Skip to main content
CPEBuddy
Global Cyber Skills Benchmark 2025: Hacking Workshops

Global Cyber Skills Benchmark 2025: Hacking Workshops

Source: YouTube · Hack The Box · published May 23, 2025 · 1:59:27

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

This video showcases the Hack the Box "Operation Blackout" CTF event with presentations on detecting and removing the XZ backdoor 10:21, attacking web servers and sandbox escaping 27:35, and analyzing the "Sandworm" attack simulation 49:29.

Key Takeaways:
• The XZ backdoor affects systems with liblzma versions 5.6.0 and 5.6.1, compromising SSH servers on Debian-based systems 15:33
• Proper remediation requires downgrading the compromised package rather than unorthodox approaches like removing SSH entirely 20:01
• SPIP CMS version 4.0.0 is vulnerable to remote code execution without authentication 36:30
• Windows Subsystem for Linux (WSL) can be escaped by mounting the C drive to access the Windows filesystem 45:00
• The Sandworm attack simulation demonstrates analyzing SMTP exploits, persistence mechanisms, and lateral movement 53:00

The CTF event starts 24 hours after this stream and includes various challenges with prizes for participants.

Sources:

  • 10:21 Introduction to XZ backdoor challenge
  • 15:33 Explanation of how XZ backdoor affects SSH
  • 36:30 SPIP CMS vulnerability demonstration
  • 45:00 WSL privilege escalation technique
  • 53:00 Sandworm attack simulation analysis

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 2 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

[Music] [Music] [Music] [Music] Heat. Heat. Are you [Music] forever? Heat. [Music] Heat. Heat. [Music] [Music] Heat. Heat. Heat. [Music] [Music] [Music] [Music] Heat. [Music] [Music] Heat. [Music] [Music] Heat. Heat. I'll be back. Heat. Heat. [Music] [Applause] [Music] Hey everyone. Oh, there we go. Did I leave Oblivion running? Uh, no. Uh, just our wonderful background music. Thank you so much everyone for being here. Hello. Welcome uh one of the awesome uh CTF live streams that we have for Hack the Box. Always your hostess with the mostess uh Dark aka John. Uh thank you so much for being here. Uh good morning, good afternoon, wherever you're at. Appreciate having you here today. We are here for the awesome uh our upcoming CTF that actually starts tomorrow. Uh and this ahead I'll post thi…