LiveOverflow 🔴 hextree.io's banner

LiveOverflow 🔴 hextree.io

@LiveOverflow • 165,573 subscribers

wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio

Shorts

Holy shit all the team introduction videos are absolute bangers!

Holy shit all the team introduction videos are absolute bangers!

19,063 views

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

You made me buy a HTB subscription... Tenet pwned with php2shell

Sensitive content

This media may contain sensitive content.

You made me buy a HTB subscription... Tenet pwned with php2shell

LiveOverflow 🔴 hextree.io

65,251 views • 9 days ago

I was wondering if the exploit works if there is concurrent traffic. I just setup a wordpress image, with random synthetic traffic. And agent built this. The main strategy is deliberate Apache prefork saturation. Basically keeping the connections open and blocking other traffic

I was wondering if the exploit works if there is concurrent traffic. I just setup a wordpress image, with random synthetic traffic. And agent built this. The main strategy is deliberate Apache prefork saturation. Basically keeping the connections open and blocking other traffic

LiveOverflow 🔴 hextree.io

23,439 views • 10 days ago

Web Security vs. Binary Exploitation

Web Security vs. Binary Exploitation

LiveOverflow 🔴 hextree.io

835,858 views • 3 years ago

I just saw this over 9 years old video of mine about pen testing. And I have to say it’s still a banger 🔥

I just saw this over 9 years old video of mine about pen testing. And I have to say it’s still a banger 🔥

LiveOverflow 🔴 hextree.io

12,268 views • 1 month ago

Around ~5 years ago I made a video about how SIM cards work, by intercepting the communication between the phone and the SIM.

Around ~5 years ago I made a video about how SIM cards work, by intercepting the communication between the phone and the SIM.

LiveOverflow 🔴 hextree.io

110,861 views • 3 years ago

Did you see my SIM card video and want to learn more about mobile networks? Here is a video I made ~5 years ago introducing the GSM network.

Did you see my SIM card video and want to learn more about mobile networks? Here is a video I made ~5 years ago introducing the GSM network.

LiveOverflow 🔴

93,164 views • 3 years ago

Did you know that the CPU vuln "Zenbleed" 🩸 (CVE-2023-20593) was found through fuzzing? I was able to talk to Tavis Ormandy and learned about his novel approach 🤯 it is so clever!!

Did you know that the CPU vuln "Zenbleed" 🩸 (CVE-2023-20593) was found through fuzzing? I was able to talk to Tavis Ormandy and learned about his novel approach 🤯 it is so clever!!

LiveOverflow 🔴

82,622 views • 3 years ago

Ever wondered how iPhones can be hacked remotely? Watch my latest YouTube video right here on Twitter. My goal with this video is to give you a sense of the insane amount of skill and (engineering) effort that is required to find vulnerabilities in iPhones. At the end of the video, I hope you’ll appreciate the complexity of the task, while realising it’s not simply magic.

Ever wondered how iPhones can be hacked remotely? Watch my latest YouTube video right here on Twitter. My goal with this video is to give you a sense of the insane amount of skill and (engineering) effort that is required to find vulnerabilities in iPhones. At the end of the video, I hope you’ll appreciate the complexity of the task, while realising it’s not simply magic.

LiveOverflow 🔴 hextree.io

58,053 views • 2 years ago

In depth look at Zenbleed (CVE-2023-20593)

In depth look at Zenbleed (CVE-2023-20593)

LiveOverflow 🔴

70,479 views • 3 years ago

I love the debate around storing JWTs in localStorage

I love the debate around storing JWTs in localStorage

LiveOverflow 🔴 hextree.io

51,751 views • 2 years ago

Continuing the mobile security topic, here is a bit of a controversial video! A few years ago I was doing Android App security audits, and sometimes we would report "lack of SSL certificate pinning". Because I enjoy debating the topic on `what is a security issue?`, I used to argue with my colleagues about this 🤬 To me it is generally not an issue. Though there are some nuances in the threat-model and sometimes it can make sense. So I don't consider it generally important, but it's hard arguing against something that is generally regarded as "recommended best practices". Then I saw a public talk and paper reporting this, and I used it as a scapegoat to discuss my views. I can also say, that over 5 years later, I still have the same opinion on certificate pinning ;)

Continuing the mobile security topic, here is a bit of a controversial video! A few years ago I was doing Android App security audits, and sometimes we would report "lack of SSL certificate pinning". Because I enjoy debating the topic on `what is a security issue?`, I used to argue with my colleagues about this 🤬 To me it is generally not an issue. Though there are some nuances in the threat-model and sometimes it can make sense. So I don't consider it generally important, but it's hard arguing against something that is generally regarded as "recommended best practices". Then I saw a public talk and paper reporting this, and I used it as a scapegoat to discuss my views. I can also say, that over 5 years later, I still have the same opinion on certificate pinning ;)

LiveOverflow 🔴 hextree.io

60,689 views • 3 years ago

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!

LiveOverflow 🔴 hextree.io

44,800 views • 2 years ago

A year ago I made a video about the RIDL CPU vulnerability. In case you haven't seen it, here it is uploaded to Twitter directly! The most interesting part of this has been learning about the prior research that later lead to the discovery of these modern side-channel vulnerabilities. I also spend more time explaining "speculative execution" and how these CPU cache timings can be used as a side-channel. If you haven't seen it yet, give it another chance :)

A year ago I made a video about the RIDL CPU vulnerability. In case you haven't seen it, here it is uploaded to Twitter directly! The most interesting part of this has been learning about the prior research that later lead to the discovery of these modern side-channel vulnerabilities. I also spend more time explaining "speculative execution" and how these CPU cache timings can be used as a side-channel. If you haven't seen it yet, give it another chance :)

LiveOverflow 🔴

18,151 views • 3 years ago

No more content to load