Introduction about Capture the Flag

1. @tungpun_

2. What is CTF?

4. CTF
▪ Capture the Flag (CTF) is a special kind of
information security competitions.
▪ Two common types of CTFs:
– Jeopardy CTFs
– Attack-defence

5. Jeopardy-style task
▪ Pwning/Exploiting
▪ Reverse engineering
▪ Web hacking
▪ Crypto
▪ Forensics
▪ ACM/Programming
▪ Recon/Social engineering
▪ Trivia

6. Attack-defence

7. flag{2fcc4b5ade7982fc24ds}
this_is_a_flag
c41_n4y_cung_g01_l4_c0
CSAW{asci_is_awesome}
PUNCTF_1s_n0t_real
Flag?

8. WHY ?

10. HOW ?

11. Ingredients
▪ Thinking
▪ Security skills like exploiting, crypto, … etc
▪ Scripting
▪ Teamwork
– team size matters too
▪ Lot’s of coffee

12. Books
– The Art of Software SecurityAssessment: Identifying and Preventing
SoftwareVulnerabilities (kinh thánh trong lĩnh vực an ninh ứng dụng)
– Reversing: Secrets of Reverse Engineering
– Shellcode Handbook
– The Art of Memory Forensics
– Nghệ thuật khai thác lỗ hổng phần mềm
– Hacker -The Art of Exploitation - 2nd Edition
– A Bug Hunter's Diary
– TheTangled Web
– Practical Cryptography
– Introduction Mathematical Cryptography

13. WHO ?

15. @geohot

16. WHERE ?

17. Where to start ?
▪ Online CTFs
–CTFTime.org (CTF Calendar)
▪ Past CTF archives
–picoctf
–whitehat contest
▪ Read write-ups
–CTFTime.org
–Team’s blogs
–github.com/ctfs/write-ups-2015
▪ Wargames
–pwnable.kr
–w3challs.com
–www.root-me.org
–reversing.kr
–microcorruption