Category: Hacking

Why People Buy the WRONG Laptops for Hacking

Why People Buy the WRONG Laptops for Hacking

Big thanks to Proton VPN for sponsoring this video. To get 64% discount to your Proton VPN Plus subscription, please use the following link: https://protonvpn.com/davidbombal Want a “hacker” laptop without...

Are FAKE CAPTCHAs hacking you?

Are FAKE CAPTCHAs hacking you?

To try everything Brilliant has to offer for free for a full 30 days, visit https://brilliant.org/davidbombal or scan the QR code onscreen – You’ll also get 20% off an annual...

One Prompt HACKED Lenovo’s Chatbot

One Prompt HACKED Lenovo’s Chatbot

Researchers uncovered a critical cross-site scripting (XSS) vulnerability in Lenovo’s AI chatbot (reported by CyberNews). With one ~400-character prompt, they instructed the bot to output HTML, triggered a malicious injection...

Automated AI Hacking is here (Demo with Claude and Metasploit)

Automated AI Hacking is here (Demo with Claude and Metasploit)

In this ethical lab demo, David Bombal and Kyle Winters connect Claude (LLM) to Metasploit through an MCP (Model Context Protocol) server to automate real attacks. Watch AI perform recon,...

22.2 Tbps DDoS Attack Blocked 😱

22.2 Tbps DDoS Attack Blocked 😱

Cloudflare blocked a record 22.2 Tbps DDoS: a UDP carpet bomb peaking at 10.6B pps on a single IP. See the botnet scale, 31k+ ports per second, and how mitigation...

Millions of Cars Hacked (Again)

Millions of Cars Hacked (Again)

At DEF CON 33, a researcher showed how two API authentication flaws in a centralised dealer portal for a top automaker enabled national admin access across 1,000+ US dealers. With...

How to Track the People Tracking YOU

How to Track the People Tracking YOU

Big thanks to ThreatLocker for sponsoring my trip to Black Hat 2025. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Discover “Chasing Your Tail,” an...

SharePoint ZERO-DAY Lets Hackers Walk Straight In

SharePoint ZERO-DAY Lets Hackers Walk Straight In

SharePoint Zero-Day 2025: ToolPane Authentication Bypass + Deserialization RCE A brand-new, two-stage exploit is hammering SharePoint 2010-2025. OTW joins David Bombal to break down: • How attackers bypass authentication and...

One CLICK to CONTROL Your Car… Crazy Bluetooth Hack

One CLICK to CONTROL Your Car… Crazy Bluetooth Hack

This video is about PerfektBlue: a critical Bluetooth vulnerability lurking in the infotainment systems of Mercedes, Volkswagen, Skoda, and countless other devices worldwide. Watch as we demonstrate a one-click remote...

AI Email Summaries HACKED… Your Gmail Isn’t Safe

AI Email Summaries HACKED… Your Gmail Isn’t Safe

Discover the new prompt‑injection vulnerability that lets hackers hijack Google Gemini’s “Summarize this email” feature. Security researcher Marco Figueroa shows how invisible white‑text instructions inside an email make Gemini append...

Hacker Explains VPN Hacking: ADMIN access without password (real world demo)

Hacker Explains VPN Hacking: ADMIN access without password (real world demo)

Big thank you to DeleteMe for sponsoring this video. Go to http://joindeleteme.com/Bombal to receive a 20% discount. Discover how attackers exploit enterprise VPNs like Fortinet to gain admin access and...

Brute Force SSH & Build a Honeypot Now (Hydra and Cowrie Demo)

Brute Force SSH & Build a Honeypot Now (Hydra and Cowrie Demo)

Big thank you to Cisco for sponsoring this video and sponsoring my trip to Cisco Live San Diego. This video features David Bombal and Kyle Winters demonstrating practical cybersecurity techniques....