Ninja Looting Like a Pirate

good morning if you could please have your seats I have well I had the most awesome thing an awful thing happened to me which is my slide that kind of exploded last night I spent some time rebuilding it I have a lot of information to go through and hopefully by the time I'm done you will want to try this at home unlike what my you know t-shirt main plot and there is a prize if you find something interesting and approach me and show it to me you you you could win or rather receive this shirt

it's not a used t-shirt

lightly used only partially worn you could win a nice holiday shirt very festive for the for the coming holiday so as I said my talk is called ninja looting like a pirate standard disclaimer no unfortunate to be here no gun in my head you know no offers of valuable valuable valuable items there unfortunately will be bad language in the presentation cuz normally I don't could speak to people and I'm very happy when I get out and in a little over myself me I come from here lovely city known for technology lovely Baltimore not really and I'm a pre-1986 kid so boom that was my gateway drug I also do like to hack the human body throw people

around young people out it's amazing that only three things can stop a conflict and if you remove any one of those three things there is no conflict you know air mobility and you know that whole that the breathing thing mobility respiration kind of kind of working hand in hand that guy was fine by the way I also like to rock a sweet bandana work on my Jeep and I'm a professional so I have these that's a long story never worked there but this is what happens when a company gives you cool blue shirts instead of rays and your employees come in having decorated them with best buy of crudeness that they picked up off the

internet oh why are we here we are here because Society we actually sit on top of the largest data repositories that have ever been known literally access to everything and what we're gonna do is we're gonna take a little trip across the three dubs in a way that you may not have taken a trip across the the World Wide Web so we're gonna look for some hidden things that people have taken from other places and placed on their sites and we're going to take those things for ourselves and mainly it's items that you normally find using technology that has been demonized simply because you know you're sharing things that you should not share so today we're gonna pretend to be the bad

guys but we're gonna be the bad guys utilizing Google as our uh as our agent couple of terms I don't remember any rumors back in the BBS days if there's anybody that in the room do BBS rockin it awesome awesome you know I used to coast this off a BBS called the digitalize fortress which was pretty cool and we had people on our boards that were like leeches you know you put something up people take and take and take and that kind of thing today they're more like ninja looters they try to sneak in take stuff and just kind of rob a site blind but never put anything up in certain areas today we're gonna be ninja looters

you know just like in an MMORPG so how did we get here we got here because people wanted to share things that may or may not have belong to them and the first tool that kind of let us know that outside of private groups and the like was Napster Napster was created back in the late 90s and the individual that developed it was like okay I want to share music with my friends my friends want to share music with me and then it ended up being a tool that was utilized to share music for the world and obviously it was immediately demonized because the music they were sharing was deemed to be copyrighted material and it

was the funny part is in the second iteration of Napster it actually became a actual professional business and it became Rhapsody but Rhapsody was not doing as well and actually had to change the name back to Napster because it had better brandy though later company projects did follow the sharing example had pretty much become a standard business model and the interface that they developed pretty much still rules today like if you look at the other interfaces that have come along and there will become other examples of those this interface was created by individuals who were not actually very very good programmers they weren't solid in programming but they developed the interface for usage and thought okay this is this is the

essentials of what we need fun fact I'm if anybody ever played with Napster back in the past of course you they can't see your hands so you can act with them up but funny thing was you can also directly interact with the IP address on the distant end not just for the music and you could surf other people's machines through that Napster interface which was actually kind of funny you you're like oh it says I can actually look across the machine so why wouldn't I leave the area that I'm in and go look at other areas of the machine no one would ever actually do that that's always theoretical of course but the fact was it gave you that option

Nutella protocol bottle of Napster was actually kind of developed almost in parallel around that same time frame and this was actually developed by individuals who were programmers they were brothers from anybody anybody know hey well so they were Perkins Mayer well and they said you know what this is natural things kind of cool we can do a better job of this because this is what we do and they did get in a lot of trouble for creating this protocol which became pretty much a de-facto standard prior to what we recently demonized which is coming up though as they developed the Nutella protocol and different interfaces and services became available for it it grew to a point

where there were 1.81 million computers that were utilizing that application and that protocol and that's a lot like that is a massive amount that took what Napster was sharing and before it got all shut down and just boom exponential growth so if you looked at the actual amount of traffic that was going on it was a ton of traffic the market share was as my slide indicates more than 40 percent it was a very very popular application lots of Lhasa and and that's verified by the fact that yes there was literally a different anybody remember any of these anybody yeah it was like oh come on bear share LimeWire those were just like you you they were pretty much giving stuff

away so their interface not as simple because they're professional programmers here are the things that we would want the average person not not so much so it was it was a little more complex it gave you a lot of different options as to what you could actually do once you were looking for targets you'll run into this day by the way there's my anybody that's watched the South Park remember berries but no those were really amazing applications for their time like you could really get pretty much anything that anybody else had and the same situation was true if you weren't protecting your machine there were ways of you to actually you know reverse the machine not saying that

ever did that but saying that was a choice so in the respect of those technologies being placed out there we had a flexible container solution and Felyne separation that was pretty dramatic like it was something that the world had never seen before I am going a little fast but there's a there's a reason because I want to get to actually uh no no I do not sorry I want to say something at the end but anyway but yes and in terms of how the technologies were viewed they were immediately demonized press took to it they lit it up nobody was happy but wait there's more because now we have an even faster solution you know and appear to

multi peer fashion and if you've ever seen or utilize any of the orange technology you know that with a standard connection decent decent uh pipe you can pretty much pull four point seven gig down in virtually no time at all it is amazing and this was also embraced by standard companies where it hey we have our distro we don't want to pay for that bandwidth we're gonna put one copy out everyone starts replicated and it really offloaded that on them and save them money unfortunately because technology is demonized there some places where you might work if you may pull down I don't know Danna version of Solaris and have a security team come and say hey you use

some criminal technology I'm like what is criminal technology you know because I've not heard of that it's like anything it's a tool I say again oh I'm sorry I thought you either Robin yeah so criminal technology yeah because you're using in a fashion that they don't understand that this is actually something standard although people do use it for sharing information they should not share interfaces are very simple they may recognize any of these like transmission transmission awesome utorrent pretty awesome but straight bit troit of course never liked Azur cuz it was like a driven and took up a lot of your bandwidth with junk it was like uh no I don't want to buy your boner pills thank

you but it was hey Megan yes first version was was pretty clean but then it was like well we can also make some extra money on this let's put some ads in and this the the spanda just came through there was just ridiculous never like that so once BitTorrent hit the scene it was seriously nothing like that previous cat walking out of the bag that cat didn't walk into the bag he made his own way

so as I said media they totally embraced that BitTorrent thing they demonized the hell out of BitTorrent they made it sound like it was the coming of the digital Antichrist but the funny part was they demonize it but they made money off of demonizing it because people lock to these sites I had put attack of the show in there if anybody's a fan hey awesome show sorry to see it of God but they made money by talking about the technology they made money by talking about people who use the technology in a bad way they never talked about any of the positive things that the torrent brought to the table because remember this good news cell no bad news runs a

marathon yes sir

you that is true but even those that put it in the correct context what they did was they would have disclaimers to the technology indicated they're like we are just reporting on it like I'm talking about dedicated computer related news sites if we're just reporting it we did I condone this technology I'm like wow but you so what you're saying is you demonize the technology yes right because they didn't want to seem like they were promoting it but the more people talk about something what the readers do like well you know I wasn't interested in that what now that you talk about it let me go see what this torn thing is all about the developers were very concerned you

know they took to heart what was said about them and no no they just thought that haters are gonna hate we're gonna keep doing what we're doing and to this day the torrent is still around it is still surviving so good for the torrent so about the pass and remember we're bad guys we're being bad guys today no we're faced with a choice as bad guys of knowing that there's a gigantic treasure trove below our fingertips um and we have to ask ourselves if you know if we're gonna take advantage of it with this lovely Shakespearean para quote like to loot or not to loot that is the question and the answer is always to loot like like the answer is always

the loot like your bad guy you don't play by the rules like so you're gonna take stuff the funniest part is we're gonna be able to do this by using very very simple commands that are actually available to you despite the fact that the manufacturers told you to use some other things because we're gonna go from the anybody ever read google hack of a penetration testers vol 1 2 3 3 as good as consolidation of the both of them but yeah that is just like boom mind-blowing uses of Google we're gonna do that today we're actually gonna make Google our agent to go and do the things that we want so that that makes this proverb

true is a little bit knowledge is a dangerous thing because you're gonna you're gonna go over four commands I say three because the three main ones that one's gonna cover but the fourth one is choice two and it will show you the world wide web in a way that you have not seen it or may have not seen so here are our weapons of choice as I said we're gonna use this as a font type command using the file type command with whatever the extension it is meaning you know a PDF or any any of the standard formats you can also utilize it for audio and video but in this case these are gonna be of your concern and

whatever the variable is you will find so many things so many things that people may not be aware that are out there that file type command can allow you to find internal documents for a corporation's document center marked confidential tool corporation internal phone books things that would be great if your social engineer I'm not saying that I am but you know pretty sure this I'm not the only person in the room the Google index is what we're gonna be looking at where we're gonna look at what Google believes the site to be made of not the site itself and you don't actually touch the target until you go to grab it and you may or may not be

using a VPN so they're not coming back to you and you may be incognito mode so that it does not log itself and your thing and that's pretty much the gist of it utilize it in your own command we can use it to look at literally any URL we're gonna do straight HTML but you can also do FTP sites and the like and the in title command as I said we're gonna utilize the index and whatever we're looking for as far as the index goes by doing that Google's telling us this is what the when we search the web we're looking at it from the front end the three double that's what it looks like

when we search it this way we're looking at the index it's this is what the site is made of and that is where things get interesting so our tools because we're gonna need them and they probably exist in your office or on your system oh and if you're a parent you do not want your kids to use this tool so we have a choice of tools fools our browser we have to pick one he wisely we're gonna choose Firefox seriously that's a party foul because despite what people may say the Microsoft browser is still closer to being a browser than literally any of these others the reason why we're going to use Firefox is because

and I actually had this I'm a Nova hacker guy sorry I got to introduce myself as that I am a Nova hacker guy for the North Virginia hackers Association and my first talk there was whatsapp with that and it talked about how we in our lifetime have ruined browsers we have made browsers shitty like and shittier and shittier we keep making them because there's no such thing as a browser anymore it's a mini operating system on which your user is the administrator yeah and I presented my talk in that I have a browser I'm running a web server out of my browser I have a mail serve out of my browser I'm the damn admin like because I've been on

engagements where we've actually found a guy running an entire business it was porn out of his browser and I'm like oh like and I made the cop because you used to be able to put power into Firefox which was playing a web server and it was supposed to be restricted to your network there were a few hacks to get around it so yeah it's like run an entire business out of their business and we're learning there's a giant repository of oh my goodness there's a yeah there's your guy your man right here like this is the only machine so yes we're gonna use Firefox because as the administrator on our Firefox you know application we can

do literally anything there we've chosen wisely I kind of already did this slide cuz yeah there's a lot of stuff in that browser makes it perfect for looting unlike a lot of the other ones which amazingly the hypocritical thing is that Google Chrome browser doesn't allow you to steal from Google it has lots of it has lots of things that prevent you from stealing from the from YouTube and anything that is Google associated or like that just doesn't make any sense but there's other things that you can take from and they're cool with that the extensions it allow it this is kind of an eye chart but Mozilla had a response to why their browsers

configure the way it is and stated we were never intended for the corporate environment anyway because if you work in corporate environments and you utilize them you know Firefox or into Mozilla products how often do they update is it regular now it's frigging haphazard sometimes like they'll update two three times in a week and people are going out our people don't keep up with that you know because there's standard patching schedules for a reason Mozilla is not that corporate browser it's more for your home use but as I said if you have kids or people that you may or may not trust this might not be the browser you want them to use you want to use something that's

centrally managed like edge for IE or something where you can actually control what they could add on and these just don't allow that they allow the person to make that choice and sometimes they're gonna make a choice to lose I know I would we're gonna pick our add-ons if you don't want to buy VPN there are several that are actually free it's like a hundred and some of them and you can go out and pick them and you want to pick a VPN if you do not have one actually just quick quick survey is anybody the room not have a VPN okay that works you want something that's gonna obstacle your way even for your

standard provider because what do they have a reason to know what you're doing yeah doesn't make any sense so you're gonna pick an actual VPN that resides in the browser and then you'll start to lose as you loot you'll you'll receive the the web like this in this case at the time of this I think it's from November of last year I utilize the file type command to look at all the PDFs that Google is aware of and there were like 2.3 billion of them that number has almost doubled I believe by this time frame and you can look for samples of different elements and I encourage you to do this if you have a laptop right

now please feel free when you start using certain terms then you get specific things like when you're looking for internal use only hmm I wonder what comes up you may find out when you start looking for axes forms literally the things that people are supposed to be protecting court records I'm like wow yes sir Amma's yes but you don't use the font type command for that there are other commands that you can use but but yes yes oh yeah yeah um yeah well acts was really funny is with the with the secondary commands you will learn let me by and by this we can get to that so this is utilizing the the in URL and in title command in order to

look for comic books which people have a ton of them but getting back to your cameras so you can find cameras but sometimes you're not really looking for the K if you're not look for an actual online camera you can just go look at people's Google Drive which is kind of funny cuz people share it up and they have a lot of material in there that is copyrighted material a lot of sites that may or may not know that they have copyright material on them or on them and we're not really the bad guys so we can actually is technique to find out as my site does my site have this stuff on it too so it actually is a

there's a benefit to actually running the commands against yourself your actual web presence but yeah this site I'm sure he totally paid for all these Superman comics and all the Batman Justice League and everything else is in the parent directories he totally didn't but it was hilarious to see this and that is just from running the command yeah I'm I'm pretty sure he did not which is hilarious to me and that you already heard this talk to so but yeah so continue to use the the the in URL and in title command to look at the index and what Google believes the site to be made of this is my man and I ran this guy is amazing he has an extremely

nice catalog it is well documented and it we have the phrase of for people who pick Lots as nothing's ever locked because you can pick it in this case nothing's ever missed if you ever seen anything on TV there are people that have it the part that really kills me is under the threat of death in this country this guy is selling us TV movies they call them a series or uh series I guess in a series there when they have different shows and every recurring episodes and it just killed me I'm like a and they go the distance they actually have translated sets dot s artis that you know though subtitle it you can look for that and you go

okay he doesn't they don't certain languages someone's taking the time to step into the role of the actor and translate you know for them or they even have audio where they have the audio that matches what it is it's hilarious all from your browser you have not loaded a tool onto the network you have not picked up a client that we've subbed for you just have your browser I'm sure again these movies were completely illegally obtained because other sites actually had the authority things on them like if you ever look at if you've ever looked at torrents you know just for research purposes you would see that you completely for research proper researcher you know I'm

a good guy uh but you can see that I actually uh at the bottom here started Sam I said oh these are actually available can you actually pull them down and attempted to pull some down and then obviously cancel them because yes they were totally coming to my machine I did not need that headache this is a nother site looking at their film index I don't know if you can actually kind of small isn't it Batman vs Superman yeah any movie that comes out people have the old school cam rips like the dude sitting there with his phone in his pocket now not just like a camcorder which you can totally see it's got his phone in his pocket

he's just watching a movie for the middle not moving I'm like dude it's totally record the movie well is where it ends up like any movie that comes out in the theater is usually up on someone else's site or on a torrent site and it's hilarious so they pull them oh yeah you know it just killed me I'm like okay so from the from just my browser I'm able to find all this crazy loop that's yes oh yes they'll have they'll have a yes Oh actually what's really funny is now those with the ones mark Farsi are actually in Farsi like that's where they've double the audio over even before the studio has W over here's we

have a bunch of examples but I really encourage you guys to actually go out and and enjoy it enjoy looking at it doing the research there's one in particular it's on here and if you go to this right for starving writers I found these two sites starving writers is an interesting site because it was people that were selling like scripts and the like and they're like encouraging you to hey use me that kind of thing but what I found is it also embedded this site in them so there was a site in the site like they had taken it and on this site was was it black sails and a whole bunch of series off of stars that don't show

up on the site when you're looking at it there to view but when you look at what it's made of you're like oh what are these movie files or these series files and it's not the standard available view to you but if you look at it from what Google believes the site to be composed of the index it's like oh here's all the movies here's music they had comics up there they're reviewing comics but they had the actual comic there I was like that's kind of weird and then audiobooks that you know these basically all the stuff you'll never rent buy or lease available to you and then the Swiss Bay was they're not exactly a torrent but they're not

exactly legal so that was kind of interesting to me I was a little bit shocked by the fact that a lot of sites I can I can also say that about 70% of the sites that I looked at had even sites that were just completely normal had stolen content on them one I'm gonna bring up and it it was disturbing and I actually brought this up at our at our group meeting and everybody was had the same response of oh you cheap bastard get another site looking at people's personal sites add saw there was a guy was a programmer and he was promoting his uber Christian you know thing and so I said okay what's

your site made up not to look in the site I'm like oh well you have a series of stolen books right here all about programming like hmm that's weird and then I start pruning the URL changing it was a numerical scheme so I'm like oh look what happened one here or two here and I started putting that in and found his family photos I was like Oh lots of pictures start going through it's him his wife kid you know and he talked about being a program Christian programmer and not the same thing wrong being Christian but it was just like okay he was really promoting that keep prune print and pruning adding more numbers and then I come to pictures

that were not in line with what he was promoting and I stood there like did I did I mess up the URL let me go back no no I did not let me go forward apparently his wife was a swinger and he was videoing it and taking pictures I'm like okay here's the problem you're a programmer you have kids or kid if you're growing up and you're making them into programmers you know infants what daddy does I'm just they're gonna look at that site you really don't want them to look at that site and some people my groups response was get another website you cheap bastard it's 12 bucks like why would you put this on here it's like it

was they we all had to say reaction of that oh that is that is a whole new level of no so it's kind of weird but you know people uh people do what they do and how dare you ask that question of course there is but you know it's literally what powers you a minute wasn't looking for that because that's literally everywhere you don't need these techniques to find that but the product that the problem is the problem is no matter how deep your logs are no matter how extensive they are you would never see this as unusual traffic because the person is accessing do a standard browser the world on web they just have me saying google if you've

indexed this site what's this site all about there'll be the component and so it's a great way to serve it's a great way to look at things in order to see what the site section made up and see what else the site may have that is not visible to you at a first glance or through a standard view there's your loo right but no because even without the Google door key you could still loot a massive legal repository that no one seems to block if you block this that's awesome most people do not and is a very acceptable means of mass distribution can anyone tell me what it is anyone know

so have another disclaimer in my disclaimer and that is because we're going to talk about YouTube or this version of YouTube because YouTube is ridiculously large amazingly vast ad has just a crap ton of things that in some cases violate even their standard use practice thing even after somebody's identified that there's a problem uh as it now owned by Google they don't make it between you and them they between you and the persons perpetrating the crime you have to do arbitration between the two of them versus in the old days when it was YouTube and you could go to YouTube and say hey fix this you have content that should have a long one there they're

like okay cool you go talk to dude we're gonna let dude know you're talking to him like that that's that's not that's not cool not what you signed up for so massive repository a massive portion of the traffic on the Internet is involved by YouTube was caused by YouTube because people they want to see videos on every mobile device they have on their laptop desktop and pretty much that makes this kind of horrible at the time of this there were five billion videos so they're you know being watch every single day most people watch them for just a few seconds up to you know X number of minutes but the fact is they generate a lot of traffic a lot of

content good times so with that in mind the fact that we know that we've been talking about stolen material and on people's private sites here is a search for audiobooks on YouTube I came across a channel that has 23,000 books audio books on it there is no way that person pays for all of those that channel is still up so if there's an audiobook you're looking for just arbitrarily put in YouTube you know audio books and it will really help you out a lot of old books a lot of personally published things but amazingly a lot of things that came directly off the torrent and I can say that pretty much unequivocally because the extensions on them you can

find on torrent sites like it's the book but then it's like you know why TS or no that's that's a known individual that distributes giffy also a favorite if you punch jiffy into YouTube you will find movies sometimes still in the theater if there's a movie that comes out used between two and three weeks it shows up on YouTube and it's hilarious you know usually as a camera rip but eventually it may become the real thing law-abiding citizen was my it was a good example notice the date this was published it was August 26 August 10 2016 it had been up for a year when I looked at it you know and I was like well this can't

be the whole movie this is the whole movie and if you've ever seen this movie it starts out really disturbing yet no PSA no warning nothing YouTube's want to pretend to be television but not not so much because you don't abide by the same things they subsequently took it down and it immediately came right back up so then it was up for a month then it was up for three I think now it's been up for six and the funniest part about this was when I started looking for I'm going oh but YouTube also sells movies and you can watch Oh you you could either pay to watch this one or you could just watch new action

movie 2016 law-abiding citizen

oh yes they do yes sir no you are correct they will put a picture up and they'll put a disclaimer saying YouTube is taking the video down there is that there is that there there are there are those that when it's the it is the length of time of the movie and it'll be yes and add to say go to our site to get the full movie but that was not the case with this and that was weird to me because it kept continually being put back up people will actually and they do change the titles it'll be like you know new exciting movie 2017 you know action film us and then you have to kind of go to it to find out

what it is but it's usually the entire film and it doesn't come down they also utilize some other techniques such as they will do embedded images in an image or embedded images in a video where they have a pattern it's wavy and then the move is this big but if you have it on a 60-inch TV it's viewable they will do a static image and then have the Box in it because if again violating your policies at work and if you're interested in and checking if people are doing that people can put in terminology here to look for porn on YouTube and it is there it'll be embedded in an image or embedded in a

video where it's smaller thing in the video it fools their algorithm it allows to be up somehow and it shouldn't you can put in all sorts of of terms that are not supposed to be on YouTube and find them on YouTube

Oh like I said like sometimes they do obfuscate the name but other times it's the real thing Babylon ad horrible movie but it's there that frozen is just a clip dogma that's not a clip infamy that's not a clip those are actual movies so getting back to the torrent if you put in your torrent II commands like s01e01 for series 1 episode 1 amazingly go show up on YouTube Farscape awesome show but they do show up and it's hilarious like you're able to actually look for entire series one example I have is I may or may not have been looking for anybody remember a show called space 1999 yes a great show martin landau it's horrible now but you know it was

great with your kid um I went looking for it I'm bouncing around I thought I had found it do you laws and the other techniques and I attempted to get them they were avi like wasn't available to me I was like oh that's kind of interesting I I won't say where they were actually hosted I will after I finish talking but I was shocked that I could not get it like I saw things that I actually couldn't get I want oh these guys are actually doing it right where they protected their proprietary information from being taken but it's okay because YouTube totally gave them up like both series were available on YouTube I was like that's awesome every

episode it's right there that was just kind of crazy but as I said YouTube they're trying to be more like a television station because they have like YouTube red kids although the stuff but they're not they're just not you don't have any of the standard things that you have in TV with someone's reviewing the content of the material and ensuring that that content is appropriate for the age group that it's for or for general audiences I'm like so they don't have this you know and without that that allows some really odd things to show up on YouTube yes sir no I'm not

you

you

and that does draw attention to it as with anything and then people actually go to those sites and in this case this is anybody know ever heard of a Serbian film oh I wish I was in the place that you are right now because it's horrible it is a horrible movie it's up in it was up in multiple languages the thing that frightened me the most is this one's been up for three years this one's up for a year it is the best description of it was given by someone where they did it as a cartoon and it was you know kids sees pornography it becomes jaded by this it kills best friend I'm leaving

out some parts kid kills best friend because of trauma like that's the gist of it but um I can say that one good thing is unless you're logged in when you attempt to get material off of YouTube you encounter that right the content wanted to prevent you from getting it if it's if it's content controlled it pops up literally every time the bad part is there are sites that will allow you to get it even if you're not logged in this is one example of say from that you're like oh well I'll just feed that URL to say from net and then yeah I want that at 720p you've never logged into the site yeah yeah they're there right there

they're a couple I picked these guys was they actually had an add on but then the add one's kind of malicious though you don't come with something you care about but it'll do the same thing where it pulls the content down for you or it'll pull just the audio or the video without the audio why would they do that oh wait dubbing you know they it's like they just have it set up or it's like we're not saying that we condone what you're doing but we understand and check out our click read our click Avenue revenue so I want to see if we can actually work it actually does work like okay this is the cleanest scene I can

show you from that movie and that's sad it's a horrible horrible movie but you know way you can do research sometimes sucks face the death anybody remember yes sir

seriously it is oh yes Hey Thank You PW crack oh the beginning of law-abiding citizen is completely like PG in comparison to the things that happen that movie you're watching like this doesn't even make any sense for a continuity perspective

face of death face of death every episode every version of face of the death is on YouTube including my favorite the 30th anniversary edition which in four years it's been up oh it's like this has content to that I'm pretty sure violates your you know whole content thing well yeah and you're allowing this to be up lots of clicks all that stuff I was like okay this doesn't make any sense blu-ray 30 standard issued anniversary edition yay face of death again you don't have to actually log in grab it kids same thing you know movies disturbed because the actors all look very young even though they were all of age but uh yeah I don't warning

that side is comes up you'd have to do anything it like plays several versions of it actually I was like but there's like graphic you know sexual things going on that violates your thing but yet it's still here YouTube really look and as you can see this was uploaded in 2012 yes that's another movie that really oh yes you can find Ken Park Shortbus essentially seven of the ten banned films are on YouTube right now and those films are banned for a reason and we just named three of them yeah there are some films there we are going oh also awesome episodes of Black Dynamite completely up there please easy um so you're gonna need some

add-ons you can pull add-ons to just pull your mp3s again where the masters of our domain and our browser so we can pull that add-on and say yes I would love to have just the audio out of YouTube let's say you've gone to a site where like oh I like that but I want to change the format of it in the browser you can put an ad on to actually do a media converter and convert the media from one format to another if you don't like it an mp4 it could be AVI again you've never loaded anything on outside of the browser it's just all in the browser does that sound like a browser sounds like an operating system to me

but you know again yes yes yes it's like a DMX plugin like this is not a browser people and it hasn't been in years you know cuz lord I gave that whatsapp with that talk like six seven years ago like yeah browsers are horrible I wouldn't want my users to get their hands on it but the fact is that's your tool that's the thing that you actually would use and by using that you've now been able to collect even more loot so you've got your hands on even more loot because that's the friendly acceptable nice thing that comes in your environment and if you're not careful your users can your use population can use different add-ons and plugins to

pull things on to your environment that you would never want you know like plain is simple I don't have the example in here but there is one where even Game of Thrones I'm sure there's nobody in here to watch the game of Thrones they have the Game of Thrones episodes up but they have them as like three episodes at a time you know they'll have a movie title like the fall of Moran a marine like no it's Game of Thrones like cuz there's dragons right there like oh they're totally killing off you know these individuals it's Game of Thrones they've they've put together episodes to make it a movie so therefore it's not the TV show it's a

movie entitling what may or may not be happening so like I've kind of alluded to you can have problems in your home on your network if you're at work legal team and you're into our department these in the rules can all get involved how will they get involved well if you pull movies or content to your environment that is either acceptable even unacceptable you're probably gonna end up talking to these guys probably a given because you will have violated something that you may or may not know of and it it's and it's totally legal like cuz you know you couldn't have been using the environment to or things on the network they shouldn't and because you did that that team will

probably have to get involved too you know but and everybody loves to sit and talk to lawyers I know III do enjoy my time with them and there's that I just want to state that uh the resources that I did use were obviously the Google hack for pen testing big up to Johnny long he's awesome and I've talked to him there is one other thing I've left out that if you also want to have fun and not be yourself there are ways of utilizing those same tactics to look at not onion sites that people tend to be really careless with when they're not indeed that onion environment if you go looking for that onion things you may

find the people of place they are treasure trove of what they do there I'm a service web so they think it's pretty safe you know and I'm talking about their usernames passwords and the like and all of these odd onion links that they traverse three commands really allows you to look at stuff but in this case this is the file type command you're looking file type for the down onion elements and you're able to find text files that they have where they have put their items in and I would never go online as someone else but I can confirm through someone else that it actually does work that people have their usernames and passwords for their

access to hitting up tor and they may be careless with it which is completely crazy to me because a ton of links that are all active and in some cases even their storage that's below like totally crazy to me this is literally the combination of three talks that I gave I gave a talk called you to YouTube at to YouTube and the West app with that and a talk on weren't in technology like such as that and how I got here again is as a some of you in the room maybe through misspent youth

oh that is pretty much what I want to say and I am oh I'm actually a minute over a minute a minute under are there any questions yes sir yes I didn't sad downloaded them I said I attempted to and then killed it I'm responsible yes any part is absolutely none I found no malware the items I was looking at I did play with

I did look at some people that had what should have been questionable content but the funny thing that I found because I'm trying to cover the spectrum I found people who had taken courses in the United States and gone back to their native countries and put them up on their university looking for dot I chose for a CH looking for all sorts of classes I'm like that is that's course material so somebody physically took this and then they took the material and went back home and said well I will share this with the University I'm like okay that's completely off the charts wrong like the other stuff is bad but that is for and and I use the start that

taught this talk with if you work in meteor multimedia I am so sorry for you there is literally no way to stop your product of being had because the product is the advertisement you know you want people to see it and you make it available and then someone gets it or you don't pay an intern enough when he's transporting leemaster from one place to another he stops at a place and gets a grand and then he moves on with it because it takes virtually no time to copy that item but no I have not come across malware not on the surface sites that I've gone to I'm a you sound as if you I was playing with video audio correct

if I were looking for some other things certain applications or you know that you may have had to pay for yeah yeah that that totally of course at trial where you know yes that's what I meant you uh you will probably come across some things that are quite infected with other other things but the thing that baffle me the most was that yeah like with nothing even if you got rid of today the technologist torrents or any of the file shares Google got you thank you look you can just go in with the Google Google techniques and they've tried to tell you that you want to utilize modified versions of them like they'll tell you to use the file tech

command but you don't use the arguments in order to find things and it'll find stuff you want to use the old-school file type : you know variable variable what you're looking for because that is very specific and it points the to where it is and by utilizing index you never touch the target until you're ready to pull something off the target you're just looking the index you can go the Wayback Machine and also see things that people took down I mean it's it's kind of kind of cool yes sir

great question no they do not work the same as they do in the Google search engine and I'll go as far as to say that I've even used like Yandex I've gone to the Chinese browsers I'm like these these Google commands work best in their own environment they do not work as well in other search engines which is kind of odd but it's just kind of the way it is the the Google browse the Google search engine is just optimized for those commands it does not work as well in others

not that I'm aware of

not that I'm aware of because when I did do this talk at Inova actually had other other browsers up excuse me and yeah just search commands do not work as well I'm not saying it's an other things you can do but in and I didn't bring up the fact or did I talk about the people's Google drive's people leave the Google drive's completely unprotected one thing I left out is that the when those sites do go up uh that tell you where something is like for YouTube one thing that makes it very difficult obviously for YouTube to find out if their that those sites are available is the fact that people when they come down they do

seem to come right back up and people have this amazing office skating method of keeping people in the loop to know when a site was looking down it's now this name and it's called reddit there's a subreddit you may or may not want to write this down there's a subreddit that actually tells you what's available on what type of media there's one called you know movies on everything it's a subreddit there's others where it's full movies on YouTube and every time a site gets taken down the guy goes in there sometimes didn't even change their name on the on the channel they just change the channel change the site name it's still me you know dark barren

fifty-two and here's the same material and YouTube does nothing and I don't understand it but yes if you look at the subreddit for movies on YouTube full movies on YouTube you will find if a sites gone down and the materials back up you can look for you know movies on anything also a subreddit and it will cover Vimeo and all sorts of other technologies that are not YouTube where people have placed stuff like full like the Super Bowl or you know other material that you just normally should not see um it's just it's frightening because again if you work in multimedia you want people to pay for your content if someone sees your content or gets it you

know whether they record it with a webcam or whatever um they have it and they're able to just put it up in literally any format including the darling that is YouTube

if there are no more questions thank you and go play [Applause]