wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio
Internet
- Tweets 9,452
- Following 1,253
- Followers 160,066
- Likes 6,164
Pinned Tweet
Where to find me:
🔴 Hacking Videos: piped.video/LiveOverflow
📜 Articles: liveoverflow.com
💻 Start Hacking? liveoverflow.com/start-hacki…
🥰 Support: liveoverflow.com/support
📹 2nd Channel: piped.video/LiveUnderflow
🤳 Instagram: instagram.com/liveoverflow
14
101
635
For every 10 likes this gets, I will ask ChatGPT to make this code more insecure
70
473
7,199
1,473,510
For every 10 likes this gets, I will ask ChatGPT to make this hacker get more experience
84
401
7,025
1,141,279
Bug Report @TwitterSupport:
I try to close Twitter by clicking on the X button, but nothing happens. Please fix.
37
369
3,176
156,832
I never thought I would experience a XSS on Google Search. But @kinugawamasato blew my mind!
This is a video going over the difficulties of sanitizing HTML in JavaScript.
piped.video/watch?v=lG7U3fuN…
26
1,119
2,761
ChatGPT is incredible. Whatever I ask, it not only has the answer, but also explains it in depth!
41
102
1,853
128,113
Counter Strike 2 has "zero tick servers".
As a computer science expert I know what this means. Instead of implementing a traditional game server loop, they deployed the first ever quantum server. It calculates every possible state and uses quantum tunneling for 0ms latency
43
126
1,810
161,099
The fact that they developed a complete zero-click to kernel chain, JUST to then force the device to open a web page to trigger the "real" chain, is the most bureaucratic exploit I can imagine 🙈
koeln.ftp.media.ccc.de/congr…
20
296
1,736
164,874
(1) Network Hacking?
(2) Network Mapping?
(3) Uber Scamming?
(4) Average Pokemon Go Player?
66
78
1,562
228,937
The world just became a little bit safer 🥰
thanks to all the hackers and researchers reporting vulnerabilities
nvd.nist.gov/vuln/detail/CVE…
84
226
1,621
238,125
Thank you, everyone, for watching my videos and sharing them with friends ❤️💕
When I started I never thought that a niche channel like mine could even get to these numbers. Thank you! ❤️
70
71
1,601
In this new video I try to explain computer networking, packets, OSI model and at the end we briefly peak into the Linux Kernel sources.
I invested a lot of time into this animation of network layers. Please check it out!
piped.video/watch?v=6G14Nrje…
17
232
1,555
231,144
Remember the days when you only had one PC and tried to install Linux? You always had to reboot back into Windows to research the next issue. And then you overwrote MBR and you got hard stuck.
97
119
1,480
Around ~5 years ago I made a video about how SIM cards work, by intercepting the communication between the phone and the SIM.
15
266
1,455
110,829
For everybody attending Defcon for the first time this year. Make sure to turn off your phone and disable wifi on your laptop. Also always check your surroundings before typing in a password.
31
146
1,412
It finally happened!
After over 8 years and over 400 videos, I finally get the recognition I deserve 🥰😇
59
17
1,318
53,144
I'm really addicted to ChatGPT. Maybe I will finally complete the last step of becoming a YouTuber - releasing a song.
28
109
1,314
Did you see my SIM card video and want to learn more about mobile networks? Here is a video I made ~5 years ago introducing the GSM network.
9
259
1,290
93,178
After three attempts to setup Windows OpenSSH server and not being able to remotely login, I give up 😩 I will leave the field of computer science and think about going back to school for woodworking.
57
34
1,313
189,283
I found the "bible" of pentesting. It covers EVERYTHING! Absolutely incredible collection:
drive.google.com/file/d/1TlD…
58
255
1,306
182,436
Wow people rediscover how tokens/cookies/sessions work yet again!!!
This is just dumb fear mongering....
Hackers have found a way to gain unauthorized access to Google accounts, bypassing any multi-factor authentication the user may have set up. malwarebytes.com/blog/news/2…
21
112
1,206
129,016
HOLY SHIT! Speaking of videos I wish I had when I started out 🤯
My colleague @S1r1u5_ created an incredible video about Browser exploitation (specifically Discord using Electron). I just got around watching it and it's a real gem 💎
3
136
1,221
51,159
Yo @elonmusk can you make all bugbounty reports of Twitter public? That would be an amazing resource to learn from!
16
106
1,185
This is a great post on bug bounty reddit!
OP reported an IDOR, gets paid $2,000, and then realizes it never was IDOR. It's just a cached response...
![The vulnerability I reported was an IDOR [...]. The next day, I received the reward payment of $2,000. Unfortunately, when I later tried to reproduce the bug, I realized that it wasn’t an IDOR issue at all—it was just the cache showing data I had previously visited.](/pic/orig/media%2FGiBFlK1WkAA965G.jpg)
ALT The vulnerability I reported was an IDOR [...]. The next day, I received the reward payment of $2,000. Unfortunately, when I later tried to reproduce the bug, I realized that it wasn’t an IDOR issue at all—it was just the cache showing data I had previously visited.
7
78
1,198
109,997
skill issue
This book must be the sole reason millions of people were permanently turned away from the field because of how ridiculously dry it is. Couldn’t get through half a page without passing out in a concussion coma. Almost convinced me to change careers.
Beginners: avoid this.
35
43
1,132
83,354
The start of a new series. We will try to learn some basics about browser exploitation. Specifically we will look at JavaScriptCore - the JavaScript engine from WebKit.
liveoverflow.com/getting-int…
14
303
1,028
Friendly reminder. Popular people on twitter are popular because of good marketing, not because of their skills. Don’t fall for the numbers.
35
86
986
Hacking into Google's Network for $133,337 🏆
It was a pleasure to talk to @epereiralopez about his bug bounty research into Google Cloud. It was really fascinating to hear about the Google internals and crazy tricks he knew.
piped.video/watch?v=g-JgA1hv…
12
257
998
It's relatively easy to learn about how the internet works (TCP, HTTP, DNS, ...), but we almost know nothing about how mobile networks work. Fortunately @axilirator will show us.
In the first episode we start with the SIM cards in our phones:
piped.video/watch?v=iJFnYBJJ…
21
341
974
OH! Look! Finally a useful XSS cheat sheet :D
portswigger.net/web-security…
6
311
941
The FBI ran an anonymous phone company to catch criminals. The real question is now, which VPN providers do we think are ran by some government agency? 👀
55
91
909
I am going through an identity crisis...
I used to be "the young guy with above average experience/skill". And now, business partners and contacts at large companies are younger than me. Most CTF players are younger than me.
Now I feel like "that 10 years older weird guy" 😭
44
26
875
55,874
Omg this TikTok by @donrestarone explaining log4shell. I really should go to bed.
14
183
815
fuck companies who sue researchers, and continue to release their own vulnerability disclosure marketing bullshit
12
79
836
Andreas might not be a "security researcher", but he is an amazing engineer!
And it shows that a great engineering is also a great hacker.
5
56
828
72,507
“Ok boomer” starts to become my favorite response to YT comments. It’s not really insulting, but it’s a bit provoking. Also it doesnt really say anything and you don’t need to enter a useless argument. It’s beautiful.
26
34
730
Real World CTF challenge "flaglab" - Two CVEs were combined to achieve full remote code execution on GitLab 11.4.7
Thanks to Patreon/YT Members you can not only watch the video, but alternatively read the write-up here:
liveoverflow.com/gitlab-11-4…
8
274
737
Is this a sockpuppet account establishing lore in order to push a backdoored libc patch in a few months? 🙃
11
35
701
79,357
I loathe when people say working in cybersecurity doesn't require coding.
Sure, you can work at a cybersecurity company and be responsible for finance. But that's not the point! I think that whole mindset breeds incompetence.
You can’t break or secure what you don’t understand.
Do you need to code to work in cyber security? NO
Is it useful in many roles? YES
Is it essential in some roles? YES
It's not that complicated! people that that you can only work in cyber security if you code probably don't know what they are talking about!
(made with GROK... I might disagree with some bits...)
37
78
726
64,962
Seeing all these tweets about hacking Russia...
WAR IS NOT A CTF!
Western agencies have been hacking Russia for years, I don't think there is not much left to find. And I'm certainly not experienced enough for a red team operation of that kind. Please don't do anything stupid
⬇️
20
90
697
Super easy bug for new bug hunters.
1. Login to the website
2. Close the tab
3. If you open the tab again and you are still logged in, REPORT IT
P4 "Improper session handling"
#bugbountytips #BugBounty #bugbountytip
53
60
690
132,395
Remember this #bugbountytips tweet?
When I saw this I thought this is bullshit, but it turned out to be a fascinating rabbit hole!
Take your guess, what is actually going on here? Tomorrow I will share my video about the investigation.
29
85
690
92,367
What does Nintendo Switch and iOS 9.3 have in common?
CVE-2016-4657 walk-through and intro to browser exploitation:
piped.video/watch?v=xkdPjbaL…
16
413
653
Did you know that the CPU vuln "Zenbleed" 🩸 (CVE-2023-20593) was found through fuzzing?
I was able to talk to @taviso and learned about his novel approach 🤯 it is so clever!!
10
131
690
82,622
Do you want to understand how this Cross-Site Scripting payload works? I made a video investigating this one:
x(""+{a:location=name}+"")
9
124
682
55,849
Tips to really Master Something
1. Move away from basics as quickly as possible
2. Constantly expose yourself to stuff you don't understand and later revisit what you thought you understood (but actually didn't)
3. Do cross-disciplinary research to develop a deeper understanding
Tips to Master Something
1. Expose yourself to basics over and over again.
2. Stick to what you can understand, prove and explain.
3. Always think in new ways to do the same thing better.
16
206
691
Ever wondered how iPhones can be hacked remotely?
Watch my latest YouTube video right here on Twitter. My goal with this video is to give you a sense of the insane amount of skill and (engineering) effort that is required to find vulnerabilities in iPhones.
At the end of the video, I hope you’ll appreciate the complexity of the task, while realising it’s not simply magic.
7
103
662
57,948
Sorry. I thought it’s a funny pun. I got the vaccine shot. I forgot you all live in America :S
23
7
661
This is the best paragraph in the blogpost for the curl CVE-2023-38545 - I love the self-reflection. Huge respect to @bagder for his work on curl!
5
74
658
68,156
I usually don't brag on social media about money, but "FUCK THE HATERS!", I'm gonna do it anyway! 💪 So I'm excited to share, I just used my savings for a down payment on a Ghidra license 🐉
25
16
629
Kids these days don't even know how much opportunity they have to learn hacking from actual pros.
I know there is a lot of content out there, so it can be hard to find the good stuff. But 10 years ago you had to be lucky to find at least something.
Anyway, watch this 👇
My videos for Flare-On 2024 are live! Watch me reverse engineer all the challenges from start to end.
+ Commentary video featuring @SuperFashi1, where we review the chals together.
* 45 hours of content
* 400+ GB of raw footage
Merry Christmas! piped.video/watch?v=vwW9xvr3…
11
53
642
41,927
It's NOT okay to create, distribute and advertise a keygen or crack for commercial software, without chiptunes or a demo.
12
33
580
82,063
I found my password again for my YouTube channel and released a new video!
When auditing code it's crucial to know about common issues. In this video we explore a Go issue that I was not aware of.
5
60
613
40,895
We have a look at another interesting XSS vector due to weird Firefox parsing, and then explore how researchers find this stuff.
piped.video/watch?v=yq_P3dzG…
3
184
590
This video I made in 2018 is one of the more "important" educational videos, but it has not that many views.
Give it a chance, it's only 2 minutes! 🥰
piped.video/watch?v=Jpaq0Qke…
10
58
562
I don't know anymore how to do education "properly"... For 95% of the problems, the answer is just "ask AI".
Feels like AI makes me 10x more efficient and 2x smarter. But I still need a really good knowledge foundation to be able to steer the AI and also recognise hallucinations
Claude reversing a binary using Binary Ninja via MCP while I get a snack
@bl4sty
@ziyadedher
@vector35
14
47
571
43,878
"A Vulnerability to Hack The World" - CVE-2023-4863
The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!
9
112
533
44,792
These people have zero experience in actual software engineering making crazy claims. As if every software out there implements secret handling in carefully engineered C code or assembly.
2
4
519
72,401