Uploaded December 2019 | Updated September 2026, 2 weeks ago
I think it is good to get an insight into the pentesting industry by looking at public reports. This repository shows how different firms present scope, methodology, findings, impact, and recommendations, and where public reports can also become marketing.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-general-education/general-advice
Join the Hextree Discord: discord.gg/xgQpCQCpvy
GitHub repository: github.com/juliocesarfort/public-pentesting-reports
CHAPTERS
00:00 - Why Students Should Read Pentest Reports
00:45 - A Repository of Public Security Assessments
01:40 - Learning From an Academic-Style Report
02:18 - Comparing Findings, Methods, and Summaries
03:14 - When a Public Report Becomes Marketing
03:38 - A Detailed Keybase Protocol Review
05:30 - A Broader Government Security Assessment
07:43 - Using Reports to Prepare for Professional Work
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#Pentest #PenetrationTest #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
I think it is good to get an insight into the pentesting industry by looking at public reports. This repository shows how different firms present scope, methodology, findings, impact, and recommendations, and where public reports can also become marketing.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-general-education/general-advice
Join the Hextree Discord: discord.gg/xgQpCQCpvy
GitHub repository: github.com/juliocesarfort/public-pentesting-reports
CHAPTERS
00:00 - Why Students Should Read Pentest Reports
00:45 - A Repository of Public Security Assessments
01:40 - Learning From an Academic-Style Report
02:18 - Comparing Findings, Methods, and Summaries
03:14 - When a Public Report Becomes Marketing
03:38 - A Detailed Keybase Protocol Review
05:30 - A Broader Government Security Assessment
07:43 - Using Reports to Prepare for Professional Work
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#Pentest #PenetrationTest #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.

![Kernel Root Exploit via a ptrace() and execve() Race Condition
Lets have a look at a recent kernel local privilege escalation exploit!
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: https://www.hextree.io/
Watch this video and more on Hextree: https://app.hextree.io/courses/yt-system-hacking/serenity-os-kernel-exploits
Join the Hextree Discord: https://discord.gg/xgQpCQCpvy
Exploit Source: https://hxp.io/blog/79/hxp-CTF-2020-wisdom2/
Kernel Developer Walkthrough: https://www.youtube.com/watch?v=LORxdO1XUjY
Syscalls, Kernel vs. User Mode and Linux Kernel Source Code: https://www.youtube.com/watch?v=fLS99zJDHOc
How Do Linux Kernel Drivers Work? https://www.youtube.com/watch?v=juGNPLdjLH4
👕 T-Shirt Series: https://www.youtube.com/playlist?list=PLhixgUqwRTjwy6HCzLfwNzdrSrcrLOM4d
CHAPTERS
00:00 - Introduction
00:15 - Exploit PoC
00:39 - main()
00:52 - prepare_shellcode()
02:39 - mmap() shared memory to signal ready state
03:07 - fork() into [child] and [parent]
03:44 - [parent] wait for the child
04:00 - [child] unveil() loop
05:03 - [parent] ptrace ATTACH and POKE child
05:58 - [child] execve(passwd)
06:38 - [parent] PEEK entrypoint of child in loop
07:34 - [parent] child entrypoint changes!
07:49 - Exploit Walkthrough
09:20 - Root Shell via Shellcode
10:10 - Vulnerability Summary
10:37 - Which UNIX-like Kernel is this?
12:44 - The importance for Security Research
13:59 - Next Video and Resources
14:22 - Patreon and YT Members
SUPPORT
Per video: https://www.patreon.com/join/liveoverflow
Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): https://shop.liveoverflow.com/
WATCH, FOLLOW & READ
Second channel: https://www.youtube.com/LiveUnderflow
Twitch: https://twitch.tv/LiveOverflow/
Twitter: https://twitter.com/LiveOverflow/
Instagram: https://instagram.com/LiveOverflow/
TikTok: https://www.tiktok.com/@liveoverflow_
LiveOverflow blog: https://liveoverflow.com/
Hextree blog (ad): https://www.hextree.io/blog
#BinaryExploitation #LinuxSecurity #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement. Kernel Root Exploit via a ptrace() and execve() Race Condition](https://i.ytimg.com/vi/qUh507Na9nk/mqdefault.jpg)



![Solving Nintendo HireMe!!! with Basic Math
We are going to solve the Nintendo HireMe.cpp challenge with some basic math. I call it basic because linear algebra is taught pretty early in school. But I know it is not so easy to figure out that it can be used here. Also, the trick with GF(2) is math that you would only learn at university. But if you watched my videos, you would have known it from the software_update video writeup ;)
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: https://www.hextree.io/
Watch this video and more on Hextree: https://app.hextree.io/courses/yt-cryptography/cracking-with-z3-theorem-prover
Join the Hextree Discord: https://discord.gg/xgQpCQCpvy
Watch part 1 - Introduction: https://www.youtube.com/watch?v=6sHSDoJ5a1s
software_update challenge writeup: https://www.youtube.com/watch?v=EOlddNofKxo
HireMe.c: https://www.nerd.nintendo.com/files/HireMe
My Solution Notebook: https://gist.github.com/LiveOverflow/683181b72b4123fdb325956d6f038e72
SageMath and Jupyter Notebook: https://www.sagemath.org/
z3: https://github.com/Z3Prover/z3
CHAPTERS
00:00 - Introduction
00:26 - What Made It Click?!
01:13 - Alternative Mathematical Representation
02:04 - Recognizing Linear Algebra
03:00 - Matrices Math
04:15 - Using SageMath
04:40 - Galois Field GF(2)
06:06 - Creating and Solving the System of Equations
08:23 - Tackling the XOR Bruteforce Part
09:40 - Start of Walkthrough: Inverting s-box
10:17 - inp_to_out() and Recursive solve_round()
11:10 - Generate Internal Input[] Candidates with z3
12:45 - Kicking off the Solving Algorithm
13:41 - Cliffhanger: SageMath + Jupyter Notebook
14:02 - Finding a Solution!!!!!
14:22 - Conclusion
15:22 - Outro
SUPPORT
Per video: https://www.patreon.com/join/liveoverflow
Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): https://shop.liveoverflow.com/
WATCH, FOLLOW & READ
Second channel: https://www.youtube.com/LiveUnderflow
Twitch: https://twitch.tv/LiveOverflow/
Twitter: https://twitter.com/LiveOverflow/
Instagram: https://instagram.com/LiveOverflow/
TikTok: https://www.tiktok.com/@liveoverflow_
LiveOverflow blog: https://liveoverflow.com/
Hextree blog (ad): https://www.hextree.io/blog
#CTF #Cryptography #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement. Solving Nintendo HireMe!!! with Basic Math](https://i.ytimg.com/vi/thbZwi6WwIE/mqdefault.jpg)



![Why Pick sudo as Research Target? | Ep. 01
A serious sudo vulnerability had just been announced, but how do researchers find bugs like it? This first episode explains why sudo is an interesting target, prepares a reproducible research environment, and begins an AFL fuzzing strategy that immediately runs into practical problems.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: https://www.hextree.io/
Watch this video and more on Hextree: https://app.hextree.io/courses/yt-sudoedit/sudoedit-introduction
Join the Hextree Discord: https://discord.gg/xgQpCQCpvy
RESOURCES
Text version: https://liveoverflow.com/why-pick-sudo-research-target-part-1/
Episode files: https://github.com/LiveOverflow/pwnedit/tree/main/episode01
Full playlist: https://www.youtube.com/playlist?list=PLhixgUqwRTjy0gMuT4C3bmjeZjuNQyqdx
CHAPTERS
00:00 - Intro
01:48 - Prepare the System
03:57 - How to Pick a Research Target?
05:57 - Choose the Strategy: Fuzzing
09:27 - Fuzzing argv[] With AFL
13:00 - Running Into the Next AFL Problem
14:51 - Outro
SUPPORT
Per video: https://www.patreon.com/join/liveoverflow
Per month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): https://shop.liveoverflow.com/
WATCH, FOLLOW & READ
Second channel: https://www.youtube.com/LiveUnderflow
Twitch: https://twitch.tv/LiveOverflow/
Twitter: https://twitter.com/LiveOverflow/
Instagram: https://instagram.com/LiveOverflow/
TikTok: https://www.tiktok.com/@liveoverflow_
LiveOverflow blog: https://liveoverflow.com/
Hextree blog (ad): https://www.hextree.io/blog
#BinaryExploitation #LinuxSecurity #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement. Why Pick sudo as Research Target? | Ep. 01](https://i.ytimg.com/vi/uj1FTiczJSE/mqdefault.jpg)
