<rss xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title>Beginner - Category - Lewis Watson</title><link>http://lnwatson.co.uk/categories/beginner/</link><description>Beginner - Category - Lewis Watson</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Wed, 25 Sep 2024 00:00:00 +0000</lastBuildDate><atom:link href="http://lnwatson.co.uk/categories/beginner/" rel="self" type="application/rss+xml"/><item><title>Handy Tools for CTF Competitions</title><link>http://lnwatson.co.uk/posts/ctf-tools/</link><pubDate>Wed, 25 Sep 2024 00:00:00 +0000</pubDate><author>Author</author><guid>http://lnwatson.co.uk/posts/ctf-tools/</guid><description>Essential Tools for CTF Challenges When tackling CTF challenges, having the right tools at your disposal can make all the difference. Below is a collection of powerful tools organised by challenge type, including links to download or explore further. Whether you&amp;rsquo;re dealing with steganography, reverse engineering, web exploitation, or network forensics, these tools will help you navigate the competition.
If you have any suggestions reach out to me and I&amp;rsquo;ll happily add more tools :)</description></item><item><title>Obfuscated JavaScript CTF Challenge</title><link>http://lnwatson.co.uk/posts/obscuritysecurity/</link><pubDate>Thu, 20 Jun 2024 00:00:00 +0000</pubDate><author>Author</author><guid>http://lnwatson.co.uk/posts/obscuritysecurity/</guid><description><![CDATA[Web CTF Challenges Web Capture The Flag (CTF) challenges typically involve tasks that test a participant&rsquo;s knowledge and skills in web application security. These challenges often require contestants to identify and exploit vulnerabilities within a web application to capture a &ldquo;flag,&rdquo; which is a hidden string that serves as proof of completion.
Challenge Description We all know security through obscurity is the best way&hellip; right? Connection Info: {ip:port}
The Challenge This challenge was designed to introduce players to the concept of code obfuscation and highlight why &ldquo;security through obscurity&rdquo; is generally considered a poor security practice.]]></description></item><item><title>Understanding JSON Web Tokens and How *Not* to Implement Them</title><link>http://lnwatson.co.uk/posts/jwt-forging/</link><pubDate>Thu, 20 Jun 2024 00:00:00 +0000</pubDate><author>Author</author><guid>http://lnwatson.co.uk/posts/jwt-forging/</guid><description>Understanding JSON Web Tokens and How Not to Implement Them Video Walkthrough Trying something new with this, I also have a video of me solving the challenge. Maybe some folks will find it useful to watch.
Introduction JSON Web Tokens (JWTs) are a popular method for handling authentication in web applications. They&amp;rsquo;re compact, self-contained, and can securely transmit information between parties. However, like any security mechanism, they&amp;rsquo;re only as strong as their implementation.</description></item><item><title>2D Spectrogram for CTF Stego Challenges</title><link>http://lnwatson.co.uk/posts/2d-spectrogram/</link><pubDate>Sun, 26 May 2024 00:00:00 +0000</pubDate><author>Author</author><guid>http://lnwatson.co.uk/posts/2d-spectrogram/</guid><description>Understanding Spectrograms A spectrogram is a visual representation of the spectrum of frequencies in a signal as it varies over time. It provides a way to analyse how the frequency content of a signal changes, which is particularly useful in fields such as audio analysis, speech processing, and also seismology (the study of earthquakes).
Source: Spectrogram Wikipedia
How Spectrograms Work So how do spectrograms work? A spectrogram displays time on the x-axis and frequency on the y-axis.</description></item><item><title>Extension-less File Challenge: 'watson is sorry'</title><link>http://lnwatson.co.uk/posts/watson-is-sorry_challenge/</link><pubDate>Sun, 26 May 2024 00:00:00 +0000</pubDate><author>Author</author><guid>http://lnwatson.co.uk/posts/watson-is-sorry_challenge/</guid><description>Challenge Prompt As stated on the LTDH24 index page, this challenge was purely just to be annoying hence why the challenge prompt was: &amp;ldquo;pls no h8 me&amp;rdquo; - Watson. Just play with the magic bits :).
The challenge prompts users to download the following file. The file has a .bits extension because I did discover that MacOS automatically works out the file type if there is no file extension whilst downloading files - which kind of ruins the first hint in the challenge&amp;hellip;</description></item><item><title>Poisoning Large Language Model Training Data</title><link>http://lnwatson.co.uk/posts/llm-training-poisoning/</link><pubDate>Sun, 26 May 2024 00:00:00 +0000</pubDate><author>Author</author><guid>http://lnwatson.co.uk/posts/llm-training-poisoning/</guid><description>What is a Large Language Model? If you&amp;rsquo;d like to skip to the poisoned LLM challenge solution click here
This is quite a big question and will be covered in detail in its own blog post. Put simply, Large Language Models (LLMs) are advanced AI systems designed to understand and generate human (or &amp;rsquo;natural&amp;rsquo;) language. They are trained on vast amounts of text data, learning patterns, structures, and nuances of language to predict and produce coherent sentences.</description></item></channel></rss>