Demo of the Microsoft Window's Hack developed by the NSA (with OTW)

[@davidbombal]

OTW demonstrates how to use the NSA hack with Metasploit and take control of a Windows computer remotely. // Occupy The Web Books // Linux Basics for Hackers: amzn.to/3JlAQXe US and amzn.to/43PHFev UK Getting Started Becoming a Master Hacker: amzn.to/3qCQbvh US and amzn.to/43JG2iA UK Network Basics for hackers: amzn.to/3W1iiCQ US and amzn.to/4aInbGK UK // OTW Discount // Use the code BOMBAL to get a 20% discount off anything from OTW's website: hackers-arise.net/ // Occupy The Web SOCIAL // X: twitter.com/three_cube // KZbin Video REFERENCE // Hacker Saves the World. Teaches you Hacking: kzbin.info/www/bejne/qammho18i7Jrrs0 // Playlists REFERENCE // Linux Basics for Hackers: kzbin.info/www/bejne/j3u4h4Gioq6CbKc&pp=iAQB Mr Robot: kzbin.info/www/bejne/aarMhZKNgtGiqck&pp=iAQB Hackers Arise / Occupy the Web Hacks: kzbin.info/www/bejne/fanOfKawhbt3Z68&pp=iAQB // David's SOCIAL // Discord: discord.com/invite/usKSyzb X: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: www.youtube.com/@davidbombal // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail] // MENU // 00:00 - Coming up 00:50 - Linux Basics For Hackers book // OTW books 02:38 - Understanding EternalBlue 03:36 - The story of EternalBlue 06:10 - How exploits are created legally 06:44 - White hat vs black hat 07:16 - The story of EternalBlue continued 09:49 - How ransomware works 11:24 - How ransomware gets into a system // Social engineering 14:28 - The Marcus Hutchins story 14:52 - EternalBlue demo 16:31 - The origins of the name "EternalBlue" 17:36 - EternalBlue demo continued // EternalBlue using Metasploit 25:36 - Contractors working for spy agencies // The Edward Snowden story 31:23 - How Avast is selling user data 33:40 - EternalBlue demo continued 40:09 - How Mimikatz works // Using Mimikatz to get passwords 42:51 - EternalBlue in Wireshark 43:46 - Exploits cause billions in damage // Governments developing malware 44:54 - Shadow Brokers and EternalBlue 45:17 - EternalBlue in Wireshark continued 49:26 - EternalBlue Python script 52:23 - Learning from the past 53:48 - Conclusion nsa cybersecurity hack hacking hacker cyber eternal blue windows hack windows windows hacking mr robot kali linux metasploit #nsa #cybersecurity #hacker

[@Bizzybugproductions]

Where could fans get a chance to meet you?

[@EMME_xm]

Can i get a soft copy?

[@upper-moon-alpha]

Hi David as alway this video was top-notch, I have a request, there is a hacking game is released name "Anonymous Hacker Simulator" its a realistic game based on hacking commands and its available on steam, that would be good if YOU and OTW can review it. maybe this game is a new method for start learning HACKING for beginners. that would be good if we know an expert opinion like you. thanks

[@DarkWays-oz1cf]

Please sir I'm having error with mounting my flash drive

[@ShivanshGupta51]

We all love OTW Please Never Stop these podcasts!

[@lumikarhu]

no way. warning, unpopular take that may make some people screech - otw propagates entry level infosec knowledge, something like john hammond except not shouting all the time. and that image as if he was pretending to be elliot from mr robot while talking about super obvious stuff that was covered in hundreds of youtube videos years ago seems cringy. i'm still waiting for something from him i haven't yet heard. David very well knows that story as well so i'm surprised he invited him over to talk about it. i'm not hating because i can simply just watch something else, i am just telling my opinions on how overrated he is. i've gone through his experience and seeing these "stop russia" banners made me automatically drop all the internet points for him. David has way cooler guests i very much enjoy listening to.

[@BillAnt]

@@lumikarhu - TL;DR ... next! lol

[@AvoidOnly]

@@lumikarhu Keith (OTW) has worked in the security industry for years, and I agree with you on everything else I feel wanting more knowledge from OTW, but it entertains me and I support Davids channel with all my personalities.🤣

[@infiniteinspiration1628]

😮😮😮😮

[@BillAnt]

Fun fact, the guy in the hoodie is actually David Bombal in disguise. ha-ha jk

[@marlinshanklin-ww7em]

David and OTW the two best learning resources for hackers.

[@davidbombal]

Thank you. I appreciate that 😀

[@BillAnt]

​@@davidbombal - That OTW guys sits there pretty stiffly, nor a single movement throughout the video. ha-ha

[@LolliaWhite]

@@BillAnt It's a picture lol

[@BillAnt]

@@LolliaWhite - Of course but makes for great humor. ;D

[@austinebangura2249]

The two men who always motivate me to do things. Love their programs

[@jorgemiguelpissarra9086]

As always, another fantastic video David! Thank you OTW for your continued sharing of knowledge. I found the relationship between the name curious, I always thought it came from the dreaded Windows blue screen...

[@davidbombal]

Thank you. Glad you enjoyed the video :)

[@_K_W]

I have two of his books. I just started my journey in the IT space about 6 months ago. I can't wait to dive in deeper

[@mytechnotalent]

Great to see you again OTW! Thank you David for hosting and discussing such a critical vuln I remember when this broke as it was wild! Thank you both cheers!

[@robtihanyi1155]

Really enjoyed this one David...and kudos to OTW for his very watchable presentations.

[@Bubbasaure92]

Your podcast with OTW are always my favorite!

[@CyberDevilSec]

This is EPIC!! OTW i bought all your books and David we love you!!! I'm so excited!

[@infiniteinspiration1628]

Omg😮😮😮😮😮😅

[@antoineNGHT]

This guy never seizes to amaze me with his antics.

[@fractal_aura]

*ceases to amaze, just so ya know 😅 but yes he's awesome!

[@Human_Shrek]

I swear you two are the best teachers/informational people on the web in terms of hacking. much love David and OTW

[@TorqueDonkeyTeethLewith]

I got my copy of OTW's Linux book!

[@davidbombal]

I hope you enjoy the book!

[@TorqueDonkeyTeethLewith]

@@davidbombal It's definitely been helpful!

[@eggimal]

Will be getting your book in becoming a master hacker when I get my next paycheck. Can t wait. Great content. Love your channel Mr. David Bombal.

[@EddyGurge]

Thank you for creating a wonderful Sunday evening for me. I really enjoyed the video. Thanks guys.

[@Nerzhina]

Hi David & OTW. You fellows are “simply the best!” Thank you both for collaborating & creating these excellent cyber security & ethical hacking video tutorials. Best wishes to both of you gentlemen.

[@jblaze600]

Going home to check if my firewall is blocking port 445 asap lol. This video is an eye opener and motivating after completing Sec+. Thank you to both for making this video.

[@peterlodang6012]

No channel I enjoy on youtube with the exception of David's channel and keep going my mentor.

[@Belkacemnotafraid]

im be so happy when i see otw in your channel i wich to see hes videos all the times i want to thank him for what he doing for helping evryone im sorry for my english cause im arabic im not english

[@SanhuSingh02]

My hacking partner coffee ☕

[@davidbombal]

Enjoy the video :)

[@whoamiwhoami0]

What a coincidence 😊

[@namelastname_]

what about the other 2%?

[@SakshamSingh-wh6ie]

​@@namelastname_what? Can you explain?

[@infiniteinspiration1628]

😮😮😮

[@mustafarahimfandy1660]

I love these episodes, thanks David

[@ariasm8911]

Thank you OTW and David for sharing your knowledge in industry that almost nobody would do

[@dragongamer2774]

Thanks for the amazing explanation!!! Looking forward to buy the books

[@sdvcs-o2v]

i love these history podcasts, something you don't easily hear

[@ryleybulmer6282]

I havent even watched yet but I i know this is gonna be great! My waste of time/money cyber security course has got me programmed to think about legal implications above anything else. I cant wait to actually learn about the theory behind the hack instead of the laws surrounding it.

[@Xsiondu]

I was told that Generally names for operations and projects have a list of words that start with a certain letter. ie, new list has letters E AND B then you choose a word that starts with E on your list and then do the same for the letter B.

[@mossapopal]

the two best teacher i have ever seen

[@rationalbushcraft]

I have done a couple CTFs that used eternal blue. It is kind of amazing how easy it is to do. Normally you have to upgrade to a more fully functional shell to complete the CTF but once you have eternal blue connected it is not hard to get a full reverse powershell connection.

[@84dg3r]

The show you’re talking about is Marco Polo, I mean the connection with the original physical Silk Road could be why they selected that term from the show. Where it originates from I don’t know for sure.

[@aakashshah2734]

He is right, this is the best channel for cyber security and IT

[@mrityunjayadixit1821]

OTW gives that Mafia vibe. The guy who knows everything about everyone, but no one knows even his name.

[@CyberDevilSec]

This weekend i had easter with my family and i brought the book becoming a master hacker with me! :D I never geeked out so hard on a book, i was reading and exploring until 5am XD

[@JaM3s_C0L3]

Snowden mentioned the project names for NSA were randomly generated, such as Stellar Wind. Eternal Blue may be similar?

[@Rockyking0001]

JUST LEAVE A LITTLE LIKE & SUSCRIBE FOR 'OTW'&'David'. FOR SHARING HIS EXPERIENCE & KNOWLEDGE WITH US.

[@CyberDevilSec]

at 18:31 i actually listened to a podcast (dark web diaries) and they interviewed the founder of Metasploit. It's a truly insane story how Metasploit became what it is today! I know the podcast thanks to David!

[@dhia4542]

Pls do not ever think about stop posting videos ❤

[@gamereditor59ner22]

Man! I should take my cold brew while watching this video! Great video! Quick question : If an exploit was use in NSA, would that make it for advance black hat(s) hacker to find it as well?....🤔

[@hugostiglitz7373]

From ChatGPT... One notable pop culture reference to the phrase "eternal blue" is in the video game series "Persona." In "Persona 3," there's a weapon called "Eternal Blue," which is a reference to the legendary sword wielded by the protagonist. Additionally, there's a song titled "Eternal Blue" in "Persona 3 Portable," adding to its significance within the game's lore.

[@ashifshekh6952]

Love OTW.

[@oscarlevipaguada]

I’m contractor working for a energy company as a IT specialist. Most IT workers are contractors. Few work for them

[@piercebros]

Superb content. Thanks at you both!

[@HappytreeLuis]

What's up with the 10% dislike ratio?

[@user-lg4le8xr4s]

About the EternalBlue name, I assume 'blue' is a reference to Windows, with 'eternal' being sort of a reference to exploiting a 0-day, referring to it giving them access to any Windows system... except unfortunately for them it wasn't eternal.

[@pandit-jee-bihar]

Please do a live demo like this for XZ Utils exploit

[@NotAnITGuy]

Too soon, educational not tutorials 😂

[@benrayner9813]

brilliant video ! OTW and a tutorial on Wireshark basics would be a great video?

[@eiddiAmin]

plz any help out there . I am f2 student and i joined this channel to be part and parcel of this field. I tried to run kali linux in my phone using termux but vnc passwd is preventing me to do so. Please help me 😢

[@lcwmg]

I tried the following step in msf6. is there's any different on msf verison. cause I can't set the RHOST and prompt Login Failed : Connection rest by peer, please help

[@Zagnikasalam]

I love otw conversation with you david Please make a video on bitcion tracing please🙏🙏🙏🙏

[@alamahmed-cr1db]

yes please david

[@2012mrmoh]

OTW and Chris are my favourite

[@sber6941]

I have a question can you help me my linux laptop is giving me this error find: /dev/zvol/: No such file or directory find: /dev/zvol/: No such file or directory can anyone help me to switch to windows

[@Bytorsnowdog5900]

Love your channel David. Where is the best place for an absolute newb to get started? I would love to learn to code and ethically hack.

[@Wasko2]

At a guess, perhaps the name Eternal Blue may have been referring to Windows because of the default blue desktop background, and Eternal in reference to the persistence of the exploit. Very long shot as I doubt even the NSA would be so arrogant to think that the exploit would be eternal, but yeah thats the best guess I could think of.

[@imintheVID]

Hey David, what’s the uk equivalent of defcon?

[@coreyman00]

But 445 is usually not open from the Internet, this would need to be done on the local network?

[@Phantom-mk4kp]

Exactly my first thought

[@salemmusbah3676]

As Me ,,,i am thing what kind of process they made to mitigate system ,, is it (SE)?

[@Supp772]

OTW ❤❤❤

[@tlesta666]

Great vid again mr Bombal, i have a problem i have forgotten my sign in pin what is best procedure? T.IA

[@Muhammad_Karim709]

U can make video for revanced app in mobile?

[@jaywall4591]

Pretty sure Eternal Blue is related to Gengis Khan. Specificially Tengrism. Look up Kök Tengri. Its the supreme spirit in the sky, responsible for maintaining balance and the progression of climates

[@NickelCityPixels]

To my knowledge I've never been compromised by hacks. Compromise by system breaking patches? Multiple times.

[@azm_gaming]

the video notifications are nice

[@davidbombal]

Happy to hear that!

[@respect_ssm]

Any one tell me hot to install and use blueborne attack

[@livestreamvi7991]

Thank you sir for making video about otw .please sir don't stop this podcast never ever.you are the tow are the best teacher ❤❤❤❤❤❤❤thank you sir❤❤❤❤❤

[@SK-pr1zw]

what about a Mac? do they have much offensive side of things they can do against them?

[@Bizzybugproductions]

Yes actually... They'll just call your mom while you're out and bait her into giving them physical access.... 😈

[@CyberDevilSec]

Man i really WISH i could join these classes! Ever since OTW got introduced i really wanted to join. The only problem is the price. I'm a millennial and i legit don't have that money on my bank unfortunately... I really hope OTW could be giving away some membership to loyal followers because i really would die to join these classes they look so amazing!!

[@countvonthizzle9623]

@OTW - IIRC, Initially, M$FT said no. Then the FTC threatned to take them to court for anti-trust. Then they caved in/settled/bitched out/got punked/and proceded to screw every customer's privacy.

[@John-yx2is]

Awesome- thankyou both.

[@aakashshah2734]

If work on Mr robot then Please title talk about the UPS blowing, because it's so much crazy and there is not so much information avaible on internet about it, So Please try to add it sir

[@johnmcmanus6719]

Instead of copying and pasting, just search the exploit and type the number next to it and press enter saves time

[@filipbarneman4510]

I have a question for you two, do you think goverments and simularly powerful entities have simular tools and access today?

[@Wasko2]

They most probably are able to break any encryption and have similar exploits to the level of Eternal Blue imo. Sorry I am not the ones you are asking. I would like to hear their opinion as well ;)

[@ReefMimic]

Wish knew how to read that . Played with wireshark but couldn’t teach myself it

[@SagaraUrz]

Microsoft had the patch for Eternal Blue already, they probably had talks with NSA on helping them develop the malware.

[@matthewmatthews113]

Could it be eternal (forever) blue (Microsoft) exploit

[@Eaglepass]

Wijac widgets usable space.

[@WmJamesWofford]

31:02 Microsoft said what? The ones we already gave you ain’t good enough? No worries here da ng for your delights….. YAR

[@mutasamali5441]

We need you to complete the linux basics for hackers course 😢

[@lupus_lupi]

Since OTW asked Eternal Blue was religion of Ghengis Khan, Tengri the "Sky father" was a supreme deity of the Mongols (and Turkic tribes in Asian steppes), Eternal Blue Sky was one of the names for Tengri, specifically in times of peril or "divine mission" as Ghengis Khan believed his conquest was. I'm afraid that's what many governments worldwide think of themselves today.

[@Sageibmk]

How can I get the book network basic for hackers in Nigeria? Is it on stores .

[@davidbombal]

Not sure, but I purchased mine from Amazon

[@Bizzybugproductions]

You Can't, It's sale has been banned there....

[@Sageibmk]

@@Bizzybugproductionsokay

[@Theabstractblu]

You can find a lot of books from a dark web library. Look up tor taxi, there's a library there. Epub/PDFs etc. good luck

[@arknet_cyber]

would be good to see the forensic analysis and reverse engineering on iphone airdrop on how you can extract information from the airdrop such as phone number of the sender

[@carsonjamesiv2512]

COOL!🎉

[@Sageibmk]

How can i join hackers arise

[@OussamaOussama-kw3yk]

Thank you so much David

[@robtihanyi1155]

My understanding is that Eternal Blue refers to an infinite blue screen of death...

[@Lei_Wong]

Great episode.

[@Gigi-zy1kx]

Thank you David and es

[@solomn7990]

Guys anyone to help me I have failed to install snort in parrot os

[@Ester_z579]

I don't know what to do when i use tp link v2/v3 for wifi penetrating by wifite ,after the 5 min count down it say network not found but i literally put the router near it. I N E E D H E L P

[@alonzostevens1476]

Some satellite SDR for the next video would be great ..

[@thetechboyorg]

Eternal blue screen of death?

[@electricianone3090]

Exactly what I thought when I first heard of this years ago.

[@thetechboyorg]

@@electricianone3090 nice

[@johnjacob9588]

first view, first like, first comment

[@davidbombal]

Thank you for your support!

[@User-uk6rk]

... and first nerd.

[@wiesiekhalapenio6688]

I'm curious who the NSA is actually trying to track down through this backdor. People who care about privacy prefer not to use Microsoft tools.

[@juaninfante7000]

There are a ton of dumb criminals/politicians

[@arknet_cyber]

Awesome podcast

[@demonman1234]

Honestly, I think the name "EternalBlue" would be a reference to Window's blue color scheme, and "Eternal" can mean some like higher-power or something of the sorts since they've never thought the exploit would be released.. But it could be a reference to a show, I know I'd name my exploit after a show if I made one LOL

[@scottvermillion5310]

NSA is an agency, not an administration. Just sayin.

[@Coding-Hero-Hitesh]

i love that place ❤❤

[@tsuperuser]

Eternal = forever access, Blue = Windows.

[@Starwatcher2222]

Windows desktops were blueish for years, since it only worked on those machines.

[@georgestephens3513]

Always enjoy, I just wish I could get my 84 year old mind around it all.

[@quarkidee2878]

As one wise man said: The best Firewall is to unplug the Internet.

[@pedal2m]

The eternal blue comes from the Eternal Blue Sky of Mongolian Steppe ground. ....

[@IlIIllIlIlIIlIlIlIlIIl]

btw his name is Keith Debus.