How to get experience with no experience? Have a look at bug bounty programs. Vickie Li demos Insecure Direct Object References (IDOR) and tells us how to get into bug bounty. We also discuss why her book Bug Bounty Bootcamp is a fantastic book to buy if you want to get into bug bounty. Get real world experience today.

// MENU //
00:00 - In plain text!
00:24 - Introducing//Vickie Li
00:58 - Part 1//The Interview
01:01 - Origin//Bug Bounty Bootcamp
03:37 - What are Bug Bounty Programmes?
05:26 - Part Time Bug Hunting?
05:44 - Easy Way to Get Experience
07:45 - Which Bug Bounty Programmes for Beginners?
10:51 - Beginners//Don't Compete with Pros
13:15 - Duplicates as Valid Experience
14:23 - What You Need to Start
14:59 - Linux//Do You Need It?
15:55 - Automate!//Which Programming Language?
18:03 - Beginner Friendly Vulnerabilities
21:17 - Part 2//Exploiting IDOR Vulnerability Demo
21:24 - What is IDOR?
22:51 - PortSwigger IDOR Lab
24:05 - Live Chat IDOR
24:48 - View transcript
25:12 - Burp Suite Intercept
26:05 - What to Look For//IDs Aren't Always Obvious
26:56 - Burp Suite//Looking Through Headers
27:56 - Burp Suite//Repeater
28:30 - Testing View Transcript Again
29:18 - GET Request//Identifying Exploitable Endpoint
30:26 - Modifying GET Request
31:35 - Finding the right headers to modify
33:47 - Why the first attempt didn't work
34:09 - IRL//What You Would Do
34:23 - Password in Live Chat Transcript
35:40 - How to Prevent IDORs
36:01 - IDORs//Worth Pursuing?
39:57 - Bug Bounties//How to Start
41:21 - Learn More!//Vickie's Blog
41:38 - Follow Vickie's Twitter!
41:52 - Thank You & Closing

// Books //
Bug Bounty Bootcamp: https://amzn.to/3K2YDeJ
The Web Application Hacker's Handbook: https://amzn.to/3IZ2RTr
Hacking API’s by Corey J Ball: https://amzn.to/3JOJG0E 
Alice and Bob learn application security by Tanya Janca: https://amzn.to/3oMyMij
Automate the boring stuff with Python: https://amzn.to/3N2QuYu

// Videos mentioned //
Nahamsec: https://youtu.be/9vaEwycet90
Corey Ball: https://youtu.be/CkVvB5woQRM
Tanya Janca: https://youtu.be/nyhytT2tRN0
Al Sweigart: https://youtu.be/7iBqoc-DzTQ

// Vickie's social media //
Twitter: https://twitter.com/vickieli7
Website: https://vickieli.dev/
YouTube: https://www.youtube.com/channel/UCjQH...
Medium: https://vickieli.medium.com/

// Connect with David //
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
TikTok: http://tiktok.com/@davidbombal
YouTube: https://www.youtube.com/davidbombal 

// Platforms mentioned //
HackerOne: https://www.hackerone.com/
bugcrowd: https://www.bugcrowd.com/
Intigriti: https://www.intigriti.com/
Huntr: https://huntr.dev/

// Connect with Nahamsec //
Twitter: https://twitter.com/nahamsec
YouTube: https://www.youtube.com/c/nahamsec
Github: https://github.com/nahamsec/Resources...
Discord: https://discord.com/invite/ysndAm8
Instagram: https://www.instagram.com/nahamsec/
LinkedIn: https://www.linkedin.com/in/nahamsec/
Twitch: https://www.twitch.tv/nahamsec
Website: https://nahamsec.com/

// MY STUFF //
Monitor: https://amzn.to/3yyF74Y
More stuff: https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.

#python #hack #xss

#401: Bug Bounty bootcamp // Get paid to hack websites like Uber, PayPal, TikTok and more

Big thank you to ThreatLocker for sponsoring my trip to ZTW25 and also for sponsoring this video.  To start your free trial with ThreatLocker please use the following link:  https://www.threatlocker.com/davidbombal

// Danny Jenkin’s SOCIAL //
X:  https://x.com/threatlocker
LinkedIn:    / dannyjenkinscyber  

// David's SOCIAL // 
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal 
YouTube:    / @davidbombal  

// MY STUFF //
 https://www.amazon.com/shop/davidbombal 

// SPONSORS // 
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - Languages the ThreatLocker CEO can code in // Being a CEO that is technical
02:04 - How Danny became CEO // The backstory of Danny Jenkins, CEO & Co-Founder of ThreatLocker
08:37 - Being a technical CEO
10:28 - Having a team that is dedicated
13:23 - The importance of being technical and understanding every department
14:21 - Lessons learnt and advices
17:30 - Long-term vision for ThreatLocker
18:30 - What lead to starting ThreatLocker
19:59 - New releases from ThreatLocker
21:18 - Thoughts on AI // The influence of AI in cyber attacks
24:35 - Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.
  


#496: Left school at 15 ... hacks and creates $$$ Billion dollar Cybersecurity company

Big thank you to ThreatLocker for sponsoring my trip to ZTW25 and also for sponsoring this video.  To start your free trial with ThreatLocker please use the following link:  https://www.threatlocker.com/davidbombal

// GIVE AWAY//
Gerald is giving away 10 seats in the Simply Cyber Academy GRC Analyst Master Class (Value: $149) to 10 lucky David Bombal viewers.  To enter the giveaway go here: https://gleam.io/VVK24/simply-cyber-g...

// DISCOUNT //
To get 10% discount on Simply Cyber Academy GRC Analyst Master Class go here: https://simplycyber.io/grc use the following discount code BOMBAL10 

// Gerald Auger’s SOCIAL //
YouTube:     / @simplycyber  
Website:  https://www.simplycyber.io
X:  https://x.com/gerald_auger
LinkedIn:    / geraldauger  
Discord:  https://simplycyber.io/discord

// Daily Cyber Threat Live Stream REFERENCE //
   / geraldauger  

// David's SOCIAL // 
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal  
YouTube:    / @davidbombal  

// MY STUFF //
https://www.amazon.com/shop/davidbombal 

// SPONSORS // 
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - Coming up
0:53 - What is GRC (Governance, Risk and Compliance)? // GRC explained
04:42 - Businesses taking cyber security more seriously in 2025
07:21 - Is GRC a good career path?
09:58 - Cyber security careers are vast: pick your path
14:49 - Introverts can be successful in GRC
15:47 - GRC for the younger generation // The importance of networking with people
17:57 - Simply Cyber livestreams, live podcasts and discord community
19:17 - How to get started in GRC
20:35 - GRC Analyst Master Class
21:30 - How to get started in GRC (continued)
22:51 - Course giveaway and discount
23:42 - Simply Cyber Daily Cyber Threat Brief
26:51 - Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.

#497: Want to break into Cybersecurity? This is where the most jobs are at!

Big thanks to Radware for sponsoring this video and sharing technical insights with us!

// Radware reports REFERENCE //
Executive Summary: https://davidbombal.wiki/2025threats
2025 Global Threat Analysis Report: https://davidbombal.wiki/2025threatsu...

// Pascal Geenens’ SOCIAL //
LinkedIn:    / geenensp  
Website:  https://www.radware.com/

// Radware SOCIAL //
YouTube:    / radwareinc  
Webinars: https://www.radware.com/newsroom/events/
LinkedIn   / radware  

// David's SOCIAL // 
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal

// MY STUFF //
 https://www.amazon.com/shop/davidbombal 

// SPONSORS // 
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - Coming Up
01:03 - Intro
01:40 - What are the Reports About?
06:59 - Hacktivists (Dark Storm Team)
10:19 - DDos For Hire (Telegram)
13:24 - Check-Host.net
14:27 - Dienet
19:44 - How to Bring Down a Website
21:46 - DNS DDoS Attacks
26:28 - HTTP/2
29:22 - Botnet Capability
31:51 - Noname057
35:09 - Home Routers (TRS-069)
39:05 - Bullet Proof Cloud Services
45:13 - Vulnerable IoT
49:04 - Shodan (IoT Search Engine)
50:07 - Downloading Threats
52:45 - Application Programming Interfaces (APIs)
57:15 - Artificial Intelligence (AI)
01:06:49 - The Fight Against Bad AI
01:08:49 - How to Protect Yourself
01:14:52 - What is Radware?
01:16:00 - The Struggle of Downloading Models
01:20:06 - Should AI Keep your Data?
01:22:01 Connect with Pascal
01:22:36 - Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.


#498: DDoS Attacks (HTTP/2, DNS, Hacktivist) // Real World Technical Analysis

Big thanks to Radware for sponsoring this video and sharing technical insights with us!

David Bombal talks with Michael Geller (Radware) and Tim Sherman (Cisco) about how smart devices like fridges, cars, and cameras are being hijacked for DDoS attacks. They explain Web DDoS, encrypted Layer 7 threats, and how attackers bypass traditional firewalls. The discussion covers IoT botnets, API abuse, 5G core vulnerabilities, and how Cisco and Radware are defending cloud and edge infrastructure.

//  Radware’s SOCIALS //
X:  https://x.com/radware
LinkedIn:    / posts  
Website:  https://www.radware.com/

// Web page REFERENCE //
http://livethreatmap.radware.com
https://www.radware.com/security/ddos...
https://www.radware.com/solutions/web...


// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: https://open.spotify.com/show/3f6k6gE...
SoundCloud:    / davidbombal  
Apple Podcast:  https://podcasts.apple.com/us/podcast...

// MY STUFF //
 https://www.amazon.com/shop/davidbombal 

// SPONSORS // 
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com


Your Firewall Won’t Save You From This
Stop Is Your Car Launching Cyberattacks
Your Home Appliances Weaponized by Cybercriminals
DDoS Just Got Smarter Layer 7 Is Nightmare
How Default Bots Cripple Hospitals and Systems
Electric Cars Under Siege from Smart Devices
Cybersecurity Blind Spot Your Car Is Compromised
The Hidden Threat Everyday Devices Hacked Now 

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#499: Your firewall won't save you from this 😱

Big thank you to Cisco for sponsoring this video and sponsoring my trip to Cisco Live San Diego. 

See how Cisco engineer Kareem Iskander teams up with David Bombal at Cisco Live San Diego 2025 to build a self-healing network in real time. Using the new Model Context Protocol (MCP), Splunk logs, Meraki APIs, and Anthropic Claude, Kareem’s Python code lets an LLM detect configuration drift and automatically revert changes, no manual troubleshooting required.

You will learn:
• What MCP is and how it exposes trusted tools to an LLM
• How Claude reads Splunk, correlates Meraki changes, and repairs configs
• Why two lines of code can spin up an entire MCP server from OpenAPI specs
• Where to find Kareem’s full code on GitHub and his upcoming Cisco U tutorial

// Code //
Get the code here: https://github.com/kiskander/mcp-splu...

//Kareem Iskander SOCIALS // 
LinkedIn:    / kiskander  
X:  https://x.com/kareem_isk
Cisco Blogs:  https://blogs.cisco.com/author/kareem...

// Website REFERENCE //
https://github.com/kiskander/mcp-splu...
https://u.cisco.com/tutorials/enhance...
https://u.cisco.com/tutorials/network...
https://u.cisco.com/tutorials/network...

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
 https://www.amazon.com/shop/davidbombal 

// SPONSORS // 
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com


Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.


#500: MCP Demo using Python, AI and a self healing network (Model Context Protocol)

Big thank you to Cisco for sponsoring this video and sponsoring my trip to Cisco Live San Diego. 

This video features David Bombal and Kyle Winters demonstrating practical
cybersecurity techniques. Kyle walks through how to use Hydra to brute force SSH passwords, explaining the process of leveraging wordlists and optimizing the attack. Following the offensive demonstration, Kyle transitions into defensive measures, showing viewers how to quickly and easily set up an SSH honeypot using Cowrie. The honeypot serves as a decoy to attract and monitor malicious actors attempting to access a network. The demonstration includes setting up the honeypot on an Ubuntu host, configuring IP tables for port redirection, and monitoring logs for incoming connection attempts. The video highlights the importance of understanding both attack methods and defensive strategies in cybersecurity. Kyle also mentions free ethical hacking training resources available through Cisco Networking Academy (netacad.com) and future tutorials on Cisco U (u.cisco.com).

// COMMANDS //
Devices:
client 192.168.1.10
server 192.168.1.11
ubuntu-honeypot 192.168.1.21

Nmap scan:
nmap -sn 192.168.1.0/24

Verify Hydra installed:
hydra -h

Show wordlists:
ls -al /usr/share/wordlists/

Crack with known username:
hydra -l admin -P /usr/share/wordlists/top-passwords-shortlist.txt -t 4 -f ssh://192.168.1.11

Crack with unknown username:
hydra -L /usr/share/wordlists/top-usernames-shortlist.txt -P /usr/share/wordlists/top-passwords-shortlist.txt -t 4 -f ssh://192.168.1.11

Create dir for Cowrie:
mkdir cowrie
cd cowrie/

Clone cowrie:
git clone https://github.com/cowrie/cowrie .

Launch the python virtual environment:
python3 -m venv cowrie-env
source cowrie-env/bin/activate

Install python requirements:
pip install --upgrade pip
pip install -r requirements.txt

Copy and edit the config:
cp etc/cowrie.cfg.dist etc/cowrie.cfg
vi etc/cowrie.cfg

Setup port forwarding for SSH to Cowrie:
sudo iptables -t nat -A PREROUTING -p tcp --dport 22 -j REDIRECT --to-port 2222
sudo iptables-save

Start Cowrie:
bin/cowrie start

Check Cowrie status:
bin/cowrie status

View logs:
tail -f var/log/cowrie/cowrie.log

// Kyle Winter’s SOCIALS //
Socials:    / kyle-m-winters  
Cisco Blogs:  https://blogs.cisco.com/author/kylewi...

// Website REFERENCE //
https://www.netacad.com/courses/ethic...
https://u.cisco.com/

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
 https://www.amazon.com/shop/davidbombal 

// SPONSORS // 
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.



#501: Brute Force SSH & Build a Honeypot Now (Hydra and Cowrie Demo)

Big thank you to DeleteMe for sponsoring this video. Go to http://joindeleteme.com/Bombal to receive a 20% discount.

Discover how attackers exploit enterprise VPNs like Fortinet to gain admin access and compromise networks. In this video, OTW exposes a real authentication bypass exploit, explains the risks of outdated VPN devices, and shares expert tips on Linux, TCPDump, and staying secure. Perfect for cybersecurity pros, penetration testers, and anyone serious about digital defense.

// Occupy The Web SOCIAL // 
X:   / three_cube   
Website:  https://hackers-arise.net/

// Occupy The Web Books // 
Linux Basics for Hackers 2nd Ed
US:  https://amzn.to/3TscpxY
UK:  https://amzn.to/45XaF7j

Linux Basics for Hackers:
US:   https://amzn.to/3wqukgC
UK:   https://amzn.to/43PHFev 

Getting Started Becoming a Master Hacker
US: https://amzn.to/4bmGqX2
UK:   https://amzn.to/43JG2iA 

Network Basics for hackers:
US:  https://amzn.to/3yeYVyb
UK:   https://amzn.to/4aInbGK 

// OTW Discount // 
Use the code BOMBAL to get a 20% discount off anything from OTW's website: https://hackers-arise.net/

// Playlists REFERENCE //
Linux Basics for Hackers:      • Linux for Hackers Tutorial (And Free Courses)  
Mr Robot:     • Hack like Mr Robot // WiFi, Bluetooth and ...  
Hackers Arise / Occupy the Web Hacks:     • Hacking Tools (with demos) that you need t...  

// YouTube video REFERENCE //
Hacking IP Cameras:     • Hacking IP Cameras (CCTV) with Demos and R...  
Are VPNs even safe now?:     • Are VPNs even safe now? Hacker Explains  

// David's SOCIAL // 
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
 https://www.amazon.com/shop/davidbombal 

// SPONSORS // 
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.

#502: Hacker Explains VPN Hacking: ADMIN access without password (real world demo)

David Bombal is joined by Gerald Combs, the creator of Wireshark, and Chris Greer, a well-known Wireshark trainer, for a comprehensive discussion about the past, present, and future of the world’s most popular network protocol analyzer.

They explore how Wireshark was originally created as an open-source alternative to expensive packet sniffers, the evolution from its first release in 1998 (as Ethereal), and the community-driven development that led to over 2,300 contributors worldwide. The video also dives into the transition to the Wireshark Foundation, a nonprofit organization dedicated to supporting the tool and educating users globally.

Topics covered include:
The early days of Wireshark and why it was built
The story behind the name change from Ethereal to Wireshark
How Windows compatibility helped Wireshark go mainstream
The launch of SharkFest and what makes it unique as a community-driven conference
What attendees can expect from SharkFest in the US and Europe, including beginner-friendly tracks, expert sessions, and interactive challenges like 
Packet Doctors
How the Wireshark Foundation supports the community and ensures long-term sustainability
The introduction of the Wireshark Certified Analyst (WCA) certification and what it means for networking and cybersecurity professionals
Real-world use cases for Wireshark in ethical hacking, packet forensics, and cybersecurity training
The announcement of StratoShark, a new open-source companion tool for analyzing system call data and cloud logs with a familiar Wireshark-like interface

Whether you're a network engineer, a cybersecurity professional, a developer, or just curious about how network analysis tools are built and used, this video provides deep technical insights, inspiring backstory, and practical guidance on how to level up your skills.

// Website links REFERENCE // 
https://wireshark.org/certifications 
https://packetschool.teachable.com/?a... 
http://packetpioneer.com/courses 
https://stratoshark.org/ 
https://sharkfest.wireshark.org/ 

 // Chris’ SOCIAL // 
X:  https://x.com/packetpioneer 
YouTube:     / @chrisgreer   
LinkedIn:    / cgreer   

// Gerald Combs SOCIAL // 
LinkedIn:    / geraldcombs   

// David's SOCIAL //  
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF // 
 https://www.amazon.com/shop/davidbombal  

// SPONSORS //  
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com 

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!  

Disclaimer: This video is for educational purposes only.

#503: He CREATED Wireshark - And It Changed Cybersecurity FOREVER

Big thanks to ThreatLocker for sponsoring my trip to Black Hat 2025. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal 

Discover “Chasing Your Tail,” an open-source surveillance detection tool you can build with a Raspberry Pi. In this exclusive Black Hat interview, creator Matt explains how it tracks Wi-Fi, Bluetooth, and even tire sensors to spot if you’re being followed, then flips the script to map where your followers spend time. Learn the origins of this tool, from avoiding surprise visits to protecting informants and aiding search & rescue. We cover the tech stack (Kismet, Python, GPS integration), real-world success stories, and how you can set it up yourself for under $100. Perfect for security pros, privacy
advocates, and tech enthusiasts.

// Matt Edmondson SOCIALS // 
SANS:  https://www.sans.org/profiles/matt-ed... 
LinkedIn:    / matt-edmondson-759aab2b   
X:  https://x.com/matt0177 
Matt’s Block:  https://www.digitalforensicstips.com/ 

// GitHub Code REFERENCE // 
https://github.com/ArgeliusLabs/Chasi... 

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF // 
 https://www.amazon.com/shop/davidbombal  

// SPONSORS //  
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com 

// Menu // 
0:00 - Coming up 
0:35 - Chasing your tail update // How it started 
03:27 - Threatlocker sponsored segment 
03:45 - What's in the box and how it works 
07:37 - "It's basically free to build it" // Components used 
09:20 - What coding language it runs on 
11:25 - Unique network IDs in real life 
12:47 - Tracking MAC addresses 
14:51 - How to know who is tailing you 
15:36 - How the device have helped people 
16:49 - Tracking Bluetooth 
18:23 - Reach out to Matthew Edmondson 
19:04 - Black Hat Arsenal explained 
19:52 - Conclusion 

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!  

Disclaimer: This video is for educational purposes only.

#504: How to Track the People Tracking YOU

To try everything Brilliant has to offer for free for a full 30 days, visit https://brilliant.org/davidbombal or scan the QR code onscreen – You’ll also get 20% off an annual premium subscription 

AI hype meets harsh reality. In this Black Hat interview, David Bombal talks with Gary Marcus (Professor Emeritus of Psychology and Neural Science at New York University, and AI Expert) just minutes after GPT-5’s announcement. Marcus explains why GPT-5 is only a small step forward, the truth about hallucinations, why AI coding agents pose massive cybersecurity risks, and why we may be years away from true AGI. If you want the unfiltered truth about AI progress, safety, and the future of large language models, watch this.

 // Gary Marcus’ SOCIALS // 
X:  https://x.com/garymarcus 
Website:  https://garymarcus.substack.com/ 

// Books REFERENCE // 
Mikko Hypponen:  If it’s smart it’s vulnerable 
US:  https://amzn.to/45Rc9PV 
UK:  https://amzn.to/3V1tJdP 

Gary Marcus’ books: 
The Algebraic Mind 
US: https://amzn.to/4lxsca5 
UK: https://amzn.to/45ASH8C 

Kluge:  The Haphazard evolution of the human mind 
US:  https://amzn.to/3V0gZnE 
UK:  https://amzn.to/4mlzrn0 

Rebooting AI:  Building Artificial Intelligence We Can Trust  
US: https://amzn.to/45RhZRh 
UK: https://amzn.to/4lt7WGC 

Taming Silicon Valley:  How we can ensure AI works for us 
US: https://amzn.to/4mH0Jnk 
UK: https://amzn.to/4oHO5GM 


Guitar Zero:  The science of becoming musical at any age 
US:  https://amzn.to/47uF2Ta 
UK:  https://amzn.to/4oygoYd 

The birth of the mind:  How a tiny number of genes create the complexities of human thought 
US: https://amzn.to/4oBnafB 
UK:  https://amzn.to/3JimD1Y 

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...


// MY STUFF // 
https://www.amazon.com/shop/davidbombal  

// SPONSORS //  
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com 

// MENU // 
0:00 - Coming Up 
01:00 - Intro 
03:30 - Brilliant Ad 
05:16 - Understanding the AI Hype 
07:51 - Are Agents Writing Secure Code? 
10:34 - Vibe Coding 
11:56 - Should Agents Run Everything? 
14:56 - Why do LLMs Hallucinate? 
18:30 - Are AIs Intelligent? 
20:21 - Will LLMs Stop Hallucinating? 
24:50 - AI Security 
29:24 - Will AGI Ever Happen? 
31:48 - The Future of AI 
35:08 - Conclusion 

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!  

Disclaimer: This video is for educational purposes only. 




#505: GPT-5 Just Dropped… And It’s NOT What You Think

Want to learn about IT? Want to get ahead in your career?  Well, this is the right place! 

On this channel, I discuss Python, Ethical Hacking, Networking, Network Automation, CCNA, Virtualization and other IT related topics.
   
This YouTube channel has new videos every week! Subscribe for technical, detailed, no fluff content.

David’s details:
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
Website: http://www.davidbombal.com  
YouTube: https://www.youtube.com/davidbombal 

All the best!
David

#401: Bug Bounty bootcamp // Get paid to hack websites like Uber, PayPal, TikTok and more

David Bombal

Related tracks