How hacking works (Workshop edition)
summary
Hands-on workshop shows exact exploit steps: a Flash front end gets decompiled and a student pulls 73 cinnamon buns exposing a server-side prize API and ultimately gifting the whole student body months of free pastries; a local Docker CTF repo runs challenges for crypto, binary and web labs; tools used are Docker, GDB, pwntools/Python, John the Ripper, Ghidra and netcat; demos include format-string memory leak to read flags, ROP overwrite to call a hidden win(), Tomcat PUT leading to JSP webshell, and an RSA example broken by close primes.
AI-written summary · about
chapters (24)
- 0:00🚀 Introduction: Meet Espen Larson
- 3:00What is Hacking? Breaking into Systems and Movies vs Reality
- 7:00Hackers’ Motivations – Understanding Black, White, and Gray Hats
- 10:00Why Do Hacks Happen? Human Errors, Complex Systems, and Dependencies
- 13:00The Cinnamon Bun Story: A Real-Life Security Incident
- 16:00Capture the Flag (CTF) Challenges: Learning through Gamified Hacking
- 18:00Tools for Hacking: Docker, GDB, Python, and More
- 20:00Section 1: Cryptography and Code Breaking
- 25:00Common Encoding Schemes: Morse Code, Base64, and URL Encoding
- 30:00Introduction to Hashing: How it Works and Common Hash Functions
- 35:00Encryption 101: Ciphers, Symmetric vs Asymmetric Encryption
- 40:00Section 2: Binary Exploitation
- 45:00Reverse Engineering with GDB and Ghidra
- 50:00Buffer Overflows and Format String Attacks
- 55:00Advanced Binary Exploits: Return-Oriented Programming (ROP)
- 1:00:00Real-World Binary Exploits and Labs
- 1:05:00Section 3: Web Exploitation
- 1:10:00Common Web Vulnerabilities: SQL Injection, XSS, and Prototype Pollution
- 1:15:00Exploiting Web Servers: Tools and Techniques for Web Hacking
- 1:20:00Server Misconfigurations and Leaks: A Case Study
- 1:35:00Exploiting JavaScript and Web Frameworks
- 1:40:00Advanced Web Exploits: Reverse Shells and Remote Code Execution
- 1:55:00Hands-On Labs and Exercises: Break Into Systems and Apply What You’ve Learned
- 2:15:00Conclusion: Improving Security by Thinking Like a Hacker
