Demo of the Microsoft Window's Hack developed by the NSA (with OTW)

OTW demonstrates how to use the NSA hack with Metasploit and take control of a Windows computer remotely.
// Occupy The Web Books //
Linux Basics for Hackers: amzn.to/3JlAQXe US and amzn.to/43PHFev UK
Getting Started Becoming a Master Hacker: amzn.to/3qCQbvh US and amzn.to/43JG2iA UK
Network Basics for hackers: amzn.to/3W1iiCQ US and amzn.to/4aInbGK UK
// OTW Discount //
Use the code BOMBAL to get a 20% discount off anything from OTW's website: hackers-arise.net/
// Occupy The Web SOCIAL //
X: / three_cube
// KZbin Video REFERENCE //
Hacker Saves the World. Teaches you Hacking: • Hacker saves the world...
// Playlists REFERENCE //
Linux Basics for Hackers: • Linux for Hackers Tuto...
Mr Robot: • Hack like Mr Robot // ...
Hackers Arise / Occupy the Web Hacks: • Hacking Tools (with de...
// David's SOCIAL //
Discord: / discord
X: / davidbombal
Instagram: / davidbombal
LinkedIn: / davidbombal
Facebook: / davidbombal.co
TikTok: / davidbombal
KZbin: / @davidbombal
// MY STUFF //
www.amazon.com/shop/davidbombal
// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: [e-mail]
// MENU //
00:00 - Coming up
00:50 - Linux Basics For Hackers book // OTW books
02:38 - Understanding EternalBlue
03:36 - The story of EternalBlue
06:10 - How exploits are created legally
06:44 - White hat vs black hat
07:16 - The story of EternalBlue continued
09:49 - How ransomware works
11:24 - How ransomware gets into a system // Social engineering
14:28 - The Marcus Hutchins story
14:52 - EternalBlue demo
16:31 - The origins of the name "EternalBlue"
17:36 - EternalBlue demo continued // EternalBlue using Metasploit
25:36 - Contractors working for spy agencies // The Edward Snowden story
31:23 - How Avast is selling user data
33:40 - EternalBlue demo continued
40:09 - How Mimikatz works // Using Mimikatz to get passwords
42:51 - EternalBlue shown in Wireshark
43:46 - Exploits cause billions in damage // Governments developing malware
44:54 - Shadow Brokers and EternalBlue
45:17 - EthernalBlue in Wireshark continued
49:26 - EternalBlue Python script
52:23 - Learning from the past
53:48 - Conclusion
nsa
cybersecurity
hack
hacking
hacker
cyber
eternal blue
windows
hack windows
windows hacking
mr robot
kali linux
metasploit
#nsa #cybersecurity #hacker

[@davidbombal]

OTW demonstrates how to use the NSA hack with Metasploit and take control of a Windows computer remotely. // Occupy The Web Books // Linux Basics for Hackers: amzn.to/3JlAQXe US and amzn.to/43PHFev UK Getting Started Becoming a Master Hacker: amzn.to/3qCQbvh US and amzn.to/43JG2iA UK Network Basics for hackers: amzn.to/3W1iiCQ US and amzn.to/4aInbGK UK // OTW Discount // Use the code BOMBAL to get a 20% discount off anything from OTW's website: hackers-arise.net/ // Occupy The Web SOCIAL // X: twitter.com/three_cube // KZbin Video REFERENCE // Hacker Saves the World. Teaches you Hacking: kzbin.info/www/bejne/qammho18i7Jrrs0 // Playlists REFERENCE // Linux Basics for Hackers: kzbin.info/www/bejne/j3u4h4Gioq6CbKc&pp=iAQB Mr Robot: kzbin.info/www/bejne/aarMhZKNgtGiqck&pp=iAQB Hackers Arise / Occupy the Web Hacks: kzbin.info/www/bejne/fanOfKawhbt3Z68&pp=iAQB // David's SOCIAL // Discord: discord.com/invite/usKSyzb X: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: www.youtube.com/@davidbombal // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail] // MENU // 00:00 - Coming up 00:50 - Linux Basics For Hackers book // OTW books 02:38 - Understanding EternalBlue 03:36 - The story of EternalBlue 06:10 - How exploits are created legally 06:44 - White hat vs black hat 07:16 - The story of EternalBlue continued 09:49 - How ransomware works 11:24 - How ransomware gets into a system // Social engineering 14:28 - The Marcus Hutchins story 14:52 - EternalBlue demo 16:31 - The origins of the name "EternalBlue" 17:36 - EternalBlue demo continued // EternalBlue using Metasploit 25:36 - Contractors working for spy agencies // The Edward Snowden story 31:23 - How Avast is selling user data 33:40 - EternalBlue demo continued 40:09 - How Mimikatz works // Using Mimikatz to get passwords 42:51 - EternalBlue in Wireshark 43:46 - Exploits cause billions in damage // Governments developing malware 44:54 - Shadow Brokers and EternalBlue 45:17 - EternalBlue in Wireshark continued 49:26 - EternalBlue Python script 52:23 - Learning from the past 53:48 - Conclusion nsa cybersecurity hack hacking hacker cyber eternal blue windows hack windows windows hacking mr robot kali linux metasploit #nsa #cybersecurity #hacker

[@Bizzybugproductions]

Where could fans get a chance to meet you?

[@AdeyemoOlamilekan-xs5ij]

Can i get a soft copy?

[@user-gk3vk2di4p]

Hi David as alway this video was top-notch, I have a request, there is a hacking game is released name "Anonymous Hacker Simulator" its a realistic game based on hacking commands and its available on steam, that would be good if YOU and OTW can review it. maybe this game is a new method for start learning HACKING for beginners. that would be good if we know an expert opinion like you. thanks

[@DarkWays-oz1cf]

Please sir I'm having error with mounting my flash drive

[@ShivanshGupta51]

We all love OTW Please Never Stop these podcasts!

[@lumikarhu]

no way. warning, unpopular take that may make some people screech - otw propagates entry level infosec knowledge, something like john hammond except not shouting all the time. and that image as if he was pretending to be elliot from mr robot while talking about super obvious stuff that was covered in hundreds of youtube videos years ago seems cringy. i'm still waiting for something from him i haven't yet heard. David very well knows that story as well so i'm surprised he invited him over to talk about it. i'm not hating because i can simply just watch something else, i am just telling my opinions on how overrated he is. i've gone through his experience and seeing these "stop russia" banners made me automatically drop all the internet points for him. David has way cooler guests i very much enjoy listening to.

[@BillAnt]

@@lumikarhu - TL;DR ... next! lol

[@AvoidOnly]

@@lumikarhu Keith (OTW) has worked in the security industry for years, and I agree with you on everything else I feel wanting more knowledge from OTW, but it entertains me and I support Davids channel with all my personalities.🤣

[@infiniteinspiration1628]

😮😮😮😮

[@BillAnt]

Fun fact, the guy in the hoodie is actually David Bombal in disguise. ha-ha jk

[@marlinshanklin-ww7em]

David and OTW the two best learning resources for hackers.

[@davidbombal]

Thank you. I appreciate that 😀

[@BillAnt]

​@@davidbombal - That OTW guys sits there pretty stiffly, nor a single movement throughout the video. ha-ha

[@LolliaWhite]

@@BillAnt It's a picture lol

[@BillAnt]

@@LolliaWhite - Of course but makes for great humor. ;D

[@mytechnotalent]

Great to see you again OTW! Thank you David for hosting and discussing such a critical vuln I remember when this broke as it was wild! Thank you both cheers!

[@austinebangura2249]

The two men who always motivate me to do things. Love their programs

[@SanhuSingh02]

My hacking partner coffee ☕

[@davidbombal]

Enjoy the video :)

[@whoamiwhoami0]

What a coincidence 😊

[@namelastname_]

what about the other 2%?

[@SakshamSingh-wh6ie]

​@@namelastname_what? Can you explain?

[@infiniteinspiration1628]

😮😮😮

[@jorgemiguelpissarra9086]

As always, another fantastic video David! Thank you OTW for your continued sharing of knowledge. I found the relationship between the name curious, I always thought it came from the dreaded Windows blue screen...

[@davidbombal]

Thank you. Glad you enjoyed the video :)

[@user-in2jf7tx1q]

i love these history podcasts, something you don't easily hear

[@Bubbasaure92]

Your podcast with OTW are always my favorite!

[@Human_Shrek]

I swear you two are the best teachers/informational people on the web in terms of hacking. much love David and OTW

[@dragongamer2774]

Thanks for the amazing explanation!!! Looking forward to buy the books

[@EddyGurge]

Thank you for creating a wonderful Sunday evening for me. I really enjoyed the video. Thanks guys.

[@jblaze600]

Going home to check if my firewall is blocking port 445 asap lol. This video is an eye opener and motivating after completing Sec+. Thank you to both for making this video.

[@eggimal]

Will be getting your book in becoming a master hacker when I get my next paycheck. Can t wait. Great content. Love your channel Mr. David Bombal.

[@Doc4Tardis]

I got my copy of OTW's Linux book!

[@davidbombal]

I hope you enjoy the book!

[@Doc4Tardis]

@@davidbombal It's definitely been helpful!

[@robtihanyi1155]

Really enjoyed this one David...and kudos to OTW for his very watchable presentations.

[@cyberdevil657]

This is EPIC!! OTW i bought all your books and David we love you!!! I'm so excited!

[@infiniteinspiration1628]

Omg😮😮😮😮😮😅

[@nidhigupta1022]

It's always be great to see your guys together ! 😁

[@ariasm8911]

Thank you OTW and David for sharing your knowledge in industry that almost nobody would do

[@peterlodang6012]

No channel I enjoy on youtube with the exception of David's channel and keep going my mentor.

[@_K_W]

I have two of his books. I just started my journey in the IT space about 6 months ago. I can't wait to dive in deeper

[@antoineNGHT]

This guy never seizes to amaze me with his antics.

[@Nerzhina]

Hi David & OTW. You fellows are “simply the best!” Thank you both for collaborating & creating these excellent cyber security & ethical hacking video tutorials. Best wishes to both of you gentlemen.

[@mustafarahimfandy1660]

I love these episodes, thanks David

[@Langeta-kun]

I aspire to be as knowledgeable as you gentlemen one day

[@cyberdevil657]

This weekend i had easter with my family and i brought the book becoming a master hacker with me! :D I never geeked out so hard on a book, i was reading and exploring until 5am XD

[@piercebros]

Superb content. Thanks at you both!

[@gamereditor59ner22]

Man! I should take my cold brew while watching this video! Great video! Quick question : If an exploit was use in NSA, would that make it for advance black hat(s) hacker to find it as well?....🤔

[@rationalbushcraft]

I have done a couple CTFs that used eternal blue. It is kind of amazing how easy it is to do. Normally you have to upgrade to a more fully functional shell to complete the CTF but once you have eternal blue connected it is not hard to get a full reverse powershell connection.

[@dhia4542]

Pls do not ever think about stop posting videos ❤

[@John-yx2is]

Awesome- thankyou both.

[@ryleybulmer6282]

I havent even watched yet but I i know this is gonna be great! My waste of time/money cyber security course has got me programmed to think about legal implications above anything else. I cant wait to actually learn about the theory behind the hack instead of the laws surrounding it.

[@OussamaOussama-kw3yk]

Thank you so much David

[@aakashshah2734]

He is right, this is the best channel for cyber security and IT

[@84dg3r]

The show you’re talking about is Marco Polo, I mean the connection with the original physical Silk Road could be why they selected that term from the show. Where it originates from I don’t know for sure.

[@mrityunjayadixit1821]

OTW gives that Mafia vibe. The guy who knows everything about everyone, but no one knows even his name.

[@Gigi-zy1kx]

Thank you David and es

[@benrayner9813]

brilliant video ! OTW and a tutorial on Wireshark basics would be a great video?

[@Xsiondu]

I was told that Generally names for operations and projects have a list of words that start with a certain letter. ie, new list has letters E AND B then you choose a word that starts with E on your list and then do the same for the letter B.

[@oscarlevipaguada]

I’m contractor working for a energy company as a IT specialist. Most IT workers are contractors. Few work for them

[@Bytorsnowdog5900]

Love your channel David. Where is the best place for an absolute newb to get started? I would love to learn to code and ethically hack.

[@hugostiglitz7373]

From ChatGPT... One notable pop culture reference to the phrase "eternal blue" is in the video game series "Persona." In "Persona 3," there's a weapon called "Eternal Blue," which is a reference to the legendary sword wielded by the protagonist. Additionally, there's a song titled "Eternal Blue" in "Persona 3 Portable," adding to its significance within the game's lore.

[@ashifshekh6952]

Love OTW.

[@2012mrmoh]

OTW and Chris are my favourite

[@JaM3s_C0L3]

Snowden mentioned the project names for NSA were randomly generated, such as Stellar Wind. Eternal Blue may be similar?

[@user-tc6mw3yr3p]

Sir your are my teacher since 2year iam learning alot your gem sir from Pakistan 🇵🇰

[@davidbombal]

Very happy to hear that 😀

[@0Er0]

Are your parents cousins? And do you plan on marrying your cousin?

[@Zagnikasalam]

I love otw conversation with you david Please make a video on bitcion tracing please🙏🙏🙏🙏

[@alamahmed-cr1db]

yes please david

[@tlesta666]

Great vid again mr Bombal, i have a problem i have forgotten my sign in pin what is best procedure? T.IA

[@azm_gaming]

the video notifications are nice

[@davidbombal]

Happy to hear that!

[@arknet9246]

Awesome podcast

[@jaywall4591]

Pretty sure Eternal Blue is related to Gengis Khan. Specificially Tengrism. Look up Kök Tengri. Its the supreme spirit in the sky, responsible for maintaining balance and the progression of climates

[@Lei_Wong]

Great episode.

[@cyberdevil657]

at 18:31 i actually listened to a podcast (dark web diaries) and they interviewed the founder of Metasploit. It's a truly insane story how Metasploit became what it is today! I know the podcast thanks to David!

[@cyberdevil657]

Man i really WISH i could join these classes! Ever since OTW got introduced i really wanted to join. The only problem is the price. I'm a millennial and i legit don't have that money on my bank unfortunately... I really hope OTW could be giving away some membership to loyal followers because i really would die to join these classes they look so amazing!!

[@carsonjamesiv2512]

COOL!🎉

[@pandit-jee-bihar]

Please do a live demo like this for XZ Utils exploit

[@NotAnITGuy]

Too soon, educational not tutorials 😂

[@HappytreeLuis]

What's up with the 10% dislike ratio?

[@DreamingPandora]

There was a video game called Lunar 2 Eternal Blue. Greatest game I ever played tbh, but it probably has nothing to do with this. Really great game. Though. I loved Hiro and Ruby so much.

[@mutasamali5441]

We need you to complete the linux basics for hackers course 😢

[@Supp772]

OTW ❤❤❤

[@Wasko2]

At a guess, perhaps the name Eternal Blue may have been referring to Windows because of the default blue desktop background, and Eternal in reference to the persistence of the exploit. Very long shot as I doubt even the NSA would be so arrogant to think that the exploit would be eternal, but yeah thats the best guess I could think of.

[@user-lg4le8xr4s]

About the EternalBlue name, I assume 'blue' is a reference to Windows, with 'eternal' being sort of a reference to exploiting a 0-day, referring to it giving them access to any Windows system... except unfortunately for them it wasn't eternal.

[@livestreamvi7991]

Thank you sir for making video about otw .please sir don't stop this podcast never ever.you are the tow are the best teacher ❤❤❤❤❤❤❤thank you sir❤❤❤❤❤

[@imintheVID]

Hey David, what’s the uk equivalent of defcon?

[@Rockyking0001]

JUST LEAVE A LITTLE LIKE & SUSCRIBE FOR 'OTW'&'David'. FOR SHARING HIS EXPERIENCE & KNOWLEDGE WITH US.

[@majiddehbi9186]

very good topic

[@ProducerBillionaire]

I like it, thank you

[@muhammadfayyaz1649]

Both are beast

[@alonzostevens1476]

Some satellite SDR for the next video would be great ..

[@Muhammad_Karim709]

U can make video for revanced app in mobile?

[@SagaraUrz]

Microsoft had the patch for Eternal Blue already, they probably had talks with NSA on helping them develop the malware.

[@cobraviky2799]

Thanks a lots @ david and otw ❤

[@demonman1234]

Honestly, I think the name "EternalBlue" would be a reference to Window's blue color scheme, and "Eternal" can mean some like higher-power or something of the sorts since they've never thought the exploit would be released.. But it could be a reference to a show, I know I'd name my exploit after a show if I made one LOL

[@aakashshah2734]

If work on Mr robot then Please title talk about the UPS blowing, because it's so much crazy and there is not so much information avaible on internet about it, So Please try to add it sir

[@ReefMimic]

Wish knew how to read that . Played with wireshark but couldn’t teach myself it

[@Steve-ds6yl]

Awesome

[@Eaglepass]

Wijac widgets usable space.

[@robtihanyi1155]

My understanding is that Eternal Blue refers to an infinite blue screen of death...

[@countvonthizzle9623]

@OTW - IIRC, Initially, M$FT said no. Then the FTC threatned to take them to court for anti-trust. Then they caved in/settled/bitched out/got punked/and proceded to screw every customer's privacy.

[@filipbarneman4510]

I have a question for you two, do you think goverments and simularly powerful entities have simular tools and access today?

[@Wasko2]

They most probably are able to break any encryption and have similar exploits to the level of Eternal Blue imo. Sorry I am not the ones you are asking. I would like to hear their opinion as well ;)

[@Flipperzero116]

COOL

[@davidbombal]

I hope you enjoy the video :)

[@Flipperzero116]

@@davidbombal omg I so happy you responded you are one of my favorite KZbinrs your the best

[@johnjacob9588]

first view, first like, first comment

[@davidbombal]

Thank you for your support!

[@User-uk6rk]

... and first nerd.

[@lcwmg]

I tried the following step in msf6. is there's any different on msf verison. cause I can't set the RHOST and prompt Login Failed : Connection rest by peer, please help

[@NickelCityPixels]

To my knowledge I've never been compromised by hacks. Compromise by system breaking patches? Multiple times.

[@sagacitytv9288]

Great

[@davidbombal]

It's a cool demo :) I hope you learn something new

[@georgestephens3513]

Always enjoy, I just wish I could get my 84 year old mind around it all.

[@lupus_croatiae]

Since OTW asked Eternal Blue was religion of Ghengis Khan, Tengri the "Sky father" was a supreme deity of the Mongols (and Turkic tribes in Asian steppes), Eternal Blue Sky was one of the names for Tengri, specifically in times of peril or "divine mission" as Ghengis Khan believed his conquest was. I'm afraid that's what many governments worldwide think of themselves today.

[@user-sx1ke5ie6t]

plz any help out there . I am f2 student and i joined this channel to be part and parcel of this field. I tried to run kali linux in my phone using termux but vnc passwd is preventing me to do so. Please help me 😢

[@johnmcmanus6719]

Instead of copying and pasting, just search the exploit and type the number next to it and press enter saves time

[@quarkidee2878]

As one wise man said: The best Firewall is to unplug the Internet.

[@MrNobody24766]

OTW The Best

[@matthewmatthews113]

Could it be eternal (forever) blue (Microsoft) exploit

[@SK-pr1zw]

what about a Mac? do they have much offensive side of things they can do against them?

[@Bizzybugproductions]

Yes actually... They'll just call your mom while you're out and bait her into giving them physical access.... 😈

[@tsuperuser]

Eternal = forever access, Blue = Windows.

[@Foiliagegaming]

Eternal= always in Blue=windows

[@gymtraining81]

OTW ....... S2........

[@sber6941]

I have a question can you help me my linux laptop is giving me this error find: /dev/zvol/: No such file or directory find: /dev/zvol/: No such file or directory can anyone help me to switch to windows

[@Starwatcher2222]

Windows desktops were blueish for years, since it only worked on those machines.

[@respect_ssm]

Any one tell me hot to install and use blueborne attack

[@pedal2m]

The eternal blue comes from the Eternal Blue Sky of Mongolian Steppe ground. ....