CTF Walkthrough with John Hammond
Вставка
- Опубліковано 7 чер 2024
- John Hammond demonstrates a CTF walkthrough and also explains the tools and techniques he uses to be more efficient.
Menu:
0:00 ⏩ This stuff helps in your real world job
1:16 ⏩ Introduction
1:48 ⏩ picoCTF site
2:36 ⏩ Labs can be accessed at any time
3:12 ⏩ picoCTF labs
3:33 ⏩ First CTF walkthrough
3:57 ⏩ Favourite distro
4:07 ⏩ Linux natively or in a VM?
4:29 ⏩ First CTF solution
5:50 ⏩ Second CTF
9:51 ⏩ Skills that John recommends you get
12:12 ⏩ Linux and then Python and then CTFs
12:57 ⏩ Ubuntu vs Kali vs Parrot OS etc
14:04 ⏩ Kali in VM?
14:46 ⏩ What about writing reports or e-mail?
15:50 ⏩ Which application do you recommend?
17:05 ⏩ Do you dump knowledge into something?
18:38 ⏩ How do you manage all the data collected?
20:16 ⏩ Don't just do it and forget what you have done
21:10 ⏩ CTFs vs Real World
21:54 ⏩ Base64 and ideas
24:17 ⏩ John's VBscript example
25:58 ⏩ Second CTF solution
26:40 ⏩ CTFs vs Bug Bounty vs Real World
Previous video: • Are CTFs even real? Fe...
================
Connect with me:
================
Discord: / discord
Twitter: / davidbombal
Instagram: / davidbombal
LinkedIn: / davidbombal
Facebook: / davidbombal.co
TikTok: / davidbombal
UA-cam: / davidbombal
================
Connect with John:
================
UA-cam: / johnhammond010
Twitter: / _johnhammond
LinkedIn: / johnhammond010
================
Links:
================
picoCTF: picoctf.org/
Obsidian: obsidian.md/
Hack the box: www.hackthebox.eu/
Try Hack Me: tryhackme.com/
All-Army CyberStakes: www.acictf.com/
CTF Time: ctftime.org/ctf-wtf/
eLearn Security: elearnsecurity.com
OSCP: www.offensive-security.com/co...
CEH: www.eccouncil.org/programs/ce...
================
Support me:
================
DavidBombal.com: CCNA ($10): bit.ly/yt999ccna
Udemy CCNA Course: bit.ly/ccnafor10dollars
GNS3 CCNA Course: CCNA ($10): bit.ly/gns3ccna10
ctf
capture the flag
tryhackme
hackthebox
picoctf
picoctf 2021
base64
john hammond
cybersecurity
hack the box
try hack me
htb
thm
incident response
incident response cyber security
cyber security career
cybersecurity
cybersecurity careers
ceh
oscp
ine
oscp certification
ctf for beginners
first job
cybersecurity job
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
#cybersecurity #hacking #ctf - Наука та технологія
Menu:
0:00 ⏩ This stuff helps in your real world job
1:16 ⏩ Introduction
1:48 ⏩ picoCTF site
2:36 ⏩ Labs can be accessed at any time
3:12 ⏩ picoCTF labs
3:33 ⏩ First CTF walkthrough
3:57 ⏩ Favourite distro
4:07 ⏩ Linux natively or in a VM?
4:29 ⏩ First CTF solution
5:50 ⏩ Second CTF
9:51 ⏩ Skills that John recommends you get
12:12 ⏩ Linux and then Python and then CTFs
12:57 ⏩ Ubuntu vs Kali vs Parrot OS etc
14:04 ⏩ Kali in VM?
14:46 ⏩ What about writing reports or e-mail?
15:50 ⏩ Which application do you recommend?
17:05 ⏩ Do you dump knowledge into something?
18:38 ⏩ How do you manage all the data collected?
20:16 ⏩ Don't just do it and forget what you have done
21:10 ⏩ CTFs vs Real World
21:54 ⏩ Base64 and ideas
24:17 ⏩ John's VBscript example
25:58 ⏩ Second CTF solution
26:40 ⏩ CTFs vs Bug Bounty vs Real World
Previous video: ua-cam.com/video/u4u6ob13s2c/v-deo.html
================
Connect with me:
================
Discord: discord.com/invite/usKSyzb
Twitter: twitter.com/davidbombal
Instagram: instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
UA-cam: ua-cam.com/users/davidbombal
================
Connect with John:
================
UA-cam: ua-cam.com/users/johnhammond010
Twitter: twitter.com/_johnhammond
LinkedIn: www.linkedin.com/in/johnhammond010
================
Links:
================
picoCTF: picoctf.org/
Obsidian: obsidian.md/
Hack the box: www.hackthebox.eu/
Try Hack Me: tryhackme.com/
All-Army CyberStakes: www.acictf.com/
CTF Time: ctftime.org/ctf-wtf/
eLearn Security: elearnsecurity.com
OSCP: www.offensive-security.com/courses-and-certifications/
CEH: www.eccouncil.org/programs/certified-ethical-hacker-ceh/
================
Support me:
================
DavidBombal.com: CCNA ($10): bit.ly/yt999ccna
Udemy CCNA Course: bit.ly/ccnafor10dollars
GNS3 CCNA Course: CCNA ($10): bit.ly/gns3ccna10
Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
hello sir can you please help me to recover my hacked facebook account using python plzplz
That's why i love John Hammond he explain everything.
John explain everything , and david ask about everything , the perfect match
I greatly appreciate you breaking down the information that professionals discuss in the videos into a comprehensive manner that people of all levels can understand. Thank you David!
Two guys who are brilliant at explaining and have a great genuine love for cyber security and teaching great job
Thank you for watching!
Absolutely loved these series w/ John! Love even more the way David asks all of OUR burning questions! Thank you for all you do, David!
Thank you Debbie!
I love this stuff and channel. Thank you, David, for always having the crème de la crème.
One of the best Collaboration I've ever seen. Keep up the good work.
I'd been waiting for this. Amazing, as always. 👍🏻👍🏻
Such an amazing video by two of the best on UA-cam for sharing of info and understanding of Python, Linux and hacking.
Loving the new content , more CTF would be great
David, this ur interviews and demonstration sessions is encouraging, motivational and educative. Thank u so much!
thanks for all the effort and work on your channel. the topics are very educating and told in a intressing way.
Hello! I wanted to thank you for all the content and motivation you have given us. You have helped me a lot during my studyings. Thank you and I hope you keep admiring people !
Really happy to hear that :) Never give up!
Thank you David ❤️ 28 minutes worth of watching
Thank you David! I love the way you are like "Pretend I don't know anything and explain . . . "
Just pure awsomeness! Thanks Mr Bombal & Hammond!
You're welcome!
I keep on learning thanks to these - thanks David and John!
Thank you!
Holy moly, overthewire bandit is the best thing to dive in this field, ty David and John
28 minute 06 sec worthy watching both my favourite discussing this hard. David really extracted John's Mind and his ideas. Needed more collaborations guys
-Great to see the teachers together teaching, great video.
-I fully agree, with the part of distros that John explained, I use Mint on my machine because it has documentation and simple to do what is simple with it, I do not use Ubuntu, but I use Mint which is basically the same thing distro sons of debian so they really are the overwhelming majority of systems and communities are focused on it so simply if i don't know how to solve something right away you simply with your knowledge can find the log or something i know where to look and there is nothing to do not learn, but this is me who is a Linux core user, so in my case I really prefer to work on Linux,
-Alias the other day installing the IBM Cloud terminal for the course I was doing about it the script didn't work on Mint, great I opened the file and merely instead of not doing it I changed the script that until then said it didn't work on Linux Mint and installed it as magic, and served to learn more about the steps of the installation script.
-I'm a poor Brazilian engineer so my machines are much weaker than the ones that usually buy in Europe or USA so running on VM is much slower, so for performance reasons I use OS Bare metal, so I have on my note two Smaller SSDs, one with Linux and the other with Windows, because running one virtualized inside the other would cause a very big loss of performance.
-So as for using Linux I replied the other day that I am a Linux core user and do all my activities, and courses etc. in Linux, including the notes and terminals and basically for my activities as System Admin and Network Engineer practically nothing compels me to go to Windows, in fact recently I have been going to Windows just to make use of Microsoft tools like Teams to do a job interview and not even playing games I have been going to Windows because I am every day but focused and even that it's lagging behind at least until I have the levels I want in my professional skills.
-But another day in those Linkedin posts saying that Linux is the best OS and I commented that in IT for my activities Linux serves for servers and various activities for knowledgeable users there is not even anything to discuss.
-But it is not the case of a media professional who uses, (mandatorily even why his clients require) proprietary tools like Adobe's, or if he arrives with a raw GIMP file, the client won't even open it.
-Or if, for example, you work with a proprietary Microsoft system, which many companies must use, you will work in VM on your Linux machine ok, but if you arrive with a raw file in another tool or running an application in wine instead of Windows that is what the company uses on their servers they will not be happy.
-In short what is the best OS…?
-First ask yourself what the OS will be used for, the professional responds.
-Thanks for the knowledge teachers ... !!!
Good to see that you are talking about the main thing that matters in everyone life. Happy to see you again in future.😊 Keep it up.👍
Thank you!
Great stuff, nice seeing you 2 on this channel.
Thank you!
Binge watching your cybersecurity videos! kudos David and i'm very thankful for these legendary lessons! :D
Thank you Alex!
another one video with John Hanmmond , it was the video i was waiting since your last collab with him😊😉
plus your intro and outro tune is awesome
thank you Ayush!
your videos are amazing and I always use various information that u and your friends share with us.
Tnx alot
This Intro was Deadly Dashing Amazing
Thank you!
Awesome content! Thanks to the two of you.
Glad you like it!
Definitely a great discussion!
that second CTF task was not easy.. great vid.
Simply awesome David x John🔥❤🚀
Thank you Dharun
I have a PGI capture the flag test soon I’m really worried and I really wanna succeed i have learnt a lot from your videos tbh thank you David and John
David and John are absolute gods when motivating and inspiring and teaching...❤️🫂
thank you it actually works you're a king
This follow up is awesome too sir, hopefully you guys work together again soon!
Big fan. Both creater have great knowledge
Great David thanks for your information
Straight and Honest answer.
Love from india sir
Love u both John Hammond and David bombal sir ❤️ 🇮🇳
Thank you Likith!
Thanks for a very good video
Amazing video
Omg, I needed this if anything the note taking my problem is I have a million notes on 4 different devices/os’s my notes are a disaster tbh
I like this vid. Good insight.
I registered yesterday and I collected 1100 points during my lunch break. Cool
Love from India !❤❤
Greetings to you and your guest
Super vedio bro 😀😀
Awesome!
Thank you guru.
Great video, thank you! Would love to see John on your channel again - could you tell us If it will happen? :D
Hey David! thank you for this video, I'd like to know that will you be making more videos related to networking specifically
Yes. I have not forgotten about networking :) Just some stuff happening in the background. Hopefully I'll have some good news soon.
Thanks for the Great Content Love u david
thank you for watching!
The string found in the image metadata did not have an equal-sign at the end; how would one have recognised it as Base64? When applying the respective string to Base64 -d, the equal-sign was also absent. How may I understand this?
Big fun of you from Africa😊
Love this :)
Happy to hear that!
Thanks you sir God bless you
Thank you Kundai
Where can you learn what you’re supposed to type into the cmd?
Hi sir, Can u make a video about how to write resume.. I really like ur way and how u descripe every step and simplies it, thanks
19:00 "How do we become like you??" - this question is asked 2 times within 19 minutes where John was silent in the beginning. To answer that question, we need experiences of years in cyber forensics, security as well as solve more challenges of CTF. The only answer for this question is never give up.
Another one🔥🔥🔥🔥
Lots more coming :)
is there another vidro about ctf i searched in you playlists and found nothing, i liked the serie
Hi David can you do a video about splunk certs and what kind of job we have
How to install python 2 in vm and you already have python 3 and you want to keep both?
aside from learning a bit about pico, i love that there is a different note app that seems like a great alternate to MS onenote. thanks to you and @johnhammond for the info. i learned something i wasnt expecting :)
How can I discovery the SSID in the .png image file? I'm tryed with zsteg and others on kali
, and unsuccessful.
Hi David, Can you help me to get John's Malware analysis course like? I am interested to learn this from him. Can you please help me? Thank you so much to seeing both IT giants together giving us valuable knowledge...Love you from Bangladesh
Any suggestions of taking a affordable malware analysis depth research based course from John?
guys can i curious what are the extensiond the he use
that's what I'm talking about!
Hi bro you are legend
Thank you Syed!
Way to go!
Thank you!
@@davidbombal welcome Sir David! Always watching your stuff from the land of three stars and a sun, Philippines. Godbless!
Any suggestions for college for cyber security?
now the Information CTF raised to 20% from 17% - nothing serious, but I think, this video helped a bit...
Which app is at 20:12
Can I have Linux and Windows on the same PC, or will I have to quit windows and install Linux instead?
Hi sir I'm from india
I'm A beginner in cybersecuritys
I have a small doubt
without a wifi adaptor we can't hack the wifi YES or NO.
27.22 this clip surely let us know why ctf is better then penetest
at 6:15, it got really deep and almost made me cry. LMAO
Hey it's me commenting David
Thank you Aaj!
I liked to practice CTF from beginer to expert, suggest me a good platform??
TryHackMe and Hack The Box are both really great ressources to practice
This is very very nice 😂😂
Glad you enjoyed the video :)
@@davidbombal yes ofcourse I love it
@@davidbombal can you please make a video for making our own operating system please...
Love you from India 😁😁😁
@@davidbombal I like the cartoon character in the thumbnail with what did u made it
Do I need to use a vpn for cites like picoctf, HTB and try hack me?
How to install Kali on windows 10 when pc is not capable of virtualization
1st from India
Welcome India!
hi , I need some help with CTF for my Master Program task .... can anyone plz help me out .....
Dual legend walkthrough? I'm in
Hope you enjoy the video :)
Sir Bluetooth dos attack please 🙏🙏
I have just started out with python just remember my name i will be on tv one day for sure,😁😁😁
Look forward to it :)
@@davidbombal wont let you down master
What is your name? Remember your real name or your planet x name? Looking forward
@@ChanKe remember me planet x
I feel John's pain as he tries to adjust and deliver to complete nubes. It's a real challenge. It's like being an Olympic runner and trying to explain to toddlers how to lace up their shoes
David and John I'm a new follower of both, you guys are amazing. I'm making the transition from being an IT Engineer to IT security.
Probably helps to know you were once a nube too
It's really not that bad. It's not that newbies are toddlers either, it's that there's an extreme lack of quality information concerning Linux and just cybersecurity in general.
In fact, other than John, I'm sure some of the more popular and trusted influencers out there are giving out bad information and they don't even realize it.
Linux and cybersecurity isn't just a - use A tool, complete B task. It requires an entire shift of your frame of mind. Sounds poignant, I know, but it's essentially the truth.
*Noobies
Sir please Make Video On How To Hack Bluetooth
BTW, do you follow IPL?
First'🔥
Thank you for your support :)
Bitcoin is the future ,investing in it now is the wisest thing to do now especially the current rise
Despite all the economic crisis this is the right time to start up an investment
David Bombay sir, hi I am one of your subscriber ,I need to say you that don't make talk show, or meetings like video,,, do videos like error or dependices solving, hacking gadgets unboxing , experimenting with the gadgets , Introducing software..... These topic u can upload videos .u can see u r views of your video of tplink adapters and related videos to hacking and experimenting u got good views so make videos related to that and topics which have said above.......,thank u sir that is what I meant to tell to you..,, Let's hit one million subscribers sir
There are plenty other channels with your requested content. It is far better have 'Real conversations with Real people' than doing unboxing or having videos just to boost content.
And finally the views for Videos with 'Hacking' in their title is higher, because so many script kiddies are out there. David just utilises it wisely.
There's so much information giving out through this talks/interviews with people who are proven in this field. Try to understand.👍
Why is Ed Sheeran so interested in CTF ?
Plzzz create a telegram channel plzzz....
ed sheeran is that you?
How to bandel search for hacking and health is different situation I am facing you have in the handling for healthy ho to possible for you health not problem
whats the question? whats the answer? Someone doesn't want to answer!!!!
I don't use arch btw 😂
I'm 16 buh I don't knw if I would ever understand this
I'm late 😞
lol .... not really, video posted a few minutes ago