Getting started CTF

Transcript

1. Getting Started: Capture The Flag (CTF) Le Hai Duong International University lhduong@hcmiu.edu.vn June 29, 2017 Le Hai Duong (IU) Getting Started: Intro to CTF June 29, 2017 1 / 9
2. Contact Info. Le Hai Duong Mobile: 0912913932 Preferred communication: Viber Office: A1.312 Le Hai Duong (IU) Getting Started: Intro to CTF June 29, 2017 2 / 9
3. Meeting time, tentatively 01:30PM, Monday Avenue: LA1.608 Le Hai Duong (IU) Getting Started: Intro to CTF June 29, 2017 3 / 9
4. Overview ”Special kind of information security competitions” Three common types of CTFs: Jeopardy, Attack-Defence and mixed Jeopardy-style CTFs Questions (tasks) in range of categories: Web, Forensic, Crypto, Binary or something else. Team can gain some points for every solved task. More points for more complicated tasks usually. The next task in chain can be opened only after some team solve previous task. Then the game time is over sum of points shows you a CTF winer. Example:https://writeups.easyctf.com Le Hai Duong (IU) Getting Started: Intro to CTF June 29, 2017 4 / 9
5. Where to start? Read: https://trailofbits.github.io/ctf/index.html Join a tournament and sharpen skills CTF Events: https://ctftime.org/event/list/upcoming Le Hai Duong (IU) Getting Started: Intro to CTF June 29, 2017 5 / 9
6. How do we train? Pick a topic and practice with many problems Expand your knowledge Le Hai Duong (IU) Getting Started: Intro to CTF June 29, 2017 6 / 9
7. Requirements Enthusiasm in information security Hard working Commitment Determination Listen to your instructor Le Hai Duong (IU) Getting Started: Intro to CTF June 29, 2017 7 / 9
8. Preparation VirtualBox, VMWare Ubuntu Kali 2.0 Metasploitable 2.0 Le Hai Duong (IU) Getting Started: Intro to CTF June 29, 2017 8 / 9
9. Getting start Try this: http://ctf.slothparadise.com Find all the flags without searching for solution!!! Use Facebook & Viber group for discussion. Le Hai Duong (IU) Getting Started: Intro to CTF June 29, 2017 9 / 9