WashU CSE433R Resources
18 Jan 2023
This post contains a list of computer security resources from Dr. Stephen V. Cole at Washington University in St. Louis. Other resources can also be found at WUSTL B34R5HELL team’s GitHub repo.
CTFs
Available anytime:
- Bandit wargame
- picoCTF
- b34r5hell mini CTF
- pwnable.kr
- pwnable.tw
- microcorruption (binary exploitation)
- HackTheBox
- TryHackMe (many free rooms, some subscriber-only)
- Google Gruyere (web security)
- SQL Zoo (SQL learning resources and guided SQL injection challenges)
- Ethernaut (Ethereum smart contracts)
- pwn.college (systems)
Festive seasonal CTFs / puzzles:
- SANS Holiday Hack Challenge / KringleCon 2022
- TryHackMe Advent of Cyber 2022
- Advent of Code (not security-specific but still worthwhile)
CTF tutorials:
- CTF 101 (introductions to many CTF categories)
Linux
Linux environment options:
Windows machine:
- Windows Subsystem for Linux (WSL2): Ubuntu recommended, with “Windows Terminal” app
- Cygwin, git bash, or similar terminal emulator
Any machine:
- Virtual machine hypervisor such as VirtualBox or UTM (M1-and-later Macs) with a Linux image installed (e.g., Kali Linux, Ubuntu)
- WUSTL Linux Lab virtual desktop: https://linuxlab.seas.wustl.edu/equeue/
- AWS instance running Kali Linux or Ubuntu AMI (if you have an account and Free Tier access)
Linux command-line practices:
- Linux Survival interactive tutorial (basic command-line fluency)