John Hammond's banner

John Hammond

@_JohnHammond • 321,555 subscribers

Cybersecurity Researcher @HuntressLabs Just Hacking Training @JustHackingHQ w/ @ethicalhacker https://t.co/UtsNJiyQtS && https://t.co/narO3sz7y6

Shorts

I meant to remove my history file but I literally WATCH myself type the wrong thing.

I meant to remove my history file but I literally WATCH myself type the wrong thing.

41,046 次观看

bROTHER iT hAPPENED AGAIN

bROTHER iT hAPPENED AGAIN

32,561 次观看

It’s 2025!🥳…and IT admins are under pressure as always😵but YeshID helps out: it's a modern IAM platform for startups & mid size businesses. It streamlines access management, SOC2 audits & more. Try YeshID for a cost-effective way to stay secure: #ad

It’s 2025!🥳…and IT admins are under pressure as always😵but YeshID helps out: it's a modern IAM platform for startups & mid size businesses. It streamlines access management, SOC2 audits & more. Try YeshID for a cost-effective way to stay secure: #ad

11,460 次观看

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

Well, this was a stupid insomnia project, but... 😂 Playground code is here:

Well, this was a stupid insomnia project, but... 😂 Playground code is here:

257,532 次观看 • 1 年前

I got a proof-of-concept working for CVE-2025-30406, recently added to CISA's KEV. It's point and shoot 🙃

I got a proof-of-concept working for CVE-2025-30406, recently added to CISA's KEV. It's point and shoot 🙃

141,190 次观看 • 1 年前

The MOVEit Transfer exploitation is not just SQL injection(👀) We uncovered the very last stage of the attack chain to drop human2.aspx ultimately ends up gaining remote code execution ‼ We fully recreated the attack chain with a demo achieving a reverse shell & ransomware!

The MOVEit Transfer exploitation is not just SQL injection(👀) We uncovered the very last stage of the attack chain to drop human2.aspx ultimately ends up gaining remote code execution ‼ We fully recreated the attack chain with a demo achieving a reverse shell & ransomware!

236,679 次观看 • 3 年前

A few months ago I flew to New York to film in the Good Morning America studio, for a segment on the "grandparent scams" where bad actors use AI to impersonate family members and steal money. Last night it aired on Nightline! 🥳 Incredible opportunity, thank you for having me!💙

A few months ago I flew to New York to film in the Good Morning America studio, for a segment on the "grandparent scams" where bad actors use AI to impersonate family members and steal money. Last night it aired on Nightline! 🥳 Incredible opportunity, thank you for having me!💙

59,837 次观看 • 9 个月前

CVE-2023-34362: We haven't figured out how it's moved in wwwroot just yet, but we've just about got the attack chain where we perform SQL injection, own the MOVEit instance and upload/exfitrate files! 🤩 Huge thanks to Caleb Stewart for being my partner in (cyber)crime here! 💪

CVE-2023-34362: We haven't figured out how it's moved in wwwroot just yet, but we've just about got the attack chain where we perform SQL injection, own the MOVEit instance and upload/exfitrate files! 🤩 Huge thanks to Caleb Stewart for being my partner in (cyber)crime here! 💪

152,846 次观看 • 3 年前

Lotta chatter around #ScreenConnect vulnerabilities now as folks are getting spun up. Fellow Huntress researchers and I were up all night to recreate the auth bypass and RCE exploit. I'm not a huge fan of giving a PoC to threat actors, but I do dig snazzy video demos 😜

Lotta chatter around #ScreenConnect vulnerabilities now as folks are getting spun up. Fellow Huntress researchers and I were up all night to recreate the auth bypass and RCE exploit. I'm not a huge fan of giving a PoC to threat actors, but I do dig snazzy video demos 😜

79,092 次观看 • 2 年前

没有更多内容可加载