Manchester Grey Hats
Manchester Grey Hats
  • 15
  • 20 980
Found old warez and hacker CDs!
I came across a binder containing a load of old pirated software and hacker tools and thought it would be fun to see what they contained.
Переглядів: 1 391

Відео

Episode 5 Part 1
Переглядів 633 роки тому
00:00:00 - 00:01:15 - Intro 00:01:15 - 00:05:25 - Cinnamon Lock screen Bypass 00:05:25 - 00:13:15 - Sudo vuln (CVE-2021-3156) 00:13:15 - 00:23:28 - Water Treatment plant hacked 00:23:28 - 00:45:30 - Android App selling data 00:45:30 - 00:55:20 - CD Projeckt Red Hacked 00:55:20 - 01:00:50 - North Korea hackers accused of being associated with APT 38 01:00:50 - 01:07:51 - Malware on M1 Processor ...
SQL Injection in around 2 minutes (fixed audio)
Переглядів 1653 роки тому
The previous version of this video had an audio issue so fixed and uploaded here. SQL Injection is probably the most well known web application security vuln (having the number one spot in the OWASP top 10), responsible for a number of high value data breaches. In this video we'll discuss what what it is and how it can be exploited. owasp.org/www-community/attacks/SQL_Injection owasp.org/www-pr...
SQL Injection in around 2 minutes
Переглядів 5353 роки тому
Sorry for the audio issue. If anyone needs a fixed version, it's here ua-cam.com/video/68FLocq1lck/v-deo.html SQL Injection is probably the most well known web application security vuln (having the number one spot in the OWASP top 10), responsible for a number of high value data breaches. In this video we'll discuss what what it is and how it can be exploited. owasp.org/www-community/attacks/SQ...
Cross Site Scripting (XSS) in less than 2 minutes
Переглядів 5813 роки тому
In this video, we'll look at one of the most commonweb based security weakness - Cross Site Scripting (XSS). Cross Site Scripting can also be thought of a HTML or JavaScript injection and is number 7 in the OWASP top 10. owasp.org/www-community/attacks/xss/ owasp.org/www-project-top-ten/
Episode 4 Part 2 - SolarWinds Hack
Переглядів 1103 роки тому
In part 2 of Episode 4 (recorded January 22 Jan 2021) we talk about the SolarWinds breach and speculate the future implications of a breach this size. Check out Colin Hardy's video on reversing some of the malware: ua-cam.com/video/JoMwrkijTZ8/v-deo.html
Episode 4 Part 1 - WhatsApp and a bumbling POTUS signal a flash mob on the Capitol
Переглядів 943 роки тому
As we didn't record an epsiode in December, this one went on a little longer than expected! Rather than posting one giant episode, we split it into two with part 2 to be released in a fortnight. Join Jay, Saskia, Jose, March and Harriet as we talk about selling laptops to Russians, privacy concerns in whatsapp and say goodbye to flash (that discusion got a little heated!). We also spoke about t...
Episode 3 - Election Fraud, the Pwnie Awards and Roombas Work no More
Переглядів 853 роки тому
Join Jay, Saskia, Jose, March and Harriet as we discuss electronic voting (very topical) as well as November's cyber security news including some interesting Pwnie award nominations, updates to Kali, sponsored open source software and some 1337 hacks to Police Cyber Alarm and Mobile Iron. Oh, and we find out March looooove IBM. 00:00-1:20 - Intro 1:20-17:30 - Pwnie Awards 17:30-24:00 - New vers...
Episode 2 - Trump hacked, junk trapped, and a source code dump impacts React!
Переглядів 803 роки тому
Episode 2 of the Grey Hats podcast with Jahmel AKA Jay, Saskia, Jose, Ali AKA March and Harriet AKA Chipie where we discuss the last month in cyber security news and give our thoughts on the Windows source code leak. Links/articles referenced: medium.com/@elongl/assaultcube-rce-technical-analysis-e12dedf680e5 labs.f-secure.com/blog/samsung-s20-rce-via-samsung-galaxy-store-app/ cloudsecdocs.com/...
Grey Hats Podcast Episode 1 - Ethics, Giggle and March's Goblet
Переглядів 663 роки тому
This is the 1st episode of the Grey Hats podcast! Grey Hats is an infosec community based in Manchester UK. Follow us on twitter. In this episode, we talk about handles, TikTok, and the ethics of cyber security with Jay, Saskia, Jose, Harriet (AKA Chipie), and Ali (AKA March). We hope you enjoy it and feedback can be sent to us on twitter, the Grey Hats slack or jay@manchestergreyhats.co.uk. Th...
Recovering files from a phone's eMMC Chip
Переглядів 17 тис.5 років тому
Hello Hackers! In this video, i show how easy it can be to remove the internal storage from some Android phones and read them with an eMMC reader using this chip of data recovery technique. www.amazon.co.uk/gp/product/B076LYM3PY www.amazon.co.uk/gp/product/B01IGRL90I The video that gave me the idea ua-cam.com/video/AptPGnVAXeM/v-deo.html

КОМЕНТАРІ

  • @D8i
    @D8i Місяць тому

    hi bro, is that work with galaxy s2 emmc?

  • @JobIamartino
    @JobIamartino 2 місяці тому

    Reaktor?

  • @JobIamartino
    @JobIamartino 2 місяці тому

    Any H2O any air delirium anything from radium is still the boys man that think they split up went working for various companies doing the job that they used to fight against but that’s just a rumor I can’t say for sure, but I believe H2O turned into air, at least partially because air was the top-of-the-line audio warez at least, as far as I’m concerned delirium was really good too and old-school like really old-school like 2004. They did some of the earliest VST instruments like they did this awesome version that I can’t find anymore of a Rhodes piano not that I can’t get a Rhodes piano, but the simplicity is that they made, this Very early VST like from Cubase VST way before I got in the game with CUBASE3 and then combined ableton fruity loops and cubase 10 always try before bye if you know H2O, it should be familiar you don’t steal it if you make money from it if you don’t make money from it, use it but your course if you don’t make money from it, why are you gonna use it? You don’t unless you’re just learning and that’s the whole point behind try before some kids get to learn and shit they can’t afford, I mean you can’t afford the software you’re just a poor kid I mean some poor kid going to get a hold of this. I couldn’t afford it if it wasn’t for H2O and radium and. All those native instruments Key generators that went along with the cracks, but the fucked up part is I have to have a computer the first thing I do when I start my digital audio workstation is take the damn computer and erase everything that’s unnecessary no bullshit all that stuff slows down your processing power and causes you to get that crack pop bullshit and I don’t care even if you’re using look if you wanna pay more money than you need to pay and even if you’re paying $5000 for some gaming laptop that’s going to be worth $1000 in six months you better get the thing stripped down because it’s gonna have to be stripped down sooner or later so I just do it as soon as I get it just got a brand new freaking white three points just under three grand because I know the guys who build it they gave me I mean I’m lucky but I can’t stand the price I don’t wanna pay for fucking windows. I hate windows it just slows down my shit windows is the biggest piece of shit in you should see how much the digital audio workstation looks and feels it’s like greased lightning. It’s like butter in a hot fucking pan. It’s like a slipping slide. It’s amazing without windows constantly sticking with its freaking copy protection and without all them dongle calls that the old shit you do. If I see a dongle I’m waiting for them to crack it dong the worst thing that ever happened to software the dongle. It even has a name that’s stupid because when they came up with it they’re like yeah anybody buys. This has a big dongle on there for it. I’m so happy I don’t have to see those things anymore. I haven’t even checked they don’t make them anymore. Do they now cause I haven’t bought software from any place off-line in forever, they can’t be any more dong. Thank God the dongle the fuck is that all right brother if you feel like telling me what you found and I mean shit I put myself out there I just wanna know because that stuff is kind of valuable and it’s kind of cool and those groups aren’t easy to find anymore because they’re doing everything they can to get rid of every single old- School site/top site that used to store shit on like university servers you know and of course and they would never get found because unless some douche bags stumbled on them but people would put them on multiple servers. You know they have them on like three different community college servers God I love the good old days it’s so much different now we used to just get discs in the mail and then it was Blu-ray and then it ended. No it didn’t. It didn’t there are places but it’s all different. It’s not like I’m just so sick of look , a computer wouldn’t exist. If it wasn’t for hackers without hackers there wouldn’t be computers as we know them because hackers make the world go round they’re the ones that dick was shit until it makes something better. They’re the ones that rip out the guts and mess with it until they make it into something better , I know just enough to know what I know which is not enough. I know how to go to computer to get rid of Windows garbage but that’s not enough I’m not the guy that walks in to freaking Microsoft find an unlocked service entry that has all the freaking money stuff in the clean room all the shit they’re working on and put a cap in the freaking door so that he can pop the entry in the middle of the night get in there and grab a stack of freaking discs that is just sitting there on a table he’s got his fingers crossed that they’ll still be there and they were and those discs gave the world into the future. They gave us the freaking specs for the iPhone before it came out. Those hackers were like heroes. I’m still pissed off at the jackass that didn’t keep the fucking iPhone the jack off left in the cab and give it to us instead of monetize it , yeah I can understand why he did it him handsome but if it was me, I would’ve given it to the boys and we would’ve had the iPhone and how much do you think they would’ve paid for a fully functioning iPhone before they had theirs out because they already had one running before it was released and these dudes had the discs, then some asshole finds a phone and it just shows the Internet instead of just calling up like one of the freaking bigger back then you could’ve found just a simple dude hanging out in one of our forums I can’t put the name on here but one of them and yeah it would’ve gone directly into the hands of somebody that would’ve taken it and been able to. It’s just the possibilities were so beautiful. Imagine that just having the iPhone reverse engineering it and then giving it right up the butt to Apple, you could make those fuckers drop all their bullshit money, grubbing all their overpriced bullshit all their locks, all their freaking bullshit apple, the biggest bunch of moneygrubbing scum on earth

  • @IJH-Music
    @IJH-Music 4 місяці тому

    A fellow musician / and grey hat ;) 💙

  • @jamesward5721
    @jamesward5721 6 місяців тому

    Quick shout on the chip removal - use loads of a heavy solids flux before applying heat - it will make the removal much easier & will preserve the balling on the chip where no solder/thin solder won't. And don't start poking/prying the chip until you are sure it's loose, as that will also pull the balling/pads. Patience is key. And rosin flux.. loads of rosin flux.

  • @fahadmusa2827
    @fahadmusa2827 7 місяців тому

    which software did you use to read the chip

  • @pennywilson2014
    @pennywilson2014 9 місяців тому

    Here is a try for you if you like and want to Also remove a side project chromebook with mods of corse put the phones emmc there then flash a Linux distro on it then desolder it again then put it back into the phone i always wondered if that would work but do look for the pinouts there is several

  • @IABITVpresents
    @IABITVpresents 11 місяців тому

    Is it possible to remove the internal storage from a Samsung J3 (2016) model phone? Last week mine stopped working and I had this one for 5 years, and I'm really in need of all my data, so I asked to have my old motherboard along with the new one.

  • @ibzy3023
    @ibzy3023 Рік тому

    Thanks bro.. am not really good with stuff like this.. just wondering if the phone has been opened up from a normal phone store.. That has been booted is there a chance, to get the data back or is it all deleted permanently.. And do you specialise in stuff like this.. sounds like you know what you're talking abaut..

    • @manchestergreyhats6032
      @manchestergreyhats6032 Рік тому

      Hi! I'm sorry, i don't quite understand your question. Do you mean when you buy a phone that has had the data deleted? Depending on the phone, it might be possible to recover some data but there's no guarantee. As for learning things like this, I just like playing with technology! When you play around with enough stuff, you start to figure out how it all works.

    • @ibzy3023
      @ibzy3023 Рік тому

      If i give you my device would you be able to have a look at it for me.. As I don't really want to try to attempt the data recovery myself and mess it all up..

    • @manchestergreyhats6032
      @manchestergreyhats6032 Рік тому

      @@ibzy3023 I'm sorry but I don't offer data recovery services. I'm just someone that enjoys learning about technology. If you google for data recovery services though, i'm sure you'll find some companies with lots more experience than me who can help!

    • @ibzy3023
      @ibzy3023 Рік тому

      Oh that's fine thanks for the reply.. Wanted to ask if I try getting the data chip out of my phone.. And purchase all socket from amazon will most data chip go into the all socket or would it have to be a percific one.. And when pluging the all socket SD card on laptop will I be able to read it off the data chip. if anything that is left on the data chip..

  • @HashSecurities
    @HashSecurities Рік тому

    nice video brother ❤

  • @ibzy3023
    @ibzy3023 Рік тому

    Hey bro do you reckon you can do this at home or best giving the phone to specialist as I don't want them to look thro my photos of videos of they can get data from the emmrc chip

    • @manchestergreyhats6032
      @manchestergreyhats6032 Рік тому

      Depending on the phone it's doable at home although newer phone won't be as easy. It's best to practice with some test phones in my opinion, before trying with the actual one. I think most reputable specialists won't look through your files after confirming they're accessible although it's always a risk!

  • @Doviruses.existbaileyonodysee

    any luck that this method would work with Chromebooks that have an emmc sandisk?

  • @OTZOLOTEPUNK
    @OTZOLOTEPUNK Рік тому

    I need open software for this

  • @M-1453
    @M-1453 Рік тому

    hey bro nice video! please help me ; I have a broken cell phone. i want to rescue from main memory emmc my data. how can you help me? phone is : huawei p10 lite memory is : sdinadf4 sandisk 32gb thank you!!!

  • @compazorrillo1468
    @compazorrillo1468 Рік тому

    If the memory has videos and photos, if we change it to USB, will the photos and videos come out?

  • @lafriguisara8014
    @lafriguisara8014 Рік тому

    Yo bro… my phone is dead due water damage. I can buy 10 other phones but the data is priceless. It’s a Motorola phone. If I take off this eMMC chip aka internal SD card… would I be able to get the data???

  • @tomnm1
    @tomnm1 Рік тому

    Hey man, this video was helpful! Just one question, would the equipment you used in this video also be able to flash the chip as well as just read from it?

    • @manchestergreyhats6032
      @manchestergreyhats6032 Рік тому

      It mounts the drive via USB so it's writable too :)

    • @tomnm1
      @tomnm1 Рік тому

      @@manchestergreyhats6032 nice thanks for getting back to me I'm working on a personal project at the minute, might I be able to dm you with some discussion? Do you have anything like a discord that we might be able to talk on a less public forum?

    • @manchestergreyhats6032
      @manchestergreyhats6032 Рік тому

      @@tomnm1 If you're on twitter, you can DM me there (@jayHarris_sec).

  • @kushlife8708
    @kushlife8708 Рік тому

    Friend that process is so important for me... Can you tell me what is that product?? 3:13

    • @manchestergreyhats6032
      @manchestergreyhats6032 Рік тому

      You mean the pen looking thing? It's a flux pen but you can also get it in jars or syringes.

  • @foxxy46213
    @foxxy46213 2 роки тому

    most tent to be false positive due to the way keygens an cracks worked...tbf I never got any malware from an legit pirate scene stuff. most of not all was added after there release an put in by whoever upped it to TPB. but even then you could minimise the risk by using a regular uploader who's verified

  • @rzqmkhrz
    @rzqmkhrz 2 роки тому

    hey. if deleted picture can recover too?

  • @aceman1126
    @aceman1126 2 роки тому

    Hey man thanks for the video. I've got a bit of a problem with an old samsung note 5 phone. My wife passed away in 2019 and I just now was given her phone back by the police but theres a pin on the lock screen. No one knows the pin and this phone is full of baby pics and videos and the last videos of us as a family... and there seems to be no way to recover any of that besides physically pulling the chip and reading the data. I'm fairly adept at working with hardware but I only have one shot at this. As of right now the phone is 100% fine and works. Is there ANYONE I can send it to for this data recovery? I've tried for weeks to find a solution and keep hitting dead ends. If theres any hope at all please let me know.

    • @manchestergreyhats6032
      @manchestergreyhats6032 2 роки тому

      Sorry to hear that. I'm not familiar with that specific phone but there are often ways to bypass the PIN. I know Samsung have a find my phone thing that can unlock the device if you know the account login details (i.e email address and password). There are also tools that exist that can try and brute force the PIN. It'll take a while but should be doable. Finally I guess there are people that do data recovery but I don't know anyone specific I can recommend. Probably worth phoning around or doing some google searches for trusted people.

    • @ll-tf4et
      @ll-tf4et 2 роки тому

      Note 5 phones don't use encryption just yet. You can flash TWRP, boot into that new recovery and your PC will just mount the file system. Just make sure you flash the correct version or you'll brick the phone (not a bad thing, you can flash the correct version after that without losing data)

    • @allpereny
      @allpereny 2 роки тому

      @@ll-tf4et Hi bro, I have redmi note 6 pro and phone always at mi recovery 3.0 screen I tried all methods it but can't worked for me. Can I open my phone without data loss?

    • @derpnerpwerp
      @derpnerpwerp Рік тому

      My condolences. I hope you figured it out.

    • @aceman1126
      @aceman1126 Рік тому

      @@derpnerpwerp funny you should mention it cause I was just talking to a phone tech the other day about it and sadly now it's still locked. I intend to do some looking into the above method and see what I can accomplish. I really would love to get the pics and vids off the phone

  • @TheRealFobican
    @TheRealFobican 2 роки тому

    Will this emmc ball joint socket reader work to boot from like a live usb in any device you wish to power with this on?

    • @manchestergreyhats6032
      @manchestergreyhats6032 2 роки тому

      Hmm good question. I'm not sure tbh but I suspect it could work assuming the emmc chip contains a bootable OS compiled for the hardware.

    • @TheRealFobican
      @TheRealFobican 2 роки тому

      @@manchestergreyhats6032 in my case yes as as the cpu and ram went toast in it over a year ago but is there anything I need to look out for being comparability issues at the pre-installed phone os being old paired together with the hardware having different specifications than what the other version was made for?

  • @elijahjflowers
    @elijahjflowers 3 роки тому

    How hard should I press on the chip w/ the soldering iron to remove the glue? What solvent could I use to clean the chip? I’m using a Sumsour 858D, at 350 degrees, holding heat on the chip for 1-2 minutes. I want to avoid re-balling I’m trying to recover 300k of dogecoin off a Samsung 153 ball point chip and I’m a tight budget. Thanks in advance ❣️👋😅 Greetings from Atlanta 📍

  • @supersasquatch
    @supersasquatch 3 роки тому

    that's why i throw my old electronics into active volcano pits

    • @manchestergreyhats6032
      @manchestergreyhats6032 3 роки тому

      hahaha good advice! My older devices stay in a drawer until I can destroy them. Newer devices are all encrypted and wiped :D

  • @darkside1002
    @darkside1002 3 роки тому

    Bro can u make a video on samsung knox 0×0 counter and some efuse theory

    • @manchestergreyhats6032
      @manchestergreyhats6032 3 роки тому

      I'm currently working on some different videos but i'll add this as an idea :)

  • @traexstard
    @traexstard 3 роки тому

    hi, what's the name of that device that you are using to reaf the chip?

  • @SeikatsuCan
    @SeikatsuCan 3 роки тому

    Hey i sent you a DM on Twitter, can we chat there? I have some questions

  • @chrisd1456
    @chrisd1456 3 роки тому

    Oh the Nostalgia! This video is just what I needed on a Friday afternoon! Thanks Jay!

  • @phyu
    @phyu 3 роки тому

    Tempting the demo gods

  • @joseaugustodossantossilva5495
    @joseaugustodossantossilva5495 3 роки тому

    for emmc 5.1 (the one from lenovo zuk z2 ), that's is possible? i would pay a service for recoverying all my data... there so much photos and i didn't any backup i'm so frustated aff

    • @manchestergreyhats6032
      @manchestergreyhats6032 3 роки тому

      Hi. I'm not an expect so can't say for sure but I do know Android 5 and above uses encryption with keys stored in hardware so it won't be as easy as the devices I used. You should probably try and contact a data recovery expert though as they would be able to give you a definitive answer. Good luck!

  • @aidanbyrne8267
    @aidanbyrne8267 3 роки тому

    what does an ancient giant lizard call his malicious dll? shunoburst!

    • @aidanbyrne8267
      @aidanbyrne8267 3 роки тому

      it's terrible, but trying to make a joke about dinosaurs and SolarWinds is pretty difficult 😂

    • @manchestergreyhats6032
      @manchestergreyhats6032 3 роки тому

      @@aidanbyrne8267 I'm impressed! That definitely gets a prize for the most obscure joke ever created :D If you'd like some rex swag, let me know how I can contact you privately (email?) so we can get a shipping address.

  • @aidanbyrne8267
    @aidanbyrne8267 3 роки тому

    This was really interesting, but I disagree about electronic voting, I'm by no means an expert, but I think there's a few things you may have missed. The biggest problem is the scalability of potential attacks. With the current system, any attempt to manipulate/cheat the vote is done on a small scale, either a single voting center or constituency, it would require a very large co-ordinated effort to work on a national scale, and the number of people involved would likely lead to it being found out and prevented. However, if there were electronic voting, since there is no such thing as a perfect system, when, not if, a vulnerability is found, it could be replicated across the entire system, and instead of impacting a single MP's position, you could rig the entire election. is it worth that risk? On your point about blockchain, it couldn't be used (at least not in the way you described) as it breaks the rule of anonymity, if there is any way to find out who someone voted for then it means people can be blackmailed/threatened to vote a certain way. with the current system if you sign or identify yourself any other way, then you vote is marked as spoilt, and is not counted. There needs to be blind trust in the system, if you are able to check your vote, it's not blind, and good luck trying to explain to the general public why they should trust blockchain. Again, I'm not an expert, if I'm wrong then please tell me, I wish electronic voting existed, I just don't think it's possible.

    • @manchestergreyhats6032
      @manchestergreyhats6032 3 роки тому

      All good points and i'm not sure what the solution is. I guess it depends on which is the most reliable way of understanding what a country wants, not trying to create a bullet proof solution which is probably impossible.

  • @aidanbyrne8267
    @aidanbyrne8267 3 роки тому

    This is great! thanks for telling me about it Saskia.

  • @roachyize
    @roachyize 3 роки тому

    Kudos for the "brake light fluid" reference 😂

  • @timmehwimmy
    @timmehwimmy 3 роки тому

    ' or 1='1

  • @manchestergreyhats6032
    @manchestergreyhats6032 3 роки тому

    Just noticed the audio is a little screwed up in the video. Apologies for headphone users!

  • @charlieosko4151
    @charlieosko4151 3 роки тому

    Thank you! That was great

    • @manchestergreyhats6032
      @manchestergreyhats6032 3 роки тому

      Thanks a lot! I'm quite new to making videos and thinking about making this into a series where I explain different vulns or tools in a couple of mins if there is interest.

  • @XavierDJohnson
    @XavierDJohnson 3 роки тому

    Visuals 🔥

  • @kava2372
    @kava2372 3 роки тому

    Fantastic!!! Keep up the great work! You should think about using SMZeus . c o m. It’s the fastest way to grow your channel!!!

  • @manchestergreyhats6032
    @manchestergreyhats6032 6 років тому

    Links to documents in the main body of text.