Andrew Hoffman

@UC2vVVgKKzN-Gb_xeaUY0o-Q - 37.5K subscribers

Hi - I'm Andrew Hoffman. I'm a security researcher, software engineer and technical author. I wrote Web Application Security: Exploitation and Countermeasures - one of the most popular introductions to application security. You can check it out here: amzn.to/3pGO4Vz If you came here because you attended one of my security talks, or read my book - welcome! I upload videos on topics I find interesting (coding, cybersecurity, etc.) and I upload at least once per month.

Home Videos Live Playlists

Claude Code Pen Test Comprehensive Tutorial

Claude Code Pen Test Comprehensive Tutorial Andrew Hoffman

142 views - 6 days ago

VSCode Users Hacked by Self Propagating "GlassWorm" Malware | Breakdown + Remediation

VSCode Users Hacked by Self Propagating "GlassWorm" Malware | Breakdown + Remediation Andrew Hoffman

2.5K views - 6 months ago

Ethical Hacking with ChatGPT (as HackGPT) - XSS, SQLi & Command Injection

Ethical Hacking with ChatGPT (as HackGPT) - XSS, SQLi & Command Injection Andrew Hoffman

1.1K views - 10 months ago

Massive Cyberattack: 80+ Gov. Orgs Hacked via Roundcube | CVE 2024-37383

Massive Cyberattack: 80+ Gov. Orgs Hacked via Roundcube | CVE 2024-37383 Andrew Hoffman

1.1K views - 1 year ago

5 AMAZING JavaScript Features You Probably Don't Know

5 AMAZING JavaScript Features You Probably Don't Know Andrew Hoffman

328 views - 1 year ago

I Wrote Another Book!

I Wrote Another Book! Andrew Hoffman

636 views - 2 years ago

JSON Save Files Tutorial for GODOT v4.0+

JSON Save Files Tutorial for GODOT v4.0+ Andrew Hoffman

9.8K views - 2 years ago

Build a Godot Roguelite in 30 Minutes!

Build a Godot Roguelite in 30 Minutes! Andrew Hoffman

26.3K views - 2 years ago

How Attackers use Clickjacking to Steal Social Media Accounts

How Attackers use Clickjacking to Steal Social Media Accounts Andrew Hoffman

4K views - 3 years ago

Trusted Types Explained [With Live Coding Demo]

Trusted Types Explained [With Live Coding Demo] Andrew Hoffman

1.5K views - 3 years ago

How to Find and Read a Bill (US Congress)

How to Find and Read a Bill (US Congress) Andrew Hoffman

2.9K views - 3 years ago

Zero Trust Architecture Explained

Zero Trust Architecture Explained Andrew Hoffman

7.3K views - 3 years ago

MidJourney vs DALL-E 2 Detailed Comparison

MidJourney vs DALL-E 2 Detailed Comparison Andrew Hoffman

1.5K views - 3 years ago

Generating Art With Midjourney AI

Generating Art With Midjourney AI Andrew Hoffman

370 views - 3 years ago

I Hacked my Pokémon Yellow Cartridge and Created a New Pokémon!

I Hacked my Pokémon Yellow Cartridge and Created a New Pokémon! Andrew Hoffman

3.8K views - 3 years ago

GODOT4 Major Changes Overview & Demo

GODOT4 Major Changes Overview & Demo Andrew Hoffman

29.2K views - 3 years ago

Understanding JavaScript Prototypes & Prototype Pollution Attacks

Understanding JavaScript Prototypes & Prototype Pollution Attacks Andrew Hoffman

9.2K views - 4 years ago

Master JavaScript Variables & Scope in One Video!

Master JavaScript Variables & Scope in One Video! Andrew Hoffman

965 views - 4 years ago

Easily Build Projectile Weapons in GODOT

Easily Build Projectile Weapons in GODOT Andrew Hoffman

22.3K views - 4 years ago

How to Build a Modular Ability System in GODOT

How to Build a Modular Ability System in GODOT Andrew Hoffman

59.4K views - 4 years ago

Build Highly Scalable GODOT Games in Under 10 Minutes!

Build Highly Scalable GODOT Games in Under 10 Minutes! Andrew Hoffman

55.2K views - 4 years ago

Game Jams 101 Andrew Hoffman

775 views - 4 years ago

Mass Assignment Attacks Explained

Mass Assignment Attacks Explained Andrew Hoffman

5.1K views - 4 years ago

The Strange World of Quines: Algorithms that Generate Themselves

The Strange World of Quines: Algorithms that Generate Themselves Andrew Hoffman

951 views - 4 years ago

How to add a Table of Contents to any YouTube Video

How to add a Table of Contents to any YouTube Video Andrew Hoffman

3.8K views - 4 years ago

How to Build Beautiful GODOT UI Using THEME Files

How to Build Beautiful GODOT UI Using THEME Files Andrew Hoffman

16K views - 4 years ago

Build infinite procedurally generated GODOT maps in 10 minutes!

Build infinite procedurally generated GODOT maps in 10 minutes! Andrew Hoffman

21.6K views - 4 years ago

Build a 2D GODOT Platformer in 20 Minutes!

Build a 2D GODOT Platformer in 20 Minutes! Andrew Hoffman

51.3K views - 4 years ago

Build a 2D GODOT Character Customizer in 20 Minutes!

Build a 2D GODOT Character Customizer in 20 Minutes! Andrew Hoffman

20K views - 4 years ago

Master the GODOT TileMap tool in 15 Minutes!

Master the GODOT TileMap tool in 15 Minutes! Andrew Hoffman

40.7K views - 4 years ago

Build a Top-Down 2D GODOT RPG in 20 Minutes!

Build a Top-Down 2D GODOT RPG in 20 Minutes! Andrew Hoffman

287.8K views - 4 years ago

What is Log4Shell (Log4J RCE) and why does it matter?

What is Log4Shell (Log4J RCE) and why does it matter? Andrew Hoffman

1.1K views - 4 years ago

How to Write a Best-Selling Book (Step by Step Tutorial from an Author)

How to Write a Best-Selling Book (Step by Step Tutorial from an Author) Andrew Hoffman

6.3K views - 4 years ago

How to Install Kali Linux on VirtualBox (Easiest Way)

How to Install Kali Linux on VirtualBox (Easiest Way) Andrew Hoffman

583 views - 4 years ago

SQL Injection Explained

SQL Injection Explained Andrew Hoffman

958 views - 4 years ago

Twitch Hack Exposed: Passwords, AWS Secrets, YouTube/Facebook Keys & More

Twitch Hack Exposed: Passwords, AWS Secrets, YouTube/Facebook Keys & More Andrew Hoffman

249 views - 4 years ago

How to Not Get Hacked - 5 Rules Explained by White Hat Hacker

How to Not Get Hacked - 5 Rules Explained by White Hat Hacker Andrew Hoffman

1.6K views - 4 years ago

Command Injection Explained

Command Injection Explained Andrew Hoffman

4K views - 4 years ago

MASSIVE Twitch Hack Explained by White Hat Hacker

MASSIVE Twitch Hack Explained by White Hat Hacker Andrew Hoffman

3.9K views - 4 years ago

Cross-Site Request Forgery (CSRF) Explained

Cross-Site Request Forgery (CSRF) Explained Andrew Hoffman

1.8K views - 4 years ago

What is the most secure programming language?

What is the most secure programming language? Andrew Hoffman

2.4K views - 4 years ago

What is the best programming language to learn in 2022?

What is the best programming language to learn in 2022? Andrew Hoffman

18.3K views - 4 years ago

Mutation-Based Cross-Site Scripting (Mutation XSS) Explained

Mutation-Based Cross-Site Scripting (Mutation XSS) Explained Andrew Hoffman

3.6K views - 4 years ago

DOM-Based Cross-Site Scripting (DOM XSS) Explained

DOM-Based Cross-Site Scripting (DOM XSS) Explained Andrew Hoffman

57.2K views - 4 years ago

Stored Cross-Site Scripting (Stored XSS) Explained

Stored Cross-Site Scripting (Stored XSS) Explained Andrew Hoffman

23K views - 4 years ago

Reflected Cross-Site Scripting (Reflected XSS) Explained

Reflected Cross-Site Scripting (Reflected XSS) Explained Andrew Hoffman

30.2K views - 4 years ago

Defeating Google's XSS Game | Level 6: Follow the white rabbit

Defeating Google's XSS Game | Level 6: Follow the white rabbit Andrew Hoffman

9.9K views - 4 years ago

Defeating Google's XSS Game | Level 5: Breaking protocol

Defeating Google's XSS Game | Level 5: Breaking protocol Andrew Hoffman

8.5K views - 4 years ago

Defeating Google's XSS Game | Level 4: Context matters

Defeating Google's XSS Game | Level 4: Context matters Andrew Hoffman

12.3K views - 4 years ago

Defeating Google's XSS Game | Level 3: That sinking feeling...

Defeating Google's XSS Game | Level 3: That sinking feeling... Andrew Hoffman

13K views - 4 years ago

Defeating Google's XSS Game | Level 2: Persistence is key

Defeating Google's XSS Game | Level 2: Persistence is key Andrew Hoffman

11.6K views - 4 years ago

Defeating Google's XSS Game | Level 1: Hello, world of XSS

Defeating Google's XSS Game | Level 1: Hello, world of XSS Andrew Hoffman

14.6K views - 4 years ago

Why is there is a special JavaScript object that both exists and does not exist - at the same time?

Why is there is a special JavaScript object that both exists and does not exist - at the same time? Andrew Hoffman

174 views - 4 years ago

Why is (EMPTY_ARRAY) equal to (NOT_EMPTY_ARRAY) in JavaScript?

Why is (EMPTY_ARRAY) equal to (NOT_EMPTY_ARRAY) in JavaScript? Andrew Hoffman

166 views - 4 years ago

Is NULL Equal to FALSE in JavaScript?

Is NULL Equal to FALSE in JavaScript? Andrew Hoffman

777 views - 4 years ago

Why aren't all strings created equal in JavaScript?

Why aren't all strings created equal in JavaScript? Andrew Hoffman

165 views - 4 years ago

This JavaScript Edge Case Can Easily Break Timers!

This JavaScript Edge Case Can Easily Break Timers! Andrew Hoffman

2.5K views - 4 years ago

When does "true" equal "false" in JavaScript?

When does "true" equal "false" in JavaScript? Andrew Hoffman

1.1K views - 4 years ago

What happens when you try to add two arrays together in JavaScript?

What happens when you try to add two arrays together in JavaScript? Andrew Hoffman

5K views - 4 years ago

What happens when you add a leading 0 to a number in JavaScript?

What happens when you add a leading 0 to a number in JavaScript? Andrew Hoffman

483 views - 4 years ago