open-education-hub / essentials-security Goto Github PK

After feedback from the participants (and some internal discussions) a few things should be done regarding already existent sessions:

• split Explaining the Internet

• split Application Lifetime

• if we can't come up with challenges regarding the TCP/IP stack, remove the section entirely from Explaining the Internet

Add the following github actions:

• for linting new changes
• for checking the style of new contributions
• for publishing new changes to https://security-summer-school.github.io/essentials/

Add REVIEWING.md

Add LICENSE file.

Github.io renders a table of contents (TOC) on the sidebar of each page. This makes the TOCs embedded in the first sessions redundant. These TOCs are to be removed and we should rely on those provided by github.io.

Add CONTRIBUTING.md file.

Some challenges, especially those from the first 2 sessions have the students SSH into a container and run commands there. The reference solutions for those activities simply contain the commands that need to be run on the server and assume the fact that the student has already established an SSH connection.

This is incomplete because solutions should be able to get the flag when run on any machine. Thefore, the aforementioned solutions need to be updated to use sshpass to forward the required commands to the machines that host each challenge.

The Data Security session does not have proper challenges.
There may need to be a discussion about that, since it's not really clear if we should go for challenges based on typical cryptographic attacks, just entry level decryption of strings, or maybe more complicated multi-encryptions on a plaintext.

Since you have to generate a lot of available flags, you won't know which one is the correct one.