Cybersecurity & ethical hacking ·
SASE, UM6P
Learn security by breaking things built to break.
SASE's student club for cybersecurity. Start from zero, practice in safe labs, and play real CTFs as a team.
01, Why we exist
We were already playing CTFs together, late at night, one flag at a time. It was the best way we had found to understand how systems really work, and there was nowhere at SASE to do it with others. Class gave us the theory. SSH3L1T3 is where we practice it.
A CTF (capture the flag) is a competition where every challenge hides a secret string called the flag. You find it by working out how the challenge breaks.
02, How we learn
you@sshelite:~$ learn | break | write | defend
01 Learn
One concept per session, explained from zero.
02 Break
Attack it in a lab built for that. Never a real system.
03 Write
Document how you did it in a writeup: a short report the next member can learn from.
04 Defend
Understand the fix. That is the point.
To defend a system, you have to know how it fails.
03, The path
Nine stops, from your first terminal command to your first CTF.
- 01
Launch
What cybersecurity is: offense, defense, purple team (both sides working together), and where each one leads. Ends with the joining CTF.
- 02
Linux
Get fast in the terminal: files, pipes, SSH keys, and the services behind a port.
- 03
Data & hashes
Encodings, compression, hashes, and how passwords are really stored.
- 04
Web
How a website really talks: requests, headers, cookies, hidden pages, and how to find them.
- 05
Wargame
A mini CTF we build ourselves to test everything so far. It closes trimester 1.
- 06
Networking
How machines expose services and how packets travel. Recon (mapping what a machine exposes) in labs only.
- 07
Crypto
XOR, classical ciphers, then RSA and the mistakes that break it.
- 08
Binary
Read assembly, reverse an unknown program, and take your first steps in pwn (exploiting bugs in how a program uses memory).
- 09
CTF
Put it all together in competition.
Climb from user to elite. Weekly challenges and CTF points earn your rank.
04, This page can see you
Every site you open can read this.
you@sshelite:~$ cat /proc/you
- browser
- …
- system
- …
- screen
- …
- window
- …
- time zone
- …
- local time
- …
- languages
- …
- cpu cores
- …
- memory
- …
- theme
- …
- touch
- …
- came from
- …
- on this page
- …
Your browser handed us all of this the moment the page loaded. Ours keeps it on your screen. Plenty of sites send it home.
05, This year
Targets, not results. Real numbers replace them as we get them.
Zero to CTF
Take members with no experience to playing real CTFs.
target At least half of the members who start at Launch are still active at the Wargame.
Compete as a team
Play public CTFs as SSH3L1T3 on CTFtime and climb the ranking.
target At least one public CTF before the end of the semester, and at least five member writeups published.
Run the 1v1 Arena
Our own competition: duels all semester and a bracket finale.
you@sshelite:~$ ./join.sh
You don't need to know anything yet.
Bring a laptop and some curiosity.