Cyber Apocalypse 2026: The Salt Crown

This HTB Cyber Apocalypse workshop covers CTF design, AI's security impact, and deep dives into SSRF, XS-leaks, heap exploitation, and HTTP request smuggling 56:33-56:40

Key Takeaways:
• AI-augmented teams solve more (70% vs 44%), but AI struggles with pivoting—elite operators gain ~4.1x more leverage 12:04-12:14
• SSRF extends beyond blacklist bypasses—attackers leverage DNS rebinding, parser disagreements, CRLF injection, and gopher smuggling 31:04-31:16
• XS-Search bypasses SOP/CORS by inferring true/false responses through error events, redirect limits, timing, and frame counting 1:21:51-1:22:03
• UAF exploitation differs across glibc: 2.31 allows free hook overwrite, 2.35+ requires safe-linking key recovery and GOT overwrites 1:52:14-1:52:24
• HTTP request smuggling stems from components disagreeing on request boundaries—through length, framing, early exit, or H2/H3 translation 2:14:09-2:15:03

Good CTFs prioritize realistic chaining over guesswork, and AI accelerates skilled operators rather than replacing foundational understanding.

Sources:

• 56:33-56:40 Workshop overview
• 12:04-12:14 AI impact on CTF solve rates
• 31:04-31:16 SSRF exploitation techniques
• 1:21:51-1:22:03 Cross-site leak primitives
• 1:52:14-1:52:24 Use-after-free across glibc versions
• 2:14:09-2:15:03 HTTP request smuggling fundamen