Format String Exploit Troubleshooting Over Twitter - bin 0x11 b

[@floatingblaze8405]

If I'm stuck on a challange, I always google at least an hour before getting any help from others. That way I don't waste anyone's time, and I learn a lot by myself.

[@aidan7913]

^

[@mikehunt3688]

^

[@grimm5751]

+1

[@tekken-pakistan2718]

++

[@Adnan-sk9mp]

^

[@ZeDrakeful]

Patience of a saint. Give a man a fish and he will eat for a day. Teach him to fish and he will eat for the rest of their life. Some need an extra push though. Like duct-taping the fishing rod in their hand, making them a boat and sailing them off to fish until the skill becomes a Pavlovian reflex.

[@sickphukka384]

Give a man hiv and he will die alone. Teach a man to spread it and everyone dies together

[@du42bz]

kzbin.info/www/bejne/ol7Tkp-kapmjaqc

[@teemumiettinen7250]

Teach a man to fish and he will get caught fishing without fishing license and then get in trouble with IRS and then spend a longtime in prison.

[@ChillerDragon]

@@teemumiettinen7250 sounds like you are not talking about fishing but infosec :D

[@evennot]

Come back a day layer and they are lying down starving near a pile of fish. "What's wrong? Why aren't you eating?" "That's not the fish. The fish always had curly fins."

[@BucketHead6541]

Super engaging. Adds a fun story to a teaching point. It's be really cool to see this become a series

[@IsarEdits]

Listen to this gentleman here please

[@Jonathan-hz4no]

We should try solving them first ourselves before we watch though. :)

[@designz3660]

YESSS

[@tarikamaterasu238]

I couldn't agree more

[@williswcy]

1. Teaching is hard, especially if you don't know their levels 2. Effective communication is hard over instant messaging.

[@echoo200]

I'd agree, I ran on those most of the time at work. It sucks.

[@merlin2600]

This is one of my biggest frustrations with StackOverflow. I love helping others, spot the mistake that they couldn't notice after hours of searching, trying to see how their reasoning doesn't work in actual code... But many people give a poor description of their (work or school) assignment and just expect a ready-made solution delivered to them. I love this video because it shows how miscommunications can increase the frustration on both sides, even if they're trying their best.

[@DucBanal]

Select one of your patreons at random for a debugging session on the CTF/challenge of their choice that you can turn into a video. Win-win.

[@mohamedazaiez7109]

That could be great I hope the patreon in question wont be a ctf god though

[@masonp1314]

Honestly, I'd watch the heck out of that.

[@LunarLambda]

I didn't know about $ in printf before this video. It's a POSIX extension that allows specifying a numbered argument, which means instead of having to put %x 20 times to get the 20th element on the stack, you can just do %20$x. How fun

[@yyny0]

Invaluable for internationalization where word order might be different between languages, but also easy to abuse :)

[@hamidcrazy9027]

It's mentioned in printf(3), but again that manual page is big lol

[@EvilSapphireR]

Thank you! I was confused what was going on in the script.

[@EvilSapphireR]

@@yyny0 could you please explain what you mean by that?

[@chanbakjsd]

@@EvilSapphireR It's useful for when you do internationalisation (translate a program into another language). For simplicity's sake, I'll use active voice and passive voice as an example. You might have the format string "%s said %s" in your original language. However, in another language, they might need "%s was said by %s" but now the order is all wrong! This is where %1$s can come into place. You can use it instead of %s to specify the exact argument you want to insert.

[@alish2001]

He's more of a patient teacher than he gives himself credit for.

[@hawk__]

And.. from what he has shown, it's really hard.

[@jonathanschmalfu1394]

Your patience is impressive.

[@Abhishek-ku7hc]

These kinda videos are cool since we get to see what mistakes others are making and realise if we make the same mistake, also it's good know about your thought process too.

[@sutsuj6437]

I agree. Also : Fvk Rvtug Frira Sbhe Frira Sbhe Frira Mreb Guerr Nysn Gjb Sbkgebg Gjb Sbkgebg Frira Sbhe Fvk Avar Fvk Rpub Frira Avar Gjb Rpub Fvk Guerr Fvk Guerr Gjb Sbkgebg Guerr Frira Fvk Oenib Frira Mreb Frira Bar Frira Sbhe Frira Nysn

[@donaldduck6198]

"The others" are a very, very famoust youtuber!

[@pete3897]

You're clearly hooked on this stuff if you're helping randoms off the internet :) Love the vids, appreciate your willingness to share your talent.

[@logiciananimal]

I have had colleagues who insist that the "only way to teach" is just the lecture on "what to do". Your Socratic questioning is heartening to see. (And people have to learn to create "mental pointers", if you'll pardon the pun, to things they don't remember but remember that exist somewhere.)

[@rafajanicki2456]

Answering Your question: yes, this video is freacking awesome and highly interesting :) On the side note: Congratulations to the CTF player who managed to: - engaged you for ~3 hours conversation, literally getting one-to-one, private training :D - gave you idea to create ~30 mins. video about it (which I guess took you some time to make) - engaged yet another KZbin hacking channel owner (the one and only John Hammond :D ) as a voice actor, acting like James Earl Jones voicing Darth Vader in Star Wars :D

[@dealloc]

As a mentor for a couple of junior developers, and someone who loves to help out people I can totally relate with this. It's not uncommon to end up in these situations, but when they and it gets "hairy", do it's always good to take a step back and possibly re-iterate the question and their understanding up until the point such that you don't end up in a rabbit hole. This is great, and hopefully will help people to better formulate their questions before asking! It's so important to provide context; It's also exhausting for both parties when a conversation goes on too long, even though you're interested.

[@Kaar]

This was really useful from the point of view of how to help others by asking and answering questions. Professionally you end up in these kind of situations all the time with juniors that want to learn but has not learned how to learn.

[@jeff14994]

this is awesome! hope to see more like this. really learn things not only about technology but also about communication!!! love it!

[@BrainFood155]

You're a more patient person than I am although I can hear the frustration lol. This kind of video style is definitely engaging and I would love to see more.

[@sobertillnoon]

I loved this video. Honestly, I also love it when you are snarky.

[@AniltonNeto]

Beautiful approach. This is a great way to engage people to think and also a great opportunity to help to understand the concept even tho the guy already knows it

[@tommy6322]

You are very good at telling stories and it's easy to listen to you and take in the information in that format. :)

[@dbarrie]

You have the patience of a saint. Getting someone to really think about the fundamentals when they’re stuck above their experience level is always a tricky proposition; either they’re going to get hung up above where they should be looking, or lose confidence because they’re lacking those fundamentals that they assumed they’d already “mastered.” Glad you pushed through, and hopefully this person takes what was learned to heart!

[@Lition98]

I didn't know there was a third parameter in main for the env vars... after searching it on google found out that on OS X and Darwin there is a fourth. Anyway keep doing these videos it's always entertaining to see newbies discovering stuff

[@sunnymishra1057]

What is the 4th?

[@Lition98]

@@sunnymishra1057 arbitrary OS information, path to the executing binary

[@oblicuopensar1655]

Amazing the way you helped this guy. As a music teacher I constantly find myself trying to guide my students through their own way of thinking. Today everybody wants answers but nobody ask the right questions. I think we, the people that teaches, have a big task to do in these days, no matter the subject de are teaching about. Great job there!

[@PradeepKumar-ld5ns]

I think this type of content every Tutor should make because we all get stuck at some point. We know sometimes it seems very easy for some person but it's a big hurdle for someone. This also motivates to look around the resources faster. So please make these types of videos. That was the best way to deliver your knowledge to us. Thank You...

[@CypElf]

I love this concept. I hope you'll keep doing it.

[@soviut303]

You handled this exactly right. Teaching is about helping someone arrive at the answers on their own. This is time well spent as it instills an approach to problem solving in the student.

[@hisham1269]

I found it even more helpful. It highlights natural mistakes, but also left me time and good questions to think through it too.

[@black_platypus]

I think it's super interesting to get a glimpse into how a novice vs an experienced person think about and talk about things. Engaging for me!

[@robertodom9029]

I have done these types of bugs before in CTFs. I think your video is very engaging and helps show the actual thinking required to solve the challenge. Thanks much for the video! Good stuff!

[@matthewlandry1352]

GREAT FORMAT! Not only are you teaching HOW to approach a problem. You also taught how NOT to bug the GRACIOUS MENTOR. Keep up the videos like this. (Really liked the “hex to string” frustration part). I learned to approach an exploit by thinking of a half-step just as valuable as a FULL step to the flag.

[@nicholasdurand9370]

This was one of my favorites for your videos. The format really works, and was a lot easier for me to follow than others. I have attention issues a lot of the time and this was one of the few videos where I understood everything with one watch, without having to pause and move backwards, or sidebar with Google. I think formatting it as almost more of a "story," with characters and back and forth was really helpful. Thanks for putting this out!

[@Erarnitox]

Yes, would love more of this. There are some slip ups and hints you covered that i knew but still think are very useful to hear again and see them laid out so detailed and clearly.

[@KnightPezz]

I don't normally comment, but this is a really useful resource in seeing the incorrect way to solve a ctf and then correcting it along the way.

[@caleboleary182]

Ugh yeah John Hammond is always messaging me on twitter about easy ctfs too =P

[@noway5930]

Pmsl!

[@gabrielfkeith]

Got eeeeeeem

[@CH3RRYxB0MBx]

I'm glad I'm not the only one who picked up on it! I thought the voice was familiar

[@marty3089]

I really liked it. Maybe, to prevent frustrations while sending text messages inform the other of your intent to help nu asking questions. I can imagine that this puts the other person in a different mindset where they will think more general about your helpful questions that you already know the answer to. More of these please! :)

[@unique_handle]

Im glad to see that you were able to help John Hammond with his format string conceptual errors :D

[@nuxar8778]

I find it really engaging! It really adds fun and also tells you about possible error instead of only telling you what you need to do.

[@shadmaniqbal9581]

Solid video. It also was a way for you to reference older, yet relevant, videos which might have not gotten the attention it deserved. I can see this as a series honestly.

[@Altirix_]

super engaging. it adds a significant amount of depth and character to your videos, please keep doing more things like this in the same format. also say please keep having more of yourself on camera breaking down the problem, like how you did in this video, show us what we are on and then add more discussion where its not just a computer screen. amazing lighting btw this video had me watching the whole thing without wanting to skip forward or go to other videos. which tbh can be a big thing with info heavy videos, but the gaps in going into detail prevent you from needing that "let my brain catch up break"

[@amadios9874]

I do love this format , when you're new to format string exploit like me you can discover the whole thing having the same issues understanding the problem as the person and you progressively get how things work

[@thatcreole9913]

This.... is fantastic! Please make this a series. It's super engaging and taught me quite a bit about how to better communicate stuff like this. Thank you.

[@AndreasWilfer]

The video was very engaging and easy to follow, even easy to follow up after I had to take a few pauses to do other things. Great video!

[@dontmindme8709]

What a patient person you are! I don't always watch your videos since my basic knowledge is limited and so the content is a bit too technical for me. I learnt a lot from this video though! Thank you!

[@biswaprakashmishra398]

I don't understand much of this as no back ground in cs but this stuff is addictive to watch. Thanks for the videos

[@mahdiarfaramarzpoor]

this is reallly easy to watch video, i actually learned stuff. this format makes it way easier. please make it into a series.

[@ar_transilvania]

I think this format was awesome, while you may think that you were only helping one person but actually after posting this video, you did do the same thing as you would have done while sitting two hours on your own idea of a video. It's just that sometimes this kind of videos (actually more often than sometimes), are needed more and more :), thank you for sharing this.

[@z-a3594]

It is engaging. It is actually the first video that I saw from your channel. Somehow the KZbin algorithm sent it to my feed and I watch it till the end (at 1.75 x speed as I usual)

[@MrItrollaround]

Definitely would like to see more of these. I was able to take a few things for myself from this, even if I haven't started practicing creating exploits. Having someone's journey and mistakes is always a lesson, doesn't matter the subject. There's always something you can learn from stuff like this and it is very helpful as a reference later on when you'd need it.

[@ТвойКотейка-с5ц]

So engaging! Videos like this, where you describe how mistakes happens and how to solve it, is most helpful in CTFs and other types of activities. Keep doing this!

[@tooneepoo]

Highly edutaining, keep it going. Reminds me of those eternally long stretches when you are entrapped and dumpfounded in your own (confirmation) bias

[@mkplay2588]

this is the kind of videos i'm looking for. Thank you for your efforts :)

[@dheerajr8246]

Happy to hear John's voice in your video lol. And the video is awesome. Looking forward to see more like this.

[@ProXicT]

I'll be honest... After some time, for me, this is again an enjoyable format of your videos ;)

[@djunho]

I am new here. I have been watching your videos for the last week and I am really enjoying it! Showing your thinking process to solve the problem makes your videos super cool! I loved this one. Maybe someday I will try some CTF challenges, but for now, I am just interested in learning the tricks you always show! Please continue!

[@juaninfante7000]

This video is better than anything I have ever seen, bring more videos like this learned a lot out of it. LOVE IT !!!

[@Sepci0]

I feel less dumb when I see someone do dumb mistakes as I do. So that feels great to watch it, and also, it's awesome to have references "go to string video for more"

[@argsahoo]

Please put out more videos like this...this is truly a great learning resource

[@vstorm]

Great video. Your patience is/was amazing! I am glad you were able to turn that experience into something useful too. Thanks!

[@madmancrow7659]

I also like this type of format, It show you a perspective and logic into solving A way around to find a solution.

[@guilhermebotossi]

This video is marvelous, if you can, and it's not much trouble, these types of videos are very much helpful because it improves the way you think about these challenges

[@PROGRAMMINGFORFUN]

Super engaging. had a good time with Live Overflow and John Hammond :) Keep posting this kinda contents

[@UmeshRajaramKandekar]

The Troubleshooting videos like this type was Awesome 🔥🔥🔥🔥 Hope to see more videos like these 👍

[@attention_shopping]

amazing you actually talked with them -- they should join a slack channel, super simple and faster communication

[@nightwolf9470]

I really enjoyed seeing this thought process. Whether you are working on a CTF or other project yourself for helping someone with it, chances are things aren't going to work the way you expect on the first try. Seeing how people approach problems and trouble shoot them is very useful. I also the idea of helping another person through it since finding that line on how to nudge someone forward without solving it can by tricky. I'd be interested in seeing similar videos from time to time but stick with you like doing most.

[@AdrianPanaintescu]

Very nice video idea! It was interesting for me because I was trying to put myself in the situation you were in and to find solutions in parallel with you.

[@bart8P]

Unbelievable you actually respond to people who phrase their questions so bad.

[@macspexs7710]

Really this Video style is godly for learning. In this way you help more efficiently for viewer and troubleshooter. Keep it up. Would love to see more of these content.

[@tekken-pakistan2718]

24:38 moreeeeeee, we want more, the explanation, discussion, and conversation was so good.

[@namesurname201]

It is engaging , I d like to see more more more videos like that

[@MmMm-oh5ct]

This Video Format is awesome, it Shows also a few steps that could go wrong and Shows a few failure, thank you.

[@pewpwnpie]

I love referring these videos to people asking questions :D

[@madblah4158]

Appreciate all your frustration dude 🙏

[@gto11520]

Super ! i wish more plp are like you in the developers world. most senior developers wouldn't waste 5 mins with this type of help.

[@gabrielbeedles1172]

Really enjoyable to watch and follow along. I also appreciate that it can't be easy to keep track of what you were thinking at the time and then making a video out of that can't be easy. Thank you for the effort, it is helpful and appreciated :)

[@ajaysureshkumar1533]

This video was awesome !!!Eager to see these dm's turn to a playlist!!!!!!!!!!

[@thanoskoutr]

I really liked the format, and it is as you said easier to understand some things through troubleshooting. I guess this one took a lot of patience, but i would like to see more videos like it.

[@dr.deathvolt3058]

This video are very excellent I learn alot ❤️❤️❤️❤️

[@shahrilzainolabidin]

This kind of video is good! Along the way, I also try to understand what is the person's issues, and it helps me to think about the possibilities on what's could go wrong.

[@Ciborg085]

first video of yours that i have watch in a long time so definitely engaging

[@rodolfoalvarezgarcia568]

Este tipo de videos en los que muestra su proceso de pensamiento mientras desglosa cada detalle crucial son los mejores. Se siente como un problema que tuve que resolver por mi cuenta, con suerte permanecerá en la "pila de memoria" a largo plazo.

[@dauntul]

I love your style of teaching!

[@surajyadav9502]

this was very helpful and easy as compared to other tutorials, please make some more like this

[@jon3z780]

That's so cool! The guy has a dinosaur park AND is a voice actor!

[@leberkassemmel]

This video was super interesting. 10/10, would watch again.

[@dachd]

I like this! It shows how we humans are terrible at text. Makes you think more about our worklife where we also have misscommunications

[@peterfireflylund]

“Humans”? No, dumb, lazy, and entitled humans.

[@poketopa1234]

I think this video is interesting from the perspective of "learning to teach CS". Definitely reminded me of my days as a teacher

[@iradnuriel9087]

Dude you are awesome!!!!! I think I could not help someone with that level of commitment!

[@arw000]

This video style is fantastic! More like this please!

[@evansjahja711]

Definitely engaging! I feel like less dumb I guess, and it's more down to earth

[@bjornroesbeke]

This challenge goes way over my head but i've stood on both sides of other challenges; as someone who solved it before, trying to help someone else and got very *aargh* frustrated with him JUST_NOT_SEEING what's in PLAIN SIGHT or expecting answers instead of THINKING for a moment, and as the guy asking someone else for answers. In hindsight, all these challenges were easy. It just needed to trigger the right part in my brain. I've learned many things since i started doing challs at age 15, but now i just don't care to spend the time doing them anymore.

[@dayitvagoel]

This was awesome and would love to see more of this style.

[@somehow_sane]

Very engaging yes! I wouldn't mind watching more videos of this kind!

[@johnsnow1062]

Yes, it is very engaging and teaches in a super way.....

[@-jes988]

much better to understand in comparison to an normal video

[@StefanSchlott]

Really enjoyed it. So more like this? Yes, please!

[@deadmeme5291]

Yoo i saw u upload and i was like: I gotta watch it NOW!

[@yy6u]

this is really interesting, it shows a lot about people, i can completely relate to you. it can be distracting but that comes down to how good you think you can multitask this is a really good thing to post imo i learned a lot about the technical situation besides the interactions stuff

[@mayankshigaonker8551]

This is a very gud format. Pls do more of these. I was captivated by the suspense lol :)

[@billjon2732]

Yea please make more like this. Helped a lot.

[@rogo7330]

Yep, this is video good video because: 1) I discovered for me about printf meaning of it's % and $ (i didn't saw that video yet); 2) It's shows how not to mess up with outer black boxes (passing another input can give back another things); 3) Actualy, sometimes i can discover some usefull code and tools or how to use what they already have.