CTF and Red Team Flashcards

Table of Contents

1. CTF and Red Team Concepts

1.1. What does CTF stand for in cybersecurity?   drill ctf_redteam

1.1.1. Front

What does CTF stand for in cybersecurity?

1.1.2. Back

Capture The Flag

1.2. Define "Red Team" in cybersecurity context   drill ctf_redteam

1.2.1. Front

Define "Red Team" in cybersecurity context

1.2.2. Back

A group that plays the role of an adversary, attempting to find and exploit vulnerabilities in a system to test its security

1.3. What is the purpose of port scanning?   drill ctf_redteam

1.3.1. Front

What is the purpose of port scanning?

1.3.2. Back

To discover open ports and services running on a target system

1.4. Name a common tool used for network scanning   drill ctf_redteam

1.4.1. Front

Name a common tool used for network scanning

1.4.2. Back

Nmap (Network Mapper)

1.5. What is a "payload" in the context of exploitation?   drill ctf_redteam

1.5.1. Front

What is a "payload" in the context of exploitation?

1.5.2. Back

The actual code that gets executed on a target system after successful exploitation

1.6. Define "privilege escalation"   drill ctf_redteam

1.6.1. Front

Define "privilege escalation"

1.6.2. Back

The act of exploiting a vulnerability to gain higher-level access or permissions on a system

1.7. What is "social engineering" in cybersecurity?   drill ctf_redteam

1.7.1. Front

What is "social engineering" in cybersecurity?

1.7.2. Back

The psychological manipulation of people into performing actions or divulging confidential information

1.8. What does "OSINT" stand for?   drill ctf_redteam

1.8.1. Front

What does "OSINT" stand for?

1.8.2. Back

Open Source Intelligence

1.9. What is a "reverse shell"?   drill ctf_redteam

1.9.1. Front

What is a "reverse shell"?

1.9.2. Back

A type of shell in which the target machine initiates a connection back to the attacker's machine

1.10. Define "lateral movement" in the context of network penetration   drill ctf_redteam

1.10.1. Front

Define "lateral movement" in the context of network penetration

1.10.2. Back

The technique of moving through a network, searching for key assets or data by accessing other systems on the same network