Hacking a Docker Container Registry

jh.live/chaing... || Scale securely with minimal, hardened, and 0 CVE container images to run your workloads with Chainguard! jh.live/chaing...
Learn Cybersecurity - Name Your Price Training with John Hammond: nameyourpricet...
Learn Coding: jh.live/codecr...
WATCH MORE:
Dark Web & Cybercrime Investigations: • Tracking Cybercrime on...
Malware & Hacker Tradecraft: • Malware Analysis & Thr...
📧JOIN MY NEWSLETTER ➡ jh.live/email
🙏SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎FOLLOW ME EVERYWHERE ➡ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/discord ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware
🔥UA-cam ALGORITHM ➡ Like, Comment, & Subscribe!

[@_JohnHammond]

I should have done a better job emphasizing that this trick worked without any credentials or existing account, so it is "pre-authentication privilege escalation" (I showed it at the end, but wish I stated that earlier) 🔥PS, check out Chainguard! jh.live/chainguard

[@_JohnHammond]

​@@thenextbigthing8998 Thank you! I am planning to get back to livestreaming after DEFCON, hopefully in the next two weeks 😊

[@Capt.Startrk]

Hi @_JohnHammond can you please do a video on the hack that happened on crypto exchange Wazirx in India?

[@malemmutum5049]

@@Capt.Startrk that would be nice!

[@khadidiatouloucar3454]

Hht​@@thenextbigthing8998tt😢

[@Jimzeel]

It's these kind of walkthroughs that makes following you worth it. A clear, simple example of a known vulnerability and how to exploit is really usefull and worthwhile to watch when learning cybersecurity.

[@cinderwolf32]

It's maybe an unusual way of doing things, but when I write Go API code I like to define a separate object for the API and DB object, and translate between the two in whatever code a given request is dispatched to. This forces me to consciously acknowledge each field that I'm letting through in both directions, and helps prevent both dirty data getting into the DB like here and also data leakage at the cost of additional verbosity.

[@fraznofire2508]

That’s the correct way to do it, I believe they’re called a “data transfer object” where you define specific properties you want accessible/editable via your API and don’t include properties that shouldn’t be accessible outside of your own code

[@simshady]

That's why one should use dedicated DTOs ;)

[@Carambolero]

Finally a good content.

[@valorsec]

Can we have something about Browser Extensions acting as Infostealers ?

[@mmkvhornet7522]

Great Video !

[@Alain9-1]

Thank you

[@mrr0b0t-s6i]

Can you explain to us the road map for learning ethical hacking?

[@ranacreed7671]

Ty master

[@APTsec]

Cool.

[@noxious6725]

looking like vCenter ☠

[@an3ssh]

this video: LGTM

[@fadiallo1]

Docker Container ?
Again ?
Help

[@brownpaperbagyea]

🐐👑JOHN 🐹HAMMOND 👑🐐

[@sunniglory514]

💚

[@AdamAdam-dn4st]

HoW tO hAcK a PdoCkEr cOmmtainer by me

[@carsonjamesiv2512]

YEAH,😀🎉

[@rzvthepsycho69420]

12 views blud fell off

[@ODUyoutube]

What you mean blud

[@TallShawnNetwork]

@@ODUyoutubesilly n-word ish

[@slybandit8117]

He just posted it when you viewed it. There are almost 5k views now. Yea, also “blud” WHAT??!!