Uploaded March 2020 | Updated September 2026, 2 weeks ago
Windows 10 & Firefox Leave Account Passwords Vulnerable
Full Video: https://nulb.app/z4jka
Subscribe to Null Byte: goo.gl/J6wEnH
Nick's Twitter: twitter.com/nickgodshall
Cyber Weapons Lab, Episode 082 (Recut - Partial Episode)
Web browsers like Firefox make it very easy to access one's various account credentials as it saves them for you in a list easily reached from the application's preferences. Unfortunately, Firefox doesn't securely encrypt these site usernames and passwords, leaving them vulnerable to anyone with the know-how to access them.
On today's episode of Cyber Weapons Lab, we'll show you how a hacker or pentester could create a USB Rubber Ducky script with a sneaky payload for Windows 10 that takes a snapshot of a target's password list in Firefox, and then sends it back to them via email.
USB Rubber Ducky available on:
Amazon: amzn.to/38UaGaT
Hak5 Shop: shop.hak5.org/products/usb-rubber-ducky-deluxe
Other useful things you might need:
microSD cards: amzn.to/38VKAEg
SD card adapter: amzn.to/37kSaYi
SD card reader: amzn.to/2HdYjuT
To learn more, check out the article and more in-depth video on our website: https://nulb.app/z4jka
Follow Null Byte on:
Twitter: twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: null-byte.com
Weekly newsletter: eepurl.com/dE3Ovb
Vimeo: vimeo.com/channels/nullbyte
Windows 10 & Firefox Leave Account Passwords Vulnerable
Full Video: https://nulb.app/z4jka
Subscribe to Null Byte: goo.gl/J6wEnH
Nick's Twitter: twitter.com/nickgodshall
Cyber Weapons Lab, Episode 082 (Recut - Partial Episode)
Web browsers like Firefox make it very easy to access one's various account credentials as it saves them for you in a list easily reached from the application's preferences. Unfortunately, Firefox doesn't securely encrypt these site usernames and passwords, leaving them vulnerable to anyone with the know-how to access them.
On today's episode of Cyber Weapons Lab, we'll show you how a hacker or pentester could create a USB Rubber Ducky script with a sneaky payload for Windows 10 that takes a snapshot of a target's password list in Firefox, and then sends it back to them via email.
USB Rubber Ducky available on:
Amazon: amzn.to/38UaGaT
Hak5 Shop: shop.hak5.org/products/usb-rubber-ducky-deluxe
Other useful things you might need:
microSD cards: amzn.to/38VKAEg
SD card adapter: amzn.to/37kSaYi
SD card reader: amzn.to/2HdYjuT
To learn more, check out the article and more in-depth video on our website: https://nulb.app/z4jka
Follow Null Byte on:
Twitter: twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: null-byte.com
Weekly newsletter: eepurl.com/dE3Ovb
Vimeo: vimeo.com/channels/nullbyte
![Create Packets from Scratch with Scapy [Tutorial]](https://i.ytimg.com/vi/yD8qrP8sCDs/mqdefault.jpg "Create Packets from Scratch with Scapy [Tutorial]
How to Create Fake Packets Using a Packet Manipulation Tool
Full Tutorial: http://bit.ly/Scapy
Subscribe to Null Byte: https://goo.gl/J6wEnH
Kodys Twitter: https://twitter.com/KodyKinzie
Being able to infiltrate communications between devices is extremely valuable to a hacker. On this episode of Cyber Weapons Lab, well show you how to create and manipulate packets with a Python tool called Scapy.
This is just a quick example of how a hacker could use Scapy to craft packets that allow them to stay under the radar even when theyre doing things on a network that theyre connected to. Because Scapy allows us to build packets from scratch, it means we can get as creative as we want. If we want to kick someone off the network while not being so obvious it was us, we can simply create fake packets that say that the router is the one kicking them off. We can also run a network scan by simply pretending to be the router sending out ARP requests getting everybody to reply and just sitting back and listening for those replies with Wireshark. Its really easy to use Scapy for a variety of different creative things, and the more you learn about TCP/IP, the more useful it will be for your hacking endeavors.
Follow Null Byte on:
Twitter: https://twitter.com/nullbytewht
Flipboard: https://flip.it/3.Gf_0
Weekly newsletter: https://eepurl.com/dE3Ovb")
![Crack SSH Private Key Passwords with John the Ripper [Tutorial]](https://i.ytimg.com/vi/yhC5Kh5Z_4o/mqdefault.jpg "Crack SSH Private Key Passwords with John the Ripper [Tutorial]
Get Our Premium Ethical Hacking Bundle (90% Off): https://nulb.app/cwlshop
How to Use John the Ripper for Cracking
Full Tutorial: https://nulb.app/x726p
Subscribe to Null Byte: https://goo.gl/J6wEnH
Nicks Twitter: https://twitter.com/nickgodshall
Cyber Weapons Lab, Episode 176
The Secure Shell network protocol, usually used to manage remote machines, is prone to password brute-forcing. Thats why key-based authentication is used when security is paramount since private keys can be encrypted. But nothing is invincible, and these SSH private key passwords can still be cracked. In this episode of Cyber Weapons Lab, well show you how a hacker or pentester would do it.
To learn more, check out the article: https://nulb.app/x726p
Follow Null Byte on:
Twitter: https://twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: https://null-byte.com
Weekly newsletter: https://eepurl.com/dE3Ovb
Vimeo: https://vimeo.com/channels/nullbyte")
![Create a Wi-Fi Controlled Relay Using aRest & NodeMCU [Tutorial]](https://i.ytimg.com/vi/ylKOYohHyvQ/mqdefault.jpg "Create a Wi-Fi Controlled Relay Using aRest & NodeMCU [Tutorial]
How to Power Lights with a NodeMCU & aRest
Full Tutorial: http://bit.ly/WiFiRelay
Subscribe to Null Byte: https://goo.gl/J6wEnH
Kodys Twitter: https://twitter.com/KodyKinzie
Creating an easy to control power relay that operates over WI-Fi sounds much more complicated than it really is. With just a few inexpensive supplies, one can turn a simple ESP8266 and relay into a power switch that can control just about anything over any of your devices. Well show you how to create one of these on this episode of Cyber Weapons Lab.
WiFiRelay.ino: https://raw.githubusercontent.com/skickar/ArduinoTests/master/WiFiRelay.ino
Recommended Products:
- NodeMCU CP2102: https://www.amazon.com/ESP8266-Internet-Development-Wireless-Micropython/dp/B07CB4P2XY/?tag=whtnb-20
- D1 Mini: https://www.amazon.com/Development-MicroPython-Nodemcu-Arduino-Compatible/dp/B07H22CDQ8/?tag=whtnb-20
- Solderless breadboard kit: https://www.amazon.com/UCEC-830-Point-Solderless-Breadboard-400-Point/dp/B01ELGR26I/?tag=whtnb-20
- One-channel relay module: https://www.amazon.com/ARCELI-KY-019-Channel-Module-arduino/dp/B07BVXT1ZK/?tag=whtnb-20
- RGB LED: https://www.amazon.com/WINGONEER-KY-019-Channel-Module-arduino/dp/B01C19ENFK/?tag=whtnb-20
- Micro-USB cable: https://www.amazon.com/AmazonBasics-Male-Micro-Cable-Black/dp/B0711PVX6Z/?tag=whtnb-20
- Resistors: https://www.amazon.com/Elegoo-Values-Resistor-Assortment-Compliant/dp/B072BL2VX1/?tag=whtnb-20
- 5V power supply: https://www.amazon.com/TOOGOO-Breadboard-Supply-Module-Arduino/dp/B0776W2CF4/?tag=whtnb-20
- Power adapter: https://www.amazon.com/Outtag-Switching-Replacement-raspberry-Enclosure/dp/B01M0ISMJ5/?tag=whtnb-20
Follow Null Byte on:
Twitter: https://twitter.com/nullbytewht
Flipboard: https://flip.it/3.Gf_0
Weekly newsletter: https://eepurl.com/dE3Ovb")
![Locate Breached Account Data with H8mail [Tutorial]](https://i.ytimg.com/vi/z8G_vBBHtfA/mqdefault.jpg "Locate Breached Account Data with H8mail [Tutorial]
Access Breached Account Information by Email with H8mail
Full Tutorial: http://bit.ly/H8mail
Subscribe to Null Byte: https://goo.gl/J6wEnH
Kodys Twitter: https://twitter.com/KodyKinzie
Data breaches are serious business when a user makes the common mistake of reusing a password on various accounts across the internet. Today, well show you how to take advantage of this vulnerability with a tool called H8mail on this episode of Cyber Weapons Lab.
Follow Null Byte on:
Twitter: https://twitter.com/nullbytewht
Flipboard: https://flip.it/3.Gf_0
Weekly newsletter: https://eepurl.com/dE3Ovb")
![Google Search Like a Hacker [Tutorial]](https://i.ytimg.com/vi/z8_qz938wFU/mqdefault.jpg "Google Search Like a Hacker [Tutorial]
How to Google Like a Hacker for Files & Target Info
Full Tutorial: https://nulb.app/x4m33
Subscribe to Null Byte: https://goo.gl/J6wEnH
Kodys Twitter: https://twitter.com/KodyKinzie
Google is a great search engine but many people dont understand how it actually works. This is why some searches yield poor results and frustrate those in need of more refined information. Today, well show you how to utilize Google operators to better narrow down the sea of results while searching, on this episode of Cyber Weapons Lab.
To learn more, check out the article: https://nulb.app/x4m33
Follow Null Byte on:
Twitter: https://twitter.com/nullbytewht
Flipboard: https://flip.it/3.Gf_0
Vimeo: https://vimeo.com/channels/nullbyte
Website: https://null-byte.com
Weekly newsletter: https://eepurl.com/dE3Ovb")
![Run the Kali Linux Hacking OS on an Unrooted Android Phone [Tutorial]](https://i.ytimg.com/vi/zFo8okxBKDc/mqdefault.jpg "Run the Kali Linux Hacking OS on an Unrooted Android Phone [Tutorial]
Get Our Premium Ethical Hacking Bundle (90% Off): https://nulb.app/cwlshop
How to Run Kali Linux on any Android Device Without Rooting
Full Tutorial: http://bit.ly/KaliAndroid
Subscribe to Null Byte: https://goo.gl/J6wEnH
Kodys Twitter: https://twitter.com/KodyKinzie
For a beginner, Kali Linux is the best OS to learn simple hacking tools on, but not everyone has access to a machine that can run it. However, with over 2 billion Android smartphones around the world, chances are you already have a device capable of running Kali. Today, well show you how to download and run Kali Linux on any Android device, unrooted, in this episode of Cyber Weapons Lab.
Big shoutout to Distortion on Null Byte who wrote up the written guide that we based this video off of, which you can view here: http://bit.ly/KaliAndroid
While you can use your favorite keyboard for most of the tasks when running Kali on Android, an app like Hackers Keyboard is more helpful. Even better, a Bluetooth keyboard: https://www.amazon.com/dp/B01LYUD84L/?tag=whtnb-20
Were not replacing Android with the Kali operating system, it will be accessible like any other app on Android. To do this, well be installing an SSH client such as JuiceSSH or ConnectBot, then the UserLAnd application that will create and run the Kali filesystems.
Follow Null Byte on:
Twitter: https://twitter.com/nullbytewht
Flipboard: https://flip.it/3.Gf_0
Weekly newsletter: https://eepurl.com/dE3Ovb")
![Run OSINT Investigations on Businesses & CEOs [Tutorial]](https://i.ytimg.com/vi/zWWR3r9slNU/mqdefault.jpg "Run OSINT Investigations on Businesses & CEOs [Tutorial]
How to Spot Fakes & Collect Signatures Through OSINT Investigations
Full Tutorial: https://nulb.app/x4l6p
Subscribe to Null Byte: https://goo.gl/J6wEnH
Kodys Twitter: https://twitter.com/KodyKinzie
Local and state governments usually maintain a plethora of business documentation that is open to the public to search. When accessible online, this can be a treasure trove of open-source information for a hacker to take advantage of. Well show you how to perform a basic OSINT investigation on businesses that can even yield signatures of company officials, on this episode of Cyber Weapons Lab.
To learn more, check out the article: https://nulb.app/x4l6p
Follow Null Byte on:
Twitter: https://twitter.com/nullbytewht
Flipboard: https://flip.it/3.Gf_0
Vimeo: https://vimeo.com/channels/nullbyte
Website: https://null-byte.com
Weekly newsletter: https://eepurl.com/dE3Ovb")
