John Hammond https://tube.ekaii.fr/c/johnhammond/videos Fri, 02 Oct 2026 23:36:31 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://tube.ekaii.fr John Hammond https://tube.ekaii.fr/client/assets/images/icons/icon-1500x1500.png https://tube.ekaii.fr/c/johnhammond/videos All rights reserved, unless otherwise specified in the terms specified at https://tube.ekaii.fr/about and potential licenses granted by each content's rightholder. https://tube.ekaii.fr/feeds/podcast/videos.xml?videoChannelId=25 <![CDATA[Black Hat AI]]> https://tube.ekaii.fr/w/ouUpVbYAToPTHMbxi3CCTV https://tube.ekaii.fr/w/ouUpVbYAToPTHMbxi3CCTV Thu, 01 Oct 2026 00:00:00 GMT https://jh.live/flare-100126 || Manage threat intelligence and your exposed attack surface with Flare! Try a free trial and see what info is out there: https://jh.live/flare-100126

https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/
https://hunt.io/blog/chinese-operator-secflow-claude-qwen-deepseek-asia
https://cybernews.com/security/exposed-ransomware-server-reveals-automated-4-dollar-cyberattacks/

Learn Cybersecurity and more with Just Hacking Training: https://jh.live/training
See what else I'm up to with: https://jh.live/newsletter

ℹ️ Resources:
See what cybersecurity events are happening: https://jh.live/infosecmap
Learn how to code with CodeCrafters: https://jh.live/codecrafters
Host your own VPN with OpenVPN: https://jh.live/openvpn
Get Blue Team Training and SOC Analyst Certifications with CyberDefenders: https://jh.live/cyberdefense

]]> John Hammond Education nonadult Black Hat AI https://jh.live/flare-100126 || Manage threat intelligence and your exposed attack surface with Flare! Try a free trial and see what info is out there: https://jh.live/flare-100126 https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-ca... <![CDATA[Firefox Profile Payload]]> https://tube.ekaii.fr/w/mAJjgrvyLYiryLJpPY5iCu https://tube.ekaii.fr/w/mAJjgrvyLYiryLJpPY5iCu Thu, 01 Oct 2026 00:00:00 GMT This payload uses a few simple Windows commands in a clever way to search through Firefox profile files and identify a specific file to execute.

It is a small part of a broader malware analysis that looks at how attackers can abuse built-in Windows functionality to carry out their payloads.

Watch the full video: https://youtu.be/oJHOlNTH7lY?si=8LruOkxZlfvFLII-

]]> John Hammond Science & Technology nonadult Firefox Profile Payload This payload uses a few simple Windows commands in a clever way to search through Firefox profile files and identify a specific file to execute. It is a small part of a broader malware analysis that looks at how attackers can abuse built-in Windo... <![CDATA[Steam IPC Exploit]]> https://tube.ekaii.fr/w/oQ8BRnXCmqKHRQAXXztiLA https://tube.ekaii.fr/w/oQ8BRnXCmqKHRQAXXztiLA Mon, 28 Sep 2026 00:00:00 GMT I was digging into a Steam privilege escalation PoC and looking at how it uses IPC with the Steam Client Service.

The PoC abuses that interaction to get the service to execute its payload with elevated privileges.

Full video: https://youtu.be/Jx6Jvykqhsk?si=vpPWQFN3Rht5nM3I

]]> John Hammond Science & Technology nonadult Steam IPC Exploit I was digging into a Steam privilege escalation PoC and looking at how it uses IPC with the Steam Client Service. The PoC abuses that interaction to get the service to execute its payload with elevated privileges. Full video: https://youtu.be/Jx... <![CDATA[Steam Privilege Escalation]]> https://tube.ekaii.fr/w/xxMguyKCzoDUV1cZwJauh2 https://tube.ekaii.fr/w/xxMguyKCzoDUV1cZwJauh2 Sat, 26 Sep 2026 00:00:00 GMT I was testing a proof of concept for a local privilege escalation vulnerability in the Steam client on a Windows 11 VM.

You still need initial access, but the goal is to elevate from a standard user context to NT AUTHORITY\SYSTEM.

Full video: https://youtu.be/Jx6Jvykqhsk?si=vpPWQFN3Rht5nM3I

]]> John Hammond Science & Technology nonadult Steam Privilege Escalation I was testing a proof of concept for a local privilege escalation vulnerability in the Steam client on a Windows 11 VM. You still need initial access, but the goal is to elevate from a standard user context to NT AUTHORITY\SYSTEM. Full video: ht... <![CDATA[Tracking TeamPCP Telegram]]> https://tube.ekaii.fr/w/2BVLgnP5E1RHSvPcYSVGRp https://tube.ekaii.fr/w/2BVLgnP5E1RHSvPcYSVGRp Fri, 25 Sep 2026 00:00:00 GMT I was digging through Telegram activity in Flare and searching for the PCP.sh username to see what showed up across the history of those chats.

A couple of results were referencing a .EXE, and one of the accounts had the same Steam profile picture we'd already seen elsewhere in the investigation. That's another pretty high-confidence piece of the puzzle.

Full video: https://youtu.be/nj9e2Qfe3Cc?si=cLcEZFbj75Rqa7R1

]]> John Hammond Science & Technology nonadult Tracking TeamPCP Telegram I was digging through Telegram activity in Flare and searching for the PCP.sh username to see what showed up across the history of those chats. A couple of results were referencing a .EXE, and one of the accounts had the same Steam profile pictur... <![CDATA[My AI Cybersecurity Mod Finally Looks Like a Real Game]]> https://tube.ekaii.fr/w/ndSwNGBsxdnHQoXXbbHr3Z https://tube.ekaii.fr/w/ndSwNGBsxdnHQoXXbbHr3Z Thu, 24 Sep 2026 00:00:00 GMT Learn Cybersecurity and more with Just Hacking Training: https://jh.live/training
See what else I'm up to with: https://jh.live/newsletter

ℹ️ Resources:
See what cybersecurity events are happening: https://jh.live/infosecmap
Learn how to code with CodeCrafters: https://jh.live/codecrafters
Host your own VPN with OpenVPN: https://jh.live/openvpn
Get Blue Team Training and SOC Analyst Certifications with CyberDefenders: https://jh.live/cyberdefense

]]> John Hammond Education nonadult My AI Cybersecurity Mod Finally Looks Like a Real Game Learn Cybersecurity and more with Just Hacking Training: https://jh.live/training See what else I'm up to with: https://jh.live/newsletter ℹ️ Resources: See what cybersecurity events are happening: https://jh.live/infosecmap Learn how to code wit... <![CDATA[oh my god]]> https://tube.ekaii.fr/w/x3Ma63DDeHpS8KxbL2FUC4 https://tube.ekaii.fr/w/x3Ma63DDeHpS8KxbL2FUC4 Wed, 23 Sep 2026 00:00:00 GMT https://jh.live/minimal || Get Minimal, and build software you can trust with a hermetic sandbox for AI agents! Install Minimal locally completely for free: https://jh.live/minimal

https://x.com/vxdb/status/2102441068016857504
https://www.404media.co/we-hacked-the-fbi-hackers-say-they-have-data-on-all-fbi-employees/
https://en.wikipedia.org/wiki/ShinyHunters
https://www.ic3.gov/PSA/2026/PSA260515
https://www.theregister.com/security/2026/09/22/shinyhunters-claims-fbi-hack-this-is-not-financially-motivated/5298385
https://www.bleepingcomputer.com/news/security/shinyhunters-claims-fbi-hack-data-theft-in-peoplesoft-zero-day-breach/
https://www.reuters.com/world/shinyhunters-hackers-say-they-breached-federal-bureau-investigation-no-immediate-2026-09-22/
https://cyberscoop.com/shinyhunters-claims-fbi-attack/

Learn Cybersecurity and more with Just Hacking Training: https://jh.live/training
See what else I'm up to with: https://jh.live/newsletter

ℹ️ Resources:
See what cybersecurity events are happening: https://jh.live/infosecmap
Learn how to code with CodeCrafters: https://jh.live/codecrafters
Host your own VPN with OpenVPN: https://jh.live/openvpn
Get Blue Team Training and SOC Analyst Certifications with CyberDefenders: https://jh.live/cyberdefense

]]> John Hammond Education nonadult oh my god https://jh.live/minimal || Get Minimal, and build software you can trust with a hermetic sandbox for AI agents! Install Minimal locally completely for free: https://jh.live/minimal https://x.com/vxdb/status/2102441068016857504 https://www.404medi... <![CDATA[TeamPCP OSINT Investigation]]> https://tube.ekaii.fr/w/1zbAS1LeH4wopLKp6xRMDK https://tube.ekaii.fr/w/1zbAS1LeH4wopLKp6xRMDK Tue, 22 Sep 2026 00:00:00 GMT Someone I work with gave me a heads-up that they had a big TeamPCP story coming.

The story was that TeamPCP had been deanonymized, and I ended up going down the rabbit hole to recreate the investigation and follow the public clues that connected the different accounts, aliases, and infrastructure.

Full video: https://youtu.be/nj9e2Qfe3Cc?si=cLcEZFbj75Rqa7R1

]]> John Hammond Science & Technology nonadult TeamPCP OSINT Investigation Someone I work with gave me a heads-up that they had a big TeamPCP story coming. The story was that TeamPCP had been deanonymized, and I ended up going down the rabbit hole to recreate the investigation and follow the public clues that connected ... <![CDATA[Payload Podcast 011 - Reunion]]> https://tube.ekaii.fr/w/6f9uDwijnKi4i8GWLps65M https://tube.ekaii.fr/w/6f9uDwijnKi4i8GWLps65M Sat, 19 Sep 2026 00:00:00 GMT Payload Podcast! Live Friday, September 18 at 12pm ET.

]]> John Hammond Entertainment nonadult Payload Podcast 011 - Reunion Payload Podcast! Live Friday, September 18 at 12pm ET. <![CDATA[Free Web Hacking Challenge!]]> https://tube.ekaii.fr/w/wK3bNiJVZFhHQW5NP6kkGM https://tube.ekaii.fr/w/wK3bNiJVZFhHQW5NP6kkGM Sat, 19 Sep 2026 00:00:00 GMT Just Hacking Training livestream to explore CrossWind Systems, the purposely vulnerable app with the Web App Junior Analyst Course! https://justhacking.com

]]> John Hammond Entertainment nonadult Free Web Hacking Challenge! Just Hacking Training livestream to explore CrossWind Systems, the purposely vulnerable app with the Web App Junior Analyst Course! https://justhacking.com <![CDATA[Tracking TeamPCP]]> https://tube.ekaii.fr/w/3YQC3UGBeDJp1zB5dpifxD https://tube.ekaii.fr/w/3YQC3UGBeDJp1zB5dpifxD Sat, 19 Sep 2026 00:00:00 GMT I was digging through TeamPCP and following a bunch of OSINT rabbit holes to see how all these different pieces connected.

The DeadCat X3 handle led to a HackerOne account, a Hugging Face profile, Telegram activity, and other accounts. The same name and profile picture showing up across those places made the connections a lot more interesting.

Full video: https://youtu.be/nj9e2Qfe3Cc?si=cLcEZFbj75Rqa7R1

]]> John Hammond Science & Technology nonadult Tracking TeamPCP I was digging through TeamPCP and following a bunch of OSINT rabbit holes to see how all these different pieces connected. The DeadCat X3 handle led to a HackerOne account, a Hugging Face profile, Telegram activity, and other accounts. The same n... <![CDATA[I Built a Portal to the Internet in Minecraft]]> https://tube.ekaii.fr/w/9V7yGEmNqUwja4mQEC13mR https://tube.ekaii.fr/w/9V7yGEmNqUwja4mQEC13mR Fri, 18 Sep 2026 00:00:00 GMT Learn Cybersecurity and more with Just Hacking Training: https://jh.live/training
See what else I'm up to with: https://jh.live/newsletter

ℹ️ Resources:
See what cybersecurity events are happening: https://jh.live/infosecmap
Learn how to code with CodeCrafters: https://jh.live/codecrafters
Host your own VPN with OpenVPN: https://jh.live/openvpn
Get Blue Team Training and SOC Analyst Certifications with CyberDefenders: https://jh.live/cyberdefense

]]> John Hammond Education nonadult I Built a Portal to the Internet in Minecraft Learn Cybersecurity and more with Just Hacking Training: https://jh.live/training See what else I'm up to with: https://jh.live/newsletter ℹ️ Resources: See what cybersecurity events are happening: https://jh.live/infosecmap Learn how to code wit... <![CDATA[Hunt.io Attack Capture]]> https://tube.ekaii.fr/w/nx8SJX3yVGRfte6AfY63KE https://tube.ekaii.fr/w/nx8SJX3yVGRfte6AfY63KE Fri, 18 Sep 2026 00:00:00 GMT Digging into the Hunt.io Attack Capture API on a live stream and thinking about how we could use those listings for the Minecraft project.

The idea was to treat open-directory listings as the basis for the world, so I was looking at the API and a few example requests to figure out what we could actually pull into the project.

Full video: https://youtu.be/Jx0G9IQxc4s?si=Q0DQzM2_ns0-YfZo

]]> John Hammond Science & Technology nonadult Hunt.io Attack Capture Digging into the Hunt.io Attack Capture API on a live stream and thinking about how we could use those listings for the Minecraft project. The idea was to treat open-directory listings as the basis for the world, so I was looking at the API and a... <![CDATA[My Browser Cache Got Infected]]> https://tube.ekaii.fr/w/bZh8DYpqgBw5P3yvmYAccM https://tube.ekaii.fr/w/bZh8DYpqgBw5P3yvmYAccM Thu, 17 Sep 2026 00:00:00 GMT https://jh.live/keeper || Keeper Security offers a privileged access management solution to deliver enterprise grade protection all in one unified platform -- keep your users, your data, and your environment secure with Keeper! https://jh.live/keeper

Learn Cybersecurity and more with Just Hacking Training: https://jh.live/training
See what else I'm up to with: https://jh.live/newsletter

ℹ️ Resources:
See what cybersecurity events are happening: https://jh.live/infosecmap
Learn how to code with CodeCrafters: https://jh.live/codecrafters
Host your own VPN with OpenVPN: https://jh.live/openvpn
Get Blue Team Training and SOC Analyst Certifications with CyberDefenders: https://jh.live/cyberdefense

]]> John Hammond Education nonadult My Browser Cache Got Infected https://jh.live/keeper || Keeper Security offers a privileged access management solution to deliver enterprise grade protection all in one unified platform -- keep your users, your data, and your environment secure with Keeper! https://jh.live/kee... <![CDATA[Hunt.io Meets Minecraft]]> https://tube.ekaii.fr/w/rq676V8x4ymZUuNXW3d6fn https://tube.ekaii.fr/w/rq676V8x4ymZUuNXW3d6fn Thu, 17 Sep 2026 00:00:00 GMT I was messing around with Codex and a Minecraft mod on a live stream, trying to get it talking to the Hunt.io API.

The API key was configured, and I was working on adding more tooling so the setup could figure out which listings were coming from Hunt.io without me having to manually provide IP addresses, websites, or port numbers.

Full video: https://youtu.be/Jx0G9IQxc4s?si=Q0DQzM2_ns0-YfZo

]]> John Hammond Science & Technology nonadult Hunt.io Meets Minecraft I was messing around with Codex and a Minecraft mod on a live stream, trying to get it talking to the Hunt.io API. The API key was configured, and I was working on adding more tooling so the setup could figure out which listings were coming from ... <![CDATA[Minecraft Security Research]]> https://tube.ekaii.fr/w/fmT3ADAZE1Qk6aVytT6WA9 https://tube.ekaii.fr/w/fmT3ADAZE1Qk6aVytT6WA9 Tue, 15 Sep 2026 00:00:00 GMT Can AI create a Minecraft mod to explore open directories on the internet?

We had a super flat world, the mod was talking to the Hunt.io API, and then I spent a lot of time figuring out Minecraft with help from the live stream chat.

Full video: https://youtu.be/Jx0G9IQxc4s?si=Q0DQzM2_ns0-YfZo

]]> John Hammond Science & Technology nonadult Minecraft Security Research Can AI create a Minecraft mod to explore open directories on the internet? We had a super flat world, the mod was talking to the Hunt.io API, and then I spent a lot of time figuring out Minecraft with help from the live stream chat. Full video: ... <![CDATA[you can't be serious]]> https://tube.ekaii.fr/w/tFKuo8bjnmL4Noio3fq7h9 https://tube.ekaii.fr/w/tFKuo8bjnmL4Noio3fq7h9 Tue, 15 Sep 2026 00:00:00 GMT https://jh.live/vanta || Automate and prove your security compliance with Vanta! Get $1,000 off with my link to cruise through compliance across SOC 2, ISO 27001, ISO 42001, NIST AI RMF, HIPAA, GDPR, and more! https://jh.live/vanta

Learn Cybersecurity and more with Just Hacking Training: https://jh.live/training
See what else I'm up to with: https://jh.live/newsletter

ℹ️ Resources:
See what cybersecurity events are happening: https://jh.live/infosecmap
Learn how to code with CodeCrafters: https://jh.live/codecrafters
Host your own VPN with OpenVPN: https://jh.live/openvpn
Get Blue Team Training and SOC Analyst Certifications with CyberDefenders: https://jh.live/cyberdefense

]]> John Hammond Education nonadult you can't be serious https://jh.live/vanta || Automate and prove your security compliance with Vanta! Get $1,000 off with my link to cruise through compliance across SOC 2, ISO 27001, ISO 42001, NIST AI RMF, HIPAA, GDPR, and more! https://jh.live/vanta Learn Cybersec... <![CDATA[Minecraft Meets Security Research]]> https://tube.ekaii.fr/w/jQmuAneoT9yaECDEQkp9Lo https://tube.ekaii.fr/w/jQmuAneoT9yaECDEQkp9Lo Sat, 12 Sep 2026 00:00:00 GMT I was messing around with Codex, Fabric, and Hunt.io on a live stream and started thinking about what cybersecurity research could look like inside Minecraft.

The idea was pretty simple: open directories become dimensions, files become mobs, and tools become weapons.

Full video: https://youtu.be/Neq3ydILwHI?si=INfeICFsHYxwtrex

]]> John Hammond Science & Technology nonadult Minecraft Meets Security Research I was messing around with Codex, Fabric, and Hunt.io on a live stream and started thinking about what cybersecurity research could look like inside Minecraft. The idea was pretty simple: open directories become dimensions, files become mobs, and ... <![CDATA[Let AI Build Tripwires]]> https://tube.ekaii.fr/w/nscGarK2nwssHfnUjzDq6z https://tube.ekaii.fr/w/nscGarK2nwssHfnUjzDq6z Thu, 10 Sep 2026 00:00:00 GMT What if you asked an AI agent to research Canarytokens, create a few, and understand what it can see on the host?

Watch the full video: https://youtu.be/kK145Pywm9E?si=-v8YBp04tTLc96Kg

]]> John Hammond Science & Technology nonadult Let AI Build Tripwires What if you asked an AI agent to research Canarytokens, create a few, and understand what it can see on the host? Watch the full video: https://youtu.be/kK145Pywm9E?si=-v8YBp04tTLc96Kg <![CDATA[I Turned the Open Internet Into a Minecraft World]]> https://tube.ekaii.fr/w/w1pSrNhF1gE2e4EDvkiwPi https://tube.ekaii.fr/w/w1pSrNhF1gE2e4EDvkiwPi Thu, 10 Sep 2026 00:00:00 GMT Learn Cybersecurity and more with Just Hacking Training: https://jh.live/training
See what else I'm up to with: https://jh.live/newsletter

ℹ️ Resources:
See what cybersecurity events are happening: https://jh.live/infosecmap
Learn how to code with CodeCrafters: https://jh.live/codecrafters
Host your own VPN with OpenVPN: https://jh.live/openvpn
Get Blue Team Training and SOC Analyst Certifications with CyberDefenders: https://jh.live/cyberdefense

]]> John Hammond Education nonadult I Turned the Open Internet Into a Minecraft World Learn Cybersecurity and more with Just Hacking Training: https://jh.live/training See what else I'm up to with: https://jh.live/newsletter ℹ️ Resources: See what cybersecurity events are happening: https://jh.live/infosecmap Learn how to code wit...