osirislab / ctf101

CTF101, a wiki-project documenting Capture The Flag techniques.

CTF 101

This is the official repository for CTF101 hosted at ctf101.org.

This branch uses MKdocs and MKdocs-Material.

The site is maintained by the OSIRIS Lab in collaboration with CTFd.

---

Installation

1. Verify python 3 and python-pip is installed. Otherwise, you can find the installation here.

   python3 --version
   pip --version

2. Clone the repository.

   git clone [email protected]:osirislab/ctf101.git
   cd ctf101

3. Create a virtual environment. If this step doesn't work, follow this for python-venv.

   python3 -m venv .venv
   source .venv/bin/activate

4. Install the necessary packages.

   pip install -r requirements.txt

5. Run the development server.

   mkdocs serve

---

Contributing

First off, thank you so much for contributing to CTF101's wiki repository. It's contributions from people like you who makes this page what it is. Thank you for making this page be the first step for many more security engineers!

1. Please create a branch to add/commit changes to followed with a pull request.
2. Link the relevant issue in the pull request history and it'll be assigned a reviewer!

ctf101's Issues

Install zoom.js

We should have a way to click on images to zoom into them. Medium style.

Submenu click does nothing

If I am on the category Directory Traversal and click SQL Injection, there is no redirect, but the menu does close.

Mkdocs Hyperlink warning

building currently will spit out the following error message:

WARNING -  The page "forensics/overview.md" contained a hyperlink to "challenges/2017/Forensics/best_router.md" which is not listed in the "pages" configuration.

Does not build

fresh clone on macOS does not build.

tried with python2 and python2

errors arise with pymdownx and mkdocs.yml file format.

the markdown_extensions top-level key seems to have formatting changes.

Reproduce by:
fresh clone
fresh virtualenv

python2.7.0 or python3.6.5

pip install -r requirements.txt
mkdocs <serve|build>

[Feature] Start here! pages

Include a section on where to start.

Include:

• how do i play ctf
• types of ctf
• where to find CTF
• benefits of a VM or native terminal
• download links for python, wsl, wireshark whatever
• toolkit stuff

Most links are broken

To reproduce, go to:

https://ctf101.org/binary-exploitation/what-is-the-got/

Then click any link on the page.

RSA

Specify that the totient function λ(n) is Carmichael's totient function and not Euler's, and that λ(pq) = LCM(λ(p), λ(q)), that way it will be clearer what to look up for further reading.

Broken wireshark link in FAQ "Recommended Software"

Wireshark link in https://ctf101.org/faq/recommended-software/ redirects to a 404.

Incorrect hyperlinking for subcategories

Clicking on a link in the nav-menu to the left does not highlight the correct section of the nav-menu.

doesnt build.

mkdocs too old?

 △ ~/ mkdocs --version                                                                                                   master 304d ⬡
Traceback (most recent call last):
  File "/home/scribbl/ctf101/.venv/bin/mkdocs", line 5, in <module>
    from mkdocs.__main__ import cli
  File "/home/scribbl/ctf101/.venv/lib/python3.10/site-packages/mkdocs/__main__.py", line 12, in <module>
    from mkdocs import config
  File "/home/scribbl/ctf101/.venv/lib/python3.10/site-packages/mkdocs/config/__init__.py", line 2, in <module>
    from mkdocs.config.defaults import DEFAULT_SCHEMA
  File "/home/scribbl/ctf101/.venv/lib/python3.10/site-packages/mkdocs/config/defaults.py", line 4, in <module>
    from mkdocs.config import config_options
  File "/home/scribbl/ctf101/.venv/lib/python3.10/site-packages/mkdocs/config/config_options.py", line 3, in <module>
    from collections import Sequence
ImportError: cannot import name 'Sequence' from 'collections' (/usr/lib/python3.10/collections/__init__.py)

https://stackoverflow.com/questions/73491058/importerror-cannot-import-name-sequence-from-collections-usr-lib-python3

will attempt to migrate it to newer build of mkdocs + add more maintenance to the page.

2012 Challenges

We have several 2012 challenges, such as Tom Ritter, which are named after the creators. A solution for adding these to 101 might be renaming them to "2012 Reversing #"

most solver script links broken

KWS2, Rock, tablez, and probably more.

ctf101.org binary exploitation memory address typo

https://ctf101.org/binary-exploitation/what-is-the-stack/
For the representation of the stack within this instruction:

ESP is first shown to be 0xfffeffec, but in the actual stack, it's wrongly 0xfffefffc

Write a CTF101 page on pwndbg

Write a CTF101 page detailing how to setup pwndbg and how to use it for some challenges.