CTF

Anyone interested in making a ctf team and learn together

Join OpenToAll CTF team. If you have any specific /sec/ questions or problems then ask here. https://opentoallctf.github.io/

>>18889 Most def checking this out. thanks for the post.

I know alot of people do CTF time and you can make online teams. https://ctftime.org/

Y'all'z misunderstanding. OP wants to make a CTF team that consists of Lainons specifically. Lainteam.

>>19122 you can do that on CTF time and a few others, I post details of a CTF starting this friday when I get a chance.

>>18889 >Join the OpenToAll Discord Server! . Dismissed

I am interested in forming a lainteam

I, too, am interested in this learning experience!

>>19201 How should we keep in contact and discuss this further?

>>19202 iirc lainchan IRC has a ctf channel. That would be one of the better options. Another would be a matrix room.

>>19205 ctf forbidden. No?

>>19206 >ctf forbidden What do you mean?

>>19207 ctf channel in irc. im new on it

>>19208 #lainctf seems to work fine. Try the web client at https://lainchan.org/irc.html .

I created a team on CTFtime. https://ctftime.org/team/183290 Invite: >Knights of the Spurdo Calculus:1nivwx:0U8WQ7cnUs3UU8tvNHt4YGKb1wY Channel #lainctf on the Lainchan IRC will do fine for communication at the moment.

>>19211 I want to join but I can't come up with a cool username.

>>19213 The username can be edited later so it's not a big deal.

Ok Lainons, ångstromCTF is starting this week: April 29 at 8 PM EDT, that is Fr/Sat midnight in UTC. Let's assemble on IRC a few hours earlier, idle on saturday so we can organize in real time. The competition ends on May 4th, so you will have some time to contribute and learn. You have to register here: https://2022.angstromctf.com/ You can join the team in the profile settings, team name and password are provided in the attached picture. To the CTFtime group admin: mark us as interested/participating at https://ctftime.org/event/1588

>>19215 Sounds good. I don't think I'll be able to make it at exactly 8 PM, but ill try to join once I'm able. Is there anything I need to do beforehand to get prepared?

>>19215 >RainbowHash >Knights of the Spurdo Calculus >K!nd4SUS Beautiful names.

>>19215 Thanks, I marked us interested on ctftime. >>19216 We will definitely have people in different timezones so that's to be expected. Ideally we should at some point use tools like git to make the team scalable (eg. to keep track who's working on what challenge, what is the current progress, things that have been tried, PoC...). But let's first see how many people join in the first place and simply grab some flags. >Is there anything I need to do beforehand to get prepared? Maybe checking solutions from previous years could be useful: /watch?v=MhkVkOpj5OI /watch?v=c147fBCppb8 /watch?v=2pqG6opzrug https://ptr-yudai.hatenablog.com/entry/2021/04/08/115245

>>19218 What about in terms of programs? Is there any I need to install? Should I get Kali Linux in a VM?

>>19219 Sure, that could help if you don't want to leave any mess on your own system. You can also install necessary tools on any other linux distro as you go through the task. There usually are plenty challenges solvable by hand. I'd say get Wireshark and pwntools, they will be useful for most tasks. Familiarize yourself with developer tools built into your browser - it's a must for any web challenge. If you're into binary exploitation then review your knowledge on gdb and maybe install pwndbg. Scripting skills can be quite important, Python and JS are very useful overall.

>>19220 OK, thanks for the advice.

>>18888 can a complete beginner join in on this or what? just want to learn some more.

>>19237 I'm completely new and I'm trying it out. I got some basic challenges done so far. Join if you want to

>>19237 The challenges in >>19211 were meant for highschoolers. It should be a good starting point, but if your a complete beginner don't worry to much.

>>19213 >I can't come up with a cool username. RS232Xperiment (serial experiment, serial experiments in lain) hax0rKnownAsLainChan !s&bash (bangers and bash, bangers and mash, brit dish) phish&chips (fish and chips) C0xff33 (coffee) 0x1DE (oxide) foobarSOAP JayzQuery 0x0Afed (0x0A =ASCII hex linefeed, linefeed fed) TDavisJnr Rust-sed VimADA Lua-in @Aboy (attaboy) ReturnVoid NullObective BaudBard TypeUserNameHere You can also use a leet speak translator: https://www.dcode.fr/leet-speak-1337 I'm not sure I'd be of use in this CTF (I did some solo cryptography CTF & am ok at scripting) >Login > Enter using Twitter > Enter using Facebook > Enter using Google > Enter using Github Oh well, I guess that rules me out. Here's 40 points anyway: https://2022.angstromctf.com/challenges Puzzle: Caesar and DesisterCrypto (40 points) Clue: sulx{klgh_jayzl_lzwjw_ujqhlgyjshzwj_kume} Solution: actf{stop_right_there_cryptographer_scum} Full (clunky) solution to follow....

>>19240 Solution for Crypto challenge Caesar and Desister (40 point flag): $cat bar foo="sulx{klgh_jayzl_lzwjw_ujqhlgyjshzwj_kume}" echo $foo |tr 'abcdefghijklmnopqrstuvwxyz' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'abcdefghijklmnopqrstuvwxyz' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'bcdefghijklmnopqrstuvwxyza' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'cdefghijklmnopqrstuvwxyzab' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'defghijklmnopqrstuvwxyzabc' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'efghijklmnopqrstuvwxyzabcd' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'fghijklmnopqrstuvwxyzabcde' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'ghijklmnopqrstuvwxyzabcdef' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'hijklmnopqrstuvwxyzabcdefg' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'ijklmnopqrstuvwxyzabcdefgh' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'jklmnopqrstuvwxyzabcdefghi' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'klmnopqrstuvwxyzabcdefghij' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'lmnopqrstuvwxyzabcdefghijk' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'mnopqrstuvwxyzabcdefghijkl' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'nopqrstuvwxyzabcdefghijklm' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'opqrstuvwxyzabcdefghijklmn' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'pqrstuvwxyzabcdefghijklmno' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'qrstuvwxyzabcdefghijklmnop' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'rstuvwxyzabcdefghijklmnopq' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'stuvwxyzabcdefghijklmnopqr' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'tuvwxyzabcdefghijklmnopqrs' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'uvwxyzabcdefghijklmnopqrst' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'vwxyzabcdefghijklmnopqrstu' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'wxyzabcdefghijklmnopqrstuv' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'xyzabcdefghijklmnopqrstuvw' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'yzabcdefghijklmnopqrstuvwx' 'abcdefghijklmnopqrstuvwxyz' echo $foo |tr 'zabcdefghijklmnopqrstuvwxy' 'abcdefghijklmnopqrstuvwxyz' $cat bar | sh | nl ... 20actf{stop_right_there_cryptographer_scum} ...

>>19240 >Oh well, I guess that rules me out. You could register on the platform with any email. Please refrain from posting flags and write-ups in the open while the contest is still on.

>>19240 >BaudBard kek >>19242 >MadHat

>>19242 >Please refrain from posting flags and write-ups in the open ok >You could register on the platform with any email. I was under the impression that was per team, OK thanks I'll remember for next time (calendar now provisionally booked elsewhere).

>>19241 >echo $foo |tr 'defghijklmnopqrstuvwxyzabc' 'abcdefghijklmnopqrstuvwxyz' You can use ranges like echo $foo | tr 'd-za-c' 'a-z' How the fuarrrk do I join the ctftime team? I sent a request but what do I do with the invite token?

>>19249 >How the fuarrrk do I join the ctftime team? I sent a request but what do I do with the invite token? Consider this the first challenge you need to solve.

Ångstrom CTF has now ended and we placed 220 which is a pretty decent position for our first time! Many thanks to those of you who participated, great job. I thought it would be nice to have a CTF going with the team most of the time, so we will be participating in EZ CTF which will begin in 32 hours from now. This one is aimed at beginners so it would be a good point of entry for anyone interested. The maximum team size is 4, during Ånqstrom we had 3 active hackermans. https://ez.ctf.cafe/team Team invite: 1599b485-26c2-488c-8ae4-22dacf712475 I removed the need to use an invite token at CTFtime, so now anyone can request to join from the team page which is at https://ctftime.org/team/183290

Again, thanks to everyone who participated in EZ CTF. I applied our team to m0leC0n teaser 2022 which will begin in around 2 days and 22 hours and lasts for 24 hours. https://ctf.m0lecon.it This one has only one account per team. It's also advertised as being of "medium" difficulty level, with a few easier and harder challenges. It will probably be a good idea to work together on some of the challenges and communicate on irc, that will be a great opportunity for learning! Team: KotSC Pass: m["hq7sNkp_"AgGB)fw9ya9N[p6m;R&;

>>19280 I'm going to skip this one and maybe some others until the school year is over. Once summer starts ill be putting more time into learning ctfs and participating.

>>19286 this Good luck my fellow team mates.

Any lains participating in Hackthebox's Cyber Apocalypse?

>>19286 >>19296 Alright! Remember that you can just log in and try to solve something for a moment or two if there's a CTF going on, especially if there is no team size limit. Or hop on irc and give your 2 cents on an issue when there's activity. A small contribution can be very useful too. >>19302 I'm glad you asked because I applied our team to Cyber Apocalypse too, I was just going to post about that. I think you can request to join the team after registering at https://ctf.hackthebox.com/ and searching for K07SC

I want to start doing CTFs so bad but I have no time because I'm stuck building CRUD apps.

I'm down, but I'm not teaming up with glitterboys, pedos, lollicons, furries, etc. If you're normal, drop me a link and I'll hack for your team.

>>19342 Sorry, the Code of Conduct of our CTF team includes an EXTREMELY strict fursona requirement, and we are all total glitterboys.

>>19342 fuarrrking rude, good luck with that

>>19344 Can I join ur ctf? Sounds pretty based

What happened to the lain ctf team? I can't even see #lainctf on the irc channel list.

>>20031 Now it should work with those credentials. Sorry for the inconvenience :-)

We can make it into the top 100 if we just do 2 more challenges.

You guys still active? I'd like to join the team.

https://h4ck1ng.google/ some kind of google ctf, no teams. Having trouble with the ep001 chal2

>>20221 "Active" is relative, but I did apply the team to this one: https://ctftime.org/event/1692 I encourage to join the XMPP room, we can share learning resources etc. even when there is no ctf running.

>>20245 > Having trouble with the ep001 chal2 What kind of trouble? It would be nice to know how far you got before trying to suggest solutions. It seems there is a zip file which contains a dynamic object file (called "wannacry" just to spook people I guess). Now... I'm not a nerd who programs in C, but if I understand it correctly, it's basically a library, which is essentially just an executable (but it's supposed to be a small part of a bigger program). Anyway... I guess you could open the file in a hex editor and look through it if you can find something interesting... or you could try to run it (not sure if dangerous). If you decide to run it, then it seems you are going to need a 64-bit version of Linux and find a program called ld.so, which can be usually found in /lib64/ld-linux-x86-64.so.2 So I assume you would then run it by opening a terminal and typing /lib64/ld-linux-x86-64.so.2 '/hone/(Your Username)/Downloads/wannacry' I don't have a 64-bit version of Linux installed anywhere right now, so I can't try.

can the spurdo calculus guys add me in? im n@i1 ;3

I'm @ligma, can you accept my request please

Are you guys still active? My old team of beginners just broke up, leaving me teamless.

>>21459 >>21475 >>21523 do you anons think we can form a team ourselves? i myself will be starting out CTFs, i have some tiny amount of programming knowledge and I've done some overthewire war games in the past so if anyone's interested we can form a team and in the end at least be friends :)

>>21475 That's a good thing anon. You'll learn more. >>21529 I'd be game. My programming is limited to basic bash, python, and basic websites. Do have decent amount with Linux sysadmin stuff though.

I'm interested :-) I'm leaning bin ex stuff, so I could probably do some pwn and rev eng stuff. where should we communicate?

>>21531 Uguu where to meet CTF lainanons

>>21531 I'm in, sounds cool. I got knowledge on shell scripting (no bashism's though), basic C, python, lua, js, php and web development. also got some basic networking and Linux knowledge

I'm in, where we gonna talk or study? I know linux and python

Uguu anyone have xmpp for CTF Lainanon?

I'm a complete beginner but am a hungry hungry hippo for knowledge, am studying the fundamentals & am getting my sec+ certification, constructing an pwnagotchi yaddah yaddah I KNOW my resume is laughable but consider this a stepping stone towards experience. discord is pidorashka42 please someone take me under your wing am salivating typing this okay thank u

>>25978 cant message you because we have no common servers

Any lainons doing pwn.college? It's the best resource for learning security, all the way to being able to play CTFs. I've completed the Linux modules, and I'm on my way to finish Computing 101. The best place to start is here. ASU uses many helpful resources and videos to help with the challenges. I would make another thread, since this one is quite old, but there is no need to. If any lainon wants to ask for help with some of those modules, or anything related to hacking, I'll be checking here periodically, so you can reply here. Better than trying to make another offsite group. (I'm not a wage slave, alright 0_o )

>>26100 will definitely check this out thanks lain

>>26100 Pwn.college is very good.

Protip: you can use ssh to connect to any pwn.college challenge >use the command "ssh-keygen" to generate a key pair >goto "pwn.college/settings" -> "ssh key" >copy the public key and add it to your profile Once you start a challenge, use "ssh hacker@pwn.college" to connect to it (you can also just stay connected)

>>26110 Thank you, this is very helpful. I just started doing the 101 Computing modules, and I had to extend the VSCode terminal completely because I wanted to use Vim, I didn't realize they gave you SSH access, this is much better.

Do you guys know any CTFs or learning platforms that specialize in network security ?

>>26111 Just found out that the idle timeout can be bypassed using tmux. Now we can stay idling while doing research on the side (up to six hours, after that the docker container is reset) >>26114 I would guess HackTheBox. I didn't play much to know if it goes deep enough to be a meaningful exercise for learning network security.

>>26100 Yes, pwn.college is great, I'm doing binary explotation module now from "Intro to cybersecurity". It's the best resource to get familiar with low level coding. I wish I had such classes or at least resource when I was young hehe. Almost finished writing web server on asm from 101 and stopped "Reverse Engineering" on "internal state" challenge bc I started to have headache. pwn.college always surprise me how harsh it goes from very basic task to a damn riddle. You guys can also ask for an advice on their discord server. It's friendly community. BTW, is anyone here interested in reverse engineering/binary explotation? Or HTB CTFs? I'd like to try teamwork

>>26119 Anon you seem to be quite advanced, almost obtaining the first belt! Yeah they've made those challenges where you have to use lots of things that were learned before, all of them combined. Makes them harder than just learning from small, incremental steps, like the other challenges. I'm more focused on Binary Exploitation at the moment, however I recognize that I'll need to learn reversing sometime later down the line. It will take months to reach a level where we can do CTFs. Since I like reading books, I'll recommend two of them, for learning C and Assembly (both seem to be prerequisites for more advanced modules): - The C programming language; - x86-64 assembly language programming with Ubuntu 1st can be grabbed off Libgen, the asm book is free. (didn't finish reading those) Besides this, I think pwn.college would be enough to learn the rest of the contents related to modern binary exploitation.

>>26120 The second book looks nice, thx. I just needed a reference to finish my webserver challenge. My code became too complex to understand and I decided to split it into functions, but didn't know how. Hope the book will help me (chatgpt is uselles for asm learning, it just mixes everything up). The reason I started to learn binary and reversing is that I need that knowledge to complete certain machines and challenges (hard and insane level which I'm on my way to) on HTB. But easy and mediums labs usually don't have that, only basic cybersecurity knowledge (nmap, burp, finding exploits, reverse shells, privellege escalation, common vulnerabilites like SQLi, SSRF, etc). I discovered also a platform to practice different languages doing online exercises https://exercism.org/ it has assembler track too. It's some kind of leetcode, but focused on languages than algorithms. Maybe I'll find it useful too.

>>26121 That's cool, you want to be a pentester then. Having knowledge about these do differentiate between someone who merely knows how to use premade tools and common attack vectors. One can never solve enough exercises ;)

Just noticed that the book I've sent here is recommended on the Computing 101 "Assembly Crash Course" !! I was right about the other Assembly books after all... Check out the LiveOverflow channel, too. It's my favorite channel that talks about hacking.

>>19241 Based af mate but what is a "Desister"? I am familiar with what a Caesar cipher is but what is a desister is that like when deflower your sister on the summer solstice?

>>26122 Still don't know who I want to become. However, when I get frustrated with a HTB lab or another attempt into bug bounty %%or when I realize oace again how messed up my life is%%, I switch to learning assembly on pwn.college and feel calm.

>>26100 this might be kinda obvious but for computing 101 this makefile saved me a lot of time ``` all: as asm.s -o .asm.o ld .asm.o submit: /challenge/run a.out ```

>>26126 (Compiling) cc -nostdlib -o asm asm.s (Dump code) objdump -M intel -d asm (Copy to bin file) objcopy --dump-section .text=bin asm

How are you doing, lainon? I've just finished Computing 101. Also joined #lainctf channel and yeah, its dead.

>>26169 HAPPY BIRTHDAY, LAINCHAN!!! >How are you doing, lainon? I've just finished Computing 101. I'm doing the last challenges on the Assembly crash course. The difficulty scales really fast in the last five. Should be finished until tomorrow. I've found that it is useful to slowly write the code, and observe its effects with int3 each time, to see if you're going in the right direction. Assembly is SRS BSNS Have a lot of tips and tricks to talk about, but that will have to be in another post. >Also joined #lainctf channel and yeah, its dead. If eventually there was a demand for real-time communication, we could use that channel. It was created years ago, so I expected it to be inactive. I'm there right now, will setup a bouncer later.

Strongly recommend after finishing "Assembly Crash Course" take a look at "pwntools tutorial" community module. This tool will make your life easier when you'll be going through binary exploitation dojos.

>>26175 I've completed the last assembly challenge after a day or so 0_o that one didn't have *any* hand-holding at all! Felt that it was difficult to debug anything and at the end just hoped that the code would work with some simple tests, thankfully it did get right. Maybe it was a bit overloaded with new knowledge to pull it off. To help anons, I'll give some tips about the challenges. So about this pwntools, do you think it is better than writing exploits in C? Is python fast enough for every situation? I can see how useful it would be to use some common functions, but don't have much experience with using it for this type of application. What are the most useful functions? For the pwntools level 0.0, you need to put a \n at the end of the payload, so that the string is actually sent to the program. assembly tips jump-trampoline: to repeat opcodes .rept 0x51 nop .endr conditional-jump: use mov for first operand, **use the 32 bit registers as destination** indirect-jump: need jmp trampoline average-loop: with iterator being 1, you need to put jnl as the conditional jump count-non-zero: check rdi at start (last test case checks for rdi = 0) string-lower: read about the sysv ABI and how function calls alter registers, use a register that isn't altered by functions for src_addr before calling into foo. Put "str_lower:" as a label, instead of ".global _start" + "_start:", put ret at the end most-common-byte: setup the stack and allocate just like in the example, restore stack and put ret at the end, use the "neg" instruction to obtain a negative offset, don't forget to put word ptr. I think that clears out most of the confusing things about these challenges.

>>26191 I've made a mistake, not right after "Assembly crash course", but after finishing "Computing 101". pwntools will be useful on "binary exploitation" module of the next section "Intro to Cybersecurity". pwntools is likely CTF oriented, not sure if it's applicable in real world. It's faster then C meaning that the faster you craft your exploit, the more likely you do it first and win. So it's like a wrapper for interaction with a binary file that you're exploiting. It allows to read output from a binary, send your data to it, even it's a remote one (so you don't need all that mess with nc/socat). It also has features to work with buffer overflow vulnerability: generating pattern, finding offset, dealing with shellcode, etc. Everything you'd in gdb manually. But it's not a replacement for gdb or whatever, its more likely a glue. I have not used pwntools much, nor I've done a lot of buffer overflow challenges, but as far as I know it have to be a great automation tool.

I just leave it here https://picoctf.org/index.html#picogym

>>26208 We need to compile a list of places that have challenges. This one is already insanely useful: https://wargame.nexus/ It was compiled by Zardus (Yan from ASU). Most notable links in there are: http://overthewire.org/wargames/ Classic OverTheWire games, teaches Linux, web security, crypto, and lots of older binary exploitation. https://archive.ooo/ Archive for the challenges made by the "Order of the Overflow", the guys that organized some of the DEFCON CTFs. https://exploit.education/ A sequence of challenges for binary exploitation. https://p.ost2.fyi/ Free courses about themes such as program vulnerabilities, firmware security, operating systems, etc. https://github.com/hacksysteam/HackSysExtremeVulnerableDriver/ "Windows Kernel driver that is intentionally vulnerable." https://ropemporium.com/ Website dedicated to learning Return-oriented programming. https://www.crackmes.one/ Practice reverse engineering. https://www.smashthestack.org/ Various challenges. https://cryptopals.com/ Crypto challenges from Matasano. https://io.netgarage.org/ Challenges from IO / smash the stack. https://guyinatuxedo.github.io/ "Nightmare" - an intro to binary exploitation / reverse engineering course based around (real) CTF challenges. Has a large amount of content and detailed write-ups for each challenge. Need to compile all of this, and other useful links, to put as an eventual new thread OP. Doesn't really need to be more than those I've already linked, they should be enough to last for years of learning. But let me know if you find any more interesting places.

>>26246 There are too much so-called "awesome lists" on each topic, I don't think we need to create another one. It would be better to have a few links, but more curated and accompanied with good feedback and description. When you're just starting out, you see all those links and don't know which one to pick. Once you've already started, you barely need need anything new unless you something interesting catches your eye. Then I'll add a few words about picoCTF: backed by a university and sponsored by NSA; a lot of challenges of different topics like birary, web, crypto, reversing; you can join a team and participate a real CTF competition. And it's 100% free. I've just tried to solve a few challenges and they were nice because even they were easy I did discovery something new.

>>26248 These ones were selected. Maybe has some redundancy, but that's fine. Better to have more links than necessary. We can create a team later, using CTFtime.

>>26246 Also https://pwnable.tw/ Is a pretty good site for practice. I've done some challenges. ROPemporium is really good. I mostly do pwn/bin_ex stuff. I can post some links relating to heap exploitation stuff, I'll do tomorrow as a reply to this (my) comment

>>26275 So, where is it? we are waiting =) This one has many Heap challenges, and some real CVEs. Great website. It could be useful later when we run out of heap challenges. Pwn college has two modules related to it.

>>26169 After a month, I've finally completed the web server module.. can say that the debug module was definitely needed because I've spent a lot of time inside gdb. The first half was easy after reading some pages from one of Stevens' books (I forgot which one, probably the UNIX Socket programming, great book), he explains how to setup the socket struct (sockaddr_in) manually. For that, and the rest of the challenges, I suggest doing heavy usage of the .data section, it helps in not having to deal with the stack like it's taught on the asm crash course. (you can use the stack for some things though) Tips for gdb: - use scripting; - start the program (with break on _start) then use "target record-full" to be able to "reverse-step" through the program's execution - to follow the child after fork(), use "set follow-fork-mode child" The resource to use when you need a high-level view of system calls is "strace", very useful to have when trying to debug the args going into the calls. If your program doesn't work in the final level (like mine didn't), write a C program that connects to the webserver and sends a request. You can then execute the server with strace/gdb to check what's going wrong, in real time. Good luck to whoever is trying this in the future! It's the most engaging challenge I've done so far! (I'll try to advance in the modules faster. Sorry for being slow, had some problems lately)

>>26359 Congratulations! It was an amazing experience for me too. I never ever imaged that I'd make a webserver on asm. It's a bit surprising to hear that you used gdb a lot. Challenge script that runs you binary already has a lot of useful debug output. Then you just write syscalls in the right order. But your way is definitely more efficient for learning purpose. By the way, would you like to share the code of your webserver? I can share mine on github too. I think it'd be interesting to exchange solutions. I stopped doing pwncollege somewhere on shellcode challenges. But it's just for a while, I'll get back for sure. I've had to switch to bug bounty full-time now just to avoid death by starvation and despair in the foreseeable future. I even found one bug, but it was a duplicate... Meh~

>>26362 GDB was used for the last challenges, I needed to know how the code was screwing up my system calls. I've learned that you don't need an internet connection to debug a networking program lolz. >By the way, would you like to share the code of your webserver? I can share mine on github too. I think it'd be interesting to exchange solutions. People use these courses for credit in ASU. It wouldn't be nice to the instructors if solutions were shared publically. But I can share it privately. We can talk about it on irc. I hope things get better for you ;) don't forget to take care of your health.

>>26280 Lmao I forgot sorry guys, I just about to sleep when I typed that previous post, here they are: https://github.com/scratchadams/Heap-Resources https://github.com/shellphish/how2heap https://github.com/SecurityInnovation/glibc_heap_exploitation_training>>26280 Also any resouces for hardware hacking stuff? I want to specialize in those 2 areas. I don't know if any one has done so yet (Apart from nightmare github one), but can you also share blogs detailing break downs and explanations of exploits? I find those quite useful, I have some you guys can read if you're interested: https://blog.coffinsec.com/ https://www.0dayfans.com/ https://sam4k.com/

>>26369 Thanks. We'll have a list with those resources, and other interesting ones. "how2heap" is from the UCSB+ASU CTF team, that's cool. >any resources for hardware hacking stuff? I don't work in this area, but I know this recent book from a guy that published a lot of articles for POC||GTFO: https://nostarch.com/microcontroller-exploits Still haven't got into the write-up phase yet.

WE'RE BACK MOTHERFUKRS Here's my team info, it's usable in any CTF that I play, which can be found at ctftime.org Team Name: Dazbog Password: cykablyat

>>26377 Please give an invite. I can't join it. My account name is "cirno".

>>26380 Try the login here: https://ctf.thesascon.com/ This CTF is really fun. I'm doing a basic SQL injection challenge right now, but it's so realistic that it's actually super fun. Leave it to the Russians to host a cool CTF.

What if we create a new lain team? We can then split tasks, depending on the area anons are good at or want to specialise in.To be honest, we should probably organise some time to really discuss this on lainctf channel on IRC. Perhaps 29th of this month (May) at 11:00pm GMT on #lainctf? I'll be there incase.

>>26387 Nice idea, good timing. I'll try not to forget about it. Let's wait for Cirno and russian fren to reply.

>>26372 The plague here, I have some other interesting books as well. Art of software security is also quite good. You can get ebook on Amazon, or DRM free ebook from InformIT. DRM free one is more expensive but amazon ebook formatting is often terrible in my experience. It talks about different strategies for find vulns in large programs, and provides various IRL examples towards the end

>>26387 Now that there are more lains to put together a team, that's definitely a good idea. I'll be there on IRC. When finished, some of the important topics that were eventually brought up should be recorded here. See you there! >>26395 >It talks about different strategies for find vulns in large programs This book is the first one I've seen that deals directly with vulnerability research. Should be one of the core readings, after completing the pwn.college track. Another book that didn't come out yet, should be really interesting: https://nostarch.com/linux-memory-manager

Around 40 mins till meeting Anyone interested there's a meeting at 11:00 PM GMT to discuss about lain team and other related things

"Lain Team", a CTF team open for all lains, was created: https://ctftime.org/team/387158 Each member had a role assigned to them: - cirno: crypto - la1n: web - Xerxes: reversing Since we have a shared interest in pwn, everyone gets to do it. The team will participate in the N0PSctf, which starts on May 31st. After that's done, we'll share our experience here, and maybe some writeups. For any lain looking to try out doing CTFs: I suggest completing the initial modules on pwn.college, as the three of us are engaged to it in some level. It's the single most comprehensive resource out there.

>>26405 Pass for CTF? I have account on n0ps under this name

>>26407 I'm on lainctf till 11:30am GMT on

All ready ^____^ good luck team

If in case you hate discord too N0PS{w3lc0me_T0_n0p5t0p14!!}

>>26405 Good luck gentlemen, wish I was playing too.

>>26411 Thanks lain. >>26410 I don't like discord either. Starting to play with the challenges now. You both got some points already ~_~ I'm late

It's not that bad (186/1234). Now let's wait for the writeups, study solutions of the challenges we've tried and move on to a new CTF.

>>26433 I thought we were going to be much further down. This is great. How were the web challenges? Tried to do one of the crypto ones but realized that I don't have enough knowledge yet. Got one of the basic challenges, though. These OSINT / Forensics challenges are bullshit 0_o I'm going to do some of the cryptohack challenges, to hopefully be more prepared next time. https://cryptohack.org Overall, it was pretty fun participating in a CTF. Need to check out other ones now. If we were more prepared, it would be totally possible to be at least in the top 50. This makes me hopeful :) We need a policy of always being online in the #lainctf channel, working on that.

>>26434 Haven't you tried the pwn challenges? >How were the web challenges? Those I've completed do not require a lot of knowledge, only patience. The other two I have not finished probably required some specific knowledge and I thought I found their entry points, but I'd had run out of ideas to test there (and to be honest motivation to keep trying). Looking forward for writeups. So I believe our main preparation is participating in CTFs and studying their writeups.

>>26435 I didn't understand those. Need to do more pwn college @___@ >do not require a lot of knowledge, only patience. That's amusing. >our main preparation is participating in CTFs and studying their writeups. Yeah, we need to keep doing CTFs, even if we are unable to solve most of the challenges. It's useful for getting accustomed to them, and reading the writeups after it ends helps to learn useful tactics for solving specific types of problems.

>>26433 One of the challenges, the pwnfield one, I knew the idea of what I had to do, but getting to the solution was hard. You have to make some custom shellcode, however the ones you could enter could only be mov r32, imm32 instructions. I think you have to misalign the instructions somehow to get a shell, but I spent too long figuring out how to do, and didn't get it done :-(. I spent too much time figuring out how to produce mov instructions that when misaligned executed something else I think honestly just more practice honestly, also my windows pwn skills is lacking, I'm gonna do some pwn college(specifically the windows crash course), and do some more ctfs for next. We can do this lains. >>26434 https://nostarch.com/serious-cryptography-2nd-edition I think that this could be helpful for crypto stuff. Also I agree, I'm going to try and be online more. I see if I can get a bouncer like mentioned in #lainctf or something.

well done lainons! tech noob here, i want to participate ctf's as well but dont have any knowledge. I do some overthewire and tryhackme stuff, it looks fun, im gonna do pwn.college next. How much time i need for participating to a real ctf, im a lil impatient (⌒0⌒)／~~

>>26440 >I see if I can get a bouncer like mentioned in #lainctf or something. Isn't it just setting up znc on VPS server? It doesn't look complicated, is it all we need? If I run znc on my server, can we all you use it? Or it's personal? Sorry, I don't get how IRC works at all. >>26441 Hey lainon! >How much time i need for participating to a real ctf, im a lil impatient That's good. I've doing HTB machines and challenges along with portsperson whose company I enjoy labs for three months. And I still suck on real CTF. The sooner you start, the better.

>>26442 >portsperson wut... I meant portsw_i_g_g_er

person whose company I enjoy sperson whose company I enjoy portsperson whose company I enjoy person whose company I enjoy person whose company I enjoy person whose company I enjoy

>>26442 portsperson whose company I enjoy the web proxy thing right?

Hello everyone, I finally got round to changing lain team logo, it's just evil lain image, we can change later (Feel free to provide suggested images). Anyways, the Lain Team is invite only, just so that only lainons can be allowed in. There was a discussion that we had on the 29th we discussed about what we would do cirno (>>26405 ) has written in the comment linked what we discussed about. There are different categories in CTFs usually: Pwn Reversing Crypto Web Hardware Forensics Misc So we need some people in some of these other areas. Many resources for pwn were linked check previous comments for this: >>26369 >>26275 >>26246 I'll try to find resources for areas other than pwn, since alot of the comments here seem to be related to pwn. If you want to join Lain Team, hop onto #lainctf on IRC, I'll send you the pass. I'll try to be on for as long as possible by the username Xerxes. See you then lainons, we can do this ;-)

Official writeups published https://github.com/N0PSctf/N0PSctf-2025

>>26453 The pic is great, I'll send any other if I find one in my lain folder ^___^ I'm going to focus on getting at least orange or yellow belt first before delving into crypto, I feel like this will be more effective. The book you linked is really useful, it deals with crypto in a practical manner, unlike the other books that focus a bit too much on the math underneath it. Another book about crypto is the one used in most places: Katz & Lindell "Introduction to Modern Cryptography" 3rd edition >>26442 I'm setting up a bouncer for myself, but if we aren't able to get it working, we could try this shared VPS idea. It should work just fine. Posting an update when I start the orange belt modules. Go Lain Team!

Next CTF in coming weekend https://play.ctf.gg https://ctftime.org/event/2591 Cryptography, pwn, reverse engineering, web exploitation, blockchain, miscellaneous. Sat, 14 June 2025, 03:00 EAT — Mon, 16 June 2025, 03:00 EAT Anyone in?

>>26493 I'm in, I'll be joining. I'll be on lainctf

Anyone who finished Computing 101 have any resources they'd recommend specifically? I'm back to doing assembly after getting depressed and failing to achieve anything in 2 months, but now that I've started solving new issues I continuously get stuck on things that just seem like pwn.college is omitting teaching. Maybe it's obvious and I'm just having a bad day (and I wouldn't be surprised with how easy the others were) but I got stuck in efficient-modulo, solved it, and now can't wrap my head around byte-extraction, everything I write seems completely random and nothing behaves the way I expect it to. It makes sense as it's explained in binary but... I don't know maybe I'm just missing something.

>>26624 Very familiar. If you stuck on binary exploitation challenges, I'd recommend HTB Academy - Binary exploitation module. It uses nasm instead of gas, but explanation and assessments are really great. While pwn.college goes harsh, HTB is a smooth ride, but paid.

>>26631 Or you can just start reversing in IDA start with assault cube and look at unknown cheat forums.

Heello lainons OwO I want to learn pentesting to make money on HackerOne, but I am not sure how to learn it. On forums, I found websec.fr. I'm trying to solve level 17, but I'm finding it too hard, and after 2-3 hours, I started Googling to find something that could help me. However, what I found (I think) was the solution. I say "I think" because I didn't read it. The issue I have is that websec.fr doesn't provide study material, a list of topics to read, or anything. On the other hand, what I find is just the straight-up solution. So, I don't know how to learn this because neither option helps. Did this happen to you?

>>26690 HackerOne is not about pentesting, it's about bug bounty. There is some overlap between them, but they are not the same. To keep it simple, I'd say that pentesting is a skill focused on finding and exploiting CVEs or misconfigurations in well-known services like nginx, SSH, FTP, Active Directory, etc., to gain initial access and then exploit the infrastructure using privilege escalation, lateral movement, and similar techniques. Bug bounty, on the other hand, is about finding vulnerabilities like XSS, CSRF, SQLi, and so on in a specific website, and getting paid for it. If you have zero knowledge of web security, you can start with TryHackMe, and if it feels too easy, move on to Hack The Box (CBBH for bug bounty and SPTT for pentesting paths). This will give you a good overview of what web security is. If you choose pentesting, keep going with HTB and work on their machines. If you want to do bug bounty, start by installing Burp and solving at least 50% of the labs on PortSw igger for each topic. Check out APIsec to get familiar with API security. Try solving some Damn Vulnerable Web Applications like Juice Shop and crAPI - you'll find more on GitHub. Then join our CTF team - you'll learn much more this way than by just doing labs. Once you're comfortable, create an account on HackerOne and spend a few (best case) months suffering until you finally find your first bug. And here I’m omitting topics like coding and Linux - but they’re also important.

>>26493 I haven't done CTFs or any CybSec stuff for a few years, might try to relearn some stuff and join in the fun next time.

Hello, lainons! Yesterday, Lain Team participated in the 2025 edition of SekaiCTF! We've managed to solve a web, and a PPC challenge. (PPC is a category that mimics Competitive Programming problems.) I've been more involved in the "Nokotan's Arcade" challenge (PPC). The problem was basically about allocating the players with the most optimal popularity score so as to maximize the total popularity score. Chikoi helped me with my solution, that ultimately failed. But he wrote his own, using dynamic programming. It was really fun to spend my Sunday learning many aspects of C++, while solving a problem! After analyzing the top scoring teams, and the amount of points granted for each problem, we realized that a good strategy going forward is to focus deeply in a single category. So, we are doing this with pwn. Hopefully, we'll start to be able to solve more pwn problems once we have a good understanding of it. (That doesn't mean to stop playing with our secondary category, it's just that pwn will be the main focus). Don't forget that we're always active at the #lainctf IRC channel! If you want to talk, you can join our channel and ping us. Or reply to this thread ^____^

>>26909 Hey don't forget about that second PPC challenge! I spent way too long on it but still it was fun. It was basically trying to find the shortest path on a triangle graph, pretty neat! Next time we will do more pwning for sure as I will focus on pwn.college for the next few weeks!

>>26909 Oh, nice! I've participated in SekaiCTF with my team and solved a couple of challs (just webs and pwns though), haven't noticed that you're participating as well Are you playing any CTFs anytime soon?

Slightly off-topic but does anybody know any CTFs that are focused on software rather than webservers?

>>27016 I am assuming that you mean websites and web exploitation right? If so then almost every CTF will have those as categories and you will just have to try do the pwn and RE stuff while ignoring the web category. There might be the rare CTF with a stronger focus on pwning and RE but all that comes to mind is PlaidCTF. To learn how to pwn software though I recommend pwn.college, pwnable.kr and probably picoCTF.

>>27015 Today we are playing in the ImaginaryCTF. This one should be fun, since like the others it had a few previous editions. Aiming for one or two CTFs per month. Next one is going to be in October.

excuse my ignorance, but what is CTF?

>>27028 CTF = Capture The Flag

>>27029 oh, but like, in some sort of game? if so, which one?

>>27030 This is something you could google and learn about pretty easily, but regardless a CTF is a hacking competition where you solve challenges (web, crypto, pwn, forensics, reversing, etc.). When you solve one, you get a flag usually in the form CTF{flag} which you then submit to the CTF website to verify you completed that challenge. You get points depending on the difficulty of the challenge or on how many people solve it, which puts you and your team on a leaderboard so you can feel good (or bad) about how you did. As for "which one?" there are many, they're running at different times of the year though you can also do archived challenges. If you’re wondering why people do it, everyone has their own reasons but mostly it’s because they’re fun and a good way to test your skills. The time pressure (usually 48 hours) and the nature of the challenges pushes you to find creative solutions, so you end up learning new things and finding new approaches. Some people chase prizes but honestly the practice and fun are the best reasons alongside just loving the competition. They are also more fun with teams to be honest.

Doing a single CTF per month is boring, so this month we are trying out two per month!! Seems like AmateursCTF's date has been moved from this month to next month, and we've already registered for two other CTFs in November, so we aren't doing this one. I've substituted it for EnigmaXplore 3.0. It will be this Friday. After that, Hack.lu 2025 will happen a week later (10/17). The former CTF will be relatively short (12 hours). It's a nice opportunity for lainons, even if they're not on the team, to test this whole thing out. Some updates: - I'm still doing the pwn.college orange belt modules - Chikoi is working on some Cryptohack challenges - Warlock got a ZNC instance (exciting)

la1n set up a website for the team! https://lain-team.github.io/writeups/ It already has some write-ups from previous CTFs; lainons can read about how we solved those challenges. I've noticed most teams have only a few write-ups, so we thought it would be a great idea to write regularly.

>>27308 I'd like to join the ctf team. Where do I join? The irc channel mentioned above?

>>27309 You are welcome to joinus! As long as you're willing to learn and keep at it over time, I don't see why not. Yes, join the IRC aand try one of the upcoming CTFs to see if you enjoy them first! Just keep in mind that, given the nature of IRC, you might not get immediate responses to questions.

>>27310 NTA but i'm extremely new to coding in general but i'm also intersted in this. Should I learn more before joining or am i good?

>>27382 I will assume you’re maybe a first-year Comp Sci student and therefore have somewhere to learn a solid base in computer science and programming. If not, I’d strongly recommend getting comfortable with how computers work first. Otherwise, CTFs can be pretty rough starting out. The programming board probably has some beginner resource/book recommendations if you need them. CTFs are usually very broad and cover lots of areas. Even in our last one, we found new categories we hadn’t tried before. Common ones include: Crypto, pwn, reverse engineering, active directory, AI, blockchain, web, forensics, OSINT. Some categories don’t need much programming, but most require domain knowledge or a good grasp of how computers and operating systems(Typically Linux) work. You're welcome to join a future CTF with us but just note that if you have little experience with coding or CS, some challenges will feel tough at first Which to be fair is normal but getting more programming experience makes it much easier to follow what is happening. Having a goal or specific area of interest will really help with motivation and focus. If you''re curious of resources to help you get started in learning I’d start by learning the basics of computers, C, and Python, at least to the point where you can write a simple tool and understand what the computer is doing. After that, check out pwn.college, which we will wage slave relentlessly. Their “Getting Started” section covers Linux fundamentals, a bit of C and assembly, and some networking/web basics. Someone with prior experience may be able to fly through those sections in a few weeks or a month but taking your time and finishing most of it by the end of the year would be a solid pace. I have gone through all of those challenges myself, so I am happy to vouch for their lab quality. Our next CTF is November 14th-18th, and you are welcome to join in! We usually pick hard CTFs to push ourselves, so don't worry if some of the challenges seem too tough or you get stuck. I would also suggest asking questions in programming or lainctf IRC channels if you are struggling with a topic or concept!

>>27386 Alright sounds good man I’ll get right on it

After taking part in a few CTFs these past few months, we finally made it onto the global leaderboard! It was Hack.lu specifically that got us there. Related to Hack.lu, two write-ups were posted on the team's website for the following challenges: - Fängelse (Misc) - Syndröm Decöd (Crypto) Reminder that our profile is located at: https://ctftime.org/team/387158

>>27390 I want in :3 what to do?

>>27406 Come to #lainctf on IRC

I'm sorry. The body is too short or empty

>>27554 Mental illness is 99% fraud. Im pretty sure the ppl that work in the industry agree

The images in posts >>19195 and >>26125 are more cr1nge than the sonichu guy.

>>27603 yeah bdsm-5 was a short-lived hit dismissed by the authors..so..

>>20275 >XMPP little late but is that xmpp still around?

>>27603 sure but most of the things working in the industry arent people

It seems something has happened to the lainchan IRC. All the rooms seem to be gone

>>27803 >>27823 We decided to use Arisuchan's IRC for our channel because Lainchan's IRC was suffering from some instabilities. You can find us in #lainctf as always. Many things happened! But let's talk about CTF. There were many CTFs but the most exciting ones were DiceCTF and SUCTF. DiceCTF was a hard CTF but somehow we got 28 points from it, like what??? That's a lot of points. I almost cleared the web category except for some really hard challenge that few teams solved. The same solution worked for both versions of a challenge so I'm sure it was some cheese 0_o SUCTF was very exciting because it's our first Chinese CTF. You can NOT believe what I have gone through to get there!!! Had to send a PM to an XCTF organizer (zomg so important) to get an account because turns out their platform required a Chinese phone number and obviously (lolno) I don't have one. Made him annoyed at my lack of patience, then we finally got in after finding the button that reached the actual challenges. They were really hard and had many different themes like for example exploiting Java, AI, very hard pwn challenges (even a Chromium fullchain). I tried web as always but only got a SQLi ~_~ the rest of them were either blackboxes that I couldn't crack open, or literally 0day challenges. Like, come on now! But I am pleased with our first experience there. I'm definitely looking into participating more in the Chinese scene, especially because they seem to be stronger in the web side of things. Don't forget that we still need more members to be able to compete with the bigger teams, so it doesn't matter if you are a beginner. Just come talk to us and have fun. There are simply too many challenges for us to cover. Right now we especially need a reversing player. We accept anyone that wants to learn, in any category. Can't forget to mention our new website! I bought a new domain, and also server infrastructure. Now I'm hosting our writeups and possibly later other stuff like a blog and more. Even other services, if required. For now I've put our existing writeups into a simple Jekyll instance, so that we don't have to depend on Github anymore. We'll eventually create a totally new design for the blog. Had to host something simple because we don't have much time to think about the website's design between learning and playing CTFs. It's hosted at: https://ctf.cirno.party Take it easy!!!

llm deluge hit hard the whole CTF community, but I hope y'all are still holding up here

>>27828 Was competing in a CTF for uni some time back and saw lainctf as one of the teams listed. Nearly gave me a heart attack seeing Lainchan culture out in the wild but was also nice to seeing your team do well in an age in which CTFs have been overrun by clankers. Looking forward to future writeups! Keep fighting the good fight, lainons.

Still playing CTFs! I'm going to shift the events towards lower-weight ones because the challenges have been getting harder lately. I got the orange belt some time ago. I'm happy with it. The objective is still getting the blue belt though. Solved various modules on Web Security Academy, and I can say that they're good enough that you can start with it while learning the web languages on the side. No need for other platforms. We finally got a reverser but now no web player. Since I've been learning web, I'm also experimenting with animations for our website. The theme has something to do with Lain >_> lainons will have to wait for it

>>28376 Never played with you guys, but at least I manged to pwn some medium HTB boxes (with some help of course)

Some people alread appeared at IRC? How this project is going?

>>28393 The project has been active continuously since May 2025. Check out our website for more information. >>28386 That's already good. I know that HTB has some boxes where you have to find vulnerabilities in an application. That's mostly what we do so I think the skills are very adjacent.

>>28395 Well I would say HTB is not that beginner friendly, and some easy machines are already pretty intermediate