SaturdayMP Show 76: Hack the Box – Lock (Part 2 – Both Flags)

Part 2 of the Lock machine. I was able to capture both the user and system flags with the help of the walkthrough. My biggest learning was with the MSI Installer bug where you can use the installer repair action to elevate yourself from Guest to System Administrator.

Part 1:
https://youtu.be/M6CMolFPnGs

Hack the Box Lock Machine:
https://app.hackthebox.com/machines/Lock

Microsoft Windows MSI Installer – Repair to SYSTEM – A detailed journey
https://sec-consult.com/blog/detail/msi-installer-repair-to-system-a-detailed-journey/

Thanks to @HackTheBox and users xct and kozmer for creating the Lock machine:
https://app.hackthebox.com/users/13569
https://app.hackthebox.com/users/637320

Have a question you want answered in a future video? A challenging or interesting problem you need you want to see solved? Constructive feedback? Then comment, DM me, or send an email to ask@saturdaymp.com.

Found this video useful? Then help others find it by liking, subscribing, sharing, and/or sponsoring:
https://github.com/sponsors/saturdaymp

Thank you for watching!

Posted in Saturday MP Show, Security | Tagged , , | Comments Off on SaturdayMP Show 76: Hack the Box – Lock (Part 2 – Both Flags)

XPlugins.iOS.BEMCheckBox version 8, 9, and 10 released!

I’m pleased to announce that versions 8.0.0, 9.0.0, and 10.0.0 of the XPlugin.iOS.BEMCheckBox have been released. XPlugin.iOS.BEMCheckBox allows you to use the iOS BEMCheckBox, created by Boris Emorine (Boris-Em), in your MAUI projects.

You can find the releases on NuGet:

https://www.nuget.org/packages/SaturdayMP.XPlugins.iOS.BEMCheckBox

XPlugin project:

https://github.com/saturdaymp/XPlugins.iOS.BEMCheckBox

BEMCheckBox project:

https://github.com/saturdaymp/BEMCheckBox

The XPlugin.iOS.BEMCheckBox versions now match the .NET version so version 8 targets .NET 8, version 9 targets.NET 9, and so on. Version 8 and onwards use BEMCheckBox v2.2.0, which requires iOS 18 or higher.

I think I have the targeting and minimum iOS versions set up correctly in the project and the NuGet package, but if you spot a mistake, please let me know by opening an issue:

https://github.com/saturdaymp/XPlugins.iOS.BEMCheckBox/issues

Feel free to open issues for other improvements for either the XPlugin wrapper or BEMCheckbox. Happy coding!

Posted in Releases | Tagged , , , , | Comments Off on XPlugins.iOS.BEMCheckBox version 8, 9, and 10 released!

SaturdayMP Show 75: Hack the Box – Lock (Part 1, Almost Captured the User Flag)

In this episode I attempt the Lock machine on  ⁨@HackTheBox⁩ . Spoiler: I almost captured the user flag but ran out of time. Got delayed by installing items on my new Kali Linux WSL and learning new about MSFvemon, setting Python virtual environments, and the Cryptodome library.

Hopefully, the next video will be capturing the user and root flags. The joys of mostly live videos where you get to watch me struggle and hopefully we learn together.

Hack the Box:
https://www.hackthebox.com/

WSL:
https://learn.microsoft.com/en-us/windows/wsl/

IIS:
https://www.iis.net/

MSFvemon:
https://www.offsec.com/metasploit-unleashed/msfvenom/

Python venv:
https://docs.python.org/3/tutorial/venv.html

Have a question you want answered in a future video? A challenging or interesting problem you need you want to see solved? Constructive feedback? Then comment, DM me, or send an email to ask@saturdaymp.com.

Found this video useful? Then help others find it by liking, subscribing, sharing, and/or sponsoring:

https://github.com/sponsors/saturdaymp

Thank you for watching!

Posted in Saturday MP Show, Security | Tagged , , | Comments Off on SaturdayMP Show 75: Hack the Box – Lock (Part 1, Almost Captured the User Flag)

SaturdayMP Show 74: Migrate From Rails to Jekyll (Part 7 or 7)

The final episode in porting the SaturdayMP website from Rails to Jekyll where I update the DNS entries to point to the GitHub Pages site.

Playlist:
https://www.youtube.com/playlist?list=PLYPcrKbLqwutOPHv6zimONxErY7ke9tWn

Jekyll:
https://jekyllrb.com/

GitHub Pages:
https://docs.github.com/en/pages

EasyDNS:
https://easydns.com/

Found this video useful? Then help others find it by liking, subscribing, sharing, and/or sponsoring:

https://github.com/sponsors/saturdaymp

Have a question you want answered in a future video? Constructive feedback? A challenging or interesting problem you need a hand with? Then comment, DM me, or send an email to ask@saturdaymp.com.

Posted in Saturday MP Show | Tagged , , , | Comments Off on SaturdayMP Show 74: Migrate From Rails to Jekyll (Part 7 or 7)

BEMCheckBox v2.2.0 Released!

I’m pleased to announce that v2.2.0 of the BEMCheckBox has been released! This release builds an xcframework instead of a lipo binary. More details can be found in the release notes.

I was made aware of the change from lipo to xcframework when trying to add v2.1.0 of the BEMCheckBox to a .NET 8 version of the XPlugins.iOS.BEMCheckBox project.

BEMCheckBox makes it easy to create beautiful, highly customizable, animated checkboxes for iOS. You can learn more about the project here.

BEMCheckBox Example Gif

Truth be told, I’m not very familiar with Xcode/Swift development, so if anyone notices any issues, please let me know by opening an issue or a pull request. Especially with the accessibility features as this is my first time adding them.

Thank you Boris-Em for creating BEMCheckBox. Myself, and likely lots of other people, really appreciate it.

Posted in Releases | Tagged | Comments Off on BEMCheckBox v2.2.0 Released!

SaturdayMP Show 73: Migrate From Rails to Jekyll (Part 6)

No major hiccups in this episode, just several small tasks such as migrating the about and contact us pages, the favicon, and updating the documentation. All are done using Claude Code.

Only one more step to update DNS entries, which I think I’ll make a video for. If you want to see the DNS entries update video, let me know.

Part 5:
https://youtu.be/eRCGlsGHNNM

Jekyll:
https://jekyllrb.com/

Claude Code Visual Studio Extension:
https://docs.claude.com/en/docs/claude-code/vs-code

Found this video useful? Then help others find it by liking, subscribing, sharing, and sponsoring. Have question you want answered in a future video? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Need help shipping secure high-quality software faster? Check out Saturday Morning Productions.

Posted in Code Examples, Saturday MP Show, Software Development | Tagged , , , , | Comments Off on SaturdayMP Show 73: Migrate From Rails to Jekyll (Part 6)

SaturdayMP Show 72: Migrate From Rails to Jekyll (Part 5)

In this episode I fix the SASS depreciation warnings for @import and other statements. By fix I mean just ignore them as Bootstrap does not yet support the new @use and @forward.

Part 4:
https://youtu.be/eJbMn75dQKo Jekyll: https://jekyllrb.com/

Bootstrap:
https://getbootstrap.com/

SASS and Bootstrap:
https://sass-lang.com/documentation/breaking-changes/import/
https://github.com/twbs/bootstrap/pull/41236

Have a question you want answered in a future video? Constructive feedback? A challenging or interesting problem you need a hand with? Then comment, DM me, or send an email to ask@saturdaymp.com.

Found this video useful? Then help others find it by liking, subscribing, sharing, and sponsoring. Have question you want answered in a future video? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Need help shipping secure high-quality software faster? Check out Saturday Morning Productions.

Posted in Code Examples, Saturday MP Show, Software Development | Tagged , , , , | Comments Off on SaturdayMP Show 72: Migrate From Rails to Jekyll (Part 5)

SaturdayMP Show 71: Migrate From Rails to Jekyll (Part 4)

In this episode I fixe the broken build from the last episode. I also created a Bootstrap plugin to find the Bootstrap SCSS path to load with the help of Claude Code. Spoiler: I’m still not done, so there will be a part 5. Will it ever end?

Previous video:
https://youtu.be/0s_3jVIttnc

Jekyll:
https://jekyllrb.com/

Bootstrap:
https://getbootstrap.com/

GitHub Pages:
https://docs.github.com/en/pages

Claude Code:
https://www.claude.com/product/claude-code

Have question you want answered in a future video? Constructive feedback? A challenging or interesting problem you need a hand with? Then comment, DM me, or send an email to ask@saturdaymp.com.

Posted in Code Examples, Saturday MP Show, Software Development | Tagged , , , , | Comments Off on SaturdayMP Show 71: Migrate From Rails to Jekyll (Part 4)

BEMCheckBox v2.1.0 Released!

I’m pleased to announce that v2.1.0 of the BEMCheckBox has been released! This release adds basic accessibility support and updates the minimum iOS version from 12 to 18. More details can be found in the release notes.

BEMCheckBox makes it easy to create beautiful, highly customizable, animated checkboxes for iOS. You can learn more about the project here.

BEMCheckBox Example Gif

Truth be told, I’m not very familiar with Xcode/Swift development, so if anyone notices any issues, please let me know by opening an issue or a pull request. Especially with the accessibility features as this is my first time adding them.

Thank you Boris-Em for creating BEMCheckBox. Myself, and likely lots of other people, really appreciate it.

Posted in Releases | Tagged | Comments Off on BEMCheckBox v2.1.0 Released!

SaturdayMP Show 70: Migrate From Rails to Jekyll Part 3

I’m still not done migrating to Jekyll. In this video I struggle to get Bootstrap customizations working with Jekyll, and I figure out that GitHub Pages gem will use the Primer theme by default. I then break the build by trying to remove the Primer theme.

Found this video useful? Then help others find it by liking, subscribing, sharing, and sponsoring. Have question you want answered in a future video? Pair on a problem? Constructive feedback? Send an email to ask@saturdaymp.com.

Posted in Code Examples, Saturday MP Show, Software Development | Tagged , , , | Comments Off on SaturdayMP Show 70: Migrate From Rails to Jekyll Part 3