Week 9 — Midterm: Hands-on CTF Practical
← all weeks · ctf · slides
Week 9 — Midterm: Hands-on CTF Practical
Covers Weeks 1–6. Individual, in the sandbox. Flags = points.
✅ This week — what to do
- Before — VM + tools ready; warm up on the Week 7 mock CTF.
- In class — hands-on CTF (
ctf.md); submit flags for points (your flags are per-student). - Rules — sandbox targets only; individual.
Time breakdown: AGENDA.md.
Format
A timed capture-the-flag with graded challenges across:
- Injection (SQLi / command injection) — DVWA / Juice Shop.
- XSS (reflected/stored/DOM) — Juice Shop.
- Auth / access control (IDOR, weak JWT forgery).
- Cryptography (crack a weak hash / break an ECB oracle).
Each solved challenge yields a flag; partial credit for documented progress.