0x600DF00D
Coach Ambassador 0x600DF00D knows you want your students to succeed in NCL! He explains when and how Coaches may offer assistance, and shares his top tools and hints, by domain, to impart upon your charges before the Games begin (because during would be cheating!).
Category: NCL-Web Application Exploitation
Thou Shall Pass! I Am a Coach. How Do I Help My Students Succeed?
0x600DF00D
New NCL Coaches: Read for a gentle introduction.
Seasoned Coaches: Read for a new take on how to help your students succeed.
0x600DF00D breaks down how to coach, what to coach, and ways to incorporate NCL into the classroom, all while honoring the Rules of Conduct.
Low-tech Tooling: Competing From a Device You Can’t Install Tools On
Taisa
Taisa played her first season of NCL entirely from a browser-only device and shares her top resources and tricks for competing in less-than-ideal circumstances. Even if you've got Kali running as a VM, low-tech and browser-based tools can be a great way to check your work, troubleshoot your process, or collaborate with teammates in the cloud.
What is HTTP Request Smuggling and Why Do I Care?
WebWitch
WebWitch examines the reemergence of HTTP Request Smuggling as an allegory for the dangers of making assumptions about older programs and protocols when the cybersecurity landscape is constantly shifting. Their perspective on research topics in cybersecurity (and the Oxford comma) will help you start thinking like a seasoned professional.
NCL and WSL: Leaving the Kali VM Behind
Aaron James
Working in a virtual machine is a sub-optimal experience. What if we told you there's a way to run the Kali Linux terminal natively inside of Windows? Aaron James demonstrates how to install and compete using command-line tools on Windows Subsystem for Linux—no clunky VM required!
Summer Camp 2020: Web Application Exploitation
Aaron James
Aaron James walks us through how he would solve the Summer Camp 2020 – Web Application Exploitation challenge: Black Mesa.
Advanced Tips on Web Application Hacking
Paul Buonopane
Are you experiencing a sort of cognitive dissonance where Hard challenges are becoming easier, and Easy challenges are becoming harder? Are attacks not working as expected? Considering giving up? Read this article by Paul Buonopane first.
Breaking Web Applications for Beginners
Paul Buonopane
Paul Buonopane and Hitchhiker's Guide to the Galaxy author Douglas Adams offer a brief history lesson explaining the existence of the NCL Web Application Exploitation domain before walking you through an exquisite attack plan. Thanks for all the phish, and mind the red herrings!
Top 10 Dos and Don’ts for the National Cyber League Games
CryptoKait
This special post represents the combined wisdom of all the NCL Player Ambassadors, the NCL Commissioner, and the Game-makers at Cyber Skyline. What single DO and DON'T would each insider advise for your success in the NCL Games?
PowerShell and Linux Command Line Resources We Love for the National Cyber League Games
John "Mako" McGill
Discover what's lurking beneath the surface of your operating system! Back with more shark analogies, Mako discusses how we can use the built-in scripting engines in Linux and Windows—Bash and Powershell—to automate and simplify (almost) everything in the NCL, broken down by domain.
You must be logged in to post a comment.