Skip to content

Red Teaming

playlistπŸ›‘οΈ Securityon YouTube β†—part of Embrace The Red, found on its playlists tab

21 videos enrolled

Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policyΒ recent).

  1. How companies are breached: The anatomy of a compromiseHow companies are breached: The anatomy of a compromise28 Oct 20216:58not yet analysed
  2. Performing port-proxying and port-forwarding on WindowsPerforming port-proxying and port-forwarding on Windows28 Oct 20214:31not yet analysed
  3. Pass the Cookies and Pivot to the CloudsPass the Cookies and Pivot to the Clouds28 Oct 202212:16not yet analysed
  4. Dumping cleartext Wi-Fi passwords using netsh in Windows (netsh wlan show profiles)Dumping cleartext Wi-Fi passwords using netsh in Windows (netsh wlan show profiles)28 Oct 20234:15not yet analysed
  5. Using IP Addresses with Integer Notation (Bug Bounty Tip for Server Side Request Forgery)Using IP Addresses with Integer Notation (Bug Bounty Tip for Server Side Request Forgery)28 Oct 20230:30not yet analysed
  6. SSH Agent Hijacking - Hacking technique for Linux and macOS explainedSSH Agent Hijacking - Hacking technique for Linux and macOS explained28 Oct 20237:26not yet analysed
  7. Grabbing and cracking macOS password hashes (with dscl and hashcat)Grabbing and cracking macOS password hashes (with dscl and hashcat)28 Oct 20235:27not yet analysed
  8. Decrypting SSL/TLS browser traffic with Wireshark  (using netsh trace start)Decrypting SSL/TLS browser traffic with Wireshark (using netsh trace start)28 Oct 20233:47not yet analysed
  9. Hacking Google Bard: Prompt Injection to Data Exfiltration via Image Markdown Rendering (Demo Video)Hacking Google Bard: Prompt Injection to Data Exfiltration via Image Markdown Rendering (Demo Video)28 Oct 20241:18not yet analysed
  10. Minting Next.js Authentication Cookies (Next Auth Post Exploitation)Minting Next.js Authentication Cookies (Next Auth Post Exploitation)28 Jan 20268:26not yet analysed
  11. Scary Agent Skills: Hidden Unicode Backdoors in AI Agent Skills! ...And How To Catch ThemScary Agent Skills: Hidden Unicode Backdoors in AI Agent Skills! ...And How To Catch Them28 Feb 20262:52not yet analysed
  12. Agent Commander: Promptware Powered C2. Your Agent Works For Me Now (OpenClaw, Kimi Claw, NanoClaw)Agent Commander: Promptware Powered C2. Your Agent Works For Me Now (OpenClaw, Kimi Claw, NanoClaw)28 Mar 202622:09not yet analysed
  13. LLM Heist - Technical DemoLLM Heist - Technical Demo28 Aug 202610:27not yet analysed
  14. LLM Heist: Hijacking LiteLLM for Traffic Interception, Key Theft, and Tool-Call InjectionLLM Heist: Hijacking LiteLLM for Traffic Interception, Key Theft, and Tool-Call Injection28 Aug 202616:08not yet analysed
  15. Recovering Encrypted Reasoning Traces (Stealing Proprietary LLM Thoughts)Recovering Encrypted Reasoning Traces (Stealing Proprietary LLM Thoughts)28 Aug 20267:19not yet analysed
  16. Breaking Claude Code Auto Mode (Opus 5) - POC DemonstrationBreaking Claude Code Auto Mode (Opus 5) - POC Demonstration28 Sep 20263:13not yet analysed
  17. Breaking Claude Code Opus 5 Auto Mode - Remote Code Execution (Walkthrough and Details)Breaking Claude Code Opus 5 Auto Mode - Remote Code Execution (Walkthrough and Details)28 Sep 202617:16not yet analysed
  18. Copirate 365: Plundering in the Depths of Microsoft Copilot (DEF CON Singapore Talk)Copirate 365: Plundering in the Depths of Microsoft Copilot (DEF CON Singapore Talk)28 Sep 202636:50not yet analysed
  19. SQL Copilot: SYSADMIN Elevation via planting malicious DB ConstitutionSQL Copilot: SYSADMIN Elevation via planting malicious DB Constitution28 Sep 20261:30not yet analysed
  20. SQL Copilot: Indirect prompt injection exploit demonstration for updating tableSQL Copilot: Indirect prompt injection exploit demonstration for updating table28 Sep 20260:55not yet analysed
  21. From SELECT to SYSADMIN: Hijacking Copilot in SQL Server Management Studio (SSMS) [CVE-2026-65669]From SELECT to SYSADMIN: Hijacking Copilot in SQL Server Management Studio (SSMS) [CVE-2026-65669]7 Oct 202623:05not yet analysed