University CTF 2022: Supernatural Hacks Live Hacking Workshops
Source: YouTube · Hack The Box · published Dec 1, 2022 · 4:44:32
Hack The Box announces the University CTF 2022, "Supernatural Hacks," a Harry Potter-themed competition with a $50k prize pool and anti-bullying initiatives, alongside live hacking workshops 2:41-3:11.
Key Takeaways:
• The CTF features four wizard-themed schools representing different hacker archetypes, emphasizing that success comes from skill, not bullying or cheating 6:57-7:26.
• Participants compete for a $50,000 prize pool, including a custom 3D dragon trophy, CPTS certifications, and Hack The Box subscriptions 12:48-13:08.
• The event includes diverse live workshops covering web hacking, blue team defense, and binary exploitation 17:21-18:03.
• Pink Draconian demonstrates exploiting a web challenge using JWKS spoofing to forge admin tokens via malicious JSON upload 39:56-40:48.
• He further bypasses reverse proxy ACLs using HTTP request smuggling (CVE-2021-40346) to access restricted endpoints 54:47-56:01.
The stream concludes with a reminder to register for the competition and participate in the upcoming workshops to enhance hacking skills.
Sources:
- 2:41-3:11 Introduction to the Supernatural Hacks CTF
- 6:57-7:26 Description of the Harry Potter theme and schools
- 12:48-13:08 Details on the $50,000 prize pool and trophies
- 17:21-18:03 Overview of live hacking workshops
- 39:56-40:48 Pink Draconian explains JWKS spoofing
- [54:47-56:01](https://www.youtube.com/wat
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 2 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[Music] thank you [Music] foreign foreign [Music] foreign [Music] thank you [Music] thank you [Music] and hello uh I hope all of you can hear me correctly I am soti a gated Runner Community manager for hack the box and very happy and honored to have all of you here um let me see some of the comments I'm very excited because uh the purpose of this stream is the University graph of 2022 Supernatural hacks uh I don't know if all of you are participants in the CTF um I will start with a small introductions uh so first of all thank you all for joining the stream today you are going to have some live hacking workshops from yours truly uh hack the Box team and of course we are going to have not only from hack the Box team but also amazing guests like pink dragonian and our amazing sponsor Harriso…