Demo of the Microsoft Window's Hack developed by the NSA (with OTW)

OTW demonstrates how to use the NSA hack with Metasploit and take control of a Windows computer remotely.
// Occupy The Web Books //
Linux Basics for Hackers: amzn.to/3JlAQXe US and amzn.to/43PHFev UK
Getting Started Becoming a Master Hacker: amzn.to/3qCQbvh US and amzn.to/43JG2iA UK
Network Basics for hackers: amzn.to/3W1iiCQ US and amzn.to/4aInbGK UK
// OTW Discount //
Use the code BOMBAL to get a 20% discount off anything from OTW's website: hackers-arise.net/
// Occupy The Web SOCIAL //
X: / three_cube
// KZbin Video REFERENCE //
Hacker Saves the World. Teaches you Hacking: • Hacker saves the world...
// Playlists REFERENCE //
Linux Basics for Hackers: • Linux for Hackers Tuto...
Mr Robot: • Hack like Mr Robot // ...
Hackers Arise / Occupy the Web Hacks: • Hacking Tools (with de...
// David's SOCIAL //
Discord: / discord
X: / davidbombal
Instagram: / davidbombal
LinkedIn: / davidbombal
Facebook: / davidbombal.co
TikTok: / davidbombal
KZbin: / @davidbombal
// MY STUFF //
www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: [e-mail]
// MENU //
00:00 - Coming up
00:50 - Linux Basics For Hackers book // OTW books
02:38 - Understanding EternalBlue
03:36 - The story of EternalBlue
06:10 - How exploits are created legally
06:44 - White hat vs black hat
07:16 - The story of EternalBlue continued
09:49 - How ransomware works
11:24 - How ransomware gets into a system // Social engineering
14:28 - The Marcus Hutchins story
14:52 - EternalBlue demo
16:31 - The origins of the name "EternalBlue"
17:36 - EternalBlue demo continued // EternalBlue using Metasploit
25:36 - Contractors working for spy agencies // The Edward Snowden story
31:23 - How Avast is selling user data
33:40 - EternalBlue demo continued
40:09 - How Mimikatz works // Using Mimikatz to get passwords
42:51 - EternalBlue shown in Wireshark
43:46 - Exploits cause billions in damage // Governments developing malware
44:54 - Shadow Brokers and EternalBlue
45:17 - EthernalBlue in Wireshark continued
49:26 - EternalBlue Python script
52:23 - Learning from the past
53:48 - Conclusion
nsa
cybersecurity
hack
hacking
hacker
cyber
eternal blue
windows
hack windows
windows hacking
mr robot
kali linux
metasploit
#nsa #cybersecurity #hacker

[@davidbombal]

OTW demonstrates how to use the NSA hack with Metasploit and take control of a Windows computer remotely. // Occupy The Web Books // Linux Basics for Hackers: amzn.to/3JlAQXe US and amzn.to/43PHFev UK Getting Started Becoming a Master Hacker: amzn.to/3qCQbvh US and amzn.to/43JG2iA UK Network Basics for hackers: amzn.to/3W1iiCQ US and amzn.to/4aInbGK UK // OTW Discount // Use the code BOMBAL to get a 20% discount off anything from OTW's website: hackers-arise.net/ // Occupy The Web SOCIAL // X: twitter.com/three_cube // KZbin Video REFERENCE // Hacker Saves the World. Teaches you Hacking: kzbin.info/www/bejne/qammho18i7Jrrs0 // Playlists REFERENCE // Linux Basics for Hackers: kzbin.info/www/bejne/j3u4h4Gioq6CbKc&pp=iAQB Mr Robot: kzbin.info/www/bejne/aarMhZKNgtGiqck&pp=iAQB Hackers Arise / Occupy the Web Hacks: kzbin.info/www/bejne/fanOfKawhbt3Z68&pp=iAQB // David's SOCIAL // Discord: discord.com/invite/usKSyzb X: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: www.youtube.com/@davidbombal // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail] // MENU // 00:00 - Coming up 00:50 - Linux Basics For Hackers book // OTW books 02:38 - Understanding EternalBlue 03:36 - The story of EternalBlue 06:10 - How exploits are created legally 06:44 - White hat vs black hat 07:16 - The story of EternalBlue continued 09:49 - How ransomware works 11:24 - How ransomware gets into a system // Social engineering 14:28 - The Marcus Hutchins story 14:52 - EternalBlue demo 16:31 - The origins of the name "EternalBlue" 17:36 - EternalBlue demo continued // EternalBlue using Metasploit 25:36 - Contractors working for spy agencies // The Edward Snowden story 31:23 - How Avast is selling user data 33:40 - EternalBlue demo continued 40:09 - How Mimikatz works // Using Mimikatz to get passwords 42:51 - EternalBlue in Wireshark 43:46 - Exploits cause billions in damage // Governments developing malware 44:54 - Shadow Brokers and EternalBlue 45:17 - EternalBlue in Wireshark continued 49:26 - EternalBlue Python script 52:23 - Learning from the past 53:48 - Conclusion nsa cybersecurity hack hacking hacker cyber eternal blue windows hack windows windows hacking mr robot kali linux metasploit #nsa #cybersecurity #hacker

[@Bizzybugproductions]

Where could fans get a chance to meet you?

[@AdeyemoOlamilekan-xs5ij]

Can i get a soft copy?

[@user-gk3vk2di4p]

Hi David as alway this video was top-notch, I have a request, there is a hacking game is released name "Anonymous Hacker Simulator" its a realistic game based on hacking commands and its available on steam, that would be good if YOU and OTW can review it. maybe this game is a new method for start learning HACKING for beginners. that would be good if we know an expert opinion like you. thanks

[@DarkWays-oz1cf]

Please sir I'm having error with mounting my flash drive

[@ShivanshGupta51]

We all love OTW Please Never Stop these podcasts!

[@lumikarhu]

no way. warning, unpopular take that may make some people screech - otw propagates entry level infosec knowledge, something like john hammond except not shouting all the time. and that image as if he was pretending to be elliot from mr robot while talking about super obvious stuff that was covered in hundreds of youtube videos years ago seems cringy. i'm still waiting for something from him i haven't yet heard. David very well knows that story as well so i'm surprised he invited him over to talk about it. i'm not hating because i can simply just watch something else, i am just telling my opinions on how overrated he is. i've gone through his experience and seeing these "stop russia" banners made me automatically drop all the internet points for him. David has way cooler guests i very much enjoy listening to.

[@BillAnt]

@@lumikarhu - TL;DR ... next! lol

[@AvoidOnly]

@@lumikarhu Keith (OTW) has worked in the security industry for years, and I agree with you on everything else I feel wanting more knowledge from OTW, but it entertains me and I support Davids channel with all my personalities.🤣

[@infiniteinspiration1628]

😮😮😮😮

[@BillAnt]

Fun fact, the guy in the hoodie is actually David Bombal in disguise. ha-ha jk

[@marlinshanklin-ww7em]

David and OTW the two best learning resources for hackers.

[@davidbombal]

Thank you. I appreciate that 😀

[@BillAnt]

​@@davidbombal - That OTW guys sits there pretty stiffly, nor a single movement throughout the video. ha-ha

[@LolliaWhite]

@@BillAnt It's a picture lol

[@BillAnt]

@@LolliaWhite - Of course but makes for great humor. ;D

[@austinebangura2249]

The two men who always motivate me to do things. Love their programs

[@jorgemiguelpissarra9086]

As always, another fantastic video David! Thank you OTW for your continued sharing of knowledge. I found the relationship between the name curious, I always thought it came from the dreaded Windows blue screen...

[@davidbombal]

Thank you. Glad you enjoyed the video :)

[@mytechnotalent]

Great to see you again OTW! Thank you David for hosting and discussing such a critical vuln I remember when this broke as it was wild! Thank you both cheers!

[@robtihanyi1155]

Really enjoyed this one David...and kudos to OTW for his very watchable presentations.

[@Bubbasaure92]

Your podcast with OTW are always my favorite!

[@SanhuSingh02]

My hacking partner coffee ☕

[@davidbombal]

Enjoy the video :)

[@whoamiwhoami0]

What a coincidence 😊

[@namelastname_]

what about the other 2%?

[@SakshamSingh-wh6ie]

​@@namelastname_what? Can you explain?

[@infiniteinspiration1628]

😮😮😮

[@EddyGurge]

Thank you for creating a wonderful Sunday evening for me. I really enjoyed the video. Thanks guys.

[@dragongamer2774]

Thanks for the amazing explanation!!! Looking forward to buy the books

[@user-in2jf7tx1q]

i love these history podcasts, something you don't easily hear

[@Human_Shrek]

I swear you two are the best teachers/informational people on the web in terms of hacking. much love David and OTW

[@cyberdevil657]

This is EPIC!! OTW i bought all your books and David we love you!!! I'm so excited!

[@infiniteinspiration1628]

Omg😮😮😮😮😮😅

[@TorqueDonkeyTeethLewith]

I got my copy of OTW's Linux book!

[@davidbombal]

I hope you enjoy the book!

[@TorqueDonkeyTeethLewith]

@@davidbombal It's definitely been helpful!

[@mustafarahimfandy1660]

I love these episodes, thanks David

[@eggimal]

Will be getting your book in becoming a master hacker when I get my next paycheck. Can t wait. Great content. Love your channel Mr. David Bombal.

[@jblaze600]

Going home to check if my firewall is blocking port 445 asap lol. This video is an eye opener and motivating after completing Sec+. Thank you to both for making this video.

[@nidhigupta1022]

It's always be great to see your guys together ! 😁

[@peterlodang6012]

No channel I enjoy on youtube with the exception of David's channel and keep going my mentor.

[@antoineNGHT]

This guy never seizes to amaze me with his antics.

[@ariasm8911]

Thank you OTW and David for sharing your knowledge in industry that almost nobody would do

[@Nerzhina]

Hi David & OTW. You fellows are “simply the best!” Thank you both for collaborating & creating these excellent cyber security & ethical hacking video tutorials. Best wishes to both of you gentlemen.

[@Langeta-kun]

I aspire to be as knowledgeable as you gentlemen one day

[@piercebros]

Superb content. Thanks at you both!

[@_K_W]

I have two of his books. I just started my journey in the IT space about 6 months ago. I can't wait to dive in deeper

[@cyberdevil657]

This weekend i had easter with my family and i brought the book becoming a master hacker with me! :D I never geeked out so hard on a book, i was reading and exploring until 5am XD

[@John-yx2is]

Awesome- thankyou both.

[@rationalbushcraft]

I have done a couple CTFs that used eternal blue. It is kind of amazing how easy it is to do. Normally you have to upgrade to a more fully functional shell to complete the CTF but once you have eternal blue connected it is not hard to get a full reverse powershell connection.

[@Belkacemnotafraid]

im be so happy when i see otw in your channel i wich to see hes videos all the times i want to thank him for what he doing for helping evryone im sorry for my english cause im arabic im not english

[@84dg3r]

The show you’re talking about is Marco Polo, I mean the connection with the original physical Silk Road could be why they selected that term from the show. Where it originates from I don’t know for sure.

[@OussamaOussama-kw3yk]

Thank you so much David

[@gamereditor59ner22]

Man! I should take my cold brew while watching this video! Great video! Quick question : If an exploit was use in NSA, would that make it for advance black hat(s) hacker to find it as well?....🤔

[@dhia4542]

Pls do not ever think about stop posting videos ❤

[@benrayner9813]

brilliant video ! OTW and a tutorial on Wireshark basics would be a great video?

[@aakashshah2734]

He is right, this is the best channel for cyber security and IT

[@Gigi-zy1kx]

Thank you David and es

[@ryleybulmer6282]

I havent even watched yet but I i know this is gonna be great! My waste of time/money cyber security course has got me programmed to think about legal implications above anything else. I cant wait to actually learn about the theory behind the hack instead of the laws surrounding it.

[@Xsiondu]

I was told that Generally names for operations and projects have a list of words that start with a certain letter. ie, new list has letters E AND B then you choose a word that starts with E on your list and then do the same for the letter B.

[@Bytorsnowdog5900]

Love your channel David. Where is the best place for an absolute newb to get started? I would love to learn to code and ethically hack.

[@oscarlevipaguada]

I’m contractor working for a energy company as a IT specialist. Most IT workers are contractors. Few work for them

[@ashifshekh6952]

Love OTW.

[@mrityunjayadixit1821]

OTW gives that Mafia vibe. The guy who knows everything about everyone, but no one knows even his name.

[@2012mrmoh]

OTW and Chris are my favourite

[@JaM3s_C0L3]

Snowden mentioned the project names for NSA were randomly generated, such as Stellar Wind. Eternal Blue may be similar?

[@arknet_cyber]

Awesome podcast

[@Lei_Wong]

Great episode.

[@user-tc6mw3yr3p]

Sir your are my teacher since 2year iam learning alot your gem sir from Pakistan 🇵🇰

[@davidbombal]

Very happy to hear that 😀

[@0Er0]

Are your parents cousins? And do you plan on marrying your cousin?

[@tlesta666]

Great vid again mr Bombal, i have a problem i have forgotten my sign in pin what is best procedure? T.IA

[@hugostiglitz7373]

From ChatGPT... One notable pop culture reference to the phrase "eternal blue" is in the video game series "Persona." In "Persona 3," there's a weapon called "Eternal Blue," which is a reference to the legendary sword wielded by the protagonist. Additionally, there's a song titled "Eternal Blue" in "Persona 3 Portable," adding to its significance within the game's lore.

[@Zagnikasalam]

I love otw conversation with you david Please make a video on bitcion tracing please🙏🙏🙏🙏

[@alamahmed-cr1db]

yes please david

[@Supp772]

OTW ❤❤❤

[@imintheVID]

Hey David, what’s the uk equivalent of defcon?

[@majiddehbi9186]

very good topic

[@HappytreeLuis]

What's up with the 10% dislike ratio?

[@carsonjamesiv2512]

COOL!🎉

[@lcwmg]

I tried the following step in msf6. is there's any different on msf verison. cause I can't set the RHOST and prompt Login Failed : Connection rest by peer, please help

[@azm_gaming]

the video notifications are nice

[@davidbombal]

Happy to hear that!

[@ProducerBillionaire]

I like it, thank you

[@pandit-jee-bihar]

Please do a live demo like this for XZ Utils exploit

[@NotAnITGuy]

Too soon, educational not tutorials 😂

[@jaywall4591]

Pretty sure Eternal Blue is related to Gengis Khan. Specificially Tengrism. Look up Kök Tengri. Its the supreme spirit in the sky, responsible for maintaining balance and the progression of climates

[@Muhammad_Karim709]

U can make video for revanced app in mobile?

[@user-lg4le8xr4s]

About the EternalBlue name, I assume 'blue' is a reference to Windows, with 'eternal' being sort of a reference to exploiting a 0-day, referring to it giving them access to any Windows system... except unfortunately for them it wasn't eternal.

[@alonzostevens1476]

Some satellite SDR for the next video would be great ..

[@muhammadfayyaz1649]

Both are beast

[@Rockyking0001]

JUST LEAVE A LITTLE LIKE & SUSCRIBE FOR 'OTW'&'David'. FOR SHARING HIS EXPERIENCE & KNOWLEDGE WITH US.

[@mutasamali5441]

We need you to complete the linux basics for hackers course 😢

[@DreamingPandora]

There was a video game called Lunar 2 Eternal Blue. Greatest game I ever played tbh, but it probably has nothing to do with this. Really great game. Though. I loved Hiro and Ruby so much.

[@Steve-ds6yl]

Awesome

[@user-sx1ke5ie6t]

plz any help out there . I am f2 student and i joined this channel to be part and parcel of this field. I tried to run kali linux in my phone using termux but vnc passwd is preventing me to do so. Please help me 😢

[@sber6941]

I have a question can you help me my linux laptop is giving me this error find: /dev/zvol/: No such file or directory find: /dev/zvol/: No such file or directory can anyone help me to switch to windows

[@cyberdevil657]

Man i really WISH i could join these classes! Ever since OTW got introduced i really wanted to join. The only problem is the price. I'm a millennial and i legit don't have that money on my bank unfortunately... I really hope OTW could be giving away some membership to loyal followers because i really would die to join these classes they look so amazing!!

[@livestreamvi7991]

Thank you sir for making video about otw .please sir don't stop this podcast never ever.you are the tow are the best teacher ❤❤❤❤❤❤❤thank you sir❤❤❤❤❤

[@johnjacob9588]

first view, first like, first comment

[@davidbombal]

Thank you for your support!

[@User-uk6rk]

... and first nerd.

[@ReefMimic]

Wish knew how to read that . Played with wireshark but couldn’t teach myself it

[@filipbarneman4510]

I have a question for you two, do you think goverments and simularly powerful entities have simular tools and access today?

[@Wasko2]

They most probably are able to break any encryption and have similar exploits to the level of Eternal Blue imo. Sorry I am not the ones you are asking. I would like to hear their opinion as well ;)

[@cobraviky2799]

Thanks a lots @ david and otw ❤

[@Wasko2]

At a guess, perhaps the name Eternal Blue may have been referring to Windows because of the default blue desktop background, and Eternal in reference to the persistence of the exploit. Very long shot as I doubt even the NSA would be so arrogant to think that the exploit would be eternal, but yeah thats the best guess I could think of.

[@cyberdevil657]

at 18:31 i actually listened to a podcast (dark web diaries) and they interviewed the founder of Metasploit. It's a truly insane story how Metasploit became what it is today! I know the podcast thanks to David!

[@respect_ssm]

Any one tell me hot to install and use blueborne attack

[@SK-pr1zw]

what about a Mac? do they have much offensive side of things they can do against them?

[@Bizzybugproductions]

Yes actually... They'll just call your mom while you're out and bait her into giving them physical access.... 😈

[@SagaraUrz]

Microsoft had the patch for Eternal Blue already, they probably had talks with NSA on helping them develop the malware.

[@sagacitytv9288]

Great

[@davidbombal]

It's a cool demo :) I hope you learn something new

[@Eaglepass]

Wijac widgets usable space.

[@matthewmatthews113]

Could it be eternal (forever) blue (Microsoft) exploit

[@georgestephens3513]

Always enjoy, I just wish I could get my 84 year old mind around it all.

[@robtihanyi1155]

My understanding is that Eternal Blue refers to an infinite blue screen of death...

[@Sageibmk]

How can i join hackers arise

[@ankitbasava7468]

🙌

[@demonman1234]

Honestly, I think the name "EternalBlue" would be a reference to Window's blue color scheme, and "Eternal" can mean some like higher-power or something of the sorts since they've never thought the exploit would be released.. But it could be a reference to a show, I know I'd name my exploit after a show if I made one LOL

[@solomn7990]

Guys anyone to help me I have failed to install snort in parrot os

[@coreyman00]

But 445 is usually not open from the Internet, this would need to be done on the local network?

[@Phantom-mk4kp]

Exactly my first thought

[@salemmusbah3676]

As Me ,,,i am thing what kind of process they made to mitigate system ,, is it (SE)?

[@NickelCityPixels]

To my knowledge I've never been compromised by hacks. Compromise by system breaking patches? Multiple times.

[@MrNobody24766]

OTW The Best

[@user-ld9rr1zl3b]

🎉❤

[@Game-hacker223]

COOL

[@davidbombal]

I hope you enjoy the video :)

[@Game-hacker223]

@@davidbombal omg I so happy you responded you are one of my favorite KZbinrs your the best

[@aakashshah2734]

If work on Mr robot then Please title talk about the UPS blowing, because it's so much crazy and there is not so much information avaible on internet about it, So Please try to add it sir

[@countvonthizzle9623]

@OTW - IIRC, Initially, M$FT said no. Then the FTC threatned to take them to court for anti-trust. Then they caved in/settled/bitched out/got punked/and proceded to screw every customer's privacy.

[@pedal2m]

The eternal blue comes from the Eternal Blue Sky of Mongolian Steppe ground. ....

[@fanyfany596]

good