Security

In this episode I go over my plan for the month and then try a couple picoCTF problems. Successfully solved Verify and failed to figure out Trickster. Do you have any tips for me to solve Trickster?

Found this video useful? Then help others find it by liking, subscribing, sharing, and sponsoring.

In this episode I do some picoCTF exercises inspired by the picoCTF 2024 competition starting. The last problem was a Unicode byte problem that I figured out with help from GitHub Copilot. I don’t fully understand the solution so let me know if you do. Figuring out the bit math seems like a good future video.

Found this video useful? Then help others find it by liking, subscribing, sharing, and sponsoring.

Happy Holidays!

In this episode I do a walkthrough of the TPS Report Uploader capture the flag (CTF) I created. The walkthrough includes how to exploit the vulnerabilities and how to fix them in this .NET 8 Blazor application. You can try the CTF, or just follow along with the video, by downloading the TPS Report Uploader repo.

Tools used in this walkthrough:

In this stunning conclusion to the 3 part series I finally get HTTP Basic Authentication working. Including merging my changes into the main branch in GitLab and making sure it works in staging and production in Render. The video is so long because I made dumb mistake 10 minutes in.

Spoiler: When using the Passenger Docker image it’s really important you don’t delete:

RUN rm -f /etc/service/nginx/down

Found this video useful? Then help others find it by liking, subscribing, and sharing.

In this episode I find the root flag for the Busqueda machine on Hack the Box. Took a wrong turn looking for Gitea and Git vulnerabilities but eventually found the root flag with help from the walkthrough.

Watch part 2 of me hacking the Busqueda machine:

Thanks to Hack the Box for creating a playground for myself, and others, to learn cyber security skills. Thanks to kavigihan for creating the Busqueda machine.