Videos
I've got a few videos on my own YouTube channel, but I've also done a bunch of talks, live-streams, and interviews that ended up on other people's channels. I've collected them together here for easy finding!
Confessions of a Toolmaker
A talk about how I got into making tools, and how I approach making them.
NahamCon2024: Sluicing Scripts
A talk about using jsluice to extract interesting bits from JavaScript files by running tree-sitter queries.
Xargs Explained
I use xargs quite often, especially in conjunction with the find command, so I made a short video on how to use it.
The Find Command
The find command has a reputation for being difficult to use, so I made a short video about it.
JSluice: There's Gold In Them Thar Files
The talk in which I announced jsluice, a tool for finding URLs, secrets, and other interesting things in JavaScript.
NahamCon2022EU: Command-Line Data-Wrangling
I spend a lot of time trying to get text from one format to another, so I did a talk about how to do that on the command-line.
Hacker Heroes
An interview with PascalSec for Intigriti about when to write tools, the UK hacker scene and that kind of thing.
Live Recon and Automation on Shopify's Bug Bounty Program with @TomNomNomDotCom
Doing some basic recon with NahamSec on Twitch.
NahamCon2021 - Using Chromedp to Hunt for Prototype Pollution - @TomNomNomDotCom
Client-side bugs are kind of a pain to look for at scale, so I did a talk about how to do that.
Networking Fundamentals
Networking for people who already kind of know a bit about computers.
InfoSec Journeys
A chat with Colin Hardy and Ashley Pierre about how I got started in bug bounty, writing tools, and that sort of thing.
NahamCon2020: Who, What, Where, When, Wordlist
Wordlists are a big part of web hacking, and having the same lists as everybody else limits what you can find, so I did a talk about making your own.
Hacker101 - JavaScript for Hackers (with @STOKfredrik)
A video I worked on with STÖK for HackerOne. An intro to using Chrome's DevTools to explore web applications.
Live Bug Bounty Recon Session on Yahoo (meg, assetfinder, etc)
Demonstrating some tools and recon techniques live with NahamSec on Twitch.
Web Hacking Pro Tips
A chat with the wonderful Pete Yaworski about life and hacking.
VIM tutorial: linux terminal tools for bug bounty pentest and redteams with @tomnomnom
STÖK asked me to show him my tools and workflows, so I did. Unscripted, but highly subject to skillful editing.
Passive-ish Recon Techniques
I think this was my first security talk. I talked about meg for the first time, and the ideas that led to its development.
Writing Readable Code
I've spent a lot of time reading code, and I developed a list of things that bug me along the way and then did a talk about it.
Hey!: Let's build a virtual machine!
Live-coding can be risky, but it worked out OK this time. Writing a simple language VM in Go live on stage.
