CTF Security

18/03/2025

Exploiting Path Traversal on Ruby on Rails 7.1.4 to Access config/database.yml – Leaking Database Credentials

https://youtube.com/-sec

08/03/2025

Cross-Site Scripting (XSS) Filter Bypass is a lot easier when you understand the application

Here are some list
https://gist.github.com/shuding/8b1ec4b7da446afebb78ff18be74848e

Learn more on Application Security
https://youtube.com/-sec

04/03/2025

https://x.com/TheSecOpsGroup/status/1896921544309473306?t=6yiQmBuSk-CcbxoIubTSag&s=19

03/03/2025

Another video up on YouTube
https://youtu.be/Bt_QRI5x-Ts

22/02/2025

https://youtu.be/H8qImbdex_o?si=ISS3s14-YE-upxQx

21/02/2025

What if you could log in as anyone, make yourself an admin, and change grades? Login bypass, tweaking session, decrypting user IDs, and rewriting student grades in the DB.

https://youtube.com/-sec

Drops at 12 AM! Stay tuned.

19/02/2025

Gaining user level access.

Exploiting SQLPad with SSTI for User Access and RCE on Hack The Box

18/02/2025

In case you missed our last live stream with Olajide Mutiu Jnr

Join r007user as he tackles the Pizza Paradise challenge on INTIGRITI 1337UP 2024, focusing on bypassing client-side validation and exploiting path traversal...

01/10/2024

Last Thursday's Twitch live stream on hacking Ticketastick hacker101 CTF is now available on both Twitch and YouTube! Watch it anytime and catch all the action.

Don't forget to follow and subscribe!
Twitch: twitch.tv/ctfsec
YouTube: https://youtu.be/s1Fab1UbiMU?si=NGUjKDTFu7PhK502

14/08/2024

Check out Olajide Mutiu Jnr's insightful explanation on the security risks of using string interpolation and setting subprocess call(shell=True) in Python.

https://youtu.be/SaZDeUMEXJY?si=N4eFcdH7IGIlOw_F

15/07/2024

Checkout detailed walkthrough of hack_sparo Death Note challenge on THM! 🚀

File upload exploits, SSH Misconfig, File immutability & Append Only attributes and Simple Docker breakouts.

Check it out with the link below! 👇
https://youtu.be/emBZdoqjsCc?si=NOcSdUWIN1Nenklt