Uploaded May 2021 | Updated September 2026, 2 weeks ago
What is the difference between Pentesting and Pentesting? There are different jobs that can be described as "pentesting" and I want to talk a bit about it. This should also help you to better organize your own learning, as you better understand your goal.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-general-education/cybersecurity-jobs
Join the Hextree Discord: discord.gg/xgQpCQCpvy
Blog: liveoverflow.com/pentesting-vs-pentesting-vs-bug-bounty
CHAPTERS
00:00 - Intro
00:32 - Pentesting: What most people think
01:19 - Pentesting: What I actually do
01:53 - Pentesting vs. "Pentesting"
03:49 - Better name: Application Security
04:14 - CTFs are Useless/Awesome!
05:21 - Opposite Side of Pentesting and AppSec
06:27 - I prefer being a Developer than Pentester
06:51 - Bug Bounty vs Pentesting
08:36 - Outro
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#BugBounty #PenTesting #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
What is the difference between Pentesting and Pentesting? There are different jobs that can be described as "pentesting" and I want to talk a bit about it. This should also help you to better organize your own learning, as you better understand your goal.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-general-education/cybersecurity-jobs
Join the Hextree Discord: discord.gg/xgQpCQCpvy
Blog: liveoverflow.com/pentesting-vs-pentesting-vs-bug-bounty
CHAPTERS
00:00 - Intro
00:32 - Pentesting: What most people think
01:19 - Pentesting: What I actually do
01:53 - Pentesting vs. "Pentesting"
03:49 - Better name: Application Security
04:14 - CTFs are Useless/Awesome!
05:21 - Opposite Side of Pentesting and AppSec
06:27 - I prefer being a Developer than Pentester
06:51 - Bug Bounty vs Pentesting
08:36 - Outro
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#BugBounty #PenTesting #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
![Solving Nintendo HireMe!!! with Basic Math
We are going to solve the Nintendo HireMe.cpp challenge with some basic math. I call it basic because linear algebra is taught pretty early in school. But I know it is not so easy to figure out that it can be used here. Also, the trick with GF(2) is math that you would only learn at university. But if you watched my videos, you would have known it from the software_update video writeup ;)
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: https://www.hextree.io/
Watch this video and more on Hextree: https://app.hextree.io/courses/yt-cryptography/cracking-with-z3-theorem-prover
Join the Hextree Discord: https://discord.gg/xgQpCQCpvy
Watch part 1 - Introduction: https://www.youtube.com/watch?v=6sHSDoJ5a1s
software_update challenge writeup: https://www.youtube.com/watch?v=EOlddNofKxo
HireMe.c: https://www.nerd.nintendo.com/files/HireMe
My Solution Notebook: https://gist.github.com/LiveOverflow/683181b72b4123fdb325956d6f038e72
SageMath and Jupyter Notebook: https://www.sagemath.org/
z3: https://github.com/Z3Prover/z3
CHAPTERS
00:00 - Introduction
00:26 - What Made It Click?!
01:13 - Alternative Mathematical Representation
02:04 - Recognizing Linear Algebra
03:00 - Matrices Math
04:15 - Using SageMath
04:40 - Galois Field GF(2)
06:06 - Creating and Solving the System of Equations
08:23 - Tackling the XOR Bruteforce Part
09:40 - Start of Walkthrough: Inverting s-box
10:17 - inp_to_out() and Recursive solve_round()
11:10 - Generate Internal Input[] Candidates with z3
12:45 - Kicking off the Solving Algorithm
13:41 - Cliffhanger: SageMath + Jupyter Notebook
14:02 - Finding a Solution!!!!!
14:22 - Conclusion
15:22 - Outro
SUPPORT
Per video: https://www.patreon.com/join/liveoverflow
Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): https://shop.liveoverflow.com/
WATCH, FOLLOW & READ
Second channel: https://www.youtube.com/LiveUnderflow
Twitch: https://twitch.tv/LiveOverflow/
Twitter: https://twitter.com/LiveOverflow/
Instagram: https://instagram.com/LiveOverflow/
TikTok: https://www.tiktok.com/@liveoverflow_
LiveOverflow blog: https://liveoverflow.com/
Hextree blog (ad): https://www.hextree.io/blog
#CTF #Cryptography #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement. Solving Nintendo HireMe!!! with Basic Math](https://i.ytimg.com/vi/thbZwi6WwIE/mqdefault.jpg)



![Why Pick sudo as Research Target? | Ep. 01
A serious sudo vulnerability had just been announced, but how do researchers find bugs like it? This first episode explains why sudo is an interesting target, prepares a reproducible research environment, and begins an AFL fuzzing strategy that immediately runs into practical problems.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: https://www.hextree.io/
Watch this video and more on Hextree: https://app.hextree.io/courses/yt-sudoedit/sudoedit-introduction
Join the Hextree Discord: https://discord.gg/xgQpCQCpvy
RESOURCES
Text version: https://liveoverflow.com/why-pick-sudo-research-target-part-1/
Episode files: https://github.com/LiveOverflow/pwnedit/tree/main/episode01
Full playlist: https://www.youtube.com/playlist?list=PLhixgUqwRTjy0gMuT4C3bmjeZjuNQyqdx
CHAPTERS
00:00 - Intro
01:48 - Prepare the System
03:57 - How to Pick a Research Target?
05:57 - Choose the Strategy: Fuzzing
09:27 - Fuzzing argv[] With AFL
13:00 - Running Into the Next AFL Problem
14:51 - Outro
SUPPORT
Per video: https://www.patreon.com/join/liveoverflow
Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): https://shop.liveoverflow.com/
WATCH, FOLLOW & READ
Second channel: https://www.youtube.com/LiveUnderflow
Twitch: https://twitch.tv/LiveOverflow/
Twitter: https://twitter.com/LiveOverflow/
Instagram: https://instagram.com/LiveOverflow/
TikTok: https://www.tiktok.com/@liveoverflow_
LiveOverflow blog: https://liveoverflow.com/
Hextree blog (ad): https://www.hextree.io/blog
#BinaryExploitation #LinuxSecurity #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement. Why Pick sudo as Research Target? | Ep. 01](https://i.ytimg.com/vi/uj1FTiczJSE/mqdefault.jpg)





