The Truth About Hacking

An insight into what real world hacking is actually like and breaking down some of the most common hacking techniques.
00:00 Introduction
00:45 The Reality of Zero Day Exploits
01:30 Office Macros
02:19 Phishing
02:49 N-Day Exploits
04:01 VPN Hopping
04:45 Step By Step Manuals
06:02 Evolution Of Hacking As A Service
07:29 Real World Incident Reports
07:42 Conclusion

[@yunggoosbumps215]

Happy that people like you exist Marcus. Too many pseudo-intellectuals in this industry brag about how smart they are while google dorking for other people's guides on how to hack. I think the hardest thing is sitting down and learning the fundamentals of computers because it can be boring at times to learn about OSI vs TCP/IP, etc.

[@user-fd9hx9hd9q]

I can agree with the learning the fundamentals part i’ve been skipping weeks without learning something new because the fundamentals are boring to get through but it’s essential

[@user-fd9hx9hd9q]

I can agree with the learning the fundamentals part i’ve been skipping weeks without learning something new because the fundamentals are boring to get through but it’s essential

[@maeldirzol8381]

Where would you recommend going online to learn the fundamentals?

[@sergsergesrgergseg]

@@maeldirzol8381 learn to code its easy to go down rabbit holes

[@GarciaDorelion]

Me actually learning OSI and TCP/IP : 🤔🤔🤔

[@cameronribeiro9660]

Hacking is just like accounting or being an attorney: if you consistently practice it everyday or every night, you're going to get better and better at it and your memory in that topic is going to improve and as you're consistency goes you're going to develop questions which will be what deepens your interest and knowledge in the topic. For example: have anyone of you ever wondered: So how did hackers do their job before automation existed such as Burp, Metasploit etc? Which could lead you to the next question: Could you do you job today in 2022 without Burp, Metasploit etc? And: How did they build Burp, Metasploit? See where questions like those take you. Your motivation and interest will ultimately decide where or how far questions such as those take you!

[@deanwhite8413]

Your voice is perfect for computer science ASMR. You can get educated and fall asleep to this. Thank you for the great content. I love your channel.

[@ericasw28]

Hey man ! awesome content, that really rebound on Chris Hadnagy's books :) Just a little bit of sound tip for editing : throw a high pass filter on 30-50Hz, that will get rid of the thumping sound that you mic picks up when you touch your table ^^

[@goofballbiscuits3647]

So well said, Marcus. I've been doing this thing for 25 years. Got into my first system to erase fines at 13. It was too easy and not because of my brilliance... but due to the lack of security and awareness in my target. It was like training to play in the major leagues and then only having to clap my hands to win the championship lol I'd built it up so much in my head with theory and the application was so simple and beautiful.

[@sev7463]

"Got into my first system to erase fines at 13" I've never heard of a 13 year old being fined before. What fines did you get?

[@goofballbiscuits3647]

@@sev7463 School library fines, genius. My backpack was stolen when visiting my sister in the hospital after her stroke. They made me pay for my textbooks (expensive as hell) and the ones I had checked out. They wouldn't take them off so I did it myself. American public schools' cybersecurity in 2001 was virtually non-existent. I made a million contingency plans that were wholly unnecessary. A keylogger on an unlocked librarian PC was all it took. Ez pz gg.

[@sev7463]

@@goofballbiscuits3647 Yeah, that happened.

[@goofballbiscuits3647]

@@sev7463 I'm not here to compete with your trust issues, insane stranger who felt like commenting below me. I hope you can find a therapist that helps lol

[@sev7463]

@@goofballbiscuits3647 You think someone needs a therapist because they don't believe a particular story they read online? And you say I need a therapist? Alright then.

[@user-ed8bk6rz9s]

Hi Marcus Just watched your story on youtube, I'm glad to see you are well and using your knowledge in a positive way, greetings from Australia.

[@jowebb7]

Thanks for the insight Marcus! It really is good to hear from someone who really knows what he is talking about.

[@bernova1024]

Keep it up bro, your videos are high quality and straightforward.

[@mikelevel9]

I love your channel a lot, keep at it, you have the quality and potential to make it big!!!

[@tiaxanderson9725]

I actually followed a 3 hour snippit of a Global Knowledge week long hacking course (for CEH) last Friday and they mirrored this sentiment.

[@mandingosaurus3553]

Saving the world and teaching us too! Never stop being awesome Marcus. Subscribed :)

[@aurinator]

Great channel Marcus, thanks for making and updating it!! Have you heard of/possibly remember SoftICE?

[@lordofallworlds9244]

I really needed this motivation today, thank you Marcus 🙏🏽💪🏽

[@definty]

Need to release a patch to fix all these user errors. It's difficult though when several billion are in production and have barely any tests passed.

[@insightmanagedservicesllc812]

Marcus is great at explaining technical concepts!

[@marju010]

Wow as someone interested in cybersecurity your closing remarks are just what I needed to hear.

[@wikinoa]

One question: if you have your system up-to-date (av & firewall too), does really enabling macros in infected excel file means game over? I guess enabled macro could try download some malicious program on your computer, but will AV block it or not?

[@WACtheRaven]

I really do appreciate you Marcus. I can literally feel life trying to funnel me down the path of Cyber Sec... and I want to let it. I'm truly blessed to have people in the industry telling me exactly what I need to know to get my bearings in the industry. Truly grateful, for the free knowledge you spread.

[@DK-ox7ze]

This guy speaks so softly and calmly. I wish I could remain even half his calm, and my life will be sorted.

[@tillorrly1128]

Not sure how I ended up on a ASMR channel, i was looking for hack the planet...

[@thefirm9679]

What a amazing perspective, great content and please keep up this great work. By the way You have a new sub.

[@PingoX]

Side note: can you turn your bass (low freq) down on your shure sm7b equalizer? I have a profile on my speaker to turn low freqs down and it's still hard to hear you clearly

[@deaconmile]

Lmao… I LOVED the intro. You are awesome man! Love your channel more everyday

[@Johna41223]

I'm very glad hacking is easily accesible and done in groups now, but I wish we still did the old school single person hacks

[@yuriipm3973]

This is very misleading - sure, there are drones, like in any other industry; but the core problems are hard and solved by very smart, motivated and highly proficient ppl.

[@ryanchase2140]

It's like back in the day you needed to know how to read a map now you just google it

[@clearlyclearor]

This video is misleading ,bruhh

[@fRaNKiEb0NEz.]

Marcus, THANK YOU SOO MUCH BRO! I actually got a copy of the zip file, translated into English and now I have something to read whenever I take a break from self-learning the C Language. You are my idol dude, so down to Earth and a GENIUS.

[@v380riMz]

where did you find it

[@65hammad]

Really a highly rated work, sir.

[@m.alexbenny4500]

you're truly an Inspiration Marcus

[@harelperry7051]

Thank you for your content and the support

[@MapsbyMax]

So how do I get my perspective as a criminal to the ethical hacking/IT job hemisphere or any type of employment??

[@yacce4463]

Look who he is! Subscribed, looking forward for your content. Hopefully some advanced stuff would be very welcome, outside the realm of infotainment.

[@arili-eo7vw]

great summarization!

[@box_1126]

hey marcus, ima really really curious do you own a discord guild(aka server) about malware? or atleast have a malware in their name, ive seen one with your youtube pfp randomly found it while searching guilds using the dashboard on discord below the create button

[@Jupiterxice]

I always look walk thru and notes of previous hackers. HTB and CTFs are just to get your mind of what hacking is. I am still learning and its 3yrs in

[@elisansabimana6200]

This video is amazing. It should be titled Hacking Exposed. Thank you so much Marcus for this great video.

[@johanparada]

Love does non egotistic perspective that you're sharing here with people because most people try to make cybersecurity seem as if only the most intelligent of it are able to do so and it's really irritating because of the fact that it almost roadblocks anybody trying to do the good side of it and pushes all the people who don't give a crap to doing the bad part so I appreciate your honest perspective really valuable appreciate you

[@NiitLifeCreative]

Your voice conveys confidence and calm, that's why I have a hunch that in case of a significant network incident your company will send you in to meet senior management :) Otherwise, good content!

[@marcovalentinoalvarado3290]

Really good to see you leveling up your game, thank you so much for sharing and I wish you success, greetings from Argentina!

[@naeemulhoque1777]

If anybody wondering if Marcus is the credible person, well this is the guy who stopped the WannaCry ransomware. 👏👏

[@cem5470]

damn, that's a good reference to have

[@youaremad1736]

Anyone can elaborate more please?

[@naeemulhoque1777]

@@youaremad1736 search his name online bro, he even has Wikipedia page.

[@archygrey9093]

wait really?

[@youaremad1736]

@@naeemulhoque1777 oh snap, what the hell. I thought this guys was just some random cybersecurity KZbinr 😂😂😂

[@timmyhuynh3859]

Thanks for your informative video and if you have a podcast, i think i can listen to your voice all day LoL.

[@gbubemia]

Enlightening video! Thank you!

[@ivasivancic2355]

Amazing overview ,and it is trend at this moment in world

[@blueberryberryblue]

Thank you!! You are an absolute scholar and gentleman!!

[@fitzysbaby2677]

I used to do that, I'd learn something new and create my own document on it so I'd always be able to look back if I forget or get stumped in the future

[@thomasmartin5403]

Awesome content as usual

[@SavageScientist]

Man where did you get those dark blue nanoleafs they are dope

[@cybersploit7378]

interesting video!!! i was wondering if you could explain how threat actors use unregistered domains for their ransomware. From the little i know i don't know how it's possible to use a domain that is unregistered since it will have no DNS records.

[@pwnengine]

Exactly, iirc wannacry checked for a connection to an unregistered domain. If the connection succeeded it would decrypt. So, registering the domain decrypted the infected machines, or stopped it from encrypting more, can’t remember lol.

[@cybersploit7378]

@@pwnengine thanks for explaining

[@uttarkhandcooltech1237]

well understood. Thank you you are the best teacher.

[@ChoppedAndScrewedMusic]

Ur voice is extremely calming

[@mikemeetstec]

Wow, your voice is so soothing.

[@dragolinu]

that cheered me up , keep it up!

[@JasperMorgan1]

ALWAYS fascinating.

[@undefined8102]

Your voice/mic audio is soo relaxing

[@-ydk]

how does pegasus 2 without downloading get installed into ios and android? They say the call or watsupp message is simply enough

[@jeffyramalhocardioworkouts]

Love your video, you gave me hope.

[@emmanuelboakye1124]

Thank you sir👍👍

[@cybersavage1337]

Hence why the word "hacking" is the most abused ambiguous term in the industry and why there's no such thing as a "script kiddy" either because there's hacking at the level of an attacker running scripts and hacking as a security researcher who tends to be more of an academic.

[@MmeHyraelle]

Script kiddy had the condition you used someone else tools. If you made your own tools, you weren't a script kiddie.

[@cybersavage1337]

@@MmeHyraelle dude, 99% of pentesters and red teamers use someone else's tools. A better argument would be that "a script kiddy doesn't know why or how the tools and/or the vulnerability and its exploitation works but even that can be argued against in some cases.

[@kirkreiglori2434]

Encouraging vid. Thanks Marcus.

[@dwaynesudduth1028]

You can't reverse the polarity of the flux capacitor to hack! You have to reverse the Polarity of the Neutron Flow!!

[@paulignasias6077]

Hi sir, My virtual server has been attacked by a ransomware. It has appended the files in my server with .bozon and.fargo3. Kindly help

[@HumairDawood]

Marcus you are a Star!

[@kazmir_]

Very informative

[@PenAce]

Marcus, have you ever followed a script?

[@DovaBro]

Thanks a lot man!

[@l-12343]

The flip flops killed me 😂

[@lisathelibrarian]

Great video but more interested in learning to type with flip flops! :D

[@JuiceB0x0101]

ACTUALLY... one may argue that reversing the polarity of a flux capacitor can be considered "HACKING".

[@subhamkhalkho7588]

Thank u for this ❤❤

[@HeartOfLEO]

Thank you!

[@cassie4824]

I have to say it. You're voice is perfect for ASMR lol

[@srivathsannayak]

Insightful content, I'm learning more about the cybersecurity domain thanks to you!

[@Opin10n]

Same one thing i learned is their are two types of hackers .. one rhat finds the tool and learns how to use it and another that studies *how* the tool works which teaches defense and offense

[@giapacella6771]

Marcus also...Gold Silver moves in Houston...Gold Coins only being sold to select customers...men in suits dropping 5k plus per buy. Gia ❤️🙂

[@taiquangong9912]

Many made hacking where if you aren't a genius, made learning hacking far away.

[@ZestiaPlayMinecraft]

watch more and learn more your are great thanks.

[@pranaypallavtripathi2460]

Thanks a million bro. I really used to think that since I don't have the IQ of Einstein I should stay away from cybersecurity. This information has broken my myth.

[@deemon710]

I always imagined hackers are constantly being paranoid about everything. Especially the deeper they get in. Can you talk about the general experience as well as your own? I figured it wasn't gonna be for me because I just can't do cloak and daggers kinda sh*t fulltime.

[@martinrages]

"I really hope i wont get arrested at the airport"

[@hydrogehtab]

Its the same thing with every crime. The first time gives you anxiety rush but after time you build a tolerance and when you do that stuff every day like hacking or idk selling drugs it turns into a routine and you arent scared anymore. And that is the point were most people get caught because they make mistakes

[@CallousCoder]

It isn’t considered hacking when you don’t reverse engineer the system yourself and/or write your own tools to run the exploit. In the 80s I cracked copy protection for games and wrote game exploits (I do video on that here). When you use other people’s tools and processes you are just another n00b not a hacker/cracker. And that goes for 99% of the security people as well. They couldn’t write an exploit or reverse engineer a system of their live depended on it.

[@user-erick007]

We wanna know more about PEGASUS 2 SPYWARE .

[@Fesssa]

good video brother

[@chowdhurytowhidahmed7780]

Make an video about how to sell zero day to broker. Because as you know vendors are not career about zero day as well as they Don't respect the efforts of researchers.

[@hugostiglitz6914]

This guys voice tone is like his kids are asleep in the next room and he doesn't want to wake them!😊

[@darkhydrastar]

Appreciate You.

[@wikinoa]

Also, to which manual you were refering to in the video (step-by-step)? Dont worry, Im too old to be a script kiddie.

[@_BangDroid_]

Cracker should be used to describe someone who breaks security, in the same way as there aren't _safe hackers_ but _safe crackers._ I kind of resent the connotations associated with the word hacker and hacking, as it was never meant to be about cyber crime, just the free and playful use and manipulation of technology.

[@FabioTavano]

Thumb up just for the flip flops alone!🤣🤣

[@deadpixel4106]

Thank you

[@user-ru5ti9tq4w]

Then comes the question of the year, what if, i always love to do what ifs, so what if installing on a system Snort setting up rules create even your own (for your specific cases of course), then think about it, it can just trigger alerts and the lovely golang script would just get those in real time, while in the same time will start doing tasks depending on the event thus, with hard work a system that potentially would be vulnerable right? It will come again to life, tho for zero days exploits well that's just another big problem that always will be there unless 0 trust policy applied, however 0 trust policy would mean that user friendly goes off. I do preffer NON user friendly environments not just because they are "challenging" or something, but there's a reason maybe that they are not user friendly. Not to forget about AI and what you can do along side a network capture system with AI looking into every and single one packet send / received, so exploits isn't something that you cannot patch or you should be afraid of, what i'm afraid of? Attacks DDoS Attacks, you would say, c'mon it's just an attack, but what i'm afraid it's not actually the attack itself, i can manage to migrate any attack, but the power it has it's important, if let's say an attack is very big, bigger than my entire infrastructure, well nothing i would do or not do will help. I mean at the end it's not only about knowledge and how to stop thinks around but comes with prices, that's what i don't like about it, you want to protect the entire world however there are some cases which you can't stop them, that's what makes me sad, that's what is challenging that's what i'm searching a solution to those monsters! Also security shouldn't be something that you should pay for, it should come free for everyone to use and have that's my opinion. I'm trying for soo many years like years tons of years, trying to figure a way for everything till problems such ddos attacks which can overcome your bandwidth those big problematic monsters that i've seen cause you know what i do is helping people get secure free of charge, i have seen many thinks i've blocked many vulnerabilities and security issues but those attacks which is network related i've never get to understand why there's no a free solution, yes i can still block them if you've a website use cloudflare for instance and then create a script that blocks ips and potentially bad ips into cloudflare which is amazing and long side other thinks which measures the security, but what of other tcp services? I mean it's hard right? I don't know if you know anything better that's why i'm asking you with that long text, do you know any solution to those MONSTERS such DDoS attacks with that Monster power they posses to be blocked for any tcp/udp service?

[@zach123101]

You know what your right I'm going to finally become a hacker thanks man

[@iamLucid]

Bro I love you.

[@captainufo4587]

Actually, when I think about hacking, I think at two people typing together on the same keyboard so they can type faster.

[@youaremad1736]

Leave. NOW.

[@nbrianwilliams9035]

Thank You

[@kashoo_1]

Great ✨

[@vulkunvision]

Marcus is easily top 10 coolest people of this millenia

[@kiravd5392]

That intro was hilarious lol

[@zeraeiro]

Can anyone provide a link to the leaked ransomware gang scripts?

[@pauljones9150]

Good video

[@vuufke4327]

I want you to whisper "everything is going to be okay" in my ear Marcus

[@dulcevaldes3383]

Thanks ❤

[@super3d201]

But isn´t the foundational knowledge you need to start let´s bug bounty, realativly high. I mean sure once you understand whats happening it´s easy, but getting there takes some time, a really getting good at it making a living out of it even more. Or am i wrong?

[@greattech4923]

I lost a personal email how can gain access back?

[@jagslab]

🤡

[@rivenivern1432]

Bob Ross of cybersecurity!

[@cytroyd]

Thank you Marcus Aurelius

[@SidMassiveXM]

When I think Hacking, it's Demoscene - make an early 80s computer show thousands of colours instead of 256 that it's designed to. Or run a 3D animation with music, all within 4kb exe file.