|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/the-best-ctf-course/
课程评论：没有评论
**Coursera 课程《CTF 新手指南 ~2023》内容摘要** 本课程将带您深入了解信息安全领域激动人心的“夺旗赛”（Capture The Flag, CTF）。 **什么是 CTF？** CTF 是一种信息安全竞赛形式，玩家通过解决各种网络安全挑战来获取“旗帜”。 **CTF 的主要类型：** 1. **Jeopardy 模式 (争夺模式):** * 提供一系列不同难度和类别的挑战，例如 Web、密码学（Crypto）、取证（Forensic）、二进制分析（Binary）等。 * 玩家通过解决挑战获得积分，难度越高的挑战积分越多。 * 通常，解决一个挑战后才能解锁下一个相关挑战。 * 比赛结束时，积分最高的队伍获胜。 * 知名示例：DEF CON CTF 预选赛。 2. **Attack-Defence 模式 (攻防对抗):** * 每个参赛队伍拥有一个包含易受攻击服务的网络或主机。 * 队伍需要时间来修补自身服务的漏洞，并开发利用对手漏洞的 exploit。 * 比赛开始后，参加者将与其他队伍进行对抗，保护自己的服务（获取防御分）并攻击对手的服务（获取攻击分）。 * 这是 CTF 的早期形式，DEF CON CTF 是其中的佼佼者。 3. **混合模式:** * 可能结合了以上两种模式或其他形式，例如在攻防对抗中加入基于任务的挑战。 * 知名示例：UCSB iCTF。 **CTF 涉及的关键信息安全领域：** CTF 竞赛通常涵盖信息安全的多个方面，包括： * 密码学 (Cryptography) * 隐写术 (Steganography，简称 Stego) * 二进制分析 (Binary Analysis) * 逆向工程 (Reverse Engineering) * 移动安全 (Mobile Security) 等。 **学习 CTF 的价值：** * 在游戏中学习并提升信息安全技能。 * 有潜力成为一名有道德的黑客（Ethical Hacker）或网络安全研究员，并在一年内开启相关职业生涯。 如果您希望通过充满乐趣的游戏方式来掌握实用的网络安全技能，本课程是您的理想选择。
The First Question will be what is The "Capture the flag (CTF)"?Capture the Flag (CTF) is a special kind of information security competitions. There are three common types of CTFs: Jeopardy, Attack-Defence and mixed.Jeopardy-style CTFs has a couple of questions (tasks) in range of categories. For example, Web, Forensic, Crypto, Binary or something else. Team can gain some points for every solved task. More points for more complicated tasks usually. The next task in chain can be opened only after some team solve previous task. Then the game time is over sum of points shows you a CTF winer. Famous example of such CTF is Defcon CTF quals. Attack-defence is another interesting kind of competitions. Here every team has own network(or only one host) with vulnarable services. Your team has time for patching your services and developing exploits usually. So, then organizers connects participants of competition and the wargame starts! You should protect own services for defence points and hack opponents for attack points. Historically this is a first type of CTFs, everybody knows about DEF CON CTF - something like a World Cup of all other competitions.Mixed competitions may vary possible formats. It may be something like wargame with special time for task-based elements (e.g. UCSB iCTF).CTF games often touch on many other aspects of information security: cryptography, stego, binary analysis, reverse engeneering, mobile security and others. Good teams generally have strong skills and experience in all these issues.So, If you want to Plag games with earn skills then join today & in a year you can make a carrear as a Ethical Hacker or cyber Security reachercher
