http://lnwatson.co.uk/tags/enusec/ENUSEC - Tag - Lewis WatsonHugo -- gohugo.ioenWed, 25 Sep 2024 00:00:00 +0000http://lnwatson.co.uk/posts/ctf-tools/Wed, 25 Sep 2024 00:00:00 +0000Authorhttp://lnwatson.co.uk/posts/ctf-tools/Essential Tools for CTF Challenges When tackling CTF challenges, having the right tools at your disposal can make all the difference. Below is a collection of powerful tools organised by challenge type, including links to download or explore further. Whether you’re dealing with steganography, reverse engineering, web exploitation, or network forensics, these tools will help you navigate the competition. If you have any suggestions reach out to me and I’ll happily add more tools :)http://lnwatson.co.uk/posts/obscuritysecurity/Thu, 20 Jun 2024 00:00:00 +0000Authorhttp://lnwatson.co.uk/posts/obscuritysecurity/http://lnwatson.co.uk/posts/quick-ctfd-installing/Thu, 20 Jun 2024 00:00:00 +0000Authorhttp://lnwatson.co.uk/posts/quick-ctfd-installing/Setting Up a CTFd Instance on a Virtual Machine Setting up a Capture The Flag (CTF) competition can be a rewarding experience for both organisers and participants. In this quick setup guide, we’ll guide you through installing a CTFd instance on a virtual machine using a simple shell script. This script automates the installation process, making it straightforward and efficient. Prerequisites Before you begin, ensure you have the following: A virtual machine running Ubuntu (tested on Ubuntu 24.http://lnwatson.co.uk/posts/jwt-forging/Thu, 20 Jun 2024 00:00:00 +0000Authorhttp://lnwatson.co.uk/posts/jwt-forging/Understanding JSON Web Tokens and How Not to Implement Them Video Walkthrough Trying something new with this, I also have a video of me solving the challenge. Maybe some folks will find it useful to watch. Introduction JSON Web Tokens (JWTs) are a popular method for handling authentication in web applications. They’re compact, self-contained, and can securely transmit information between parties. However, like any security mechanism, they’re only as strong as their implementation.http://lnwatson.co.uk/posts/2d-spectrogram/Sun, 26 May 2024 00:00:00 +0000Authorhttp://lnwatson.co.uk/posts/2d-spectrogram/Understanding Spectrograms A spectrogram is a visual representation of the spectrum of frequencies in a signal as it varies over time. It provides a way to analyse how the frequency content of a signal changes, which is particularly useful in fields such as audio analysis, speech processing, and also seismology (the study of earthquakes). Source: Spectrogram Wikipedia How Spectrograms Work So how do spectrograms work? A spectrogram displays time on the x-axis and frequency on the y-axis.http://lnwatson.co.uk/posts/watson-is-sorry_challenge/Sun, 26 May 2024 00:00:00 +0000Authorhttp://lnwatson.co.uk/posts/watson-is-sorry_challenge/Challenge Prompt As stated on the LTDH24 index page, this challenge was purely just to be annoying hence why the challenge prompt was: “pls no h8 me” - Watson. Just play with the magic bits :). The challenge prompts users to download the following file. The file has a .bits extension because I did discover that MacOS automatically works out the file type if there is no file extension whilst downloading files - which kind of ruins the first hint in the challenge…