Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Capture The Flag at SonarSource 2019

Janos Gyerik
September 24, 2019
Programming
1
34

Capture The Flag at SonarSource 2019

A security wargame. Put yourselves in the shoes of a hacker, and gain new insights about software security in this friendly competition.

Janos Gyerik

September 24, 2019
Tweet

More Decks by Janos Gyerik

See All by Janos Gyerik
Keyboard shortcuts
janosgyerik
0
130
Analyze your changeset in a branch before git push using SonarLint + Git hooks; Round #2
janosgyerik
0
620
Analyze your changeset in a branch before git push using SonarLint + Git hooks
janosgyerik
0
320
Unwatch GitHub repos
janosgyerik
0
280
Code Reviews
janosgyerik
0
140
Playing with Yahoo! Pipes
janosgyerik
0
230
Cool features of GitHub
janosgyerik
0
1.3k
Time-saving tricks on the command line
janosgyerik
1
4.1k

Other Decks in Programming

See All in Programming
Why Jakarta EE Matters to Spring - and Vice Versa
ivargrimstad
0
1k
よくできたテンプレート言語として TypeScript + JSX を利用する試み / Using TypeScript + JSX outside of Web Frontend #TSKaigiKansai
izumin5210
6
1.7k
リアーキテクチャxDDD 1年間の取り組みと進化
hsawaji
1
220
3rd party scriptでもReactを使いたい！ Preact + Reactのハイブリッド開発
righttouch
PRO
1
600
Make Impossible States Impossibleを 意識してReactのPropsを設計しよう
ikumatadokoro
0
170
PHP でアセンブリ言語のように書く技術
memory1994
PRO
1
170
みんなでプロポーザルを書いてみた
yuriko1211
0
260
Content Security Policy入門 セキュリティ設定と 違反レポートのはじめ方 / Introduction to Content Security Policy Getting Started with Security Configuration and Violation Reporting
uskey512
1
520
最新TCAキャッチアップ
0si43
0
140
Macとオーディオ再生 2024/11/02
yusukeito
0
370
ECS Service Connectのこれまでのアップデートと今後のRoadmapを見てみる
tkikuc
2
250
LLM生成文章の精度評価自動化とプロンプトチューニングの効率化について
layerx
PRO
2
190

Featured

See All Featured
Producing Creativity
orderedlist
PRO
341
39k
CSS Pre-Processors: Stylus, Less & Sass
bermonpainter
356
29k
What’s in a name? Adding method to the madness
productmarketing
PRO
22
3.1k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
44
6.8k
The Language of Interfaces
destraynor
154
24k
BBQ
matthewcrist
85
9.3k
The Myth of the Modular Monolith - Day 2 Keynote - Rails World 2024
eileencodes
16
2.1k
Ruby is Unlike a Banana
tanoku
97
11k
Bootstrapping a Software Product
garrettdimon
PRO
305
110k
Fantastic passwords and where to find them - at NoRuKo
philnash
50
2.9k
Why Our Code Smells
bkeepers
PRO
334
57k
What's new in Ruby 2.0
geeforr
343
31k

Transcript

  1. Capture The Flag a security wargame Janos Gyerik | @janosgyerik

    | 26 september 2019

  2. What makes good software good?

  3. None

  4. Defenders vs Attackers … different perspectives Attack vs Defence

  5. Exercise: think like an attacker - Increase awareness of security

    issues - New insights & enlightenment - Find security issues better - Have some fun :-)
  6. None
  7. None

  8. 6 levels Zen

  9. Hints!

  10. Teams of 2-4

  11. 1 week

  12. Prizes Winners: surprise Finishers: limited edition T-shirt M: And the

    prize? R: For the winning team: surprise!
  13. None

  14. https://sonarsource.capture-the-flag.club

  15. #capture-the-flag

  16. A shared environment

  17. @janosgyerik | github.com/ctf-o-matic/capture-the-flag

  18. Go fork yourself https://github.com/ctf-o-matic/capture-the-flag