KS note

1️⃣5️⃣ #ETHERNAUT #level_15 #Naught_Coin before call the exploit function, don't forgot to call approve() :

cast send $TARGET_CONTRACT_ADDRESS "approve(address,uint256)" EXPLOIT_CONTRACT_ADDRESS 1000000000000000000000000 --private-key $PRIVATE_KEY --rpc-url $SEPOLIA_RPC_URL

🥷🍷 <Happy Hacking/>

☘️ Good video for a person who is realllllly 0️⃣ in Security. Jesper will talk about delegatecall, storage slots, introduce some CTFs & etc. 🔗 https://www.youtube.com/watch?v=BfzLR1Sscb4

🥷 Address Poisoning Attack 🔗 officercia 🔗 metamask 🔗 blockaid 🔗 Medium

🔐 Join the GO-TO CVE Channel! 🔐 Every week, we take a deep dive into the latest CVE vulnerabilities, explaining how they work and how to protect against them. We also share custom exploits and pentesting techniques to help you understand the vulnerabilities better. Additionally, we cover SOC (Security Operations Center) strategies and provide insights on malware analysis regularly. Stay informed, stay secure! 🚨 👉 If you’re passionate about cybersecurity or just want to stay ahead of the latest threats, this is the place for you. Let’s build a safer tomorrow together! Join us now and be part of the conversation: 🔗 https://t.me/GOTOCVE

🍾 Finally! pwned "Locked and Loaded" Blockchain Challenge At HTB & Solved All the blockchain challenges (Non-VIP) 🔗 X 🔗 Linkedin

⚙️ There are many Article/Resource/Github Repo About "EVM", "Storage" & etc. but, this is a good one to start 🔗 Understanding Ethereum Smart Contract Storage

💻 Use Foundry Better 2️⃣ 💻 Use Foundry Better 3️⃣

💻 Use Foundry Better 2️⃣

👓 Recording all the emitted events - Explained The Foundry Book's Example ⚠️ import {Vm} from "lib/forge-std/src/Vm.sol"; 🔗 https://book.getfoundry.sh/cheatcodes/record-logs

⚙️ Chainlink QuickStarts 🔗 https://dev.chain.link/resources/quickstarts

2️⃣1️⃣ #ETHERNAUT #level_21 #Shop 🥷🍷 <Happy Hacking/>

1️⃣7️⃣ #ETHERNAUT #level_17 #Recovery - First Must Check The Contract at https://sepolia.etherscan.com (HERE) - Then Check the transaction which contract deployed at it (HERE) - then you will See Some Ether transfered between some contracts. the second contract which received the ether is the our target (HERE) - we must be sure that the contract is the right contract so we can use some functions such as name(), balances(),.... but i called transfer() (HERE) {Before i transfered 0.1 ether to the contract} - then we must call destroy() function (HERE) 🥷🍷 <Happy Hacking/>

🧪 unit & integration Testing — What, Why, How — Using Foundry Toolkit 🔗 https://chatgpt.com/share/20595387-9115-440e-ba13-215b2f0e9d69

🧢 gm whitehats 🧢 Continuing with our Glider Q&A Series, this week's question is: How does Glider work? 🎩 Glider at its heart is a code-analysis query engine. It allows developers/researchers to write Glides (queries written in Python). Each Glide defines a specific set of instructions that the query engine must execute. These instructions specify what Solidity code Glider should look for. Once a Glide is written, a Glide developer can then submit the query to Glider. Glider first validates that the query syntax is correct. If the syntax is correct, Glider then processes the query instructions and scans the entire Glider database for any Solidity code that matches the query’s specifications. Once finished, Glider returns the Solidity code results back to the researcher/developer to review in a readable format. Don't forget to join our Discord for more Glider Resources 💊 Wishing you all a nice weekend 🫡☀

⚒ How to calculate the Address of Contract using WalletAddress and WalletNonce using Foundry 🔗 Learn Foundry

☁️ --rpc-url VS —-fork-url — Foundry