Reverse Engineering Loops - "Syncopation" HackTheBox Business CTF

แชร์
ฝัง
  • เผยแพร่เมื่อ 9 มิ.ย. 2024
  • If you would like to support the channel and I, check out Kite! Kite is a coding assistant that helps you code faster, on any IDE offer smart completions and documentation. www.kite.com/get-kite/?... (disclaimer, affiliate link)
    For more content, subscribe on Twitch! / johnhammond010
    If you would like to support me, please like, comment & subscribe, and check me out on Patreon: / johnhammond010
    PayPal: paypal.me/johnhammond010
    E-mail: johnhammond010@gmail.com
    Discord: johnhammond.org/discord
    Twitter: / _johnhammond
    GitHub: github.com/JohnHammond

ความคิดเห็น • 58

  • @JCtheMusicMan_
    @JCtheMusicMan_ 2 ปีที่แล้ว +56

    This makes me cry 😢 I have no idea how you knew which values to copy from Ghidra and how you knew to take every 5th value and piece it together. This is beyond mind blowing because it went so far over my head I didn’t know what I was looking at. Very impressive that you have a deep enough understanding to be able to fly through these so fast.

    • @gloop1984
      @gloop1984 2 ปีที่แล้ว +8

      It’s written in the code on 6:11

    • @jkobain
      @jkobain 2 ปีที่แล้ว +5

      Ghidra does not reconstruct what's written originally (names of constants, internal functions, and variables), but it disassembles (ie, recreates) what the original code does. Thus, you can see what it performs.
      So yes, it's written (and referenced!) in the code, you probably just need to watch that fragment again with this knowledge.

    • @JCtheMusicMan_
      @JCtheMusicMan_ 2 ปีที่แล้ว +8

      @@gloop1984 That’s what I get for watching on my phone. 🤦‍♂️ I took a screenshot to see what he was talking about and he literally said it out loud. Thanks for pointing it out.

  • @juld-ck4ps
    @juld-ck4ps 2 ปีที่แล้ว +6

    Really enjoy this hackthebox ctf series, keep it up!!

  • @aurinator
    @aurinator 2 หลายเดือนก่อน

    This one really stood out to me because it's the first time I've heard the word "Syncopation" outside of music production.

  • @JCtheMusicMan_
    @JCtheMusicMan_ 2 ปีที่แล้ว +2

    Always love your content!

  • @bobcooke90
    @bobcooke90 2 ปีที่แล้ว +7

    Awesome! You're a beast John!

  • @aashwinsharma1607
    @aashwinsharma1607 2 ปีที่แล้ว

    Oh i Literally Loved it Sooo Much!!!
    Big Fan of yours

  • @rameezrehman92
    @rameezrehman92 2 ปีที่แล้ว +2

    Hey... Thanks for the walkthrough.
    I am a noob. In the CTF, I didn't dive deep enough into the functions to understand what they were doing. I just browsed through the code and didn't find the flag and left. :-D
    Now I have a slightly better perspective on what (and how) to look for the things in ghidra.

  • @algerienizer
    @algerienizer 2 ปีที่แล้ว +2

    this was definitely useful and enjoyable!

  • @bech2342
    @bech2342 2 ปีที่แล้ว +7

    if you set it as char array with the right size, it would be show as string in ghidra

  • @bakor111
    @bakor111 2 ปีที่แล้ว

    I enjoy 10 minutes and the challange I can Understand

  • @adminuser41
    @adminuser41 2 ปีที่แล้ว +2

    wow i still have a lot to learn

  • @jkobain
    @jkobain 2 ปีที่แล้ว +9

    Yes, Least Significant Bit, Least Significant Byte.
    And Linux Standard Base too…

  • @ryd3v
    @ryd3v 2 ปีที่แล้ว

    Excellent

  • @ritwikpradhan8370
    @ritwikpradhan8370 2 ปีที่แล้ว

    Awesome 💥

  • @olympiawa
    @olympiawa 2 ปีที่แล้ว +1

    I have a very long way to go before I could begin to figure out a "simple" CTF. This would take me years.

  • @bezdna7366
    @bezdna7366 2 ปีที่แล้ว

    amazing!

  • @jakemuff9407
    @jakemuff9407 2 ปีที่แล้ว +2

    Interesting binary, what would happen if instead of every 5th entry it was a random number between 0 and 10 set off a certain seed? To solve you would then have to take the seed originally used to get the entries used in the flag

  • @Karthikeya_patnala
    @Karthikeya_patnala 2 ปีที่แล้ว +2

    John The Ripper

  • @juneilquilana5159
    @juneilquilana5159 2 ปีที่แล้ว

    Wow. Great👍👏👏

  • @mrmarker98
    @mrmarker98 2 ปีที่แล้ว +2

    Pog.

  • @hexadecimalhexadecimal5241
    @hexadecimalhexadecimal5241 2 ปีที่แล้ว

    Dude read my comment last stream, and decided to make a video on Ghidra FUCK YEAH!! booting up and following

  • @cocosloan3748
    @cocosloan3748 2 ปีที่แล้ว

    Amazing ... And pls dont hate your life - Enjoy it !

  • @UmbraAtrox_
    @UmbraAtrox_ 2 ปีที่แล้ว

    heyo, i got this pic18 hex i want to dissect, i disassembled it into asm but I can't read assembly, is there a tool which can visualize the program? by visualize i mean a view like the gihdra program tree so i can learn to reverse smaller blocks since the whole thing is a bit much at once for my smallbrain. Help?

  • @Urugian
    @Urugian 2 ปีที่แล้ว

    WoW i love you video

  • @johtodev
    @johtodev 2 ปีที่แล้ว +2

    have you tried ghidra version 10? (apparently some sort of debugger added) Would love to see how you would use it.

    • @coder_rc
      @coder_rc 2 ปีที่แล้ว +1

      The debugger sucks.

    • @johtodev
      @johtodev 2 ปีที่แล้ว

      @@coder_rc 😥 well dang

  • @TheCximus
    @TheCximus 2 ปีที่แล้ว +2

    I think that's what most people want to see... How did you install ghidra) and not how do you use it)

  • @ma24th
    @ma24th ปีที่แล้ว

    print(chr(data[i], end="")
    end varable use for new line

  • @JP-wu1gi
    @JP-wu1gi 2 ปีที่แล้ว +4

    epico

  • @p0fs
    @p0fs 2 ปีที่แล้ว +2

    There’s Copy Special - Byte String, just that you know 😂

    • @nirmitshah7660
      @nirmitshah7660 2 ปีที่แล้ว

      Hey p0fs?

    • @p0fs
      @p0fs 2 ปีที่แล้ว

      @@nirmitshah7660 yup )

  • @fadhilsaheer8877
    @fadhilsaheer8877 2 ปีที่แล้ว +3

    "I hate my life"
    - John Hammond 2021 (Finding preferences
    )

  • @vaisakhkm783
    @vaisakhkm783 2 ปีที่แล้ว +1

    Hey go and sleep,your face seems like you didn't took a rest for a while...
    Great videos.....

  • @bruddaman32491
    @bruddaman32491 2 ปีที่แล้ว

    How hard is the OSCP cert compared to Hack the box machines?

    • @Lacsap3366
      @Lacsap3366 2 ปีที่แล้ว

      From what I've heard htb machines are more difficult. Are you planning ok taking the OSCP soon?

    • @bruddaman32491
      @bruddaman32491 2 ปีที่แล้ว

      @@Lacsap3366 yea in a couple of months once I get my diploma

    • @Lacsap3366
      @Lacsap3366 2 ปีที่แล้ว +1

      @@bruddaman32491 i am also close to getting my bachelor's degree

  • @custume
    @custume 2 ปีที่แล้ว

    nice crack

  • @_vicary
    @_vicary 2 ปีที่แล้ว

    Ghee-dra or G-Hydra?

  • @Zc4sh
    @Zc4sh 2 ปีที่แล้ว

    How to write report

  • @lefteriseleftheriades7381
    @lefteriseleftheriades7381 2 ปีที่แล้ว

    Use ghidra refactor the code. Use the tool properly. REFACTOR

  • @hackingismylife2167
    @hackingismylife2167 2 ปีที่แล้ว

    I need a help

  • @Daniel-yp6mm
    @Daniel-yp6mm 2 ปีที่แล้ว +1

    4th wee wooo pog

  • @petrovasyka8
    @petrovasyka8 2 ปีที่แล้ว

    What?

  • @CristiNeagu
    @CristiNeagu 2 ปีที่แล้ว

    9:18 Well, either buy Sublime (since you are using it professionally in some capacity) or use VS Code or VS Codium, which are perfectly free to use.

    • @cloud_cluster
      @cloud_cluster 2 ปีที่แล้ว

      how dare you

    • @CristiNeagu
      @CristiNeagu 2 ปีที่แล้ว

      @@cloud_cluster Easy there, Greta.

    • @Uerdue
      @Uerdue ปีที่แล้ว

      Nah, he should've used vim there.

  • @DJStompZone
    @DJStompZone 3 หลายเดือนก่อน

    Man. You open Ghidra in almost every single CTF video. And EVERY SINGLE TIME, you fumble around looking for the text zoom, and on the occasions where you end up actually finding it before giving up, you never show where the option even is! Frustrating to watch on several different levels. I know this is a petty complaint but c'mon man, write it down or something. This is your instrument, get to know it a bit before you play a concert on it.

  • @nullpointer4200
    @nullpointer4200 2 ปีที่แล้ว

    Huh, your level of reversing like a newbie, it’s looks like a joke when you solving this simple tasks

    • @manticore4952
      @manticore4952 2 ปีที่แล้ว +1

      Offer an improvement, don't just critique for the sake of criticism.