Good morning everyone and welcome to our Monday morning prayer meeting this week here in the Radiant City Center in the heart of downtown Kalamazoo. Thank you for those who are here this morning joining us. For those who are online joining us as well, we welcome you as we come together as one church, one heart to worship and to pray to the Lord in this hour. The first thing we do this morning, we might have read the Bible, prayed, we might be sending our kids to school during this time as many are starting school this week or in the coming days or previous days. But this hour is special that we can come together as a body, as the children of God, as the church of God with Christ as our head to worship, to declare the worthiness of Jesus, who He is.   We thank you for who you are. And that's going to stir our faith to be able to remember who He was in those circumstances, knowing that it's who He will be again and again and again. So I want to just open up with the first few verses of Psalm 63 and encourage you just as I'm reading this to read along with me or to listen, to repeat these phrases and let this set the heart posture of this hour of prayer and worship together. This is not just a box to check, but this is a moment that the Lord has been looking forward to.  And there's been an intensity and excitement and thinking about all the new things and the new friends, the new conversations. The Lord is just as excited. He's excited for this hour where He gets to have some new conversations with you, some new memories with you, some new phrases, some new encounters. And He's been looking forward to this time with you. Psalm 63 says, Oh God, you are my God. Earnestly, early in the morning, I will seek you. My soul, it thirsts for you. My flesh, it faints for you as in a dry and weary land where there is no water. Verse 2 says, So I've looked upon you in the sanctuary, beholding your power and your glory.  So I will bless you as long as I live in your name, I will lift up my hands. So Father, we thank you for this house. We thank you that you dwell in the midst of your people. You are enthroned on the praises of your people.  So we enter into this house of prayer, this temple for the Lord, and we seek you. The first thing we do before we go into work, before we go into school, before we start our chores or our life, we seek you, declare our need for you, that just as we need water every day, we need you every day. That we never want to grow comfortable in our own strength, comfortable in our own desires and will. But we want to lean on you, we want to thirst and hunger and grow faint for you, so that we every morning return to the place of your presence to be filled and to be refreshed. So we come into the sanctuary and we look at your power and your glory.  And we declare in the midst of our circumstance, this is who you are. Your love is better than anything in my life, anything that I have searched after. Pleasures, crutches, vices, things that I have searched after to satisfy, to strengthen, to try to fill me up. Your love is better. Your love is better. So our response to this need and this declaration is that our lips will praise you. So even right now, before we start to sing our worship song together as a corporate body, begin to sing your own song. Begin just to let the words, I love you, thank you. You are worthy. Let it come out of your lips right now. Let us sing our own song as we, maybe you're going to lift your hands, maybe you're going to bless him, maybe you're going to speak his name, but right now just begin to sing phrases to the Lord. Sing a song of thanksgiving, a song of praise, of adoration. The simple songs you are worthy. I love you. You're beautiful. You're faithful. I thank you. Let those songs flow out right now. Yes, your love is better. We declare in our circumstance more than any other love, more than security, more than money. All other wells will run dry. Their loves will betray, but there's no selfishness in your love. We'll never thirst again from your well. This hour to you, trust in your leader. The pressures were here. Face of fear, face of pain stronger. The song of heaven right now. What the angels sing. In the song of heaven, we step into your presence, into your throne room. The song of heaven, phrases of heaven, of the worthiness and the holiness. Who are slain, the saints join in with the angels and the elders and the foes of the creatures. As we step into the throne room. The place where our Lord dwells, as we join with the song of heaven.  We are stepping into the place where he rules, where he governs, where his authority is centered. And we come with our song and we come with our prayers. And we step into his throne room and we say, Lord, we need you. We want what's in heaven on earth. We want how your name is glorified in heaven. We want it on earth. We need you to move. We partner with you on what you said you wanted to do. We're not trying to stir you up and to try to convince you, but we are saying we agree with your heart. And we want to be vessels, hands and feet, a mouthpiece to declare what is on the Lord's heart. So right now we pray from your word, 2 Thessalonians 3. And as we pray for this, we are praying for the students all the way from kindergarten to college, senior in college. We pray for this range of people who are being targeted right now by the enemy. To try to tear down this range of generations. To forget about their Lord and Savior. To be distracted by other things. And to be convinced that only medication, only fame, only media, only money can solve their problems. And we come and we stand in the gap. We stand in that throne room. And we pray that as these students walk into their schools this morning, as it says in 2 Thessalonians 3, that the word of the Lord may speed ahead and be honored. That as they walk into their doors, as they open lockers, as they walk into classrooms, that the word of the Lord would run swiftly, would run ahead of them, speed ahead of them and be honored. That the name of Jesus would come out of those who are bold witnesses of the gospel. And just as it happened to them and among them they would speak the name of Jesus. We ask for boldness, we ask for a witness, we ask for the word of God to run swiftly. So God, right now we ask in the name of Jesus that you would speak through students as a bold witness and that the word of the Lord would be honored in these schools in Jesus' name. Let it run swiftly. Move ahead of them, just as you did in Exodus. Be a pillar of light and a fire moving ahead of them. Guide them. We ask that as your word moves swiftly, that it would be spoken with boldness, spoken with authority, that it would be partnered with signs and wonders, that it would be partnered with healings, that it would be partnered with prophetic words, insights, that as they speak the name of Jesus and as you come with your hand over them with boldness and authority, signs, wonders, prophecies and miracles that it would catch like wildfire, that people would see and hear the power and the worthiness and the authority of the man Christ Jesus, Lord and Savior, seated at the right hand of the Father, that it would run swiftly through the schools through the partnership of signs, wonders and miracles in the name of Jesus.  Signs and wonders would take place. Stretch out your hand through and deliverance would happen. That depression would be broken, addictions be broken, healings, addictions shattered right now. Trauma healed. Prophetic utterance, insight, identity would be declared and spoken over them. Fill their mouths as they open it. Scripture continues it says for not all have faith, but the Lord is faithful. He will establish you. He will guard you against the evil one and we have confidence in the Lord about you that you are doing and will do the things we command and may the Lord direct your hearts to the love of God and the steadfastness of Christ. So God, I ask for those witnesses, those who are stepping into their school who have been praying this whole last week, praying for this return into school to be sent ones, to be ones who would declare the name of Jesus that as the enemy tries to target them, to try to silence them, to try to shame them, to try to take their knees out in fear we ask that the Lord would guard them against the evil one that there would be confidence that they are doing what God has commanded and sent them to do and if God has commanded it and if God has sent it that he will follow and he will lead and he will strengthen and he will provide and he will direct their hearts to love and patience and steadfastness as they come and as these witnesses they speak and it feels like it's falling against deaf ears or hitting up against a wall or constant persecution or tension that they would be directed to the love of God that knows no end that laid its life down even though others reviled and that there would be a steadfastness and a patience in the love of Christ we pray that as they open their mouths you would fill it as you tell them to go that you would lead them and as that they pray and glorify your name you would stretch out your hand but we know that this comes with tension and that you know that this comes with tribulation so God we ask right now in the name of Jesus guard them, strengthen them and give them confidence Defender, surround them, rest under the shadow of your wing Name is greater, active, sits above the circles of the earth Most high, there's a veil of light Open up the earth, who sustains life I just send back into worship We continue this posture of the worthiness of Jesus We continue to place ourselves in the presence of God to draw close to Him in this hour He is worthy, He is the answer He is the solution In Jesus' name we pray Sing this love song to you Jesus, the holy one, the anointed one Let our hearts burn As we sing the song of our relationship, our love, our salvation with you and as we move from this time of worship into a time of prayer we remember those that are close to us that do not have that relationship We remember those who might have once known you and maybe in an earlier time in their life they had a relationship where they've heard the name of Jesus but because of circumstances or pain or trauma that they have walked away from it or they felt like their plan, their idea is better just as the story of the prodigal son, the one who decided I am better off if I make my own decisions than walking away from the Lord in heaven So we pray for those prodigals right now and I encourage you as we pray whether it be fathers, mothers, brothers or sisters or close friends As we pray together I encourage you to insert their name into the phrases that are being prayed the scripture that's being read and the songs that are being sung Speak their name aloud because Jesus is speaking their name He is making intercession night and day for them, before the Father He is praying for that brother praying for that sister, for that mother, for that father saying, Father, I want them to experience the love that we have I want them to know the hope of their calling I want them to experience the name above all names the power, the breakthrough of heaven heaven and earth meeting I want them to experience that So He's saying their name so I encourage you in this time these last few moments to stand in the gap before that person before the Father and pray for them to be praying out of Ephesians 1 17 through 19 says that the God of our Lord Jesus Christ the Father of glory may give them the spirit of wisdom and of revelation and the knowledge of God that the eyes of their hearts would be enlightened that they would know what is the hope to which He has called them what are the riches of His glorious inheritance in the saints and what is the immeasurable greatness of His power towards them who believe according to the working of His great might So Father, we stand in the gap of those right now those brothers and sisters the fathers and mothers, the prodigals the ones who do not know You the ones who may have known You to some capacity but have walked away from You We speak their name right now we speak their name in this prayer room wherever we are at and we say Father of glory we ask for a spirit of wisdom and revelation we ask for the eyes of their hearts to be open we ask for scales to be broken off we ask for the thorns that have grown around their heart to be broken we ask for their hearts to be softened we ask for their ears to be opened that when the enemy tries to come in and confuse and distract and to harden and to bring in a haze around them of pain, a haze of deception we ask that the light of Christ would come and shine like an arrow that would pierce their hearts right now we ask for the layers in the walls that are standing in fins that they are not forgotten that they have a hope they have a purpose they have a destiny if they step into the calling as a child of God as if they break and lay down the chains of sin and death at the feet of Jesus and they become slaves and children of righteousness that there is everlasting life that the things that they do now that have left them with nothing the things that bear fruit that lead only to death that they would lay them down and walk in a manner worthy of God that they would walk in a manner of light and righteousness knowing that with that becomes everlasting life and in your presence they would have fullness of joy so right now we ask in the name of Jesus wisdom and revelation in their hearts they know your name they would know your name being in that mud pit sitting in their myery pit sitting in darkness hopeless confused call them home show them of their calling the inheritance of your power revelation of a purpose sons and daughters fathers mothers brothers sisters come home you know and your heart is for these lost ones we partner with you knowing that it is not too far gone their hearts are not too hard their hearts are not too lost that you are drawing them and leading them so we continue even through this week every day we offer up these small moments of prayer knowing that these small seeds will begin to take root and to blossom and to begin to uproot the weeds and the thorns taking residents inside of them in Jesus name we pray amen and amen we thank you for this hour that you've come and joined together in the heart of the city it's one church offering worship and prayer declaring the holiness of Jesus we're gonna be here Monday through Friday 8 a.m. again on the broadcast you can join us also in person at noon and 6 30 in downtown Kalamazoo thank you for joining us we'll see you again today and tomorrow God bless


Hello everyone, my name is John Hammond. Welcome back to their YouTube video and in this video I want to do something a little different This was a technique that we recently saw at work and it was kind of a clever thing to potentially stage malware or Bad stuff or other programs that you want to run within Windows in DOS or batch within the Windows command prompt the cmd.exe scripting language and shell system language and all that So I thought it was kind of neat and kind of clever because they essentially just use variables to stage and leverage and put together Potentially just calling a payload or starting something new as another program to kick off and it would be all Mangled and put together in like just printable characters English that all looked like nonsense and jibberish So a little obfuscation to help potentially stage a payload And I thought it was kind of neat and clever and I thought like oh well You could actually automate like the creation of that and maybe you could get something random every time So it looks different and you could bundle it up and package it and whatever it's a thing I'm going to obviously neuter that and we're not going to use it to stage malware or bad stuff We'll use a proof of concept just like starting notepad or kick starting a specific program and Like calc.exe and make it really easy for us in a testing proof of concept And obviously not doing anything bad or malicious because we don't do that. That's not what we do. So Disclaimer I am going to be kind of going in cold on this. So I'll use Python to script it out Which yeah, isn't native to Windows, but I'm gonna have it installed and we're gonna work with it And we'll just use Python to decorate and create the actual launcher and thing itself Again, I'm going in cold on this so I might fumble around a good amount in Python This will be kind of a raw off the cuff Chill video. So anyway, let's get to it. I guess I'll show you kind of what I'm talking about and we'll hop on over to my screen here Let me fire up command prompt and I'll show you this trick, right? So you can set like any variable to be anything that you want and within batch and You can then use that variable even in the context that batch and the shell will automatically interpret It'll just take it kind of literally it'll understand interpret that value So you can use that to build out other commands or other things that you want to run and that's kind of interesting and weird So you can see I just got this set variable here or that that command of that Function whatever you really want to call it here and we'll use that to go ahead and create a variable That's just syntax and we'll call it like a a a just as a as an example And I'm going to set that equal to the word set And that's it now I have the variable a a a that I could access and it's simply the word set as I've defined there If we're to go ahead and define another variable I'll go ahead and use a a a to go ahead and set a variable It's kind of funky right because and we know that that word set is going to be interpreted and I'll use that to Create a new variable called bbb Looks weird right because I'm just using set in the place of that including the space and bbb will equal a Space character right you kind of see where I'm going this so now I could use a a a a with bbb and Now create a new variable called ccc and I'll set that equal to an Equal sign and that might look weird actually we should probably change that to DDD because now I'm going to end up creating variables with just this syntax That we've just created and manifested so the C will be the variable that we end up using in our D Will equal equal signs that we use in the actual assignment operation So it looks funny equals equals, but I'm literally creating a variable that is just going to be the equal sign Right that just ran and it works. So now I could use a a a to set bbb to have my actual Space character there and I'll use ccc as a new variable that I'm going to try and define and I'll use DDD to include that equal sign now I can set it to a value I can set it to Hacks Or whatever and that executed and now I have the variable ccc if you could keep track of that So let me go ahead and echo out the value of ccc Hacks and I've just set that in a weird-looking syntax just wrapping and Masking behind it all of the actual variables of the commands that will go ahead and create a variable So now you could use this and you could build out in this weird random syntax other Character set and create a potential payload that you could hide and mask with this funky thing And you it's obviously all going to be printable characters And it doesn't look like you're creating a long string to invoke me me cats or do anything that you might really want to That's the gist. That's the gimmick Now let's go ahead and I guess create a script for this. I'll make directory batch guess and I'll hop over in there and I'm going to use sublime text to create a obview skater Dot pi I guess and now that window is opened up. We can start to write our code Again, I'm not a thousand percent positive where I'm going to go with this So complete disclaimer if there's some weird fumbling and I don't do a incredible great job right off the cuff But I'm going to import the random module because I want to essentially create random letters being my variable name And then the Python code will just keep track of all that and know how to smartly create the payload String we'll give us all those random letters that we could use and our end goal, right? We'll be like kickstart a Program that will just start calc, right? so Calc is in C windows System 32 calc.exe. Is that right? It is okay cool So if I were to have the syntax for start See windows system 32 calc.exe. It'll just start it and that's really going to be our proof of concept. So Goal I guess can equal start C colon windows System 32 calc.exe, but obviously sure you could replace this with anything you particularly wanted to we saw it in the case of Some nefarious stuff and we're not going to do that. That's not what we're all about We're gonna have this proof of concept to kickstart a program in an obfuscated way within batch and windows. So let's go ahead and Create a variable that we can use as our set operator because we got to start with those right so Let's actually define. I guess a function before I do this so we can get random mess We get I guess supply a length as an optional variable. Let's just call it like five as The length of the randomness in that case and let's go ahead and return a list comprehension of string dot ASCII lowercase for underscore in range of length And I do want to jitter that a little bit so I guess we can say min length and max length equals like 10 so for range of Random has a ran range function doesn't it if I clear the screen here CLS Python again, I'm using it in windows. So import random random dot Rand range, I think zero to ten. Yeah Cool, okay, so that'll work just fine for us. Let's use Random dot ran range And I had to actually choose one of the random letters here so let's use choice around that string list and Random will be min Len. Well, I'm jumping around min Len and max Len Okay, so proof of concept, right? Let's just check out our get random mess and see if it actually works for us Please let me out. Okay. Let's Python obfuscator and I failed int object is not iterable. Oh That has to be wrapped in range. So I did want to keep that Gotcha Range will go ahead and create the number sequence But random not range is going to return the random number and that's going to be used as the length of our range So that's why we needed that cool Let's try that one more time And now we get some random mess Uggsy I like that one. We do need to be careful and that sure We could potentially have a collision with our randomness and we could keep track of that I don't know if I'll need to run into that in this I Can use like a randoms that I can keep track of so Rand I guess can equal what we've got and will global randoms really need to do anything because it's already a global variable We can do like if rand not or While I want to check if rand not in randoms Then we'll go ahead and add it to our set of random variables that we've seen So let's go ahead and append our rand and then we'll go ahead and return our rand um If I do a while well And then I guess let's do a while rand in How do I how do I want to get this logic right so that like it'll create that first and python? I don't think has a do while Does python have a do while uh The danger of me opening up my actual web browser python python do while I'm gonna do while loop I mean, I guess that would work right Because it'll just keep randomizing it and then once it Knows that it's not in randoms. It'll go ahead and return it. So I think that should work Yeah, it's still still going so whatever now. Let's get our set operator and our set operator will equal a get random mess so The code here that we're going to end up writing um should be I'm gonna use f strings we'll do set Our set operator to equal the word set And that's all that we'll need for that first one right So at the end I guess we will print out our code all joined together with new lines Right So now oh I need to actually set the operator. Oh, I need to stink and call the function. That's why Set all that nonsense into set which is good. Okay, and now we need to get our primitive for a space character so We will use this percent To set a space Character Get random mess set With the space now including our space character value like variable name will be equal to a space, right? Good And then we need to actually get our equals character So that's the first primitive right equals character equals a get random mess and with this prologue here We've sort of gone ahead and used the set operator with the space character value to Get a new variable our equals character equal to equals Oh That's so wonky right and then let's get a proof of concept dummy character So now we're using our set operator With our space character with the equals character actually being set After I get a dummy name. So let's just use variable dummy name and then I'll use our Value of our equals character to be Oh, my face is in the way. I'm so sorry. How long has that been doing that? Sorry Value of our equals character equals. Please subscribe Good enough right? So if I were to write all that out And I were to copy that if I were to clear the screen and paste all that Set is Getting in the way of something what's going wrong here Set that thing equal to set which it has and then I set this other thing equal to A space character. So I have set space character az tdm Why is the space character not working? let's um Let's do a little right here. So let's open a Payload dot bat right and we'll write it in in write mode So like with that as handle we'll do handle dot write and then let's say final code equals all of that So let's write that final code into that handle Now when I run this obfuscator I now have a subl.exe actually just open it here in our payload dot bat Which includes everything that we need and there is a space character there So if I were to try and run that payload dot bat it works Okay So, uh, what is the value of dummy name right now? Please subscribe excellent. Okay. The thing does the thing that it's supposed to do when it operates as a thing so Get random s is working just fine. We have kind of a prolog right now, right? So let's change that variable name to prolog and let's say code can equal our Uh, I guess an an empty thing and let's do code An empty thing plus a prolog. Does that work? You can add arrays like that. Can't you? Oh, I also realized that I typed obfuscator wrong. What? Okay, so Now that we have all that now we need to be able to start to build out the primitives for getting all the other Characters in here the thing that I'm worried about is some of these special characters like the equal sign Can I set those just as easily just fine? Let me get back to the command prompt and we'll do kind of a proof of concept here If I clear the screen and if I were to set a to equal a colon Can I echo a and it works just fine? I guess so How about a forward slash b can equal a forward slash? Yep echo b Perfect and a period I think that's all I need Set c to equal a period echo c yep period Fantastic, okay So now we need to start to build out a library of all the potential characters that we could end up using and generate their randomness for that So let's grab a Like and start to build I guess a dictionary of what we know Let's Just go ahead and create that dictionary of our own batch alphabet, right? so for character in string dot printable we could We should maybe define a function to be like set a variable now Let's do that after we've created the prolog Because now that we have the functionality to create variables at a whim all like on whim. Let's do a create variable var name and value So let's return Right and f string as we've done before With kind of the prolog like syntax just this very very last one where we have our proof of concept and we don't need that anymore Let's return the f string of setting a var name will replace that and then the value Right Let me zoom out so you can see that just a smidge because I know it's getting wonky when we're doing all this Obfuscation our set operator our space character our var name with the equal sign will be set to that value And then we'll return that so for character in string printable. We'll go ahead and Create a variable Now that we can use that function Of And we should add this to our dictionary So I'm trying to think about all that things that we need to do here Create a variable with the get random mess name. So I guess I should actually keep track of that as a variable So var name can equal that Value can equal character create a variable with the random variable name With that value and then we'll want to add that to our current code. So code dot append all that And actually we should make a specific var Settings list. I think create a variable name all of these variables Um That's right And now we need to add it to our alphabet. So alphabet dot I'm sorry. I'm like my brain is just being fried right now. It's still early in the morning alphabet Value is what I want to index because I want to be able to know something based off of the specific key Um Equal to that Var name Right Okay, good. So now let's go ahead and print out The joined rendition of all of the var settings that we've just created So if I were to python 3r obfuscator, I totally failed var settings as a tuple Why is that? Var settings out of pent var settings was made a list sequence item zero Expected string instance tuple found Why did we return? Oh, there's a stinking comma at the very very end of my create variable function Wtf. Why is that there? Okay, cool. Now we've gone ahead and created Variable names for all of the potential letters we could use All the characters and they're all created with randomness They also have a new line in there. Do I can I actually use that variable as a new line? I mean, I guess I have to execute this Uh, that would probably fail I feel like it would Whatever let's uh add our Var settings into our code Uh after we've defined them And then let's display that out. So now I have in my Payload here all of this all of this all of this and if I were to go ahead and Go ahead and run that payload Okay, so the semicolon will not work How about the new line? Which one of these was the new line that was TRPD VJ XG nice. I like that If I echo out that value does it work? Nope It's been set to nothing How about HU Y FID Nope also been set to nothing. How about this guy? This should have a value. Do any of these have a value? Let's get um my f Variable obviously the most important one F okay. I mean, so that works whatever. I'm cool with it. You know not a big deal So now we've had a lot of but now we have a lot of potential right because we have defined a randomness way To gain access to all of the potential characters that we might want to use So we could use all of the characters that we have Here in our goal and then go ahead and Run it so Let me Start to Build that out. Let's do a four Character in our goal Let's get the variable name that we need for one thing So we can use our alphabet index at that character because that's what we set in Really the alphabet and let's as a proof of concept just kind of print that out Just to see So let's play down three our obfuscator and there is all of our stuff seemingly cool, and then we want to get the actual wrapped implementation of that So an f string With the percent signs around it For our character in our goal now. Let's print out That so we're just getting the values and it'll be executed on the command line, right? So if I were to join all of that together Without a new line because it's going to just be one command Now this giant string based off our randomness will go ahead and execute the calculator Right, that's the idea. So Let's include that as a execute Variable right and now let's add it into our code that we run So I should be able to run the obfuscator and that failed Because that needs to be a list On its own. Sorry because all the others all the other types here are lists So now we're on that and our payload should have that at the very very very very end which you can see it does and theoretically This I'm crossing my fingers here because again this I haven't done this. I'm going in cold if I were to run this payload Something broke Is that the less than symbol? I feel like I should remove some of those it's probably breaking stuff Did it actually even get down there? No, I think it started to read in Yeah, lecpi broke it Okay, so we got to remove some of those then let's do Um, let's create a little bad characters list and remove those And let's change our string dot printable To a character set name that we want to use. So let's use character set At the very very top here can be equal to our string dot printable and then let's have a bad characters and let's say We I mean this can just be a string. It doesn't need to be a list. So uh that that that And let's see if that's good enough, uh character set for bad For bad in bad characters Let's go ahead and remove that from the character set. So character set can equal character set dot replace just to remove that badness with nothing And then rather than a string dot printable, let's just use character set Okay Now let's run the obfuscator And take a look at our payload No Seemingly weirdness yet, but we should run it and find it if we get anything bad clear the screen run the payload and a colon's being funky. What is that one doing? Is that like a null byte? What comes after this? The square brace. Oh, it's a backslash. Oh, it's escaping the new line. Huh That's wonky. Okay. So I realize that maybe it's smarter to be using backslashes because it's a windows file system But that's going to be a little bit of an exception to our rule here and we probably have to finagle that a little bit Let's gloss over that for the time being and an exercise left off left to the reader How about that curly brace? Can I nerf that? Um, now keep in mind I'm doing all this in a very, uh, whack-a-mole way But if you are doing this with a legitimate payload and you are trying to do a little bit more with this You could start to group some of the potential bad characters together with a known good character. So if I were to set Uh, clear the screen again set, um, a to equal that curly brace Why did that work that time? Was there another thing that was being weird? What is what is what is with the curly brace? Oh, it's the back tick maybe Set a to equal a back tick. No, that's totally fine. What the what? All right, can you run the obfuscator one more time, please python? Hello python 3 obfuscator and then payload dot bat what what Square braces being funky. Oh the backslash actually worked just fine Are you like combining things that you shouldn't?  I think that's it Let's remove the carrot. Let's remove any Any seemingly direction pointing arrows obfuscator payload, please Back tick is still being what is going on Let's remove the back tick Anyway, I guess I got distracted and I was trying to tell you that If you are seeing this issue and you aren't needing to care about all of the potential characters Like in this character set out of string printable that we're building You could just be taking the characters that you need out of your goal String out of what you're trying to execute and if there are weird bad characters Just morph them into another So when I say that I'll be like, oh sure if you were tripping up on the colon Just combine it with the c colon and that might make it behave a little bit better Python 3 obfuscator python 3 payload dot bat And our Curly brace is still being weird So Let's just remove the curly brace. We don't need it. Whatever. I'm fine with it. I don't care See a less payload dot bat. Here we go underscores Why why? All right, remove the underscores. Now. Let's run the obfuscator. Now. Let's run the payload go go go go go This is unreal. We should realistically only care about the stuff in the goal. So Maybe for the sake of our sanity and mine I guess my my my sanity Let's just change this to the character in the goal string create variable specific to those and that's an easy fix Like we don't really need to do that. So Uh, I didn't run the obfuscator is that's going to fail Clear python 3 obfuscator Run the payload And we ran count All right, so that added an extra seven minutes that we really really didn't need Um, anyway, I think that's kind of neat I have a one other idea that we could take advantage here and use Um, and I don't know if it'll work, but That's our obfuscator And we could actually add in a in our prologue, right? Let's just create a little at echo off So it doesn't spit that all out. I'll run the obfuscator run the payload and Add echo off is not going to behave Fine I don't think we need it We we we actually didn't even end up using it or it wasn't present in the artifact that we found this in so If anything, I think this just a good job and that this file alone might not trigger any Edr or antivirus thing because you are hiding this and masking this payload with a little bit of obfuscation And now we've randomized it so it can be a different thing every single time. That's a little neat Um, let's try and take this one step further. So here we go. We're at a checkpoint, right? Milestone one we've kind of completed what we wanted to for this video and that already took me a half hour Now we're going to once again Kind of explore an uncharted territory because I haven't done this yet. So bear with me with all of my mess ups But here's the thing that you can do. Let me show you this um batch can convert an An ascii number or an integer into the ascii character representation So if I were to use cmd Slash c and then exit with a number, right? Let's go 65 because that's in the ascii table the value representing a capital letter a there we go That will work and now I can echo out this percent sign equals exit code ascii And it's letter a Right. So if I could do this for 66 Now I've got b and I could do this for like 92 or 91 And now I've got that symbol. So maybe that will also help us get out of the issue of Maybe help that'll help us avoid the issue of running into those characters that were being problematic because we can convert it from a value We could set that as we need to in our code And that way we can mangle this a little bit more because we can do other weird things with numbers um And this was not present in the uh potential artifact that we found that was doing this This is just my mental abomination and diabolical disaster so Batch will let you do the modulus operator We can go ahead and set and if we are to set we need to use a slash a because set slash a is um A for doing arithmetic and that grants you the opportunity to use the modulus operator. So let's set mod equal to like Let's go two um mod Like four So that's two divided by four and the remainder well two can't divide by four. So it's going to get a remainder of two um Modulus operator is getting the remainder of a division operation So the way we could get a number that we want is to take one number that we're looking for like say We're looking to get the number eight and if I were to multiply this by any random number Two three four five six and if I were to take that number once again and multiply it by that same number two three four five five One down Now I've gotten The remainder of eight or excuse me your remainder is zero. Did I go too high or something? What was weird in that? Or do I have those values backwards? I think maybe I have those values backwards 22 23 I just did this does it need to be It probably needs to be parentheses This was something that I was testing ahead of time Okay, okay, okay, whatever. Let's go 230 that thing and then Yeah, okay, so it needs to be parentheses. Cool. I'm not crazy. Thank you um Add random numbers to that three four five six and let's take that down a step Now you have too much numbers. So two three two two three five. How about that two two Three six, please. There we go. I don't know what the threshold and batch is for these numbers Uh, but I guess we can figure that out and we'll put it in the range of like a thousand Or so if I were to go nine nine nine nine, how does that work? Versus nine nine nine eight Okay, cool. So what if I went for 255 times that value or I guess 126 is the highest ASCII value that we can represent, right? So let's do 126 times that 126. All right. Well, we'll use that as our threshold nine nine four nines Quad nine will be what we will work with that is enough tinkering and and play Let's experiment and this might be a totally failed initiative I don't know if I can get this right But now we've got some other primitives that we want to work with we want to Use our set operator to create variables and we will need the prologue to go ahead and create a slash and an a Because now we'll have a new way of defining variables if we were to use this method Before I do this. I guess let's call this obfuscator two or Yeah, I mean Second obfuscator So my tab complete works a little bit better. So now we're going to be defining a slash And let's do that for a slash character and an a character so our Equals character has been set and This create variable name. I should honestly use our I guess I create like a second prologue right, you know what I'm saying Let's do that Let's take this prologue here and then go ahead and create a second prolog Where now we can use the create variable syntax and kind of as we did in goal, but now we're going to end up doing it for Just the string forward slash a because we need that as part of our set slash a syntax So the var name will be you get random mess. The character is still be going to be a character and let's create a second prologue to append Creating it and we've defined that already so I think that's good. Yeah Yeah Let's create that second prolog List here Good. So now our code can equal our prologue plus our second prologue Do I have a second character anywhere? I don't know why it uh I created that for me now. We can redefine our create variable and do some weird stuff Here's what we can do Now that we've got the capability to create things with a slash a We can use our set operator with our space character With the value of the alphabet that we're working in with a slash With the value of the alphabet slash a With another space character following that with a variable name set to a value This will not work immediately because we need to go ahead and Get the value based off of our modulus So I'm going to define this as steps and this will probably end up being the last step But now what we need to do is determine the character that we want so We can test if that value is Or I guess if like length of value is one Otherwise we'll raise an assert error Or I guess a value error, right? I can only handle One character for Obusification sure totally fine um I hope my face wasn't in the way for like half of this video What we need to do now is Set a variable To Oh geez we're going to get super recursive here. Are we no We need to first know the value that we have so ASCII value Equals the ORD of that Value and ORD is right right or we'll return the ordinal Python 3 ORD of capital a 65 great. That's good exit please so with that We Get the ASCII value and we need to then get it as a Variable that we're going to define with The modulus so we're going to set. Oh boy Sorry, this is hurting my mind right now Set operator I got to zoom out. I got to zoom out because this is getting so lengthy Set slash a to equal the Let's set some parentheses. No no because I don't want the parentheses. I want python to figure it out for me So python needs to do the Get a random number so Multiplier right Can equal random dot rain random dot ran range of 1000 to 999 so The in the a Mod b equals c Modulus operation that we're doing our a is going to be C times our multiplier Modulus b times our multiplier Minus one right So I am not going to have any shame and I'm just going to define it that so ASCII value is really what the c that we want because that's what we know our modulus is going to end up as So a can equal the ASCII value Multiplied by the multiplier and then b can equal the ASCII value multiplied by the multiplier minus one great So now I'm going to have a Set operator space character alphabet Set Slash a so we can get into the math Sorry, I'm just thinking and this is bending my mind right now bar name equals character can equal the parentheses And we don't even need parentheses anymore because we've already done that math for us. Thanks to python So that will be a mod b Right So that has now given me a Random That has given me the number but now I need to convert it back Okay so Now I could just use that c and b slash b now. I can just exit with that value and we might Not end up using the var name to do that because we probably need a temporary var name for that so For that variable right unless you can you do that exit? with with The math in there or does it have to be through set like let's try that cmd slash c exits paste And then echo the equals exit code ascii No, that fails How about 65 Okay, so we just can't do math like that. So let's slash a mod with our 65 With our 65 and then let's try and cmd slash c exit with our mod value Which should work and we try and exit with that now we have a so we do need to use that temporary variable And that will be a get random mess name so now Rather than using var name for the first one We will need to use a temporary variable set to that and then we will need to go ahead and exit with the value of that temporary one so Ooh, I want to define the variables to be able to execute cmd slash c because that's going to get annoying We can do that right because we already have our create variable primitives and that's just less of them Or should be using should we be using these get Get our second layer of create variable after we've redefined it Should we be using that to go ahead and create cmd? I mean we can't we need we need that we need that after the fact so Slash a we're going to end up having and we're also going to have cmd. We already have the slash we already have the c we need exit and We need the space even though we've already defined the space up top We just haven't kept track of that in our alphabet range so steps Equals all of that We should call this mod create variable rather than create variable because we're going to need to create variable repeatedly I guess we should just kind of Create we already did create those We created all those variables. So now we just need to use all of those in a string So how should we do that? steps steps plus equals that This is probably an extremely confusing video and i'm sorry Steps equals that and Now we need to do for character in cmd slash c exit and then We need to include all of those we need to take pieces pieces dot append The format string of the value of the alphabet that we know with our character Because now we'll have cmd slash all the way up to exit And then we will do pieces dot append a f string with the value of our temporary variable So we'll eventually have cmd slash c slash exit slash And the the value of mod kind of just as we hit us just as we did before And then we need to go ahead and set Set With a create with a create variable Uh pieces actually should equal this A list with just all the pieces put together So that's on one line Because this will go ahead and create the temporary variable with the numeric value of the value that we want and then for character in cmd slash c exit to Stage that into an exit code and then we have to go ahead and set the variable name of the var name to really be The exit value so When I run create variable Will var name Take the spot just fine. I think it will So steps Will now equal a set operator with a space with the alphabet And we don't actually need this new alphabet slash a because we aren't doing any math in this we're just setting a variable to That and we could do that with a create variable Because that's just going to return it. Is it not? Yeah Steps create variable With the var name as we have done Good Oh man, this is still blowing my mind because now I scrolled down. I was like, wait, didn't we need to do that for the goal? Anyway um var name should be our equals exit code ascii theoretically Right, and this might fail this might completely fail. I realize I'm going on almost an hour and I This is still on a whim. So Let's create that variable as the last step and then we need to return all of these put together so return Oh, we need to add that into the add the pieces into the steps return all those pieces No return all those steps Because those are all of the lines that we're building and the steps that are necessary to create a variable with this modulus operator um So all of the code now We'll need to create all of these So for the character in the goal we are Going to pass in a random mess as the variable name and then set the value Wait, what did mod create value used to do? Okay, it would just run the function And it passed in the value and we already figured that out because we set value in a modulus ordinal thing so For character in goal, we still just need to do all this but now we're going to end up calling mod create variable with the var name and the variable and That's going to return a list So var settings needs to actually add on this Right And then all that alphabet works Oh Gosh, this is extremely confusing I don't know that worked honestly. I just I honestly don't know. Let's see. What's wrong with it python second obfuscator alphabet is not defined Excuse me Where are we trying to run alphabet line 42? Second prologue. Oh, I guess we really should move that up Alphabet should probably be defined like way way up here Here we go It ran Okay Z types. Wow. That's a very nice random word that you generated Oh boy so this should equal what set slash a to Mod can equal that right 115 What is What is the first one that we work with out of string dot printable python 3? Import string dot printable Excuse me. Oh import string duh String dot printable I can type Printable holy cow Zero now, let's take the order of that 48 that's not good Is that right? What did we do wrong? Whatever, uh, let's try and run all this And just see if it works no no not in python, please. Okay Paste all that in and that's failing. Um, totally fine. Let's just get up to the very very first Uh execution of Creating a variable. So let's run payload dot bat cmd slash exit equals. Oh, oh no What's going on it needs the Percent sign Why is it doing that? cmd slash 100 equals do I need a second percent sign and all that to like escape it? That's gonna look really weird, man Let's do it. Let's do it Python 3 second payload again Let's just get all the exit codes. Oh, I'm missing a percent sign in one of these percent percent that exit ascii is not exit Go ask Do I need the literals there? What's happening? Oh, wait a second. I did have it there. It's just Sorry The equal sign is was weirding me out Yeah, reload the thing Now let's payload dot bat. Oh It did it Oh, and it did it because it was s because it's for start Oh Did it do it did it work? Did it Let's go. Let's go.  All right. Let's just run the whole thing. Let's send it send it boys I hello Can I have the whole can I have the whole payload back? Please? Thank you. All right. We're no more time one more time Do the thing that is awesome Oh my gosh now. Okay, so I'm a little worried I'm I'm a little weirded out with this one because Obviously, we are running cmd slash the exit and that's invoking cmd. That's like starting a whole another process So I want to open up like prokman or something and just let that run and see what happens So Let's do that. We're at the hour mark. This has been a long long show, but um Do I have cis internals cis internals? Nope, probably not. All right. Let's get to chrome and let's download cis internals cis internals I want to watch and see like the serious amount of cmd.exe is just flare up my computer or if that even happens um But that's one way of obfuscating And that looks dirty right like That that's crazy We could amp up those numbers if we wanted to and I guess we could probably finagle this a little bit more, but But Let's let's downloads cis internals and see how we do I hope that was fun. Thanks for tolerating all of that guys.  I hope that was a good time All right, we'll wait for cis internals to download and I guess we'll review really everything that we went over here So we went in a lot of different places and I'm sorry for that But eventually all we wanted to do was obfuscate the process of running a program We used calc as our proof of concept We wanted to define all of the potential characters that we might be using in that string to run the cmd start calculator And define them in like random variables And uh, maybe we could actually do that with string.printable now and we won't have the issue Can I try that? Are you guys cool with me trying that rather than just looping through goal now to create the character set? Let's use all the characters and let's not Remove them because I think this new method will actually allow us to Like using the modulus as a means to hide it even further That should let us build out the entire Principal character set and it's cruising it's going Oh, I broke it cnb slash c6. Oh, it's the stinking less than symbols I guess those are still getting in the way Because you need to use them as part of set. So that's why it dies All right, I did a bad job of doing a recap because I got distracted That takes a while to stage everything, but yep the pipes still going weird Which we don't exactly need do we need pipes? I mean it'd be cool to actually have pipes. So Let's try and keep the pipes in there and see if that was just the square braces that we're making an issue Nope What is it? Is it the pipes? Let's take the pipes out. How's cis internals doing? Oh, they're downloaded. Okay, cool What? Oh, did I not run the stinking obfuscator again? Second obfuscator payload Let's uh, let's get cis internals cruising while we're doing that Let's drag this down and like let's run prokman Just to see how absurd it is Oh It popped calc. Not that it didn't it didn't pulp. It didn't pop calc. It's not an exploit, but it's a cool obfuscation technique. Wow Uh, all right, so let's see what we got Can I filter? For um process name Is cmd.exe Yeah, add the item please Okay, so If I just start cmd cmd Let's show in prokman. Yeah, okay. It's doing its thing. Oh boy I don't need all that. Can I can I clear that actually? How do I clear? I do want a process start operation.  Yep There they go That's surprisingly is that like not enough or is it just like oh, I think is it is it refreshing or something? I mean the process ID stays the same. Here comes calc You know what however long that took That time is plenty That is plenty fast and the hackers don't need to worry about how much time it takes Oh, wow. Look at the tool tip. Can I have her over that again? I want to see that again I want you to show me the tool tip Show me the arguments exit code ask equals four What all the variables? Oh, that's super cool That's a mess That was super fun though. I hope uh, I hope that was I hope that was a good watch I know it took us a long long time But I think we got a lot of really neat stuff out of that and that's how you could potentially obfuscate just a little Kickstarter just a stager and uh, I don't know tinker with it again This is for the sake of education This is for the state the sake of learning and seeing how Crazy it is when you have this obfuscated thing and it's just batch, you know, it's just cmd I showcased in another video how how you could disable the command prompt and that's not a real security measure It's not encouraged or enforced as one, but it's a thing you could do The same way this is a thing you could do So we just got randomness to be able to define variables And then we were able to use those variables as part of the actual command that was ran And build them out to create any essential scripting that we want We just did it with one goal just running one command to pop a calculator, but that's it And this is messy dirty code, but this was all totally off the cuff And that was really really cool and kind of fun and that was fantastic when it worked So that's been a lot of me talking. This has been an hour long video And I'm sure you have stuff that you have to get back to you in your life. So let's wrap it up here Thank you so so much for watching. This has probably been one of the most fun videos I've done in a long while and it was good to get into python and it just mess around for a little bit So, uh, if you did like this video, please do press that like button Maybe leave a comment. Please subscribe do the whole youtube algorithm thing. I'm super duper grateful And maybe we can do more stuff like this in the future. I had a lot of fun I hope you did too and let's let's call it a day. Thanks so much everybody. I love you. I'll see you in the next video. Take care


Open the mouth, tongue out, clear it of the teeth. Push it out as hard as, as far as you can and hold it there. Yeah, tongue surfboard. Nice. Yeah, ah, Tim. Happy. I like the tongue. Nice, look at Tim. So that one is really, really good. Just start strengthening it. Listen, players. You're listening to the movement, strength and play podcast by the School of Calisthenics. Here are your hosts, Tim and Jaco. So Cole, welcome back for part two. There is not that many guests that get the prestigious honor of coming on for a part two. So we're glad to have you here. Oh, man, I'm glad to be back.  Well, we obviously thought there was so much in your brain that we didn't get into last time that we thought we'd need to go and dig a little bit deeper. Jaco's done some work with you since he's our last and honestly Cole, I literally, we finished the podcast the first time and I was like, right, I'm booking a session and we did it, we did a little bit of a zoom together.  It was like, do you even train your tongue, bro? And that was an area that I was like, which I would like to tie to the podcast as that. But one of the things we sort of didn't get as far down this potential rabbit hole as before. And I think for a lot of people though, if they were like me, it was like, got no idea about this at all, is it even a thing? We, to set the tone of like the first question around this, we met, oh, Tim, you said about the, because I'm going to forget his name. The S&C coach at the National Circus said something to us a while ago. Yeah, I'm also going to forget his name, but I've heard this conversation a couple of times from different people of saying the tongue position in the mouth can affect our ability to be able to produce force. So the conversation we've had before is around, all the strength training literature that we've got, if we didn't normalize for tongue position, then we could actually question the validity because it can have quite a significant impact on how much force outside of that variability window that we would say is acceptable. So I don't know if that's true, but I find it an interesting conversation to go basically, the tongue is where it's at. So I don't know, what are your thoughts on that? I love that, I love that thought. It's absolutely brilliant, yeah. So this one time I was taking a, like a group, my mate John Marsh, he's a really interesting guy. You guys would get on like a house on fire, movement guy and small business coach and ex triathlete and stuff, great guy. And so I was running this thing and there's another like movement guru there, he's like fully tanked in. I said, right, I do like, what's something you've really been working hard on, like that you haven't been able to master that you need extra strength for and he's like, oh, this. So it's, you wouldn't know the name of it, but it was a complicated thing sitting down, you're in the splits and then you go into a handstand, you put your hands in front. Yeah, yeah. And then lever up sort of thing. And I said, okay, show us. So he tried to do it, he's been working on trying to get it.  And it's what we call the cave, right? So for the video, it's that. See, I taught you that, Jack, all right? You're working on it. Yeah, yeah, I got it. Mate, my tongue's amazing now. Are you sure? Don't go there. Yeah, I was gonna say, no evidence required, no case it is. Just talk to the missies. All right, so, yeah, I got you to do that.  And then I got him to do a tip-pop, all right?  And you suction it there and you do one of them. So it's not a, that's not it, it's a. Yeah, this was the one I struggled with. Yeah, it's hard if you haven't done it before. It's a little bit of a skill, but once you get it, you're sweet. It's actually like a foundation for language. So when you say, no, your tongue goes there, when you say, your tongue goes there, your tongue starts to go towards there, but not all the way. So the nuances of how we make speech sounds is off the charts neurologically. That's why it takes so long to learn it. So I got this guy to go 30 times, right? He did that 30 times. He did his little thing and he got like absolutely way further than he's ever got with it. He's like, what the beep?  So that concept, I love the concept that if you just, that's made my weak man. I'm falling off my stool. I love that. Well, I use that now as like a joke free car. So if somebody's ever going to challenge me on something that I don't know about, a strength training literature wise go, yeah, but did they, did they, did they accommodate for tongue position? No, I can't trust it. We know the neurology, know the neurology behind it. Yeah. Yeah. What is, so go on to, what in, in very, very layman's terms as you can, why was, why was that tongue position having such an effect? And then, and then the, the final thing of that before we go into any other bits of like, what should then, what's the simplest thing something should do when they're trying to be strong with their tongue? Yeah, okay.  So the practical tip is easy, you learn to do that.  So it's right behind the front teeth. There's little lines, right?  So your tongue's working really hard. You're trying to push your tongue into your nose, right? And that's what we call that the cracker crush exercise. All right. And that should be actually at rest. You should have lip seal, nasal breathing and that tongue should be up in that position. All right? So if your tongue's down, you can do this yourself.  If the tongue's up, it's much cleaner and smoother airflow. That's because of the tongue in relationship to the airway. So we always want the tongue up on that position. So if you notice yourself with mouth open tongue down, the first thing you can do all day long is correct that and you're gonna get stronger. Like Tim said, it's wild. So why is that? Why is that?  Why is that? Because basically at that point where all those little lines are, so the tongue's very sensory, right? Super sensory. So the reason we have those, I mean, how cool is anatomy? Like this is like why you can get geeky about anatomy, not just learning it out of a book, but when you understand the function of it, it's like this is awesome because then you can reverse engineer and change your own training or your client's training. But there's a little underneath that, if you took away those lines underneath there, there's a little hole in the skull, which is called the incisive for Raymond. There's a little hole there.  So if you put your tongue up there, you're activating or you're giving a sensory feedback to this nerve, which is called the nasopalatine nerve. And nasopalatine nerve comes back to the second branch of the trigeminal nerve. And the trigeminal nerve controls the first branch to your eye. The second branch is sensory to the face, you know? So all feeling to the face and I don't think, no, it's not the tongue. And then the third branch controls the movement of your jaw. Okay, so what does that mean? It means what your tongue's doing and flicking into this area and feeding back into this, it's called trigeminal because it's got these three nuclei that they're feeding back into the brain.  So when we speak like we're talk, talk, talk now, you have to move your jaw and your tongue and your lips and your facial muscles in relationship to what you're trying to say with your breath and sort of cognitively process at the same time. So that's a huge neurological achievement. But if you think about it from a perspective of proprioception, so how and where in that whole, like of all the possible places I could move my lips, face and tongue while I'm telling you this story, it's frickin' infinite, right? So the proprioception that goes on in that is so finite. So it's incredibly sophisticated system.  So we've got suprahyodin for hyoid. So that's related to the stability of the neck, the shoulder girdle, the rib cage, your breathing, your jaw and therefore your whole pelvis. So that, and then you've got that famous picture that everyone pulls out from anatomy trains that shows that the fascia of the tongue runs all the way down to the big toe. So it's proprioception and secondary to that. It's neurofeedback to allow. It's just like setting up for a deadlift. If you're in the right position in your spine, then you're gonna be able to move more load because you can't fire a cannon and have a canoe, right? So this is like fine-tuning that canoe's stability to a key level, just to, what's the word? Like, I don't know, the words have gone out of my head, but it's really, really important functions, yeah?   So that's like life and death, but we don't even think about it. We just go, I just smashed like a mushroom risotto and it's just like, boom, boom, boom. There it is, I gotta do this podcast. Why did you take so long to make that? But like, that's not in my consciousness thing, but any aberrant feedback there will feed back into the system and it disturbs it. So when you get that right, you get your breath right, you get your tongue posture right, you get your facial muscles in the right length tensions, the whole system is gonna be stronger for sure. And you can test that.  That's, I've done that before in seminars. It freaks people out. Yeah, so we're basically saying, I was saying Cole, that tongue position is basically an opportunity to prime the system in a way. So it's kind of like in a, I don't know what the right phrase is, but like just that simple thing of like putting the tongue in the right position allows the rest of the system to function more optimally. Is that from a strength training perspective, what we're saying? If you think about the motor nervous system, so that's your movement system, go back to layman terms so that the movement system and forget the sensory, so forget what you've tasted and all that sort of stuff and feel. But just the movement system, 38% of your motor nervous system output is feeding what we call the, I'm not gonna say that big word, the lips, face, tongue, and breathing, okay? So if there's something average- 38%. 38%, and then you've got your hands and your feet, right?  So if there's any sort of aberrant inputs here and you can correct them in an instant, you're gonna be able to then leverage so much more juice to your motor nervous system. So that's how I see it. It's kind of like a, you can get away with it, but if you really wanna fine tune it and really wanna work- Yeah, you're suboptimal. With your anatomy and with your system and with the hierarchy of the way your body works, boom, just put your tongue in the right spot, strengthen it up. So that 38% is for the, for the lips, tongue, face, is that's the, that's the greatest about it. There's nothing that's more effectively using up or more important than the brain's. Ah, is that right? It was a speech. Like speech is the most complicated, then chewing, swallowing, then breathing, yeah? Of course, if you think about the control systems for all of those, you know, it's off the scale. Of course you need, you even need Vegas involved in speech because there's a branch of the Vegas that becomes to the voice box. Right, yeah. I was gonna dive off on a slight tangent quickly just because I've been waiting to try and find an opportunity to get this kind of bit of knowledge that I gained from a book in it. This feels like it might be the right time. Might not be, I'm gonna tell you anyway. Cole, my mind is not working well this morning. What is that thing called where we've got that picture of the human body where it's like the body parts are enlarged. I can't think homo-humanculus. A monculus, that's the one. So I've read a book called the brain has a mind of its own. It talks about mind maps basically, like the sensory information or the picture that the brain has in the mind of these physical spaces of being able to, then you can stimulate parts of the brain and your fingers will twitch and all that sort of stuff. So it's like the brain has this kind of mind. And it talks about the homo-human colors and this, and everyone thinks that they're genitals are the most sensitive part of their body, right?  I was like, yeah.  That whole kind of facial area is massive. It was a representation of the brain's priority of the information gathering from that area. So I just thought it was like, that had me laughing because I was like, we just completely misunderstand where we actually think our brains are. For the visual. Well, the most. I'm like, you know, it's a caricature of it's, basically that type of thing, isn't it? Although, I think our genitals on that look quite small. Yeah, for the podcast listeners, Jaco's holding up the caricature that someone did for us. Yeah, my jaw looks massive on that. It's actually quite good though, isn't it? It's the lips, it's the lips. It's the lips. But yeah, that's the homo-humanculus. It's the pleats and the pads. And that's dentury, but here's a standard for you. The homo-humanculus actually accounts for foot fetishes talking about genitals. Oh, does it? Yeah, because the area of that, because it's kind of like a sort of coronal slice of the brain, the way they represent it, but the area that has the feet is right next to the genitals. So when you get like some sort of, you know, with the brain, that's where that comes from. That's made the room go very quiet. I like that. I just want to take a moment to, Tim knows, I love giving a bump tap to people. And I just want to take a second before I ask my next question to just go, bravo, Cole, in that I'm like, how do you know, and this isn't a question to answer, but I'm just like, how do you know so much stuff? I love it when we talk to people that's just like, it feels like, you know, I don't know, it's like, how do you know? Anyway, so tapping into that knowledge of, How much time and not enough money. I've understand, but as well as wowing people with just like, oh, we know loads of stuff and it's like some more type of practical things. And if someone, and I had a little bit of experience with this when I had that session with you of going, how would someone assess then? If they've obviously can go, you've already done like, does your tongue tend to be low or do you get it in a good position high up? How can somebody, how can we make, what are some simple potential things we can do or tests we can try out? Cause you made me try and do a few things with like, widening my mouth or putting my tongue in the different positions. It was like, oh man, that feels really tight or try and do this and it feels really weak. Like, what are some things that people can do to actually find out, is their tongue rubbish, like mine or not? Hmm, I think you kind of look at the whole system, right? So the first thing I'd look at is, okay, does the person have dry or tending towards dry crack lips? And you might say, well, what's that got to do with it? Well, that immediately shows us that air is passing over those lips too much. So when you've got that mouth open, the tongue has to go low because if the tongue is up, all right, then the air is not gonna get freely through there. There's a barrier, so the tongue drops down.  And so then you wanna do, okay, if you wanna get really technical, what you could do, and this is a really easy trick to do, and it probably is easier if you get someone else to do it, but what you do is you go, okay, I'm gonna get a ruler and you open your mouth as wide as you can, okay?  Jacko, for the audio listeners, Jacko's got a ruler out. Yeah, but not just any ruler, look at it. It's like a triangular ruler. Oh yeah, but it's just when I do a little bit of graphic design goal, you know how it is. Right. Ah, it's not, I feel so tight. Well, what do you got, about 40, 50? That gives you the total opening, okay? Total open, all right? So it's total open. Teeth to teeth, yeah? Yeah, exactly, yep. It looks about 50, mate, I reckon. All right, good effort. It's all right. That is. Don't blow in the feet. One, two, three, four, 55, 55 centimeters. Okay, that was wrong, I was out by five, right? So now what you do is you take the tip of that tongue, remember we were talking about the spot where the lines are, the incisive papilla, take the tip of the tongue and hold it on that spot and then open your mouth again as wide as you can and measure it, okay? All right, oh, far less Jaco. Yeah. I've been a bit slugged. 25. 25, serious, okay. And it was worse before because I have been doing these stretches. Yeah, right, so that's interesting. So 25 divided by 55 actually gives you 45%. Yeah, I'm not even 50%. So that is called, that's a really easy test to do. You can do it on yourself in the mirror or get someone to measure for you. And that's called a tongue range of motion ratio. And what do you want it to be, percentage-wise? Yeah, so you want it to be about 80 to 85 plus percent. Jaco, you got some words to do that, son. The famous strength and conditioning coach only got a tongue range of motion ratio of 45%.  In front of all these listeners. I don't know about that. Luckily I gave you those exercises, Brazile, you might have really embarrassed yourself. No, yeah, I couldn't even open my mouth before I did the session with you. That was all right, wasn't it? That's, I should have maxed open, right? Yeah. Yeah, so that's pretty good. That's pretty good. Yeah, of course it is. So what that will tell you is, there's no problem. Hey, this is one of the biggest lessons from the podcast over the years that we've done it. Being bad at something is good because then you can improve it, right? I'm gonna be like Superman after I've sort of my tongue out. I say that to kids all the time. They're like, well, these exercises are hard. I'm like, yeah, well, why would I give you easy exercises? Hello. That guy. That guy. What I really need to do is get in there underneath your tongue and do some my fascia release work. That's how we'd help that one. Is it? Yeah. Think it's in the mouth. Yeah, there's a bit of a technique to it. It's ripping horrible, man. Work it, Jekko. I'm quite pleased with my result there, Jekko. The anterior attachment, Jekko. So right where it joins the handable, right at the front, you just get either side of that and just really push it. I'm not gonna do it because I've just been out in Sydney. I'll do a bit while you're talking and I'll re-measure. Yeah, okay. That's a good idea. Okay, so that tongue range and motion ratio will tell us a couple of things. The main thing that's gonna tell us is how much tension's underneath that tongue, okay? Or, and or, how much is that tongue restricted?  So there's a sling of muscles on the floor of the mouth that support, well, they actually, there's actually fascia on top of them and that fascia folds up and that becomes the lingual frenula. So the lingual, the tongue thing under, your string under your tongue is actually a fold of fascia. It's mirror- I'm actually crying here, sorry. The floor, yeah, it hurts, hey. The mirror's the floor of the mouth, okay? And there's muscle underneath that called your genioglossus. So just like any other muscle, when you get it tight, you know, and it's lacking in range of motion, therefore the function of the system is not gonna be as good. So many, many people will have this issue underneath the tongue is tight, restricted and there's fascial tension all through the system. So what you gotta learn to do is move just like you would in your hip and back, like dissociate your hip and back when you're moving. You gotta do floor of mouth and tongue dissociation. It's quite fun. How do people get like, how does it happen, Cole? Why would people get like, particularly tightness in the mouth? What do you get now, Jacko? He's going for it. Oh, look, that's worse to me. Worse, that's a bit better.  30. 30, there you go. I can't. I'm crying. My eyes are watering. Yeah, so we got 10% more. I feel it just, it feels significantly different right now. All right. It feels good. Only 30% to go. Yeah, what have I got to get to? 80. Yeah, but no, yeah, it was 80% of 55. I'll do the math, don't you worry? When I have that work done, my whole soul to go, it'll just relaxes like it's wild. But how does it get like that? It's a 44, no word. It starts, it actually starts as an embryology as you're developing. And then you've got things like birth and birth strains and then you've got diet and lack of chewing, soft diets, you've got tongue thrusting habits with what we call retained, different reflex, tongue thrust reflexes that remain. I guess in Australia, we always sort of like mumbles. So maybe that can be good. I would say, I didn't want to say it. I would say just like the rest of the musculoskeletal system, it's lack of function really. Like people aren't using it properly, you know? It's really interesting since our last conversation. Like when you said that the speech is like the hardest or the most complicated neurological development kind of process. Like I've got, Naomi's 10 months old now. So I kind of like started listening a little bit to like how she's learned to speak. And it kind of, it was a real live example of what you were talking about. But interestingly, one of the first things that she, she could kind of like make a baby noise. But to get people her first way of communicating, and she still does it now, where she would click her tongue to get people's attention. Cause it, and then she would, and you actually then you could communicate backwards and forwards with her. Like if you click, she clicked, and you click back, and then she would also do it, like engage in this very primitive conversation. But just interesting that that tongue is already at that stage of a less than a year old doing some work in that communicative development phase. It's interesting. It's getting sensory feedback to the second branch of the Chai Geminal. She's pumping feedback to her brain about where that tongue is, and she's trying to coordinate it. And they go through a series of process of making sounds that gradually become more and more refined. And they prune off the ones that don't serve them. And then they start like la, la, la, la, the babble. And then that slowly gets more and more refined. That's why it takes like five years to be become, you know, actually learn some language. I've got another question. Just, this is kind of one that people might have seen it. And I don't think I fully understand it as to the science behind it. I've never used it before. But what's the rationale behind people using mouth guards or like, you know, the mouthpiece when they're lifting. You see like strength training athletes. Everyone in the world's strongest man. Everyone in the world's strongest man, I've seen, had it. Am I right in thinking this is your alignment or tension? It's like they're biting down the gum shield. It's forced generation from the occlusional surfaces of the teeth. So when the teeth come together, you will be stronger. You know? Okay.  Are we not already down a rabbit hole? Oh, yeah. We'll go down the, I don't know. Jacque has just been measuring his mouth with a ruler. A hole. I mean, good for a hole. So one of the dentists I used to work for was wild. He was mad, but he was delightful. And what he found out was that there's actually three main body types of humans. And he figured out to the nearest cusp, so like a cusp is the little bumps on your teeth, like the little points, you know? So he figured out to the nearest cusp that he could design a little splint that would touch on certain points of the teeth when you bit down and give you like dramatically more strength and power. And I was like, wow, give me one of those. And he did and he gave me the wrong one. And I woke up in the middle of the night wearing it and my whole back had gone into spasm. It was just tearing pain.  I said, mate, you gave me the wrong ones. Long story short, he gave me the right ones. My PBs went through the roof and I used to wear those at night time. So the occlusion, because of that proprioceptive feedback, the occlusion is like critical to that whole thing, the ability to fire the cannon out of the canoe. And a lot of lifters actually end up cracking their teeth from doing that, from splinting down on the jaw. Because when you activate the neck muscles, stabilize the neck and there's your battleship to start firing from. If your neck's really strong and tight, like the same what you would do with your core and you're gonna be able to use that shoulder better, but you can sort of blow the system out doing it with artificial means too. That's something to watch for. So I'm just trying to think, if I'm training and lifting, I actually, this is one thing I'm gonna do as this next week, is I don't know that I'm aware of my tongue position or jaw position. If I'm doing something heavy, I don't think I'm thinking about it, which I'm going to now. But yeah, what's the, so we've talked about the tongue. So if I'm gonna go into a heavy lift, for example, like I'm gonna go heavy set of pull ups or something, whatever, I'm gonna go tongue against that point that we talked about just behind the front teeth and then jaw open or jaw like, just not kind of trying to crack teeth, but jaw closed with a level of compression to try and, but not kind of like splinting so hard that I'm gonna need to go to the dentist. Correct, yeah. Or should I get my old mouth guard out from rugby? Have you still got one Tim? And you can just crank down on that. Yeah, I'm not sure the bite and boil mouth guard from like, it's quite what Cole's talking about. Five grid putting a bowl of hot water and then just shove it in your mouth. Like burn your gums while you're doing it because you didn't wait long enough. And do you remember those? Yeah, I remember it well, I remember it well. People used to write like nasty messages to the opposition on it. And when they put it in line, I don't know if you guys did that, you used to line up and shake hands before the game and then you smile and you'd have this like, FU written on your mouth. Actually, Karen's got, Karen was thinking about getting back into hockey. She's had a gum shield in a bag for like about two years and she's got it out. Soaking a Milton for about a month. Just trying to get it cleaned up. I might do that. I might go and write something across the front of it. That's the issue. Here's one of the things though. You know, a lot of people wear night guards for Bruxism. I don't know if you've come across that. Yeah. Sort of slightly changed the topic, but we're going to sleep, right? So sleep is so critical to recovery and therefore to strength, you know? So a lot of people grind their teeth at night and grinding and Bruxing. And then what they do is they put these night guards in, which are kind of like a flat thing that sort of protects the teeth quite untight, but actually when you do that, this whole system that we're talking about, you actually destabilize it. So those night guards can actually be quite for performance wise, if you're thinking about that sort of thing, they can actually be quite destructive because what the grinding is, is actually a symptom of something else and that something else is what would sort of overarchingly term an airway issue. Yeah, I was wondering, I was talking to someone this week, Cole, about this and saying that like potentially, like that grinding of your teeth is like, it's a lot of tension to create that and that if you were breathing and the body like relaxed and soft and the body relaxed, like presumably surely you wouldn't be grinding your teeth out, is there is how someone was breathing linked into that potentially? 100%. Yeah, cool. Yeah, 100%. Good to know. So how you're breathing at night time, if you need to grind your teeth, what you're doing is you're effectively splinting your airway. So you're going like that, okay?  So you can be aberrant like inputs, like inputs that are causing a problem. So that could be structural, like you drop something, it could be a biochemical thing as well. You know, that you're not something that you're eating, drinking or coming in contact with. And it can be a neuro-emotional thing too. So most people think, oh, teeth grinding, that's cause you're stressed and it can be but the number one biggest primary reason why you're grinding teeth at night is your airway. It's actually a structural thing. It's the volume of the airway itself is lacking. I can, I'm actually in the dental clinic. Right, so by, yeah. And by grinding, you're effectively trying to force that more open. Splinting it open, yeah. And it's something wild, like there's, I can't remember the actual pressures, but we don't, like when we chew on a nut, it's like X amount of pressure. But when we grind our teeth at night, it can be like 10,000 X that pressure. It's like crazy force that we put through our teeth at night. So I might say that people's teeth, like literally wear flat. Yeah, I've got a tooth that's like flat, that use the, yeah, and a neuro grind my teeth cause I'd have dreams that my teeth are falling out. Yeah, that's really common. That's that one is actually linked often more to the near emotional stress where you have those dreams.  Become a millionaire. I never told you that. I'm joking. But people have these ones that are like, oh, if you dream about that, then it means you're going to be rich. Or it means that they're- The tooth fairy's going to come. I had that dream too. And I'm still waiting, but like, that dream when I found out my girlfriend of three months was pregnant and we both lived in separate house and she lived with her parents still. And I was like, got no money.  And I had that dream and I was so sore through the underneath my chin. I could hardly swallow. Like I was that stressed. I didn't know what to do, you know? Sort of that out. We're still together, but. So practical to this is like, there's just free games on the table for people today, isn't there? They're just going to think about these things as they go and start to get into their training a little bit. So we talked a little bit, I was just going to put quick takeaways. So we talked about trying to get that tong into that position in front of the roof of the mouth. Is there anything else people can do that's quite difficult for the auditory listeners on the podcast, but the YouTube guys might be able to kind of get a bit of an insight. Any kind of two or three things that we can do just during the day, which can help to get some better control and strengthen the mouth. I'm going to give you two real key things. One is the tongue surfboard. Jaco knows this one. So what you do is you, this helps with that ability to separate the floor of the mouth from the tongue itself. So we really want to be able to move the tongue separately to the floor of the mouth. Look at him go. If you're not on video, if you're seriously not on video, you've got to get that. This is the reason to come and subscribe to YouTube. Hit the subscribe button.  So you should be able to see your top and bottom teeth. It's hard.  Just that. And you want it skinny. You don't want it kind of hanging out. Yeah. And that's actually, that's good. Lucky if you listen to that. You've got to practice these things, Tim. You've got to practice these things. When your tongue's as bad as mine, you've got to practice. Do it again. I want to mark a clip on this. We're going to put this on social. Do that. Do that fat tongue position again. Ready? Three, two, one, go. So open the mouth, tongue out, clear it of the teeth, push it out as hard as far as you can, and hold it there. Yeah. Tongue surfboard. Nice. Yeah. Tim. Quite a long tongue in this one. Look at Tim. So that one is really, really good. To start strengthening. The other one, you really, if you're listening, you really want to check the YouTube on this is the granny surprise screamer face.   It's like a big sling. It's an awesome system.  So you do that with this granny screamer. So you take your lips, cover your teeth with your lips, right? And then bring the eyebrows up, mate. Your face, excuse me, go really long.   Jacko. Uh-huh, uh-huh, uh-huh. There you go, you know? So your face goes really narrow like a granny getting a shock. That's it. Yeah, nice. Brilliant. I'm getting like spasms on this side. Mark that clip. That's a clip for the social for sure. Yeah, I've just grabbed it. I've grabbed it. Brilliant. Okay, all right. And then you do the opposite to that. So you scrunch it. You make your lips go wide.  And then you do the opposite, go long again. So you do this for reps. That's it. Mm. For reps. I was like a non-surgical facelift. That's how we are. Love it. So that gets that, I like it. The technical name for it is the epicranial lapineurosis, but that just gets that sling really pumping. And so it actually really helps.   I love the idea of somebody sat in traffic doing this. Yeah, should be. You know, sometimes you're playing the same song and you see someone, at least it's a radio, someone's singing along with the song that you listen to. Someone's, I love the idea of people sat in traffic doing this, being like, it's cold Clayton.  You heard of Mewing? Yeah. It's a big trend, like Mike Mu, John Mu was his dad, or is his dad, he's still going, I think, who's this, like, it was very much a pioneering, orthodontist, dentist, and Mike sort of took over his work and they're very much about all this paradigm, tongue position, correct breathing, functional dentistry, you know, growth, guidance, appliances and stuff. But he started that Mewing thing and the Mewings become like a thing, like millions and millions and millions of, you know, whatever's shares and likes or whatever it is that is important. But yeah, that whole, there's a whole sort of movement of where should you place your tongue and how do you do these little facial exercises that he started over there. So good. Cole, thanks for that today. That's just like, yeah, there's some really interesting stuff in there from just a mind-blowing perspective of some of the things we don't think about, don't know about, not talked about enough. That's why I love these conversations because it's just like an exploration into things we don't know. Yeah, it's cool. I just love how you just blew apart the whole of strength training. I'm just feel rocking on that. I'm just like, sorry. You can have that one, Cole. That's yours. You can take that one. Really, I can use it. Use that one. And just credit me. I also, I love the fact that. Feeds back a reference. And I love the fact that some of the things that we're talking about doing, how simple is it to just wiggle your face about a bit and think about moving to it. We're not asking or not challenging. Doesn't cost us anything. It's not super complicated. And there's some real science behind why it's going to be beneficial. And it's great that we're just finding out more and more of these things so we can get the best out of our bodies. And there's a good reason if you're listening to the podcast and you've never watched it on YouTube to head over to YouTube and watch the video, this is definitely a visual one to be able to watch back as well. If you're watching this commercial there, hit subscribe. That'll make Cole very happy if you subscribe to our YouTube. Absolutely, please. Because he doesn't have a YouTube, but if someone does want to find out a little bit more Cole about you and they after the, or if they haven't watched the first part, listen to part one as well. But what's the best way for someone to sort of find out a little bit more or be able to get in touch with you? Well, here's the thing, Jacko. This year is the year, man. I'm launching my YouTube channel. Yes. I told someone, I said, I've seen this guy is incredible. I said, he's so good. And I was like, this will blow your mind. This will blow some people's mind more than, he's so good, he's not on social media. That's how good he is. I'm not going to Instagram, but I'm going to start at YouTube. You don't need it. You're too good for it. But what I was going to say is about that this whole paradigm, not being rocket science, right? Like it's simple stuff to make a surprise, silly surprise, granny phase. But the leverage that you get as we've discussed for the last hour is off the scale, right? So what I'm going to tell you about on him is if you've got kids or you work with kids or you know kids or you have a nephew or nieces or whatever and you see some of this stuff with the kids, you got to get on it. You got to get on it. So I have a website called Happy Kids Clinic and the clinic starts with K. So happykidsclinic.com and that's a good place to start because if we can get the kids doing these simple things like Tim was saying in the back of the car, right? You change the world, by the way. It's amazing, you know? So in this dental clinic tonight, that's what we do. We do osteopathy, face exercises, breathing and special dental appliances that are amazing. And it works incredibly well. Like we're getting crazy changes in kids in like a month, two months, three months. It's wild. So that's Dr. Levi's, L-E-V-I-S.com.au and then just my name, Cole Clayton, C-O-L-E-C-L-A-Y-T-O-N.com.au. That's Cole Clayton. It's got some stuff on it. The baseline breathing course. So if you're a coach or trainer or therapist and you want to do sort of a bit of a deep dive into breathing, there's a whole 40 video course on there. So that's what I'm doing, the YouTube to sort of start to really talk about this stuff and get this stuff out there and feeding back into those platforms. Nice. Good man. Thank you so much for coming on. My absolute pleasure. It was awesome to get around to. Thanks, mate, we'll chat soon.