Red Teaming · Interactive Exercises

🎯

Red Team Fundamentals

3 questions

Red teams act as the adversary, using real attack techniques to probe an organisation's defences. Blue teams defend and respond. A CTF (Capture The Flag) challenges participants to use red-teaming technique to find a hidden text string, the "flag".

In cybersecurity, the Red Team's role is best described as:

1 mark

Defending the network from attacks

Acting as the adversary, using real attack techniques to find weaknesses

Writing security policy documents

Only performing paperwork audits

What is the correct order of the standard red-teaming attack chain given in the lecture?

2 marks

Privilege escalation → Initial access → C2 → Objective

ssh, scp, sftp

Objective → Initial access → Command & control

./configure, make, make install

What does CTF stand for in a cybersecurity competition context?

1 mark

Cyber Threat Forensics

Controlled Traffic Filtering

Critical Test Framework

Capture The Flag

Red Team Fundamentals score

0/4

🐧

Unix Fundamentals

10 questions

Unix/Linux is the operating system behind nearly every CTF target. File permissions, search/pattern commands, redirection and piping are the daily toolkit.

Which year and lab is credited with the original development of Unix?

1 mark

1969, Bell Labs

1991, University of Helsinki

1998, MIT

1977, Xerox PARC

File permission 0600 on a Unix file means:

1 mark

Everyone can read and write it

Only the owner has read + write access; no one else has any access

Only the owner can execute it

The file is world-readable but not writable

Which command searches for files or directories by name (or other criteria)?

1 mark

grep

find

cat

touch

Which command searches for a text pattern within file contents?

1 mark

find

mkdir

grep

In ifconfig >> output.txt, what does the >> operator do?

1 mark

Pipes output into another command

Searches a file for a pattern

Appends the command's output to a file

Compares two files

The | symbol in a Unix command connects:

1 mark

The stdout of one command to the stdin of another

Two files for comparison

A file to a printer

Two different users

Q10

Which command lets you securely remote-login to a CTF challenge server over the network?

1 mark

ssh

ftp

ping

telnet

Q11

Which package manager is associated with Debian-based Linux distributions?

1 mark

YUM

dpkg alone

Homebrew

APT

Q12

"On a UNIX system, everything is a file; if something is not a file, it is a ____."

1 mark

Folder

Kernel

Socket

Process

Q13

Which command shows currently running processes, useful for CTF process monitoring?

1 mark

ps aux

touch

Unix Fundamentals score

0/10

💻

Programming for CTF

3 questions

C and Python show up constantly in CTF challenges — C because reverse-engineering/binary-exploitation targets are usually written in it, Python because it's fast to prototype scripts and crackers in.

Q14

Why does the lecture say C is important for red teaming/CTF, even though it is an old language?

1 mark

Most reverse-engineering and binary-exploitation CTF challenges are written in C

It is the only language that runs on Unix

It has built-in encryption functions

It requires no compiler

Q15

C is a(n) ______ language, while Python is a(n) ______ language.

1 mark

interpreted; compiled

compiled; interpreted

both compiled

both interpreted

Q16

The classical cipher used in the "shift cipher" CTF programming example (implemented in both C and Python) is the:

1 mark

AES cipher

Vigenère cipher

RSA cipher

Caesar cipher

Programming for CTF score

0/3

🧰

Red-Teaming & CTF Tools

4 questions

A handful of purpose-built tools cover common CTF categories: cracking password-protected archives, scanning web servers, and more.

Q17

Which tool is described as "a fast password cracker… able to crack password protected zip files with brute force or dictionary-based attacks"?

1 mark

Nikto

Nmap

fcrackzip

Wireshark

Q18

In the fcrackzip example, what does the -u flag do?

1 mark

Sets the username

Enables Unicode passwords

Unzips the file to verify a guessed password is actually correct

Uploads the cracked result

Q19

Which tool is described as "a very light web penetration test tool… a pluggable web server and CGI scanner written in Perl"?

1 mark

fcrackzip

SSH

Nikto

grep

Q20

To install software from source code on Unix, the typical three-step sequence is:

1 mark

apt, yum, brew

ssh, scp, sftp

git clone, git pull, git push

./configure, make, make install

Red-Teaming & CTF Tools score

0/4

—

Complete all questions to see your final score