Re:Pwntools – CTF Framework
by loomisfifty3 on Thursday July 31, 2014 @12:26AM
(#8112466)
Interesting. How would one get into systems CTF? Sure, google returns plenty of hits, but are there any active communities that are better geared towards newbs or better resources, etc...
The best place to start is by doing one. The easiest to get into, by far, is http://www.microcorruption.com
It is the best beginner CTF I have ever seen in my life, and I've been CTF'ing for 9 years.
Incidentally, if anyone here finds that they really like this stuff, my team (Samurai) is all about teaching those who want to learn. Email me at [email protected] :)
Thank you for this link, it's really good fun though I suspect I'll get out of my depth soon enough :)
Thanks for this site. Its great for starting!
A great resource is PicoCTF, which, although designed for high schoolers, is a pretty good way to get into the scene: https://picoctf.com
(It was from PicoCTF that I went from knowing nearly nothing about security to qualifying for a competition in New York to qualifying for a competition in Korea to obtaining an internship in a computer security lab -- thanks once again, CMU! Even if I'm working at your rivals now...)
Re:Pwntools – CTF Framework
by thefreeman on Thursday July 31, 2014 @01:34AM
(#8112622)
VulnHub [1] is fantastic. It is an index of VM's set up specifically for CTF challenges, with links to walkthroughs as well. I have been having a blast working my way through them.
Most of the VM's link to the creators' website / blog, which is a good way to find more information and resources as well, as they tend to be active security researchers.
CTF is a common kind of 'hacking competition'. The acronym does, indeed, stand for 'Capture The Flag', but instead of the physical game, you get people competing to hack ('pwn') a piece of software.
Basically this is just a little library of utilities that come handy when playing CTF: hexing, assembly, shell code, etc. Think of it as a bunch of pre-made snippets that you'd normally reuse when trying to hack something.