You need access to a Kali setup, so if you have it already setup, you can skip this step. Otherwise follow these instructions:
- Download VirtualBox here, follow the relevant link for your operating system. Also download the Extension pack.
- Install VirtualBox: click on the install package and follow the instructions.
- Install the extension pack: open the file Oracle_VM_VirtualBox_Extension_Pack-6.0.24.vbox-extpack from your download folder.
- Download Kali Linux for VirtualBox, which you can find here. Open the tab "Kali Linux VirtualBox Images" and click on the link "Kali Linux VirtualBox 64-Bit (OVA)"
- Install Kali Linux by opening the file that you downloaded. This will open VirtualBox with an "Import Virtual Appliance" window. Click on "Import".
- You're done! now you can start Kali by clicking "Start" on VirtualBox.
- Login into your Kali Linux with username
kali
and passwordkali
. - Open a terminal window. You can do this clicking on the "Terminal Emulator" icon on the top left (the fourth from the left) or by typing
ALT+F2
and then typingqterminal
in the dialog window. - Install the software that we need for the session by entering the following commands (you can copy paste them from the browser into the terminal, then press Enter):
sudo apt update sudo apt install -y gdb cmatrix ghidra python3-pip bash -c "$(curl -fsSL https://gef.blah.cat/sh)" pip install pwntools git clone https://github.com/hoheinzollern/workshop-cybersikkehed.git
- To check that you have done everything correctly, type
cmatrix
and press Enter. Good job! (PressCTRL+C
to exit)
This year we will cover the great material by omu training given at the Global Cybersecurity Camp. For the first day you don't really need the Kali VM, but it will be helpful for Saturday morning, so be prepared :) On day 1 we will cover Lesson 1: x86-64 Assembly and Lesson 2: Linux Reverse-Engineering
On the second day we will cover Lesson 3: Buffer overflows and we will go from zero to hero with a cool set of challenges and the tools you have installed on your machine
- Join the Cyberskills Discord and ask questions!
- Learn more about exploitation at pwn.college!
- Do some crackmes!
- Own them nice flags at PicoCTF
- Learn return-oriented programming at ROP Emporium
Session recordings are available here