Skip to content

CTF Week Meeting 2023-02-02

After the end of the Spring Festival, I am working on the work matters planned for the year before, and we are also participating in the West Lake Sword Tournament today, so I wish you all continue to move forward in the next semester.

Work progress tracking

  1. COMPASS CTF 2022 - 60%
  2. Topic: CTF combined with research - 0%
  3. Multi-platform promotion of COMPASS CTF - 20%
  4. Training plan during winter break - 100%
  5. Member adjustment - 100%
  6. New Platform GZCTF - 43%
  7. Wiki page content adjustment - 20%
  8. CTFtime program: play CTF and sharing - 9%
  9. New Member Recruitment - 0%
  10. Apply for more ports with ITS on the Detroit server - 100%
  11. Ande Cup CTF game - 13% brief idea
  12. Remedial content session - 0% brief idea
  13. 2023 spring training schedule - 33% brief idea

What we discussed this week

  1. Ande Cup (安德杯) CTF game.
  2. Remedial content session.
  3. 2023 spring training schedule.
  4. Upcoming events.

0x1. Ande Cup (安德杯) CTF game

Just a game.

Inspired by an entertainment contest mentioned in a chat, I am working on the content design and topic design, about 20 questions or so, there will be some simple promotion in QQ group/CTFtime, not a serious cyber security RW vulnerability contest, but entertainment for beginners.

The contest is tentatively scheduled for Feb 26 - Feb 27, 2023, and will last for 24 hours.

0x2. Remedial content session

In these tutorials, I will sync the written content to our wiki for use as an introduction to cybersecurity, currently selected content is

  • What is cybersecurity and the hacker attitude.
  • Installation and basic operation of Linux-based operating systems.
  • Simple programming using the Python language, including math, networking, and image processing.
  • How to use Sagemath to perform mathematical operations.
  • Network packet capture and analysis via Burp Suite or Fiddler.
  • Understanding file structure and using a hex editor.
  • Reverse executables such as ELF and PE via IDA or Ghidra.
  • Basic content and exploitation of binary vulnerabilities.
  • Creating containers with Docker and container management with K8S.

This content will be updated gradually in the form of written materials or video images and will not be available in offline training sessions.

0x3. 2023 spring training schedule

For the spring 2023 program, we will continue to use the same weekly training format as before, and we will accept your suggestions to add a sharing and combination of questions to the training and add more practical content in addition to theory.

Each week, I will also post an archived replay of a recent competition, or a self-practice session on a selected topic, which you are free to arrange according to your schedule. Of course, if there is a competition planned for the week, the competition topic review will be delayed/reduced/canceled.

Spring 2023 Program

In the spring 2023 program, we have two components: recruitment of new members and advanced training. After a semester of competition and training, everyone's cybersecurity level and ability have improved, and I will focus on deepening learning in a certain direction this semester.

I will not recruit too many new members this semester, and the final recruitment will still be conducted through the competition, mainly for the freshmen of 2022, and the number of recruits will be mainly used to make up for the number of members who will graduate after this semester.

The number of recruits will be used to make up for the number of members who will graduate after this semester. The spring 2023 offline training and competition questions will be updated on this page.

0x4. Upcoming events.

I have updated the tournament calendar for February and here are the tournaments that will take place this week.

Competition Name Link Start Time End Time Require pre-register
西湖论剑网络安全技能大赛-初赛 https://game.gcsis.cn/ 2023-02-02 10:00 2023-02-02 18:00 True/End
Byte Bandits CTF 2023 BB CTF 2023-02-04 14:30 2023-02-05 14:30 False
DiceCTF 2023 DiceCTF 2023 2023-02-04 05:00 2023-02-06 05:00 False

I'm going to participate in competitions. For the team invite links, feel free to pm me or ask a question in the WeChat Group.

Wrap-up

We planned an upcoming recreational game and summarized what had been accomplished. Three new upcoming programs have been filed in the minutes of this weekly meeting.

The remedial training materials for the basic content will be refined and released in the near future, including a series of training programs for spring 2023 with a replay of the race in question, which will also be updated in real-time.