Skip to main content
CPEBuddy
Cyber Santa Is Coming To Town - Hacking Party

Cyber Santa Is Coming To Town - Hacking Party

Source: YouTube · Hack The Box · published Dec 14, 2021 · 5:32:58

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

The Hack The Box hacking watch party celebrates the successful Cyber Santa CTF and features community leaders demonstrating practical web exploitation techniques including Stored XSS and SQL injection.

Key Takeaways:
• The event highlighted the Cyber Santa CTF, which saw over 8,000 players and 14,000 flags submitted across 25 categories 15:22.
• Stock demonstrates a Stored XSS vulnerability in a web application to harvest admin cookies using the XHunter tool 42:18.
• A time-based SQL injection in an admin panel is exploited using SQLMap to bypass authentication 51:20.
• The session warns about the ongoing critical impact of Log4j vulnerabilities in the wild 32:34.

This collaborative live stream effectively bridges the gap between CTF participation and real-world bug bounty methodologies.

Sources:

  • 2:22 Introduction and CTF kickoff.
  • 15:22 CTF statistics and winners.
  • 31:04 Stock introduction.
  • 32:34 Discussion on Log4j vulnerabilities.
  • 35:33 First challenge (Happy Elves).
  • 42:18 XSS exploitation and cookie theft.
  • 51:20 SQL injection and SQLMap usage.

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 2 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

foreign [Music] [Music] good morning [Music] foreign [Music] foreign [Music] foreign [Music] [Music] thank you [Music] thank you hello all uh how are you greetings from hack the boss I'm sorry AKA drauner I'm the community manager and very happy and or not to have all of you here we are very excited uh it's a very festive time uh these times um it's the end of the year for almost everyone in the world um it's uh we are slightly going back to normal and back to reality after coveting and everything my voice however not but that is another reason so we want to appreciate guys thank you so much for coming to the biggest hiking party ever created so give it up for everyone that is joining in today I got amazing guests uh that have tuned in I will present you one by one and before we start I wo…