Getting Started With CTF’s
summary
A practical how-to shows free CTF platforms (Hack The Box, TryHackMe, HackerOne01, SANS Holiday Hack) and walks a solved puzzle: a SANS 2018 terminal challenge that uses PowerShell & SQLite3, allows command injection via & or ; into a ping call, reveals onboard.db and menu.ps1, and lets the solver run sqlite3, SELECT * FROM onboard WHERE L_name='Chan' to extract "Scott" and submit it to the run-to-answer check to score the flag.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:27Getting Started with CTF's
- 1:25Obligatory slide 1 - Disclaimers
- 2:14What are CTF's?
- 2:48What is a flag?
- 3:48Your first CTF?
- 5:32What is the point?
- 6:29What subjects do they cover?
- 7:08How difficult are they?
- 7:55What do I need to know?
- 10:54How do I find answers?
- 11:51Walkthrough – Etiquette
- 14:52ping - 3 192.168.0.58
- 19:19Moving On
- 20:28Questions
related talks
16mThe Dungeon Master: Mastering Cybersecurity by Building CTF Challenges
23mGrowing Your Skillset with Capture the Flag
47mGaining experience through CTFs
41mGamifying Developer Education with CTFs
23mCTF Overview and Experience
45mHow To Learn (And Teach) Hacking
01h 06mHow hacking works
51mHow hacking works - Web edition