Using CodeQL to Investigate GraphQL Resolvers LiveUnderflow 2022-12-22 | First time using CodeQL, trying to find an access control bug in a nodeJS application using ApolloServer for GraphQL.My Shop (advertisement): shop.liveoverflow.comCodeQL: codeql.github.comRedEye: github.com/cisagov/RedEyeReported Issue: github.com/cisagov/RedEye/issues/55Chapters:00:00 - Introduction04:20 - The Research Question06:40 - Getting Started CodeQL09:24 - CodeQL for Visual Studio Code12:41 - CodeQL Setup16:55 - Create CodeQL Database20:29 - Running First Query22:26 - AST Viewer28:36 - Create New Query38:36 - ChatGPT Mixes CodeQL with SQL30:28 - First Successful Query - Review Results41:25 - Adding "Mutations" to Query45:05 - Discovering Bug45:56 - Proof of Concept with Burp47:14 - Create Mutation PoC with ChatGPT49:01 - Report Bug50:16 - Conclusion---→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 📄 Info. ]=Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Hacker Reacts to 23andme Data Leak LiveUnderflow 2023-12-06 | Learn Hacking (ad): hextree.ioBuy my font (ad): shop.liveoverflow.com=[ 📄 Info. ]=mattjay's Tweet: twitter.com/mattjay/status/1710370423311888724Main Channel: youtube.com/@LiveOverflow Support LiveOverflow:→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Instagram: instagram.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Twitch: twitch.tv/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflowChapters:00:00 - Intro00:50 - 23andme Data Theft03:44 - 23andme responsibilities?05:33 - Facebook Cambridge Analytica06:40 - Compromised Accounts Paper07:44 - Personal Responsibility10:54 - Outro=[ 📄 P.S. ]=Hack the Planet!
Step by Step Phishing Setup Tutorials are Unethical! LiveUnderflow 2023-11-25 | Learn Hacking (ad): hextree.ioBuy my font (ad): shop.liveoverflow.comThe tweet: twitter.com/LiveOverflow/status/1727697943862403413=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflow Support LiveOverflow:→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Instagram: instagram.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Twitch: twitch.tv/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=Hack the Planet!
Tier List of My Worst Tweets LiveUnderflow 2023-10-10 | Learn Hacking (ad): hextree.ioBuy my font (ad): shop.liveoverflow.comyoutube.com/watch?v=VCwiZ2dh17Qyoutube.com/watch?v=nDiXoeeAMWMChapters:00:00 - Intro01:41 - Tweet Tier List34:44 - Recording Fail35:33 - Thoughts On Social Media Game38:13 - How Much Did I Earn?=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflow Support LiveOverflow:→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Instagram: instagram.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Twitch: twitch.tv/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=Hack the Planet!
Hacking for an Intelligence Agency LiveUnderflow 2023-10-05 | Learn Hacking (ad): hextree.ioBuy my font (ad): shop.liveoverflow.comyoutube.com/watch?v=8C7ouESJyfMAndrew Thompson's Tweet: twitter.com/ImposeCost/status/1698446914935824426Thumbnail "inspiration": https://www.bnd.bund.de/DE/Karriere/Mitarbeiter-Stories/Hacker/hacker_node.htmlCIA Jobs:cia.gov/careers/jobs/cyber-operations-officercia.gov/careers/jobs/technical-researcher cia.gov/careers/jobs/technical-targeting-analystcia.gov/careers/jobs/technical-developer NSA Jobs:apply.intelligencecareers.gov/job-description/1211123 apply.intelligencecareers.gov/job-description/1211121 BND Jobs:web.archive.org/web/20220701233535/bnd.bund.de/SiteGlobals/Forms/Suche/erweiterte_Karrieresuche_Formular.html?queryResultId=null&pageNo=0 web.archive.org/web/20220504074956/bnd.bund.de/SharedDocs/Stellenangebote/DE/Stellenangebote/hD/AS_2022/AS-2022-061.html;jsessionid=C946AF9EA2DDE634A9FA6F8FAAC74832.2_cid377 web.archive.org/web/20220504074954/bnd.bund.de/SharedDocs/Stellenangebote/DE/Stellenangebote/hD/AS_2022/AS-2022-064.html;jsessionid=C946AF9EA2DDE634A9FA6F8FAAC74832.2_cid377 web.archive.org/web/20220831121400/bnd.bund.de/SharedDocs/Stellenangebote/DE/Stellenangebote/hD/AS_2022/AS-2022-103.html Chapters:00:00 - Intro00:47 - What is APT (Advanced Persistent Threat)?02:15 - CIA Jobs - Cyber Operations Officer05:36 - NSA Jobs - Exploitation Analyst06:26 - Do you need to be worried by government hackers?08:40 - BND Jobs - CNE Operator12:02 - Conclusion=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflow Support LiveOverflow:→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Instagram: instagram.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Twitch: twitch.tv/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=Hack the Planet!
LEEROY fällt auf HACKER rein? LiveUnderflow 2023-09-25 | Leeroy failt mal wieder... Aber diesmal trifft ihn keine Schuld. Er ist da leider an jemanden geraten der eine fragwürdige Karriere hat, und ich versuche das mal so objektiv wie ich kann einzuordnen.Learn Hacking (ad): hextree.ioBuy my font (ad): shop.liveoverflow.comQuellen:youtube.com/watch?v=VnAZpQrhqbMHospitalRun:github.com/HospitalRunyoutube.com/watch?v=duLJUpptSiklinkedin.com/posts/jeanpereira00_sicherheitsl%C3%BCcke-in-krankenhaus-software-activity-7055185115584303104-2eZrMotion Advisory: support.apple.com/en-us/HT202868Jean Pereira's Browser Hacking Talk: youtube.com/watch?v=-LMhpBEXLJUbamboo.js Fuzzer: github.com/jean-pereira/bambooCVE-2015-1735: learn.microsoft.com/en-us/security-updates/acknowledgments/2015/acknowledgments2015CVE-2016-1857: support.apple.com/en-us/HT206565CVE-2016-9899: mozilla.org/en-US/security/advisories/mfsa2016-94/#CVE-2016-9899Chrome 115 Memory Corruption: packetstormsecurity.com/files/173722/Google-Chrome-115.0.5790.102-Memory-Corruption.htmlOriginal Report: bugs.chromium.org/p/chromium/issues/detail?id=1326210Besonderen Dank an:David: twitter.com/DaveManouchehriS1r1u5: twitter.com/S1r1u5_https://cscg.de/Chapters:00:00 Intro01:25 Wer ist LiveOverflow?02:55 Part 1: HospitalRun07:15 Part 2: Apple Motion12:57 Part 3: Browser Fuzzing bamboo.js18:47 Part 4: Chrome Exploit28:57 Part 5: Business32:08 Part 6: Finale Worte35:07 Empfehlungen=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflow Support LiveOverflow:→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Instagram: instagram.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Twitch: twitch.tv/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=Hack the Planet!
How to make good HACKING videos LiveUnderflow 2023-09-24 | Learn Hacking (ad): hextree.ioBuy my font (ad): shop.liveoverflow.comJohn Hammond: youtube.com/watch?v=1zGwA1qMGvMGameBoy Hacking: youtube.com/playlist?list=PLniOzp3l9V82onKsktyyKlIenAAUj45Mk=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflow Support LiveOverflow:→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Instagram: instagram.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Twitch: twitch.tv/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=Hack the Planet!
Arm®-based Video LiveUnderflow 2023-09-18 | Learn Hacking (ad): hextree.ioBuy my font (ad): shop.liveoverflow.comLeg Assembly: http://leg-assembly.comAzeria on Twitter: twitter.com/Fox0x01Arm® trademark guidelines: arm.com/company/policies/trademarks/guidelines-trademarksArm® trademark: arm.com/company/policies/trademarks/arm-trademark-list/arm-trademarkChapter:00:00 - Receiving Cease and Desist for arm-assembly.com01:17 - Who is Azeria?02:52 - First Reaction to the C&D03:30 - Domain Trademark Infringement05:48 - Arm® Architecture vs Company06:25 - Is there x86 Trademark?07:30 - Trademark Policies09:20 - Story Conclusion=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflow Support LiveOverflow:→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Instagram: instagram.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Twitch: twitch.tv/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=Hack the Planet!
Remove the video as soon as possible LiveUnderflow 2023-09-14 | Learn Hacking (ad): hextree.ioBuy my font (ad): shop.liveoverflow.comNahamsec's video: youtube.com/watch?v=BTlUEWHRldkNahamsec's tweet: twitter.com/NahamSec/status/1694388639994675568Kerckhoffs's principle: en.wikipedia.org/wiki/Kerckhoffs%27s_principleChapters:00:00 - API Hacking With ChatGPT!01:17 - Nahamsec Tweet and Rapid7's Email03:45 - Is exposing Swagger file a vulnerability?04:49 - Kerckhoffs's principle=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflow Support LiveOverflow:→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Instagram: instagram.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Twitch: twitch.tv/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=Hack the Planet!
Do Hackers Need To Know Algorithms and Data Structures? LiveUnderflow 2023-09-10 | Learn Hacking (ad): hextree.ioBuy my font (ad): shop.liveoverflow.comOriginal Tweet: twitter.com/notSam443/status/1698730584741454144=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflow Support LiveOverflow:→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Instagram: instagram.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Twitch: twitch.tv/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=Hack the Planet!
I Dont Trust Websites! - The Everything API with ChatGPT LiveUnderflow 2023-04-14 | My Shop (advertisement): shop.liveoverflow.comWatch main video: youtube.com/watch?v=Sv5OLj2nVAQGrab the code: github.com/LiveOverflow/everything-api→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflowTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
Talking About my Trash Can and Haircut LiveUnderflow 2023-03-23 | My Shop (advertisement): shop.liveoverflow.com→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflowTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
Attacking VSCode Extension from Browser? - Live Security Research LiveUnderflow 2023-03-11 | My Shop (advertisement): shop.liveoverflow.comSummary Video: youtube.com/watch?v=DFAdG9o0sTw→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflowTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
3D Printer Researching Igus Bearings - Prusa i3 MK3S+ (part 3) LiveUnderflow 2023-03-09 | My Shop (advertisement): shop.liveoverflow.com→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflowTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
3D Printer Assembly X-axis - Prusa i3 MK3S+ (part 2) LiveUnderflow 2023-03-06 | My Shop (advertisement): shop.liveoverflow.com→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflowTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
3D Printer Assembly #ASMR - Prusa i3 MK3S+ (part 1) LiveUnderflow 2023-03-04 | My Shop (advertisement): shop.liveoverflow.com→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflowTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
Analytics from 7 Years on YouTube... LiveUnderflow 2023-01-03 | My Shop (advertisement): shop.liveoverflow.comHow much impact to clickbait thumbnails have on my channel?→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/joinChapters:00:00 - Thumbnails Throughout 7 Years06:52 - First Viewer Spike: MMORPG Bot08:11 - Decline after Spike: PwnAdventure Series08:29 - Largest Spike: Find Hidden Device10:29 - Viewership after Showing Face11:53 - Reason Behind My "Clickbait" Thumbnails13:23 - YouTube Is Not Main Job15:56 - Working as Security Consultant vs. YouTube Ads21:49 - The Future of LiveOverflow=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflowTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
Using joern to Find GraphQL Authorization Issue LiveUnderflow 2022-12-30 | My Shop (advertisement): shop.liveoverflow.comWe explore joern for the first time to write a query that can help us find a GraphQL authorization issue.Using CodeQL to find the same issue: youtube.com/watch?v=VrF1RwnJzBk&list=PLGPckJAmiZCR3BIPhpmOL3l0wC6hBCk6W&index=1Watch the Series: youtube.com/playlist?list=PLGPckJAmiZCR3BIPhpmOL3l0wC6hBCk6Wjoern: joern.ioRedEye Repository: github.com/cisagov/RedEye→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/joinChapters:00:00 - Intro00:31 - Recap: Research with CodeQL01:51 - Setting Up joern07:00 - First Tests with joern15:31 - Realizing We Can Use Regex20:06 - TypeScript vs. Transpiled JavaScript21:25 - decorators in Transpiled JavaScript35:23 - Building the Query37:24 - Outro=[ 📄 Info. ]=Main Channel: youtube.com/@LiveOverflowTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ TikTok: tiktok.com/@liveoverflow_→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
Security Issue Found in US Gov CISA Tool? LiveUnderflow 2022-12-26 | Shop (advertisement): shop.liveoverflow.comWhile looking for an open source app using ApolloServer with GraphQL, we stumbled over RedEye from CISA. After reporting the issue we got a response from the developers.The Report: github.com/cisagov/RedEye/issues/55→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/joinChapters:00:00 - Intro00:23 - Research Question01:33 - CodeQL Query02:48 - Proof of Concept 03:17 - Impact of Issue06:53 - Fix Recommendations08:15 - Discussing Bug Bounty Culture09:42 - Outlook Next Video: joern=[ 📄 Info. ]=Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
ping Vulnerability Patch Analysis (with #ChatGPT) - CVE-2022-23093 LiveUnderflow 2022-12-18 | Shop (advertisement): shop.liveoverflow.comUsing ChatGPT we try to analyse the ping vulnerability known as CVE-2022-23093. Can we figure out how the bug is triggered?→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/joinCVE-2022-23093 Advisory: freebsd.org/security/advisories/FreeBSD-SA-22:15.ping.ascChapters:00:00 - ping CVE-2022-23093 Introduction00:34 - Reading Advisory02:11 - Patch Analysis with ChatGPT03:40 - Talking About ping Threat Model05:15 - Reading (First) Bad Patch Explanation06:50 - Understanding The IP Header08:31 - Missing a Potential Overflow10:22 - ping Response Packet Structure?15:55 - What is oip_header_length?19:07 - How Does Ping Work?20:37 - Discovering Buffer Overflow23:35 - The Fix28:05 - ping Vulnerability Summary31:00 - Exploitability Investigation with ChatGPT37:25 - Outro=[ 📄 Info. ]=Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
Can AI Hack Websites with XSS? #ChatGPT LiveUnderflow 2022-12-08 | My Shop: shop.liveoverflow.comI wanted to see how well AI performs for hacking. Can it solve basic Cross-Site Scripting hacking challenges? XSS Challenges: https://prompt.ml/0→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/joinChapters:00:00 - Intro and Motivation00:36 - prompt.ml Challenge 104:07 - Restart Challenge 106:45 - Solving Challenge 107:08 - prompt.ml Challenge 209:37 - Solving Challenge 2 by Hand18:15 - Giving Up on Challenge 219:20 - prompt.ml Challenge 324:08 - Almost Solving Challenge 325:11 - Solving Challenge 3 by Hand28:28 - Conclusion: Can AI Hack Websites?=[ 📄 Info. ]=Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
The Most Difficult Puzzle Game - Dr. Kobushis Labyrinthine Laboratory LiveUnderflow 2022-12-05 | Do you enjoy retro games, pixel art, chiptune music and difficult puzzles? Checkout Dr. Kobushi's Labyrinthine Laboratory.Support the Indie Game and get it on Steam: store.steampowered.com/app/1829450/Dr_Kobushis_Labyrinthine_Laboratory→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 📄 Info. ]=Main Channel: youtube.com/LiveOverflowTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow=[ 📄 P.S. ]=#liveoverflow
New Details on Commercial Spyware Vendor Variston - Revisiting Firefox Sandbox Escape LiveUnderflow 2022-12-02 | A new blog post from google shines light on a new spyware vendor. It also referenced a firefox sandbox escape which appears to be similar to an exploit I showcased in a pervious video.Firefox Sandbox Escape youtube.com/watch?v=StQ_6juJlZYhttps://blog.google/threat-analysis-group/new-details-on-commercial-spyware-vendor-variston/→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join=[ 📄 Info. ]=Main Channel: youtube.com/LiveOverflowTwitch: twitch.tv/LiveOverflow=[ 🐕 Social ]=→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
A group of Minecraft hackers tried to shoot me into space LiveUnderflow 2022-07-16 | Watch Minecraft:HACKED: youtube.com/playlist?list=PLhixgUqwRTjwvBI-hmbZ2rpkAl4lutnJG→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Simple AFK Treasure Fish Farm Concept for 1.19 Sculk Sensor LiveUnderflow 2022-03-11 | Using the Sculk Sensor as a bobber detector to build a very simple 1.19 AFK treasure fish farm. It's just a quick proof of concept.-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Log4Shell | Bug Bounty Public Service Announcement #shorts LiveUnderflow 2021-12-18 | A quick PSA for the Log4j vulnerability CVE-2021-44228. This goes out to all my bug bounty hunters!Main Video: youtube.com/watch?v=w2F67LbEtnk→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
How To Exploit a Heap Overflow LiveUnderflow 2021-12-17 | Long version with additional context for the sudo research episode 9.Original video: youtube.com/watch?v=c2Qi7traPls→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Thumbnail A/B Test Experiment for CTR LiveUnderflow 2021-09-12 | → Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Talking about File Formats with Ange Corkami Albertini LiveUnderflow 2021-09-10 | → Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
SSRF without impact is NOT a vulnerability LiveUnderflow 2021-09-08 | → Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Why White-box Security Tests are Better! LiveUnderflow 2021-09-06 | → Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Making-of a LiveOverflow YouTube Thumbnail LiveUnderflow 2021-09-04 | → Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Better than Stack Overflow for Development LiveUnderflow 2021-09-02 | The site https://grep.app is sooo much more useful than Stack Overflow.→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
HTTP Desync Attack Explained With Paper LiveUnderflow 2021-08-30 | HTTP/1 Desync: portswigger.net/research/http-desync-attacks-request-smuggling-rebornHTTP/2 Desync: portswigger.net/research/http2→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
my least viewed video :( LiveUnderflow 2021-08-27 | Original Video: youtube.com/watch?v=hRei9xXRAGE→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Stream Turned Into Q&A LiveUnderflow 2021-08-24 | → Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Password Cracking Explained | ReHacked LiveUnderflow 2021-08-21 | Original Video: youtube.com/watch?v=YiRPt4vrSSw→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
The Confusing Concept of Sandbox Domains LiveUnderflow 2021-08-19 | Excerpt From Stream: youtube.com/watch?v=o75PxDp-Zww→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
How to Tell if Your Phone Has Been Hacked | ReHacked LiveUnderflow 2021-08-17 | Original Video: youtube.com/watch?v=2AkE49hZfr4→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Why proofing impact for every XSS is dumb - Bug Bounty Reports LiveUnderflow 2021-08-15 | Excerpt from Stream: youtube.com/watch?v=o75PxDp-Zww→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Escaping from JavaScript Sandbox (AngularJS) LiveUnderflow 2021-08-13 | Excerpt From Stream: youtube.com/watch?v=o75PxDp-ZwwAngularJS Research Playlist: youtube.com/playlist?list=PLhixgUqwRTjwJTIkNopKuGLk3Pm9Ri1sF→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Learning Binary Exploitation in 2021? LiveUnderflow 2021-08-11 | → Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Why advertisement in my videos? (regulations and transparency) LiveUnderflow 2021-08-10 | Original Video: youtube.com/watch?v=KHwVjzWei1c→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Why Dont Use alert(1) for XSS? | Watch Together + Q&A LiveUnderflow 2021-08-09 | Original Video: youtube.com/watch?v=KHwVjzWei1c→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Debugging C Pointer Logic in gdb | Watch Together & Q&A LiveUnderflow 2021-08-06 | Original Video: youtube.com/watch?v=zdzcTh9kUrc→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Beginner Issues when Debugging with gdb + gef or pwndbg, ... LiveUnderflow 2021-08-03 | → Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Lets Talk Phishing! | Watch Together & Q&A LiveUnderflow 2021-07-30 | Original Video: youtube.com/watch?v=NWtm4X6L_Cs→ Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
How To Be a Professional Streamer LiveUnderflow 2021-07-26 | → Twitch Subscription: twitch.tv/products/liveoverflow→ per Video: patreon.com/join/liveoverflow→ per Month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Reading SECRET U.S. Air Force HACKING Document!! LiveUnderflow 2021-07-19 | Reading the "EDGE OF THE ART IN VULNERABILITY RESEARCH" report by the US Air Force.The Document: https://apps.dtic.mil/sti/pdfs/AD1122204.pdf→ Support: liveoverflow.com/support-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
Examining JavaScript Inter-Process Communication in Firefox | Watch Together & Q&A LiveUnderflow 2021-07-15 | Watching the video about the firefox security sandbox and how you can research the IPC.Original Video: youtube.com/watch?v=StQ_6juJlZY→ Support: liveoverflow.com/support-=[ 📄 Info. ]=-Main Channel: youtube.com/LiveOverflowCTFTwitch: twitch.tv/LiveOverflow-=[ 🐕 Social ]=-→ Twitter: twitter.com/LiveOverflow→ Website: liveoverflow.com→ Subreddit: reddit.com/r/LiveOverflow→ Facebook: facebook.com/LiveOverflow-=[ 📄 P.S. ]=-#liveoverflow
