The Dungeon Master: Mastering Cybersecurity by Building CTF Challenges
summary
Demonstrates how Capture The Flag (CTF) challenges are built and exploited on TryHackMe using concrete stacks: a Git repository exposed with wget to retrieve secrets, a Docker multi-host simulation with a hidden dev container and mounted volume enabling SSH persistence, and a Java challenge chaining SSRF to an internal API and then JNDI/RMI payloads to achieve remote code execution. Several provided VMs were solved end-to-end, while one challenge took about 8–12 hours to crack.
AI-written summary · about
chapters (9)
- 0:00CTF introduction
- 1:35Challenge story creation
- 3:02Storyboarding inspiration
- 5:11Dev mistakes vulnerabilities
- 5:52Docker simulated networks
- 8:43Learning by creating CTFs
- 10:09JNDI and RMI exploit
- 13:41CTF creation tips
- 14:29Q&A and conclusion
