~/talk

How To Learn (And Teach) Hacking

Talkat OWASP Global AppSec Amsterdam 2019 · on Friday, 2019-09-27· at 16:05· D201, RAI· [security, career-development]
links:none on file
slides:none on file

Explains concrete learning paths: read CS foundations, join CTFs, and use problem-based labs where students run a weekly CTF scoreboard and solve real services. Gives a solved write-up: a PHP session injection plus Windows Defender executes injected JS lets defenders delete session files, creating an oracle to extract a secret. Recommends pair/team practice, shows a university course that runs weekly CTFs, notes heavy time investment and a ~50% dropout in a hard course.

AI-written summary · about

  1. 0:00Intro
  2. 0:17Overview
  3. 1:34Hacking Competitions
  4. 3:37Definitions
  5. 4:15Hacking
  6. 4:34Breaking Boiled Code
  7. 6:07Breaking Python Code
  8. 7:52Binary Exploitation
  9. 11:20CTF
  10. 12:00How CTF Works
  11. 13:39CTF Example
  12. 14:17Azeris Example
  13. 15:37The Problem
  14. 17:07Windows Defender
  15. 17:41Salsicc
  16. 19:30Think Outside The Box
  17. 20:08Was That Time Wasted
  18. 20:48CTF Workflow
  19. 22:20First Step Program
  20. 26:48ProblemBased Learning
  21. 28:10Four Words To Teach
  22. 29:28Three Things To Teach
  23. 30:12PBL
  24. 32:01Examples
  25. 35:52Tips for teaching
  26. 40:35Feedback
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.