How hacking works - Web edition
summary
Packed demos that show exactly how things get pwned: a native binary uses buffer overflow to hijack a return address (GDB + pwndbg, little‑endian payloads) to call a hidden win() and reveal a flag; an Express app evaluates user input so remote shell via Function constructor spawns /bin/bash and connects back with nc; an Apache Tomcat misconfiguration allows JSP upload via HTTP PUT (CVE-2017-...) to drop a webshell and read secrets; real examples include 73 fraudulent cinnamon‑bun redemptions and a lawyer who deleted a DB via SQL injection.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 8:56Defining hacking
- 17:21Offensive security with CTFs
- 25:55Buffer overflow demo
- 33:30Web exploit via JS constructor
- 40:18Tomcat misconfiguration
- 45:11Node.js deserialization
- 51:20Key takeaways and call to action
