- 84
- 106 189
CTF Security
Nigeria
เข้าร่วมเมื่อ 7 มิ.ย. 2020
Heyyy welcome to ctf-sec, on this channel you will find videos on Ethical Hacking, Digital Forensics, CTF challenges, python programming and cybersecurity in general.
Hacking Pizza Paradise: Exploiting Client-Side Validation & Path Traversal | INTIGRITI 1337 2024
Join r007user as he tackles the Pizza Paradise challenge on INTIGRITI 1337UP 2024, focusing on bypassing client-side validation and exploiting path traversal vulnerabilities. Watch live as he breaks down the techniques and tools used to find and exploit security flaws. -- Watch live at www.twitch.tv/ctfsec
มุมมอง: 820
วีดีโอ
Twitch Live Stream: Ticketastic Demo Instance Part 1 - Manual SQL Exploit Walkthrough (Unfinished)
มุมมอง 512 หลายเดือนก่อน
Ticketastic Demo Instance, a web application designed for submitting and tracking support tickets. This session focuses on demonstrating how to manually exploit SQL vulnerabilities, highlighting real-world hacking techniques. Watch live at www.twitch.tv/ctfsec
File Inclusion to PHP Remote Code Execution (RCE): Gaining Control and Executing Arbitrary Commands
มุมมอง 1594 หลายเดือนก่อน
In this video, we explore how a File Inclusion vulnerability can be leveraged to achieve PHP Remote Code Execution (RCE). I demonstrate step-by-step how to identify this vulnerability, exploit it to gain control over the target system, and ultimately execute arbitrary commands on the server. Cody's first blog
Blind SQL Injection & Command Execution: Hacking the Hacker101 Photo Gallery CTF
มุมมอง 1504 หลายเดือนก่อน
In this video, we dive into the Hacker 101 Photo Gallery CTF challenge, revealing how we exploited Blind SQL Injection and Command Execution vulnerabilities to solve the challenge. Watch as we walk through the process of identifying and leveraging these weaknesses to gain access to sensitive information and execute arbitrary commands. Don’t forget to like, comment, and subscribe for more in-dep...
Deathnote CTF Walkthrough: File Upload Exploits, SSH Misconfig, File attributes & Docker Breakouts
มุมมอง 1735 หลายเดือนก่อน
Your mission, should you choose to accept it, is to delete the Death Note located in the root directory. The Death Note is a supernatural notebook that grants its user the power to kill anyone whose name and face they know by writing their name in the notebook while picturing their face.
Lab 05 - Part 2: Python Scripting to Dump Usernames & Passwords from PostgreSQL Database
มุมมอง 926 หลายเดือนก่อน
Welcome to Part 2 of Lab 05! This video automates the process showcased in Part 1, using Python Scripting to streamline dumping usernames and passwords from your PostgreSQL database Lab 05 Part 1 - Manual Exploitation th-cam.com/video/qtjleHoaO-Y/w-d-xo.html SQL injection Demystified th-cam.com/video/AWKGtYIr3Hs/w-d-xo.html Burpsuite setup for Pentesting th-cam.com/video/dJ0lJ63KXek/w-d-xo.html...
Lab 05 - Part 1: Manual Exploitation to Dump Usernames & Passwords from PostgreSQL Database
มุมมอง 746 หลายเดือนก่อน
In this video, we dive into Lab 05 of the PortSwigger series, demonstrating how to use SQL Injection to extract usernames and passwords from a PostgreSQL database. Follow along as we break down each step in the process Lab 05 - Part 2: Python Scripting th-cam.com/video/v9xGACPkFCw/w-d-xo.html SQL injection Demystified th-cam.com/video/AWKGtYIr3Hs/w-d-xo.html Burpsuite setup for Pentesting th-ca...
Lab 04 - SQL injection attack, querying the database type and version on MySQL and Microsoft
มุมมอง 2679 หลายเดือนก่อน
This lab contains a SQL injection vulnerability in the product category filter. You can use a UNION attack to retrieve the results from an injected query. To solve the lab, display the database version string. portswigger.net/web-security/sql-injection/examining-the-database/lab-querying-database-version-mysql-microsoft SQL injection Demystified th-cam.com/video/AWKGtYIr3Hs/w-d-xo.html Burpsuit...
Lab 03 - SQL Injection attack, querying the database type and version on Oracle
มุมมอง 14610 หลายเดือนก่อน
This lab contains a SQL injection vulnerability in the product category filter. You can use a UNION attack to retrieve the results from an injected query. To solve the lab, display the database version string. Lab URL portswigger.net/web-security/sql-injection/examining-the-database/lab-querying-database-version-oracle Lab Note and Script github.com/ctfsec/portswigger/tree/main/sqlinjection/lab...
Lab 02 - SQL Injection Vulnerability allowing login bypass
มุมมอง 15510 หลายเดือนก่อน
This lab contains a SQL injection vulnerability in the login function. To solve the lab, perform a SQL injection attack that logs in to the application as the administrator user. Lab Note and Script github.com/ctfsec/portswigger/tree/main/sqlinjection/lab-02 portswigger.net/web-security/sql-injection/lab-login-bypass SQL injection Demystified th-cam.com/video/AWKGtYIr3Hs/w-d-xo.html Burpsuite s...
Lab 01 - SQL Injection vulnerability in where clause allowing retrieval of hidden data
มุมมอง 31111 หลายเดือนก่อน
This lab contains a SQL injection vulnerability in the product category filter. When the user selects a category, To solve the lab, we will perform an SQL injection attack that causes the application to display one or more unreleased products. Lab Note and Script github.com/ctfsec/portswigger/tree/main/sqlinjection/lab-01 SQL injection Demystified th-cam.com/video/AWKGtYIr3Hs/w-d-xo.html Burpsu...
Burp Suite Setup, Configuration and Usage Guide for Pentesters
มุมมอง 35011 หลายเดือนก่อน
Learn how pentesters setup, configure, and use Burp Suite and its numerous tools for comprehensive Web Application Testing testing. Connect with me across various interactive platforms for a dynamic and connected experience. 🔗Discord: discord.com/invite/7Kq5hdyJYZ 🔗 Social Media: X (twitter) : @r007User Facebook : ctfsec 📺 Twitch www.twitch.tv/ctfsec 🌐 Website: r007us3r.github.io/ ...
SQL Injection Demystified: Complete Guide to Exploits, Types & Mitigation | Web Security Portswigger
มุมมอง 14911 หลายเดือนก่อน
SQL Injection Demystified: Complete Guide to Exploits, Types & Mitigation | Web Security Portswigger
AoC 2023 - Day 24 | Mobile Analysis using Autopsy Digital Forensics Tool [ Advent of Cyber ]
มุมมอง 15511 หลายเดือนก่อน
AoC 2023 - Day 24 | Mobile Analysis using Autopsy Digital Forensics Tool [ Advent of Cyber ]
AoC 2023 - Day 22 | SSRF Exploitation: Uncovering Local Files and AWS Metadata Access Keys
มุมมอง 11411 หลายเดือนก่อน
AoC 2023 - Day 22 | SSRF Exploitation: Uncovering Local Files and AWS Metadata Access Keys
AoC 2023 - Day 10 | SQL Injection | Using xp_cmdshell and Stacked Queries for Remote Code Execution
มุมมอง 25611 หลายเดือนก่อน
AoC 2023 - Day 10 | SQL Injection | Using xp_cmdshell and Stacked Queries for Remote Code Execution
AoC 2023 - Day 09 | Malware analysis | .NET Malware Sample Code Analysis [ Advent of Cyber ]
มุมมอง 72ปีที่แล้ว
AoC 2023 - Day 09 | Malware analysis | .NET Malware Sample Code Analysis [ Advent of Cyber ]
AoC 2023 - Day 08 | Recover Deleted Files with FTK Imager | Digital forensics [ Advent of Cyber ]
มุมมอง 258ปีที่แล้ว
AoC 2023 - Day 08 | Recover Deleted Files with FTK Imager | Digital forensics [ Advent of Cyber ]
AoC 2023 - Day 07 | Log analysis & Parsing Large Proxy log entries [ Advent of Cyber ]
มุมมอง 58ปีที่แล้ว
AoC 2023 - Day 07 | Log analysis & Parsing Large Proxy log entries [ Advent of Cyber ]
AoC 2023 - Day 06 | Buffer Overflow & Memory Corruption [ Advent of Cyber ]
มุมมอง 59ปีที่แล้ว
AoC 2023 - Day 06 | Buffer Overflow & Memory Corruption [ Advent of Cyber ]
AoC 2023 - Day 05 | Repairing File Magic Bytes / File Signature for File Recovery [Advent of Cyber]
มุมมอง 38ปีที่แล้ว
AoC 2023 - Day 05 | Repairing File Magic Bytes / File Signature for File Recovery [Advent of Cyber]
AoC 2023 - Day 04 | Login portal BRUTE FORCE & Custom WORDLIST using wfuzz & cewl [Advent of Cyber]
มุมมอง 70ปีที่แล้ว
AoC 2023 - Day 04 | Login portal BRUTE FORCE & Custom WORDLIST using wfuzz & cewl [Advent of Cyber]
AoC 2023 - Day 03 | PIN CODE brute forcing using CRUNCH and HYDRA [ Advent of Cyber ]
มุมมอง 232ปีที่แล้ว
AoC 2023 - Day 03 | PIN CODE brute forcing using CRUNCH and HYDRA [ Advent of Cyber ]
AoC 2023 - Day 02 | Using PANDAS Python Library to analyze network traffic data [ Advent of Cyber ]
มุมมอง 47ปีที่แล้ว
AoC 2023 - Day 02 | Using PANDAS Python Library to analyze network traffic data [ Advent of Cyber ]
AoC 2023 - Day 01 | CHATBOT Prompt Injection attack [ Advent of Cyber ]
มุมมอง 138ปีที่แล้ว
AoC 2023 - Day 01 | CHATBOT Prompt Injection attack [ Advent of Cyber ]
Websocket SQLi and Weak JWT Signing Key HS256 (HMAC-SHA256) - "INTIGRITI 1337UP Bug Report Repo
มุมมอง 151ปีที่แล้ว
Websocket SQLi and Weak JWT Signing Key HS256 (HMAC-SHA256) - "INTIGRITI 1337UP Bug Report Repo
SSTI bypass using CRLF (%OA) (INTIGRITI 1337UP CTF - Smarty Pants)
มุมมอง 258ปีที่แล้ว
SSTI bypass using CRLF (%OA) (INTIGRITI 1337UP CTF - Smarty Pants)
SSTI Command Execution and Filter Bypass in Jinja2 Template Engine - INTIGRITI 1337UP - Pizza Time
มุมมอง 607ปีที่แล้ว
SSTI Command Execution and Filter Bypass in Jinja2 Template Engine - INTIGRITI 1337UP - Pizza Time
Digital Detective: Tracing & Trailing a Photographer [INTIGRITI 1337UP OSINT - Photographs]
มุมมอง 168ปีที่แล้ว
Digital Detective: Tracing & Trailing a Photographer [INTIGRITI 1337UP OSINT - Photographs]
Breaking the Bank Exploiting Negative Values for Infinite Money (INTIGRITI 1337UP CTF - Bug Bank)
มุมมอง 154ปีที่แล้ว
Breaking the Bank Exploiting Negative Values for Infinite Money (INTIGRITI 1337UP CTF - Bug Bank)
I’m trying to finish this and keep up with my CS undergrad. I am drowning. Really just want to pass the theory exam and call it on this.
Nice one bros
How can we learn be go deep what your are teaching
good work bro, keep it up!
Thanks for sharing. The video was very helpful in my practice as a cybersecurity student.
Appreciate you checking it out.
Vibes man. I am finishing up the iLabs now for the CEH v12 and I am scheduling that joint soon. I am studying my butt off, but looking for where to focus more attention since it's such a broad exam. Thank you for your precious insight I will be a Certified Ethical Hacker
Send I need access to the email address in the video description
Hi bro can I have the link to the drive please thank you
Send I need access to the email in the video description
Hi I have sent an email to you for the materials. Could you please provide the same. It will be a great favour of yours
You will get access mail shortly
Hi sir can you please provide me the study material for the exams and i need your help please help sir
Send I need access to the email in video description
python script for hash cracking 😬😬😬 use hashcat or john the ripper
Thanks for the feedback! Good suggestion! This one’s about scripting, but I’ll use cracking tools next time.
nice video on the file inclusion. Helped me a lot
Thank you for your feedback please share the video.
Thank you please share me material
You welcome we will soon update with CEHv13 resources.
Hello, I have sent you an email
Sent
Not working, I think sendinblue now is brevo does not allow to do that
Hi, good morning. I sent you a mail yesterday about having access to your documents. Thank you
Ok will grant u access
@@ctf-sec thank you.
This sendinblue is it free
i also want the material
Drop a mail to the email in the video description.
nice video
Thank you for your feedback
Just send you an email. Would you mind sharing your materials
Ok will check it out
I need Access
Send a mail to the email address in the video description
Thank you for the video, pls share the materials ~
Send a mail to the email in the video description.
Good Day Bro, please share the study materials and guides . Am writing the exam next week .
Send a mail to the email in the video description.
it says email sent successfully but i didn't receive any email and i am using smtp brevo server
Try using a different email server.
obnoxius1927 is a cool password! idk what I should pick??... HmmMmm
Hey i would appreciate if you could share the link
Just send a mail to the email address in the video description.
helpfull, i have sent the mail
Check your drive.
Great video! Sent an email to your gmail in the video description!
Okay you get it in your email
Dude, Could you plz Grant me Access for the material drive ? I've sent you a mail :
Hi, thanks for the video. Is it possible to re-gain the original passwords? Two accounts on my password manager have been corrupted, how can i regain the original passwords
If the datas are still in the appropriate directories it should be possible.
@@ctf-sec Great! how is it possible?
Any steps to follow?
You are the best! I couldn't do the extra task and get the reverse shell.
Thanks a lot! Glad the video helped. Keep going strong.
Glad I stuck around till the end
CTF Security RCE here we come.
Thank you for always sticking around💯
Olajide... Found you from Twitter... Well done on the work you have done so far... Would love us to meet to do something together.. Wouldn't mind learning from You boss 😊
You can send a DM on discord.
Your from algeriaa ?
Nop Nigeria.
🔥 Welcome to the live premiere! Feel free to ask questions or share your thoughts in the chat
Hello 👋🏼 Hullo
Hii Inuwa
Yo, bro, your pic's all up in front of the code!
Noted
can u share the drive link i am a total beginner :)
Send a mail to the email in the video description
Hi, can you share the link of the Material in Drive?
Send a mail to the email in the video description.
Hey, can I have access to those materials please
Send a mail to the email in the video description
Mail sent. Can you please give access
Access Granted
@@ctf-sec thank you🙏
sir,i need access to your materials on your drive?
Send I need access to the email in the video description.
Hello, is this the CEH ANSI ?
Yes it is.
WOW man great video. enjoyed it!
Thank you for your feedback.
repo link
github.com/BishopFox/spoofcheck
can share you google drive ?
Send a mail to the email address in the video description
Nice one Olajide. Keep em coming bruv
Much appreciated 🙏
Please could you provide access to the drive. I have sent a mail as well
Send a mail to the email address in the video description
dude how much did you score? is 90 enough to pass? congrats on your achievement btw ❤
Scored 119. But 90 should be enough to pass the exam