Uploaded March 2021 | Updated September 2026, 2 weeks ago
So many attacks start with a simple booby-trapped document that runs malicious code. Crafty attackers can even customize the payload to bypass endpoint controls! Don’t believe us? Check out this epic cross-over event, where Kilian from SecurityFWD meets with Kody from Null Byte/SecurityFWD to explore how an attacker would build a “malicious” document that bypasses endpoint controls, establishes a C&C channel, and more!
Subscribe to Null Byte: goo.gl/J6wEnH
Kody's Twitter: twitter.com/KodyKinzie
SecurityFWD: youtube.com/securityfwd
Varonis: youtube.com/c/VaronisSystems
Chapters:
0:00 Countdown
0:35 Intro
7:10 What are we doing today?
11:05 Macros and Social Engineering
14:25 Hello World of Macros
16:28 Auto Opening Macro
17:50 Grabbing System Details
20:35 Windows Defender
24:10 Bypassing Windows Defender
28:20 Process Explorer
30:25 Remote Connection
35:10 Send and Receive Data via Post
39:50 What this looks like in Wireshark
43:25 Sending Encrypted Data
51:20 Command and Control
54:40 Popping Calc
56:50 Closing Thoughts
Follow Null Byte on:
Twitter: twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: null-byte.com
Vimeo: vimeo.com/channels/nullbyte
So many attacks start with a simple booby-trapped document that runs malicious code. Crafty attackers can even customize the payload to bypass endpoint controls! Don’t believe us? Check out this epic cross-over event, where Kilian from SecurityFWD meets with Kody from Null Byte/SecurityFWD to explore how an attacker would build a “malicious” document that bypasses endpoint controls, establishes a C&C channel, and more!
Subscribe to Null Byte: goo.gl/J6wEnH
Kody's Twitter: twitter.com/KodyKinzie
SecurityFWD: youtube.com/securityfwd
Varonis: youtube.com/c/VaronisSystems
Chapters:
0:00 Countdown
0:35 Intro
7:10 What are we doing today?
11:05 Macros and Social Engineering
14:25 Hello World of Macros
16:28 Auto Opening Macro
17:50 Grabbing System Details
20:35 Windows Defender
24:10 Bypassing Windows Defender
28:20 Process Explorer
30:25 Remote Connection
35:10 Send and Receive Data via Post
39:50 What this looks like in Wireshark
43:25 Sending Encrypted Data
51:20 Command and Control
54:40 Popping Calc
56:50 Closing Thoughts
Follow Null Byte on:
Twitter: twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: null-byte.com
Vimeo: vimeo.com/channels/nullbyte
![Configure Port Forwarding to Create Internet-Connected Services [Tutorial]](https://i.ytimg.com/vi/fElpxglCfew/mqdefault.jpg "Configure Port Forwarding to Create Internet-Connected Services [Tutorial]
Get Our Premium Ethical Hacking Bundle (90% Off): https://nulb.app/cwlshop
How to Use Port Forwarding to Access Tools & Services Remotely
Full Tutorial: https://nulb.app/x48k8
Subscribe to Null Byte: https://goo.gl/J6wEnH
Michaels Twitter: https://twitter.com/the_Hoid
Cyber Weapons Lab, Episode 189
Many services and tools we cover on Null Byte only run on the local network by default. In this episode of Cyber Weapons Lab, were showing how to configure a router so that you can access those services and tools from the broader internet.
Ports are channels that computers use to communicate with each other. A certain port may be using a certain protocol, like SSH, which is usually assigned to port 22. If youve ever had a Raspberry Pi, and wanted to connect to it from your laptop, then you might have set it up on the local network and SSHed in. Youd pull up a terminal on your laptop, and use something like the local IP and your port, and the login credentials, to gain access to your SSH shell on the Pi.
Now, if youre not on your local network, but you still want to access your Raspberry Pi thats still on your local network, thats where port forwarding comes into play.
Your ISP provides one public IP to the router at your home, and that router is blocking all those ports from coming in and out of your house. Port forwarding is a rule that lets the router know that an incoming port to your public IP needs to be sent to a specific IP on your local network with this particular port. Ports dont have to match, like 9022 coming to public IP, then out to the Pi at port 22. Once set up, you could remotely connect to the Pi from a non-local network.
To learn more, check out the article: https://nulb.app/x48k8
Follow Null Byte on:
Twitter: https://twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: https://null-byte.com
Weekly newsletter: https://eepurl.com/dE3Ovb
Vimeo: https://vimeo.com/channels/nullbyte")
![Set Up a Vulnerable Target Computer with DV-Pi (Damn Vulnerable Pi) [Tutorial]](https://i.ytimg.com/vi/fKOX4InkaGc/mqdefault.jpg "Set Up a Vulnerable Target Computer with DV-Pi (Damn Vulnerable Pi) [Tutorial]
How to Create a Test Hacking Computer with a Raspberry Pi
Full Tutorial: https://nulb.app/x44qa
Subscribe to Null Byte: https://goo.gl/J6wEnH
Kodys Twitter: https://twitter.com/KodyKinzie
Cyber Weapons Lab, Episode 037
Every hacker needs to practice their skills, and finding a vulnerable device can be pretty hit and miss. On this episode of Cyber Weapons Lab, well show you how to turn a Raspberry Pi into a deliberately vulnerable server for all your hacking needs.
Recommended Raspberry Pi Kit: https://amzn.to/2HnqJ5V
To learn more, check out the article: https://nulb.app/x44qa
Follow Null Byte on:
Twitter: https://twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: https://null-byte.com
Weekly newsletter: https://eepurl.com/dE3Ovb
Vimeo: https://vimeo.com/channels/nullbyte")
![Use One-Lin3r to Quickly Generate Reverse Shells, Run Commands & More [Tutorial]](https://i.ytimg.com/vi/fgf6ym3nRjg/mqdefault.jpg "Use One-Lin3r to Quickly Generate Reverse Shells, Run Commands & More [Tutorial]
Get Our Premium Ethical Hacking Bundle (90% Off): https://nulb.app/cwlshop
How to Automate the Generation of Common One-Liners
Full Tutorial: https://nulb.app/x4oke
Subscribe to Null Byte: https://goo.gl/J6wEnH
Nicks Twitter: https://twitter.com/nickgodshall
Cyber Weapons Lab, Episode 167
One-liners are the result of taking multiple lines of code and combining and condensing them into a single executable line that a computer will use as instructions. They can be used for mundane tasks or they can be used by pen-testers, white-hat hackers, cybersecurity specialists, and the like to perform automated hacks, commands, and more. One-Lin3r is a Python tool that acts like a repository for commonly used one-liners, and it currently has almost 200 available to use. Well dig into this tool on this episode of Cyber Weapons Lab using the written Null Byte guide by drd_.
To learn more, check out the article: https://nulb.app/x4oke
Follow Null Byte on:
Twitter: https://twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: https://null-byte.com
Weekly newsletter: https://eepurl.com/dE3Ovb
Vimeo: https://vimeo.com/channels/nullbyte")
![Access Multiple Wi-Fi Adapters Over a Network with Airserv-ng [Tutorial]](https://i.ytimg.com/vi/frS5zRBRdfk/mqdefault.jpg "Access Multiple Wi-Fi Adapters Over a Network with Airserv-ng [Tutorial]
How to Access Multiple Wi-Fi Adapters Over the Internet
Full Tutorial: https://nulb.app/z4k2p
Subscribe to Null Byte: https://goo.gl/J6wEnH
Kodys Twitter: https://twitter.com/KodyKinzie
If youve ever wanted to take a wireless adapter and make it accessible to other computers on the network, todays tool is for you. With Airserv-ng, you can make use of multiple wireless adapters connected to a Raspberry Pi from the convenience of your computer without SSH. Well show you how to use it on this episode of Cyber Weapons Lab.
To learn more, check out the article: https://nulb.app/z4k2p
Follow Null Byte on:
Twitter: https://twitter.com/nullbytewht
Flipboard: https://flip.it/3.Gf_0
Vimeo: https://vimeo.com/channels/nullbyte
Website: https://null-byte.com")
![Create Custom Password Libraries with Wordlister [Tutorial]](https://i.ytimg.com/vi/g6WFAjBtsyI/mqdefault.jpg "Create Custom Password Libraries with Wordlister [Tutorial]
How to Create Your Own Password-Cracking Libraries
Full Tutorial: https://nulb.app/x4s5v
Subscribe to Null Byte: https://goo.gl/J6wEnH
Nicks Twitter: https://twitter.com/nickgodshall
Cyber Weapons Lab, Episode 154
Dictionary attacks are one of the most common and successful forms of brute-forcing attacks around. Today, in this episode of Cyber Weapons Lab, well show you a tool called Wordlister, which allows you to create target-specific word lists for an increased chance of success. Big shoutout to drd_ who wrote the article that this video is based on.
To learn more, check out the article: https://nulb.app/x4s5v
Follow Null Byte on:
Twitter: https://twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: https://null-byte.com
Weekly newsletter: https://eepurl.com/dE3Ovb
Vimeo: https://vimeo.com/channels/nullbyte")
![Intercept LAN Traffic with a Packet Squirrel [Tutorial]](https://i.ytimg.com/vi/h-vSYo-b5ms/mqdefault.jpg "Intercept LAN Traffic with a Packet Squirrel [Tutorial]
Earn $$. Learn What You Need to Get Certified (90% Off): https://nulb.app/cwlshop
How to Use a Packet Squirrel to Capture LAN Traffic
Full Tutorial: https://nulb.app/z5hwp
Subscribe to Null Byte: https://goo.gl/J6wEnH
Kodys Twitter: https://twitter.com/KodyKinzie
Cyber Weapons Lab, Episode 178
A hacker and pentester has many tools in their arsenal. When a hack sometimes requires physical access to a device, one such tool that is particularly handy is the Hak5 Packet Squirrel. On this episode of Cyber Weapons Lab, well show you how a hacker would intercept a targets LAN traffic using the Packet Squirrel.
Packet Squirrel: https://amzn.to/2XfXbiF
Small battery: https://amzn.to/30ioCKK
Larger battery: https://amzn.to/3hUa0Hj
Micro-USB cable: https://amzn.to/34M2mIa
Small flash drive: https://amzn.to/3k1hme0
To learn more, check out the article: https://nulb.app/z5hwp
Follow Null Byte on:
Twitter: https://twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: https://null-byte.com
Weekly newsletter: https://eepurl.com/dE3Ovb
Vimeo: https://vimeo.com/channels/nullbyte")
![Run Graphical X Applications Over SSH [Tutorial]](https://i.ytimg.com/vi/hdXDMIvQuTs/mqdefault.jpg "Run Graphical X Applications Over SSH [Tutorial]
How to Run Any App Remotely Through SSH
Full Tutorial: https://nulb.app/x4mxj
Subscribe to Null Byte: https://goo.gl/J6wEnH
Kodys Twitter: https://twitter.com/KodyKinzie
Cyber Weapons Lab, Episode 128
SSH is one of the easiest ways to interact with a device. However, it has its limitations when it comes to applications that make use of multiple windows.Today, on this episode of Cyber Weapons Lab, well show you how to set up and use a graphical X windows manager to allow the use of multi-window applications over SSH.
To learn more, check out the article: https://nulb.app/x4mxj
Follow Null Byte on:
Twitter: https://twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: https://null-byte.com
Weekly newsletter: https://eepurl.com/dE3Ovb
Vimeo: https://vimeo.com/channels/nullbyte")
![Create a Wi-Fi Backdoor Using Arduino [Tutorial]](https://i.ytimg.com/vi/iFnc9l3NKyo/mqdefault.jpg "Create a Wi-Fi Backdoor Using Arduino [Tutorial]
Hacking with Arduino: Creating a Wi-Fi Backdoor
Full Tutorial: https://nulb.app/x4njg
Subscribe to Null Byte: https://goo.gl/J6wEnH
Kodys Twitter: https://twitter.com/KodyKinzie
Cyber Weapons Lab, Episode 140
Rogue access points mimic trusted APs and grant a hacker access to your network activity. On this episode of Cyber Weapons Lab, well show you how to use Arduino and some low-cost hardware to create one that forces a target machine to connect, creating a backdoor. Preventing such an attack is even easier.
To learn more, check out the article: https://nulb.app/x4njg
Materials needed for this guide:
On Amazon:
- Digispark: https://amzn.to/2RVfuX1
- D1 Mini: https://amzn.to/38HW4LX or https://amzn.to/37xUhsL
- LEDs: https://amzn.to/2O10S7d
- 330-ohm resistor: https://amzn.to/2RXPURr
- Micro-USB cable: https://amzn.to/34M2mIa
On AliExpress:
- Digispark: https://www.aliexpress.com/item/32697283942.html
- D1 Mini: https://s.click.aliexpress.com/e/_sNMi4b or https://www.aliexpress.com/item/32803725174.html
- LEDs: https://s.click.aliexpress.com/e/_sZCFLl
- 330-ohm resistor: https://s.click.aliexpress.com/e/_sXxQvH
- Micro-USB cable: https://s.click.aliexpress.com/e/_sX8eyj
Follow Null Byte on:
Twitter: https://twitter.com/nullbyte
Flipboard: https://flip.it/3.Gf_0
Website: https://null-byte.com
Weekly newsletter: https://eepurl.com/dE3Ovb
Vimeo: https://vimeo.com/channels/nullbyte")
