Seven Seas Security

@UCuHzD8nmIdBZ5mTluQ0hkwA - 5.1K subscribers

This is the YouTube channel accompanying my Twitch over at twitch.tv/garr_7. I'm just your average Pentester of all the things. Hoping to share some of the knowledge gained, as well as some tips for those looking to get into the industry. Hope you enjoy the content!

Home Videos Live Playlists

Prompt Injection Methodology for GenAI Application Pentesting - Greet & Repeat Method

Prompt Injection Methodology for GenAI Application Pentesting - Greet & Repeat Method Seven Seas Security

5.9K views - 6 months ago

Indirect Prompt Injection | How Hackers Hijack AI

Indirect Prompt Injection | How Hackers Hijack AI Seven Seas Security

4.8K views - 1 year ago

Beginner's Guide to GenAI Application Hacking | Simple RAG Setup Means Simple Wins

Beginner's Guide to GenAI Application Hacking | Simple RAG Setup Means Simple Wins Seven Seas Security

4.6K views - 1 year ago

Understanding JWTs Helped Find IRL Bugs | JWT Hacking Part 1

Understanding JWTs Helped Find IRL Bugs | JWT Hacking Part 1 Seven Seas Security

753 views - 2 years ago

HTTP Host Header Attacks Lab Breakdown: Host header authentication bypass

HTTP Host Header Attacks Lab Breakdown: Host header authentication bypass Seven Seas Security

2.3K views - 3 years ago

HTTP Host Header Attacks Lab Breakdown: Basic password reset poisoning

HTTP Host Header Attacks Lab Breakdown: Basic password reset poisoning Seven Seas Security

7.1K views - 3 years ago

Cross-Site Scripting Lab Breakdown: Stored XSS into HTML context with nothing encoded

Cross-Site Scripting Lab Breakdown: Stored XSS into HTML context with nothing encoded Seven Seas Security

1.2K views - 3 years ago

Cross-Site Scripting Lab Breakdown: Reflected XSS into HTML context with nothing encoded

Cross-Site Scripting Lab Breakdown: Reflected XSS into HTML context with nothing encoded Seven Seas Security

1.5K views - 3 years ago

SSTI Complete Lab Breakdown: Server-side template injection with a custom exploit

SSTI Complete Lab Breakdown: Server-side template injection with a custom exploit Seven Seas Security

10.1K views - 4 years ago

SSTI Complete Lab Breakdown: Server-side template injection in a sandboxed environment

SSTI Complete Lab Breakdown: Server-side template injection in a sandboxed environment Seven Seas Security

7.2K views - 4 years ago

SSTI Complete Lab Breakdown: SSTI w/ info disclosure via user-supplied objects

SSTI Complete Lab Breakdown: SSTI w/ info disclosure via user-supplied objects Seven Seas Security

6.8K views - 4 years ago

SSTI Complete Lab Breakdown: Server-side template injection - unknown language - documented exploit

SSTI Complete Lab Breakdown: Server-side template injection - unknown language - documented exploit Seven Seas Security

8K views - 4 years ago

SSTI Complete Lab Breakdown: Server-side template injection using documentation

SSTI Complete Lab Breakdown: Server-side template injection using documentation Seven Seas Security

9.2K views - 4 years ago

SSTI Complete Lab Breakdown: Basic server-side template injection (code context)

SSTI Complete Lab Breakdown: Basic server-side template injection (code context) Seven Seas Security

15.1K views - 4 years ago

SSTI Complete Lab Breakdown: Basic server-side template injection

SSTI Complete Lab Breakdown: Basic server-side template injection Seven Seas Security

27.4K views - 4 years ago

XXE Lab Breakdown: Blind XXE with out-of-band interaction via XML parameter entities

XXE Lab Breakdown: Blind XXE with out-of-band interaction via XML parameter entities Seven Seas Security

7.4K views - 4 years ago

XXE Lab Breakdown: Exploiting blind XXE to exfiltrate data using a malicious external DTD

XXE Lab Breakdown: Exploiting blind XXE to exfiltrate data using a malicious external DTD Seven Seas Security

14.6K views - 4 years ago

XXE Lab Breakdown: Exploiting XInclude to retrieve files

XXE Lab Breakdown: Exploiting XInclude to retrieve files Seven Seas Security

9.8K views - 4 years ago

XXE Lab Breakdown: Exploiting blind XXE to retrieve data via error messages

XXE Lab Breakdown: Exploiting blind XXE to retrieve data via error messages Seven Seas Security

7.3K views - 4 years ago

XXE Lab Breakdown: Exploiting XXE to retrieve data by repurposing a local DTD

XXE Lab Breakdown: Exploiting XXE to retrieve data by repurposing a local DTD Seven Seas Security

5.7K views - 4 years ago

XXE Lab Breakdown: Exploiting XXE to perform SSRF attacks

XXE Lab Breakdown: Exploiting XXE to perform SSRF attacks Seven Seas Security

16.8K views - 4 years ago

XXE Lab Breakdown: Blind XXE with out-of-band interaction

XXE Lab Breakdown: Blind XXE with out-of-band interaction Seven Seas Security

11.3K views - 4 years ago

XXE Lab Breakdown: Exploiting XXE using external entities to retrieve files

XXE Lab Breakdown: Exploiting XXE using external entities to retrieve files Seven Seas Security

25.6K views - 4 years ago

XXE Lab Breakdown: Exploiting XXE via image file upload

XXE Lab Breakdown: Exploiting XXE via image file upload Seven Seas Security

13K views - 4 years ago

Learning XXE with PortSwigger's Web Security Academy - Part 2

Learning XXE with PortSwigger's Web Security Academy - Part 2 Seven Seas Security

1.2K views - 4 years ago

Learning XXE with PortSwigger's Web Security Academy - Part 1

Learning XXE with PortSwigger's Web Security Academy - Part 1 Seven Seas Security

2.3K views - 4 years ago