Ctf-foo: Difference between revisions

From Chaosdorf Wiki
Tags: mobile edit mobile web edit
(Added some hints to the event's I wont be able to attend, so we can discuss how to handle this and hopefully find a fitting solution.)
Line 77: Line 77:
* What implications can overwriting data have?
* What implications can overwriting data have?
* ... (add stuff here that might fit here)
* ... (add stuff here that might fit here)
* META: As I won't be able to attend some the following events, we'll need to find a solution (for example: I can provide slides and information for some other people to learn together or so).


=== participants ===
=== participants ===
Line 101: Line 102:


== 2022-04-30-infoleaks ==
== 2022-04-30-infoleaks ==
(I (Emile) can't be there, but I can provide some slides and an introduction in advance for someone). We'll still need a member to host the event.
We could also move this event to 2022-05-07.


=== Mentors ===
=== Mentors ===


* {{U|hanemile}}
* ???


=== topics ===
=== topics ===
Line 139: Line 143:


== 2022-05-28-mitigations ==
== 2022-05-28-mitigations ==
(I (Emile) can't be there, but I can provide some slides and an introduction in advance for someone). We'll still need a member to host the event. (I'm also not there the week before and the week after...)


=== Mentors ===
=== Mentors ===


* {{U|hanemile}}
* ???


=== topics ===
=== topics ===
Line 176: Line 181:


== 2022-06-25-heap-basics ==
== 2022-06-25-heap-basics ==
(This topic might become a complete whole own series of 5-n workshops, so be aware that this might change over time).


=== Mentors ===
=== Mentors ===


* {{U|hanemile}}
* {{U|hanemile}}
* milo


=== topics ===
=== topics ===
Line 211: Line 218:


== 2022-07-23-race-conditions ==
== 2022-07-23-race-conditions ==
(I (Emile) can't be there, but I can provide some slides and an introduction in advance for someone). We'll still need a member to host the event.
We could also move this event a week before to 2022-07-16.


=== Mentors ===
=== Mentors ===


* {{U|hanemile}}
* ???


=== topics ===
=== topics ===
Line 233: Line 243:
=== Mentors ===
=== Mentors ===


* {{U|hanemile}}
* {{U|maride}}
* {{U|maride}}



Revision as of 11:35, 31 March 2022

CTF foo
Capture The Flag foo
Art Meet-Up
Datum every other saturday
Start 14:00
Host hanemile
Relevant? Yes

Every two weeks on Saturday from 14:00 - no limit

We'll look at specific topics at each event and maybe play some CTF that is currently running afterwards in order to try out our newly learnt skills.

Topics

Got a topic you'd wish we go over? Put it here:

  • YOUT TOPIC HERE

2022-03-05-assembly-basics

Mentors

topics

  • Memory
  • Register
  • "code" (Assembly)
  • Functions (calling conventions)
  • Buffers
  • ... (add stuff here that might fit here)

participants

  • oryon
  • awh4ck3r / keiffrichards@gmail.com
  • Spectranis
  • Lukas
  • @ThisIsM4l1k

2022-03-19-linux

Mentors

topics

  • Syscalls
  • Interrupts
  • Kernel
  • Process
  • Init
  • Boot process
  • Filesystems
  • Permissions
  • Uid, Gid
  • ... (add stuff here that might fit here)

participants

2022-04-02-buffer-overflow

Mentors

topics

  • Recap: functions (calling conventions)
  • Recap: buffers
  • What do we overwrite?
  • What implications can overwriting data have?
  • ... (add stuff here that might fit here)
  • META: As I won't be able to attend some the following events, we'll need to find a solution (for example: I can provide slides and information for some other people to learn together or so).

participants

  • Plutarch

2022-04-16-shellcode

Mentors

topics

  • What is shellcode?
  • Why learn to do stuff with it?
  • What can we do with it?
  • What problems might arise?
  • How can we solve the problems that arise?
  • ... (add stuff here that might fit here)

participants

  • Plutarch

2022-04-30-infoleaks

(I (Emile) can't be there, but I can provide some slides and an introduction in advance for someone). We'll still need a member to host the event.

We could also move this event to 2022-05-07.

Mentors

  • ???

topics

  • How can information be leaked?
  • Why leak information?
  • ... (add stuff here that might fit here)

participants

  • YOUR NAME HERE

2022-05-14-rop

Mentors

topics

  • What is the initial problem leading to us ropping?
  • What is "rop"?
  • Why "rop"?
  • Recap: buffer-overflow
  • Recap: infoleaks
  • How can we leak foo using rop?
  • How can we find more gadgets?
  • How can we pop a shell?
  • ... (add stuff here that might fit here)

participants

  • YOUR NAME HERE

2022-05-28-mitigations

(I (Emile) can't be there, but I can provide some slides and an introduction in advance for someone). We'll still need a member to host the event. (I'm also not there the week before and the week after...)

Mentors

  • ???

topics

  • Start at 0, what are the problems?
  • What mitigations exist (on a high level)?
  • For each problem, what mitigation solves the problem?
  • How can we bypass the mitigations?
  • ... (add stuff here that might fit here)

participants

  • YOUR NAME HERE

2022-06-11-reversing

Mentors

topics

  • What is reversing?
  • How do we reverse?
  • What tools to we use?
  • What should be looked at in more detail?
  • Qiling
  • ... (add stuff here that might fit here)

participants

  • YOUR NAME HERE

2022-06-25-heap-basics

(This topic might become a complete whole own series of 5-n workshops, so be aware that this might change over time).

Mentors

topics

  • What primitives exist?
  • How do they work?
  • How to read the "docs" (aka. glibc code)
  • How to inspect the heap
  • Getting comfy with debugging hooks
  • ... (add stuff here that might fit here)

participants

  • YOUR NAME HERE

2022-07-09-heap-techniques

Mentors

topics

  • What's broken?
  • How do we identify broken stuff?
  • How do we break it?
  • ... (add stuff here that might fit here)

participants

  • YOUR NAME HERE

2022-07-23-race-conditions

(I (Emile) can't be there, but I can provide some slides and an introduction in advance for someone). We'll still need a member to host the event.

We could also move this event a week before to 2022-07-16.

Mentors

  • ???

topics

  • What are race conditions?
  • Where do they arise?
  • How can we identify them?
  • How con we exploit them?
  • TOCTOU
  • ... (add stuff here that might fit here)

participants

  • YOUR NAME HERE

2022-08-06-fuzzing

Mentors

topics

  • What is fuzzing?
  • Why fuzz stuff
  • How to fuzz stuff
  • Concept (Mutation, Coverage, Snapshots, ...)
  • Harnessing a target, what to look out for
  • ... (add stuff here that might fit here)

participants

  • YOUR NAME HERE

2022-08-20-kernel-security

Mentors

topics

  • What is the kernel?
  • How can we interact with it?
  • What might break?
  • How can we break it?
  • ... (add stuff here that might fit here)

participants

  • YOUR NAME HERE

2022-09-03-symbolic-execution

Mentors

topics

  • What is symbolic execution?
  • Into: z3
  • Intro: angr
  • Problems: Path explosion
  • ... (add stuff here that might fit here)

participants

  • YOUR NAME HERE

2022-09-17-automated-program-analysis

topics

  • What can be automated?
  • What can't be automated? (and why not?)

participants

  • YOUR NAME HERE