This makes me cry 😢 I have no idea how you knew which values to copy from Ghidra and how you knew to take every 5th value and piece it together. This is beyond mind blowing because it went so far over my head I didn’t know what I was looking at. Very impressive that you have a deep enough understanding to be able to fly through these so fast.
Ghidra does not reconstruct what's written originally (names of constants, internal functions, and variables), but it disassembles (ie, recreates) what the original code does. Thus, you can see what it performs. So yes, it's written (and referenced!) in the code, you probably just need to watch that fragment again with this knowledge.
@@gloop1984 That’s what I get for watching on my phone. 🤦♂️ I took a screenshot to see what he was talking about and he literally said it out loud. Thanks for pointing it out.
Hey... Thanks for the walkthrough. I am a noob. In the CTF, I didn't dive deep enough into the functions to understand what they were doing. I just browsed through the code and didn't find the flag and left. :-D Now I have a slightly better perspective on what (and how) to look for the things in ghidra.
Interesting binary, what would happen if instead of every 5th entry it was a random number between 0 and 10 set off a certain seed? To solve you would then have to take the seed originally used to get the entries used in the flag
heyo, i got this pic18 hex i want to dissect, i disassembled it into asm but I can't read assembly, is there a tool which can visualize the program? by visualize i mean a view like the gihdra program tree so i can learn to reverse smaller blocks since the whole thing is a bit much at once for my smallbrain. Help?
Man. You open Ghidra in almost every single CTF video. And EVERY SINGLE TIME, you fumble around looking for the text zoom, and on the occasions where you end up actually finding it before giving up, you never show where the option even is! Frustrating to watch on several different levels. I know this is a petty complaint but c'mon man, write it down or something. This is your instrument, get to know it a bit before you play a concert on it.
This one really stood out to me because it's the first time I've heard the word "Syncopation" outside of music production.
This makes me cry 😢 I have no idea how you knew which values to copy from Ghidra and how you knew to take every 5th value and piece it together. This is beyond mind blowing because it went so far over my head I didn’t know what I was looking at. Very impressive that you have a deep enough understanding to be able to fly through these so fast.
It’s written in the code on 6:11
Ghidra does not reconstruct what's written originally (names of constants, internal functions, and variables), but it disassembles (ie, recreates) what the original code does. Thus, you can see what it performs.
So yes, it's written (and referenced!) in the code, you probably just need to watch that fragment again with this knowledge.
@@gloop1984 That’s what I get for watching on my phone. 🤦♂️ I took a screenshot to see what he was talking about and he literally said it out loud. Thanks for pointing it out.
Really enjoy this hackthebox ctf series, keep it up!!
Hey... Thanks for the walkthrough.
I am a noob. In the CTF, I didn't dive deep enough into the functions to understand what they were doing. I just browsed through the code and didn't find the flag and left. :-D
Now I have a slightly better perspective on what (and how) to look for the things in ghidra.
Awesome! You're a beast John!
if you set it as char array with the right size, it would be show as string in ghidra
Oh i Literally Loved it Sooo Much!!!
Big Fan of yours
this was definitely useful and enjoyable!
wow i still have a lot to learn
I enjoy 10 minutes and the challange I can Understand
Always love your content!
I have a very long way to go before I could begin to figure out a "simple" CTF. This would take me years.
Yes, Least Significant Bit, Least Significant Byte.
And Linux Standard Base too…
John The Ripper
Excellent
Dude read my comment last stream, and decided to make a video on Ghidra FUCK YEAH!! booting up and following
Interesting binary, what would happen if instead of every 5th entry it was a random number between 0 and 10 set off a certain seed? To solve you would then have to take the seed originally used to get the entries used in the flag
Pog.
There’s Copy Special - Byte String, just that you know 😂
Hey p0fs?
@@nirmitshah7660 yup )
I think that's what most people want to see... How did you install ghidra) and not how do you use it)
Awesome 💥
Amazing ... And pls dont hate your life - Enjoy it !
Hey go and sleep,your face seems like you didn't took a rest for a while...
Great videos.....
Wow. Great👍👏👏
print(chr(data[i], end="")
end varable use for new line
epico
Slap the like!
WoW i love you video
have you tried ghidra version 10? (apparently some sort of debugger added) Would love to see how you would use it.
The debugger sucks.
@@coder_rc 😥 well dang
"I hate my life"
- John Hammond 2021 (Finding preferences
)
heyo, i got this pic18 hex i want to dissect, i disassembled it into asm but I can't read assembly, is there a tool which can visualize the program? by visualize i mean a view like the gihdra program tree so i can learn to reverse smaller blocks since the whole thing is a bit much at once for my smallbrain. Help?
Use ghidra refactor the code. Use the tool properly. REFACTOR
Ghee-dra or G-Hydra?
How hard is the OSCP cert compared to Hack the box machines?
From what I've heard htb machines are more difficult. Are you planning ok taking the OSCP soon?
@@Lacsap3366 yea in a couple of months once I get my diploma
@@bruddaman32491 i am also close to getting my bachelor's degree
How to write report
nice crack
I need a help
9:18 Well, either buy Sublime (since you are using it professionally in some capacity) or use VS Code or VS Codium, which are perfectly free to use.
how dare you
@@cloud_cluster Easy there, Greta.
Nah, he should've used vim there.
What?
4th wee wooo pog
Man. You open Ghidra in almost every single CTF video. And EVERY SINGLE TIME, you fumble around looking for the text zoom, and on the occasions where you end up actually finding it before giving up, you never show where the option even is! Frustrating to watch on several different levels. I know this is a petty complaint but c'mon man, write it down or something. This is your instrument, get to know it a bit before you play a concert on it.
Huh, your level of reversing like a newbie, it’s looks like a joke when you solving this simple tasks
Offer an improvement, don't just critique for the sake of criticism.
amazing!