README.md

CCSC_BootCamp_Training

CIT Cyber Security Cell Bootcamp Training modules

Table of Contents

1. General & Disclamer
2. Build Your Own Path
3. Linux For CTFs
4. Cryptography
5. Forensics & OSINT
6. Reverse Engineering
7. Binary Exploitation
8. Web Exploitation
9. Practice & Resources
10. Tools
11. Wanna Go Further?

General :

This is our CCSC git repository in which we'll post all the Boot Camp material (Presentations, Tools, Scripts, ...).
Made with ❤️ by v0lck3r & da3ss.

Disclaimer:
Please use the material in this repo wisely, we're not responsible for any bad implementations of it! Cheers!!

Build Your Own Path :

We believe that Glory doesn't come by doing ordinary tasks, so if you wanna shoot for the ⭐ ⭐, you need to practice and seek for more documentation yourself.
Google is your friend, that's the spirit of a true Cyber Warrior !!

Linux For CTFs :

Day 0 Linux_Intro slides:

• The useful commands during CTFs

Cryptography :

Day 1 Crypto Day1 slides:

• Cryptography :
  • notions
• General :
  • Encoding
    • ASCII
    • HEX
    • Base64 / 32
  • Caesar cipher / ROT13
  • XOR

Day 2Crypto Day2 slides:

• Challenges
• RSA
• Hashing

Forensics & OSINT :

Day 3Forensics Day1 slides:

• Digital Forensics :
  • Whatis Forensics
  • Types
  • Initial analysis
  • Commands :
    • file
    • strings
• File Signature
  • Hexdump / hexedit
• Archive files
• Image Analysis
• Steganography
  • Whatis Steganography
  • Commands
• Audio Analysis

Day 4Forensics Day2 slides:

• Digital Forensics :
  • Networking & Network Forensics
• OSINT

Reverse Engineering :

Day 5Reverse Engineering Day1 slides:

• Reverse Engineering
• Assembly

Day 6Reverse Engineering Day2 slides:

• Demo (Control Flow Of A Program)
• Disassembling & Decompiling

Binary Exploitation :

Day 7Binary Exploitation Day1 slides:

• PWN
• Buffer & BufferOverFlow
• Demos and Payloads

Web Exploitation :

Day 8Web Exploitation Day1 slides:

• Introduction & Fundamentals
• SQL Injection
• Command Injection
• CSRF
• SSRF
• XSS (Stored, Reflected and DOM)

Practice & Resources :

Cryptography

• https://cryptohack.org/

OSINT

• https://ctf.cybersoc.wales/

Forensics

• https://trailofbits.github.io/ctf/forensics/

PWN

• https://pwnable.tw/
• https://ctf101.org/binary-exploitation

Reverse Engineering

• https://ctf101.org/reverse-engineering

Web Exploitation

• https://devopedia.org/web-exploitation
• https://www.rapid7.com/fundamentals/web-application-vulnerabilities/

All The Above

• https://cybertalents.com/
• https://ctftime.org/
• https://picoctf.org/
• https://ctflearn.com/
• https://www.root-me.org/

Tools

Cryptography

• https://www.dcode.fr/
• https://cryptii.com/
• https://crypto.interactive-maths.com/frequency-analysis-breaking-the-code.html
• https://quipqiup.com/
• https://www.boxentriq.com/code-breaking/cipher-identifier
• https://gchq.github.io/CyberChef/
• https://github.com/Ganapati/RsaCtfTool

Forensics

• http://www.aircrack-ng.org/
• http://sourceforge.net/projects/audacity/
• https://github.com/volatilityfoundation/volatility
• https://github.com/iagox86/hash_extender
• http://www.libpng.org/pub/png/apps/pngcheck.html

Networking

• https://nmap.org/
• https://www.wireshark.org
• https://github.com/robertdavidgraham/masscan

Steganography

• https://linux.die.net/man/1/exiftool
• http://www.imagemagick.org/script/index.php
• https://github.com/evyatarmeged/stegextract
• http://steghide.sourceforge.net/
• http://www.caesum.com/handbook/Stegsolve.jar
• https://github.com/zed-0xff/zsteg

Reverse engineering and pwning

• https://binary.ninja/
• https://www.gnu.org/software/gdb/
• https://ghidra-sre.org/
• https://www.hex-rays.com/products/ida/
• http://www.javadecompilers.com
• https://github.com/longld/peda
• https://github.com/Gallopsled/pwntools
• https://github.com/JonathanSalwan/ROPgadget

Web Exploitation

• https://portswigger.net/burp
• https://www.owasp.org/index.php/Projects/OWASP_Zed_Attack_Proxy_Project
• https://github.com/sqlmapproject/sqlmap

Wanna Go Further?

• https://www.hackthebox.eu/
• https://tryhackme.com

📫 Credits: OUSSAMA RAHALI & OMAR AOUAJ @CCSC