CTF Walkthrough with John Hammond

173,292
0
Published 2021-05-05
John Hammond demonstrates a CTF walkthrough and also explains the tools and techniques he uses to be more efficient.

Menu:
0:00 ⏩ This stuff helps in your real world job
1:16 ⏩ Introduction
1:48 ⏩ picoCTF site
2:36 ⏩ Labs can be accessed at any time
3:12 ⏩ picoCTF labs
3:33 ⏩ First CTF walkthrough
3:57 ⏩ Favourite distro
4:07 ⏩ Linux natively or in a VM?
4:29 ⏩ First CTF solution
5:50 ⏩ Second CTF
9:51 ⏩ Skills that John recommends you get
12:12 ⏩ Linux and then Python and then CTFs
12:57 ⏩ Ubuntu vs Kali vs Parrot OS etc
14:04 ⏩ Kali in VM?
14:46 ⏩ What about writing reports or e-mail?
15:50 ⏩ Which application do you recommend?
17:05 ⏩ Do you dump knowledge into something?
18:38 ⏩ How do you manage all the data collected?
20:16 ⏩ Don't just do it and forget what you have done
21:10 ⏩ CTFs vs Real World
21:54 ⏩ Base64 and ideas
24:17 ⏩ John's VBscript example
25:58 ⏩ Second CTF solution
26:40 ⏩ CTFs vs Bug Bounty vs Real World

Previous video:    • Are CTFs even real? Featuring John Ha...  

================
Connect with me:
================
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: youtube.com/davidbombal

================
Connect with John:
================
YouTube: youtube.com/johnhammond010
Twitter: twitter.com/_johnhammond
LinkedIn: www.linkedin.com/in/johnhammond010

================
Links:
================
picoCTF: picoctf.org/
Obsidian: obsidian.md/
Hack the box: www.hackthebox.eu/
Try Hack Me: tryhackme.com/
All-Army CyberStakes: www.acictf.com/
CTF Time: ctftime.org/ctf-wtf/
eLearn Security: elearnsecurity.com/
OSCP: www.offensive-security.com/courses-and-certificati…
CEH: www.eccouncil.org/programs/certified-ethical-hacke…

================
Support me:
================
DavidBombal.com: CCNA ($10): bit.ly/yt999ccna
Udemy CCNA Course: bit.ly/ccnafor10dollars
GNS3 CCNA Course: CCNA ($10): bit.ly/gns3ccna10

ctf
capture the flag
tryhackme
hackthebox
picoctf
picoctf 2021
base64
john hammond
cybersecurity
hack the box
try hack me
htb
thm
incident response
incident response cyber security
cyber security career
cybersecurity
cybersecurity careers
ceh
oscp
ine
oscp certification
ctf for beginners
first job
cybersecurity job

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

#cybersecurity #hacking #ctf

All Comments (21)
  • @davidbombal
    Menu: 0:00 ⏩ This stuff helps in your real world job 1:16 ⏩ Introduction 1:48 ⏩ picoCTF site 2:36 ⏩ Labs can be accessed at any time 3:12 ⏩ picoCTF labs 3:33 ⏩ First CTF walkthrough 3:57 ⏩ Favourite distro 4:07 ⏩ Linux natively or in a VM? 4:29 ⏩ First CTF solution 5:50 ⏩ Second CTF 9:51 ⏩ Skills that John recommends you get 12:12 ⏩ Linux and then Python and then CTFs 12:57 ⏩ Ubuntu vs Kali vs Parrot OS etc 14:04 ⏩ Kali in VM? 14:46 ⏩ What about writing reports or e-mail? 15:50 ⏩ Which application do you recommend? 17:05 ⏩ Do you dump knowledge into something? 18:38 ⏩ How do you manage all the data collected? 20:16 ⏩ Don't just do it and forget what you have done 21:10 ⏩ CTFs vs Real World 21:54 ⏩ Base64 and ideas 24:17 ⏩ John's VBscript example 25:58 ⏩ Second CTF solution 26:40 ⏩ CTFs vs Bug Bounty vs Real World Previous video: https://youtu.be/u4u6ob13s2c ================ Connect with me: ================ Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: youtube.com/davidbombal ================ Connect with John: ================ YouTube: youtube.com/johnhammond010 Twitter: twitter.com/_johnhammond LinkedIn: www.linkedin.com/in/johnhammond010 ================ Links: ================ picoCTF: picoctf.org/ Obsidian: obsidian.md/ Hack the box: www.hackthebox.eu/ Try Hack Me: tryhackme.com/ All-Army CyberStakes: www.acictf.com/ CTF Time: ctftime.org/ctf-wtf/ eLearn Security: elearnsecurity.com/ OSCP: www.offensive-security.com/courses-and-certificati… CEH: www.eccouncil.org/programs/certified-ethical-hacke… ================ Support me: ================ davidbombal.com/: CCNA ($10): bit.ly/yt999ccna Udemy CCNA Course: bit.ly/ccnafor10dollars GNS3 CCNA Course: CCNA ($10): bit.ly/gns3ccna10 Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!
  • @Esteban7GT
    I greatly appreciate you breaking down the information that professionals discuss in the videos into a comprehensive manner that people of all levels can understand. Thank you David!
  • @jamesfinlay1364
    Two guys who are brilliant at explaining and have a great genuine love for cyber security and teaching great job
  • @cyberc0l0mbiana
    Absolutely loved these series w/ John! Love even more the way David asks all of OUR burning questions! Thank you for all you do, David!
  • I love this stuff and channel. Thank you, David, for always having the crème de la crème.
  • One of the best Collaboration I've ever seen. Keep up the good work.
  • @JSp3ct0r
    I'd been waiting for this. Amazing, as always. 👍🏻👍🏻
  • @aaronag7876
    Such an amazing video by two of the best on YouTube for sharing of info and understanding of Python, Linux and hacking.
  • @d21852
    Loving the new content , more CTF would be great
  • @abumahraz5948
    David, this ur interviews and demonstration sessions is encouraging, motivational and educative. Thank u so much!
  • thanks for all the effort and work on your channel. the topics are very educating and told in a intressing way.
  • @falkensmaze3230
    Hello! I wanted to thank you for all the content and motivation you have given us. You have helped me a lot during my studyings. Thank you and I hope you keep admiring people !
  • @Selvaram
    Thank you David ❤️ 28 minutes worth of watching
  • Thank you David! I love the way you are like "Pretend I don't know anything and explain . . . "
  • @JN-hw2lo
    Just pure awsomeness! Thanks Mr Bombal & Hammond!
  • @msleague39
    Holy moly, overthewire bandit is the best thing to dive in this field, ty David and John
  • @ajaymandal2560
    28 minute 06 sec worthy watching both my favourite discussing this hard. David really extracted John's Mind and his ideas. Needed more collaborations guys
  • @educastellini
    -Great to see the teachers together teaching, great video. -I fully agree, with the part of distros that John explained, I use Mint on my machine because it has documentation and simple to do what is simple with it, I do not use Ubuntu, but I use Mint which is basically the same thing distro sons of debian so they really are the overwhelming majority of systems and communities are focused on it so simply if i don't know how to solve something right away you simply with your knowledge can find the log or something i know where to look and there is nothing to do not learn, but this is me who is a Linux core user, so in my case I really prefer to work on Linux, -Alias ​​the other day installing the IBM Cloud terminal for the course I was doing about it the script didn't work on Mint, great I opened the file and merely instead of not doing it I changed the script that until then said it didn't work on Linux Mint and installed it as magic, and served to learn more about the steps of the installation script. -I'm a poor Brazilian engineer so my machines are much weaker than the ones that usually buy in Europe or USA so running on VM is much slower, so for performance reasons I use OS Bare metal, so I have on my note two Smaller SSDs, one with Linux and the other with Windows, because running one virtualized inside the other would cause a very big loss of performance. -So as for using Linux I replied the other day that I am a Linux core user and do all my activities, and courses etc. in Linux, including the notes and terminals and basically for my activities as System Admin and Network Engineer practically nothing compels me to go to Windows, in fact recently I have been going to Windows just to make use of Microsoft tools like Teams to do a job interview and not even playing games I have been going to Windows because I am every day but focused and even that it's lagging behind at least until I have the levels I want in my professional skills. -But another day in those Linkedin posts saying that Linux is the best OS and I commented that in IT for my activities Linux serves for servers and various activities for knowledgeable users there is not even anything to discuss. -But it is not the case of a media professional who uses, (mandatorily even why his clients require) proprietary tools like Adobe's, or if he arrives with a raw GIMP file, the client won't even open it. -Or if, for example, you work with a proprietary Microsoft system, which many companies must use, you will work in VM on your Linux machine ok, but if you arrive with a raw file in another tool or running an application in wine instead of Windows that is what the company uses on their servers they will not be happy. -In short what is the best OS…? -First ask yourself what the OS will be used for, the professional responds. -Thanks for the knowledge teachers ... !!!