Uploaded August 2020 | Updated September 2026, 2 weeks ago
Hardware challenge "Having a Blast" from the Google CTF Finals. It can be compared to the "Keep Talking and Nobody Explodes".
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-hardware-hacking/digital-circuit-reversing
Join the Hextree Discord: discord.gg/xgQpCQCpvy
The Challenge Trailer: youtube.com/watch?v=_8fBHnH4VNE
John Hammond: youtube.com/channel/UCVeW9qkBjo3zosnqUbG7CFw
Challenge Sources: github.com/google/google-ctf/tree/master/2019/finals/hardware-having-a-blast
CHAPTERS
00:00 - Intro
00:38 - Challenge video
03:41 - Challenge hints
05:31 - Before the first attempt
07:40 - First try
08:33 - Recap of the first attempt
14:00 - Interview: RedRocket
15:00 - Interview: LeavCat-PLUS
15:48 - Challenge discussions
17:03 - Second attempt!
21:05 - Did we win?
21:20 - Interview: Challenge Author
29:00 - Flag distribution to winning teams
30:02 - Fails...
31:14 - Eavesdropping on challenge conversation
36:59 - Challenge summary
"advertisement" because Google paid for flights and hotel.
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#ReverseEngineering #CTF #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
Hardware challenge "Having a Blast" from the Google CTF Finals. It can be compared to the "Keep Talking and Nobody Explodes".
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-hardware-hacking/digital-circuit-reversing
Join the Hextree Discord: discord.gg/xgQpCQCpvy
The Challenge Trailer: youtube.com/watch?v=_8fBHnH4VNE
John Hammond: youtube.com/channel/UCVeW9qkBjo3zosnqUbG7CFw
Challenge Sources: github.com/google/google-ctf/tree/master/2019/finals/hardware-having-a-blast
CHAPTERS
00:00 - Intro
00:38 - Challenge video
03:41 - Challenge hints
05:31 - Before the first attempt
07:40 - First try
08:33 - Recap of the first attempt
14:00 - Interview: RedRocket
15:00 - Interview: LeavCat-PLUS
15:48 - Challenge discussions
17:03 - Second attempt!
21:05 - Did we win?
21:20 - Interview: Challenge Author
29:00 - Flag distribution to winning teams
30:02 - Fails...
31:14 - Eavesdropping on challenge conversation
36:59 - Challenge summary
"advertisement" because Google paid for flights and hotel.
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#ReverseEngineering #CTF #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.









![Understanding C Pointer Magic Arithmetic | Ep. 07
We debug the line that causes the heap overflow. And its a great opportunity to understand pointers in C.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: https://www.hextree.io/
Watch this video and more on Hextree: https://app.hextree.io/courses/yt-sudoedit/understanding-the-vulnerability
Join the Hextree Discord: https://discord.gg/xgQpCQCpvy
The full playlist: https://www.youtube.com/playlist?list=PLhixgUqwRTjy0gMuT4C3bmjeZjuNQyqdx
Grab the files: https://github.com/LiveOverflow/pwnedit
The original disclosure: https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit
Episode 07:
CHAPTERS
00:00 - Intro & Motivation
00:46 - Create Debug Build
01:02 - The Crashing Location
01:43 - Scary Pointer Magic
02:10 - *to++ = *from
02:56 - Explaining: from++
04:03 - Explaining: *from
04:56 - Explaining: to++
05:23 - Explaining: *to = *from
05:54 - The Copy While Loop
06:26 - Explaining: from[0] vs *from
07:14 - The Bug!
08:35 - Wrong Allocation Size Calculated
09:30 - Unescape Logic
10:15 - Why though?
SUPPORT
Per video: https://www.patreon.com/join/liveoverflow
Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): https://shop.liveoverflow.com/
WATCH, FOLLOW & READ
Second channel: https://www.youtube.com/LiveUnderflow
Twitch: https://twitch.tv/LiveOverflow/
Twitter: https://twitter.com/LiveOverflow/
Instagram: https://instagram.com/LiveOverflow/
TikTok: https://www.tiktok.com/@liveoverflow_
LiveOverflow blog: https://liveoverflow.com/
Hextree blog (ad): https://www.hextree.io/blog
#BufferOverflow #BinaryExploitation #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement. Understanding C Pointer Magic Arithmetic | Ep. 07](https://i.ytimg.com/vi/zdzcTh9kUrc/mqdefault.jpg)