zardus - Network

That was a longer thread than expected, but we're super excited about these next steps in CTF Academy! Stay tuned for more exciting...

That was a longer thread than expected, but we're super excited about these next steps in CTF Academy! Stay tuned for more exciting stuff in the future and, if you want a non-microblogging place to stay up to date, keep an eye on https://ctf.asu.edu/education/ace-ctf-academy/

Want to see your education platform feeding into CTFs as well? If you run an educational platform that you think is a great bridge to CTF...

Want to see your education platform feeding into CTFs as well? If you run an educational platform that you think is a great bridge to CTF Academy, let us know!

An amazing cryptography education resource is cryptohack.org. These hackers, too, would be amazing to help ramp into CTF and the real world....

An amazing cryptography education resource is cryptohack.org. These hackers, too, would be amazing to help ramp into CTF and the real world. Now, once you reach Level 15 there, you're welcome to join us at CTF Academy by filling out this form! https://docs.google.com/forms/d/e/1FAIpQLSeX4JiRdSHaB_ehz9Za5PhIqPXmgWCyVv415Nd1M6h2jPFOdA/viewform

On to the Platforms! pwn.college has good (and growing!) content in various security concepts, but shines most in binary exploitation. Other...

On to the Platforms! pwn.college has good (and growing!) content in various security concepts, but shines most in binary exploitation. Other sites (I maintain a list at https://wargame.nexus) have other specialties, so including their top hackers would be great!

pwn.college Green Belts learn ROP, Heap, kernel security, and even microarch concepts, so we're inviting Green (and, pending capacity,...

pwn.college Green Belts learn ROP, Heap, kernel security, and even microarch concepts, so we're inviting Green (and, pending capacity, earlier) Belts to CTF Academy! We expect this will help Green Belts solidify their skills without adding too much CTF mentor load.

This has worked quite well! Rather than explaining Heap Exploitation, the mentors could focus on, e.g., tricky heap massaging in complex...

This has worked quite well! Rather than explaining Heap Exploitation, the mentors could focus on, e.g., tricky heap massaging in complex applications, or just how to approach a complex challenge in general. In fact, it's worked well enough that we're relaxing the requirements!

Next, we're scaling hacker skill levels! So far, we limited CTF Academy to hackers who completed the Blue Belt (Advanced Exploitation)...

Next, we're scaling hacker skill levels! So far, we limited CTF Academy to hackers who completed the Blue Belt (Advanced Exploitation) material on pwn.college, so that mentors would not be overloaded with introductory technical mentoring, saving mentoring capacity.

On the mentor side, we're scaling this out to more teams! If you're an established CTF team that is interested in taking a turn in...

On the mentor side, we're scaling this out to more teams! If you're an established CTF team that is interested in taking a turn in the mentor rotation, we'd love to have you on board! Check out more info and a sign up form here: https://docs.google.com/forms/d/1y2vRR7sMjKhWYqUhhx4_rSDoDylSTjl9FbszDDfeLKs/viewform

Today, we're growing the CTF Academy in three ways: more mentors, more skill levels, and more platforms! Read on for the full scoop, or...

Today, we're growing the CTF Academy in three ways: more mentors, more skill levels, and more platforms! Read on for the full scoop, or stay up to date on the new CTF Academy website: https://ctf.asu.edu/education/ace-ctf-academy/

@shellphish and @l3akctf have taken turns mentoring our team of budding hackers through CTFs, leading to flags, skills, confidence...

@shellphish and @l3akctf have taken turns mentoring our team of budding hackers through CTFs, leading to flags, skills, confidence development, and some great results! Last week, the CTF Academy team placed 21st in @DamCTF; a few weeks ago, 27th in boilers! Now it's time to grow.

Over the intervening months, this idea has solidified into a pilot project! This has largely been thanks to the awesome work of @X3eRo0, the...

Over the intervening months, this idea has solidified into a pilot project! This has largely been thanks to the awesome work of @X3eRo0, the Sensei of CTF Academy, and our mentor teams @shellphish and @l3akctf. The CTF Academy has been busy...

Back in July, ASU's ACE Institute launched the CTF Academy with the goal of bridging this gap through mentorship of top pwncollege...

Back in July, ASU's ACE Institute launched the CTF Academy with the goal of bridging this gap through mentorship of top pwncollege learners by established CTF teams and players through CTF competitions (en route to the real world)! That July announcement: https://defcon.social/@Zardus/112683824753698044

Capture the Flag contests aren't specifically meant to educate: challenges can involve learning, perfecting, or expanding skills, but...

Capture the Flag contests aren't specifically meant to educate: challenges can involve learning, perfecting, or expanding skills, but may or may not help the hacker with that process. This approachability gap between pwncollege and CTF/real security is something we often observe.

Of course, some of this just needs moar #pwncollege (example: we're building Brown Belt material around tackling the security of complex...

Of course, some of this just needs moar #pwncollege (example: we're building Brown Belt material around tackling the security of complex targets), but there's still a fundamental education-to-non-education phase shift that our hackers must overcome. Our interim solution? CTF!

It works! Those completing pwncollege and earning Blue Belts are sought-after, competent hackers. But they don't emerge omnipotent. Our...

It works! Those completing pwncollege and earning Blue Belts are sought-after, competent hackers. But they don't emerge omnipotent. Our material, while challenging, is designed to be solved and learned from. The real world isn't, leaving a gap that even blue belts must overcome.

We've since pushed into both basic concepts (e.g., how to use Linux https://pwn.college/linux-luminarium/) and very cutting-edge...

We've since pushed into both basic concepts (e.g., how to use Linux https://pwn.college/linux-luminarium/) and very cutting-edge techniques (sophisticated exploits, other platforms, etc), pushing toward a "zero to hero" model that aims to fully train top cybersecurity experts.

We made @pwncollege to increase the approachability of the hands-on cybersecurity skills that we LOVE (and that are critically needed in our...

We made @pwncollege to increase the approachability of the hands-on cybersecurity skills that we LOVE (and that are critically needed in our society). We initially conceptualized it as a "first step" for bright Computer Science students looking to dip a toe into Cybersecurity.

Hello hackers! Another @pwncollege semester ends, continuing @ASU's @ace_inst's never-ending quest to revolutionize the way hackers...

Hello hackers! Another @pwncollege semester ends, continuing @ASU's @ace_inst's never-ending quest to revolutionize the way hackers learn to become productive members of the cybersecurity community. Read on to learn what this means for students and Capture the Flag! 🧵

@defcon Quals process:Days 0-2: hackDay 3: party, sleep, (new:) reassure the kids I won't be gone next weekendDay 4: close hundreds of...

@defcon Quals process:

Days 0-2: hack
Day 3: party, sleep, (new:) reassure the kids I won't be gone next weekend
Day 4: close hundreds of tabs, terminals, IDA instances of chals. Terminate the angr script that never did finish before the CTF ended.
Finally, inner peace.

Oh! And I almost forgot: thank you to @nautilusinstitute for an awesome quals! Go get some well-deserved rest 🙂

Oh! And I almost forgot: thank you to @nautilusinstitute for an awesome quals! Go get some well-deserved rest 🙂