Reading Mean Comments Tech Edition 2023 shenetworks 2024-02-14 | Reviewing some mean comments from 2023Links - TracketPacer: tracketpacer.com John Hammond: https://jh.live/linksEndingWithAli: https://ali.dev/ & youtube.com/@hak5 Tib3rius: https://linktr.ee/tib3rius Shenetworks: shenet.works
From Roblox to Federal Prison: The PowerSchool Hackers Story shenetworks 2026-04-29 | Full article here: abcnews.com/US/addicted-hacking-young-hacker-historic-breach-speaks-1st/story?id=131855776
Local Backlash: How Data Centers Are Changing America shenetworks 2026-04-01 | 📚 SOURCES & FURTHER READING:Pew Research Center — How Americans View Data Centers (March 2026)pewresearch.org/short-reads/2026/03/12/how-americans-view-data-centers-impact-in-key-areas-from-the-environment-to-jobs404 Media — People Hate Datacenters, Survey Finds404media.co/people-hate-datacenters-survey-findsMIT Technology Review — We Did the Math on AI's Energy Footprinttechnologyreview.com/2025/05/20/1116327/ai-energy-usage-climate-footprint-big-techWall Street Journal — What Happened When Small-Town America Became Data Center USAwsj.com/us-news/what-happened-when-small-town-america-became-data-center-u-s-a-410f25e9404 Media — Researchers Are Hunting America for Hidden Datacenters404media.co/researchers-are-hunting-america-for-hidden-datacentersLawrence Berkeley National Laboratory — U.S. Data Center Energy Usage Report (2024)eta-publications.lbl.gov/sites/default/files/2024-12/lbnl-2024-united-states-data-center-energy-usage-report.pdfThe Conversation — Data Centers Consume Massive Amounts of Watertheconversation.com/data-centers-consume-massive-amounts-of-water-companies-rarely-tell-the-public-exactly-how-much-262901💬 COMMUNITY VOICES:Reddit r/IBEW — How much of our work is building data centers?reddit.com/r/IBEW/comments/1pxodyw/how_much_of_our_work_building_data_centers_andReddit r/Detroit — Detroit Against Data Centers Rallyreddit.com/r/Detroit/comments/1rz13ft/detroit_against_data_centersReddit r/pittsburgh — What's the benefit of having data centers in our communities?reddit.com/r/pittsburgh/comments/1ot1x1k/whats_the_benefit_of_having_data_centers_in_our
Sears Left 3.7 Million Customer Calls & Chats Wide Open — Anyone Could Listen shenetworks 2026-03-25 | Cybersecurity researcher Jeremiah Fowler discovered something alarming: three Sears Home Services databases sitting completely open on the internet — no password, no encryption, nothing. Inside? 3.7 million chat logs, over 1.4 million audio recordings, and transcripts of customer calls stretching back to 2024.Customers thought they were privately chatting with an AI bot named "Samantha" to schedule appliance repairs. Instead, their names, home addresses, phone numbers, and hours-long call recordings were sitting exposed for anyone to find.🔗 Read the full WIRED report: wired.com/story/sears-exposed-ai-chatbot-phone-calls-and-text-chats-to-anyone-on-the-web
This Trivia Game Has a Critical SQL Injection Flaw shenetworks 2026-03-23 | In this walkthrough, I solve the "Super Quick Logic Invitational" challenge from MetaCTF's Flash CTF — a web-based logic/trivia game that's hiding a classic SQL injection vulnerability.This is a great beginner-to-intermediate SQLi challenge showing how UNION-based injection works in a real (simulated) web app.#CTF #SQLInjection #MetaCTF #CyberSecurity #EthicalHacking #WebSecurity #SQLi #CaptureTheFlag
I Sat Down With John Hammond and Asked Him Everything shenetworks 2026-03-18 | I finally got to sit down with John Hammond — one of the most well-known names in cybersecurity on YouTube — for a real, unfiltered conversation about how he got to where he is today.We get into everything: his journey and career at Huntress, his thoughts on AI and where it's taking the cybersecurity world, and the research he's been diving into. Whether you're just getting into the field or you've been in it for years, there's something in this one for you.---🎤 Guest: John Hammond📍 Topics covered:- His career path and role at Huntress- AI's impact on cybersecurity- Cybersecurity research and what's on his radar---If you enjoyed this, drop a like and subscribe to shenetworks for more interviews, CTF walkthroughs, and cybersecurity content! 🙌🔗 Check out John Hammond:youtube.com/@_JohnHammond---#CyberSecurity #JohnHammond #Huntress #AIHacking #EthicalHacking #shenetworks #CyberSecurityInterview #InfoSec #HackingCareer #CTF #CyberSecurityCareers
Bypassing Admin Auth with One Cookie Edit | MetaCTF Admin Portal Walkthrough shenetworks 2026-03-16 | In this video, I walk through the MetaCTF Flash CTF challenge "Admin Portal" — a beginner-friendly web exploitation challenge where all you need to do is tweak one cookie to go from regular user to admin and grab the flag. 🍪No fancy exploits, no code injection — just your browser's built-in DevTools and a little curiosity. Perfect if you're just getting into CTFs!🔐 Challenge: MetaCTF Flash CTF – Admin Portal🗂️ Category: Web Exploitation🟢 Difficulty: BeginnerIf you found this helpful, drop a like and subscribe to shenetworks for more CTF walkthroughs, cybersecurity tips, and hands-on hacking content! 🙌#CTF #MetaCTF #WebExploitation #CyberSecurity #EthicalHacking #shenetworks #CaptureTheFlag #BugBounty #Hacking #DevTools #BeginnerHacking
Why MCP Servers Can Become a Security Nightmare shenetworks 2026-03-04 | MCP servers are becoming a common way to connect AI systems to real tools, APIs, and internal services—but they also introduce security risks that many teams aren’t prepared for.In this video, I break down what MCP servers are, why they’re powerful, and the most common security issues I’m seeing in real-world environments. We’ll look at problems like over-privileged tool access, weak authentication, prompt-driven tool abuse, sensitive data exposure, and the lack of logging and monitoring—and how these issues can quietly turn MCP servers into high-impact security risks.This isn’t a theoretical discussion. The focus is on how these problems show up in practice and what organizations should be thinking about as they integrate AI systems more deeply into production environments.If you’re building, deploying, or securing AI systems—or you just want to understand where the real risks are—this video is for you.🔐 Subscribe for more real-world security content💬 Let me know if you’d like a deeper dive into MCP hardening or real attack paths in a future video
Can you solve this challenge? MetaCTF - Dot-Matrix Destruction Walkthrough shenetworks 2026-03-02 | In this walkthrough, we solve the "Dot Matrix Destruction" challenge from MetaCTF's Flash CTF — a fun web exploitation challenge built around an XXE (XML External Entity) injection vulnerability.We start by analyzing a retro-themed dot matrix printer store website, reverse-engineering how its search API works, and discovering that it accepts raw XML in its POST requests. From there, we craft a classic XXE payload that tricks the vulnerable XML parser into reading /flag.txt off the server's filesystem — and leaking it back to us through an error message.Topics covered:Web recon & reading page source / JavaScriptIntercepting and replaying API requests with Burp (and browser DevTools)XML External Entity (XXE) injection fundamentalsUsing error-based output to exfiltrate dataIf you're learning web security or CTF techniques, XXE is a must-know vulnerability — hope this helps!#CTF #XXE #WebSecurity #MetaCTF #EthicalHacking #PenTesting #CyberSecurity
5 Active Directory Misconfigurations Hackers Exploit First shenetworks 2026-02-25 | Active Directory is one of the most critical—and most commonly misconfigured—parts of enterprise environments.In this video, I break down five Active Directory misconfigurations that attackers routinely exploit during real penetration tests. These issues don’t require zero-days or advanced malware—just default settings, legacy configurations, and missing hardening.Topics covered:- SMB signing not required- Vulnerable ADCS web enrollment- Default machine account quota- Domain Controllers running Print Spooler- Privileged accounts missing from Protected UsersIf you manage or secure Active Directory, this video will help you understand where real risk comes from—and what to fix first.🔐 Subscribe for more offensive security and real-world pentesting insights.
The HPE Networking Instant On AP 27 shenetworks 2024-12-02 | The HPE Networking Instant On AP 27 can withstand being dropped in a bucket of water for up to 30 minutes! Follow HPE Networking Instant On @HPENetworkingInstantOn and click the link to purchase or learn more! #HPENetworkingInstantOn #HPENetworkingInstanOnAP27 #InstantOn #ITInstall #SMB #SmallBusinessOwner #SmallBusiness #WiFi #Network #AccessPoints or #switch LINK: amzn.to/49jS44V
Testing Out the HPE Networking Instant On Access Point AP27 shenetworks 2024-12-02 | LINK: amzn.to/49jS44VCan this HPE Instant On Access Point AP27 stand being fully submerged in water? How will it hold up outdoors? In this video we test the HPE Instant On Access Point AP27's durability, and see how it fairs after being fully submerged in water. This video will also contain the initial set up and mounting. #InstantOn #ITInstall #SMB #SmallBusinessOwner #SmallBusiness #WiFi #Network #AccessPoints
Mastering Microsoft 365 Security: Post-Exploitation with Graph Runner | Part 3 shenetworks 2024-04-16 | //GraphRunner//Github: github.com/dafthack/GraphRunnerBlog: blackhillsinfosec.com/introducing-graphrunnerOverview: youtube.com/watch?v=o29jzC3deS0&t=1695s// Beau Bullock @dafthack //Site: dafthack.comGithub: github.com/dafthackTwitter: twitter.com/dafthackYoutube: youtube.com/@beau_bullock// shenetworks //Site: shenet.worksConclude your learning on Microsoft 365 post-exploitation with our final video, which focuses on pillaging techniques using Graph Runner. Discover how to use various modules to extract valuable information and exploit data across Microsoft 365 services effectively. This tutorial will equip you with advanced skills to assess and enhance your organization’s security posture.
Unlocking Microsoft 365: Post-Exploitation Tactics with Graph Runner | Part 2 shenetworks 2024-04-16 | //GraphRunner//Github: github.com/dafthack/GraphRunnerBlog: blackhillsinfosec.com/introducing-graphrunnerOverview: youtube.com/watch?v=o29jzC3deS0&t=1695s// Beau Bullock @dafthack //Site: dafthack.comGithub: github.com/dafthackTwitter: twitter.com/dafthackYoutube: youtube.com/@beau_bullock// shenetworks //Site: shenet.worksElevate your Microsoft 365 security strategies with Part 2 of our series, where we delve into persistence techniques using Graph Runner. This video explores how to maintain access within Microsoft 365 environments discreetly. Learn to implement sophisticated persistence modules that allow you to stay under the radar while securing footholds. Ideal for security professionals looking to enhance their defensive and offensive capabilities.
Unlocking Microsoft 365: Post-Exploitation Tactics with Graph Runner | Part 1 shenetworks 2024-04-16 | //GraphRunner//Github: github.com/dafthack/GraphRunnerBlog: blackhillsinfosec.com/introducing-graphrunnerOverview: youtube.com/watch?v=o29jzC3deS0&t=1695s// Beau Bullock @dafthack //Site: dafthack.comGithub: github.com/dafthackTwitter: twitter.com/dafthackYoutube: youtube.com/@beau_bullock// shenetworks //Site: shenet.worksKickstart your journey into Microsoft 365 post-exploitation with this introductory tutorial on Graph Runner. In this first video, we cover the essentials: how to download Graph Runner, import it into PowerShell, and authenticate to Microsoft 365 securely. This step-by-step guide ensures you have the foundational skills needed to move onto more advanced techniques.
Reading Mean Comments Tech Edition Part 2 #infosec #comedy #tech #infosec shenetworks 2024-02-27 | ...
Scattered Spider? Back Cat? Lockbit? #cybersecurity #hacking #ransomware #lasvegas shenetworks 2023-09-14 | ...
MGM & Scattered Spider #cybersecurity #hacking #technology #vegas #ransomware shenetworks 2023-09-13 | ...
MGM Casinos is dealing with a cyber attack #cybersecurity #networking #infosec #hacking shenetworks 2023-09-12 | ...
Fact or Fiction? Technical Dive into Zero Days shenetworks 2023-09-07 | This video contains some spoilers.Fact or Fiction? This is a technical deep dive into the book Zero Days authored by Ruth Ware. This is not a review of the book itself, just a look at the technical/hacking components. No hate towards the author! Negativity will be removed. Don't mind the audio, I sped the video up and removed quite a bit.
Ransomware down, extorsion up shenetworks 2023-07-31 | Over the last few years, unencrypted data extorsion has become more common.
Guide to Landing Your First Tech Job shenetworks 2023-07-18 | Answering my most asked questionWritten format:blackhillsinfosec.com/shenetworks-guide-to-landing-your-first-tech-jobList of free learning resources here github.com/shenetworks/Free_Tech_ResourcesKeywords:Support, Lead, Facilitate, Ensure, Maintain, Initiate, Implement, Manage, Coordinate, Improve, Evaluate, Performance, Monitor, Identify, Participate, Deliver, Resolve, Design, Analyze, Increase, Adapt, Review, Develop, Produce, Provide, Revise, Apply, Adhere, Configure, Recommend, Enhance, Execute, Upgrade, Install, Test, Assist, Educate, Efficient, Guide, Approve, Assign, Solve, Create
Network Content missing from YouTube shenetworks 2023-01-16 | Tech content creators have shifted from networking content to security. I try to explain why in this video.
Can Hackers Track Your IP Address? shenetworks 2023-01-05 | Full video on my channel Check out the full explanation
Asking ChatGPT About Hacking shenetworks 2022-12-15 | Trying out ChatGPT, testing its knowledge about hacking and cyber security
Insecure networking protocols: LLMNR shenetworks 2022-12-12 | Check and see if youre running this protocol in your environment
Lazy Admin Walkthrough - TryHackMe shenetworks 2022-11-30 | Join me on twitch for live solving on Twitch twitch.tv/shenetworks
Bounty Hacker Walkthrough -TryHackMe shenetworks 2022-11-17 | Bounty Hacker Walkthrough on TryHackMe Follow on Twitch
Can Hackers Track Your IP Address? shenetworks 2022-10-21 | Discussing if hackers can track your IP and a little history of the internet Further Readingbritannica.com/topic/ARPANET icann.org/resources/pages/allocation-ipv4-rirs-2012-02-25-en arin.net/resources/guide/ipv4/request arin.net/resources/registry/transfers
TryHackMe - Corridor Walk Through shenetworks 2022-10-06 | TryHackMe Corridor Walk Throughgithub.com/shenetworks
Tracking Down Hackers Through a Packet Capture - MetaCTF shenetworks 2022-09-16 | Second video in the MiniCTF series. We analyze a packet capture to find out how the hackers defaced out website.Follow me - beacons.page/shenetworksThis challenge was apart of a Black Hills Information Security miniCTF Look out for the next Mini CTF -Cyber Range - antisyphontraining.com/cyber-rangeBHIS Twitter - twitter.com/BHinfoSecurity
Exploiting a File Upload Vulnerability - MetaCTF shenetworks 2022-09-15 | Follow me - beacons.page/shenetworksThis challenge was apart of a Black Hills Information Security miniCTF Cyber Range - antisyphontraining.com/cyber-rangeBHIS Twitter - twitter.com/BHinfoSecurityBackdoor - gist.github.com/sente/4dbb2b7bdda2647ba80b
Hack with this O.MG Cable - Setup shenetworks 2022-09-14 | *reupload to fix audio issues*Welcome to the O.MG Multipart series.This video is to talk you through the setup of the O.MG cable //Links//Flasher o-mg.github.io/WebFlasherPayloads github.com/hak5/omg-payloadsPurchase shop.hak5.org/products/omg-cableSetup Instructions github.com/O-MG/O.MG_Cable-Firmware/wiki
Unboxing and Setting up the HAK5 WIFI Coconut with M1 Mac shenetworks 2022-09-07 | Dont forget to follow on Twitter and TikTok.Drop questions in the comments and let me know what you want to see next//Links//shop.hak5.org/products/wifi-coconutdocs.hak5.org/wifi-coconut/introduction/introductionhttps://brew.sh/github.com/Homebrew/discussions/discussions/1512
How I Became a Network Engineer at Cisco shenetworks 2022-06-19 | How I Became a Network Engineer at Cisco Follow Me:Twitter: twitter.com/notshenetworksTikTok: tiktok.com/@shenetworksDiscord: discord.gg/uXQ8yWnN8a
