Your teaching skills are getting better and better. It's great to see. I learned a lot this time too.
5.0
codersangmin
100% enrolled
It was good
5.0
삐약
100% enrolled
It was fun.
What you will gain after the course
Methods and intuition for discovering security vulnerabilities in the fields of Pwnable, Reversing, Web, and Misc.
Computer science knowledge related to each challenge.
How to install and use security tools.
Hacking as a hobby, hobbyist hacking. ※ The "Hacking as a Hobby" content aims only for legal hacking to contribute to a safe information security ecosystem.
▶ Do you want to participate in a hacking competition?
▶ You managed to participate, but do you feel like you aren't learning anything because there is no feedback?
▶ Even if you were lucky enough to find a solution on the internet, did you feel frustrated because the quality of the material was poor or it was filled with jargon only they understood, causing you to feel a sense of resistance and lack of understanding?
그렇다면 여기서 도움을 받으실 수 있습니다.
Here, we will master the DIMICTF Preliminary Challenges held in 2019 (it was announced that the preliminaries were more difficult than the finals). We will practice every challenge from beginning to end.
DIMICTF is a domestic hacking competition sponsored by the Ministry of Science and ICT and the Korea Information Technology Research Institute, and hosted and organized by Korea Digital Media High School.
If you master all the contents of this course, you will be able to solve challenges that even the first-place winning team could not clear, and as your skills improve, you will be able to challenge even higher-difficulty hacking competitions in the future.
We cover a total of four representative areas of hacking competitions. These are divided into: the Pwnable area, which falls under system hacking and primarily aims for privilege escalation; the Reversing area, where you disassemble software to find hidden key information like a treasure hunt; the Web area, where you extract key information by bypassing weak security procedures on websites; and the Misc area, where a sense for vulnerability discovery is more important than specific knowledge.
You will explore various activities together, such as finding Easter eggs hidden by developers, finding ways to upload files with extensions that are blocked, crafting exploit codes stitch by stitch in machine language, triggering unplanned functions by invading inaccessible memory areas, restoring obfuscated software to its original state, and revealing hidden functions by injecting combinations of special characters into user interaction points like login pages.
By practicing through various challenges that include the contents mentioned above, you will learn how to discover and remediate vulnerabilities. Specifically, it includes theory and practice regarding bugs and vulnerabilities related to the keywords mentioned in the image below.
For effective learning, we provide a virtual image that recreates the actual competition environment. This allows you to practice as if you were participating in the competition. Additionally, we cover how to install and use various tools. The tools used include Ghidra, GDB-PEDA, JD-GUI, Checksec, Uncompyle6, and more.
The lectures focus on explaining both phenomena and principles to minimize the need for independent study; however, if you have any questions, please use the Q&A board at the Naver Cafe "Hacking as a Hobby (Link)".
Please refer to the prologue video for other details. The video includes answers to the following questions:
▶ What is the effective learning method? ▶ How is the lecture conducted? ▶ What is the relationship with "Hacking as a Hobby #1~4"? ▶ What are the differences from other courses?
ㆍ Information Security Engineer
ㆍ Author of "Coding Everybody! Python"
ㆍ Author of "Hacking as a Hobby #N" (Book & Lectures)
ㆍ Information Security Officer at Hankuk University of Foreign Studies
ㆍ CERT Team Leader at Missile Strategy Command (Army OCS #59)
ㆍ B.S. in Computer Science and Engineering, Tech University of Korea (4.42 GPA)