let's hack Santa's website

let's hack Santa's website

Source: YouTube · NetworkChuck · published Dec 23, 2020 · 1:26:20

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

NetworkChuck demonstrates how TryHackMe's Advent of Cyber provides a beginner-friendly platform for learning ethical hacking through a Christmas-themed challenge where participants "hack" Santa's website 2:17.

Key Takeaways:
• TryHackMe's Advent of Cyber is a free learning platform that teaches cybersecurity basics through daily Christmas-themed challenges, requiring no prior hacking experience 2:17
• The demonstration involves manipulating authentication cookies by decoding a hex-encoded cookie value, changing the username in the JSON data to "santa", and re-encoding it to gain admin access 21:42
• NetworkChuck explains that cookies store authentication data to maintain login sessions across website navigation, and this exercise shows how insecure cookie implementation can be exploited 5:55

The video promotes ethical hacking education and offers giveaways for TryHackMe subscriptions to encourage viewers to learn cybersecurity skills in a safe, legal environment 29:24.

Sources:

  • 2:17 Explanation of TryHackMe's Advent of Cyber learning platform
  • 5:55 How cookies work for website authentication
  • 21:42 Demonstration of cookie manipulation to gain admin access
  • 29:24 Encouragement for ethical hacking education and giveaways

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

[Music] hey what's going on guys welcome back to network chuck sorry i'm late again but today we are hacking santa's website now you'll find out what i mean here in a moment we're not actually hacking santa you'll you'll find out don't worry you'll learn but it's going to be fun um because today we're talking about tryhackme and we're going to test it out if you don't know what trihack me is you're going to learn about it real quick but man it's going to be fun so how you guys doing how's everything everyone doing man coffee i need some coffee dude right now right now so today we are legit gonna do some hacking and it's one of the most amazing things or most amazing ways i've ever seen to learn hacking it's so freaking fun i i just had to talk about it so today we're hacking santa's websit…