CTF 101: Competitive Learning in Cybersecurity

Discover how to find upcoming capture the flag events using ctf time, explore event pages, register, and engage with platforms like ctfd to learn from challenges.

Explore Hack The Box, a cybersecurity learning platform with attackable boxes and retired machines to practice CTF challenges, gain user and root flags, and access a VIP membership and certifications.

Explore tryhackme, a user-sourced, bite-sized cyber security platform with rooms, pathways, and series that offer guided practice on topics like Linux fundamentals part one.

Discover HackTricks, an invaluable compendium of pentesting methodologies and payloads for attacking or hardening systems, useful for CTF challenges and red team work.

Set up your capture the flag competition environment with a Kali Linux VM via VMware or VirtualBox, allocate 8 GB RAM and 80 GB drive, then log in as Kali/Kali.

Set up PyCharm as the go-to Python IDE for CTF challenges in Kali, covering download, Java prerequisites, and virtual environment management for efficient scripting.

Use Ghidra, an open source reverse engineering tool, to decompile programs for CTF challenges and extract flags. The lecture guides downloading, setup, and launching Ghidra for reverse engineering practice.

Install and use ida, a reverse engineering tool, including the free linux edition, to disassemble and decompile executables for ctf and crack me type challenges.

Learn to set up Sublime Text as a powerful text editor for CTFs, install via command line from the stable channel, explore plugins and the command palette for faster challenges.

Use Visual Studio Code as an optional tool alongside PyCharm to accelerate coding with features for ctf challenges. Install deb package on Kali Linux and explore Python basics in lesson.

Discover why coding matters in cybersecurity and how a basic Python skill can automate tasks. Use simple scripts to decrypt a flag and boost CTF performance.

Master unix navigation and bash basics for ctf via the bandit war game on over-the-wire.org, using ssh and commands like ls, cd, and cat to read readme.

Learn how to use Python scripting to automate repetitive CTF tasks, explore basic types like numbers, strings, lists, and dictionaries, and manage projects in PyCharm and GitHub.

Master Python loops and conditional statements by writing scripts with for loops, range, and indentation, and apply fizzbuzz-style logic to process input quickly for CTF challenges.

Learn how to extend Python with modules by importing external packages, installing them via PyCharm, and using crypto and Modbus libraries to solve CTF challenges.

Discover cryptography basics and how to use Cyber Chef, the free tool from GCHQ, to transform input with recipes such as hex, hashing, and compression for CTF challenges.

Identify and decode common encodings in ctf challenges with Cyber Chef, including hex, decimal, binary, base64, base32, and octal. Use magic to detect encoding and reveal the flag.

Master bitwise operations and the exclusive or XOR, its truth table, and how XOR processes data bits to reveal the flag with hex or utf-8 keys.

Explore simple historical ciphers commonly seen in CTF challenges, including the Caesar cipher and Rot13, and decode Morse code and binary-like encodings using Cyber Chef.

Explore esoteric languages and Langs.org in cybersecurity challenges, learn how strange text may hide executable programs, and use lang searches to uncover a flag.

Explore RSA basics, including generating public and private keys from two large primes, encrypting with e and n, and decrypting with d to secure online communications.

Explore weak RSA: e=3 cube-root decryption and gcd-based factoring across multiple keys to derive private keys and decrypt the flags.

compare rsa and aes, showing rsa as public key cryptography and aes as symmetric encryption with a shared password, and connect these concepts to practical ctf challenges and crypto resources.

learn from the shapeshifter cryptography challenge at NahamCon eu 2022: reverse an xor-based lfsr transformation to recover the flag, using a backshift and unshaping approach.

Explore forensics challenges by using the strings program to reveal hidden flags in images and files, then filter results with grep and recognize encoding tricks like base64 or binary.

Explore file carving to uncover hidden data inside images and files, using markers, magic numbers, and header data. Use binwalk to identify and extract concealed content, revealing archives and flags.

Install volatility for memory forensics and learn to extract information from memory dumps. Clone the GitHub repo, set up a Python virtual environment, install requirements, and run volatility.

Discover memory forensics with volatility by analyzing a Windows memory dump, listing processes, inspecting command lines, and extracting flags and passwords for CTF challenges and forensic triage.

Explore disk forensics with autopsy by loading a raw or EnCase disk image, recovering deleted files, and locating flags in ctf challenges through metadata, timelines, and data sources.

Discover how steganography hides data in images using least significant bit techniques, enabling flag extraction from JPEGs with tools like stag hide in Kali Linux.

Explore network traffic analysis with Wireshark, a staple in CTF challenges. Load it from Kali Linux, capture traffic on interfaces, and analyze TLS and DNS to uncover hidden flags.

Learn to analyze http traffic with Wireshark, view http streams and headers, and export http objects to locate flags in CTF and forensics challenges.

Explore ftp, a plain text file transfer protocol, and how Wireshark exposes login credentials and file transfers in forensic and network analysis ctf challenges.

Investigate exfiltration challenges in capture the flag competitions by analyzing TCP flag patterns in Wireshark, decode data from TCP flags with a Python script and Scapy, and recover the flag.

Learn to programmatically extract data from pcap files using Python and Scapy, pulling TCP flags to reconstruct the flag, and use Tshark for command-line data extraction.

Set up Docker on a Kali VM to run prepackaged web exploitation challenges. Install docker.io, enable the service, add your user to the docker group, and verify with docker ps.

Explore the OWASP top ten and practice web app security with the OWASP Juice Shop, deploying via Docker to practice injections, broken access controls, and cryptographic failures for flag hunting.

Learn to use Burp Suite as a proxy to intercept and modify HTTP traffic, monitor requests, and exploit web apps like the juice shop in a Kali Linux environment.

Apply enumeration strategies to web capture the flag challenges by inspecting robots.txt, analyzing network requests, headers, and cookies, and manipulating local and session storage to uncover hidden flags.

Explore sql injection on web login pages, where inputs like a single quote and or 1=1 -- create true conditions, bypass authentication, and reveal the admin flag in ctf challenges.

Learn reverse engineering concepts for ctf crack-me challenges by statically and dynamically analyzing binaries with Ghidra, exploring decompiled code, and using strings to uncover hidden passwords or flags.

Understand how password hashes work as one-way representations and watch cracking them with hashcat using a rockyou word list in Kali Linux, including MD5 and SHA-1 examples.

Harness hashcat mask attacks to crack md5 hashes using a format, such as the flag with eight digits, using -m 0 and -a 3 to generate and test matching candidates.

A combinator attack merges two word lists, such as adjectives and cities, to crack an MD5 hash with Hashcat, testing word-list creation and tool familiarity.

Explore Hashcat rule-based attacks to mangle dictionary passwords into formats like two capital letters and a trailing digit using MP64 masks.

CeWL creates custom word lists by crawling sites, lets you set 8–12 character limits, depth, and output to a file to support targeted dictionary or rule-based password attacks.

Crack encrypted zip files using fcrackzip or crackzip with rockyou word lists, then use John the Ripper and hashcat to crack hashes and reveal the flag.