SaturdayMP Show 104: picoCTF (Small Trouble & Droids 4)

In this episode I (Chris), sorry no Omar, attempt some picoCTF (now CyLab) challenges. I picked the challenges randomly and ended up with a RSA (Small Trouble) and reverse engineering APK binary (Droids 4). Used the clanker (coding agent) to help with the APK challenge as I didn’t have a way to run the apk on my machine.

It was interesting to watch the clanker parse out the .so file. Have you used a clanker for cyber security? If so, what are your thoughts?

CyLab:
https://cylabacademy.org/

Write-up of solutions:
https://github.com/mrbiggred/picoctf

RSA Decoder:
https://www.dcode.fr/rsa-cipher

Omar:
https://www.ashour.ca/

SaturdayMP (Chris):
https://saturdaymp.com/

We usually record live every Monday around 10:00am-ish MDT and would love for you to join us. Have a question, constructive feedback, suggestion, and/or just want to say hi? Then comment, send a direct message (DM), or email to ask@saturdaymp.com.

Did you find this video worth your time? Then help others find it by liking, subscribing, sharing, and/or sponsoring:
https://github.com/sponsors/saturdaymp

Thanks for watching!

P.S. – Thumbnail created by the YouTube Get Suggestions AI. It actually generated 3 images but I just picked the first one. Good, bad, ugly? I also found the YouTube clanker logic interesting:

This concept follows the channel’s established style by using the signature faceless red-haired technician and two-tiered branding while clearly signaling a walkthrough of the specific CTF challenges mentioned in the title.

Why it works

This thumbnail works by leveraging the high-intent nature of CTF tutorials. The clear visual proof of a “solved” terminal screen, combined with a literal arrow pointing to the answer, creates a strong hook for viewers specifically looking for help with these challenges. It maintains perfect brand consistency with your existing content through the standardized lower-third graphics and character design, ensuring long-term channel recognition.

Posted in Saturday MP Show, Security | Tagged , , , , , , | Comments Off on SaturdayMP Show 104: picoCTF (Small Trouble & Droids 4)

SaturdayMP Show 103: HTTP Server in C (Part 1 – Listen is Working)

In this episode we start writing a custom HTTP Server in C because Omar wanted to learn more about HTTP, servers, and low-level networking. We get a simple app that listens on a port and writes out to the command line what was sent to it. We also have a good discussion about C strings at 1:08:53.

Part 2, if it happens, we will add an HTTP response. We are not very consistent.

How I Built a Simple HTTP Server from Scratch using C:
https://dev.to/jeffreythecoder/how-i-built-a-simple-http-server-from-scratch-using-c-739

Omar:
https://www.ashour.ca/

SaturdayMP:
https://saturdaymp.com/

We usually record live every Monday around 10:00am-ish MDT and would love for you to join us. Have a question, constructive feedback, suggestion, and/or just want to say hi? Then comment, send a direct message (DM), or email to ask@saturdaymp.com.

Did you find this video worth your time? Then help others find it by liking, subscribing, sharing, and/or sponsoring:
https://github.com/sponsors/saturdaymp

Thanks for watching!

Posted in Saturday MP Show, Software Development | Tagged , , | Comments Off on SaturdayMP Show 103: HTTP Server in C (Part 1 – Listen is Working)

SaturdayMP Show 102: PostCast (Part 15 – Slack Channel Selection)

In this episode Omar and I update PostCast so you can set the Slack channel instead of it being hardcoded. Progress at its finest.

We try out Figma for some design ideas, it goes OK. Then we try the design idea, find out we don’t like it and switch back to our original design. We also spend some more time figuring out how to do nested dialog calls in Fyne. It’s not intuitive, at least not to me.

I enjoy recording these episodes as it lets me experiment and try things I wouldn’t get to with client and other “real” work. Ping us if you have any questions, comments, suggestions, or what you would like to see on a future show.

*PostCast is just a place holder name and might change. The goofy PostCast placeholder image was generated by ChatGPT and will likely change.

Fyne:
https://fyne.io/

Slack Web API:
https://docs.slack.dev/apis/web-api/

Figma:
https://www.figma.com/

Weekly Dev Chat:
https://weeklydevchat.com/

Omar:
https://www.ashour.ca/

SaturdayMP:
https://saturdaymp.com/

PostCast Playlist:
https://www.youtube.com/playlist?list=PLYPcrKbLqwuvKQ97klk3bzyUPI6j154WC

Have a question you want answered in a future video? A challenging or interesting problem you want to see solved? Constructive feedback? Then comment, DM, or send an email to ask@saturdaymp.com.

Found this video useful? Then help others find it by liking, subscribing, sharing, and/or sponsoring:
https://github.com/sponsors/saturdaymp

Thanks for watching!

Posted in Saturday MP Show | Tagged , , , , | Comments Off on SaturdayMP Show 102: PostCast (Part 15 – Slack Channel Selection)

SaturdayMP Show 101: Solved picoCTF No Padding, No Problem Challenge

In this episode we solve the No Padding, No Problem @picoCTF challenge. It takes us a while as we try to remember how RSA works and figure out the weakness and formulas we need to us.

We leave our struggles in the video so people don’t feel like they are the only ones who can’t figure something out in 10 minutes. That said, you can watch the beginning then jump to 1:25:00 – where Omar figures out the formula to use.

Is there a better way to solve this problem? Let us know in the comments.

GitHub repo of the solution: https://github.com/mrbiggred/picoCTF/tree/main/no_padding_no_problem

picoCTF (now CyLab):
https://picoctf.org/

Wiki Page with the formula we used:
https://en.wikipedia.org/wiki/Malleability_(cryptography)

Omar:
https://www.ashour.ca/

SaturdayMP:
https://saturdaymp.com/

We record live every Monday morning around 10am-ish Mountain Daylight Time and invite you to join us. If you do join us, feel free to ask questions in the chat, and we will do our best to answer it. You can also send questions and other feedback to ask@satudaymp.com or in the comments.

Found this video useful? Then help others find it by liking, subscribing, sharing, and/or sponsoring:
https://github.com/sponsors/saturdaymp

Thanks for watching!

Posted in Uncategorized | Comments Off on SaturdayMP Show 101: Solved picoCTF No Padding, No Problem Challenge

SaturdayMP Show 100: PostCast Part 15 (LinkedIn Company Setup)

Our 100th episode! Not the episode we wanted as we forgot we needed to register with @linkedin to post messages as a company and then struggle to figure out how to handle multiple dialog forms in Fyne.

That said, a janky 100th episode fits with the theme of the SaturdayMP Show where we show our struggles and warts beside our successes.

Thank you to YouTube for letting me post these long videos for free. I know they make money of ads and other data, but it’s still nice of them.

Thanks to Omar for joining me for the past couple months. I really enjoy having someone be banter with, ask questions, and suggest things I never would have thought of or tried, such as doing live streams.

A big THANK YOU to those mighty few that have watched the videos. I make these videos because they let me play and learn outside of a client work, but it makes me smile that others find them useful and/or entertaining.

*PostCast is just a place holder name and might change. The goofy PostCast placeholder image was generated by ChatGPT and will likely change.

LinkedIn Post API:
https://learn.microsoft.com/en-us/linkedin/marketing/community-management/shares/posts-ap

Fyne Preferences:
https://docs.fyne.io/explore/preferences/

Fyne ShowForm:
https://docs.fyne.io/api/v2/dialog/package/#func–showform

Omar:
https://www.ashour.ca/

SaturdayMP:
https://saturdaymp.com/

PostCast Playlist:
https://www.youtube.com/playlist?list=PLYPcrKbLqwuvKQ97klk3bzyUPI6j154WC

We record live every Monday morning around 10am-ish Mountain Daylight Time and invite you to join us. If you do join us, feel free to ask questions in the chat, and we will do our best to answer it. You can also send questions and other feedback to ask@satudaymp.com or in the comments.

Found this video useful? Then help others find it by liking, subscribing, sharing, and/or sponsoring:
https://github.com/sponsors/saturdaymp

Thanks for watching!

Posted in Saturday MP Show, Uncategorized | Tagged , , , , | Comments Off on SaturdayMP Show 100: PostCast Part 15 (LinkedIn Company Setup)

SaturdayMP Show 99: Custom Ping Client – Part 2

In this live episode Omar and myself get the ping application working. Not the best written C code, but it works, after I figured out we need to run the application as root.

Ping – Manually create and send ICMP/IP packets:
https://inc0x0.com/icmp-ip-packets-ping-manually-create-and-send-icmp-ip-packets/

Wireshark:
https://www.wireshark.org/

Omar:
https://www.ashour.ca/

SaturdayMP:
https://saturdaymp.com/

Have a question you want answered in a future video? A challenging or interesting problem you want to see solved? Constructive feedback? Then comment, DM, or send an email to ask@saturdaymp.com.

Found this video useful? Then help others find it by liking, subscribing, sharing, and/or sponsoring:
https://github.com/sponsors/saturdaymp

Thanks for watching!

Posted in Code Examples, Saturday MP Show, Uncategorized | Tagged , , , , , , | Comments Off on SaturdayMP Show 99: Custom Ping Client – Part 2

SaturdayMP Show #98: Custom Ping Client

In this live episode Omar and myself try to write a low-level C app that does a network ping. Omar really wanted the app to be in C, so you get to watch me struggle to remember C syntax and translate bytes, chars, etc.

We do an OK job of explaining networking but a better job of explaining hex and how numbers are represented by bits (base 2) and bit shifting.

Hex and binary math:
https://www.youtube.com/live/Uv3LOT9b_sg?t=4675s

Bit shifting:
https://www.youtube.com/live/Uv3LOT9b_sg?t=5597s

Ping – Manually create and send ICMP/IP packets:
https://inc0x0.com/icmp-ip-packets-ping-manually-create-and-send-icmp-ip-packets/

Wireshark:
https://www.wireshark.org/

Omar:
https://www.ashour.ca/

SaturdayMP:
https://saturdaymp.com/

Have a question you want answered in a future video? A challenging or interesting problem you want to see solved? Constructive feedback? Then comment, DM, or send an email to ask@saturdaymp.com.

Found this video useful? Then help others find it by liking, subscribing, sharing, and/or sponsoring:
https://github.com/sponsors/saturdaymp

Thanks for watching!

Posted in Saturday MP Show | Tagged , , , , , , | Comments Off on SaturdayMP Show #98: Custom Ping Client

SaturdayMP Show #97: PostCast Part 14 (Slack Integration Working)

Happy Star Wars Day! In this live episode Omar and myself get the Slack integration working. At least a ruff draft of it that still needs some clean-up. We also discuss the lower level networking details like ports and sockets.

*PostCast is just a place holder name and might change. The goofy PostCast placeholder image was generated by ChatGPT and will likely change.

Slack API:
https://docs.slack.dev

Omar:
https://www.ashour.ca/

SaturdayMP:
https://saturdaymp.com/

PostCast Playlist:
https://www.youtube.com/playlist?list=PLYPcrKbLqwuvKQ97klk3bzyUPI6j154WC

Have a question you want answered in a future video? A challenging or interesting problem you want to see solved? Constructive feedback? Then comment, DM, or send an email to ask@saturdaymp.com.

Found this video useful? Then help others find it by liking, subscribing, sharing, and/or sponsoring:
https://github.com/sponsors/saturdaymp

Thanks for watching!

Posted in Saturday MP Show | Tagged , , , | Comments Off on SaturdayMP Show #97: PostCast Part 14 (Slack Integration Working)

SaturdayMP Show 96: PostCast Part 13 (Save Slack Token Using TDD)

In this live episode Omar and myself write and unit test the code for saving the Slack token to the keyring. We abandon using Testify mocks and instead add an in-memory setting for our credential manager. We also have a good discussion about test-driven development (TDD).

*PostCast is just a place holder name and might change. The goofy PostCast placeholder image was generated by ChatGPT and will likely change.

Zalando Go Keyring:
https://github.com/zalando/go-keyring

Mocking with Testify:
https://github.com/stretchr/testify

TDD:
https://en.wikipedia.org/wiki/Test-driven_development

Omar:
https://www.ashour.ca/

SaturdayMP:
https://saturdaymp.com/

PostCast Playlist:
https://www.youtube.com/playlist?list=PLYPcrKbLqwuvKQ97klk3bzyUPI6j154WC

Have a question you want answered in a future video? A challenging or interesting problem you want to see solved? Constructive feedback? Then comment, DM, or send an email to ask@saturdaymp.com.

Found this video useful? Then help others find it by liking, subscribing, sharing, and/or sponsoring:
https://github.com/sponsors/saturdaymp

Thanks for watching!

Posted in Saturday MP Show | Tagged , , , , | Comments Off on SaturdayMP Show 96: PostCast Part 13 (Save Slack Token Using TDD)

SaturdayMP Show 95: Passkeys Primer w/ Aaron Yong

In this episode Aaron Yong gives an overview of Passkeys and why you should use them. He also answers my naive questions about how they work.

Aaron runs Saikyo Softworks, a digital consultancy specializing in practical solutions for an ever-changing world. In his spare time he also runs the local Edmonton (YEG) Ruby, Python, and JavaScript meetup.

Passkeys IO:
https://www.passkeys.io/

Dev Edmonton JavaScript, Python & Ruby Meetup
https://devedmonton.com/meetups

Aaron Yong & Saikyo Softworks:
https://www.linkedin.com/in/ajyong/
https://www.linkedin.com/company/saikyo-softworks/

SaturdayMP:
https://saturdaymp.com/

Have a question you want answered in a future video? A challenging or interesting problem you want to see solved? Constructive feedback? Then comment, DM, or send an email to ask@saturdaymp.com.

Found this video useful? Then help others find it by liking, subscribing, sharing, and/or sponsoring:

https://github.com/sponsors/saturdaymp

Thanks for watching!

Posted in Saturday MP Show, Security | Tagged , , | Comments Off on SaturdayMP Show 95: Passkeys Primer w/ Aaron Yong