CTF101 Security Workshop - Introduction to Cybersecurity with GDG Algiers
Embarking on an exciting and knowledge-rich journey, I joined forces to lead a comprehensive CTF101 workshop in collaboration with GDG Algiers at the illustrious GDG School event. This workshop was designed to introduce newcomers to the fascinating world of cybersecurity!
Workshop Overview
Tailored for newcomers entering the dynamic tech scene, the workshop unfolded as a deep dive into the captivating realm of cybersecurity and Capture The Flag (CTF) competitions.
What is CTF?
We started by demystifying CTF competitions:
- Competition Format: Understanding different CTF styles (Jeopardy, Attack-Defense)
- Skill Development: How CTFs sharpen problem-solving and security skills
- Career Path: CTFs as a gateway to cybersecurity careers
- Community: The global CTF community and resources
Web Exploitation Deep Dive
Partnering with the knowledgeable Aniss Benstaali, our focus honed in on the intricacies of web exploitation, unraveling the mysteries of both server-side and client-side attacks.
Server-Side Attacks
- SQL Injection: Exploiting database vulnerabilities
- Command Injection: OS command execution
- Path Traversal: Accessing unauthorized files
- Server-Side Request Forgery (SSRF)
Client-Side Attacks
- Cross-Site Scripting (XSS): Injecting malicious scripts
- Cross-Site Request Forgery (CSRF)
- DOM-based vulnerabilities
- Client-side validation bypass
Hands-On CTF Challenges
Navigating through the cyber landscape, participants were not just passive observers but active explorers. The session culminated with:
PicoCTF Challenge Solving
- Live Demonstrations: Solving challenges in real-time
- Guided Practice: Step-by-step walkthroughs
- Flag Captures: Participants solving real CTF challenges
- Tool Usage: Introduction to essential security tools
The hands-on application provided valuable insights and instilled a sense of accomplishment among participants, igniting their passion for the fascinating art of cyber exploration.
Learning Outcomes
Participants gained:
- Understanding of common web vulnerabilities
- Practical experience with CTF platforms
- Knowledge of security tools and techniques
- Confidence to continue exploring cybersecurity
- Awareness of ethical hacking principles
Community & Collaboration
The engaging discussions, coupled with practical demonstrations, provided an immersive learning experience. The collaborative problem-solving approach fostered a strong sense of community among aspiring cybersecurity enthusiasts.
Event Details:
- Place: GDG Algiers - ESI
- Date: December 15, 2023
- Event: GDG School
- Partner: Aniss Benstaali
- Attendees: 40+ participants
- Platform: PicoCTF
A heartfelt thank you to GDG Algiers for this enriching opportunity and for orchestrating the seamless GDG School event. I eagerly anticipate future journeys into the evolving world of cybersecurity!