She hacked me!

Cori shows us how easy it is to set up a phishing campaign and hack companies. Be warned!
Cori was kind enough to give my domain back to me: / discord - Thanks Cori :)
/ MENU //
00:00 - Coming up
00:35 - Introduction
01:28 - Cori's Twitter and website
02:14 - Cori's background
02:58 - Phishing David Bombal
04:10 - Phishing definition and demonstration
11:36 - Setting up a Gophish server
13:51 - How it started
14:38 - Setting up a Gophish server (continued)
18:00 - Gophish server
20:33 - Phishing demonstration
31:15 - How to prevent phishing
34:27 - Cori's war story
37:16 - Best pretexts for social engineering
39:44 - How to learn social engineering
42:00 - Phishing demonstration recap
42:44 - Final words and advice
43:22 - Connect with Cori
43:34 - Conclusion
// Software used //
Gophish: github.com/gophish/gophish
LinkedInt: github.com/vysecurity/LinkedInt
Singlefile: chrome.google.com/webstore/de...
// Books discussed //
The hacker playbook by Peter Kim: amzn.to/3tZHwoe
// Cori SOCIAL //
Twitter: / corg_e
Website: www.corgima.com/
// People mentioned //
Rachel Tobac: / racheltobac
Snow: / _sn0ww
// David's SOCIAL //
Discord: / discord
Twitter: / davidbombal
Instagram: / davidbombal
LinkedIn: / davidbombal
Facebook: / davidbombal.co
TikTok: / davidbombal
KZbin Main Channel: / davidbombal
KZbin Tech Channel: / @davidbombaltech
KZbin Clips Channel: / @davidbombalofficialclips
KZbin Shorts Channel: / @davidbombalshorts
Apple Podcast: davidbombal.wiki/applepodcast
Spotify Podcast: open.spotify.com/show/3f6k6gE...
// MY STUFF //
www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: [e-mail]
hack
hacking
phish
phishing
phishing email
phishing scams
phishing link
phishing website
phishing attack
phishing link creator
phishing tutorial for beginners
phishing email analysis
phishing training
scary text message
dont download this app
phishing campaign
phishing call
phishing campaign training
phishing campaign tool
phishing campaign software
phishing campaign simulation
vishing baby crying
vishing example
vishing attacks
vishing
Disclaimer: This video is for educational purposes only.
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#phishing #vishing #hack

[@ellerionsnow3340]

Been watching for years, this has been one of my favorite interviews.

[@davidbombal]

// MENU // 00:00 - Coming up 00:35 - Introduction 01:28 - Cori's Twitter and website 02:14 - Cori's background 02:58 - Phishing David Bombal 04:10 - Phishing definition and demonstration 11:36 - Setting up a Gophish server 13:51 - How it started 14:38 - Setting up a Gophish server (continued) 18:00 - Gophish server 20:33 - Phishing demonstration 31:15 - How to prevent phishing 34:27 - Cori's war story 37:16 - Best pretexts for social engineering 39:44 - How to learn social engineering 42:00 - Phishing demonstration recap 42:44 - Final words and advice 43:22 - Connect with Cori 43:34 - Conclusion // Software used // Gophish: github.com/gophish/gophish LinkedInt: LinkedInt: github.com/vysecurity/LinkedInt Singlefile: chrome.google.com/webstore/detail/singlefile/mpiodijhokgodhhofbcjdecpffjipkle // Books discussed // The hacker playbook by Peter Kim: amzn.to/3tZHwoe // People mentioned // Rachel Tobac: twitter.com/RachelTobac Snow: twitter.com/_sn0ww // Cori SOCIAL // Twitter: twitter.com/corg_e Website: www.corgima.com/ // David's SOCIAL // Discord: discord.gg/davidbombal Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin Main Channel: kzbin.info KZbin Tech Channel: kzbin.info/door/ZTIRrENWr_rjVoA7BcUE_A KZbin Clips Channel: kzbin.info/door/bY5wGxQgIiAeMdNkW5wM6Q KZbin Shorts Channel: kzbin.info/door/EyCubIF0e8MYi1jkgVepKg Apple Podcast: davidbombal.wiki/applepodcast Spotify Podcast: open.spotify.com/show/3f6k6gERfuriI96efWWLQQ // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail]

[@0Ciju0]

Why not put them in the description of the video? Did you not want the keyword to list?

[@77nano777]

Can i Trust these Links🤔 lol

[@IBM_Museum]

@26:16 - "So if I click on the link - which I won't do, because I'm scared of you..." 😂😂😂

[@LabGecko]

12:36 Just FYI, today several different machine learning algorithms exist that can effectively de-blur text like this. I highly recommend using black boxes to obfuscate details instead of blurring.

[@deadpoolthepsycho_________2428]

Pin

[@bhairavkedare9074]

Appreciate your efforts of being so jargon free and beginner-friendly❤️

[@bernardgarrett3897]

Shows how careful you have to be. It's a crazy world. So different from when we started!!!! Well done David. I think you are providing a great service and awareness for those in IT.

[@davidbombal]

Thank you Bernard!

[@badgerden7080]

Sometimes you have to old school it.

[@parsec4757]

I miss the early days of the internet. Everything was simpler.

[@theTeknoViking]

That was SO interesting! Thanks a million for this and all the other great interviews, and content in general! As someone with a long background in various tech jobs and a terrible case of imposter syndrome, I'm slowly becoming more and more inspired to take the leap and pivot to something I actually find interesting, rather than doing what I know that pays the bills. Mostly from watching your material. Lots of ❤from the frozen north!

[@keylanoslokj1806]

It was a masterclass in less than an hour

[@semotester5480]

What a video! I was really entertained and even smiled and laughed at my monitor because I was curious how the pices got packed together in the email template. Those real world scenarios really help me to bring all those puzzles pices together. I love your content thank you so much for prroducing this type of contet.

[@tejasluthra8653]

We need another video with Corgi and hear more stories. This was so cool. Thanks for doing these interviews David. They help out a lot.

[@0Zed0]

After 30+ years in IT, I trust no one that contacts me that I'm not expecting and then I'm suspicious the moment they ask about anything other than the service I'm currently providing. I've made auditors wait while I lookup who their boss is on internal directories, phone them and check what they're here for. Even with all that I worry that one day I'll get caught out.

[@richardclifford9641]

Calm tf down

[@ramnikTDM]

@@richardclifford9641 he can't

[@-----------------------------]

@@richardclifford9641 chill bro stop being extra

[@LabGecko]

Kudos on your dedication. Phishing wouldn't be a business if people were that thorough. It's a mindset - we don't have to be paranoid. Just live by "Trust - but verify"

[@blackasinc]

smart man

[@Child0ne]

brilliant david, such an awesome choice for an expisode. very well done, your team is doing really well. ive been a long time subscriber so I'm pleased with where this channel is going and the content its been putting. It's absolutely perfect David! congratulations for the success, not to much longer and you'll have 1 MILL ! Very exciting stuff!

[@davidbombal]

Much appreciated Mikey!

[@michaelmendoza9824]

Awesome content! Thanks for asking the questions that make the material and subject understandable for all, and big props to Corgi! I will watch this again.

[@mytechnotalent]

David, great guest! So much of this very few people ever consider. GREAT vid!

[@claudedupont4281]

Great video! Would love to see her again ! Maybe in a full social engineering video? Great work to both of you!

[@MrRockNRoll]

FANTASTIC tutorial!!!! Thanks David & Corgi. I wish I could give more than 1 like

[@mailmeharish8066]

These contents are great ! It is really exciting when David says "glad you make mistakes so that we can learn" that's the heartful learning process . Thank You David I owe you alot 🙏

[@arghyl]

What a solid interview!! I definitely enjoyed seeing the tools used to hack David Bombal in action. I am definitely looking forward form more of these! thank you!

[@CitizenFortress]

I've watched up to about half of this so far and I'm absolutely intrigued. I'm a Security Guru myself, and watching this take place just reminds me how stupid easy it is to phish people. And to be real, with the kind of information you can get from LinkedInt is nuts. You can take that data, tie it in with maltego, do a crap ton of searches to gather even more information, key in the fact that people tend to use the same password on every site they're on, find some breached database downloads from companies who hav been breached and see if any of the massive number of emails you've gathered match. Then just use those passwords. BOOM. Absolutely nuts man, good work. People seriously need to see this, because it really is THIS easy.

[@purplemonkeydishwasher5269]

This is a great walk through for people learning. Seeing the commands in action always helps me learn

[@pauloalmeida3728]

Its funny how David knows all the steps too 😁. Thanks for sharing!

[@seyu8666]

Thanks a lot for posting such a great content david!! Loved it!!

[@flatbrow2]

Great video, love the research on individuals to use on an actual Pen test, inspiring.

[@wizmaster8088]

If not the best interview one of the best I've watched so far. Cogi is an awesome teacher for sure!

[@Mbro-dq2do]

So dope David. Thanks again bro. Fascinating info

[@numbah16]

23:02 David- I'm glad you work on the right side of the law! Cori- *Nervous laughter*

[@DavetutsAcademy]

And I'm like.... Yes, she is. Just might be. Loooolz

[@cyberdevil657]

This is is so aswome!! I never even heard of linkedint & go phishing. I will experiment with these new tools tonight in my lab :D

[@Bahlkris100]

Great video David/Cori. Definitely squat all the variations on your domain. ;)

[@mysterio8984]

There was a lot to learn in 45 minutes. Keep up with the great content! 😄💯

[@brocholy9289]

David you are so complete thats so nice to learn with you.

[@efiita7554]

wow! you guys are the best. thanks for doing all of this

[@redenmork6224]

Hello david . Im from Manipur India. I love your content and learn alot from you. GOD BLESS YOU .

[@davidbombal]

Thank you Reden!

[@bountifulish]

loved every bit of it. Mesmerizing energy and great content.

[@zaccampa4055]

This was an amazing video I loved it. The company I work for is under phishing attacks a lot and they do a lot of great training but at the end of each quarter they send out statistics and it’s alarming to see how many employees still click on these sketchy urls.

[@ozzysant]

Entrevista incrivel, gostei bastante, obrigado e otimo trabalho :D

[@user-tn5rk6di1x]

Thank you David. Another great interview, as always.

[@jorgenstenersen]

This is by far one of your top 3 videos! Great interview, great content and great preparation and demonstration by C, even made you the master himself blush 😂👏👏

[@blizzyblake]

Get her back for more stories and examples David !!! She was great!!!! 👍 learned a lot!

[@theclaw4673]

yo what this came out today? I am currently doing a phishing pentest on the company I work for. It's my first "pentest". Not really a full pentest my boss just wanted to see how many people would click on a phishing email, but its still super exciting. Love your content man!

[@rashaadgriggs1508]

Let me be honest.... I watch a lot of your videos, I love your shows and how you explain everything in the real world but I never got to the actual dreaded "subscribe". Today, however, I was blown away!! I learnt so much from you and Cori. Love your work, love your content, you're super genuine! What a legend David!

[@fabricefeddo4301]

"I watch a lot of your videos" I think David deserve a 'subscribe' from you at the second or third video:-). That's a lot of work form the youtuber, and I personnaly have no problem to move my mouse by some pixels and clic on a button, when I watch content even small amount of them, and to encourage content creators. I recently discovered pockettube, a firefox extension which help you to organise you subscription and content.

[@rashaadgriggs1508]

@@fabricefeddo4301 No worries good man, I am already a sub. :-)

[@tankburn]

Someone who doesnt just talk but can demonstrate the whole thing. What a legend she is. Cool stories too.

[@joopterwijn]

The good (reality) , the bad (reality) and the ugly (reality),… this was ugly reality but then in a explained beautiful way! Thank you two for sharing!

[@CortVermin]

cori has a really addictive way of talking about stuff imho. very cool video!

[@rio_deals]

wow, amazing!!!! right after you tried to log in at the fake (phishing) website, do you actually get into a copy of the website's successful log-in page or is it just give you an error??? again beautiful and amazing video

[@favourlandquayson9407]

Watching your videos, I feel like I'm being transported into the fascinating world of techies. This content is truly amazing, and I appreciate the way Cori presented. It's clear that she has a passion for what she does. Thank you for the incredible demo, and keep up the fantastic work! More grease to your elbows!🙏

[@dxlsvy]

Very cool... Thanks to you for sharing more knowledge... it helps a lot in the development of thinking!!!!

[@Zerback]

Tha you David for this interview!

[@fernandoortiz1849]

The thing that made the happiest was that i understood every single thing she did, nice content.

[@mariusmarks1066]

David, it is the 1st time I saw you blush. Kudos to you for publishing this. Very informational and making what's said demonstratively real world. Also thank you for your manner of publishing videos in general - very systematic and perfectly paced so that I for one can follow with ease. I think Gorgi made a lot of KZbin IT publishing buffs sit up and listen. Gorgi proves that the combination of a bubbly beautiful personality can be incredibly scary. A request, will you consider consider contacting Mr. Rob Braxman for a discussion? Thanks again for your work. This may be the last time commenting on your vids - too scared of Cori. :-)

[@mariusmarks1066]

Apologies...Cori, not Corgi.

[@davidbombal]

Rob is scheduled to talk to us soon :)

[@iamanite9]

Congratulations Sir!! It's soon gonna hit a "million"❤️🙌

[@ashabultaufik3405]

do more of this!! this is amazing

[@swissadventure1824]

Awesome Video! The only thing I'm always a bit frustrated about, is when ppl on ytb and co. refer to the defcon and that we should attend in order to get to know where to start better (like cori did in the end). There are so many ppl all over the world, who really can't attend at defcon. It's almost impossible from a financial aspect for alot of students around the world. Maybe I'm missing something, but that's how I feel.

[@LabGecko]

Agreed. Especially now, with health concerns and increased flight costs

[@JohnDoe-oh7rh]

There are so many defcon talks posted here on KZbin. If you need to find holes in your knowledge take practice exams online. If you need to know what you need to learn for your career then follow a career path. I consider Defcon to be a long term goal instead of somewhere to start.

[@usualhumanxd353]

Just.. incredible content, thank you so much!

[@youssefbouchara1179]

Great content man! We miss the scada episodes

[@qaiserkhan7086]

Thank you David for wonderful stuff.

[@tntxqx8281]

We need 5k he really deserve it . Thank you David

[@davidbombal]

Thank you! Hopefully soon 😀

[@deeproy2478]

One of the best channel ... I always follow your video for good work ....it really help me not only education purpose .... it's also help in cyber area ..

[@CyberTronics]

Hey David, Can you reccomend a CCNP security course, or perhaps you have one in the making ?

[@scriptkiddieclub9267]

loved the video!! great interview

[@davidbombal]

Glad you enjoyed it!

[@PawzPL]

I'm not sure if bluring credentials (instead of covering them by black square) is a good idea. I read a couple of articles, about AI blur text recovery, in some cases program called SmartDeblur can also work (with fair amount of guessing), and for pixelization there is brutforce script to break it.

[@ratulmondal7154]

Bunch of wonderful interview

[@Polandisch]

Great video again! Man, this is so interesting. And Cori is so beautiful! Thanks David!

[@haXez_org]

Corg_e reminds me of Winona Ryder. Great video. Super informative.

[@madjedsolt5878]

Always great content david! Greetings from Algeria. Greaaaat like before watching.

[@davidbombal]

Thank you very much!

[@pzer0man]

We should admit that her smile is beautiful and her skills also

[@boneitch]

No giveaway? I think these videos are an amazing gift themselves ❤️

[@dollaaaar]

I m learning hacking from last 1 year.. i have all basics knowledge of bug bounty.. do i need to start bug bounty wait automated tools that available only or first learn full manual then i start???

[@difnix]

Awesome content as always, keep 'em coming!

[@LarpingAsALarper]

I'm currently learning about cyber security and failing miserable. My employer is trying to get us to learn 4 years of certs in 6 months for an entire team with no previous experience. This video has helped me understand how a threat actor would approach phishing much better than our vendor course had. So thank you very much.

[@fako3275]

Thanks for showing how hackers do it and how easy it is sometimes.

[@alaahaider]

Scams did happen to me David, just because I really trust you I followed it but instantly realized that it was not you. Thank you for the amazing content.

[@mayankbharadwaj]

I am cybersecurity expert from India . I also learnt a lot from this video thanks for the great and informative video David. I got one more request please more videos with occupy the web.

[@rhondaverma6358]

I’m seriously thinking of doing the “Bombay Binge” starting tomorrow…. I have to order snacks first!

[@CWYCharles]

Thanks for asking those dumb questions for us. I'm actually dummy, so those dumb questions really do help me understand.

[@cyberdevil657]

I have a pdf form of the hackers playbook it's brilliant indeed! :D

[@itzate1565]

Surely this is the girl from the first Spy Kids Movie many years later.. definitely thought for a second I should stop commenting on videos lol, but no.. really great content and I'm going to pickup the recommended reading! Thank you both, especially to David for showing the genuine fear I think we all had watching this. 👌

[@MrSuperIntruder]

wonderful video david, keep it up!

[@TTsJholMoMo]

So fun to watch and learned a lot

[@mason8714]

Great Content, I love watching things like this. Keep up the good work and looking forward to the 1 million giveaway 😂😅😀🙃

[@errlybird1264]

Thanks for all the amazing content David! I have learned so much from watching your channel and feel like you are always improving. Can't wait for the episode with Kody Kinzie!

[@VSHALETC]

Thank you David and Cori...... and I am 100% sure that one will not find such a beautiful hacker:)

[@meboncent9868]

Hello I am Alberto from Tanzania, East Africa You taught me a lot I love your Channel

[@jeytis72]

Very interesting stuff. Once you've redirected an user to the fake website you need to grab his or her credentials somehow and store them somewhere, I guess. Thanks

[@chefbennyj]

Yeah, so did you edit the JS on the phishing clone to take the creds? Once the creds are taken, are you sending the results to another location using code hidden on the backend? Is the backend code some kind of node server, or another language like CS? Edit: nevermind... It's AWS.

[@bowsim]

David is getting all the interesting people in the i.t game on his KZbin awesome.

[@jkk1337]

She: I love when people make mistakes in online tutorials Also she: *gives the file triple seven*

[@joshkinder8871]

It's literally written in their own installation wiki to chmod 777.

[@uvbeenzaned2x]

chmod a+x

[@LabGecko]

@@joshkinder8871 is it? All I found was: _"Be careful: Since the config.json file contains database credentials, you will want to ensure it is only readable by the correct user. For Linux users, you can do this using chmod 640 config.json."_ Leaving something 777, especially a folder like she did, is a serious security hole. Edit: That said, she knows she's running on a virtual server, which is not even on her comp, is going to delete all that soon after the video's done, and isn't used to creating tutorials for people to do what she does. She just does it.

[@maurox1614]

@@LabGecko she didn't changed the permission on the config file, but on the application executable. In a prodution environment I would probably use a 740, but since this is a demo 777 is fine.

[@LabGecko]

@@maurox1614 reread my comment please. I quoted someone else and already said what you did.

[@monKeman495]

she is perfect candid for skiddies btw learn alot networking from you david thank you sir.

[@nirajthegreat5742]

thanks for the extension cori....that was really great...

[@DDBAA24]

7:30 httrack on steroids right from the toolbar extensions. Run an old tool dnstwist and you can find all domains similar and available to the target domain. This was a big thing around the holidays about 4-6 years ago. Even the mistyping of one letter could lead you to say an amazon that looked completely normal. Be careful out there.. Cori your awesome, and scary maybe 2 of the best things.

[@bloodgracet5640]

Dave: I have to confess your expressions show you really didnt count on this little expose'. She's great, have her on again. Love your channel and I learned a lot from her in this video.

[@GodsendNYC]

Hey, something that might interest you. A couple of days ago my Amazon account was closed with no warning for after hours of wasted time they're telling me it's for excessive returns which I think is an error but that's beside the point. When they closed my Amazon account all my Amazon devices that I own for years primarily all my Echo devices stopped working. I lost access to the Amazon Photos and Prime Video which I pay for. So apparently the devices you already own are subject to be disabled by Amazon on your perceived shopping habits! I assume the same applies to all other Amazon devices and services like fire OS tablets, Ring cameras, and probably AWS as well. Just wanted to make other people aware of this because they definitely don't tell you this when you buy your hardware and services.

[@rajneeshrai1781]

This is inspirational and motivational 💯

[@arbab_mujtaba]

Always Love Your Content

[@davidbombal]

Thank you very much Arbab!

[@esculap12]

Oh man scary stuff! And Cori is so good at it!

[@gungna]

wow! i learn so many things in this video!!

[@valters_eu]

Greate content from David as always, but only issue no time to watch. Maybe David you could also create a podcast in Apple podcasts? Thanks

[@davidbombal]

Not sure a video like this with demos is going to work well on a podcast. But anyway, here is linke to the Apple podcast: podcasts.apple.com/us/podcast/david-bombal/id1466865532

[@waynestewart1919]

I love that the sight is still there!!! LOL. Can I submit a hilarious username and password to it?

[@sagar4800]

Got to learn something new 👍 thanks !

[@gjkrisa]

Curious would you be willing to do a video on how to tell if your iot devices has been turned into a bot net and is there a way to remove it?

[@rocket01666]

Amazing! love your content!

[@aniketsharma7333]

Excellent video....as always 😊👌

[@davidbombal]

Thank you so much Aniket 😀

[@void-9]

Always learn something new here every sec

[@alaahaider]

Wow what an amazing interview David. Love it and learned so much. Thank you