Zero Trust Hackers . Cyber Security . Hacking Resources . Bug Bounty . Hacks
2.28K subscribers
109 photos
1 video
2 files
158 links
Zero Trust Hackers . Cyber Security . Hacking Resources . Bug Bounty . Hacks
Download Telegram
๐Ÿ”ฐ Google Dork Method โœจ COMPLEX DORKS โœจ HQ Dork Guide ๐Ÿ”ฐ

What you learn today:

What is a Google Dork?
How to find keywords
How to write Google Dorks

What is a Google Dork?

The dorks you will learn how to make today are what programmers, web designers and pen-testers call Google Dorks, Sometimes people can also call these Complex or Deluxe dorks.

The reason why you would want Google Dorks is to abuse the Google search engine to find vulnerable websites, typically prone to SQLi Attacks.

Example of a Normal Dorks:

nulled.php?site=
nulled.php?num=buy
nulled.php?avd=paypal

Example of a Google Dorks:

Inurl: "" + ".to"
allinurl: "nulled" + "nodebt"
related: "cracking" + "nulled"

The reason Google Dorks are so much better is due to how site specific they can be, whereas if you generated a list you will most likely get lots of useless foreign websites.

How to find keywords?

Most average/newbie website pen-testers will use random keywords which come to there mind please don't do this.

Getting Started:

Find a website in the niche you want to crack
Look around the website for keywords these can be in the URL and maybe even in text!
Once you have 250 keywords save them in a notepad++ document
For this tutorial I will be finding gaming keywords.

Keywords I found:

steampowered
call of duty
grand theft auto
top 50 games
new games

note: don't use these keywords, It took me 30 seconds to find them they will be bad...

How to write a Google Dork:

What the start of google dorks mean:

intitle: which finds strings in the title of a page

allintext: which finds all terms in the title of a page

inurl: which finds strings in the URL of a page

site: which restricts a search to a particular site or domain

filetype: which finds specific types of files (doc, pdf, mp3 etc) based on file extension

link: which searches for all links to a site or URL

So now you know the basic dork examples you want to turn your keywords into dorks, make sure the actually make sense because if you have something like link:top 50 games it just wont work...

Examples of Dorks from my keywords:

allinurl: "steam" + "grand theft auto"
allinurl: "steam" + "call of duty"
Inurl: steampowered
inurl: "top 50 games"
inurl: "new games"
You can use the same keyword as many times as you think it will work, so your list of 250 keywords could become 500 quite easily!

Reverse Engineering Resources: https://t.me/zerotrusthackers/49

Top Hacker Tools: https://t.me/zerotrusthackers/47

Learn Ethical Hacking: https://t.me/zerotrusthackers/31

ENJOY LEARNING โค๏ธ

More Resources Here๐Ÿ‘‡
https://whatsapp.com/channel/0029VaxVv551iUxRku094918
โค1
๐Ÿ”ฐAwesome Repositories๐Ÿ”ฐ

Android Security (https://github.com/ashishb/android-security-awesome)
Collection of Android security related resources

AppSec (https://github.com/paragonie/awesome-appsec)
Resources for learning about application security

Asset Discovery (https://github.com/redhuntlabs/Awesome-Asset-Discovery)
List of resources which help during asset discovery phase of a security assessment engagement

Bug Bounty (https://github.com/djadmin/awesome-bug-bounty)
List of Bug Bounty Programs and write-ups from the Bug Bounty hunters

Capsulecorp Pentest (https://github.com/r3dy/capsulecorp-pentest)
Vagrant+Ansible virtual network penetration testing lab. Companion to "The Art of Network Penetration Testing" by Royce Davis

CTF (https://github.com/apsdehal/awesome-ctf)
List of CTF frameworks, libraries, resources and softwares

Zero Trust Hackers
https://t.me/zerotrusthackers

Cyber Skills (https://github.com/joe-shenouda/awesome-cyber-skills)
Curated list of hacking environments where you can train your cyber skills legally and safely

DevSecOps (https://github.com/devsecops/awesome-devsecops)
List of awesome DevSecOps tools with the help from community experiments and contributions

Embedded and IoT Security (https://github.com/fkie-cad/awesome-embedded-and-iot-security)
A curated list of awesome resources about embedded and IoT security

Exploit Development (https://github.com/FabioBaroni/awesome-exploit-development)
Resources for learning about Exploit Development

Fuzzing (https://github.com/secfigo/Awesome-Fuzzing)
List of fuzzing resources for learning Fuzzing and initial phases of Exploit Development like root cause analysis

Hacking (https://github.com/carpedm20/awesome-hacking)
List of awesome Hacking tutorials, tools and resources

Hacking Resources (https://github.com/vitalysim/Awesome-Hacking-Resources)
Collection of hacking / penetration testing resources to make you better!

Honeypots (https://github.com/paralax/awesome-honeypots)
List of honeypot resources

Incident Response (https://github.com/meirwah/awesome-incident-response)
List of tools for incident response

Industrial Control System Security (https://github.com/hslatman/awesome-industrial-control-system-security)
List of resources related to Industrial Control System (ICS) security

InfoSec (https://github.com/onlurking/awesome-infosec)
List of awesome infosec courses and training resources

IoT Hacks (https://github.com/nebgnahz/awesome-iot-hacks)
Collection of Hacks in IoT Space

Mainframe Hacking (https://github.com/samanL33T/Awesome-Mainframe-Hacking)
List of Awesome Mainframe Hacking/Pentesting Resources

Malware Analysis (https://github.com/rshipp/awesome-malware-analysis)
List of awesome malware analysis tools and resources

OSINT (https://github.com/jivoi/awesome-osint)
List of amazingly awesome Open Source Intelligence (OSINT) tools and resources

Cyber Security & Ethical Hacking Courses๐Ÿ‘‡
https://t.me/zerotrusthackers/41

Top Hackers Tools๐Ÿ‘‡
https://t.me/zerotrusthackers/47

More Resources Here
https://whatsapp.com/channel/0029VaxVv551iUxRku094918
โค1
๐…๐‘๐„๐„ ๐‚๐ž๐ซ๐ญ๐ข๐Ÿ๐ข๐œ๐š๐ญ๐ข๐จ๐ง ๐‚๐จ๐ฎ๐ซ๐ฌ๐ž๐ฌ ๐“๐จ ๐๐ž๐œ๐จ๐ฆ๐ž ๐’๐ค๐ข๐ฅ๐ฅ๐ž๐ ๐—œ๐—ป ๐Ÿ๐ŸŽ๐Ÿ๐Ÿ“

Free lifetime access โ€“ Learn anytime, anywhere

Get Completion Certificate

๐‹๐ข๐ง๐ค๐Ÿ‘‡:- 

http://bit.ly/3RdeYTh

Enroll For FREE & Get Certified๐ŸŽ“
๐—–๐—œ๐—ฆ๐—–๐—ข ๐—™๐—ฅ๐—˜๐—˜ ๐—–๐—ฒ๐—ฟ๐˜๐—ถ๐—ณ๐—ถ๐—ฐ๐—ฎ๐˜๐—ถ๐—ผ๐—ป ๐—–๐—ผ๐˜‚๐—ฟ๐˜€๐—ฒ๐˜€

- Data Analytics
- Data Science 
- Python
- Javascript
- Cybersecurity
 
๐‹๐ข๐ง๐ค ๐Ÿ‘‡:- 

https://bit.ly/4i9Kc9Z

Enroll For FREE & Get Certified๐ŸŽ“
โค1๐Ÿ‘1
๐Ÿ”ฐ BEST OPEN SOURCE SQL INJECTION TOOLS ๐Ÿ”ฐ

1 SQLMap (https://github.com/sqlmapproject/sqlmap) โ€“ Automatic SQL Injection And Database Takeover Tool

2 jSQL Injection (https://github.com/ron190/jsql-injection) โ€“ Java Tool For Automatic SQL Database Injection

3 BBQSQL (https://github.com/Neohapsis/bbqsql) โ€“ A Blind SQL-Injection Exploitation Tool

4 NoSQLMap (https://github.com/codingo/NoSQLMap) โ€“ Automated NoSQL Database Pwnage

5 Whitewidow (https://kalilinuxtutorials.com/whitewidow/) โ€“ SQL Vulnerability Scanner

6 DSSS (https://github.com/stamparm/DSSS) โ€“ Damn Small SQLi Scanner

7 explo (https://github.com/dtag-dev-sec/explo) โ€“ Human And Machine Readable Web Vulnerability Testing Format

8 Blind-Sql-Bitshifting (https://github.com/awnumar/blind-sql-bitshifting) โ€“ Blind SQL-Injection via Bitshifting

9 Leviathan (https://github.com/leviathan-framework/leviathan) โ€“ Wide Range Mass Audit Toolkit

10 Blisqy (https://github.com/JohnTroony/Blisqy) โ€“ Exploit Time-based blind-SQL-injection in HTTP-Headers (MySQL/MariaDB)

Reverse Engineering Resources: https://t.me/zerotrusthackers/49

Active Directory Pentesting With Kali Linux: https://t.me/zerotrusthackers/53

Awesome Repositories: https://t.me/zerotrusthackers/55

More Resources Here
https://whatsapp.com/channel/0029VaxVv551iUxRku094918
๐Ÿ”ฐ Cryptography Tools ๐Ÿ”ฐ

xortool (https://github.com/hellman/xortool) - A tool to analyze multi-byte XOR cipher
John the Ripper (http://www.openwall.com/john/) - A fast password cracker
Aircrack (http://www.aircrack-ng.org/) - Aircrack is 802.11 WEP and WPA-PSK keys cracking program.
Ciphey (https://github.com/ciphey/ciphey) - Automated decryption tool using artificial intelligence & natural language processing.

Top Hacker Tools: https://t.me/zerotrusthackers/47

SQL Injection Tools: https://t.me/zerotrusthackers/58

WhatsApp Channel๐Ÿ‘‡
https://whatsapp.com/channel/0029VaxVv551iUxRku094918
๐Ÿ”ฐ4 Ways To Be Anonymous Online ๐Ÿ”ฐ

Want to be anonymous online to view blocked websites, protect your self from hackers or want to hack some one and stay un-traced?. In the following post i will explain 4 easy ways by which you can stay anonymous online! ---------------------------------

1. Using Proxies
A proxy is an address ( IP address ) of a Server (proxy server) that is placed between your computer and the Internet The advantage of a proxy is that your real IP address is Hidden so when you hack your giving the IP address of the proxy sever and not your real IP address Same way if your a normal Internet user the hacker won't get your real IP but the IP of the proxy server.You can use it to enter site or forum that you are IP is banned. To know more about proxies les me know above this post and I will post a full tutotial about it.

2. Using Tor
Tor-proxy is a free proxy-server service that Internet users can use to hide their IP address while surfing the Web. Tor (The Onion Router) is free software for enabling online anonymity. Tor directs Internet traffic through a free, worldwide volunteer network consisting of more than three thousand relays to conceal a user's location or usage from anyone. I have written a complete How to guide on how to use tor - just let me know if you need it

3. SSH Tunneling
SSH tunnel is an encrypted tunnel created through an SSH protocol connection. SSH tunnels may be used to tunnel unencrypted traffic over a network through an encrypted channel.In easy language,you can surf net without being monitored and even surf blocked sites too. To know more about SSH and SSH tunneling let me know if you would like to read: SSH tunneling guide.

4. Using VPN
Virtual Private Network. Basically itโ€™s a private network which lets users to connect to other users or remote sites using a public network usually internet. It uses โ€œvirtualโ€ connections routed through the Internet from the companyโ€™s private network to the remote site or employee instead of physical connections. In short, it is private network constructed within a public network infrastructure, such as the global Internet. The Biggest difference between proxy and VPN is everything in a VPN is encrypted which gives an additional layer of security.

Google Dorks for Information Gathering: https://t.me/zerotrusthackers/54

More Resources Here๐Ÿ‘‡
https://whatsapp.com/channel/0029VaxVv551iUxRku094918
โค1๐Ÿ‘1
I AM GASA Competition: Girls Accelerating Sustainable Action Competition 2025 (Win Up to $1 Million Prize)

- Type: Competition/Award
- Sponsor: I AM GASA
- Eligible Countries: All African countries
- Deadline: March 26, 2025

Benefits:

- 1st Place: $400
- 2nd Place: $300
- 3rd Place: $200
- 4th Place: $100
- 1:1 mentorship sessions
- Certificate

Apply here:
https://kenyatrends.co.ke/5uqo
๐Ÿ‘1
๐Ÿ”ฐ GRAPHIC DESIGN BOOT CAMP WITH PROJECTS ๐Ÿ”ฐ

๐ŸŒŽSize: 16.5 GB

Chapters:
1. Introduction
2. Getting comfortable with Photoshop
3. Photoshop - Creating a Composite Image
4. Illustrator
5. Logo Design
6. Magazine Ad Design
7. inDesign - Create an eBook
8. Create a custom Brochure
9. Create Custom Business Cards
10. Getting Online with Adobe Portfolio and Behance
11. Bonuses

๐Ÿ“ฅDownload Link:
https://mega.nz/folder/UrRSHY7Y#mo5Rg4-o76GuEHQO1oqkCw

๐Ÿ”— Or Buy on Udemy:
https://udemy.com/course/graphic-design-for-beginners

๐Ÿ“ขNo Copyright Infringement Intended, All The Credits & Rights Reserved to the Respected Actual Owner. We don't own this content.

โค๏ธโ€๐Ÿ”ฅ๐Ÿฒ
Telegram Channel:
https://t.me/zerotrusthackers

โค๏ธโ€๐Ÿ”ฅ๐Ÿฒ
WhatsApp Channel:
https://whatsapp.com/channel/0029VaxVv551iUxRku094918
๐Ÿ‘2
20th ๐Ÿ–ฅ March 2025 Free Udemy Coupons New Coupons Added
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
โœ… **Free Certificate upon Completion** ๐Ÿฅณ
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
#01 Build A Chat Application With Firebase, Flutter and Provider
https://techurl.in/ULaBx

#02 Java And C++ And PHP Crash Course All in One For Beginners
https://techurl.in/WcbgH

#03 Firebase Database : CRUD Android App Development(Hindi)
https://techurl.in/xWwMO

#04 Java Programming Masterclass - Beginner to Master
https://techurl.in/djrEU

#05 Flutter & Firebase Chat App: Master Flutter and Firebase
https://techurl.in/bgSxM

#06 Java Core in Practice with 120+ Exercises & Quizzes - 2025
https://techurl.in/RXnGr

#07 Flutter UI Bootcamp | Build Beautiful Apps using Flutter
https://techurl.in/kdgWH

#08 Java Network Programming - Mastering TCP/IP : CJNP+ JAVA+
https://techurl.in/zpbeb

#09 Flutter REST Movie App: Master Flutter REST API Development
https://techurl.in/vXsIh

#10 Java And C++ Complete Course for Java And C++ Beginners
https://techurl.in/siSAm

#11 Comprehensive Flutter Development Practice Test: Master Apps
https://techurl.in/NdoGH

#12 Java Programming - Master Java Basics
https://techurl.in/ZCJbF

โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
**Udemy Coupons Expire After 1000 Redemptions**
https://tinyurl.com/udemycouponsfree
**So Please Join Our Telegram Or WhatsApp Channel To Get An Instant Alert For Coupons.**
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
**Join Our WhatsApp Channel:**
https://whatsapp.com/channel/0029VahGttK5a24AXAJDjm2R
Join Our Telegram Channel:
https://t.me/udemycoursecouponsfree
โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”
**Do share in your groups.โœจ**
โค1๐Ÿ‘1
๐Ÿ”ฐCybersecurity Strategy Development and Implementation๐Ÿ”ฐ

๐ŸŒŽSize: 441.6 MB

Language : English

๐Ÿ“ฅDownload Link:
https://mega.nz/file/PqQzCKgQ#1ZijiXaDXEtMYXxCDzl2ccubQwuNO89D6B_3J06owRM

๐Ÿ”— Or Buy on Udemy:
udemy.com/course/cybersecurity-strategy-development-and-implementation/

๐Ÿ“ขNo Copyright Infringement Intended, All The Credits & Rights Reserved to the Respected Actual Owner. We don't own this content.

โค๏ธโ€๐Ÿ”ฅ๐Ÿฒ
Telegram Channel:
https://t.me/zerotrusthackers

โค๏ธโ€๐Ÿ”ฅ๐Ÿฒ
WhatsApp Channel:
https://whatsapp.com/channel/0029VaxVv551iUxRku094918
๐Ÿ”’ Password Attacks

Crack passwords and create wordlists.

John the Ripper (https://github.com/magnumripper/JohnTheRipper)
C
Linux/Windows/macOS
John the Ripper is a fast password cracker.

hashcat (https://github.com/hashcat/hashcat)
C
Linux/Windows/macOS
World's fastest and most advanced password recovery utility.

Hydra (https://github.com/vanhauser-thc/thc-hydra)
C
Linux/Windows/macOS
Parallelized login cracker which supports numerous protocols to attack.

Zero Trust Hackers (https://t.me/zerotrusthackers)
Tg
Linux/Windows/macOS/Mobile
Shares with you daily resources in the Cyber Security EcoSystem.

ophcrack (https://gitlab.com/objectifsecurite/ophcrack)
C++
Linux/Windows/macOS
Windows password cracker based on rainbow tables.

Ncrack (https://github.com/nmap/ncrack)
C
Linux/Windows/macOS
High-speed network authentication cracking tool.

WGen (https://github.com/agusmakmun/Python-Wordlist-Generator)
Python
Linux/Windows/macOS
Create awesome wordlists with Python.

SSH Auditor (https://github.com/ncsa/ssh-auditor)
Go
Linux/macOS
The best way to scan for weak ssh passwords on your network.

Top Hacker Tools: https://t.me/zerotrusthackers/47

SQL Injection Tools: https://t.me/zerotrusthackers/58

Cryptography Tools: https://t.me/zerotrusthackers/59

More Resources Here
https://whatsapp.com/channel/0029VaxVv551iUxRku094918
โค1
๐Ÿ”ฐRed Team Course๐Ÿ”ฐ

๐ŸŒŽSize: 3GB

Language : English

๐Ÿ“ฅDownload Link:
https://mega.nz/file/HV1VVZAb#roL2c41CdGZcbKFkl0JCMiFE4SkqcFyFVgvMdkWktW8

๐Ÿ“ขNo Copyright Infringement Intended, All The Credits & Rights Reserved to the Respected Actual Owner. We don't own this content.

โค๏ธโ€๐Ÿ”ฅ๐Ÿฒ
Telegram Channel:
https://t.me/zerotrusthackers

โค๏ธโ€๐Ÿ”ฅ๐Ÿฒ
WhatsApp Channel:
https://whatsapp.com/channel/0029VaxVv551iUxRku094918
๐Ÿ”ฐ Some vocabulary ๐Ÿ”ฐ

* Infosec: Information security, which is the practice of preventing unauthorized access, use, disclosure, disruption, modification, inspection, recording or destruction of information. The information or data may take any form, e.g. electronic or physical. Infosec can also be a person who practices ethical security.

* Opsec: Operations security, which is a process that identifies critical information to determine if friendly actions can be observed by enemy intelligence, determines if information obtained by adversaries could be interpreted to be useful to them, and then executes selected measures that eliminate or reduce adversary exploitation of friendly critical information.

* Black/grey/white hat hacker: Someone who uses bugs or exploits to break into systems or applications. The goal and the method differs depending if they're a black, grey or white hat hacker. A black hat is just someone malicious that does not wait permission to break into a system or application. A white hat is usually a security researcher who practice ethical hacking. A grey hat is just in the middle of these two kind of hackers, they might want to be malicious if it can be benefit (data breach, money, whistleblowing ...).

* Red team: According to Wikipedia, a red team or the red team is an independent group that challenges an organization to improve its effectiveness by assuming an adversarial role or point of view. It is particularly effective in organizations with strong cultures and fixed ways of approaching problems. The United States intelligence community (military and civilian) has red teams that explore alternative futures and write articles as if they were foreign world leaders. Little formal doctrine or publications about Red Teaming in the military exist. In infosec exercises, Red teamers are playing the role of attackers.

* Blue team: A blue team is a group of individuals who perform an analysis of information systems to ensure security, identify security flaws, verify the effectiveness of each security measure, and to make certain all security measures will continue to be effective after implementation. As a result, blue teams were developed to design defensive measures against red team activities. In infosec exercises, Blue teamers are playing the role of defenders.

* Penetration tester: An ethical hacker who practices security, tests applications and systems to prevent intrusions or find vulnerabilities.

* Security researcher: Someone who practices pen testing and browses the web to find phishing/fake websites, infected servers, bugs or vulnerabilities. They can work for a company as a security consultant and are most likely a Blue teamer.

* Reverse engineering: Reverse engineering, also called back engineering, is the process by which a man-made object is deconstructed to reveal its designs, architecture, or to extract knowledge from the object. Similar to scientific research, the only difference being that scientific research is about a natural phenomenon.

* Social engineering: In the context of information security, it refers to psychological manipulation of people into performing actions or divulging confidential information. A type of confidence trick for the purpose of information gathering, fraud, or system access, it differs from a traditional "con" in that it is often one of many steps in a more complex fraud scheme. The term "social engineering" as an act of psychological manipulation of a human, is also associated with the social sciences, but its usage has caught on among computer and information security professionals.

* Threat analyst: A threat hunter, also called a cybersecurity threat analyst, is a security professional or managed service provider (MSP) that proactively uses manual or machine-assisted techniques to detect security incidents that may elude the grasp of automated systems.

* Google Dorks for Information Gathering: https://t.me/zerotrusthackers/54

* Password Salting: https://t.me/zerotrusthackers/50

* OTP Tokens: https://t.me/zerotrusthackers/42
๐Ÿ‘1
๐—œ๐—•๐—  ๐—™๐—ฅ๐—˜๐—˜ ๐—–๐—ฒ๐—ฟ๐˜๐—ถ๐—ณ๐—ถ๐—ฐ๐—ฎ๐˜๐—ถ๐—ผ๐—ป ๐—–๐—ผ๐˜‚๐—ฟ๐˜€๐—ฒ๐˜€ ๐Ÿš€๐Ÿ’ป

- AI Prompt Engineering
- Python for Data Science
- SQL Relational Database
- Data Science Fundamentals
- Introduction to Cloud
-  Machine Learning with Python
 
๐‹๐ข๐ง๐ค ๐Ÿ‘‡:- 

https://tinyurl.com/42nau8jx

Enroll For FREE & Get Certified๐ŸŽ“
๐Ÿ”ฐPentesters Practical Approach for Bug Hunting and Bug Bounty๐Ÿ”ฐ

๐ŸŒŽSize: 931.0 MB

Language : English

๐Ÿ“ฅDownload Link:
https://mega.nz/file/z35xAbSS#XewCWmw1OtN54dBiEwbcwqLtSABmt1lntXu1875KG_o

๐Ÿ”— Or Buy on Udemy:
https://www.udemy.com/course/pentesters-practical-approach-for-bug-hunting-and-bug-bounty/

๐Ÿ“ขNo Copyright Infringement Intended, All The Credits & Rights Reserved to the Respected Actual Owner. We don't own this content.

โค๏ธโ€๐Ÿ”ฅ๐Ÿฒ
Telegram Channel:
https://t.me/zerotrusthackers

โค๏ธโ€๐Ÿ”ฅ๐Ÿฒ
WhatsApp Channel:
https://whatsapp.com/channel/0029VaxVv551iUxRku094918
๐Ÿ‘1
๐Ÿ”ฐWhat is CTF? ๐Ÿ”ฐ

CTF (Capture The Flag) is a kind of information security competition that challenges contestants to solve a variety of tasks ranging from a scavenger hunt on wikipedia to basic programming exercises, to hacking your way into a server to steal data. In these challenges, the contestant is usually asked to find a specific piece of text that may be hidden on the server or behind a webpage. This goal is called the flag, hence the name! Like many competitions, the skill level for CTFs varies between the events. Some are targeted towards professionals with experience operating on cyber security teams. These typically offer a large cash reward and can be held at a specific physical location.

How to Solve CTF: https://t.me/zerotrusthackers/76
๐Ÿ‘3โค1
๐Ÿ”ฐ How to solve CTF ๐Ÿ”ฐ

CHALLENGE TYPES


Jeopardy style CTFs challenges are typically divided into categories. I'll try to briefly cover the common ones.

Cryptography - Typically involves decrypting or encrypting a piece of data

Steganography - Tasked with finding information hidden in files or images

Binary - Reverse engineering or exploiting a binary file

Web - Exploiting web pages to find the flag

Pwn - Exploiting a server to find the flag

WHERE DO I START?

If I managed to pique your curiosity, I've compiled a list of resources that helped me get started learning. CTF veterans, feel free to add your own resources in the comments below!

LEARNING

Telegram Channel: https://t.me/zerotrusthackers

http://ctfs.github.io/resources/ - Introduction to common CTF techniques such as cryptography, steganography, web exploits (Incomplete)

https://trailofbits.github.io/ctf/forensics/ - Tips and tricks relating to typical CTF challenges/scenarios

https://ctftime.org/writeups - Explanations of solutions to past CTF challenges

RESOURCES

https://ctftime.org - CTF event tracker

https://github.com/apsdehal/awesome-ctf - Comprehensive list of tools and further reading

TOOLS (That I use often)

binwalk - Analyze and extract files

burp suite - Feature packed web penetration testing framework

stegsolve - Pass various filters over images to look for hidden text

GDB - Binary debugger

The command line :)

PRACTICE

Many of the "official" CTFs hosted by universities and companies are time-limited competitions. There are many CTFs however that are online 24/7 that can be used as practice and learning tools. Here are some that I found to be friendly for beginners.

https://ctflearn.com - A collection of various user-submitted challenges aimed towards newcomers

https://overthewire.org/wargames/ - A series of progressively more difficult pwn-style challenges. (Start with the bandit series)

https://2018game.picoctf.com/ - Yearly time-limited CTF now available to use as practice

CTF is a great hobby for those interested in problem-solving and/or cyber security. The community is always welcoming and it can be a lot of fun tackling challenges with friends.
Thank you for reading!

Red Team Free Course: https://t.me/zerotrusthackers/68

Cyber Security Course for Beginners: https://udemy.com/course/certified-secure-netizen/

Google Dorks for Information Gathering: https://t.me/zerotrusthackers/54

Cyber Security Vocabulary: https://t.me/zerotrusthackers/71
๐Ÿ‘2
๐Ÿฏ ๐—™๐—ฅ๐—˜๐—˜ ๐—–๐—ผ๐˜‚๐—ฟ๐˜€๐—ฒ๐˜€ ๐—ฏ๐˜† ๐—š๐—ผ๐—ผ๐—ด๐—น๐—ฒ, ๐— ๐—ถ๐—ฐ๐—ฟ๐—ผ๐˜€๐—ผ๐—ณ๐˜ & ๐—Ÿ๐—ถ๐—ป๐—ธ๐—ฒ๐—ฑ๐—œ๐—ป ๐Ÿš€๐Ÿ’ป

Upskill with these amazing free courses from top platforms! ๐ŸŒŸ

1๏ธโƒฃ Generative AI by Google: Dive into AI fundamentals and applications.

2๏ธโƒฃ Training for DevOps Engineers: Master DevOps tools and practices with Microsoft.

3๏ธโƒฃ Career Essentials in Data Analysis: Build data analysis skills with Microsoft & LinkedIn.

๐‹๐ข๐ง๐ค ๐Ÿ‘‡:-

https://tinyurl.com/3w3xu4sh

Donโ€™t miss this opportunity to elevate your expertise. ๐ŸŽ“