CTF For Beginner

HITCON Community 2015演講的投影片

主題 : CTF For Beginner

要是有興趣的歡迎加入Bamboofox喔

Bamboofox網站

網路安全策進會

Ctf For Beginner from 威伯 陳

Ubuntu-For-CTF

My config

---

https://github.com/bananaappletw/Ubuntu

---

Update everything

sudo apt-get update
sudo apt-get -y upgrade

Install google-chrome

wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | sudo apt-key add -
sudo sh -c 'echo "deb http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google-chrome.list'
sudo apt-get update
sudo apt-get install -y google-chrome-stable

Install multi architecture

dpkg --add-architecture i386
sudo apt-get update
sudo apt-get install -y gcc-multilib

Install strace, ltrace, gdb64

sudo apt-get install -y strace
sudo apt-get install -y ltrace
sudo apt-get install -y gdb64

Install pip

sudo apt-get install python-setuptools
sudo apt-get install easy_install
sudo easy_install pip
sudo pip install pwntools
sudo pip install capstone --upgrade
sudo pip install ropgadget --upgrade

vim

sudo apt-get install -y vim
cp .vimrc ~
cp .gitconfig ~
git clone https://github.com/VundleVim/Vundle.vim.git ~/.vim/bundle/Vundle.vim
vim +PluginInstall +qall
wget https://github.com/Lokaltog/powerline/raw/develop/font/PowerlineSymbols.otf https://github.com/Lokaltog/powerline/raw/develop/font/10-powerline-symbols.conf
sudo mv PowerlineSymbols.otf /usr/share/fonts/
sudo fc-cache -vf
sudo mv 10-powerline-symbols.conf /etc/fonts/conf.d/

Install qira

cd ~/
cd ~/ && wget -qO- qira.me/dl | unxz | tar x && cd qira && ./install.sh
./fetchlibs.sh 
./pin_build.sh
./cda_build.sh

Training Website

All types

---

hackerrank

https://www.hackerrank.com/domains/shell/bash

CTF

---

Bamboofox

https://bamboofox.torchpad.com/

Secure programming

http://ctf.cs.nctu.edu.tw/

W3challs

http://w3challs.com/

pwnable.kr

http://pwnable.kr/

hackthissite

https://www.hackthissite.org/

Useful-Tools

Blogger

---

Stackedit

https://stackedit.io/editor#

Slides

---

Prezi

https://prezi.com/

Slides

http://slides.com/

Ascii graph

http://asciiflow.com/

Speak

---

sm

https://github.com/chusiang/sm

CTF

---

Convert hex string

http://www.unit-conversion.info/texttools/hexadecimal/

qira

http://qira.me/

python

---

python package

numpy

Kali2-For-CTF

---

Quick installation for CTF on Kali 64bits

• strace
• ltrace
• pwntools
• gdb64
  https://github.com/Gallopsled/pwntools
• ROPgadget
  https://github.com/JonathanSalwan/ROPgadget
• Vim
• Configuration
  
  • set encoding to UTF-8
  • syntax highlight
  • close record mode
  • replace tab to space and width is 4
• Plugin
  
  • powerline
    https://github.com/Lokaltog/vim-powerline
  • airline
    https://github.com/bling/vim-airline

Installation

git clone https://github.com/bananaappletw/Kali2-For-CTF
cd Kali2-For-CTF/
./install.sh

Learn-Python

---

Getting started with python in ten minute

http://tech.marsw.tw/blog/2014/09/03/getting-started-with-python-in-ten-minute

20 lessons to learn Python

http://www.thelearningpoint.net/computer-science/learning-python-programming-and-data-structures

Hackerrank

https://www.hackerrank.com/

Ruby on Rails on Ubuntu 15.04 Desktop

---

Update and upgrade

sudo apt-get update && apt-get upgrade -y

Follow the steps

https://gorails.com/setup/ubuntu/15.04