How hacking works
summary
Shows concrete exploits: a return‑oriented programming demo that hijacks control flow with GDB, a printf format‑string leak that reveals remote environment variables and the flag, an image EXIF payload that makes PHP execute code, and a cookie deserialization RCE via node-serialize. Uses Ghidra and pwntools for reverse engineering and automation, runs on Kali/WSL and netcat for callbacks. Builds company CTFs that work — one attacker redeems 73 cinnamon‑bun prizes, legal deletes a DB during practice.
AI-written summary · about
chapters (12)
- 0:00Welcome
- 1:56Who I am and why I hack
- 8:47What hacking means
- 13:00Why systems get hacked
- 15:08Cinnamon bun hacking failure
- 21:06Learning via CTFs
- 28:32Reverse engineering demo
- 37:53Binary exploitation with Ghidra
- 46:01Web hacking with PHP/metadata
- 55:37Node.js deserialization exploit
- 1:01:23How to start hacking
- 1:03:23Q&A
