Канал: LiveOverflow

My theory on how the webp 0day was discovered #short

My theory on how the webp 0day was discovered #short

My theory on how the webp 0day was discovered (BLASTPASS)

My theory on how the webp 0day was discovered (BLASTPASS)

Learn Android Hacking! - University Nevada, Las Vegas (2024)

Learn Android Hacking! - University Nevada, Las Vegas (2024)

My Trip to DEF CON & Black Hat

My Trip to DEF CON & Black Hat

Finding The .webp Vulnerability in 8s (Fuzzing with AFL++)

Finding The .webp Vulnerability in 8s (Fuzzing with AFL++)

A Vulnerability to Hack The World - CVE-2023-4863

A Vulnerability to Hack The World - CVE-2023-4863

Reinventing Web Security

Reinventing Web Security

The Circle of Unfixable Security Issues

The Circle of Unfixable Security Issues

Binary Exploitation vs. Web Security

Binary Exploitation vs. Web Security

Hacker Tweets Explained

Hacker Tweets Explained

Zenbleed (CVE-2023-20593)

Zenbleed (CVE-2023-20593)

The Discovery of Zenbleed ft. Tavis Ormandy

The Discovery of Zenbleed ft. Tavis Ormandy

Asking Android Developers About Security at Droidcon Berlin

Asking Android Developers About Security at Droidcon Berlin

Local Root Exploit in HospitalRun Software

Local Root Exploit in HospitalRun Software

Android App Bug Bounty Secrets

Android App Bug Bounty Secrets

Generic HTML Sanitizer Bypass Investigation

Generic HTML Sanitizer Bypass Investigation

Hacking Google Cloud?

Hacking Google Cloud?

Trying to Find a Bug in WordPress

Trying to Find a Bug in WordPress

Authentication Bypass Using Root Array

Authentication Bypass Using Root Array

My YouTube Financials - The Future of LiveOverflow

My YouTube Financials - The Future of LiveOverflow

Defending LLM - Prompt Injection

Defending LLM - Prompt Injection

Accidental LLM Backdoor - Prompt Tricks

Accidental LLM Backdoor - Prompt Tricks

Attacking LLM - Prompt Injection

Attacking LLM - Prompt Injection

Our Future As Hackers Is At Stake!

Our Future As Hackers Is At Stake!

Cyber Security Challenge Germany (2023)

Cyber Security Challenge Germany (2023)

Cybercrime is Not Hacking!

Cybercrime is Not Hacking!

Attacking Language Server JSON RPC

Attacking Language Server JSON RPC

Advanced Teleport Hack (stolen from cheaters)

Advanced Teleport Hack (stolen from cheaters)

VPNs, Proxies and Secure Tunnels Explained (Deepdive)

VPNs, Proxies and Secure Tunnels Explained (Deepdive)

Velocity Exploit on Paper?

Velocity Exploit on Paper?

I’m moving, no videos sorry

I’m moving, no videos sorry

Computer Networking (Deepdive)

Computer Networking (Deepdive)

Revisiting 2b2t Tamed Animal Coordinate Exploit

Revisiting 2b2t Tamed Animal Coordinate Exploit

Pain in your Hand (RSI)?

Pain in your Hand (RSI)?

What is a Protocol? (Deepdive)

What is a Protocol? (Deepdive)

The Future Of Hacking #shorts

The Future Of Hacking #shorts

Google vs. ChatGPT for Hackers #shorts

Google vs. ChatGPT for Hackers #shorts

Can AI Create a Minecraft Hack?

Can AI Create a Minecraft Hack?

Minecraft Reach Hack

Minecraft Reach Hack

Cat Coordinate Exploit 1.19.2

Cat Coordinate Exploit 1.19.2

What is a Server? (Deepdive)

What is a Server? (Deepdive)

Server Griefed and New Beginnings ...

Server Griefed and New Beginnings ...

I Leaked My IP Address!

I Leaked My IP Address!

WorldGuard Bypass

WorldGuard Bypass

The Origin of Cross-Site Scripting (XSS) - Hacker Etymology

The Origin of Cross-Site Scripting (XSS) - Hacker Etymology

The Age of Universal XSS

The Age of Universal XSS

The End Of Humans In Minecraft

The End Of Humans In Minecraft

The Three JavaScript Hacking Legends

The Three JavaScript Hacking Legends

Minecraft Force-OP Exploit!

Minecraft Force-OP Exploit!

How The RIDL CPU Vulnerability Was Found

How The RIDL CPU Vulnerability Was Found

Code Review vs. Dynamic Testing explained with Minecraft

Code Review vs. Dynamic Testing explained with Minecraft

Self-Learning Reverse Engineering in 2022

Self-Learning Reverse Engineering in 2022

The Same Origin Policy - Hacker History

The Same Origin Policy - Hacker History

They Cracked My Server!

They Cracked My Server!

Is Hacking Illegal? A Deeper Look at Hacking Laws

Is Hacking Illegal? A Deeper Look at Hacking Laws

Are Resource Packs Safe?

Are Resource Packs Safe?

The State of log4shell in Minecraft Months Later

The State of log4shell in Minecraft Months Later

Could I Hack into Google Cloud?

Could I Hack into Google Cloud?

Scanning The Internet for Minecraft Servers

Scanning The Internet for Minecraft Servers

Crafting a Minecraft 0day...

Crafting a Minecraft 0day...

Flying Without Elytra

Flying Without Elytra

Modding is Hacking...

Modding is Hacking...

Awkward VLOG at Nullcon Berlin 2022

Awkward VLOG at Nullcon Berlin 2022

Minecraft, But It's Reverse Engineered...

Minecraft, But It's Reverse Engineered...

Breaching Security of Palais des Congrès (in Minecraft) #shorts

Breaching Security of Palais des Congrès (in Minecraft) #shorts

I Spent 100 Days Hacking Minecraft

I Spent 100 Days Hacking Minecraft

I've been Hacking for 10 Years! (Stripe CTF Speedrun)

I've been Hacking for 10 Years! (Stripe CTF Speedrun)

Missing HTTP Security Headers - Bug Bounty Tips

Missing HTTP Security Headers - Bug Bounty Tips

Finding 0day in Apache APISIX During CTF (CVE-2022-24112)

Finding 0day in Apache APISIX During CTF (CVE-2022-24112)

Exploiting Java Tomcat With a Crazy JSP Web Shell - Real World CTF 2022

Exploiting Java Tomcat With a Crazy JSP Web Shell - Real World CTF 2022

Sudo Exploit for (old) Ubuntu 20.04 LTS

Sudo Exploit for (old) Ubuntu 20.04 LTS

Fuzzing Java to Find Log4j Vulnerability - CVE-2021-45046

Fuzzing Java to Find Log4j Vulnerability - CVE-2021-45046

Debugging The Failing sudoedit Exploit | Ep.16

Debugging The Failing sudoedit Exploit | Ep.16

Creating The First (Failed) Sudoedit Exploit | Ep. 15

Creating The First (Failed) Sudoedit Exploit | Ep. 15

Learning about nss (Linux Name Service Switch) During Sudo Exploitation | Ep. 14

Learning about nss (Linux Name Service Switch) During Sudo Exploitation | Ep. 14

Log4j Lookups in Depth // Log4Shell CVE-2021-44228 - Part 2

Log4j Lookups in Depth // Log4Shell CVE-2021-44228 - Part 2

Log4j Vulnerability (Log4Shell) Explained // CVE-2021-44228

Log4j Vulnerability (Log4Shell) Explained // CVE-2021-44228

Can We Find a New Exploit Strategy? | Ep. 13

Can We Find a New Exploit Strategy? | Ep. 13

Authorization vs. Authentication (Google Bug Bounty)

Authorization vs. Authentication (Google Bug Bounty)

Developing GDB Extension for Heap Exploitation | Ep. 12

Developing GDB Extension for Heap Exploitation | Ep. 12

Every Computer Can Be Hacked!

Every Computer Can Be Hacked!

Design Flaw in Security Product - ALLES! CTF 2021

Design Flaw in Security Product - ALLES! CTF 2021

Fuzzing Heap Layout to Overflow Function Pointers | Ep. 11

Fuzzing Heap Layout to Overflow Function Pointers | Ep. 11

Video Essay about the Security Creator Scene

Video Essay about the Security Creator Scene

Did you really find a vulnerability in Google? - ft. @PwnFunction

Did you really find a vulnerability in Google? - ft. @PwnFunction

Developing a Tool to Find Function Pointers on The Heap | Ep. 10

Developing a Tool to Find Function Pointers on The Heap | Ep. 10

What Ethereum Smart Contract Hacking Looks Like

What Ethereum Smart Contract Hacking Looks Like

Discussing Heap Exploit Strategies for sudo - Ep. 09

Discussing Heap Exploit Strategies for sudo - Ep. 09

"Controversial Security" // BSides Berlin 2021

"Controversial Security" // BSides Berlin 2021

using z3 to reverse a custom hash during a CTF be like #shorts

using z3 to reverse a custom hash during a CTF be like #shorts

can you hack this screenshot service?? - CSCG 2021

can you hack this screenshot service?? - CSCG 2021

C Code Review - Reaching Vulnerable Code in sudo | Ep. 08

C Code Review - Reaching Vulnerable Code in sudo | Ep. 08

DO NOT USE alert(1) for XSS

DO NOT USE alert(1) for XSS

Understanding C Pointer Magic Arithmetic | Ep. 07

Understanding C Pointer Magic Arithmetic | Ep. 07

Crazy Steam Phishing Page

Crazy Steam Phishing Page

What is a Browser Security Sandbox?! (Learn to Hack Firefox)

What is a Browser Security Sandbox?! (Learn to Hack Firefox)

Root Cause Analysis With AddressSanitizer (ASan) | Ep. 06

Root Cause Analysis With AddressSanitizer (ASan) | Ep. 06

Found a Crash Through Fuzzing? Minimize AFL Testcases! | Ep. 05

Found a Crash Through Fuzzing? Minimize AFL Testcases! | Ep. 05

Understand Security Risk vs. Security Vulnerability!

Understand Security Risk vs. Security Vulnerability!

Finding Buffer Overflow with Fuzzing | Ep. 04

Finding Buffer Overflow with Fuzzing | Ep. 04

Hacker Culture Meritocracy?

Hacker Culture Meritocracy?

Troubleshooting AFL Fuzzing Problems | Ep. 03

Troubleshooting AFL Fuzzing Problems | Ep. 03

Pentesting vs. Bug Bounty vs. Pentesting ???

Pentesting vs. Bug Bounty vs. Pentesting ???

How Fuzzing with AFL works! | Ep. 02

How Fuzzing with AFL works! | Ep. 02

Why Pick sudo as Research Target? | Ep. 01

Why Pick sudo as Research Target? | Ep. 01

How SUDO on Linux was HACKED! // CVE-2021-3156

How SUDO on Linux was HACKED! // CVE-2021-3156

How To Protect Your Linux Server From Hackers!

How To Protect Your Linux Server From Hackers!

I made every video I ever wanted to make

I made every video I ever wanted to make

New Challenges Released for CSCG 2021 (including mine) #shorts

New Challenges Released for CSCG 2021 (including mine) #shorts

Security YouTuber Drama...

Security YouTuber Drama...

Hacking into Google's Network for $133,337

Hacking into Google's Network for $133,337

Start of Cyber Security Challenge Germany 2021 #shorts

Start of Cyber Security Challenge Germany 2021 #shorts

Format String Exploit Troubleshooting Over Twitter - bin 0x11 b

Format String Exploit Troubleshooting Over Twitter - bin 0x11 b

How CPUs Access Hardware - Another SerenityOS Exploit

How CPUs Access Hardware - Another SerenityOS Exploit

Does Hacking Require Programming Skills?

Does Hacking Require Programming Skills?

Reading Kernel Source Code - Analysis of an Exploit

Reading Kernel Source Code - Analysis of an Exploit

Kernel Root Exploit via a ptrace() and execve() Race Condition

Kernel Root Exploit via a ptrace() and execve() Race Condition

Only Cybersecurity Career Advice You Need

Only Cybersecurity Career Advice You Need

My Life in Short/Shirt Stories - The Time I Learned PenSpinning (~2007-2009) - Shirt Stories #1

My Life in Short/Shirt Stories - The Time I Learned PenSpinning (~2007-2009) - Shirt Stories #1

Solving Nintendo HireMe!!! with "Basic" Math

Solving Nintendo HireMe!!! with "Basic" Math

Nintendo Hire me!!!!!!!!

Nintendo Hire me!!!!!!!!

How Hacking Actually Looks Like - ALLES! CTF Team in Real Time

How Hacking Actually Looks Like - ALLES! CTF Team in Real Time

What is a File Format?

What is a File Format?

Guessing vs. Not Knowing in Hacking and CTFs

Guessing vs. Not Knowing in Hacking and CTFs

Chaining Script Gadgets to Full XSS - All The Little Things 2/2 (web) Google CTF 2020

Chaining Script Gadgets to Full XSS - All The Little Things 2/2 (web) Google CTF 2020

Failed DOM Clobbering Research - All The Little Things 1/2 (web) Google CTF 2020

Failed DOM Clobbering Research - All The Little Things 1/2 (web) Google CTF 2020

XSS on the Wrong Domain T_T - Tech Support (web) Google CTF 2020

XSS on the Wrong Domain T_T - Tech Support (web) Google CTF 2020

XSS a Paste Service - Pasteurize (web) Google CTF 2020

XSS a Paste Service - Pasteurize (web) Google CTF 2020

Why Hackers Love the Number 1,094,795,585

Why Hackers Love the Number 1,094,795,585

FPGA simulated on a GPU - GPURTL Google CTF Finals 2019 (reversing)

FPGA simulated on a GPU - GPURTL Google CTF Finals 2019 (reversing)

Winners of Google Capture-The-Flag Finals 2019 🏳️

Winners of Google Capture-The-Flag Finals 2019 🏳️

Defusing a Bomb at Google London HQ - Having a Blast Google CTF Finals 2019 (hardware)

Defusing a Bomb at Google London HQ - Having a Blast Google CTF Finals 2019 (hardware)

Google CTF Finals 2019!

Google CTF Finals 2019!

Bug Hunter Talks & Init.G for Student - Escal8 2019 Day 2

Bug Hunter Talks & Init.G for Student - Escal8 2019 Day 2

Script Gadgets! Google Docs XSS Vulnerability Walkthrough

Script Gadgets! Google Docs XSS Vulnerability Walkthrough

VLC Kill Bill: Easter Egg Reverse Engineering

VLC Kill Bill: Easter Egg Reverse Engineering

MMO Hacking Game Design in Unity (IL2CPP) - Game Devlog #4

MMO Hacking Game Design in Unity (IL2CPP) - Game Devlog #4

Unity Multiplayer/MMO Game - Game Devlog #3

Unity Multiplayer/MMO Game - Game Devlog #3

Igniting Creativity for a (Hacking) Game - Game Devlog #2

Igniting Creativity for a (Hacking) Game - Game Devlog #2

How To Learn Something New? - Game Devlog #1

How To Learn Something New? - Game Devlog #1

CTFs are AWESOME!

CTFs are AWESOME!

CTFs are TERRIBLE!

CTFs are TERRIBLE!

Why MissingNo Multiplies Items!

Why MissingNo Multiplies Items!

Researching MissingNo Glitch in Pokemon

Researching MissingNo Glitch in Pokemon

DLL Injection to Create a Fly Hack - Pwn Adventure 3

DLL Injection to Create a Fly Hack - Pwn Adventure 3

Dissecting Pokemon Red Savegame

Dissecting Pokemon Red Savegame

Reverse Engineered old Compression Algorithm for Frogger

Reverse Engineered old Compression Algorithm for Frogger

Security.txt - My Awesome Invention for Security Researchers

Security.txt - My Awesome Invention for Security Researchers

Reverse Engineering Introduction Walkthrough - intro_rev/rev1 CSCG 2020

Reverse Engineering Introduction Walkthrough - intro_rev/rev1 CSCG 2020

Mindmapping a Pwnable Challenge - intro_pwn/pwn1 CSCG 2020

Mindmapping a Pwnable Challenge - intro_pwn/pwn1 CSCG 2020

$100k Hacking Prize - Security Bugs in Google Cloud Platform

$100k Hacking Prize - Security Bugs in Google Cloud Platform

We are Organizing a CTF! - CSCG Announcement

We are Organizing a CTF! - CSCG Announcement

Solving Pwnable CTF Challenge With Docker Workflow

Solving Pwnable CTF Challenge With Docker Workflow

Deepdive Containers - Kernel Sources and nsenter

Deepdive Containers - Kernel Sources and nsenter

How Docker Works - Intro to Namespaces

How Docker Works - Intro to Namespaces

Introduction to Docker for CTFs

Introduction to Docker for CTFs

The End Of Haxember - See You In 2020!

The End Of Haxember - See You In 2020!

Hacking My Instagram Account

Hacking My Instagram Account

Fiber Tapping - Monitoring Fiber Optic Connections

Fiber Tapping - Monitoring Fiber Optic Connections

Race Condition Trick /proc/self/fd

Race Condition Trick /proc/self/fd

Traveling to London for Escal8 and Google CTF

Traveling to London for Escal8 and Google CTF

Python 2 vs 3 for Binary Exploitation Scripts

Python 2 vs 3 for Binary Exploitation Scripts

File Path Race Condition & How To Prevent It - bin 0x31

File Path Race Condition & How To Prevent It - bin 0x31

Writing a Simple Buffer Overflow Exploit

Writing a Simple Buffer Overflow Exploit

Exploit Dev Pitfall Corrupted Shellcode

Exploit Dev Pitfall Corrupted Shellcode

New to Linux? Need Help Understanding Shell Commands?

New to Linux? Need Help Understanding Shell Commands?

Self-aware Video: it knows its own YouTube Video ID?

Self-aware Video: it knows its own YouTube Video ID?

Patching Binaries (with vim, Binary Ninja, Ghidra and radare2)

Patching Binaries (with vim, Binary Ninja, Ghidra and radare2)

How Do Linux Kernel Drivers Work? - Learning Resource

How Do Linux Kernel Drivers Work? - Learning Resource

Public Penetration Test Reports - Learning Resource

Public Penetration Test Reports - Learning Resource

Finding iOS Kernel Exploit // SockPuppet Jailbreak - CVE-2019-8605

Finding iOS Kernel Exploit // SockPuppet Jailbreak - CVE-2019-8605

HACKERSPACES ARE AWESOME!

HACKERSPACES ARE AWESOME!

How To Learn Hacking With CTFs

How To Learn Hacking With CTFs

WHY YOUR HACKING QUESTIONS ARE FRUSTRATING!!!

WHY YOUR HACKING QUESTIONS ARE FRUSTRATING!!!

Cannot access memory at address // Debugging PIE Binaries affected by ASLR - bin 0x2E

Cannot access memory at address // Debugging PIE Binaries affected by ASLR - bin 0x2E

Best Operating Systems for Hacking?!

Best Operating Systems for Hacking?!

Reversing Statically-Linked Binaries with Function Signatures - bin 0x2D

Reversing Statically-Linked Binaries with Function Signatures - bin 0x2D

Finding main() in Stripped Binary - bin 0x2C

Finding main() in Stripped Binary - bin 0x2C

SECRET HACKER FORUM - The Place Where We Talk and Learn

SECRET HACKER FORUM - The Place Where We Talk and Learn

Exploit Fails? Debug Your Shellcode - bin 0x2B

Exploit Fails? Debug Your Shellcode - bin 0x2B

Zero-day vulnerability in Bash - Suidbash Google CTF Finals 2019 (pwn)

Zero-day vulnerability in Bash - Suidbash Google CTF Finals 2019 (pwn)

Test VLOG / Channel Updates / Building PC - loopback 0x05

Test VLOG / Channel Updates / Building PC - loopback 0x05

Reading Player Position with DLL Injection - Pwn Adventure 3

Reading Player Position with DLL Injection - Pwn Adventure 3

Google Paid Me to Talk About a Security Issue!

Google Paid Me to Talk About a Security Issue!

Finding Player and Camera Position for Fly Hack - Pwn Adventure 3

Finding Player and Camera Position for Fly Hack - Pwn Adventure 3

How Speedrunners Use Game Hacking Tools

How Speedrunners Use Game Hacking Tools

Windows Game Hacking with Ghidra and Cheat Engine

Windows Game Hacking with Ghidra and Cheat Engine

Minetest Circuit Challenge - Google CTF 2019 Qualifier

Minetest Circuit Challenge - Google CTF 2019 Qualifier

Arbitrary Read and Write in WebKit Exploit

Arbitrary Read and Write in WebKit Exploit

Preparing for Stage 2 of a WebKit exploit

Preparing for Stage 2 of a WebKit exploit

Speedrun Hacking Buffer Overflow - speedrun-001 DC27

Speedrun Hacking Buffer Overflow - speedrun-001 DC27

YouTube BANNING Hacking Videos - Hot Take

YouTube BANNING Hacking Videos - Hot Take

Revisiting JavaScriptCore Internals: boxed vs. unboxed

Revisiting JavaScriptCore Internals: boxed vs. unboxed

Paste-Tastic! - Post Google CTF 2019 Stream

Paste-Tastic! - Post Google CTF 2019 Stream

The fakeobj() Primitive: Turning an Address Leak into a Memory Corruption

The fakeobj() Primitive: Turning an Address Leak into a Memory Corruption

Building an 8-Bit Computer From Scratch

Building an 8-Bit Computer From Scratch

WebKit RegExp Exploit addrof() walk-through

WebKit RegExp Exploit addrof() walk-through

Just-in-time Compiler in JavaScriptCore (WebKit)

Just-in-time Compiler in JavaScriptCore (WebKit)

The Butterfly of JSObject

The Butterfly of JSObject

Hacking Browsers - Setup and Debug JavaScriptCore / WebKit

Hacking Browsers - Setup and Debug JavaScriptCore / WebKit