Black Hat Bash: Bash Scripting for Hackers and Pentesters (Bonus: GraphQL and Drone hacking)

59,649
0
Published 2024-04-14
Big thanks to Brilliant for sponsoring this video! To try everything Brilliant has to offer for free for a full 30 days and 20% discount visit: Brilliant.org/DavidBombal

I interview Dolev Farhi and Nick Aleks - the authors of Black Hat Bash and Black Hat GraphQL. Why should you learn either of these? Good reasons including $50K bug bounties :)

// Books //
Black Hat Bash:
USA: amzn.to/3JebZWJ
UK: amzn.to/3PXnk1i

Black Hat GraphQL:
USA: amzn.to/43Y3Ork
UK: amzn.to/3xtle2J

Hacking API’s by Corey J Ball: amzn.to/3TQnp89 US and amzn.to/3vXYQxX UK

// Dolev Farhi’s SOCIAL//
GitHub: github.com/dolevf
X: x.com/dolevfarhi

// Nick Aleks’ SOCIAL //
X: x.com/nick_aleks
LinkedIn: ca.linkedin.com/in/nick-aleks-2b35389
GitHub: github.com/nicholasaleks

// Source LINK //
github.com/nicholasaleks/Damn-Vulnerable-Drone

// YouTube videos REFERENCE //
Free API Hacking course!:    • Free API Hacking course!  

Free Hacking API courses (And how to use AI to help you hack):    • Free Hacking API courses (And how to ...  

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
X: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube:    / @davidbombal  

// MY STUFF //
www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: [email protected]

// MENU //
00:00 - Coming up
01:44 - Brilliant Ad
04:12 - Intro
04:23 - About Black Hat Bash
08:13 - How the book came about
10:40 - Writing the book
15:19 - Tips for writing a book
19:10 - No Starch Press
19:56 - How long have you been hacking?
20:40 - About GraphQL
25:32 - How did the book help?
27:14 - What is GraphQL?
31:31 - History of GraphQL
34:07 - How do I get started?
37:44 - Directive overloading
40:38 - GraphQL end
42:06 - Implementing Black Hat Bash
45:45 - Where do you focus?
47:30 - Can I make money?
50:00 - Zero days
54:41 - Advice for hackers
55:53 - About the labs
01:00:42 - Learning the labs
01:02:08 - Is the book for beginners?
01:07:23 - Using vs making tools
01:10:57 - The book is a great tool
01:14:00 - Writing code raises the ceiling
01:14:55 - What is your favourite part of the book?
01:17:48 - Learn the basics
01:20:56 - Put in the work
01:25:22 - Fun labs
01:27:42 - When is the book coming out?
01:28:30 - Where can we buy it?
01:29:10 - Talk to us
01:35:06 - Drone Hacking

bash
black hat bash
graphql
vim
api
hacking api
api hack
black hat graphql
no starch
no starch press
osint
hack
hacking
pentesting
ethical hacking
penetration testing
black hat python
white hat python
grey hat python
gray hat python
cyber security
kali linux
ethical hacking
python programming
penetration testing
ethical hacker
python for hacking
python full course
black hat book review
how to hack
cyber security course
hacking books
computer hacking
learn black hat python
python tutorial
cyber security career
cyber security analyst
python hacker
python hacking course
python hacking tools
scapy
hack python code
hack python book
python hack wifi

Disclaimer: This video is for educational purposes only.

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

#bash #linux #kalilinux

All Comments (21)
  • @davidbombal
    Big thanks to Brilliant for sponsoring this video! To try everything Brilliant has to offer for free for a full 30 days and 20% discount visit: brilliant.org/DavidBombal I interview Dolev Farhi and Nick Aleks - the authors of Black Hat Bash and Black Hat GraphQL. Why should you learn either of these? Good reasons including $50K bug bounties :) // Books // Black Hat Bash: USA: amzn.to/3JebZWJ UK: amzn.to/3PXnk1i Black Hat GraphQL: USA: amzn.to/43Y3Ork UK: amzn.to/3xtle2J Hacking API’s by Corey J Ball: amzn.to/3TQnp89 US and amzn.to/3vXYQxX UK // Dolev Farhi’s SOCIAL// GitHub: github.com/dolevf X: x.com/dolevfarhi // Nick Aleks’ SOCIAL // X: x.com/nick_aleks LinkedIn: ca.linkedin.com/in/nick-aleks-2b35389 GitHub: github.com/nicholasaleks // Source LINK // github.com/nicholasaleks/Damn-Vulnerable-Drone // YouTube videos REFERENCE // Free API Hacking course!: https://youtu.be/CkVvB5woQRM Free Hacking API courses (And how to use AI to help you hack): https://youtu.be/TcMP_-clMAo // David's SOCIAL // Discord: discord.com/invite/usKSyzb X: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: youtube.com/@davidbombal // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com/ // MENU // 00:00 - Coming up 01:44 - Brilliant Ad 04:12 - Intro 04:23 - About Black Hat Bash 08:13 - How the book came about 10:40 - Writing the book 15:19 - Tips for writing a book 19:10 - No Starch Press 19:56 - How long have you been hacking? 20:40 - About GraphQL 25:32 - How did the book help? 27:14 - What is GraphQL? 31:31 - History of GraphQL 34:07 - How do I get started? 37:44 - Directive overloading 40:38 - GraphQL end 42:06 - Implementing Black Hat Bash 45:45 - Where do you focus? 47:30 - Can I make money? 50:00 - Zero days 54:41 - Advice for hackers 55:53 - About the labs 01:00:42 - Learning the labs 01:02:08 - Is the book for beginners? 01:07:23 - Using vs making tools 01:10:57 - The book is a great tool 01:14:00 - Writing code raises the ceiling 01:14:55 - What is your favourite part of the book? 01:17:48 - Learn the basics 01:20:56 - Put in the work 01:25:22 - Fun labs 01:27:42 - When is the book coming out? 01:28:30 - Where can we buy it? 01:29:10 - Talk to us 01:35:06 - Drone Hacking bash black hat bash graphql vim api hacking api api hack black hat graphql no starch no starch press osint hack hacking pentesting ethical hacking penetration testing black hat python white hat python grey hat python gray hat python cyber security kali linux ethical hacking python programming penetration testing ethical hacker python for hacking python full course black hat book review how to hack cyber security course hacking books computer hacking learn black hat python python tutorial cyber security career cyber security analyst python hacker python hacking course python hacking tools scapy hack python code hack python book python hack wifi Disclaimer: This video is for educational purposes only. Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! #bash #linux #kalilinux
  • @iblackfeathers
    many times i had to live off the land/lan and re-invent the wheel in order to make my own tools due to security policies. bash and python and perl and other stuff already installed or present in the environment have helped a lot in tailoring my workflows. it is awesome someone is covering this specific topic and dedicating an entire book on it. lots of this is cobbled together from various sources since there wasn't a single source for it.
  • Thanks to David and all co-operative members who share things with him, we really appreciate them.
  • @Alain9-1
    i've been waiting for bash scripting for years, finally uploaded, thanks
  • @taybtaybe
    I am from Afghanistan and David is the best teacher I have seen❤❤❤❤
  • @Casp1anX
    Bash demos are always high value, but DRONE hacking demos would be amazing! UAVs are growing in popularity at an insane rate, and from what I have been seeing and hearing...not especially secure. Increased visibility may push us in the direction of more security.
  • @Iicence
    thank you for everything david
  • @SnowDaemon
    @NickAleks owes me a signed copy for this video ! So glad this happened. Great video David and cant wait to read the book! Thanks Nick and Dolev!
  • @luddekn
    I'v been wanting to learn proper bash scripting for ethical hacking for a while now but have not since other studies etc, but a book is just perfect!! Was so bumbed to go to Amazon and seeing it being released October 1 (need it now!!!)😅But it takes time to make a great book, can't wait, going to be great.
  • @anshulnamdev9363
    Meanwhile me who's waiting for David and these 2 other dudes to teach me black hat bash basics and scripts,and how to make them °_°
  • "I wanna start learning the technology,,, not troubleshooting the labs"🤣How many times have I done that?... timeless😂
  • @toxyl3915
    I'd also say there's a lot of room to uncover improperly secured graphql endpoints since its flexibility can make it easy for developers to lose the overview of how all the different parts can and do interact with one another (on the API side as well as on the code side the API interacts with)
  • @MyDancingirl
    Excellent interview, loads of insights to hardening graphQL APIs. Thanks for sharing 😊
  • @sassywoocooo
    hi dad, this came in clutch. i really needed to sharpen my skills with bash. it's about time i stopped using it only for running commands. one could automate many things with bash scripting and it is not even so hard to do that.
  • NoStarch books are usually great but - They all have this wax-y coating on them that attracts dust that becomes embedded in the coating, to the point that they become incredibly nasty. Has anyone figured out a way to clean them?