Strada’s Post

In the Elf Connect challenge from #holidayhack 2024, I'll hack a Elf game based on the NYT connections game. I'll show some basics for browser dev tools, and a couple ways to cheat the game. https://lnkd.in/eRfvrzYE

On behalf of the WebZero team, we're thrilled to announce The Blockspace Symmetry: a 3-day hackathon in collaboration with the Web3 Foundation, during the Web3Summit geared to incubate ideas that push the boundaries of innovation to benefit the whole of web3. WHEN? 10 AM August 19- 10PM 21 WHERE? The Kultursaal of the historic “Funkhaus” in East Berlin, Germany This will be the first hackathon of its kind hosted in Berlin that brings together builders across all web3 protocols and ecosystems with the mission to create together. Stay tuned for the protocols and partners we'll be collaborating with. Expect multi-chain. No maximalism. No tribalism. Just open source hacking and collaboration, hopefully creating a ripple effect of value created. 👉 Applications for hackers just opened, please share around and join us on our mission to bringing hackers from all ecosystems together: https://lnkd.in/e7k_J4kq A fully-functional and user-friendly, decentralized web can only be achieved when we find symmetry—without sacrificing our ideals. [...] The symmetry lies in a balance of opposites and tensions in ideals, a harmony between opposing forces. Take a chance to ignite your hacker spirit and find the balance. 💻👾

Just completed the TryHackMe Mindgames machine! 🚩 This box had an exciting mix of web exploitation and privilege escalation. Here’s a quick breakdown of how I solved it: 🔐 Gaining Access: I crafted a reverse shell in Python, encoded it using brainfuck, and executed it to get a shell on my machine, grabbing the first flag. ⚙️ Linux Privilege Escalation via Capabilities: Linux Capabilities allow binaries to run with elevated privileges without full root access, but they can also create security risks if misconfigured. 🔍 The Scenario: During enumeration with Linpeas, I found the OpenSSL binary had the 'cap_setuid+ep' capability, allowing it to change user IDs. I crafted an exploit in C and executed it—boom! Got root access and captured the final flag. #TryHackMe #CyberSecurity #PrivilegeEscalation #LinuxSecurity #CTF #EthicalHacking

Dive into Basic Exploit Development, Advanced Buffer Overflows, and Format String Vulnerabilities with this comprehensive playlist! Watch now: https://lnkd.in/gyUNuCdM

🚀 I won but I lost! Participating in a hackathon for the first time and contributing to open source was an exciting experience. I joined the OSS.GG https://oss.gg/ Hackathon and out of 4,700 participants, I secured 2nd place! 🏆 Unfortunately, I didn't win any prizes. The top rewards were a Mac, iPhone, and PS5, but the 2nd position got... well, nothing. 😅 Check out my OSS.GG profile: https://oss.gg/Khaan25 I was the only participant from Pakistan (looking at leaderboard - maybe wrong), with most of the other top contenders being from India. It felt both exhilarating and disheartening to invest so much time and effort, only to face unexpected challenges. Here's what happened: In the early days of the competition (Oct 1 - Oct 30), I unknowingly submitted duplicate side quests. On the last day, a maintainer flagged me for this and initially excluded me from the raffle. After a conversation, I managed to stay in the game. I asked, "Why would I cheat for 300 points when I was already in the top 3?" - It made sense to the maintainer and he said that I'm in the raffle. I won nothing in the end 😐 I had hoped for a MacBook Pro or Air. Sadly, it wasn't in my destiny this time. Was I worth a MacBook? My client reassured me, saying: "anyways, you are a master!" Despite the ups and downs, finishing 2nd out of 4,700 players has motivated me to aim higher - Working even harder for next year's Hacktoberfest. 🍀 Congrats to the winners. Have you faced similar experiences? Share your story and keep pushing forward!

Hackbyte2.0 Winner 🏆 It marked my first in-person MLH hackathon, and the scale of it was truly grand. The journey was filled with both ups and downs. Hackbyte2.0 was more than just a hackathon—it was a test of both physical and emotional endurance. Alongside tackling technical challenges, I also acquired invaluable non-technical skills. Got many swags and stickers ,met with new people (forgot to take photo with them), tried Trending Tweet challenge, midnight games and a lot more. Met with some of the great mentors as well .A special mention to Khushi Trivedi, Sagar Uprety , Ashu Kumar, Chaitanya Rai, and Sanskriti Harmukh. All the mentors were amazing. Huge thanks to my Squad  Aditya Gha,  Ramesh and  Akash Paloj. Sorry if I ever caused frustration—though I believe you're accustomed to it by now! All jokes aside, a good team is essential, and I always enjoys collaborating with you all. A special shoutout to the mentors and volunteers of BitByte TPC working super hard to ensure the best "Hacker Experience", must say Major League Hacking really ensures that every participant enjoys and learns .Additionally, winning the sponsor track of Virtual Protocol was the cherry on top of an already memorable experience . #Hackbyte2.0 #HackathonWinner #Teamwork #Gratitude #VirtualProtocol

Greetings of the day!! Excited to share that I've registered for Hacktoberfest 2024 as an open-source contributor! I'm looking forward to collaborating with the global community, learning from experts, and contributing to innovative projects. If you're also participating or interested in exploring open-source opportunities, let's connect! Happy hacking and let's make October count! #Hacktoberfest #OpenSource #DeveloperCommunity #Collaboration #Innovation"

Imagine being a Cold War hacker, infiltrating top-secret files with nothing but a glowing terminal screen.... For my first LinkedIn post, I'm thrilled to share a sneak peek at my solo project for the #GitHub #GameOff #GameJam! This year’s theme is "SECRETS," and picking a wildcard limit of just 4 colours inspired me to create a gritty, 1960s-style hacker simulator. The game's concept is that you are a hacker, secretly accessing a top-secret computer from a distance. You should penetrate the system, decrypt the passwords, swipe sensitive information, and try to piece together the game's narrative in the eerie green light of a terminal interface. Tools and tech: The project is being made in #GodotEngine Are you guys interested in seeing where this game goes? #GameDev #IndieGameDev #RedIndieGames #Godot

Next up, let's reveal the winners of track 2️⃣ at our EasyA x Stacks Harvard Hackathon. For this track, hackers were tasked with building an app that helps enhance security for Stacks developers and the broader ecosystem 🌐 Here are the winning teams securing Stacks! 🏆👇 🥇 ($6,000) Abhay Deshpande and Narasimha Teja Reddy built Genesis Block. It's a no-code AI dApp that helps developers write and deploy smart contracts without having to code! Literally drag and drop for creating Stacks dApps. Insanely cool. We know 😎 🥈 ($3,000) Mewe wallet, launched by Meet Bhanushali and Vedant Dalvi is a wallet focused on pre-transaction threat identification. It notifies users in case they're about to send money to malicious accounts 💰 🥉 ($1,000) StacksGen helps dApp developers turn Clarity contracts into interactive UIs with AI-generated React components, shareable source code and more. Literally one of the coolest applications of Web3 and AI, not to mention one of the most practical!

Curious how I’ve earned over $14,000 in Google Chrome bounties with fuzzing? Come to my talk at Defcamp, 'Click to Hack: Fuzzing and Exploiting Browsers via Mouse Clicks!' I’ll be sharing how UI bugs in modern web browsers can be exploited, as well as how I made a fuzzer that catches these elusive issues. Imagine a sequence of clicks causing memory corruption and breaking through the browser’s sandbox :) If you’re attending Defcamp, feel free to come say hi! As a CTF enthusiast and vulnerability researcher, I’m always up for a chat. And if you can’t make it, keep an eye out — I’ll post slides and some details after the conference. Stay tuned!