Hacker Shows Navy SEAL How Easy It Is To Obtain People's Information

some of that stuff is posted on the dark web. I have this password, everything is there, yeah, find my face in the middle of the Super Bowl stadium, so what is the pen tester? pen tester is a software solution for security and cyber protection, so we If you know that there is a penetration test, a manual penetration test where someone would enter your company or a group of

people

where they would check a list of check boxes. things for your compliance, they would look for vulnerabilities based on your platform and give you a report. of findings, you know, vulnerabilities pen tester.com, it can be confusing because pen testing and Pen tester.com are like pen tester.com is a term pen tester.com is the name of my company, okay, and you know what what do we do.

Try to automate as much of what a pen test, a pen tester, would do digitally, so pen tester.com is an automated web scanning framework as of now, we are developing it to be more than just a web scanner and um sorry I'm getting confused no it's okay so let me ask this then so it's hard to explain so I'm trying to get everyone to understand let me yeah I get it because I'm a fool with This, then, let me ask you a question. If I go to pentester.com and type Sean ryanshow.com, yeah, what kind of vulnerabilities might that have?

Here is my website, I basically saw gummy bears and we will be posting soon. episodes, your episode will be there, uh, we collect email addresses, um, for a database, we send out a free newsletter all the time and then we get some if you want, if you want to apply for a job here from time to time. While we'll post that you can run your resumes, we just did a thing where we're looking for a new video editor for short films and they're sending out a bunch of um, we're going to have a competition for it, but by then. a website like and we have inquiries about advertising for a website like that running on Shopify Shopify, what kind of vulnerabilities would you be looking at?

So, there's a lot of things, the first thing that came to mind was, uh, email violations, so if I have Sean ryan.com as a contact is that his website Sean ryan.com Sean Ryan show.com Sean Ryan show .com so contact Sean ryanshow.com or meet Sean Ryan on the website or anyone who works here. Look up that domain with the pen tester and see if it has been involved in any breaches or if it has been involved in any botnet traffic where all the cookies and passwords have been removed from

people

's browsers. Okay, wait, what is bot botnet?

What traffic monitoring? right, let's say you were infected with some kind of malware there and that person took from your Chrome or your Safari all the saved passwords and all the sessions like a website to log in to a website, you have to have a session So if I took that session and replaced mine with yours, now I'm mute and passwordless, so some of that stuff gets posted on the dark web or, you know, it's a walkthrough. I like to call it the onion router tour. That's what the dark web is um but it's published there and sometimes on the public web and a lot of people don't know what

information

is actually out there so when you put your website in the pen tester you get a preliminary report which

shows

all that data that's been exposed related to your domain name, well it goes a little further because let's say it doesn't find anything, maybe you're a new website and you know that Shopify is doing a good job with everyone. the plugins you're using because remember each of those plugins is from an individual creator who could have made a mistake at any point in their code so you're only as strong as your strongest plugin so that's one thing there Shopify has your own security and then you have your own security based on your plugins as far as emails, let's say I don't get anything with Sean ryanshow.com.

Now I'm going to start looking at Gmail accounts or Gmail, Hotmail, AOL, Yahoo, whatever. all of their employees, their family, and then I'll see violations associated with them, which I guarantee they do. I'm so sure that if I take out my laptop and put in one of your personal emails, I'll have at least one of your passwords and that password could be reused for Shopify or maybe used to access that list of data with your clients that you were saying that you have The client list, the newsletters, the applicants that you know the jobs for uh, maybe it's the same password that you use for that and now I have access to that data that I could rescue you with, I could escalate my permissions in Shopify and take control of your entire site, maybe it's your social media platform credentials, uh. like YouTube Instagram Tick Tock whatever you're into you know those credentials could be reused so it's important like you said to use a password manager because all it takes is someone like me with a bad moral compass to take advantage of it.

Of everything you have, could you show it right now? Yes, just write it in my email. Yeah, sure, I'll try the first dot com on the Sean Ryan show. Yeah, okay, so we have confidential

information

, but nothing. uh, nothing, that would be a big deal. I can show it to you, actually I can show it to you if you want, it's not going to break anything, yeah, let's look at it, so it's not this, it's not specifically about passwords, um, but it's what it came from. you know, leaks on the Internet, this is not, you know, it's nothing more than leaked data, so nothing is sensitive in my eyes, so we're doing a good job for Sean Ryan's show, but if you add one of your Gmail there or something, any other email that you might be using for a long period of time, just type it in here, yeah, take a second to load it, load over 140 billion records, nothing, nothing on that website, they are supposed to owe two e.

Being there, yeah, I guess he'll live to see another paycheck, well, not your IT guy, although that one just doesn't seem to be signed up for a bunch of accounts like, say, if you were in 2019 on a LinkedIn breach by or like not even a Dropbox if you use any of that like vigilante surveillance I keep saying vigilante sorry, uh elite surveillance um I have this password and I have the address whose address and uh I have an apartment and interesting I have uh an IP address because I have an address in where we are now with the zip code that ends in six four and a phone number and then all that shit is there yeah and I got a lot more than that if you want to look take a look at yourself oh yeah let me take a look look, yes, this I'm halfway there.

If you could scroll up and down, how do we clean this up? You can't, you just have to change, you have to change the information if you don't want to. If there's no way to get rid of it, then what? Oh my goodness, that's why small and medium-sized businesses that don't realize they're a target are more of a target than they think. Attacked because they have exposed credentials or are using old technology and are just grouped up with a bunch of other people who know similar targets, many of them don't realize they need to take on their cybersecurity. more seriously and likes the Pen tester and this is like a Shameless add-on, but for $50 a month it's worth it.

You know, as far as I know, we're the cheapest in the world of cybersecurity and we're not just giving you a software solution, but we're giving you a hands-on test, you know, manual confirmation for anything we're not sure about. insurance. So for 50 bucks, like someone offered it to me before I was a

hacker

, I was a little kid, but come on. Just say I never was, you know I would. I'd be more than happy to pay 50 a month or something like that. This is just one of the many things we offer. Alright? So is my website safe for customers? you decide, I mean I haven't done a scan, this is just a breach, oh that's just a breach chat, yeah, and this is we have more logs than literally anyone else on the internet, so we'll be able to tell you. more than most, you know that most people will have access to these private databases that we have, as well as the public ones, but if you download other competing websites that say or sorry, sign up on other competing websites the competition that say they offer breach or leak protection, breach or leak protection, is what they will say, they don't have a database as big as ours, I'm confident, I mean, I'm very confident. on that and this is without running, like I said, this is without running a scan, so you know, I'll keep it.

I'll keep the computer ready for when you want to see a face, but I'll show you how wild it can be. get it, let's do it, oh you want to see it, yeah let's do it, so describe what you're going to do, so I'm going to do whatever you want, I could do my face, your face, anyone's face you want to do, will you do it ? you just tell me you can do my face, okay there will be a lot of photos of you obviously because of your podcast, but basically what you're doing is taking a photo of me, it will do facial recognition and it will find every image on the internet that has my face on it, yeah, whether it's tagged or not, yeah, like if it's strict, you could find my face in the middle of the Super Bowl stadium, as long as it's on the internet, so yeah, let me take a picture and I'll send it to myself, okay so I took a photo of your face and you can see it's just a photo that's never been on the internet, right, he's a really handsome man, amazing, so I uploaded it to uh.

So far, so you took a photo. Yes, no, no, you can check them and see if there is anything that is not there. I don't know if there will be something you don't want there or not, but if you click on it. I'll give you a link to where that image is hosted, but remember that I used an image that was never on the Internet to find those photos of you, so it measured your face, it measured 120 points on your face. Associates an image that has never been touched. Internet with you and for someone who doesn't have as many followers or as many photos, there may be fewer results, but you could be in a photo you don't know about or there could be a few. things out there you'd like to know about oh wow this is really like everything yeah it's still going cool stuff that's crazy Hi everyone, I'm Sean Ryan, click here to subscribe to the Sean Ryan YouTube channel Show to see the most popular and the most compelling interviews that you won't see anywhere else.

I also made a playlist of all the previous SRS episodes so they're

easy

to find. You can find it right here.