I Played Beginner-Level Security CTFs For 30 Days

I Played Beginner-Level Security CTFs For 30 Days - Here's What I Learned

Рет қаралды 712,371

Күн бұрын

Пікірлер: 254

@darkcasterx4628 Жыл бұрын

An often overlooked part of CTFs is taking notes! Taking what you learned and restating it in your own words, and saving all that information in a file (or your favorite note taking app) is crucial to improving

@GGS0N2 Жыл бұрын

side question , whats ur fav note taking app ?

@darkcasterx4628 Жыл бұрын

@@GGS0N2 I use obsidian

@HauntedSheppard Жыл бұрын

It's actually for all learning, and fysical notes is even better (type it out after if you reallywant it digitaland extra results)

@shayrow9480 11 ай бұрын

@@GGS0N2 I vouch for Obsidian it's very flexible with it's uses, you should watch a video about it.

@ivy0921ivy 8 ай бұрын

@@GGS0N2 Microsoft OneNote

@MCTTABOB 2 жыл бұрын

as a pro ctf-player: awesome to see you getting into ctfs. However, I would recommend not keeping to beginner levels for a whole 30 days, instead trying to push the envelope with harder challenges - thats where you learn the most! keep it up

@--Morpheus-- Жыл бұрын

Whats your favorite ctf?

@lefourbe___ Жыл бұрын

How did u get your first hacking knowledge. (I have fun with kali linux tools , i think that's not a good approach)

@MCTTABOB Жыл бұрын

@@--Morpheus-- there are multiple that i like, googlectf, realworld, defcon, and then some smaller ones organized by ctf teams

@philipjacobsen6550 Жыл бұрын

where do i begin to get into this stuff?

@Carlos-df9cl Жыл бұрын

@@philipjacobsen6550tryhackme or hackthebox is a great start. Tons of rooms to practice

@Tkeechy 2 жыл бұрын

Write-ups are not cheating as long as your learn from them. When i first started I used write ups very often, I am slowly using them less and less now though. Very good video BTW!

@apoorvmitthu Жыл бұрын

I am just learning to hack, and I often use write-ups and videos. But somewhere I feel like, if I look at the write-up, I won't do it on my own, and after seeing them, in a way the question or the problem is wasted. I can't think of just learning the way, and move on. I feel like, why was I not able to do it. Sometimes, it is like, I am doing it for the first time, so I can't do it, but, then I feel, where could I have learnt it beforehand?

@dan91121 2 жыл бұрын

What matters most is 1. the approach is understood and 2. the person learns. Using writeups is what lots of people do - just make sure you as the reader get why the write-ups work.

@GunsandGuitars69 2 жыл бұрын

Another good habit to make is that when you use a write-up, analyze it to a degree where you understand exactly how each step works, but do so only up to the point where you're having trouble. Once you learn what you were doing wrong on that step, put the write-up away and only bring it back up if you get stuck on something again. It's only cheating if you just copy it step by step without at least trying to understand what's happening or without trying to do it on your own. In my experience this is the process that has helped me get a lot better at hacking in a short amount of time.

@KizukiKotataki Жыл бұрын

I still dont understand how I should approach right ups or any CTFs in general. Enumerate or recon then proceed to exploit? How to achieve the exploitation? Find vulnerabilities. But how do I know vulnerabilities exist? Search them up is my go to answer but that doesnt feel like learning. But if I try to discover the vulnerabilities on my own, it's too far high for my skills (very new to this). Then, what we're supposed to do is understand the exploit for the vulnerabilities, right? At least that's what I think I am doing but I still think that doing it that way does not feel like I am not really learning anything. I just know how to search the vulnerability and know why that vulnerability exists. I did not learn how to "acquire" that vulnerability. Please guide me.

@Dazed_04 6 ай бұрын

@@KizukiKotataki Trying to look for vulnerabilities without any prior knowledge is like looking for a needle in a haystack. Even professional hackers spend their time trying to find out vulnerabilities in systems. The most obvious tool to use is experience, sometimes even the wildest hunch might get you quite far. I'd recommend doing basic ctf to build experience and searching about vulnerabilities related to those ctf so that the difficulty doesn't spike too much. At the end of the day, doing something for the first time is always going to be hard, so don't stress about it and instead try to learn more

@KizukiKotataki 6 ай бұрын

@@Dazed_04 Thanks, I've been slowly doing ctfs when i can. i hope i still have time for it once i graduate tho. i kinda regret not doing ctfs during pandemic. that was a lot of free time to boost my skill yet i wasted it.

@sanfordkenyon9305 2 ай бұрын

So true. I tried for awhile but got discouraged when doing ctfs, so I’d always looked up the write up and kinda understood. But recently just pwned an easy machine on thm 100% on my own and I’m hooked!! Hopefully more learning is in store…

@suparswakashyap6789 2 жыл бұрын

hey grant ! i'm watching you almost for 3 years ..since your "Finals Week" and "Day in the life of CS student" videos those were really legendary videos....and you really inspired me in my CS career ....and just Thank You So Much buddy i think you should make more videos like those

@collinsinfosec 2 жыл бұрын

Thank you for the kind words! You have probably seen me evolve from a cringy script kiddie to a refined script kiddie 😂 Those older videos are hard to watch. Thank you for the support and keep up the great work 💪

@suparswakashyap6789 2 жыл бұрын

@@collinsinfosec yohh man ...appreciate that...thank you ..❤❤👍👍and believe me those videos are really awesome, there were lot of great stuff in those videos

@system0015 2 жыл бұрын

Bruh can work with as unpaid internship i wanna learn from you since you gain from him

@suparswakashyap6789 2 жыл бұрын

@@system0015 broda that's totally depends on you....but the thing is if you don't have any type of financial issues or if you have enough time to test your skills....you can go for that...but in my case i had't had that much time for unpaid internship...and Unpaid internship is the best thing to know yourself and your security skills.... usually in country like India (i'm from India) being an unpaid intern you have to face a loṭs of problems...but you can improve your skills..and also you can get so much in back instead of your time not financially but after that you will become a experienced asset for any company.👍👍

@WtfAnupam 2 жыл бұрын

watching you for the last 3-4 years, 2022 you look so mature and knowledgeable! Great to learn something new :)

@collinsinfosec 2 жыл бұрын

Thank you NootRoot. You have seen me since my cringy video days back a few years ago 😂 I appreciate the support.

@OrianaVerity Жыл бұрын

Gamification simplifies the concepts and makes them fun or engaging even if they are not entirely "true to life". Our brains thrive on the engagement and context that games provide. Do not underestimate that.

@SteveGillham 2 жыл бұрын

Totally agree, the more you do CTF, the easier it becomes as you get to understand what they are expecting. However, CTF really zap your time, when in reality you are doing the same sort of probing over and over again. You certainly need to weight up time spent on CTF against learning some other topic.

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️

@regas6441 2 жыл бұрын

Writeups are awesome to learn. That's not cheating, that's learning!

@collinsinfosec 2 жыл бұрын

I appreciate it Regas!

@tealeaf9260 2 жыл бұрын

I agree, but I think people should decide ahead of time for when they refer to a write-up or walkthrough. - After you solve it yourself: you may learn a different approach, a new trick, or learn about a new resource/tool - After X number of hours working on it yourself, but you hit a wall: gives you time to try and practice what you know - Right from the beginning: use an official write-up or a good source such as IppSec (for HackTheBox) and learn that way Some people, and I would include myself, might feel a little guilty or that they are not good enough if they have to refer to a write-up. But, I think deciding on some guidelines or rules ahead of time can help people take control of how they use these sort of resources for learning.

@bakeboy78 2 жыл бұрын

Those write-ups can be used to help you get a job during your interview you either hand that paperwork to your interviewee or if it's a zoom call see if you can do a screen share and then walk somebody through your thought process that shows how you think how you solve problems and will help you stand out in the crowd

@chromefinch 2 жыл бұрын

Try, try harder, then look up the answer! You don't know what you don't know.

@taiquangong9912 Жыл бұрын

Which platform did you get that mr.robot?

@kil-roy 2 жыл бұрын

Awesome, cool that you were just honest, and practical about using all the good resources to just get it done, rather than racking your brain through the night attempting the puzzle on your own. Just get it done!

@AzaraelIsrael 9 ай бұрын

I’m glad you spoke about documentation. Nothing else says you can do something better than recording yourself doing it.

@x7331x Жыл бұрын

Great content! I recently also start learning about ethical hacking, but I did not dive in headfirst into CTFs. I took a more conservative approach, but completed relevant learning paths (mostly on Try Hack Me) and once I felt that I understood the labs and all, then switched to its CTFs Note-taking (at least for me) is crucial, and is the sole reason I started to publish write-ups! It helped me better understand what I am doing in each step of each CTF. Hope that you are still practicing!

@ultimate_nagibator 3 ай бұрын

You are a legend! You completelt destroy the wall of fear of starting something new like CTF with little background knowledge. Thank you

@lethil 2 жыл бұрын

I think alot of us are hard on our selfs when it comes to referring to writeups on some of these challenges. I don't consider it "cheating" anymore, I used to feel this way when I started ctf challenges but in reality these write ups just expand your knowledge and ability pool. You look at the bigger picture, not just being unable to crack challenge X, but now next time you come to a similar situation you may already know how to tackle that problem because of a previous write up, or at very least know how to find the solution. I've used techniques I learnt in write-ups in real world situations, that I wouldn't be able to have solved with out having prior knowledge of a similar situation and the real world situation doesn't have a write up or solution available. I think its good to set boundaries on how and when you refer to a write up, just to give your self a chance to experiment and learn, and avoid tapping out as soon as you are confronted with a difficult problem.. Documentation of your progress is also an amazing skill to learn. Not only is it required for reporting purposes in the real world but being able to re-trace your steps incase you need to regain access to a system, try different approaches at different stages or repeat the process as evidence. Good note taking and documentation is a valuable discipline.

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️

@lautamusical 2 жыл бұрын

IT WORKED, THANKS I'VE BEEN LOOKING FOR THIS FOREVER, BUT NO TUTORIAL COULD EXPLAIN IT AS YOU DID

@mattxyzeth 2 жыл бұрын

I am an absolute noob and didn't even know about CTFs. This looks like a lot of fun. I couldn't finish the video, though, since it felt too much like a spoiler on the Mr Robot challenge. I'll give it a shot and then finish watching.

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️

@deenaxic9134 2 жыл бұрын

creds for being honest about when you had to get help.

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️.

@redeux 11 ай бұрын

It's refreshing watching a video where someone says they didn't know something. Very relatable! Like i know what CTF is but have never tried it so it was interesting to hear your perspective of giving it a go. Nice video!

@tumdaddy338 2 жыл бұрын

i might try this while i have summer brake, nice idea.

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️.

@getr Жыл бұрын

Good job bud, you'll get there. It's only time and experience

@Flipcrypto 2 жыл бұрын

Geezus. I have no idea what you’re talking about, but I love it. Can you recommend a 30 day challenge to get a newb, like myself, to the point of understanding what you’re talking about in order to do the challenge you did in this video?

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️

@ThatNiceDutchGuy 2 жыл бұрын

Well done! I see using write ups as learning by a more experienced mentor.

@coder_rc 2 жыл бұрын

This is great! Happy to see you learn 😄

@Joel-gf4zl 2 жыл бұрын

CTFs are a great way to learn and I find the knowledge you gain to really build on itself.

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️

@ezeadnahc 2 жыл бұрын

Your video quality is getting very crisp. Nice one

@collinsinfosec 2 жыл бұрын

I appreciate you noticing Chukwumaijem - I have been trying to improve and refine my editing style moving forward.

@ezeadnahc 2 жыл бұрын

@@collinsinfosec and the improvements aren't going unnoticed ☺️ Keep it up.

@yilinlian7995 2 жыл бұрын

Hi Grant, good to see you again :)

@collinsinfosec 2 жыл бұрын

It's good to be back, making videos.

@BloOdShotRetiNa Жыл бұрын

Thanks for the honest edit. 👏

@ozz961 2 жыл бұрын

You can use wpsscan tool when you are facing against wp, can be used to bruteforce logins too

@wackmane2561 2 жыл бұрын

Don’t feel guilty for using write ups brother, that’s how we all learn! Awesome video btw!!

@FiReLScar 2 жыл бұрын

That is exactly why I quit learning cybersecurity. I make software but I wanted to learn to pen test and I would get past a few ctf boxes but then I would hit some where I would end up hours later looking up the answer, I felt guilty and stupid and quit

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️

@0xkudz4i 2 жыл бұрын

Lol. I always felt like i was cheating when using write-ups. Good to know the community thinks its acceptable to use write-ups as a learning tool

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️

@psibarpsi 8 ай бұрын

Where do I even start in hacking? I wanna explore web-based exploitation, and some hardware/OS-level stuff.

@anirudh727 2 жыл бұрын

You really show how to do things! Keep it up amazing !!!

@Jose_T131 2 жыл бұрын

This is super interesting , I'm curious about these topic, maybe try to resolve one of challenges

@karim3741 2 жыл бұрын

another great option to bruteforce WordPress login is using wpscan tool much easier than hydra

@kjmontalvovidal 2 жыл бұрын

Nice keep up, i recommend you do Hack the Box starring point

@asadalam 2 жыл бұрын

do more of this!! this is amazing

@mrdoogle5931 Жыл бұрын

Getting a reverse shell in WP is actually very easy when you know how **SPOILER** - copy-paste your reverse shell script to the 404 error page (delete the default page code) under Appearance - Theme File Editor and save. Force an error on the site with a listener running on your computer, job done.

@HxN0n3 Жыл бұрын

CTF is the popular cybersecurity competition or game that involves participants solving a variety of challenges to find hidden "flags". In the context of cybersecurity, a flag is typically a specific piece of text or code that represents a successful solution to a challenge.

@jaxlodoner1308 2 жыл бұрын

Used to be a CS student, but have since switched majors. This makes me want to get back into it for shits and gigs but my general knowledge is so lacking now :/ great video though!!

@aggressivereindeer3200 2 жыл бұрын

I saved 10k (and had a partner that could financially support me, but did not need too), left my job, got on udemy and took courses till I was advanced in python, automation, they have a math class that only covers the calculus and linear algebra concepts that A.I. uses. torn through pytorch and tensor flow courses. been about 2 months of 12-16 hour study shifts without one day off yet. I have an automation engineer interview. for a multi-million dollar financial form. in 2 months I went from a basic machinist job to lining. up a 130k a year job. no degree. a degree.... just might not be the way for this field... I wanted to get into it and found a cornucopia of educational content that can take me to a level equal of a masters degree... yes, I. have. the knowledge of core concepts of cs that I needed, yes there are slight gaps in knowledge compared to if I spent years learning it in a proper class. but with work experience I will fill those gaps quickly. grind hard. one time. GRIND!

@EragonShadeslayer 2 жыл бұрын

@@aggressivereindeer3200 Hello, can you please link some of the courses that you took? If your comment doesn’t send because it has links, try going to my profile and go to about and do the “am I a robot” check to see my email and email me. That is, if you are up to it. If so, thanks, and if not peace be upon you regardless :)

@Tom-el3nm 2 жыл бұрын

@@aggressivereindeer3200 to be honest, in my country (Germany), if u apply without a degree in the sector you've applied for, they won't even consider inviting you to a job interview (at least if we are talking about companies that pay as much as the one you've described)

@burbabull 2 жыл бұрын

I like the honesty 😊

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️.

@4bear_vlogs 2 жыл бұрын

This was so helpful!! Thank you

@R839jdkk83nHd 2 жыл бұрын

Nice video. I would advise you not to be time limited when working on ctfs. That's, don't say "l'm going to spend X hours on this, and after that l will look at the write-up if l ain't still got the flag". Write-ups are good, but should be used when you really get stuck for a while. In a real life scenario, there won't necessarily be a write-up with a detailed solution to your problem. That's why CTFs are good in developing the mindset of trying harder. You try now, but get stuck? go for a walk, rest for some time then come back and try again. It's not always about how fast you solve a task. Anyways, l understand you had to proceed as such for the purpose of this video) Cheers, and keep it up.

@randallcharlestuckermrcyse1479 2 жыл бұрын

I always have to use write ups for vulnhub boxes. These guys make it difficult. I am currently in college for Cyber Security Engineering as well.

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️.

@sdvcs-o2v 6 ай бұрын

thank god i'm not the only one whose dump when it comes to pentesting a chain vuln machine

@nicholasicon Ай бұрын

I'm just starting my Google Cyber Security course to get started in the industry and cant wait to get in to this stuff! I'm a total noob to what you're doing and have no idea where to start. Any suggestions?

@virtualizeeverything Жыл бұрын

I have been looking into some CTFs what is to best place to start with Beginner-Level CTS and how much to sites like picoCTF cost?

@Spanakopitaa 2 жыл бұрын

2:15 whenever I see people using "cat x | grep y" instead of directly "grep y x", I want to smash my screen.

@sdvcs-o2v 6 ай бұрын

you've tought me something i didn't like at all in this industry, the truth is that you have to buid before destroying, you should understand code and build some projects from scratch and learn how things actually work so you can get the bigger picture of what are you tweaking on, then your gonna fly like new born bird, in other words then you can mine your own way into breaching that machine. you are like me when i was doing these repetitive web app machines, but the reality of this industry is the big picture without it your nothing, thanks for this ved

@tomst4252 Жыл бұрын

Keep up good realistic content 😊

@izzoriousaxel8807 2 жыл бұрын

If you're learning, it's not cheating. I kept getting told to figure things out myself and not look anything up when I was learning C++, and that was miserable and I learned literally nothing. That mentality is childish and petty, it usually comes from people who are bitter that the information is freely available now, but wasn't when they learned it. If you're doing it for fun as a challenge, fine, don't look anything up, but if your goal is to learn, use every resource available.

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️.

@funfoodfancy3981 2 жыл бұрын

Loved the first one, looking forward to trying this one out too.

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️

@comosaycomosah Жыл бұрын

This is awesome! i wish i came across this bout a year and half ago lol

@codingdude8782 4 ай бұрын

Is that a golf ball collection in the background?

@Anonymous_lad17 2 жыл бұрын

you are a gem 💎

@adrianm.1240 2 жыл бұрын

I have no idea what this is about, but it makes me wanna know🥺

@lowe7372 2 жыл бұрын

What are those screens man, they are perfffff

@jhunidelartezuela4296 2 жыл бұрын

thanks for the help it help my every thing i need to install

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️.

@adigitalsmith 2 жыл бұрын

this video is about how to go on youtube to find youtube videos to solutions when making a youtube video about a problem to then share on youtube

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️.

@JoeM370 Жыл бұрын

This is sterling content. A book I read with similar insights was a critical juncture in my journey. "Game Theory and the Pursuit of Algorithmic Fairness" by Jack Frostwell

@hasanmahmud2016 2 жыл бұрын

Thank you so much you really help me :)

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in ⬆️.

@hodeh851 2 жыл бұрын

You are best ;) Thank You !!!!!!!!!!!!!!!!

@adriangreiner4693 2 жыл бұрын

not sure why, but I expected Call of Duty content!

@ToriKo_ 2 жыл бұрын

Same lol

@arampro9594 2 жыл бұрын

Nice man ty

@TheMisterNebo Жыл бұрын

I present to you: "Hacking with Frodo"

@TheBanningz Жыл бұрын

I mean hacking is about information so technically... you never cheated man lol. All hackers have to go back in their notes or look at a write up if they step away from the computer for awhile to take a break. In my eyes, you never cheated, you just needed information, which again... is hacking for the most part.

@ElliotTang78 2 жыл бұрын

I love your video !nice

@RizkyAlfians 2 жыл бұрын

bro its insane

@Marquis-s8s Ай бұрын

What pre reqs do youvneed before doing hack the box ? Im still in highschool but trying to learn so i have minimal knowledge other than playing conputer games online with computer :) . Is there a playlist on youtube that you would recommend or online courses i ahould take before doing hackthebox

@JRocLaHey 2 жыл бұрын

GOAT

@malikmouhiidine9828 Жыл бұрын

In 18 days, there is a national Moroccan CTF organized by the Akasec club, and I know nothing about CTFs. Let the challenge begin! 3... 2... 1... go.

@NethaxStark Жыл бұрын

Tell me what editing software you use for making the gui like graphs and like explaining the ansers or theory tell me?

@mradamdavies 2 жыл бұрын

Didn't stabilize the python shell after importing it @11:44 ... #In rev shell $ python -c 'import pty; pty.spawn("/bin/bash")' ctrl-Z # In Kali $ stty raw -echo; fg # In rev shell $ reset $ export SHELL=bash $ export TERM=xterm-256color $ stty rows columns :)

@collinsinfosec 2 жыл бұрын

Good to know - Thanks for the info :)

@javachat1_my_teleqram_id 2 жыл бұрын

Questions can come in⬆️..

@brianlemba3059 2 жыл бұрын

You are doing great and you don’t suck gosh 😂

@harshabasavaraju4609 2 жыл бұрын

Respect

@realandymendoza Жыл бұрын

I love the honesty! I did my first ctf last night and it was the trivial one on hackerone. And I was so stumped and felt so dumb. But I have to remember that I’m learning and not to get discouraged.