mirror of
https://github.com/autistic-symposium/sec-pentesting-toolkit.git
synced 2025-04-27 19:16:08 -04:00
99 lines
2.5 KiB
Markdown
99 lines
2.5 KiB
Markdown
# CTFs & Wargames
|
|
|
|
|
|
- ASIS Final
|
|
- CSAW Quals
|
|
- Hack.lu
|
|
- Stripe 1, 2, 3
|
|
- 9447
|
|
- OverTheWire
|
|
|
|
|
|
----
|
|
|
|
# Trivia List
|
|
|
|
## CSAW CTF
|
|
|
|
1. This is the name of the new USENIX workshop that featured papers on CTFs being used for education. Answer: **3GSE**
|
|
|
|
2. This x86 instruction is an alias for pop eip/rip.
|
|
Answer: **RET**
|
|
|
|
3. This is a type of informal security meetup that has been gaining popularity in different cities over the last several years. Answer: **CitySec**
|
|
|
|
4. This is what geohot and other members of the CTF community are calling live streamed CTF competitions where spectators can watch competitors screens as they solve challenges. Answer: **livectf**
|
|
|
|
5. On this day in November, the CSAW Career Fair takes place in Brooklyn, New York. Answer: **14**
|
|
|
|
6. This is the Twitter handle of the student who runs CSAW CTF. Answer: **poopsec**
|
|
|
|
|
|
---
|
|
# Recon
|
|
|
|
|
|
### Searching the Interwebs
|
|
|
|
The recon problems usually give you someone/something's name and a task or a hint to find some specific information about it. So the first thing is of course google it.
|
|
|
|
Google anything using keywords such as ```filetype:cgi inurl:cgi-bin```
|
|
|
|
|
|
### In addition we can look at:
|
|
|
|
- Facebook, Twitter, Linkedin, Google+, reddit, /r/netsec.
|
|
- IRC: with **/whois **.
|
|
- [namechk]
|
|
- Github: check in the commit history.
|
|
|
|
#### Search Engines for People Lookup
|
|
|
|
- http://www.lookup.com
|
|
- http://www.spokeo.com
|
|
- http://www.whitepages.com
|
|
- http://www.knowem.com
|
|
- http://www.snitch.name.com
|
|
- http://www.lycos.com
|
|
- http://www.aol.com
|
|
- http://www.zabasearch.com
|
|
- http://www.whowhere.com/
|
|
- http://www.switchboard.com
|
|
- http://radaris.com/
|
|
- http://www.yellowbook.com
|
|
- http://www.dexknows.com
|
|
- https://www.facebook.com/directory/people/
|
|
- http://regulargeek.com/2012/07/15/yacktrack-will-be-shutting-down/
|
|
- http://www.peekyou.com
|
|
- http://www.swithcboard.com
|
|
- http://www.bigfoot.com
|
|
|
|
#### Background Check:
|
|
|
|
- http://www.intelius.com/background-check.html
|
|
- http://www.jailbase.com/en/sources/fl-lcso/
|
|
- http://www.peoplerecords.com
|
|
|
|
#### E-Mail Lookup:
|
|
|
|
- http://www.snapbird.org
|
|
- https://connect.data.com/
|
|
- http://ceoemail.com/us-companies.php
|
|
- http://www.mailtester.com
|
|
- http://www.emailaddresses.com
|
|
|
|
|
|
#### Finding pictures:
|
|
|
|
- [karmadecay]
|
|
- [tineye]
|
|
- [images.google.com]
|
|
|
|
|
|
[karmadecay]: http://karmadecay.com/
|
|
[tineye]: https://www.tineye.com/
|
|
[images.google.com]: https://images.google.com/?gws_rd=ssl
|
|
[namechk]: http://namechk.com
|
|
|
|
|