Computer security, ethical hacking, red teaming and technology at large. Some artificial intelligence, machine learning and other fun things once in a while. Learn the hacks, stop the attacks!

Information on this channel is provided for research and educational purposes to advance understanding of attacks and countermeasures to help secure the Internet. Penetration testing requires authorization from proper stakeholders. I do not support or condone illegal hacking.

Blog at https://embracethered.com

(c) WUNDERWUZZI, LLC

Claude Computer Use: The ZombAIs are coming! From Prompt Injection to Command & Control.
6:55
Claude Computer Use: The ZombAIs are coming! From Prompt Injection to Command & Control.
Spyware Injection Into ChatGPT's Long-Term Memory (SpAIware)
3:09
Spyware Injection Into ChatGPT's Long-Term Memory (SpAIware)
Microsoft Copilot: From Prompt Injection to Exfiltration of Sensitive Data | Exploit Chain Explained
4:16
Microsoft Copilot: From Prompt Injection to Exfiltration of Sensitive Data | Exploit Chain Explained
Google Colab with Gemini AI - Prompt Injection Pirate Demo (POC)
1:14
Google Colab with Gemini AI - Prompt Injection Pirate Demo (POC)
GitHub Copilot Chat - From Prompt Injection to Data Exfiltration
0:49
GitHub Copilot Chat - From Prompt Injection to Data Exfiltration
LLM Vulnerability Scanning with garak. Tutorial: Test your own chat bots!
19:14
LLM Vulnerability Scanning with garak. Tutorial: Test your own chat bots!
ChatGPT: Hacking Memories via Images (Prompt Injection to Persistent Memories)
0:52
ChatGPT: Hacking Memories via Images (Prompt Injection to Persistent Memories)
Backdooring Keras Models and How to Detect It (Machine Learning Attack Series)
9:53
Backdooring Keras Models and How to Detect It (Machine Learning Attack Series)
Bobby Tables but with LLMs: Google NotebookLM - Data Exfiltration POC
1:05
Bobby Tables but with LLMs: Google NotebookLM - Data Exfiltration POC
ASCII Smuggling: Crafting Invisible Text and Decoding Hidden Secrets -New Threat for LLMs and beyond
7:50
ASCII Smuggling: Crafting Invisible Text and Decoding Hidden Secrets -New Threat for LLMs and beyond
Real-world exploits and mitigations in LLM applications (37c3)
42:35
Real-world exploits and mitigations in LLM applications (37c3)
Hacking Google Bard: Prompt Injection to Data Exfiltration via Image Markdown Rendering (Demo Video)
1:18
Hacking Google Bard: Prompt Injection to Data Exfiltration via Image Markdown Rendering (Demo Video)
Data Exfiltration Vulnerabilities in LLM Applications and Chatbots: Bing Chat, ChatGPT and Claude
9:35
Data Exfiltration Vulnerabilities in LLM Applications and Chatbots: Bing Chat, ChatGPT and Claude
Bing Chat - Data Exfiltration Exploit (responsibly disclosed to Microsoft and now fixed)
1:39
Bing Chat - Data Exfiltration Exploit (responsibly disclosed to Microsoft and now fixed)
POC - ChatGPT Plugins: Indirect prompt injection leading to data exfiltration via images
1:31
POC - ChatGPT Plugins: Indirect prompt injection leading to data exfiltration via images
Adversarial Prompting - Tutorial + Lab
20:46
Adversarial Prompting - Tutorial + Lab
Prompt Injections - An Introduction
14:56
Prompt Injections - An Introduction
Decrypting SSL/TLS browser traffic with Wireshark (using netsh trace start)
3:47
Decrypting SSL/TLS browser traffic with Wireshark (using netsh trace start)
Simplify your life with ChatGPT API Shell Integration: Yolo your Bash + PowerShell Assistant (GPT-4)
7:35
Simplify your life with ChatGPT API Shell Integration: Yolo your Bash + PowerShell Assistant (GPT-4)
Grabbing and cracking macOS password hashes (with dscl and hashcat)
5:27
Grabbing and cracking macOS password hashes (with dscl and hashcat)
SSH Agent Hijacking - Hacking technique for Linux and macOS explained
7:26
SSH Agent Hijacking - Hacking technique for Linux and macOS explained
How to extract NTLM Hashes from Wireshark Captures for cracking with Hashcat
5:12
How to extract NTLM Hashes from Wireshark Captures for cracking with Hashcat
SQL Injection Attacks For Beginners (Basics)
17:52
SQL Injection Attacks For Beginners (Basics)
Server-Side Request Forgery (SSRF) hacking variations you MUST KNOW about!
9:16
Server-Side Request Forgery (SSRF) hacking variations you MUST KNOW about!
Dumping cleartext Wi-Fi passwords using netsh in Windows (netsh wlan show profiles)
4:15
Dumping cleartext Wi-Fi passwords using netsh in Windows (netsh wlan show profiles)
Two ChatGPT bots using unofficial API to play Tic-Tac-Toe autonomously against each other
4:00
Two ChatGPT bots using unofficial API to play Tic-Tac-Toe autonomously against each other
SameSite Cookies for Everyone - Cross Site Request Forgery Mitigations (follow up)
4:16
SameSite Cookies for Everyone - Cross Site Request Forgery Mitigations (follow up)
ChatGPT - Imagine you are a Microsoft SQL Server database server
7:39
ChatGPT - Imagine you are a Microsoft SQL Server database server
ChatGPT - Commodore 64
0:34
ChatGPT - Commodore 64
Understanding the basics of Cross-Site Request Forgery attacks
18:45
Understanding the basics of Cross-Site Request Forgery attacks