Animated guide to linear regression. First episode of AI series. 🐶 Snyk is free forever. Sign up with my link https://snyk.co/pwnfunction ⭐ GitHub: https://github.com/PwnFunction/linear-regression 🐤 X: https://twitter.com/PwnFunction 🧰 Tools used are: https://tools.pwnfunction.com/ 🎵 Track: STRLGHT - Destination

In this episode we'll break the Math.random method in JavaScript with z3. 🐶 Snyk is free forever. Sign up with my link https://snyk.co/pwnfunction ⭐ Randomness Predictor: https://github.com/PwnFunction/v8-randomness-predictor ⭐ Z3 Challenges: https://github.com/PwnFunction/learn-z3 ✨ Info ➜ Tools used are: https://tools.pwnfunction.com/ ➜ Video Production time(Research to Output): 100-ish hours. ➜ About 2L of Almond milk & 3.5L of Gatorade were consumed during the video creation. 💬 Discord: https://discord.gg/6KKQHvgJwv 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Lost Sky - Dreams NCS link: https://www.youtube.com/watch?v=SHFTHDncw0g

In this episode we'll explore a local privilege escalation vulnerability in polkit's pkexec. 🐶 Snyk is free forever. Sign up with my link https://snyk.co/pwnfunction ⭐ Code + All Resources: https://github.com/PwnFunction/CVE-2021-4034 ✨ Info ➜ Tools used are: Adobe Animate, Adobe Premiere Pro, Adobe Illustrator & Adobe Auditions. ➜ VSCode: Monokai Pro Theme, Jetbrains Mono Font, SF Mono Font. ➜ Video Production time: 80-ish hours. ➜ About 2.5L of Almond milk were consumed during the video creation. 💬 Discord: https://discord.gg/6KKQHvgJwv 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Lost Sky - Dreams NCS link: https://www.youtube.com/watch?v=SHFTHDncw0g

In this episode we'll explore Javascript Prototype Pollution. 🐶 Snyk is free forever. Sign up with my link https://snyk.co/pwnfunction ⭐ Code + All Resources: https://github.com/PwnFunction/Next.js-Flat-Prototype-Pollution 🔗 Prototype Pollution in flat: https://security.snyk.io/vuln/SNYK-JS-FLAT-596927 ✨ Info ➜ Tools used are: Adobe Animate, Adobe Premiere Pro, Adobe Illustrator & Audacity. ➜ VSCode: Monokai Pro Theme, Dank Mono Font. ➜ Video Production time: 100-ish hours. ➜ 6 Redbulls were consumed. 💬 Discord: https://discord.gg/6KKQHvgJwv 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Lost Sky - Dreams NCS link: https://www.youtube.com/watch?v=SHFTHDncw0g

In this episode we'll explore the world of SSRFs. ⭐ LiveOverflow Blog Post + Instructions: https://liveoverflow.com/gitlab-11-4-7-remote-code-execution-real-world-ctf-2018/ ✨ Info ➜ Tools used are: Adobe Animate, Adobe Premiere Pro, Adobe Illustrator & Audacity. ➜ VSCode: Monokai Pro Theme, Dank Mono Font. ➜ Video Production time: 60-ish hours. ➜ 6 Gatorades were consumed. 💬 Discord: https://discord.gg/6KKQHvgJwv 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Lost Sky - Dreams NCS link: https://www.youtube.com/watch?v=SHFTHDncw0g

In this episode we'll explore the world of HTTP and CSS to hide some code. ⭐ Code: https://github.com/PwnFunction/Blank-Rick-Roll ✨ Info ➜ Tools used are: Adobe Animate, Adobe Premiere Pro, Adobe Illustrator & Audacity. ➜ VSCode: Monokai Pro Theme, Dank Mono Font. ➜ Video Production time: 40-ish hours. ➜ 4 Redbulls were consumed. 💬 Discord: https://discord.gg/6KKQHvgJwv 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Lost Sky - Dreams NCS link: https://www.youtube.com/watch?v=SHFTHDncw0g

#BinaryExploitation #FileDescriptor #Attack In this video, we're gonna look at how one can abuse file descriptors in some cases to get access to "sensitive" documents. 🔗 Code + Build Instructions: https://hackercamp.co/ 🔗 Original Blog: https://www.sektioneins.de/en/blog/15-07-07-dyld_print_to_file_lpe.html 💬 Discord: https://discord.gg/6KKQHvgJwv 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw

#BinaryExploitation #ELF #Executables This is the second video in the series Binary Exploitation. In this video, we're gonna look at some simple attacks via dangerous functions. 🔗 Code + Build Instructions: https://hackercamp.co/ 💬 Discord: https://discord.gg/6KKQHvgJwv 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw

#BinaryExploitation #ELF #Executables This video is an introduction to ELF Executables in Linux. Also it's the first video of a new series called Binary Exploitation. 💬 Discord: https://discord.gg/6KKQHvgJwv 👨‍💻 HackerCamp: https://hackercamp.co 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw

#Deserialization #WebSecurity We'll explore the basic concepts of an Insecure Deserialization by attacking a web app written in Python. 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw

#SSTI #WebSecurity This video explores the world of Server-Side Template Injections (SSTI), primarily we'll look at Python with Flask framework as an example, but the core ideas explained in the video is applicable to wide set of Languages and Frameworks. Original Research: https://portswigger.net/research/server-side-template-injection 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw

#XSS #WebSecurity This time we are going to explore the world of Cross Site Scripting under 12 minutes. 🔗 Links ✨ XSS Game: https://xss.pwnfunction.com/ Custom Twitch Chat XSS: https://www.youtube.com/watch?v=2GtbY1XWGlQ 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw

#WebSecurity #Google #CTF A video writeup on one of the web challenges from the recent Google CTF 2019. 👨‍💻 SPONSORED BY INTIGRITI – https://www.intigriti.com/ 🔗 Links • Google CTF: https://capturetheflag.withgoogle.com • LiveOverflow Paste-tastic! Stream: https://www.youtube.com/watch?v=zjriIehgAec • LiveOverflow's channel: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w • LiveOverflow - Filemanager: https://www.youtube.com/watch?v=HcrQy0C-hEA 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw P.S. Sorry for my audio quality :(

#WebSecurity #XXE #Google #CTF A video writeup on one of the web challenges from the recent Google CTF 2019. 👨‍💻 SPONSORED BY INTIGRITI – intigriti.com 🔗 Links • Google CTF: https://capturetheflag.withgoogle.com • Insomnia: http://insomnia.rest • XXE video Explanation: https://www.youtube.com/watch?v=gjm6VHZa_8s • Beeceptor: https://beeceptor.com/ 🔥 Exploiting XXE with local DTD files: https://mohemiv.com/all/exploiting-xxe-with-local-dtd-files/ 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw

#WebSecurity #CSRF A video explaining CSRF and some different types of attacks. 🔗 CSRF to RCE : https://github.com/zadam/trilium/issues/455 SPONSORED BY INTIGRITI – intigriti.com Sorry for the late upload, was busy with other stuff. 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw

#WebSecurity #XXE A video on Exploiting XML parsers, specifically on XML External Entity attacks. 🔗 Links John's channel : https://www.youtube.com/user/RootOfTheNull Stok's video on OOB XXE via file uploads : https://www.youtube.com/watch?v=aSiIHKeN3ys Ippsec's Fulcrum walkthrough : https://www.youtube.com/watch?v=46RJxJ-Fm0Y Nicolas Grégoire's works : https://www.agarri.fr/en/ Exploiting XXE with local DTD files : https://mohemiv.com/all/exploiting-xxe-with-local-dtd-files/ SPONSORED BY INTIGRITI – intigriti.com 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw #WebSecurity #XXE #CTF

#WebSecurity #IDOR A video on how Insecure Direct Object References can affect a web application. SPONSORED BY INTIGRITI – intigriti.com 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw

#WebSecurity #ElectronJs #RCE A video on the finding Remote Code Execution (RCE) on Electron Js Applications SPONSORED BY INTIGRITI – intigriti.com 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw

#WebSecurity #CTF #HTTPParameterPollution How HTTP parameter parsing could mess things up. SPONSORED BY INTIGRITI – intigriti.com 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw

#WebSecurity #OpenRedirect 😊 First video A quickie on Open Redirects. SPONSORED BY INTIGRITI – intigriti.com 🎵 Track: Warriyo - Mortals (feat. Laura Brehm) NCS link: https://www.youtube.com/watch?v=yJg-Y5byMMw