init
This commit is contained in:
commit
8b6de0178e
11 changed files with 182 additions and 0 deletions
BIN
__pycache__/web.cpython-311.pyc
Normal file
BIN
__pycache__/web.cpython-311.pyc
Normal file
Binary file not shown.
BIN
binary/a.out
Executable file
BIN
binary/a.out
Executable file
Binary file not shown.
16
binary/buf.c
Normal file
16
binary/buf.c
Normal file
|
|
@ -0,0 +1,16 @@
|
||||||
|
#include <stdio.h>
|
||||||
|
|
||||||
|
int main() {
|
||||||
|
int num = 0;
|
||||||
|
char buf[10];
|
||||||
|
|
||||||
|
printf("Name: ");
|
||||||
|
scanf("%s", &buf);
|
||||||
|
|
||||||
|
if (num > 0) {
|
||||||
|
printf("Ohno\n");
|
||||||
|
printf("%d", num);
|
||||||
|
}
|
||||||
|
|
||||||
|
printf("Hello %s!", buf);
|
||||||
|
}
|
||||||
BIN
binary/vincent.out
Normal file
BIN
binary/vincent.out
Normal file
Binary file not shown.
9
shell.nix
Normal file
9
shell.nix
Normal file
|
|
@ -0,0 +1,9 @@
|
||||||
|
let
|
||||||
|
pkgs = import <nixpkgs> {};
|
||||||
|
in pkgs.mkShell {
|
||||||
|
packages = [
|
||||||
|
(pkgs.python3.withPackages (python-pkgs: [
|
||||||
|
python-pkgs.flask
|
||||||
|
]))
|
||||||
|
];
|
||||||
|
}
|
||||||
102
slides.md
Normal file
102
slides.md
Normal file
|
|
@ -0,0 +1,102 @@
|
||||||
|
# Intro Hacking (CTF)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Wat is een CTF
|
||||||
|
|
||||||
|
Capture the Flag
|
||||||
|
|
||||||
|
`ZeusCTF{1k_b3n_33n_fl4g_H4DJ5D}`
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Belangrijke termen, dingen, systemen, encodings
|
||||||
|
|
||||||
|
- base64 (meme)
|
||||||
|
- binary
|
||||||
|
- hex
|
||||||
|
|
||||||
|
- veel dingen zijn een zip, `file` cmd docx, jar, apk
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Belangrijke tools
|
||||||
|
|
||||||
|
- Cyberchef (base64, binary, hex)
|
||||||
|
- pwntools
|
||||||
|
- curl
|
||||||
|
- netcat (nc)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
- web
|
||||||
|
- sql injection (databanken)
|
||||||
|
- console
|
||||||
|
- cookies (local storage)
|
||||||
|
- request headers
|
||||||
|
- xss
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
- reversing
|
||||||
|
- packed binaries
|
||||||
|
- binary
|
||||||
|
- assembly (comparch)
|
||||||
|
- hexedit
|
||||||
|
- strings
|
||||||
|
- (ghidra) -> Vragen op voorhand installeren
|
||||||
|
- (gdb-gef) (run)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
- mobile
|
||||||
|
- android (java)
|
||||||
|
- apk in zip ;)
|
||||||
|
- bytecode viewer
|
||||||
|
- native libraries
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
- forensic
|
||||||
|
- info in fotos (metadata, steganography (hidden data))
|
||||||
|
- wireshark (HTTP/DNS) (comnet)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
- binary exploitation / pwn
|
||||||
|
- buffer/heap/stack overflow
|
||||||
|
- printf strings
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
- crypto
|
||||||
|
- XOR (raf)
|
||||||
|
- discover the key? met een gekende file header bv
|
||||||
|
- rsa :'(
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
- OSINT (Open Source INTelligence)
|
||||||
|
- Rare categorie die bestaat
|
||||||
|
- social media
|
||||||
|
- publiek toegankelijke data
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
CTF event volgende week
|
||||||
|
|
||||||
|
type challenges van: je eerste CTF challenge
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
Zin in meer
|
||||||
|
CTF NEXT WEEK
|
||||||
|
CSCBE 8-9 maart
|
||||||
|
|
||||||
|
|
||||||
|
Overthewire
|
||||||
|
|
||||||
|
https://picoctf.com/
|
||||||
|
https://pwn.college/
|
||||||
|
|
||||||
|
CSCBE
|
||||||
0
web.db
Normal file
0
web.db
Normal file
BIN
web/__pycache__/web.cpython-311.pyc
Normal file
BIN
web/__pycache__/web.cpython-311.pyc
Normal file
Binary file not shown.
21
web/templates/index.html
Normal file
21
web/templates/index.html
Normal file
|
|
@ -0,0 +1,21 @@
|
||||||
|
{% autoescape true %}
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="en">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
<title>Posts</title>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<form method="POST">
|
||||||
|
<input type="text"/>
|
||||||
|
<input type="submit"/>
|
||||||
|
|
||||||
|
</form>
|
||||||
|
{% for post in posts %}
|
||||||
|
<p> {{ post[1] }} </p>
|
||||||
|
{% endfor %}
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
{% endautoescape %}
|
||||||
BIN
web/web.db
Normal file
BIN
web/web.db
Normal file
Binary file not shown.
34
web/web.py
Normal file
34
web/web.py
Normal file
|
|
@ -0,0 +1,34 @@
|
||||||
|
import sqlite3
|
||||||
|
import random
|
||||||
|
from flask import Flask, g, request, render_template, make_response
|
||||||
|
|
||||||
|
app = Flask(__name__)
|
||||||
|
|
||||||
|
def get_db():
|
||||||
|
db = getattr(g, '_database', None)
|
||||||
|
if db is None:
|
||||||
|
db = g._database = sqlite3.connect("./web.db")
|
||||||
|
return db
|
||||||
|
|
||||||
|
@app.route("/", methods = ['GET', 'POST'])
|
||||||
|
def root():
|
||||||
|
request
|
||||||
|
user_cookie = request.cookies.get("userid")
|
||||||
|
if request.method == "POST":
|
||||||
|
print(str(request.form))
|
||||||
|
if request.method == "GET":
|
||||||
|
posts = get_db().cursor().execute(f"select * from posts").fetchall()
|
||||||
|
|
||||||
|
resp = make_response(render_template('./index.html', posts=posts))
|
||||||
|
if user_cookie is None:
|
||||||
|
resp.set_cookie("userid", str(random.randint(100000, 999999)))
|
||||||
|
return resp
|
||||||
|
|
||||||
|
return "YES"
|
||||||
|
|
||||||
|
@app.teardown_appcontext
|
||||||
|
def close_connection(exception):
|
||||||
|
db = getattr(g, '_database', None)
|
||||||
|
if db is not None:
|
||||||
|
db.close()
|
||||||
|
|
||||||
Loading…
Reference in a new issue