- Ama-CTF ayizindawo zokufunda ezisebenzayo lapho izinselele zobuchwepheshe zixazululwa khona ukuze kutholakale amafulegi.
- Indlela ekahle iqala kumapulatifomu aqondiswayo njenge-TryHackMe futhi iguqukela ezindaweni eziyinkimbinkimbi njenge-Hack The Box.
- Kubalulekile ukwazi kahle izigaba ezibalulekile ezifana nokuphepha kwewebhu, i-Cryptography, i-Forensics, kanye ne-OSINT.
- Ukuba nelebhu yendawo esekelwe kumishini yeKali Linux neVulnHub kuthuthukisa ukufunda okuzenzakalelayo.
Uma unesifiso sokwazi ngomhlaba wobugebengu bokugebenga ngokwezimiso kodwa ungazi ukuthi uzoqala kuphi, cishe uzizwa ukhungathekile yiwo wonke amathuluzi namagama angajwayelekile. Iqiniso liwukuthi, akudingeki ube yi-computer ukuze uthathe izinyathelo zokuqala; okudingayo nje... Ukuzimisela ukushintshashintsha kanye nokubekezela okukhulu ukuze ungalilahli ithawula lapho inselele iba nzima.
Kulabo bethu abaqala phansi, imidlalo ye-CTF noma i-Capture the Flag isibe yindlela ethandwayo. Ngokuyisisekelo, yimidlalo lapho kufanele wenze khona thola amakhodi ayimfihlo abizwa ngokuthi amafulegi Ukuxazulula amaphazili obuchwepheshe kuyindlela ejabulisa kakhulu yokufunda ngoba usuka kumqondo oyisicefe uye esenzweni esimsulwa, okukuvumela ukuthi... ukwenza amaphutha ezindaweni eziphephile ngaphandle kokwesaba ukuphula noma yini ebalulekile noma ukuphetha ngezinkinga zomthetho.
Iyini ngempela i-CTF?
I-CTF empeleni iwumncintiswano wokuphepha kwe-inthanethi. Cabanga nje njengokuzingela kwedijithali lapho umgomo ukhona ukuxhaphaza ubuthakathaka ukufinyelela ifayela noma ucezu oluthile lwedatha (ifulegi). Lezi zinselele zivame ukunikeza amaphuzu ngokusekelwe ebunzimeni bazo noma ukuthi uzixazulula ngokushesha kangakanani. Kunezinhlobo eziningana eziyinhloko:
- Ingozi: Lena ifomethi evame kakhulu kubaqalayo. Unohlu lwezinselelo ezigabeni ezahlukene futhi uqoqa amaphuzu njengoba uziqeda.
- Ukuzivikela Kokuhlasela: Izinto ziba zimbi lapha. Kufanele uvikele iseva yakho ngenkathi uzama... ukungena ngokunyenya kwabanye abantuKuyi-adrenaline emsulwa kanye nesu.
- Okuxutshiwe: Inhlanganisela yemidlalo yempi, izinselele zehadiwe kanye nezinye izindlela ezimangalisayo.
Izigaba eziyisisekelo okumele uzazi kahle
Ukuze ugweme ukungena ungaboni, kubalulekile ukuqonda ukuthi inselelo ngayinye ikucelani. Ukugenca kuyizwe elikhulu, yingakho lihlukaniswe ngezigaba ezikhethekile:
- Ukuphepha Kwewebhu: Ugxila ekuhlulekeni kwezinhlelo zokusebenza, njengokuhluleka I-SQL injection noma i-XSSYilapho-ke lapho kunezinto eziningi kakhulu ongaqala khona.
- I-Cryptography: Umdlalo lapha uwukuchaza imiyalezo efihliwe usebenzisa ama-algorithms noma Ukwephula ukusetshenziswa okubuthakathaka ukubethela.
- Ukuhlolwa Kwezezimali Kwedijithali: Okuqukethe yenza ukuhlaziywa kwe-forensic ezinhlelweni ukuhlaziya izinsalela zedatha, njengokuthi ukubanjwa kwethrafikhi yenethiwekhi (.pcap) noma ama-dump e-RAM ukuze kwakhiwe kabusha ukuhlaselwa.
- Ubunjiniyela Obubuyela Emuva: Lokhu kuhilela ukuhlaziya ifayela elisebenzisekayo (i-.exe noma i-.apk) ukuze kuqondwe ukuthi lisebenza kanjani ngaphakathi kanye khipha ifulegi ku-binary.
- Ukuxhashazwa (Pwn): Umgomo ukudala i-exploit yangokwezifiso ukuze kulawulwe uhlelo, kudlalwa kakhulu nge- ukuphathwa kwememori kanye ne-stack.
- I-OSINT: Kungubuciko bokucwaninga usebenzisa imithombo evulekile. Ngokuyisisekelo, ukwazi ukusesha ku-Google, ezinkundleni zokuxhumana, kanye nasezinkundleni zokuxhumana ukuze thola ulwazi lomphakathi kodwa kufihliwe.
- I-Steganography: Inselele ukuthola idatha efihliwe ngaphakathi kwamanye amafayela, njengombhalo ofihliwe esithombeni.
Amapulatifomu anconyiwe asekelwe ezingeni lakho
Akuwona wonke ama-lab afanayo. Uma ungena emshinini othuthukisiwe ngosuku lwakho lokuqala, uzokhungatheka. Yingakho kungcono ukulandela... indlela yokufunda eqhubekayo.
Kulabo abangazi lutho (Abaqalayo)
Uma uku-kilometer zero, khetha amapulatifomu aqondiswayo. ZamaHackMe Kuyigugu elibalulekile ngoba kukuhola ezindleleni zemfundo. Unayo futhi i-picoCTF, eklanyelwe ngqo abafundi, futhi I-OverTheWire (ikakhulukazi inselele ye-Bandit)okuyinto enhle kakhulu yokufunda ukuthi ungayisebenzisa kanjani i-terminal ye-Linux ngaphandle kokulahlekelwa yithemba.
Ukukhuphula izinga (Okuphakathi)
Uma usuzizwa ukhululekile nge-console, sekuyisikhathi sokuyizama. Hack Ibhokisiokuyindinganiso yemboni futhi enikeza izindawo ezingokoqobo kakhulu. Enye inketho enhle kakhulu Umsuka-Minaenamakhulu ezinselele zamahhala ezahlukahlukene kakhulu, noma I-PortSwigger Academy, okuyiBhayibheli lamahhala lokufunda ukugenca iwebhu njengoba bengabadali beBurp Suite.
Izindawo zasendaweni kanye nemishini esengozini
Ngezinye izikhathi kungcono ukuba nelabhorethri ekhaya. I-VulnHub Ikuvumela ukuthi ulande imishini ebonakalayo (.ova) ukuze isebenze ku-VirtualBox. Ngaphakathi kwale nqubo, okulandelayo kuyagqama: Ukuhlukunyezwa (ilungele ukuzijwayeza neMetasploit), Isitolo Sejusi se-OWASP (isitolo esiku-inthanethi esigcwele imigodi) kanye I-DVWAokuyinto enhle ngoba ikuvumela ukuthi ulungise izinga lobunzima bezinselelo.
Izinsiza ezinamandla ngesiSpanishi
Uma isiNgisi siyinselele kuwe, sinomphakathi omangalisayo wamaHispanic. I-Hack4u (kusukela ku-S4vitar) Cishe iyinsiza ebanzi kakhulu olimini lwethu, enokuqeqeshwa kwezinga le-OSCP. Kulabo abathanda into elula, Ama-Docker Labs Inikeza imishini efakwe emakhonteyini engamiswa ngomzuzwana. Kukhona nemiphakathi efana I-Vulnyx noma i-TheHackerLabs ababelana ngemibhalo nezinselelo ngesiSpanishi ukuze ungazizwa ulahlekile.
Indlela yokusetha ilabhorethri yakho yokugenca
Ukuze uzijwayeze ngaphandle kokuphula ikhompyutha yakho, into engcono kakhulu ongayenza ukusebenzisa ukwenza izinto zibe ngokoqobo noma izitshaUzodinga okungenani i-RAM engu-8 GB (yize i-16 GB ingcono kakhulu) kanye nesofthiwe efana ne-VMware noma i-VirtualBox. Ukusatshalaliswa okujwayelekile yi- I-Kali Linuxokuhambisana nawo wonke amathuluzi asevele efakiwe. Uma ufuna into yesimanje futhi esheshayo, funda ukuthi isetshenziswa kanjani Docker ukwakha izinsizakalo ezisengozini ngaphandle kokusebenzisa izinsiza eziningi kangaka.
Indlela yokuxazulula izinselele ngaphandle kokuyeka
Imfihlo yabaduni abahle kakhulu akukhona ukwazi konke, kodwa ukwazi ukusesha. Umsebenzi ngokuvamile: funda isitatimende senkinga ngokucophelela, yenza ukuhlola okuphelele nge-NmapYakha umbono mayelana nokwehluleka bese uwuhlola. Uma ubhajwa, ungakhathazeki; thola ukubhala phansi (isixazululo sichaziwe)Kodwa ungakopishi. Hlaziya ukucabanga kombhali bese uzama ukukuphinda ngokwakho ukuze ulwazi lunamathele.
Ukuqala ukuphepha kwe-inthanethi kudinga ukuhlanganisa ilukuluku nokuzijwayeza okuqhubekayo kumalebhu afana ne-TryHackMe noma i-Hack The Box, kusetshenziswa umphakathi wamaHispanic namathuluzi afana ne-Kali Linux. Ngokwazi izigaba ezahlukahlukene, kusukela ekuphepheni kwewebhu kuya kubunjiniyela obubuyela emuva, kanye nokubhala phansi isinyathelo ngasinye ngokuya phambili ngokubhala, noma yimuphi umuntu oqalayo angaguqula ilukuluku lakhe libe umsebenzi oqinile nofunwa kakhulu.
