-
Notifications
You must be signed in to change notification settings - Fork 11
/
dojo.yml
269 lines (256 loc) · 9.42 KB
/
dojo.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
id: intro-to-cybersecurity
name: Intro to Cybersecurity
award:
belt: orange
description: |
Can you feel it?
The sun is beginning to rise on your journey of cybersecurity.
Armed with the fundamentals, you begin to push ever deeper into the realms of knowledge that previously eluded you.
Fear not: with perseverance, grit, and gumption, you will lay the groundwork for a towering mastery of security in your future.
type: topic
modules:
- id: talking-web
- id: building-a-web-server
name: Building a Web Server
description: Develop the skills needed to build a web server from scratch, starting with a simple program and progressing to handling multiple HTTP GET and POST requests.
challenges:
- id: level-1
name: level1
description: Program that exits
- id: level-2
name: level2
description: Program that creates a socket
- id: level-3
name: level3
description: Program that binds a socket
- id: level-4
name: level4
description: Program that listens on a socket
- id: level-5
name: level5
description: Program that accepts a connection
- id: level-6
name: level6
description: Program that statically responds to an HTTP request
- id: level-7
name: level7
description: Program that dynamically responds to an HTTP GET request
- id: level-8
name: level8
description: Program that dynamically responds to multiple HTTP GET requests
- id: level-9
name: level9
description: Multi-processed program that dynamically responds to multiple HTTP GET requests
- id: level-10
name: level10
description: Multi-processed program that dynamically responds to multiple HTTP POST requests
- id: level-11
name: level11
description: Multi-processed program that dynamically responds to multiple HTTP GET and POST requests
resources:
- name: "Building a Web Server: Introduction"
type: lecture
video: 4S78xEhxh7k
playlist: PL-ymxv0nOtqqYlFBiJ_gMff9zHfHMNCtG
slides: 1U33Vcbv2nVoufatHhmIK4XKRzyXZCujR45paGABblnk
- name: "Building a Web Server: Linux Processes"
type: lecture
video: nEJiM1ryJQw
playlist: PL-ymxv0nOtqqYlFBiJ_gMff9zHfHMNCtG
slides: 1l0VHGTYtAk2FzWY4c-m5e8yTS1hCnGit2ve7y7BAlyg
- name: "Building a Web Server: Network System Calls"
type: lecture
video: Q1SvbIBCx1E
playlist: PL-ymxv0nOtqqYlFBiJ_gMff9zHfHMNCtG
slides: 1MxT1qcwZZHSkaaeYIKKp7Qg0IaespmlrqhZDnWkwxFo
- name: "Building a Web Server: HTTP"
type: lecture
video: 0G0aL8KTeB4
playlist: PL-ymxv0nOtqqYlFBiJ_gMff9zHfHMNCtG
slides: 1_-CxrxPUf9D_6tsueggaaOt27pQ-I7hVe4YIMz1PWA8
- name: "Building a Web Server: Multiprocessing"
type: lecture
video: 9jH2Le-MWuI
playlist: PL-ymxv0nOtqqYlFBiJ_gMff9zHfHMNCtG
slides: 1tycdciuY8aMmBGj98qUMq0-ubClkqeT10QNIT0hE9kU
- id: web-security
- id: intercepting-communication
name: Intercepting Communication
description: Learn various techniques to intercept and manipulate network communication, from connecting to remote hosts to performing man-in-the-middle attacks.
challenges:
- id: level-1
name: level1
description: Connect to a remote host
- id: level-2
name: level2
description: Listen for a connection from a remote host
- id: level-3
name: level3
description: Find and connect to a remote host
- id: level-4
name: level4
description: Find and connect to a remote host on a large network
- id: level-5
name: level5
description: Monitor traffic from a remote host
- id: level-6
name: level6
description: Monitor slow traffic from a remote host
- id: level-7
name: level7
description: Hijack traffic from a remote host by configuring your network interface
- id: level-8
name: level8
description: Manually send an Ethernet packet
- id: level-9
name: level9
description: Manually send an Internet Protocol packet
- id: level-10
name: level10
description: Manually send a Transmission Control Protocol packet
- id: level-11
name: level11
description: Manually perform a Transmission Control Protocol handshake
- id: level-12
name: level12
description: Manually send an Address Resolution Protocol packet
- id: level-13
name: level13
description: Hijack traffic from a remote host using ARP
- id: level-14
name: level14
description: Man-in-the-middle traffic between two remote hosts and inject extra traffic
resources:
- name: "Intercepting Communication: Introduction"
type: lecture
video: TLJHimgblCM
playlist: PL-ymxv0nOtqrrjUFj5DL7jby9xA4sPFq-
slides: 1fj5anIxRY3haHl81dFWwwCMQhJCUEY-NrTClwYH9_iE
- name: "Intercepting Communication: Ethernet"
type: lecture
video: TaPsmkBNJ64
playlist: PL-ymxv0nOtqrrjUFj5DL7jby9xA4sPFq-
slides: 1OFdRsadX7HaLVtrVC5rV8837W8FY83Qzca5OIhhade0
- name: "Intercepting Communication: Internet Protocol"
type: lecture
video: _3F7lRUoIXM
playlist: PL-ymxv0nOtqrrjUFj5DL7jby9xA4sPFq-
slides: 1fiTAFWX-ASikEFD1QRmgangaUzLvE2Ym7UlSjVnx4Oc
- name: "Intercepting Communication: Transmission Control Protocol"
type: lecture
video: v3m9F9nEpCA
playlist: PL-ymxv0nOtqrrjUFj5DL7jby9xA4sPFq-
slides: 1ALXCLKkbGgzOJ0qrCGD-UekGOGjzH74tLAaZLw4CvWc
- name: "Intercepting Communication: Address Resolution Protocol"
type: lecture
video: 9p2OU4r4aGs
playlist: PL-ymxv0nOtqrrjUFj5DL7jby9xA4sPFq-
slides: 1VoEUlgjCNZuNIdh8KSxF6bTXPr1ylaeokwFDOLk7F94
- name: "Tooling Documentation"
type: markdown
content: |
- [man page: `nc`](https://linux.die.net/man/1/nc)
- [man page: `ip`](https://linux.die.net/man/8/ip)
- [man page: `tcpdump`](https://linux.die.net/man/8/tcpdump)
- [Cheat Sheet For `ip` Command](https://access.redhat.com/sites/default/files/attachments/rh_ip_command_cheatsheet_1214_jcs_print.pdf)
- [Wireshark User's Guide](https://www.wireshark.org/docs/wsug_html_chunked/)
- [Scapy's Documentation](https://scapy.readthedocs.io/en/latest/)
- id: cryptography
- id: access-control
name: Access Control
description: Exploit various access control issues for the POSIX/UNIX Discretionary Access Control model and answer questions about Mandatory Access Control models.
visibility:
start: "2023-11-08T22:00:00-00:00"
challenges:
- id: level-1
name: level1
description: Flag owned by you with different permissions
- id: level-2
name: level2
description: Flag owned by you with different permissions
- id: level-3
name: level3
description: Flag owned by you with different permissions
- id: level-4
name: level4
description: How does SETUID work?
- id: level-5
name: level5
description: How does SETUID and cp work?
- id: level-6
name: level6
description: Flag owned by a different group
- id: level-7
name: level7
description: Flag owned by you with different permissions, multiple users
- id: level-8
name: level8
description: Flag owned by other users
- id: level-9
name: level9
description: Flag owned by other users
- id: level-10
name: level10
description: Flag owned by a group
- id: level-11
name: level11
description: Find the flag using multiple users
- id: level-12
name: level12
description: Find the flag using multiple users
- id: level-13
name: level13
description: One Mandatory Access Control question without categories
- id: level-14
name: level14
description: Five Mandatory Access Control questions without categories
- id: level-15
name: level15
description: One Mandatory Access Control question with categories
- id: level-16
name: level16
description: Five Mandatory Access Control questions with categories
- id: level-17
name: level17
description: Automate answering 20 Mandatory Access Control questions with categories in one second
- id: level-18
name: level18
description: Automate answering 64 Mandatory Access Control questions with categories in one second
- id: level-19
name: level19
description: Automate Answering 128 Mandatory Access Control questions with random levels and categories in one second
resources:
- name: "Access Control: Introduction"
type: lecture
video: mdWa1SHkxmM
playlist: PL-ymxv0nOtqotjW-uK_YSj9pm5tTKf87J
slides: 1tBn2d4d7-kpaoAoEipts8ZqKhQsIsSvF
- name: "Access Control: Modeling Access Control"
type: lecture
video: Nq93Xz6yn3o
playlist: PL-ymxv0nOtqotjW-uK_YSj9pm5tTKf87J
slides: 1xGkSmpJBt4IMg2aW2vSoY5b0qHqF2t4h
- name: "Access Control: Implementing Access Control"
type: lecture
video: OGhKjwJ7PKE
playlist: PL-ymxv0nOtqotjW-uK_YSj9pm5tTKf87J
slides: 1D9C4dtWdsub504eGyzr0JEpOmwH4X8UJ
- name: "Access Control: POSIX Access Control"
type: lecture
video: OG5yXzn-cVs
playlist: PL-ymxv0nOtqotjW-uK_YSj9pm5tTKf87J
slides: 172XbD83EW8kZIHHZIbXVOmbDMYRm-VN1
- name: "Access Control: Types of Access Control"
type: lecture
video: b20SKFOI4Zo
playlist: PL-ymxv0nOtqotjW-uK_YSj9pm5tTKf87J
slides: 1dK3DNUznDqw0ddR-bYUgf7nHHTu9XhaE
- name: "Access Control: Mandatory Access Control"
type: lecture
video: e72S-sS9xDo
playlist: PL-ymxv0nOtqotjW-uK_YSj9pm5tTKf87J
slides: 12np5WiQv_h3VJTt7XMaYqb4ZkEoGpLM-
- name: "Access Control: Getting Started"
type: lecture
video: snDd4W0QnZo
playlist: PL-ymxv0nOtqotjW-uK_YSj9pm5tTKf87J