Demo of the Microsoft Window's Hack developed by the NSA (with OTW)

[@davidbombal]

OTW demonstrates how to use the NSA hack with Metasploit and take control of a Windows computer remotely. // Occupy The Web Books // Linux Basics for Hackers: amzn.to/3JlAQXe US and amzn.to/43PHFev UK Getting Started Becoming a Master Hacker: amzn.to/3qCQbvh US and amzn.to/43JG2iA UK Network Basics for hackers: amzn.to/3W1iiCQ US and amzn.to/4aInbGK UK // OTW Discount // Use the code BOMBAL to get a 20% discount off anything from OTW's website: hackers-arise.net/ // Occupy The Web SOCIAL // X: twitter.com/three_cube // KZbin Video REFERENCE // Hacker Saves the World. Teaches you Hacking: kzbin.info/www/bejne/qammho18i7Jrrs0 // Playlists REFERENCE // Linux Basics for Hackers: kzbin.info/www/bejne/j3u4h4Gioq6CbKc&pp=iAQB Mr Robot: kzbin.info/www/bejne/aarMhZKNgtGiqck&pp=iAQB Hackers Arise / Occupy the Web Hacks: kzbin.info/www/bejne/fanOfKawhbt3Z68&pp=iAQB // David's SOCIAL // Discord: discord.com/invite/usKSyzb X: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: www.youtube.com/@davidbombal // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail] // MENU // 00:00 - Coming up 00:50 - Linux Basics For Hackers book // OTW books 02:38 - Understanding EternalBlue 03:36 - The story of EternalBlue 06:10 - How exploits are created legally 06:44 - White hat vs black hat 07:16 - The story of EternalBlue continued 09:49 - How ransomware works 11:24 - How ransomware gets into a system // Social engineering 14:28 - The Marcus Hutchins story 14:52 - EternalBlue demo 16:31 - The origins of the name "EternalBlue" 17:36 - EternalBlue demo continued // EternalBlue using Metasploit 25:36 - Contractors working for spy agencies // The Edward Snowden story 31:23 - How Avast is selling user data 33:40 - EternalBlue demo continued 40:09 - How Mimikatz works // Using Mimikatz to get passwords 42:51 - EternalBlue in Wireshark 43:46 - Exploits cause billions in damage // Governments developing malware 44:54 - Shadow Brokers and EternalBlue 45:17 - EternalBlue in Wireshark continued 49:26 - EternalBlue Python script 52:23 - Learning from the past 53:48 - Conclusion nsa cybersecurity hack hacking hacker cyber eternal blue windows hack windows windows hacking mr robot kali linux metasploit #nsa #cybersecurity #hacker

[@Bizzybugproductions]

Where could fans get a chance to meet you?

[@EMME_xm]

Can i get a soft copy?

[@upper-moon-alpha]

Hi David as alway this video was top-notch, I have a request, there is a hacking game is released name "Anonymous Hacker Simulator" its a realistic game based on hacking commands and its available on steam, that would be good if YOU and OTW can review it. maybe this game is a new method for start learning HACKING for beginners. that would be good if we know an expert opinion like you. thanks

[@DarkWays-oz1cf]

Please sir I'm having error with mounting my flash drive

[@ShivanshGupta51]

We all love OTW Please Never Stop these podcasts!

[@lumikarhu]

no way. warning, unpopular take that may make some people screech - otw propagates entry level infosec knowledge, something like john hammond except not shouting all the time. and that image as if he was pretending to be elliot from mr robot while talking about super obvious stuff that was covered in hundreds of youtube videos years ago seems cringy. i'm still waiting for something from him i haven't yet heard. David very well knows that story as well so i'm surprised he invited him over to talk about it. i'm not hating because i can simply just watch something else, i am just telling my opinions on how overrated he is. i've gone through his experience and seeing these "stop russia" banners made me automatically drop all the internet points for him. David has way cooler guests i very much enjoy listening to.

[@BillAnt]

@@lumikarhu - TL;DR ... next! lol

[@AvoidOnly]

@@lumikarhu Keith (OTW) has worked in the security industry for years, and I agree with you on everything else I feel wanting more knowledge from OTW, but it entertains me and I support Davids channel with all my personalities.🤣

[@infiniteinspiration1628]

😮😮😮😮

[@BillAnt]

Fun fact, the guy in the hoodie is actually David Bombal in disguise. ha-ha jk

[@marlinshanklin-ww7em]

David and OTW the two best learning resources for hackers.

[@davidbombal]

Thank you. I appreciate that 😀

[@BillAnt]

​@@davidbombal - That OTW guys sits there pretty stiffly, nor a single movement throughout the video. ha-ha

[@LolliaWhite]

@@BillAnt It's a picture lol

[@BillAnt]

@@LolliaWhite - Of course but makes for great humor. ;D

[@austinebangura2249]

The two men who always motivate me to do things. Love their programs

[@jorgemiguelpissarra9086]

As always, another fantastic video David! Thank you OTW for your continued sharing of knowledge. I found the relationship between the name curious, I always thought it came from the dreaded Windows blue screen...

[@davidbombal]

Thank you. Glad you enjoyed the video :)

[@mytechnotalent]

Great to see you again OTW! Thank you David for hosting and discussing such a critical vuln I remember when this broke as it was wild! Thank you both cheers!

[@robtihanyi1155]

Really enjoyed this one David...and kudos to OTW for his very watchable presentations.

[@CyberDevilSec]

This is EPIC!! OTW i bought all your books and David we love you!!! I'm so excited!

[@infiniteinspiration1628]

Omg😮😮😮😮😮😅

[@Bubbasaure92]

Your podcast with OTW are always my favorite!

[@antoineNGHT]

This guy never seizes to amaze me with his antics.

[@fractal_aura]

*ceases to amaze, just so ya know 😅 but yes he's awesome!

[@_K_W]

I have two of his books. I just started my journey in the IT space about 6 months ago. I can't wait to dive in deeper

[@TorqueDonkeyTeethLewith]

I got my copy of OTW's Linux book!

[@davidbombal]

I hope you enjoy the book!

[@TorqueDonkeyTeethLewith]

@@davidbombal It's definitely been helpful!

[@Human_Shrek]

I swear you two are the best teachers/informational people on the web in terms of hacking. much love David and OTW

[@eggimal]

Will be getting your book in becoming a master hacker when I get my next paycheck. Can t wait. Great content. Love your channel Mr. David Bombal.

[@jblaze600]

Going home to check if my firewall is blocking port 445 asap lol. This video is an eye opener and motivating after completing Sec+. Thank you to both for making this video.

[@SanhuSingh02]

My hacking partner coffee ☕

[@davidbombal]

Enjoy the video :)

[@whoamiwhoami0]

What a coincidence 😊

[@namelastname_]

what about the other 2%?

[@SakshamSingh-wh6ie]

​@@namelastname_what? Can you explain?

[@infiniteinspiration1628]

😮😮😮

[@EddyGurge]

Thank you for creating a wonderful Sunday evening for me. I really enjoyed the video. Thanks guys.

[@peterlodang6012]

No channel I enjoy on youtube with the exception of David's channel and keep going my mentor.

[@ariasm8911]

Thank you OTW and David for sharing your knowledge in industry that almost nobody would do

[@sdvcs-o2v]

i love these history podcasts, something you don't easily hear

[@Nerzhina]

Hi David & OTW. You fellows are “simply the best!” Thank you both for collaborating & creating these excellent cyber security & ethical hacking video tutorials. Best wishes to both of you gentlemen.

[@mustafarahimfandy1660]

I love these episodes, thanks David

[@dragongamer2774]

Thanks for the amazing explanation!!! Looking forward to buy the books

[@mrityunjayadixit1821]

OTW gives that Mafia vibe. The guy who knows everything about everyone, but no one knows even his name.

[@CyberDevilSec]

This weekend i had easter with my family and i brought the book becoming a master hacker with me! :D I never geeked out so hard on a book, i was reading and exploring until 5am XD

[@Belkacemnotafraid]

im be so happy when i see otw in your channel i wich to see hes videos all the times i want to thank him for what he doing for helping evryone im sorry for my english cause im arabic im not english

[@ryleybulmer6282]

I havent even watched yet but I i know this is gonna be great! My waste of time/money cyber security course has got me programmed to think about legal implications above anything else. I cant wait to actually learn about the theory behind the hack instead of the laws surrounding it.

[@mossapopal]

the two best teacher i have ever seen

[@dhia4542]

Pls do not ever think about stop posting videos ❤

[@Rockyking0001]

JUST LEAVE A LITTLE LIKE & SUSCRIBE FOR 'OTW'&'David'. FOR SHARING HIS EXPERIENCE & KNOWLEDGE WITH US.

[@aakashshah2734]

He is right, this is the best channel for cyber security and IT

[@oscarlevipaguada]

I’m contractor working for a energy company as a IT specialist. Most IT workers are contractors. Few work for them

[@Zagnikasalam]

I love otw conversation with you david Please make a video on bitcion tracing please🙏🙏🙏🙏

[@alamahmed-cr1db]

yes please david

[@piercebros]

Superb content. Thanks at you both!

[@84dg3r]

The show you’re talking about is Marco Polo, I mean the connection with the original physical Silk Road could be why they selected that term from the show. Where it originates from I don’t know for sure.

[@rationalbushcraft]

I have done a couple CTFs that used eternal blue. It is kind of amazing how easy it is to do. Normally you have to upgrade to a more fully functional shell to complete the CTF but once you have eternal blue connected it is not hard to get a full reverse powershell connection.

[@hugostiglitz7373]

From ChatGPT... One notable pop culture reference to the phrase "eternal blue" is in the video game series "Persona." In "Persona 3," there's a weapon called "Eternal Blue," which is a reference to the legendary sword wielded by the protagonist. Additionally, there's a song titled "Eternal Blue" in "Persona 3 Portable," adding to its significance within the game's lore.

[@HappytreeLuis]

What's up with the 10% dislike ratio?

[@Xsiondu]

I was told that Generally names for operations and projects have a list of words that start with a certain letter. ie, new list has letters E AND B then you choose a word that starts with E on your list and then do the same for the letter B.

[@gamereditor59ner22]

Man! I should take my cold brew while watching this video! Great video! Quick question : If an exploit was use in NSA, would that make it for advance black hat(s) hacker to find it as well?....🤔

[@benrayner9813]

brilliant video ! OTW and a tutorial on Wireshark basics would be a great video?

[@azm_gaming]

the video notifications are nice

[@davidbombal]

Happy to hear that!

[@coreyman00]

But 445 is usually not open from the Internet, this would need to be done on the local network?

[@Phantom-mk4kp]

Exactly my first thought

[@salemmusbah3676]

As Me ,,,i am thing what kind of process they made to mitigate system ,, is it (SE)?

[@JaM3s_C0L3]

Snowden mentioned the project names for NSA were randomly generated, such as Stellar Wind. Eternal Blue may be similar?

[@Supp772]

OTW ❤❤❤

[@CyberDevilSec]

Man i really WISH i could join these classes! Ever since OTW got introduced i really wanted to join. The only problem is the price. I'm a millennial and i legit don't have that money on my bank unfortunately... I really hope OTW could be giving away some membership to loyal followers because i really would die to join these classes they look so amazing!!

[@imintheVID]

Hey David, what’s the uk equivalent of defcon?

[@2012mrmoh]

OTW and Chris are my favourite

[@ashifshekh6952]

Love OTW.

[@lcwmg]

I tried the following step in msf6. is there's any different on msf verison. cause I can't set the RHOST and prompt Login Failed : Connection rest by peer, please help

[@CyberDevilSec]

at 18:31 i actually listened to a podcast (dark web diaries) and they interviewed the founder of Metasploit. It's a truly insane story how Metasploit became what it is today! I know the podcast thanks to David!

[@John-yx2is]

Awesome- thankyou both.

[@OussamaOussama-kw3yk]

Thank you so much David

[@Bytorsnowdog5900]

Love your channel David. Where is the best place for an absolute newb to get started? I would love to learn to code and ethically hack.

[@respect_ssm]

Any one tell me hot to install and use blueborne attack

[@filipbarneman4510]

I have a question for you two, do you think goverments and simularly powerful entities have simular tools and access today?

[@Wasko2]

They most probably are able to break any encryption and have similar exploits to the level of Eternal Blue imo. Sorry I am not the ones you are asking. I would like to hear their opinion as well ;)

[@SK-pr1zw]

what about a Mac? do they have much offensive side of things they can do against them?

[@Bizzybugproductions]

Yes actually... They'll just call your mom while you're out and bait her into giving them physical access.... 😈

[@jaywall4591]

Pretty sure Eternal Blue is related to Gengis Khan. Specificially Tengrism. Look up Kök Tengri. Its the supreme spirit in the sky, responsible for maintaining balance and the progression of climates

[@Muhammad_Karim709]

U can make video for revanced app in mobile?

[@tlesta666]

Great vid again mr Bombal, i have a problem i have forgotten my sign in pin what is best procedure? T.IA

[@sber6941]

I have a question can you help me my linux laptop is giving me this error find: /dev/zvol/: No such file or directory find: /dev/zvol/: No such file or directory can anyone help me to switch to windows

[@livestreamvi7991]

Thank you sir for making video about otw .please sir don't stop this podcast never ever.you are the tow are the best teacher ❤❤❤❤❤❤❤thank you sir❤❤❤❤❤

[@user-lg4le8xr4s]

About the EternalBlue name, I assume 'blue' is a reference to Windows, with 'eternal' being sort of a reference to exploiting a 0-day, referring to it giving them access to any Windows system... except unfortunately for them it wasn't eternal.

[@carsonjamesiv2512]

COOL!🎉

[@Wasko2]

At a guess, perhaps the name Eternal Blue may have been referring to Windows because of the default blue desktop background, and Eternal in reference to the persistence of the exploit. Very long shot as I doubt even the NSA would be so arrogant to think that the exploit would be eternal, but yeah thats the best guess I could think of.

[@eiddiAmin]

plz any help out there . I am f2 student and i joined this channel to be part and parcel of this field. I tried to run kali linux in my phone using termux but vnc passwd is preventing me to do so. Please help me 😢

[@Gigi-zy1kx]

Thank you David and es

[@lupus_lupi]

Since OTW asked Eternal Blue was religion of Ghengis Khan, Tengri the "Sky father" was a supreme deity of the Mongols (and Turkic tribes in Asian steppes), Eternal Blue Sky was one of the names for Tengri, specifically in times of peril or "divine mission" as Ghengis Khan believed his conquest was. I'm afraid that's what many governments worldwide think of themselves today.

[@johnmcmanus6719]

Instead of copying and pasting, just search the exploit and type the number next to it and press enter saves time

[@countvonthizzle9623]

@OTW - IIRC, Initially, M$FT said no. Then the FTC threatned to take them to court for anti-trust. Then they caved in/settled/bitched out/got punked/and proceded to screw every customer's privacy.

[@Sageibmk]

How can i join hackers arise

[@Lei_Wong]

Great episode.

[@SagaraUrz]

Microsoft had the patch for Eternal Blue already, they probably had talks with NSA on helping them develop the malware.

[@arknet_cyber]

Awesome podcast

[@mutasamali5441]

We need you to complete the linux basics for hackers course 😢

[@Sageibmk]

How can I get the book network basic for hackers in Nigeria? Is it on stores .

[@davidbombal]

Not sure, but I purchased mine from Amazon

[@Bizzybugproductions]

You Can't, It's sale has been banned there....

[@Sageibmk]

@@Bizzybugproductionsokay

[@Theabstractblu]

You can find a lot of books from a dark web library. Look up tor taxi, there's a library there. Epub/PDFs etc. good luck

[@robtihanyi1155]

My understanding is that Eternal Blue refers to an infinite blue screen of death...

[@demonman1234]

Honestly, I think the name "EternalBlue" would be a reference to Window's blue color scheme, and "Eternal" can mean some like higher-power or something of the sorts since they've never thought the exploit would be released.. But it could be a reference to a show, I know I'd name my exploit after a show if I made one LOL

[@NickelCityPixels]

To my knowledge I've never been compromised by hacks. Compromise by system breaking patches? Multiple times.

[@pandit-jee-bihar]

Please do a live demo like this for XZ Utils exploit

[@NotAnITGuy]

Too soon, educational not tutorials 😂

[@matthewmatthews113]

Could it be eternal (forever) blue (Microsoft) exploit

[@alonzostevens1476]

Some satellite SDR for the next video would be great ..

[@Coding-Hero-Hitesh]

i love that place ❤❤

[@GustavoPinho89]

OTW highlighting the bloke's email and telling 2.500.000 people to give him a shout-out 😂😂😂😂😂😂

[@tsuperuser]

Eternal = forever access, Blue = Windows.

[@ReefMimic]

Wish knew how to read that . Played with wireshark but couldn’t teach myself it

[@thetechboyorg]

Eternal blue screen of death?

[@electricianone3090]

Exactly what I thought when I first heard of this years ago.

[@thetechboyorg]

@@electricianone3090 nice

[@georgestephens3513]

Always enjoy, I just wish I could get my 84 year old mind around it all.

[@cobraviky2799]

Thanks a lots @ david and otw ❤

[@solomn7990]

Guys anyone to help me I have failed to install snort in parrot os

[@quarkidee2878]

As one wise man said: The best Firewall is to unplug the Internet.

[@Starwatcher2222]

Windows desktops were blueish for years, since it only worked on those machines.

[@WmJamesWofford]

31:02 Microsoft said what? The ones we already gave you ain’t good enough? No worries here da ng for your delights….. YAR

[@Eaglepass]

Wijac widgets usable space.

[@pedal2m]

The eternal blue comes from the Eternal Blue Sky of Mongolian Steppe ground. ....

[@majiddehbi9186]

very good topic

[@IlIIllIlIlIIlIlIlIlIIl]

btw his name is Keith Debus.

[@aakashshah2734]

If work on Mr robot then Please title talk about the UPS blowing, because it's so much crazy and there is not so much information avaible on internet about it, So Please try to add it sir

[@Theabstractblu]

Eternal Blue came from early SpongeBob

[@Glitch-game-hacker]

COOL

[@davidbombal]

I hope you enjoy the video :)

[@Glitch-game-hacker]

@@davidbombal omg I so happy you responded you are one of my favorite KZbinrs your the best