Provider of CTF resources
Maze of twisty little passages
Joined September 2013
- Tweets262
- Following155
- Followers160
- Likes120
Protip: GDB 10.0 supports common #CTF challenges. Just use the command `target ctf <challemhe directory>` and then `i reg eflags` and GDB will display the entire set of flags
According to @CTFtime, there were over 160 online CTFs in 2020. How many #CTF flags did you get? Report your progress in 2021 using #FlagCount and try to beat your personal best.
I love it when the client argues for a no-limits pentest
youtu.be/rSvBFm_MuXw
Capture your work better with ASHIRT by @TheParanoids
Great for CTF and Pentest documentation. Check out their Shellcon talk youtube.com/watch?v=K2VZftHj…
Scuttlefish Team retweeted
If you submitted a write-up in @CTFtime for a #GoogleCTF challenge, send us a link to [email protected] - we have 40 prizes for the best write-ups, but have only received 30 so far. groups.google.com/g/google-c…
Scuttlefish Team retweeted
This presentation of report writing mistakes is gold.
As a long-time report writer these are familiar and I found a few more things to pay attention to.
@lennyzeltser has created a 2-day course on the topic, might be worth checking out! (SANS SEC402)
youtube.com/watch?v=V7lO7Ugx…
Scuttlefish Team retweeted
Happy Friday! Did you miss a presentation or wanted to dissect a certain talk? All #BSidesCMH20 presentations have been uploaded to our new Youtube Channel! youtube.com/channel/UC-Y2D1h…
Scuttlefish Team retweeted
The Purple Team Exercise Framework #PTEF and @defcon workshop are both free and posted for you to use and make your #redteam #blueteam #purpleteam more efficient. Check it out: scythe.io/library/ptef-works…
Scuttlefish Team retweeted
New:
curl -s "crt.sh/?q=%25.tesla.com&outp…" | jq -r '.[].name_value' | assetfinder -subs-only | sed 's#$#/.git/HEAD#g' | httpx -silent -content-length -status-code 301,302 -timeout 3 -retries 0 -ports 80,8080,443 -threads 500 -title | anew
@b51b5b43 @Jhaddix @stokfredrik @TomNomNom
Scuttlefish Team retweeted
A good way to bypass the Akamai WAF by exploiting a redirect-based XSS is with the following payload:
javascript:new%20Function`al\ert\`1\``;
You can also obfuscate it using HTML entities
#BugBounty
Scuttlefish Team retweeted
How a Hacker's Mom Broke Into a Prison—and the Warden's Computer bit.ly/383zAUZ
Scuttlefish Team retweeted
Ok serious question, I'm about to go start a mud as a hobby, I did one for derby and people liked it.
If I made a permanent one and setup a CTF board would you play or help build content?
It would be LPC and gurbalib
I have a python tool that generates LPC for you.
36%I would play
8%Contribute content
38%What's a mud?
18%Show results
222 votes • Final results Scuttlefish Team retweeted
Hello hackers! Registration for the qualification round for @DEFCON 28 CTF is up! Register at scoreboard.oooverflow.io/
Scuttlefish Team retweeted
Today: CTF for beginners!
#sharetheknowledge☕️☕️ #infosec #CTF
- google Beginner's Quest
- holidayhackchallenge.com : @KringleCon
- tryhackme.com : @tryhackme
- amanhardikar.com/mindmaps/Pr…
- overthewire.org
- vulnhub.com
- root-me.org
Scuttlefish Team retweeted
Congratulations @GeorgeMasonU #cyber team! #cyberfusion. 2nd place was @UVA. 3rd was @radfordu. Congrats all! @VMI_CLE @VaCyberRange
Its CCDC Season again. Are you prepared? Is this your first time? Check out @armitagehacker's Dirty Red Team Tricks. They may be old, but they're still effective
youtu.be/oclbbqvawQg
youtu.be/6kKoJW5xvhg