Chris Powell
Chris Powell
  • 20
  • 48 167
Do I need a Cyber Degree? NO
A quick discussion of whether or not you need a degree to work in Cyber Security, and reasons you might still want to go to University.
มุมมอง: 448

วีดีโอ

Talk Cyber To Me - My Life as a Government Vulnerability Researcher
มุมมอง 4562 ปีที่แล้ว
A brief description of the life of a GCHQ/NCSC vulnerability researcher and how their work shapes government policy for the benefit of the UK.
How to Spoof 97% of Email Accounts
มุมมอง 31K2 ปีที่แล้ว
The video is a recording of a streaming session where I demonstrated some of the offensive/testing tools my team built at 6point6. The first is mail-spoofer, it "circumvents" legitimate SPF, DKIM and ARC records. Additionally, it can forge fake - signed - DMARC passes through ARC abuse. The hope is to force a much wider adoption of DMARC as a security technology. And to encourage better email s...
Symmetric cryptography, logic gates and XORing - 0x0001
มุมมอง 1122 ปีที่แล้ว
Symmetric cryptography, logic gates and XORing - 0x0001
Hash algorithms, error detection, error correction and password cracking - 0x0000
มุมมอง 2092 ปีที่แล้ว
0:00 - Hash functions 3:30 - Parity functions are hashes 8:50 - Error correction 15:18 - Mathematical functions, injective functions and reversing hashes 22:22 - Basic password hashing 24:08 - Cryptographic hashes and collisions 29:00 - Cryptographic hashes and predictability 32:51 - Cryptographic hashing IS NOT encryption 33:23 - Password cracking 34:40 - Rainbow tables
Exploit Concepts for BoFs - Virtual Memory, Memory Paging and Paging to Disk
มุมมอง 2122 ปีที่แล้ว
A historical and overview of virtual memory, paging and paging to disk.
Dual Wielding Kali Boxes
มุมมอง 3383 ปีที่แล้ว
The video demonstrates Metasploit and it's the ability to host a Socks proxy server in conjunction with proxychains.
Exploit Concepts for BoFs - Assembly
มุมมอง 1783 ปีที่แล้ว
The introduction to my series teaching technical concepts used during exploit development, with a specific focus on Windows and Linux Buffer-over-Flows. Today we cover Turing completeness, Instruction Set Architectures (ISAs) and assembly. Video Credits th-cam.com/video/zaLPKUVffjY/w-d-xo.html th-cam.com/video/yBCz35SWAtE/w-d-xo.html th-cam.com/video/qkYEfWazIfc/w-d-xo.html th-cam.com/video/T9l...
Exploit Concepts for BoFs - Turing Machines
มุมมอง 1293 ปีที่แล้ว
The introduction to my series teaching technical concepts used during exploit development, with a specific focus on Windows and Linux Buffer-over-Flows. Today we cover the adding memory to Finite State Machines, otherwise known as Turing Machines. Video Credits th-cam.com/video/bL0LV0Huj1s/w-d-xo.html th-cam.com/video/7GQOVQz09vw/w-d-xo.html th-cam.com/video/u7UKP3QN4HA/w-d-xo.html th-cam.com/v...
Exploit Concepts for BoFs - Finite State Machines
มุมมอง 1753 ปีที่แล้ว
The introduction to my series teaching technical concepts used during exploit development, with a specific focus on Windows and Linux Buffer-over-Flows. Today we cover the most basic of computer, the Finite State Machine. Video Credits th-cam.com/video/u7UKP3QN4HA/w-d-xo.html th-cam.com/video/aKjFSD0r6BE/w-d-xo.html
Exploit Concepts for BoFs - Intro
มุมมอง 2783 ปีที่แล้ว
The introduction to my series teaching technical concepts used during exploit development, with a specific focus on Windows and Linux Buffer-over-Flows.
Fuzzing 0x03 - Fuzzing, Emulation and QEMU
มุมมอง 1.4K3 ปีที่แล้ว
Fuzzing 0x03 notes and video. It covers the basics of fuzzing without access to source code, as it the case with Windows applications. And how emulation and QEMU works. Notes drive.google.com/file/d/1QXc4GejhgQAyQ2PPZ-k3egg-hk70-oSl/view For security training or consultancy, please visit us at - www.codalabs.uk. If you'd like to keep informed of upcoming material, training sessions or blogs, fe...
Fuzzing 0x02 - Sanitizers, Virtual Memory and Paging
มุมมอง 7563 ปีที่แล้ว
Fuzzing 0x02 notes and video. It covers the basics of sanitizers, how to use them in fuzzing, and how virtual memory and paging work. Notes drive.google.com/file/d/1LeKGeVCznLt0zQZW5LjBe7txSLny5FVJ/view?usp=sharing For security training or consultancy, please visit us at - www.codalabs.uk. If you'd like to keep informed of upcoming material, training sessions or blogs, feel free to follow me on...
Fuzzing 0x01 - libFuzzer, clang and Honggfuzz
มุมมอง 3.1K3 ปีที่แล้ว
Fuzzing 0x01 notes and video. It covers the basics of clang, and how it implements the LLVMFuzzerTestOneInput interface, how the compiler uses this symbol, and Honggfuzz. Notes drive.google.com/file/d/1jW96LAY0w_qRFxoBHG1ogeKZQkNYc8ds/view?usp=sharing For security training or consultancy, please visit us at - www.codalabs.uk. If you'd like to keep informed of upcoming material, training session...
Install AFL++ Ubuntu
มุมมอง 2.7K3 ปีที่แล้ว
The virtual machine I provided requires Intel VT-x to be enabled. I didn't know at the time, but it may not be enabled by default. This video has helped a few people solve the problem. th-cam.com/video/MOuTxfzCvMY/w-d-xo.html You can also create your virtual machine from scratch. While this takes a bit of time, it's not too difficult and is always a useful skill to have. First, you need the vir...
Fuzzing 0x00 - Fuzzing theory, instrumentation and AFL
มุมมอง 4K3 ปีที่แล้ว
Fuzzing 0x00 - Fuzzing theory, instrumentation and AFL
Fuzzing 0x03 - Fuzzing, Emulation and QEMU
มุมมอง 2553 ปีที่แล้ว
Fuzzing 0x03 - Fuzzing, Emulation and QEMU
Fuzzing 0x02 - Sanitizers, Virtual Memory and Paging
มุมมอง 2543 ปีที่แล้ว
Fuzzing 0x02 - Sanitizers, Virtual Memory and Paging
Fuzzing 0x01 - libFuzzer, clang and Honggfuzz
มุมมอง 1.8K4 ปีที่แล้ว
Fuzzing 0x01 - libFuzzer, clang and Honggfuzz
Fuzzing 0x00 - Fuzzing theory, instrumentation and AFL
มุมมอง 9424 ปีที่แล้ว
Fuzzing 0x00 - Fuzzing theory, instrumentation and AFL

ความคิดเห็น

  • @majorbreak2497
    @majorbreak2497 หลายเดือนก่อน

    my mail-spoofer "hhtp//domain:3333/login" dosent seem to be working when I search and enter URL, I can see in the console it created it for 0.0.0.0:3333. Any one figured out why their gophish URL isn't working?

    • @SpammerJammer
      @SpammerJammer หลายเดือนก่อน

      Check to make sure the DNS records populated. Run sudo reboot

  • @iamturkishcoffee
    @iamturkishcoffee หลายเดือนก่อน

    THANK YOU

  • @sufianiskandar3586
    @sufianiskandar3586 3 หลายเดือนก่อน

    I did all the steps above and managed to spoof the emails but all landed in junk folder flagged as spam.

  • @girl4632
    @girl4632 4 หลายเดือนก่อน

    Hey, which is better. Sending email using self written normal python script or using gophish.

  • @motazsa1
    @motazsa1 5 หลายเดือนก่อน

    Amazing 👏🏼

  • @thomaslium5382
    @thomaslium5382 7 หลายเดือนก่อน

    This is nice, but can you reply to the emails after sending it? it seems it will only be sent once, but cant actually have a conversation in email

  • @luniousm3246
    @luniousm3246 8 หลายเดือนก่อน

    Thank you kindly!

  • @dandeeteeyem2170
    @dandeeteeyem2170 8 หลายเดือนก่อน

    You know this exact vulnerability has been available for mobile phone numbers as long as it has for email? 😂 I love how sincere you sound when saying you don't know why this vulnerability exists 😂 By the way, if you think number 10, or the cia leave this low hanging fruit misconfigured by mistake, you are very naive 😅

    • @chrispowell1224
      @chrispowell1224 8 หลายเดือนก่อน

      I was an intelligence officer most of my career. It 100% was misconfiguration. You think too highly of the CIA.

    • @dandeeteeyem2170
      @dandeeteeyem2170 8 หลายเดือนก่อน

      @@chrispowell1224 you can still spoof calls, there's no good reason for that vulnerability to still be there. 😉

  • @scottmcmahon7209
    @scottmcmahon7209 8 หลายเดือนก่อน

    Clearly you are able to spoof email addresses to look like the fake emails you are sending are from MI5. What if you wanted to send fake emails to an MI5 employee that have a "from" address that belongs to another employee at MI5?

  • @anchalsingh854
    @anchalsingh854 10 หลายเดือนก่อน

    When using sendgrid due to their sender-authentication policy I cannot send spoofed emails, anybody knows a solution for that?

  • @user-xh7xv3yq1e
    @user-xh7xv3yq1e 10 หลายเดือนก่อน

    Bro your content is amazing, I wish you made more videos on cyber security.

  • @raifaniath-thaariq7983
    @raifaniath-thaariq7983 11 หลายเดือนก่อน

    where can i get the mail-spoofer tmp?

  • @Tchatarero36
    @Tchatarero36 11 หลายเดือนก่อน

    Great Content Boss

  • @Tchatarero36
    @Tchatarero36 11 หลายเดือนก่อน

    Great Content Chris

  • @unoallin6389
    @unoallin6389 ปีที่แล้ว

    How does mimecast & proofpoint handle spoof emails. Will the emails get through to the inbox?

  • @user-gu7ft2st2w
    @user-gu7ft2st2w ปีที่แล้ว

    Hi thanks for sharing such an important information As you said your team worked on spoofed emails. I need help from you as I am doing project on spoofed email detection using ML. I cant find a data for spoofed emails to train my model . if you have spoofed email dataset can you share it with me, I can explain my project to you. thank you.

  • @neilmcrae624
    @neilmcrae624 ปีที่แล้ว

    Does this still work? I think I have rebuild on digital ocean about 10 times now... Still no sent email

  • @adriankatong3962
    @adriankatong3962 ปีที่แล้ว

    This is a holy grail if my African friend found this video!! this is kinda out of the topic of the awareness its more to from small spammer become guru of the email spoofer BUT!! this is must people know about it so they know how degerous is the Phishing don't always belive what you seeing and don't ever click on what you see on your email its 95% security patch 5% human error this kinda of human error that never can be patched! SALUTE FOR THE VIDEO!

  • @axelnuno6673
    @axelnuno6673 ปีที่แล้ว

    Hello Powell, just a question, I made authentication with a password not with a ssh key, what is the command to install mail-spoofing on digital ocean becuase "scp -r .\Deskptop\mail-spoofer\ spoof:/tmp" doesn't work to me, I hope you can answer me :) (min 46:36 of the video)

  • @thedude4723
    @thedude4723 ปีที่แล้ว

    Thanks for sharing

  • @jeffdelancey9346
    @jeffdelancey9346 ปีที่แล้ว

    Digital ocean blocks port 25. Any solution for this

  • @TalsonHacks
    @TalsonHacks ปีที่แล้ว

    Best explanation on the FSM and Turing machine I’ve seen. Great job!

  • @dannyocean6579
    @dannyocean6579 ปีที่แล้ว

    My mails not inboxing non of them how is that possible?

  • @DelkorYT
    @DelkorYT ปีที่แล้ว

    cia.gov has a p=none and rua setup now 😂

  • @jedbooth8239
    @jedbooth8239 ปีที่แล้ว

    I got this to work pretty quickly! Thank you so much! One issue that I ran into was that I need to also spoof the IP address that I'm sending from because the SPF record is set to a certain IP range. Gmail allows the mail to go through, but my organization catches the mail and it does not get delivered. I was thinking about using scapy to try and write a python program, but it isn't working. Do you have any solution for this?

  • @dannyocean6579
    @dannyocean6579 ปีที่แล้ว

    How do i boost my reputation?

    • @OMGPainRipper
      @OMGPainRipper 7 หลายเดือนก่อน

      How did you solve this?

  • @jamestrevor2149
    @jamestrevor2149 ปีที่แล้ว

    hello, i keep getting an error when trying to send a test mail "Max connection attempts exceeded - dial tcp: lookup postfix25: Temporary failure in name resolution"....any solution?

    • @Pranks101
      @Pranks101 ปีที่แล้ว

      Your port 25 isp is been blocked my your provider : Comment Copied From Theodore Dapaah

  • @didyouknowamazingfacts2790
    @didyouknowamazingfacts2790 ปีที่แล้ว

    is this illegal!!!

  • @richardclifford9641
    @richardclifford9641 ปีที่แล้ว

    Video too long

  • @notvalid4061
    @notvalid4061 ปีที่แล้ว

    still works took many hours of trail and error but is legit

    • @Tinetikon
      @Tinetikon ปีที่แล้ว

      hey i saw your recent post. i have difficulty with setting things up can you help me? i bought domain and try to create server with hmailserver but didnt work as expected. If you down to get in contact with me i will leave my email. pls respond

  • @jhanjones5695
    @jhanjones5695 ปีที่แล้ว

    What are your thoughts on dmarc?

  • @r188ops8
    @r188ops8 ปีที่แล้ว

    Hi, so basically to protect my domain, all I need to do is add p=reject into my DMARC? Shoul I add sp=reject too or is that not necessary? Thanks, gained a subscriber :-)

    • @marqueemoon276
      @marqueemoon276 ปีที่แล้ว

      We’re you able to send an email?

  • @marqueemoon276
    @marqueemoon276 ปีที่แล้ว

    I’m trying to send a test email but after a while getting an error that says “Max connection attempts exceeded - EOF” anyone know why?

  • @daviddaniel4844
    @daviddaniel4844 ปีที่แล้ว

    Digital ocean blocks port 25 🥲🥲🥲. Is there any way we can use any other port

    • @marqueemoon276
      @marqueemoon276 ปีที่แล้ว

      Did you figure out a fix?

    • @OMGPainRipper
      @OMGPainRipper 7 หลายเดือนก่อน

      @@marqueemoon276Did you figure out a fix?

  • @papajohnscookie
    @papajohnscookie ปีที่แล้ว

    This was great, really informative and interesting.

    • @marqueemoon276
      @marqueemoon276 ปีที่แล้ว

      Did this work for you? I’m getting an error message when trying to send a test email

  • @sleekbr7666
    @sleekbr7666 2 ปีที่แล้ว

    Where did Chris post the tool that summarized the entire exercise?

  • @dispositivosautomatizados
    @dispositivosautomatizados 2 ปีที่แล้ว

    💥💥💥👏👏👏🇧🇷🇧🇷🇧🇷

  • @jwshao8915
    @jwshao8915 2 ปีที่แล้ว

    Britain English?

  • @muhammedmustaphaabdullahi1029
    @muhammedmustaphaabdullahi1029 2 ปีที่แล้ว

    You just left someone hanging if you know you wont help you shouldn’t have built this wonderful application you made me changed my project in school i choose the email marketing as my project defense , its just a waste of time when you can’t help

  • @muhammedmustaphaabdullahi1029
    @muhammedmustaphaabdullahi1029 2 ปีที่แล้ว

    Can you please answer my question Chris, my landing page does not display even viewing page source doesn’t show

  • @raghul1208
    @raghul1208 2 ปีที่แล้ว

    excellent

  • @theodoredapaah712
    @theodoredapaah712 2 ปีที่แล้ว

    Why is it that when I put the sendgrid Api key in your tool it don’t work the mails are sent through the smtp port 25 ?

    • @sleekbr7666
      @sleekbr7666 2 ปีที่แล้ว

      Where's the link to the tool?

    • @marqueemoon276
      @marqueemoon276 ปีที่แล้ว

      Did you get this to work?

  • @axoz9116
    @axoz9116 2 ปีที่แล้ว

    how did you end up getting a domain from go daddy? and is there any free alternatives if possible?

    • @olmi7953
      @olmi7953 2 ปีที่แล้ว

      With a free domain there is a 100% chance your email will be blocked

    • @olmi7953
      @olmi7953 2 ปีที่แล้ว

      But yeah freenom offers free domains

    • @axoz9116
      @axoz9116 2 ปีที่แล้ว

      @@olmi7953 so there's none

  • @lifediggerdev318
    @lifediggerdev318 2 ปีที่แล้ว

    Lol I had a look at the Collage I am currently studying at and found they don't even have a DMARC record.

  • @ellenorscheffers3185
    @ellenorscheffers3185 2 ปีที่แล้ว

    Please I’ll like to speak to you personally. Maybe you could find a way to contact me, thanks and I hope you consider my plea

  • @morningweb8538
    @morningweb8538 2 ปีที่แล้ว

    hi chris did gmail updated their filters i tried to forge dmark with your setup but i get A fail !

    • @whoiam7447
      @whoiam7447 2 ปีที่แล้ว

      yes gmail fixed that

    • @marqueemoon276
      @marqueemoon276 ปีที่แล้ว

      So this doesn’t work anymore?

    • @marqueemoon276
      @marqueemoon276 ปีที่แล้ว

      @@whoiam7447 so this doesn’t work anymore?