BAD RANSOMWARE - HackTheBox Business CTF

[@ulissesalvesoffsec]

Hey, John... A little tip for printing chars in lists with print instead of having to make list comprehension: print(var, end="") This will print the data without the default newline.

[@CodeMonkeyNinja]

You've mentioned `sleep(0)` does nothing, and from your purpose of deobfuscation, I'm sure it's just an obstacle, but it's a method of yielding the thread, so that an application can share the CPU with other processes running on O/S and not "feel like" the application is hung (for small threads you really want to get the task completed ASAP so you don't even `sleep(0)`, but for threads that takes a while, it's an essential technique to make sure the app isn't greedy)

[@gabagoul67]

why wouldnt you want your app to feel greedy? is that something an anti virus can detect?

[@CodeMonkeyNinja]

@@gabagoul67 it just makes the PC (running the O/S, environments (i.e. desktop) and the app) feel locked/hung. What you do not want is users to think "something is wrong" because your PC is going sluggish (meaning, you can probably tell without anti-virus). Yielding allows O/S to prioritize/schedule (fairly) the time slices to keep your O/S responsive. Try writing a simple hello-world in your favorite language of your choice, with an infinite loop without any yielding to the O/S. Then try moving your mouse around (if you're on desktop) or something, on that same session. Then, try adding a yielding instruction...

[@gabagoul67]

@@CodeMonkeyNinja thank you so much for taking the time to answer. really appreciated

[@GaryFrancis-q3r]

And this is 1 out of 4 in terms of difficulties?... Whau, what a 4/4 must be?! Super dooper difficult :) Your videos are amazing John! Thanks a lot! ;) Cheers

[@nickheyer]

when youve done it several times, you get an idea of things you need to look for, even on higher difficulty

[@StevenIngram]

Very nice. And your videos are starting to make me realize how riddled with vulnerabilities our world is. LOL Scary.

[@viv_2489]

Always pleasure to watch these videos.. so much hard work behind...

[@chiragartani]

Wow you solved this in 22 min. 👏 Awesome ❤️

[@real_proxymous]

actually he did it 20 min and 33 sec

[@jacobdavidcunningham1440]

Damn that was really neat Crazy the lengths it goes to obfuscate

[@davecoates2308]

V nice. Enjoyed this! Thank you

[@TheKSH991]

Man i wish these challenges are available like the boxes on htb would love to try them myself

[@tapac5183]

good job !!!

[@svilenSt.]

Well done John! I like your way to move fast in research process. Thank's for share :)

[@_Omni]

Holy balls! Daily videos 🤗

[@sob3ygrime]

Awesome video thanks

[@neilthomas5026]

Very epic as always

[@erosmlima5981]

Aw3some!

[@MM-kd1zf]

Love you too John ❤️

[@FluePeak]

Dont know what you are doing, neither am i good at code or enything but daym this is fun to watch

[@Irisilol]

Your videos are amazing!

[@zaedabdullah2015]

always love your video. Hope. this pandemic will over

[@stayaway9828]

Why don't you use a debugger to automate deobfuscation?

[@bhagyalakshmi1053]

How to creation also filename creation for go 'r ✍️'!

[@drahoxx3076]

Which linux distribution is it ?

i asked to myself, where is the Master's daily works and you are in there, im too hapy , thx for videos

[@rasulmuhammad2343]

How did you select all the sleep words and delete only them

[@harvuk7729]

find and replace with null

[@sageinquisitor]

Why don't you just run the code with the powershell command commented out and echo the output?

[@alisarwar3399]

john i am a freshie , and i want to learn cyber secuirty. can you suggest me anything i can learn with my university life? so i can be like you someday????

[@MBND156]

Now i remember why i love coding

[@bahai02]

Then you must teach me

[@FuTunisia]

Random question, do you think burpsuite pro is worth it ?

[@russnemet1158]

Pen-testing or for hack the box?

[@FuTunisia]

@@russnemet1158 for all purposes

[@0xechidonut]

Definitely

[@soojinchong8354]

Waiting R.E category 😋😋

[@tylercoombs1]

This looks like it was probably the same author as the original VB script, it's almost a 1:1

[@ankitminz5872]

They love trigonometry lol

[@Shorstopmwd]

As opposed to...good ransomware?

[@mattplaygamez]

LoL

[@SuperHolySheep]

The only good ransomeware is porn

[@phantom18x]

If you want your files back, you need to take this 1 million dollars...or else...

[@kc-me6wl]

@@phantom18x lool

[@bhagyalakshmi1053]

Laptop 21 time for you skills collection of the two letters again again to repeating coming computer using and typing per versus there are available for laptop work is eg.

[@bhagyalakshmi1053]

Word neber 12,&15&abtrnamer

[@ce5248]

no

[@brandonevans5123]

yes

[@kc-me6wl]

Maybe?

[@kadensharpin2156]

docm-alware