Reverse Engineering Loops - "Syncopation" HackTheBox Business CTF

Поділитися
Вставка
  • Опубліковано 29 лис 2024

КОМЕНТАРІ • 58

  • @JCtheMusicMan_
    @JCtheMusicMan_ 3 роки тому +56

    This makes me cry 😢 I have no idea how you knew which values to copy from Ghidra and how you knew to take every 5th value and piece it together. This is beyond mind blowing because it went so far over my head I didn’t know what I was looking at. Very impressive that you have a deep enough understanding to be able to fly through these so fast.

    • @gloop1984
      @gloop1984 3 роки тому +9

      It’s written in the code on 6:11

    • @jkobain
      @jkobain 3 роки тому +5

      Ghidra does not reconstruct what's written originally (names of constants, internal functions, and variables), but it disassembles (ie, recreates) what the original code does. Thus, you can see what it performs.
      So yes, it's written (and referenced!) in the code, you probably just need to watch that fragment again with this knowledge.

    • @JCtheMusicMan_
      @JCtheMusicMan_ 3 роки тому +9

      @@gloop1984 That’s what I get for watching on my phone. 🤦‍♂️ I took a screenshot to see what he was talking about and he literally said it out loud. Thanks for pointing it out.

  • @aurinator
    @aurinator 8 місяців тому

    This one really stood out to me because it's the first time I've heard the word "Syncopation" outside of music production.

  • @juld-ck4ps
    @juld-ck4ps 3 роки тому +6

    Really enjoy this hackthebox ctf series, keep it up!!

  • @bobcooke90
    @bobcooke90 3 роки тому +7

    Awesome! You're a beast John!

  • @rameezrehman92
    @rameezrehman92 3 роки тому +2

    Hey... Thanks for the walkthrough.
    I am a noob. In the CTF, I didn't dive deep enough into the functions to understand what they were doing. I just browsed through the code and didn't find the flag and left. :-D
    Now I have a slightly better perspective on what (and how) to look for the things in ghidra.

  • @bech2342
    @bech2342 3 роки тому +7

    if you set it as char array with the right size, it would be show as string in ghidra

  • @bakor111
    @bakor111 3 роки тому

    I enjoy 10 minutes and the challange I can Understand

  • @aashwinsharma1607
    @aashwinsharma1607 3 роки тому

    Oh i Literally Loved it Sooo Much!!!
    Big Fan of yours

  • @jkobain
    @jkobain 3 роки тому +9

    Yes, Least Significant Bit, Least Significant Byte.
    And Linux Standard Base too…

  • @adminuser41
    @adminuser41 3 роки тому +2

    wow i still have a lot to learn

  • @JCtheMusicMan_
    @JCtheMusicMan_ 3 роки тому +2

    Always love your content!

  • @algerienizer
    @algerienizer 3 роки тому +2

    this was definitely useful and enjoyable!

  • @olympiawa
    @olympiawa 3 роки тому +1

    I have a very long way to go before I could begin to figure out a "simple" CTF. This would take me years.

  • @Karthikeya_patnala
    @Karthikeya_patnala 3 роки тому +2

    John The Ripper

  • @jakemuff9407
    @jakemuff9407 3 роки тому +2

    Interesting binary, what would happen if instead of every 5th entry it was a random number between 0 and 10 set off a certain seed? To solve you would then have to take the seed originally used to get the entries used in the flag

  • @ryd3v
    @ryd3v 3 роки тому

    Excellent

  • @hexadecimalhexadecimal5241
    @hexadecimalhexadecimal5241 3 роки тому

    Dude read my comment last stream, and decided to make a video on Ghidra FUCK YEAH!! booting up and following

  • @p0fs
    @p0fs 3 роки тому +2

    There’s Copy Special - Byte String, just that you know 😂

  • @TheCximus
    @TheCximus 3 роки тому +2

    I think that's what most people want to see... How did you install ghidra) and not how do you use it)

  • @cocosloan3748
    @cocosloan3748 3 роки тому

    Amazing ... And pls dont hate your life - Enjoy it !

  • @UmbraAtrox_
    @UmbraAtrox_ 3 роки тому

    heyo, i got this pic18 hex i want to dissect, i disassembled it into asm but I can't read assembly, is there a tool which can visualize the program? by visualize i mean a view like the gihdra program tree so i can learn to reverse smaller blocks since the whole thing is a bit much at once for my smallbrain. Help?

  • @mrmarker98
    @mrmarker98 3 роки тому +2

    Pog.

  • @johtodev
    @johtodev 3 роки тому +2

    have you tried ghidra version 10? (apparently some sort of debugger added) Would love to see how you would use it.

    • @coder_rc
      @coder_rc 3 роки тому +1

      The debugger sucks.

    • @johtodev
      @johtodev 3 роки тому

      @@coder_rc 😥 well dang

  • @fadhilsaheer8877
    @fadhilsaheer8877 3 роки тому +3

    "I hate my life"
    - John Hammond 2021 (Finding preferences
    )

  • @ma24th
    @ma24th 2 роки тому

    print(chr(data[i], end="")
    end varable use for new line

  • @ritwikpradhan8370
    @ritwikpradhan8370 3 роки тому

    Awesome 💥

  • @Lil_Majesty
    @Lil_Majesty 3 роки тому +4

    epico

  • @juneilquilana5159
    @juneilquilana5159 3 роки тому

    Wow. Great👍👏👏

  • @vaisakh_km
    @vaisakh_km 3 роки тому +1

    Hey go and sleep,your face seems like you didn't took a rest for a while...
    Great videos.....

  • @bruddaman32491
    @bruddaman32491 3 роки тому

    How hard is the OSCP cert compared to Hack the box machines?

    • @Lacsap3366
      @Lacsap3366 2 роки тому

      From what I've heard htb machines are more difficult. Are you planning ok taking the OSCP soon?

    • @bruddaman32491
      @bruddaman32491 2 роки тому

      @@Lacsap3366 yea in a couple of months once I get my diploma

    • @Lacsap3366
      @Lacsap3366 2 роки тому +1

      @@bruddaman32491 i am also close to getting my bachelor's degree

  • @lefteriseleftheriades7381
    @lefteriseleftheriades7381 3 роки тому

    Use ghidra refactor the code. Use the tool properly. REFACTOR

  • @Urugian
    @Urugian 3 роки тому

    WoW i love you video

  • @_vicary
    @_vicary 3 роки тому

    Ghee-dra or G-Hydra?

  • @Zc4sh
    @Zc4sh 3 роки тому

    How to write report

  • @custume
    @custume 3 роки тому

    nice crack

  • @hackingismylife2167
    @hackingismylife2167 3 роки тому

    I need a help

  • @CristiNeagu
    @CristiNeagu 3 роки тому

    9:18 Well, either buy Sublime (since you are using it professionally in some capacity) or use VS Code or VS Codium, which are perfectly free to use.

    • @cloud_cluster
      @cloud_cluster 3 роки тому

      how dare you

    • @CristiNeagu
      @CristiNeagu 3 роки тому

      @@cloud_cluster Easy there, Greta.

    • @Uerdue
      @Uerdue Рік тому

      Nah, he should've used vim there.

  • @petrovasyka8
    @petrovasyka8 3 роки тому

    What?

  • @Daniel-yp6mm
    @Daniel-yp6mm 3 роки тому +1

    4th wee wooo pog

  • @DJStompZone
    @DJStompZone 8 місяців тому

    Man. You open Ghidra in almost every single CTF video. And EVERY SINGLE TIME, you fumble around looking for the text zoom, and on the occasions where you end up actually finding it before giving up, you never show where the option even is! Frustrating to watch on several different levels. I know this is a petty complaint but c'mon man, write it down or something. This is your instrument, get to know it a bit before you play a concert on it.

  • @nullpointer4200
    @nullpointer4200 3 роки тому

    Huh, your level of reversing like a newbie, it’s looks like a joke when you solving this simple tasks

    • @manticore4952
      @manticore4952 3 роки тому +1

      Offer an improvement, don't just critique for the sake of criticism.

  • @bezdna7366
    @bezdna7366 3 роки тому

    amazing!