CryptoCat Courses

Cross-Site Scripting via Client-Side Path Traversal and DOM Clobbering - A Web Security Tutorial

Dive into advanced web security exploitation, chaining DOM Clobbering, client-side path traversal, and Open Redirect vulnerabilities to achieve XSS in a CTF challenge walkthrough.

• YouTube
• 25 minutes
• On-Demand
• Free Video

SQL Injection Tutorial - Union and Blind Attacks in Gin and Juice Shop

Master SQL injection techniques through hands-on exploitation of Portswigger's Gin and Juice shop, covering union and blind attacks, database enumeration, and automated tools like SQLMap and Burp Suite.

• YouTube
• 34 minutes
• On-Demand
• Free Video

HackTheBox Cyber Apocalypse 2024 Web Challenge Solutions - From Flag Command to Testimonial

Master web security challenges through detailed walkthroughs of HackTheBox CTF 2024, covering API testing, SQL injection, JWT attacks, and various exploitation techniques for penetration testing.

• YouTube
• 44 minutes
• On-Demand
• Free Video

DOM Clobbering, Prototype Pollution and XSS Walkthrough - Amateurs CTF 2023

Dive into advanced web security concepts through a CTF challenge walkthrough, exploring DOM clobbering, prototype pollution, and XSS exploitation techniques for penetration testing.

• YouTube
• 24 minutes
• On-Demand
• Free Video

NahamCon CTF 2023 Web Challenge Walkthroughs - XSS, RCE, and SSTI Techniques

Dive into web security challenges from NahamCon CTF 2023, covering XSS attacks, domPDF exploitation, data hiding techniques, and SSTI vulnerabilities with practical demonstrations and beginner-friendly explanations.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Heap Overflow Exploitation Tutorial - Leek Pwn Challenge

Master binary exploitation techniques through a detailed walkthrough of the "Leek" pwn challenge, covering heap overflow attacks, chunk manipulation, and secret data extraction using practical examples and debugging tools.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Web Exploitation Challenges Walkthrough - Space Heroes CTF 2023

Dive into web exploitation challenges from Space Heroes CTF, covering HTTP pollution, ChatGPT vulnerabilities, file upload security, XSS, and CSP bypass through practical demonstrations and beginner-friendly explanations.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Jailbreaking ChatGPT-Style Sandboxes - A Guide to Linguistic Hacks and Prompt Engineering

Explore techniques for bypassing LLM security measures through linguistic manipulation, featuring hands-on challenges that demonstrate prompt injection, context manipulation, and sandbox escape methods.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Funnel - HackTheBox Penetration Testing Walkthrough

Master penetration testing fundamentals through a hands-on walkthrough of the Funnel machine, covering enumeration, service discovery, password spraying, and port forwarding techniques for ethical hacking.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Basic Stack Buffer Overflow with Parameters - Return to Win Function Tutorial

Master buffer overflow exploitation techniques through a practical ret2win challenge walkthrough with parameter handling and register manipulation in binary exploitation.

• YouTube
• 12 minutes
• On-Demand
• Free Video

One Time Pad and Schrödinger's Pad Cryptography Tutorial

Dive into cryptographic vulnerabilities through a unique One-Time Pad challenge featuring Schrödinger's cat concept, exploring XOR operations and OTP reuse exploitation.

• YouTube
• 10 minutes
• On-Demand
• Free Video

JWT Algorithm Confusion and Server-Side Template Injection in Pug - Web Security Tutorial

Dive into JWT algorithm confusion and server-side template injection vulnerabilities through a practical CTF challenge walkthrough focused on exploiting Pug templating and JWT manipulation.

• YouTube
• 14 minutes
• On-Demand
• Free Video

Beginner's Guide to CTF Challenge Solutions - Warmup Challenges

Master beginner-level CTF challenges with hands-on walkthroughs covering encoding, forensics analysis, and basic cryptography from the 1337UP LIVE competition, perfect for aspiring cybersecurity enthusiasts.

• YouTube
• 12 minutes
• On-Demand
• Free Video

Cookie Forgery and Command Injection Walkthrough - Feature Unlocked Challenge - CSCTF 2024

Dive into web security exploitation through cookie forgery, signature bypass, and blind command injection techniques in a detailed CTF challenge walkthrough.

• YouTube
• 11 minutes
• On-Demand
• Free Video

XSS Exploitation in PDF.js Using CVE-2024-4367 - Akasec CTF Challenge

Dive into server-side XSS exploitation in PDF.js, exploring CVE-2024-4367 vulnerability through practical demonstration of source code analysis, exploit development, and SSRF techniques.

• YouTube
• 17 minutes
• On-Demand
• Free Video