Security

Forwarding a message on behalf of the saarsec team. If you liked our MiniCTF, consider attending join them and their workshop!

 

Hello there,

we, the Capture-the-Flag Team saarsec, consisting of students and lecturers from Saarland University, are giving a workshop to familiarize students with Capture-the-Flag competitions as well as attacking and defending against security vulnerabilities. CTFs are a great way to actually fiddle around with the practical details of mounting attacks and defenses that were theoretically discussed during your studies. This practical experience can not only be beneficial for your studies but also come in handy during later stages of your career. The workshop starts with a short introduction to Linux, followed by different topics such as File Inclusions, SQL Injections, and Command Injections. For each topic, we will discuss how we can find these vulnerabilities, exploit them on a large scale, and how we can fix them. Then, for each each topic, you'll spend more than 50% of the time in each slot on actual challenges.

At the end, we will host a CTF for all workshop participants where they can use their newly acquired skills against each other.

 

FAQ:

Q: When and where?
A: April 10th and 11th, entirely virtually

Q: Requirements?
A: We do not require any certain skills as we will start with the basics. However, the knowledge from Cysec1 or Security is definitely an advantage.

Q: Sounds awesome! Where can I register or get more information?
A: https://workshop.saarsec.rocks

See you there,
saarsec

Dear students,

The exam inspection will take place today from 14:00-16:00 on Zoom (Zoom invite sent by email). Once you enter the Zoom room, you will be automatically placed in the waiting room. Please, remain in the waiting room and do not leave. We will allow to enter the room only one student per time for the inspection.

Best
Giancarlo and Nils

Dear students,

The exam inspection will take place on March 2, in the afternoon. To participate, you must register on the CMS by March 1. 

As we do not know how many of you will register, we cannot share the exact schedule at this very moment. Depending on the number, we may consider doing the exam inspection over Zoom. Latest on March 2 morning, we will share with you the exact plan.

 

Best,
Giancarlo

Dear students,
you can now register for the exams. The deadline for registration of the Final Exam is the 15.02. The option to take an oral exam is only possible with a valid reason and has to be communicated with a tutor/lecturer. The deadline for registration of the Final Re-Exam is the 04.03.
It is necessary to also register seperately in the examinations office (LSF/VIPA)

The miniCTF will take place from Monday 12pm to Friday 6pm. You can access the miniCTF platform here: https://minictf21.scy-phy.net/.
To solve challenges you will first need to create a personal account and then join your team. You can find your teamname and token on your Personal Status page. Once the CTF started, please verify that your challenge contains all information and files to be solvable but does not leak any unintended way of solving it.
Each challenge will yield 2 points that count towards your admission for the exam (except for the challenge your team submitted). You can reach a maximum of 10 points from solving challenges in the MiniCTF. (Solving your own challenge will not yield any points towards admission but yield an infinite amount of shame to your own team).
If any problems occur regarding the miniCTF (challenge not solvable, team not joinable, etc.) please contact your tutor, use the Discord channel or AskBot.

Dear students,

we hope you had a good start into 2021. We uploaded E4 to the Materials section, you will receive feedback to E3 in the upcoming days as always.

The first milestone is reached and everyone who wants to participate in the miniCTF should find their group and team mates on their Personal Status page. Please contact your tutor, if this is not the case.

To help you with the second milestone and discuss solutions of E3, we are going to hold 2 Q&A sessions:

• (13.01) Wednesday 11am - 1pm
• (14.01) Thursday 1pm - 3pm

You will find the link to join through Discord and the timetable in the cms.

Best,

Your tutors

Dear students,

we have a couple information regarding exercise sheets and the miniCTF.

First of all, feedback and gradings of E2 will be available soon on your personal page. E3 is already released and the deadline is January 10th. Tomorrow there will be a Q&A session from 2pm - 4pm.

As you know, the lecture includes a miniCTF. The CTF is performed in groups of 4 students. You can find a new option to form groups on your Personal Status page. The procedure is the same as for exercise groups however miniCTF groupings are independent of exercise groupings. Further information about the miniCTF is going to be available in the Material section.

On a side note: We are well aware that solutions from previous iterations are available. Please keep in mind that plagiarism may exclude you from exam participation.

Best,

Your tutors

Dear students,

the second exercise sheet has been released, you can find it in the Materials section as usual. We invite you to join a Q&A session in Discord on Thursday from 2pm to 4pm. This is intended to clarify solutions of E1.

Feedback and points for E1 will soon be available on your personal status page.

 

Best,

Your security tutors

We just released the first graded exercise sheet. The deadline is the 26th of November. In case you did not find a team partner yet, please feel free to use the Discord channel. (Team partners can be chosen independently of the assigned tutorial!)

We also finished the tutorial distribution, you can find your assigned tutorial in your "Personal Status" page.

We will start with the lectures in Security next Tuesday at 2pm (sharp) on Zoom, using the following link:

[See the Materials page]

Please make sure to have Zoom installed, and to join the call muted and without video. We will also record videos and upload them to Youtube, so that you can re-watch the lecture if required. Interaction with the lecturer will only be possible via Zoom. Please note that the exercise schedule etc. is currently copied from last year, and will be updated soon.

/edit: the link was updated, we are experimenting with the webinar feature on zoom