 AI Changes And Updates 18:26 Spear Phishing Definition 20:01 Almost Got Scammed By AI 21:31 Data Leaks 21:31 Email Phishing Story 24:33 Snort 25:59 Splunk 27:39 AI Code Problems 28:36 The Truth About AI Jobs 30:25 Tricking The AI 33:54 Generate Generic Code With AI 36:31 The History 40:00 AI VS Human Thinking 41:53 OTW Course 42:10 Pegasus 43:10 Outro ai chatgpt chat gpt gpt4 google bard artificial intelligence hacking ai ai hacking Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #ai #chatgpt #hacking

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected