https://github.com/DensenDeluxe/gone-ctf-challenge

Have fun.

New video Short in my Web Exploitation 101 series. This one walks through fuzzing a target with FFUF to uncover directories and endpoints that aren’t linked anywhere in the site’s navigation.

I'll probably make a full length video too to get more in depth about FFuF and filtering out useless responses.

Covers:

- Basic FFUF syntax and setup

- Reading status codes, size, and word count to spot real findings

- What to do once you find a hidden endpoint

Aimed at beginners getting into web app security or CTFs. Happy to answer questions in the comments if anyone gets stuck running it themselves.

EDIT wrong link above:

https://youtube.com/shorts/Oihh3ZaByZg?feature=share

I finally finish it, it was fun. However, I use AI for last 2 challenge in module 5(I very disappointed myself for that)
What should I do now? I just don't know what should I do next step. I want to learn cybersecurity for free and I play CTF for that reason.

Hey guys- wanted to share a new CTF platform I developed solo. Has a lot of features and none of the pain that I missed from platforms like fbctf in the past, made from the ground up in a modern stack. Hoping to add CTFtime signup next. Link to the repo is on my GitHub.

So there was this CTF i attended two days ago and there was this MISC question where there is a video titled DIED IN YOUR ARMS. I tried multiple ways to analyze the video but couldn't crack it. Only 2 teams where able to solve it. The operators didn't publish the answers. I was wondering if anyone can crack it and explain how they got it?

Ps. the flag format was SKYDAYS25{}

Hi all,

I created a step by step walkthrough series for OverTheWire Bandit!

Please check it out if you are interested in it! There are 6 videos in total, I hope they are useful to you! 😊

OverTheWire Bandit Walkthrough - Step-by-Step for Beginners https://www.youtube.com/playlist?list=PL2mncq0mb-6ibI02KufoaXnZHgNc6G9dO

Have a great week ahead!

Hey everyone,

When I started my OSCP journey 10 years ago, I use Kali Linux and then continue to use it for many years after. My kali's VM size was huge back then. HUGE.

I made a walkthrough video for anyone who wants to run Kali Linux in a more lightweight, consistent way using Docker.

The video covers:

• Installing Kali Linux via Docker
• Avoiding the "it works on my machine" issue
• Creating your own custom Docker image
• Setting up file share between host and container

It's a solid way to practice hacking without spinning up a whole VM — and great for anyone doing tutorials that require a Kali Linux instance, or folks who are starting out their penetration testing or bug bounty journey. At least for me, I was using a super bloated Kali Linux VM for many years ...

IF YOU ARE INTERESTED, watch the full tutorial here: https://youtu.be/JmF628xGk1A

If you have a better setup suggestion or advise that you want to share with others, please add them in the comments!

After spending one month last summer in Estonia studying how democratization and cyber security interact, I'm looking for constructive criticism on a video I made about the CTF competitions for young Estonians and the future of e-voting.

After what's largely defined as world's first politically motivated cyber attack by Russia against Tallinn in 2007, Estonia moved to digitalize all of its government services, including voting. However, international cyber security experts dispute how secure ballots cast online are (Springall et al. 2014). Estonian prioritizes cyber security among young people by hosting the largest ethical hacking events in the Baltic States. Do you think advertising CTF competitions to young Estonians is enough to ensure the safety of i-voting in the world's first digital democracy?

https://youtu.be/Y298tboGz4o?si=dnm9BxgokOj4QsXr

Sources https://docs.google.com/document/d/1tJbjb9GNvzOB9dCHQtbDJaj7jtelrwxRNx6mpPKR6m8/edit?usp=sharing

We covered a binary vulnerable to format string vulnerability in which the vulnerable code contains an implementation of printf statement that takes the user input directly as an argument without input filtering or validation. This leads the attacker to submit format string specifiers such as %x, %n or %p to leak or even modify values on the stack.

Video is here

Writeup is here

We covered the boot2root challenge Athena from TryHackMe. We scanned the machine with Nmap and discovered SMB server from which we extracted a note that pointed us to a directory on the webserver where we discovered a ping tool running. We used command substitution to inject a bind shell and land the first foothold. We discovered a backup script running on a periodic basis as another user. We modified the script to execute reverse shell and opened another session as the user Athena. Upon enumeration, we found that the user Athena can load kernel modules as sudo using insmod without the need for root password. We downloaded the kernal module "venom.ko" and used Ghidra to reverse engineer the binary. We discovered that it's a rootkit and after code analysis we were able to interact with the module to call a function that escalated privileges from Athena to Root.

Video is here

Writeup is here

We covered and explained CVE-2023-4911 that affects mostly all Linux distributions and allows an attacker to escalate privileges to root. The vulnerability impacts the GNU C Library's dynamic loader, known as ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges. We used a lab setup specifically to try this exploit using TryHackMe Looney Tunables room.

Video is here

Writeup is here

In this video, I share some of my favorite CTF resources to help kick start a cyber security career! What’re your favorite beginner-friendly CTF sites? 👀

🚩

We covered the first hardware hacking challenge where we inspected a rootfs image and using the appropriate tools (unsquashfs) we mounted the image locally and discovered Linux directories. We searched and located the flag using the grep command. This was part of HackTheBox Photon Lockdown hardware challenge.

Writeup is here

Video is here

We used Burp Suite to demonstrate an experiment on enumerating sessions IDs created using PHP language. The source code used a vulnerable mechanism in creating the session ID by assigning a numerical value in a pre-determined range and linking it to the user's profile. When the session ID isn't randomly generated, it makes the web application vulnerable to session hijacking attacks. We used OverTheWire war games Natas Level 18 - 19 challenge for demonstration purposes.

Video is here

Writeup is here

We covered an incident response scenario that involved a using memory forensics to investigate the presence of a malware downloaded from email attachments. The scenario involved a memory dump and Volatility tools to perform memory investigation. We listed the processes running, the process tree and uncovered a Powershell process that was invoked after opening the attachment which was in PDF. We extracted strings from the PDF attachments to find the artifacts (the flag).

Video is here

Writeup is here

https://twitter.com/GoogleVRP/status/1710860215707668834?t=5d7xu3egRXrU_esvT7W8dA&s=19

The live streaming of Hackceler8 is starting at 2pm JST

We covered another hardware hacking challenge where we demonstrated an analysis of an archived file that was created by capturing data off the async serial interface of an embedded device. The objective was to decode the captured data and we used SALEAE logic analyzer to decode the data.

Video is here

Writeup is here

We covered an introduction to blockchain penetration testing by taking on a blockchain challenge from HackTheBox where we were presented with the challenge source code that included a code in solidity language with a couple functions that handle the challenge. We installed foundryup suite of tools to interact with the chain. We used cast tool to interact with the functions, namely loot(), strongattack() and punch() to solve the challenge.

Video is here

Writeup is here

In this video walk-through, we covered another example of a vulnerable binary to buffer overflow vulnerability. The binary has NX enabled to prevent code execution in the stack but our goal was to control the execution flow and redirect it to the "winner" function to print the flag. We generated a pattern to cause a segmentation fault then we used the address of the "winner" function so that the RIP register points to it after it hits the segmentation fault. This was part of HackTheBox Reg Intro to Binary Exploitation track.

Video is here

Writeup is here

We covered time based SQL injection using the sleep function. Time time based SQL injection relies in the response the web application takes to deduce whether there is an injection vulnerability or not. We used a lab scenario from OverTheWire Natas Level 17 that implements a web application which validates whether a user exists or not.

Video is here

Writeup is here

We covered OverTheWire Natas Level 16 CTF where we went over a blind SQL injection scenario that uses command substitution to bypass character filters. The character filters used preg_match function in PHP to create a blacklist of characters commonly used in SQL Injection.

Video is here

Writeup is here