David Bombal12 Dec 2022

#408: Free Exploit Development Training (beginner and advanced)

It's possible to earn millions of dollars finding zero days and vulnerabilities in software. But, are you prepared to put in the work? Browser Exploitation Introduction: https://youtu.be/bcnV1dbfKcE Introduction to Buffer Overflows: https://youtu.be/DHCuvMfGLSU Modern Windows Kernel Exploitation: https://youtu.be/nauAlHXrkIk Linux Heap Exploitation: https://youtu.be/dMDoC9DlVzA Modern Binary/Patch Diffing: https://youtu.be/8jVOvPG4TjA Crypto and Blockchain Hacks: https://youtu.be/y5JogTgpp-s My apologies for some of the technical issues in this interview. Zoom is a nightmare :( // MENU // 00:00 - Coming up 00:53 - Stephen Sims introduction & Sans course 03:28 - Stephen's YouTube channel // Off By One Security 07:56 - Growing up with computers 08:57 - Getting involved with Sans courses // Impressed by instructors 09:52 - "The Golden Age of Hacking" // Bill Gates changed the game 15:44 - Making money from Zero-Days // Ethical and Unethical methods, zerodium.com & safety tips 32:56 - How to get started 46:53 - Opportunities in Crypto 50:26 - Windows vs. iOS vs. Linux 53:47 - Which programming language to start with 56:22 - Recommended Sans courses 01:02:04 - Recommended CTF programs & events 01:04:06 - Recommended books 01:08:23 - The Vergilius project 01:10:25 - Connect with Stephen Sims 01:12:24 - Conclusion // Stephen's Social // Twitter: https://twitter.com/Steph3nSims YouTube Live: https://www.youtube.com/@OffByOneSecu... YouTube videos: https://www.youtube.com/@OffByOneSecu... E-mail: Stephen(at)deadlisting.com // Stephen's courses // SANS Course sans.org. https://www.sans.org/cyber-security-c... - Advanced exploit development for penetration testers course - Advanced penetration testing, exploit writing, and ethical hacking (GXPN) - ARM Exploit Development // Books discussed // Grey Hat Hacking: https://amzn.to/3B1FeIK Hacking: The art of Exploitation: https://amzn.to/3Us9Uts The Shellcoder’s Handbook: https://amzn.to/3VqUEhY Linkers & Loaders: https://amzn.to/3itqtbe // Websites discussed // Zerodium: https://zerodium.com/ Corelan Cybersecurity Research: https://www.corelan.be/ Fishshell: https://fishshell.com/ Vergilius Project: https://www.vergiliusproject.com/ // David's Social // Discord: https://discord.gg/davidbombal Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube Main Channel: https://www.youtube.com/davidbombal YouTube Tech Channel: https://youtube.com/channel/UCZTIRrEN... YouTube Clips Channel: https://www.youtube.com/channel/UCbY5... YouTube Shorts Channel: https://www.youtube.com/channel/UCEyC... Apple Podcast: https://davidbombal.wiki/applepodcast Spotify Podcast: https://open.spotify.com/show/3f6k6gE... apple ios android samsung exploit exploit development windows linux exploits zero days zero day 0day 1day hack hacking hacker windows kernel windows kernel exploit linux heap linux heap exploit reverse engineering reverse engineer reverse exploit red team red teaming binary diff binary diffing #android #ios #linux

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(500)

#600: This Free Tool Decodes Game Boy ROM From a Photograph

Can you recover working software from a photograph of a microchip? Embedded systems reverse engineer Travis Goodspeed demonstrates how to extract the original Game Boy’s 256-byte boot ROM from a mic...

2 Sep 41min

#599: This Pocket Tool Diagnoses Wi-Fi in 45 Seconds

Your internet speed can look fine while your Wi-Fi is still failing. Packet loss, latency, congested channels, interference and poor configuration can all damage performance, but a normal speed test w...

2 Sep 42min

#598: AI Can’t Understand Intent. That’s a Security Problem

Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.thre...

26 Aug 26min

#597: The Hacking Gadgets You Need to Know

Note: Hak5 did not pay me to make this video. But, I'm marking it as sponsored because Darren was kind enough to give me some cool Hak5 gadgets. Get your own using my link: https://davidbombal.wiki/ge...

24 Aug 42min

#596: This is the Real Cybersecurity Problem

Thank you to Threatlocker for sponsoring my trip to Black Hat so I can interview amazing people. Jen Easterly joins David Bombal to discuss why today’s cybersecurity problem may actually be a softwar...

20 Aug 28min

#595: How to Detect Fake Cell Towers Near You

Big thanks to Proton VPN for sponsoring this video. To sign up for Proton VPN please use the following link https://protonvpn.com/davidbombal and get 70% off. Learn how fake cell towers and Stingray...

18 Aug 1h 2min

#594: How to Protect Your Network From Insecure IoT Devices

Hackers are using overlooked IoT devices such as IP cameras, printers and smart speakers to gain access to networks and spread ransomware. Philip Wylie explains how an outdated IP camera became a ran...

30 Juli 31min

#593: How to pass the CCNA exam (advice from two Cisco instructors)

Two Cisco training veterans break down how to know you are ready for the CCNA exam, what changes in CCNA 2.0, and whether the CCNA is still worth it in 2026. Brian Bays has been teaching official Cis...

25 Juli 36min