In this episode I solve two CyLab, previously picoCTF, challenges: Vault Door 6 and Scavenger Hunt. Vault Door 6 involves bit masking using XOR, and Scavenger Hunt is a fun little hunt for parts of the flag in various website files.
CyLab Security Academy (previously picoCTF):
https://cylabacademy.org/
In this episode I (Chris), sorry no Omar, attempt some picoCTF (now CyLab) challenges. I picked the challenges randomly and ended up with a RSA (Small Trouble) and reverse engineering APK binary (Droids 4). Used the clanker (coding agent) to help with the APK challenge as I didn’t have a way to run the apk on my machine.
It was interesting to watch the clanker parse out the .so file. Have you used a clanker for cyber security? If so, what are your thoughts?
[Read More]Part 2 of the Lock machine. I was able to capture both the user and system flags with the help of the walkthrough. My biggest learning was with the MSI Installer bug where you can use the installer repair action to elevate yourself from Guest to System Administrator.
[Read More]In this episode I attempt the Lock machine on @HackTheBox . Spoiler: I almost captured the user flag but ran out of time. Got delayed by installing items on my new Kali Linux WSL and learning new about MSFvemon, setting Python virtual environments, and the Cryptodome library.
[Read More]