DC604 Hands-on CTF Workshop
Details
In our November edition of DC604 meetup we will be working through GitLab’s CTF@Home (https://about.gitlab.com/blog/2020/08/12/how-to-play-gitlab-ctf-at-home/). This excellent CTF has challenges with varying levels of difficulty, with focus on web applications.
This workshop is facilitated by @Shyhat, who will guide you through select challenges and provide assistance if you’re stuck. We’ll cover the following challenges: Sea-Surf 1-3, Tar2zip, GTP & OTP, Graphicle 1, Nyan, and RST 1.
Grab your Kali VM and let’s have some proper hacking fun!
THIS IS A HANDS-ON SESSION, PLEASE CHECK THESE PREREQUISITES CAREFULLY:
=> Machine with Docker and Docker Compose installed. Our recommended setup is a Kali VM (restart the VM after installing Docker as follows):
sudo apt install -y docker.io docker-compose
sudo usermod -aG docker $USER
=> You should be able to use Windows or Mac as long as you have Docker Desktop installed, but we will not be able to provide any troubleshooting assistance.
=> A browser (Chrome or Firefox).
=> Optional but recommended - Burp Suite Community Edition, Python (if you’re using Kali, no additional installation needed).
=> Follow instructions here (https://about.gitlab.com/blog/2020/08/12/how-to-play-gitlab-ctf-at-home/) to clone GitLab CTF@Home repository and start the challenges:
git clone https://gitlab.com/gitlab-com/gl-security/ctf-at-home.git
cd ctf-at-home
docker-compose up
=> Make sure you can access the CTF: http://capture.local.thetanuki.io