https://youtube.com/channel/UCW6MNdOsqv2E9AjQkv9we7A OK. TV & Film Podsync generator (support us at https://github.com/mxpv/podsync) en-us Wed, 16 Sep 2026 09:31:38 +0000 Thu, 17 Jan 2019 18:15:55 +0000 https://yt3.ggpht.com/_a2M_-kdsIp85BJ_KD7FK0k_aGaLiPgkDEtKYtDlhE4px2EnKHA-qXT9-TzuC7C4Yn3rNj9hFw=s800-c-k-c0x00ffffff-no-rj https://youtube.com/channel/UCW6MNdOsqv2E9AjQkv9we7A PwnFunction PwnFunction no RLyhPGsEMz4 https://youtube.com/watch?v=RLyhPGsEMz4 In this video, I break down an insane Chrome exploit discovered by 17-year-old researcher Matan that turns a simple drag-and-drop interaction into complete system compromise. The attack exploits Chrome's DevTools, bypassing JavaScript URI filters and CSP protections to gain access to your local file system. I'll walk you through the entire vulnerability chain — from the initial social engineering to reading /etc/passwd and achieving universal XSS across any website. References: https://issues.chromium.org/issues/40942152 https://x.com/MtnBer https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/5028164/5/front_end/ui/legacy/components/utils/Linkifier.ts#b526 🐶 Snyk is free forever. Check it out here - https://snyk.co/pwnfunction Tue, 03 Jun 2025 18:43:43 +0000 PwnFunction XSS like you've never seen. 13:28 no 1 iTT2AYE2IMQ https://youtube.com/watch?v=iTT2AYE2IMQ In this video, I break down the newly discovered Auto-Color malware — a sneaky Linux backdoor that’s been targeting universities and government systems. It hides in plain sight, messes with system files like /etc/ld.preload, and even uses encryption to keep its traffic under the radar. I’ll walk you through how it works and how it stays hidden. References: https://unit42.paloaltonetworks.com/new-linux-backdoor-auto-color https://gist.github.com/MalGamy12/fe4ab3d60fcb923fb96a7c968adf0e04 https://zw01f.github.io/malware%20analysis/auto-color/ 🐶 Snyk is free forever. Check it out here - https://snyk.co/pwnfunction Sun, 13 Apr 2025 20:54:12 +0000 PwnFunction Innocent Looking Backdoor Found in Universities and Government Systems 9:16 no 2 rgsIkZkflMw https://youtube.com/watch?v=rgsIkZkflMw In this episode we'll explore a bug in postgres. 🐶 Snyk is free forever. Sign up with my link https://snyk.co/pwnfunction 🐤 X: https://twitter.com/PwnFunction Fri, 07 Mar 2025 15:52:27 +0000 PwnFunction 2 Bytes Was Enough To Breach The US Treasury 8:31 no 3 -h_rj2-HP2E https://youtube.com/watch?v=-h_rj2-HP2E In this episode we'll break the Math.random method in JavaScript with z3. 🐶 Snyk is free forever. Sign up with my link https://snyk.co/pwnfunction ⭐ Randomness Predictor: https://github.com/PwnFunction/v8-randomness-predictor ⭐ Z3 Challenges: https://github.com/PwnFunction/learn-z3 ✨ Info ➜ Tools used are: https://tools.pwnfunction.com/ ➜ Video Production time(Research to Output): 100-ish hours. ➜ About 2L of Almond milk & 3.5L of Gatorade were consumed during the video creation. 💬 Discord: https://discord.gg/6KKQHvgJwv 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Lost Sky - Dreams NCS link: https://www.youtube.com/watch?v=SHFTHDncw0g Thu, 14 Jul 2022 11:30:04 +0000 PwnFunction How To Predict Random Numbers Generated By Computers 13:54 no 4 eTcVLqKpZJc https://youtube.com/watch?v=eTcVLqKpZJc In this episode we'll explore a local privilege escalation vulnerability in polkit's pkexec. 🐶 Snyk is free forever. Sign up with my link https://snyk.co/pwnfunction ⭐ Code + All Resources: https://github.com/PwnFunction/CVE-2021-4034 ✨ Info ➜ Tools used are: Adobe Animate, Adobe Premiere Pro, Adobe Illustrator & Adobe Auditions. ➜ VSCode: Monokai Pro Theme, Jetbrains Mono Font, SF Mono Font. ➜ Video Production time: 80-ish hours. ➜ About 2.5L of Almond milk were consumed during the video creation. 💬 Discord: https://discord.gg/6KKQHvgJwv 🐤 Twitter: https://twitter.com/PwnFunction 🎵 Track: Lost Sky - Dreams NCS link: https://www.youtube.com/watch?v=SHFTHDncw0g Fri, 08 Apr 2022 16:47:39 +0000 PwnFunction Dangerous Code Hidden in Plain Sight for 12 years! 18:00 no 5