In this episode I (Chris), sorry no Omar, attempt some picoCTF (now CyLab) challenges. I picked the challenges randomly and ended up with a RSA (Small Trouble) and reverse engineering APK binary (Droids 4). Used the clanker (coding agent) to help with the APK challenge as I didn’t have a way to run the apk on my machine.
It was interesting to watch the clanker parse out the .so file. Have you used a clanker for cyber security? If so, what are your thoughts?
[Read More]In this episode Aaron Yong gives an overview of Passkeys and why you should use them. He also answers my naive questions about how they work.
Aaron runs Saikyo Softworks, a digital consultancy specializing in practical solutions for an ever-changing world. In his spare time he also runs the local Edmonton (YEG) Ruby, Python, and JavaScript meetup.
Passkeys IO:
https://www.passkeys.io/
Part 2 of the Lock machine. I was able to capture both the user and system flags with the help of the walkthrough. My biggest learning was with the MSI Installer bug where you can use the installer repair action to elevate yourself from Guest to System Administrator.
[Read More]In this episode I attempt the Lock machine on @HackTheBox . Spoiler: I almost captured the user flag but ran out of time. Got delayed by installing items on my new Kali Linux WSL and learning new about MSFvemon, setting Python virtual environments, and the Cryptodome library.
[Read More]In this episode I solve the Forbidden Paths and Login picoCTF challenges. You can find the source code in the video here.
Found this video useful? Then help others find it by liking, subscribing, sharing, and sponsoring. Have question you want answered in a future video? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.
[Read More]