top of page

STÖK

HACKER // CREATIVE // .........

stok-good-vibes.jpg

HACKERS GONNA HACK

CREATORS GONNA CREATE

GOOD VIBES ONLY

PUBLIC SPEAKER // HOST // EDITOR // PHOTOGRAPHER // ARTIST // NERD // HACKER

BUG BOUNTY LIFE - 40 Hackers in Amsterdam, what could go wrong? (HackerOne - Dropbox - H1-3120)
06:42

BUG BOUNTY LIFE - 40 Hackers in Amsterdam, what could go wrong? (HackerOne - Dropbox - H1-3120)

I was invited together with 40 other hackers, bug bounty hunters and pentesters from around the world to the annual Hackerone H1-3120 Livehack event in Amsterdam to hack Dropbox, and in less than 8 hours over $80.000 was paid out in Bug bounties. Join in on the fun and see what a live hacking bounty event can be like.. After the last reports were triaged and bounties paid, awards were handed out to the top hackers of the day: The Exalted (most reputation earned) went to mrtuxracer, a German hacker who was attending just his second live hacking event. He was the hacker who found the RCE on Dropbox’s vendor. The Assassin (highest signal) went to mrtuxracer as well. The Exterminator (best bug) went to fransrosen for his XSS report. The Most Valuable Hacker (MVH) went to mrtuxracer! -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
Frans Rosén and STÖK Fredrik goes to india for Nullcon and H1-91832
08:47

Frans Rosén and STÖK Fredrik goes to india for Nullcon and H1-91832

Tag along when swedish Hackers and Bugbounty reserchers Frans Rosén and STÖK travel from Sweden to Goa for Indias #1 Security conference /hacking event Nullcon and the HackerOne H1-91832 Live hackning event.
OMG! I made $20k in one day! (BUG BOUNTY LIFE)
08:27

OMG! I made $20k in one day! (BUG BOUNTY LIFE)

Beers, burgers and bountys in Las Vegas.. ok, obvious clickbait title, but once a year hackers from around the world gather in Las Vegas for hacker summercamp. There's Black Hat, Bsides, Defcon, Queercon and many, many, many other awesome events just like Bugcrowds house party and H1-702 live hacking events.. its life tbh! Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 Wanna get some fresh beats for your content and avoid copyright claims?? Check out Epidemic sound https://www.epidemicsound.com/referral/hh461w/ -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
BUG BOUNTY LIFE - I'V NEVER BEEN THIS SICK! (Hackerone h1-415 2019 San Fransciso)
14:57

BUG BOUNTY LIFE - I'V NEVER BEEN THIS SICK! (Hackerone h1-415 2019 San Fransciso)

(Sometimes you catch the bug. Sometimes the bug catches you) I love live hacking events! And this time I was lucky enough to be invited to the annual H1-415 invitational live hacking event in San Francisco. 60+ hackers competed for amazing bounty's at this 3 days and 2 live hack targets event. Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
How to get invited to HackerOne BUG BOUNTY live hack events!
02:29

How to get invited to HackerOne BUG BOUNTY live hack events!

How does it actually work? How does Hackerone pick their hackers for the live events? Well. To clarify the process i had breakfast with Luke Tucker and asked him about it. If I can do it, you can to.. Sign up for Hackerone & hacker101 and start hacking! bit.ly/hacker101-stok bit.ly/hackerone-stok Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- --- - FAQ: Where can i buy a NOOB Sweater?: Check out https://www.fitsmisfits.com What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com Seriously, I love what you do, i want to support your channel! WOW, thats awesome, as a content creator im super grateful for your interest in supporting my work, feel free to donate whatever you think is approtiate here: https://www.paypal.me/stokfredrik Can i chat with you? Yes, over at the Official Nahomies Discord: https://discord.gg/DabgZZt
BUG BOUNTY LIFE - Hackers in infinity pools? is that a thing? (HackerOne - H1-65 - Singapore)
19:40

BUG BOUNTY LIFE - Hackers in infinity pools? is that a thing? (HackerOne - H1-65 - Singapore)

So.. I travel in style to Singapore with some of the most amazing bug bounty hackers and pentesters i know, for the Hackerone H1-65 live hack event and Bountycon to hack Dropbox, Google and Facebook. And this is the what happened... Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
BUG BOUNTY LIFE - Hackers on a boat.. (HackerOne h1-4420 - UBER - London)
13:34

BUG BOUNTY LIFE - Hackers on a boat.. (HackerOne h1-4420 - UBER - London)

On June 8, 2019, HackerOne and Uber partnered for their third live hacking event to date — h14420. I was one of the 36 hackers that was flown across the globe to compete at the event and to hunt for amazing bugs. In over nine hours of hacking, $375,000 in bounties were paid out for more than 150 unique submissions. @tomnomnom - MVH (Most Valuable Hacker) @fransrosen - The Exterminator (best bug) @ngalongc - The Exalted (most reputation earned) @inhibitor181 - The Assassin (highest signal) Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 Wanna get some fresh beats for your content and avoid copyright claims?? Check out Epidemic sound https://www.epidemicsound.com/referral/hh461w/ -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
BUG BOUNTY LIFE - BUGCROWD BUGBASH SF 2019 (Hacking Atlassian - Bug Bounty Life)
10:01

BUG BOUNTY LIFE - BUGCROWD BUGBASH SF 2019 (Hacking Atlassian - Bug Bounty Life)

Bugcrowd and Atlassian teamed up and hosted an amazing Bug Bounty Bugbash live hacking event in sunny San Francisco earlier this summer. I was road tripping on the American west coast and was lucky enough to be invited together with some of Bugcrowd's best hackers. With one goal in mind, to see if we could find and exploit any bugs, and yes.. we sure did! Big ups to the Amazing Bugcrowd and Atlassian teams for their endless professionalism and pure awesomeness. https://www.bugcrowd.com/ https://www.atlassian.com/ All music's from Epidemic Sound https://www.epidemicsound.com/referral/u3mmt2/ Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- --- - FAQ: Where can i buy a NOOB Sweater?: Check out https://www.fitsmisfits.com What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com Seriously, I love what you do, i want to support your channel! WOW, thats awesome, as a content creator im super grateful for your interest in supporting my work, feel free to donate whatever you think is approtiate here: https://www.paypal.me/stokfredrik Can i chat with you? Yes, over at the Official Nahomies Discord: https://discord.gg/DabgZZt
That’s one HUGE statue... (India Ek number!!)
13:38

That’s one HUGE statue... (India Ek number!!)

Entrepreneur, Hacker, and Bug Bounty hunter Frans Rosén was heading to the first-ever Bsides Ahmedabad Security conference to give the opening keynote. I, STÖK was given the opportunity by Hackerone to tag along and to document the adventure in 4 daily microvlogs. Heres the directors cut, ie the long version.. Good times! Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- --- - FAQ: Where can i buy a NOOB Sweater?: Check out https://www.fitsmisfits.com What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com Seriously, I love what you do, i want to support your channel! WOW, thats awesome, as a content creator im super grateful for your interest in supporting my work, feel free to donate whatever you think is approtiate here: https://www.paypal.me/stokfredrik Can i chat with you? Yes, over at the Official Nahomies Discord: https://discord.gg/DabgZZt
STÖKLIFE - The road to Hackers Summercamp 2019 (Seattle to Las Vegas)
10:55

STÖKLIFE - The road to Hackers Summercamp 2019 (Seattle to Las Vegas)

As a creative challenge, I recorded a bunch of micro vlogs in the summer of 2019 where I limited myself to only film using a DJI pocket/iPhone and forced myself to edit on my phone. That resulted in a couple of 1-3 minutes microvlogs that i posted on social media. They never really made it onto youtube, so here you go.. a piece of STÖKLIFE and some highlights from my summer.. enjoy. https://www.stokfredrik.com https://twitter.com/stokfredrik https://instagram.com/stokfredrik
HOW DID THIS HAPPEN!? (13370822 LHE VLOG)
20:07

HOW DID THIS HAPPEN!? (13370822 LHE VLOG)

WOW! Its been 2+ years since i participated in a live hacking event and made a vlog about it. Man, it feels good to be back!. Bigups to the paranoids and Intigriti for making this possible!
Had to much GLÖGG and lost my camera during - 13371122 - Intigriti + Visma
06:07

Had to much GLÖGG and lost my camera during - 13371122 - Intigriti + Visma

In Late 2022 me and P4fg went to Copenhagen for 13371122, I had to much glögg at a party one night and lost one of my cameras. Some you win, some you loose. So here's a vlog with what i could salvage from the memory cards i had left :). Enjoy! Mad love to http://intigriti.com and https://app.intigriti.com/programs/visma/visma/ For the Invite and a real good time! //STÖK Need a shell to hack from? Setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466
10 GREAT habits for bug bounty hunters (and a productive life)
11:06

10 GREAT habits for bug bounty hunters (and a productive life)

Hunting for security vulnerabilities and participating in bug bounties can be a daunting task and requires a strong mental game. In this motivational and hopefully inspirational video, i will do my best to give you 10 habits that will sharpen your mind and balance your mental health. Which hopefully will lead to better bug bounty bugs and a calm but productive life. 1. Be grateful to be alive, (gratitude work) 2. Define clear goals (intention) 3. Get outside (walk/exercise for minimum 20 minutes) 4. Feel what meeting your goals "feels" like. (emotional connection) 5. Do something will presence (focus) 6. Find the silence in between the breaths (meditation) 7. Write down 6 tasks (not more than 6) 8. 9. Journal (write a diary) 10. Build core and balance (challenge yourself) // STÖK -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need some beats to h4xx0r to? NINETOFIVE Records have your back with : City Beats 🍊 - Underground & Smooth vibes : https://bit.ly/City-Beats "A personal collection of favorite beats that i'm listening to right now. Make sure to stream the whole album & ep if it's just one track included in the playlist. Anything from Funk, R&B, Lo-Fi, 80's, Classic Boom-Bap, just mellow vibes for you to enjoy" - Luciano Brougham Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 Wanna get some fresh beats for your content and avoid copyright claims?? Check out Epidemic sound https://www.epidemicsound.com/referral/hh461w/ -------------- --- - FAQ: Hey! i love what you do! how can i support you? I like ramen, you could buy me some ramen over at: https://www.buymeacoffee.com/stokfredrik What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com
10+ Free OSINT tools (secure yourself today!)
21:11

10+ Free OSINT tools (secure yourself today!)

Some say the best defense is a strong offense, and that might just be true. So in this talk i will show you some of the tools and techniques that's available online so you can start securing your organization today!. Watch the full VISMA SECCON Conference here: https://www.youtube.com/watch?v=vvvdLDpjvmE Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- --- - What gear do you use? : Check out https://www.stokfredrik.com Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need some beats to h4xx0r to? NINETOFIVE Records have your back with : City Beats 🍊 - Underground & Smooth vibes : https://bit.ly/City-Beats "A personal collection of favorite beats that i'm listening to right now. Make sure to stream the whole album & ep if it's just one track included in the playlist. Anything from Funk, R&B, Lo-Fi, 80's, Classic Boom-Bap, just mellow vibes for you to enjoy" - Luciano Brougham Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 Wanna get some fresh beats for your content and avoid copyright claims?? Check out Epidemic sound https://www.epidemicsound.com/referral/hh461w/ -------------- --- - FAQ: Hey! i love what you do! how can i support you? I like ramen, you could buy me some ramen over at: https://www.buymeacoffee.com/stokfredrik Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com
How i became a HackerOne MVH without writing a single line of python (Motivational talk)
20:06

How i became a HackerOne MVH without writing a single line of python (Motivational talk)

So how do you become a HackerOne Most Valuable Hacker (get awarded multiple awards and win the Best Team Award) without writing a single line of code? Well this is how Ii did it. In this talk i touch on my methodology, my mindset and the importance of collaboration. This is a talk i presented during HackerOne's H@cktivityCon https://www.hackerone.com/hacktivitycon Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
Q: How to write a BUG BOUNTY report that actually gets paid?
01:00:38

Q: How to write a BUG BOUNTY report that actually gets paid?

YES! That's one of the topics STÖK and Jason Haddix and KUGG will answer in this episode of BOUNTY THURSDAYS - ON AIR . A show where we answer your questions and focus on news, tools, and stuff related to bug bounty and the offensive (red) side of cyber. All the links to the tools and resources mentioned in this show can be find here: https://stokfredrik.com after the show. FOLLOW US ON @ https://twitter.com/jhaddix https://twitter.com/kuggofficial https://twitter.com/stokfredrik
facts: Bug Bounty hunters has made ridiculous amounts of $$ from known DNS techniques..
53:37

facts: Bug Bounty hunters has made ridiculous amounts of $$ from known DNS techniques..

YES! That's one of the topics STÖK and Jason Haddix and Condigo will answer in this episode of BOUNTY THURSDAYS - ON AIR . A show where we answer your questions and focus on news, tools, and stuff related to bug bounty and the offensive (red) side of cyber. All the links to the tools and resources mentioned in this show can be find here: https://stokfredrik.com after the show. FOLLOW US ON @ https://twitter.com/jhaddix https://twitter.com/codingo_ https://twitter.com/stokfredrik
Q: HOW do you find hidden stuff on websites? (this episode is all about CONTENT DISCOVERY!)
01:00:19

Q: HOW do you find hidden stuff on websites? (this episode is all about CONTENT DISCOVERY!)

YES! That's one of many questions STÖK, Jason Haddix and KUGG will answer in this episode of BOUNTY THURSDAYS - ON AIR . A show where we answer your questions and focus on news, tools, and stuff related to bug bounty and the offensive (red) side of cyber. All the links to the tools and resources mentioned in this show can be find here: https://stokfredrik.com/contentdiscovery This episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok FOLLOW US ON @ https://twitter.com/jhaddix https://twitter.com/kuggofficial https://twitter.com/stokfredrik
Q: HOW do you get started in bug bounty?? How do you build your automation?!
01:00:43

Q: HOW do you get started in bug bounty?? How do you build your automation?!

YES! That's are some of the questions STÖK, Jason Haddix and KUGG will answer in this episode of BOUNTY THURSDAYS - ON AIR . A show where we answer your questions and focus on news, tools, and stuff related to bug bounty and the offensive (red) side of cyber. This episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok 00:00 - Welcome to Bounty Thursdays (news and tools) 12:40 - Bounty Thursday's - ON AIR (Questions from the community) FOLLOW US ON @ https://twitter.com/jhaddix https://twitter.com/kuggofficial https://twitter.com/stokfredrik
Q: PENTEST VS BUGBOUNTY? (Bounty Thursday's - ON AIR)
01:06:53

Q: PENTEST VS BUGBOUNTY? (Bounty Thursday's - ON AIR)

35:53 PENTEST VS BUGBOUNTY? -- YES! In this episode of Bounty Thursdays, we focus on news, and tools related to bug bounty and the offensive (red) side of cyber. We dig into Tools and do a Q/A with the community! All links here: https://twitter.com/stokfredrik/status/1504498921380458497 The episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok 00:00 - pre show 04:48 - Welcome to Bounty Thursdays (news and tools) 25:22 - Bounty Thursday's - ON AIR (Questions from the community) FOLLOW US ON @ https://twitter.com/kuggofficial https://twitter.com/stokfredrik
BOUNTY THURSDAYS - LIVE #2 (NEWS/TOOLS and Community Questions with Jason Haddix)
52:18

BOUNTY THURSDAYS - LIVE #2 (NEWS/TOOLS and Community Questions with Jason Haddix)

YES! In this episode of Bounty Thursdays we focus on news, and tools related to the bugbounty space. We dig into Tools and do a Q/A with the community! Links to all tools in this tweet : https://twitter.com/stokfredrik/status/1499415615894958083 Comments are by design disabled, but I love to chat with you over at : twitter.com/stokfredrik 0:00 Audio issues 13:15 Bounty Thursdays : Show starts 31:38 ON-AIR with STÖK and Jason Haddix The episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok
BOUNTY THURSDAYS - LIVE #1 (SVG-XML/Redirects/OOB servers and Community Questions)
01:05:59

BOUNTY THURSDAYS - LIVE #1 (SVG-XML/Redirects/OOB servers and Community Questions)

YES! In this liveshow of Bounty Thursdays we focus on news, tools and events related to the bugbounty space. We dig into Redirects and SVG's and do a Q/A with the community! Comments are by design disabled, but I love to chat with you over at : twitter.com/stokfredrik The episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok
WHAT TO DO WHEN YOU HAVE DEFCON FOMO?? :((((
09:26

WHAT TO DO WHEN YOU HAVE DEFCON FOMO?? :((((

If you're are a cybersecurity professional or curious about testing for bugs, searching for vulnerabilities, pwning boxes, doing bug bounty, pentesting, CTF, web app testing, offensive security, app sec then this is the show for you! Welcome to Bounty Thursdays! // STÖK The episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok 0:00 This is Bounty Thursdays. 0:08 Intro 0:16 DEFCON FOMO PART 1 0:43 James kettle HTTP/2 Reserch 1:45 https://go.intigriti.com/stok 2:07 Automation and organising your Nuclei Templates with CENT 3:13 Sort your massive wordlist's with DUPLICUT 4:18 DOM INVADER 5:17 TAINT TESTING TOOL 5:43 HACKVECTOR 6:42 DEFCON FOMO PART 2 8:30 SKATEBOARDING IS NOT A CRIME Due to Youtube's regulations on potentially malicious links. Subscribers of my newsletter will get the links directly into their inbox. You can sign up for the newsletter over at stokfredrik.com -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? Setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- --- - FAQ: Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Hey! i love what you do! how can i support you? I like ramen, you could buy me some ramen over at: https://www.buymeacoffee.com/stokfredrik What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com
Wanna hack zseano website and get paid? - Bounty Thursdays #28
09:21

Wanna hack zseano website and get paid? - Bounty Thursdays #28

If you're are a cybersecurity professional or curious about testing for bugs, searching for vulnerabilities, pwning boxes, doing bug bounty, pentesting, CTF, web app testing, offensive security, app sec then this is the show for you! Welcome to Bounty Thursdays! // STÖK The episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok -------------- -- -- In this episode: 0:00 This is Bounty Thursdays. 0:12 Intro & DISCLAIMER 0:48 Zeanos hosts a Bugbountyhunter . com event! 2:13 NAG CHAMPA LYFE! 2:27 Dont get your ips blocked with UNIMAP 3:17 Distribute your recon with AXIOM and RECONFTW 4:11 Sharing is caring with ROHIT @sec_r0 4:43 Hackchat with Marco over at SentinelONE 5:08 Bounty Talks in Spanish! 5:50 IOS / ANDROID Pentesting curious? 6:33 This show is sponsored by Intigriti! 6:53 Free burp collaborator replacement by Project Discovery. 7:57 GitDorker Deep dive 8:25 Socials, all about them socials 8:35 Become a supporter of the show! Due to Youtube's regulations on potentially malicious links. Subscribers of my newsletter will get the links directly into their inbox. You can sign up for the newsletter over at stokfredrik.com -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? Setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- --- - FAQ: Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Hey! i love what you do! how can i support you? I like ramen, you could buy me some ramen over at: https://www.buymeacoffee.com/stokfredrik What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com
Bug Bounty Recon Automation FTW!
13:21

Bug Bounty Recon Automation FTW!

if you're are a cybersecurity professional or curious about testing for bugs, searching for vulnerabilities, pwning boxes, doing bug bounty, pentesting, CTF, web app testing, offensive security, app sec then this is the show for you! Welcome to Bounty Thursdays! // STÖK -------------- -- -- In this episode: Stay up to date with fresh DNS resolvers Sign up for Nahamcon! How to turn your Bug bounty hobby into a cyber security career! Turbo intruder has been updated Listen to the Undetected podcast by Detectify Practice our skills on a vulnerable grapghql machine! Bug Bounty Reconnaissance Framework STÖK heart VIBEZSQUAD! Java deserialization knowledge thread on twitter Use SPYSE for all your passive recon needs! Huge wordlist for fuzzing and content discovery Recon automation ftw! -------------- -- -- The episode is sponsored by : SPYSE.COM Spyse is the most complete Internet assets registry for every cybersecurity professional Perform rapid passive reconnaissance on an Internet-wide scale! https://spyse.com/?utm_source=Youtube&utm_medium=Video&utm_campaign=Stok Use the code stok20 for a 20% discount on a monthly subscription Expires At 2021-03-28 Use the code stok30 for a 30% discount on a yearly subscription Expires At 2021-03-28 -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? Settup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- --- - FAQ: Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Hey! i love what you do! how can i support you? I like ramen, you could buy me some ramen over at: https://www.buymeacoffee.com/stokfredrik What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com
AI will destroy the cyber security industry?!
11:45

AI will destroy the cyber security industry?!

if you're are a cyber security professional or curious about testing for bugs, searching for vulnerabilities, pwning boxes, doing bug bounty, pentesting, ctf, webapp testing, offensive security, appsec then this is the show for you! Welcome to Bounty Thursdays! // STÖK -------------- -- -- In this episode: The Pentester BluePrint: Starting a Career as an Ethical Hacker Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies Projectdiscovery raise $1.7m and goes full time! Find friends to hack with over at findhunters dot com Subdomain takeover with - now the host is mine Rez0 Automates the good life with bash aliases Renwa shares their work and releases XSSTRON Mad love to the #Vibezsquad The first live hacking event of 2021 is over = Ron Chan is god... (truth) The episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- --- - FAQ: Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Hey! i love what you do! how can i support you? I like ramen, you could buy me some ramen over at: https://www.buymeacoffee.com/stokfredrik What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com
TOP 10 web penetration / Bug Bounty testing techniques of 2020!
22:07

TOP 10 web penetration / Bug Bounty testing techniques of 2020!

if you're testing for bugs, searching for vulnerabilities, pwning boxes, doing bug bounty, pentesting, ctf, webapp testing, offensive security, appsec then this is the show for you! Welcome to Bounty Thursdays! // STÖK -------------- -- -- In this episode: Ratelimit your requests in ffuf 1.2.1 500+ gitdorks @m4ll0k 's Javascript Recon Process Firefox multi-account containers shubs breaks down blind ssrf with impact Get paid in Euros over at intigriti.com Bug bytes by pentesrterland @VickieLiDev CSRF XSRFProbe @HackerOneTV hosts VLHE h1-2102 Top 10 webhacking techniques of 2020 Bug Bounty Reconnaissance Framework by Honoki @NahamSec Live Recon, now with a twist! Active Directory Pentest Lab 5 min with @codingo Open API Scanner The episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- --- - FAQ: Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Hey! i love what you do! how can i support you? I like ramen, you could buy me some ramen over at: https://www.buymeacoffee.com/stokfredrik What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com
2021 + new Bug Bounty tools + new stuff = COOL BUGS!
10:57

2021 + new Bug Bounty tools + new stuff = COOL BUGS!

if you're testing for bugs, searching for vulnerabilities, pwning boxes, doing bug bounty, pentesting, ctf, webapp testing, appsec then this is the show for you! Welcome to Bounty Thursdays! // STÖK -------------- -- -- In this episode: Finding and understanding Server Side Template Injection with @PwnFunction Getting a Clean Chrome for pentesting and bug bounties with AutoChrome How to avoid burnout as a bug hunter / pentester / developer by @Stefan Rows Customize Burp Suite using Burp Customizer by Corey Arthur Scan * apple at once using axiom by pry // Ben Bidmead HackerOne is Hiring! Ferrox Buster now supports automatic Recursive scanning! Visma moves to Intigriti. Practical Web Cache Poisoning: Redefining 'Unexploitable' With James Kettle Get Zseano's methodology over at bugbountyhunter. com - The episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- --- - FAQ: Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Hey! i love what you do! how can i support you? I like ramen, you could buy me some ramen over at: https://www.buymeacoffee.com/stokfredrik What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com
What is DNS? XSS? DOMXSS? SSRF? Bug Bounty/Pentesting
09:44

What is DNS? XSS? DOMXSS? SSRF? Bug Bounty/Pentesting

Bounty Thursdays is an show where STÖK talk about and showchase creators, developers, hackers, tools, events, news, life & community stuff he stumble upon and finds interesting in the Cyber Security and Bug Bounty Space. Get all the links mentioned in this video by signing up to the newsletter over at https://stokfredrik.com -------------- -- -- This episode is sponsored by: https://pentesterlab.com We've been teaching web security for years and have put together many well-thought-out exercises to get you from zero to hero. Our exercises cover everything from really basic bugs to advanced vulnerabilities. Not only will we help you learn, but you'll also have fun doing it! -------------- -- -- In this Episode: Projectdiscovery released DNSX for fast dns lookups b1twis3 released Burp2Slack Clean up your old programs on hackerone by Dee-see TomNomNom automates XSS findings on a plane Reflector finds XSS in burp Filedescriptor Release a chrome plugin for DOMXSS obheda12 automates reporting with Jupyter th3hack3rwiz released Lazy-FuzzZ Honoki helps out with CORS reporting Rajanish Pathak, Rahul Maini & Harsh Jaiswal talks about Demystifying the Server Side -------------- -- -- Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 Wanna get some fresh beats for your content and avoid copyright claims?? Check out Epidemic sound https://www.epidemicsound.com/referral/hh461w/ -------------- --- - FAQ: Hey! i love what you do! how can i support you? Become a defender of the good vibes: https://www.patreon.com/stokfredrik What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com
Learn Pentesting secrets, BURP 1.7 or 2.0 + more sweet stuff!
08:48

Learn Pentesting secrets, BURP 1.7 or 2.0 + more sweet stuff!

Bounty Thursdays is an show where STÖK talk about and showchase creators, developers, hackers, tools, events, news, life & community stuff he stumble upon and finds interesting in the Cyber Security and Bug Bounty Space. Get all the links mentioned in this video by signing up to the newsletter over at https://stokfredrik.com -------------- -- -- This episode is sponsored by: https://pentesterlab.com We've been teaching web security for years and have put together many well-thought-out exercises to get you from zero to hero. Our exercises cover everything from really basic bugs to advanced vulnerabilities. Not only will we help you learn, but you'll also have fun doing it! -------------- -- -- In this Episode: Europa tweaks burp 1.7 to work with java 11/12 B1twis3 puts the 1.7 spider against the 2.0 crawler zseano shares knowledge over at bugbountyhunter . com HackerOne battles the Grinch Kringlecon is a pure holiday challenge Stin8k Launched a 403 plugin for burp Soroush shares his secrets Gareth Heyes pokes at PDF's STÖK does a takeover on Nahamsec's Live Recon Honoki collects all the information using Bug Bounty Reconnaissance Framework -------------- -- -- Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 Wanna get some fresh beats for your content and avoid copyright claims?? Check out Epidemic sound https://www.epidemicsound.com/referral/hh461w/ -------------- --- - FAQ: Hey! i love what you do! how can i support you? Become a defender of the good vibes: https://www.patreon.com/stokfredrik What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com
BOUNTY THURSDAYS - LIVE #1 (SVG-XML/Redirects/OOB servers and Community Questions)
01:05:59

BOUNTY THURSDAYS - LIVE #1 (SVG-XML/Redirects/OOB servers and Community Questions)

YES! In this liveshow of Bounty Thursdays we focus on news, tools and events related to the bugbounty space. We dig into Redirects and SVG's and do a Q/A with the community! Comments are by design disabled, but I love to chat with you over at : twitter.com/stokfredrik The episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok
BOUNTY THURSDAYS - LIVE #2 (NEWS/TOOLS and Community Questions with Jason Haddix)
52:18

BOUNTY THURSDAYS - LIVE #2 (NEWS/TOOLS and Community Questions with Jason Haddix)

YES! In this episode of Bounty Thursdays we focus on news, and tools related to the bugbounty space. We dig into Tools and do a Q/A with the community! Links to all tools in this tweet : https://twitter.com/stokfredrik/status/1499415615894958083 Comments are by design disabled, but I love to chat with you over at : twitter.com/stokfredrik 0:00 Audio issues 13:15 Bounty Thursdays : Show starts 31:38 ON-AIR with STÖK and Jason Haddix The episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok
Q: PENTEST VS BUGBOUNTY? (Bounty Thursday's - ON AIR)
01:06:53

Q: PENTEST VS BUGBOUNTY? (Bounty Thursday's - ON AIR)

35:53 PENTEST VS BUGBOUNTY? -- YES! In this episode of Bounty Thursdays, we focus on news, and tools related to bug bounty and the offensive (red) side of cyber. We dig into Tools and do a Q/A with the community! All links here: https://twitter.com/stokfredrik/status/1504498921380458497 The episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok 00:00 - pre show 04:48 - Welcome to Bounty Thursdays (news and tools) 25:22 - Bounty Thursday's - ON AIR (Questions from the community) FOLLOW US ON @ https://twitter.com/kuggofficial https://twitter.com/stokfredrik
Q: HOW do you get started in bug bounty?? How do you build your automation?!
01:00:43

Q: HOW do you get started in bug bounty?? How do you build your automation?!

YES! That's are some of the questions STÖK, Jason Haddix and KUGG will answer in this episode of BOUNTY THURSDAYS - ON AIR . A show where we answer your questions and focus on news, tools, and stuff related to bug bounty and the offensive (red) side of cyber. This episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok 00:00 - Welcome to Bounty Thursdays (news and tools) 12:40 - Bounty Thursday's - ON AIR (Questions from the community) FOLLOW US ON @ https://twitter.com/jhaddix https://twitter.com/kuggofficial https://twitter.com/stokfredrik
Q: HOW do you find hidden stuff on websites? (this episode is all about CONTENT DISCOVERY!)
01:00:19

Q: HOW do you find hidden stuff on websites? (this episode is all about CONTENT DISCOVERY!)

YES! That's one of many questions STÖK, Jason Haddix and KUGG will answer in this episode of BOUNTY THURSDAYS - ON AIR . A show where we answer your questions and focus on news, tools, and stuff related to bug bounty and the offensive (red) side of cyber. All the links to the tools and resources mentioned in this show can be find here: https://stokfredrik.com/contentdiscovery This episode is sponsored by: Intigriti - Europe's #1 ethical hacking and bug bounty platform, Sign up using the link below to get started with hunting on european companies and get paid in euros! https://go.intigriti.com/stok FOLLOW US ON @ https://twitter.com/jhaddix https://twitter.com/kuggofficial https://twitter.com/stokfredrik
facts: Bug Bounty hunters has made ridiculous amounts of $$ from known DNS techniques..
53:37

facts: Bug Bounty hunters has made ridiculous amounts of $$ from known DNS techniques..

YES! That's one of the topics STÖK and Jason Haddix and Condigo will answer in this episode of BOUNTY THURSDAYS - ON AIR . A show where we answer your questions and focus on news, tools, and stuff related to bug bounty and the offensive (red) side of cyber. All the links to the tools and resources mentioned in this show can be find here: https://stokfredrik.com after the show. FOLLOW US ON @ https://twitter.com/jhaddix https://twitter.com/codingo_ https://twitter.com/stokfredrik
HOW TO GET STARTED IN BUG BOUNTY (9x PRO TIPS)
11:22

HOW TO GET STARTED IN BUG BOUNTY (9x PRO TIPS)

So here are the tips/pointers I give to anyone that’s new to Bug bounty / bounties and apptesting. 1. Sign up for Hackerone to get Petes book Webhacking 101 bit.ly/hackerone-stok 2. Watch anything you can from Jason Haddix just google it. 3. Watch all the tutorials and do the CTF on Hacker101 bit.ly/hacker101-stok 4. Sign up for Pentersterlab and try their stuff out! bit.ly/pentesterlab-stok 5. Watch everything on https://www.bugcrowd.com/university 6. Sign up for Hackerone (bit.ly/hackerone-stok) Bugcrowd or any other BB platform. 7. Get a Burp pro license, its way better than getting a “ethical hacker course” https://portswigger.net/ 8. Find a program that you like and vibe with, its more fun to hack on a program or brand you like. 9. Don’t waste time on VDP’s 10. Don’t be discouraged that everyone else has automated everything, its just not true. 11. Always approach a target like you’re the first one there. Your view is unique. 12. Remember, Zero days can be new bugs in old code. Tavis has shown that over and over again. 13. Be proud of your work, you did this! //STÖK.. ps,., stay epic.. Comments are disabled by default, but you can find me and the community over at twitter.com/stokfredrik -------------- --- - Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 Wanna get some fresh beats for your content and avoid copyright claims?? Check out Epidemic sound https://www.epidemicsound.com/referral/hh461w/ -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
A $7.500 BUG BOUNTY Bug explained, step by step. (BLIND XXE OOB over DNS) - REDUX
07:36

A $7.500 BUG BOUNTY Bug explained, step by step. (BLIND XXE OOB over DNS) - REDUX

Have you ever wondered what a $7.500 Bug Bounty bug looks like? In this "re-upload" of the original video created in 2019, il walk you through a theoretical "BLIND XXE OOB over DNS" bug on a super-hardened target and explain the ideas around how to exploit it. The tool used in this video to create the initial XML/PDF payload is Tobias 'floyd' Ospelt amazing burp plugin "Upload Scanner" I absolutely recommend that you use it for all your file upload automation needs. https://twitter.com/floyd_ch https://github.com/portswigger/upload-scanner Owasp XXE https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing Out of band entity XXE explained https://www.acunetix.com/blog/articles/band-xml-external-entity-oob-xxe/ Burp collaborator https://portswigger.net/burp/documentation/collaborator Exploiting XXE with local DTD files https://mohemiv.com/all/exploiting-xxe-with-local-dtd-files/ Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
Finally! HOW TO solve the INTIGRITI Easter XSS challenge using only Chrome DEVTOOLS!
42:10

Finally! HOW TO solve the INTIGRITI Easter XSS challenge using only Chrome DEVTOOLS!

Did you like me struggle with the Intigriti XSS Easter challenge? Suffer no more, here's a walkthrough! Europe's #1 ethical hacking and bug bounty platform, Intigriti.com Hosted an Easter XSS Challenge over at https://challenge.intigriti.io. The challenge was way over my head, well primarily since I don't code or look for XSS bugs. So I asked Inti De Ceukelaire (https://twitter.com/securinti) to give me a walkthrough so I could learn something new! Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- This STÖK, time to learn something new, special is sponsored by: INTIGRITI - Ethical hacking and managed bug bounty platform https://www.intigriti.com/ -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
A $7.500 BUG BOUNTY Bug explained, step by step. (BLIND XXE OOB over DNS) - REDUX
07:36

A $7.500 BUG BOUNTY Bug explained, step by step. (BLIND XXE OOB over DNS) - REDUX

Have you ever wondered what a $7.500 Bug Bounty bug looks like? In this "re-upload" of the original video created in 2019, il walk you through a theoretical "BLIND XXE OOB over DNS" bug on a super-hardened target and explain the ideas around how to exploit it. The tool used in this video to create the initial XML/PDF payload is Tobias 'floyd' Ospelt amazing burp plugin "Upload Scanner" I absolutely recommend that you use it for all your file upload automation needs. https://twitter.com/floyd_ch https://github.com/portswigger/upload-scanner Owasp XXE https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing Out of band entity XXE explained https://www.acunetix.com/blog/articles/band-xml-external-entity-oob-xxe/ Burp collaborator https://portswigger.net/burp/documentation/collaborator Exploiting XXE with local DTD files https://mohemiv.com/all/exploiting-xxe-with-local-dtd-files/ Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
Burp Suite tutorial: IDOR vulnerability automation using Autorize and AutoRepeater (bug bounty)
11:35

Burp Suite tutorial: IDOR vulnerability automation using Autorize and AutoRepeater (bug bounty)

Have you ever wondered how hackers find and exploit IDOR (Insecure Direct Object Reference)? In this video STÖK get schooled by Fisher who shows him how to setup and hunt for IDORS using BURP Suite & plugins like Autorize and AutoRepeter. Fisher: https://twitter.com/Regala_ Burp Suite: https://portswigger.net/ Autorize: https://github.com/Quitten/Autorize Barak Tawily, Application Security Expert Federico Dotta, Security Expert at Mediaservice.net AutoRepeter: https://github.com/nccgroup Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 Wanna get some fresh beats for your content and avoid copyright claims?? Check out Epidemic sound https://www.epidemicsound.com/referral/hh461w/ -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
How to setup a BIND9 DNS server for OOB Exfiltration! (step by step) BUG BOUNTY - PENTEST
10:03

How to setup a BIND9 DNS server for OOB Exfiltration! (step by step) BUG BOUNTY - PENTEST

A quick HEADS UP! Secure your sever once deployed!! Fersingb brought it to my attention that the default state of the server allows for external recursions and lookups, (this is not good at all) so make sure you lock down the DNS server by limiting the recursions to localhost using this trick https://gist.github.com/fersingb/f29d0209bae40186fca4e52dc747e9dd Bug Bounty hunters and Pentesters alike, they all love to run their own domain and DNS Servers to log Out of Band interactions caused by RCEs, XXE's SSRFs and blind requests. And now you can do that too! Better safe than sorry!! This tutorial will guide you through the process of setting up your own domain and installing BIND9 on a AWS hosted Free Tier Virtual machine in a very simple way using a custom script created by JuxhinDB! Setup Script and tools used: https://github.com/JuxhinDB/OOB-Server https://teamrot.fi http://twitter.com/putsi https://aws.amazon.com Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
VIM tutorial: linux terminal tools for bug bounty pentest and redteams with @tomnomnom
36:17

VIM tutorial: linux terminal tools for bug bounty pentest and redteams with @tomnomnom

In this VIM / BASH Bug Bounty tutorial, Tom Hudson @tomnomnom chats with STÖK, shares his command line bug bounty pentesting recon secrets and Shows you how to use some of his custom tools. Pro webapp pentesting from the command line You will find Tom here: https://tomnomnom.com/ https://twitter.com/tomnomnom https://github.com/tomnomnom Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 Wanna get some fresh beats for your content and avoid copyright claims?? Check out Epidemic sound https://www.epidemicsound.com/referral/hh461w/ -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
FUZZING FOR BEGINNERS (KUGG teaches STÖK American fuzzy lop)
25:57

FUZZING FOR BEGINNERS (KUGG teaches STÖK American fuzzy lop)

In this episode of "STÖK, time to learn something new". KUGG (Christoffer Jerkeby) From F-Secure shows STÖK the basics of FUZZING using American Fuzzy lop. They FUZZ a HTTP server and get two crashes, crashes that with the right exploit could give an attacker ROOT access using privilege escalation, really interesting stuff!. Check out KUGGs and the F-Secure gangs webcast over at: https://www.f-secure.com/en/consulting/livewebcast Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Support my work: Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 -------------- -- -- FAQ: What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do "work stuff" together? Sure, Email me at workwith @ stokfredrik.com
HOW TO PLAY HTB WITHOUT A VPN OR KALI LINUX (PWN BOX)
14:39

HOW TO PLAY HTB WITHOUT A VPN OR KALI LINUX (PWN BOX)

In this video i try out Hack The Box latest feature PWN BOX. Can you really just play HTB only by using a browser? No Kali linux? no VPN? Lets find out! -------------- -- -- This episode is sponsored by: Hack The Box: Hack The Box is an online platform allowing you to test your penetration testing skills and exchange ideas and methodologies with thousands of people in the security field Sign up for a account here: https://bit.ly/3nmrTSC Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Support my work:Join me on Patreon! https://www.patreon.com/stokfredrik Need a shell to hack from? Setup your own droplet today!Get $100 credit on Digital Ocean using this link: https://m.do.co/c/5884b0601466 Wanna get some fresh beats for your content and avoid copyright claims?? Check out Epidemic sound https://www.epidemicsound.com/referral/hh461w/ -------------- -- -- FAQ: Hey! i love what you do! how can i support you? I like ramen, you could buy me some ramen over at: https://www.buymeacoffee.com/stokfredrik What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do stuff together? Sure, Email me at workwith @ stokfredrik.com
THIS IS WHY YOU SHOULD GET A PENTESTERLAB PRO SUBSCRIPTION!
11:15

THIS IS WHY YOU SHOULD GET A PENTESTERLAB PRO SUBSCRIPTION!

Pentesterlab.com has been teaching web security for years and have put together many well-thought-out exercises to get you from zero to hero. Their exercises cover everything from really basic bugs to advanced vulnerabilities. Not only will they help you learn, but you'll also have fun doing it! This episode is sponsored by: Pentesterlab https://pentesterlab.com/referral/0gk6uq0ajrd38Q Comments are disabled by default, but you can find me and the community over at https://twitter.com/stokfredrik -------------- -- -- Need a shell to hack from? setup your own droplet today! Get $100 credit on Digital Ocean using this link https://m.do.co/c/5884b0601466 Wanna get some fresh beats for your content and avoid copyright claims?? Check out Epidemic sound https://www.epidemicsound.com/referral/hh461w/ -------------- --- - FAQ: Hey! i love what you do! how can i support you? Become a defender of the good vibes: https://www.patreon.com/stokfredrik What gear do you use? : Check out https://www.stokfredrik.com Dude, I love what you do can we do business stuff together? Sure, Email me at workwith @ stokfredrik.com
☠️ The Malicious Office 365 Application Experiment.. that went bad.. real bad..
20:47

☠️ The Malicious Office 365 Application Experiment.. that went bad.. real bad..

We have all signed up for apps that use a third party as the authentication provider. But what happens if we sign up for a Malicious Microsoft application using our Office 365 credentials? What can the attacker do? And how do we protect ourselves and our users if it happens? In this somewhat sophisticated Cybersecurity awareness and educational phishing scenario, Fabio and STÖK from Truesec sets up a Malicious Azure Webapp and bypasses MFA to collect a token, that never expired... Scary stuff.. twitter.com/fabio_viggiani/ twitter.com/stokfredrik https://career.truesec.com/ Join our purpose to create a safer world by preventing cyber breaches and minimizing impact!
How to turn bugs into a "passive" income stream! ft Detectify's Almroot
10:01

How to turn bugs into a "passive" income stream! ft Detectify's Almroot

Ok, we can argue if it's a passive income or not. But I think Detectify is onto something here. Crowdsource focuses on the automation of vulnerabilities rather than fixing bugs for specific clients. So once you file an accepted vulnerability in example "a widely used system, such as a CMS" a framework, or library. Then they will automate it into their tooling, and if your finding hits one of their targets, well you get paid! (anything from $2-$50+ per hit depending of severity) If you ask me, that's pretty sweet. This video was made in collaboration with Detectify. Check out their website for more info on how to be a part of the Crowdsource Community! //STÖK https://detectify.com https://twitter.com/stokfredrik ps. Thanks, TRUESEC for letting us use the studio, mad love .ds
bottom of page