Friday, August 28, 2020

Blockchain Decentralized Application Hacking Course - A Journey Into Smart Contract Hacking And DApp Penetration Testing (Web 3.0)


Smart Contract Exploitation and Hacking Course Announcement


What Is this: 

For those who have been hitting me up on twitter and YouTube for more blockchain smart contract exploitation content this blog is for you. I have posted a video below explaining what this is and included a course outline of the content we are providing free for everyone. I was actually told recently that I am crazy for giving out this level of detailed content and training for free.. However, I believe in the original hacker ethic code from long ago, that information should be freely available for everyone!! In this frame of mind, the only pay for content will be if you wish to go the extra mile. For the person who wants to prove to themselves or others that they learned something via a certification package with detailed exam prep targets and guides, followed by a final exam CTF and reporting write-up. 

So I hope you enjoy this content. The content and walk through labs will be all free. This content will be posted regularly over the next few months 90% of it is already written and ready to go.

We will start off with the differences between Solidity and other languages and do a quick coding overview before we start hacking. This way everyone is on the same page when we start looking at coding examples of vulnerable targets or reviewing case study code. Then we will cover a wide range of typical issues that effect decentralized applications(DApps) and smart contracts on the Ethereum blockchain. How to spot them and exploit them with full walk-through style learning. Subjects we have already released (Re-Entrancy, Integer Attacks, Authorization) have been updated with new code, new examples, and case studies etc. Some of the learning content will be the same but with a lot of newly added content.  And in the case of Authorization completely re-written and expanded on. 

Basically this course was created to get the information out there in a clear concise way. Because when I started researching blockchain hacking all I found was a paragraph here and there on something that was overly technical or completely theoretical. I couldn't find any clear concise learning or examples. This drove me nuts trying to figure everything out, until I gave up and just coded my own vulnerabilities and hacked them. So hopefully this fills the knowledge gap to offer a clear and concise, Zero Fluff resource to those on the same path. 


CTF Exam: 

If you do enjoy this series over the next few months and want to challenge your skills and certify that you learned something we will be also offering pay for certification bundle that includes Decentralized Application (DApp) targets and detailed lab guides as preparation for a final exam against a more comprehensive CTF certification challenge target. More info on this as the months progress. 


Bug Bounty of Sorts: 

These labs are completed but we are working on a way to deliver the content which requires me to code up a course delivery software. So feel free to hack the course delivery software once its up, if you break in or bypass authorizations I will give you the full course for free provided you help me fix it. :P 


Pre- Requisites: 

This is more of a intermediate / advanced course with a white box code approach to bug hunting and a dynamic approach to application hacking and exploiting targets, with that said you will need the following pre-requisites: 

  • Ability to code in some language and understanding of coding concepts. 
  • Application hacking or development background with firm understanding of vulnerabilities


Contact Info:

As this is free, I only ask that you provide constructive feedback as we are creating other more advanced hacking courses on random subjects we are interested in. Most of which will be free.  And feedback helps us not do things which are not useful and integrate new ideas where they make sense.

Cheers and I hope this finds you well.

Twitter: 

Email: 

  • info@cclabs.io

WebPage:  


Intro Video: 



Course Outline / Release Order: 

Orange = = Whats included additionally for the full course

Blue = = What will be released free in blogs / videos 

(Mostly every Mondays) over the next few months


Building and Scoping Things

    Chapter 1: Cliff Notes on Blockchain

        Intro:

        What is a Blockchain and how is it secured

        Smart Contracts

        What is a Decentralized Application (DApp)?

        Diving into Blockchain Components:

        Distributed Vs Decentralized

        Provenance Use Case:

        Consensus and Mining:

            Hands on Lab - Blockchain Consensus walkthrough Lab

        Summary:

        References:


    Chapter 2: Threat Modeling and Scoping Engagements

        Architecture Considerations:

        Business Logic Locations and Technology Decisions

        Development Environments

        Threat Modeling

        Summary

        References:


    Chapter 3 – Solidity for Penetration Testers Part 1 (Hello World)

        About Solidity

            Hands on Lab - Remix interface overview

        Structure of a Smart Contract

            Hands on Lab – HelloWorld

        Summary

        References:


    Chapter 4 – Solidity for Penetration Testers Part 2

        Beyond Hello World

            Hands on Lab – Code HelloWorld bank

        Code Level Walk Through of HelloWorld Bank

        Checks Effects Interactions:

        Summary


Part 2: Hacking and Exploiting Things

    Chapter 5 - Glass Half Full or Glass Half Empty: Integer Attacks

        Underflows and Overflows

        Withdraw Function Vulnerable to an underflow

        Transfer Function Vulnerable to a Batch Overflow

        Batch Overflow Code Explanation:

            ERC20 Batch Overflow Case-Study

            Walkthrough of The Vulnerable Function

            Reviewing the Real Attack Transaction

            Hands on Lab - Exploiting Our Own ERC20 Batch Overflow

            Hands on Lab - Fixing the ERC20 Overflow

            Exam Prep - DApp Target + Detailed Lab Guide

            Hands on Lab -Safe Math Walk Through

        Integer Attacks Summary

        Integer Attacks References

          

    Chapter 6 - You Again: Leveraging Reentrancy Attacks

        Reentrancy Intro

        Checks Effects Interactions Pattern

        Simple Reentrancy Example Code

        Passing the Checks:

        Looping the Interaction:

        Updating the Effects:

        Attacking Code Example:

            Hands on Lab - Attacking a Simple Reentrancy

            Hands on Lab - Fixing the Checks Effects interaction Pattern

        Send vs Transfer Vs Call.Value

            Case Study – The Dao Hack

            Exam Prep - DApp Target + Detailed Lab Guide

        Reentrancy Summary

        Reentrancy References


    Chapter 7 Do You Have a Hall Pass: Access Control Attacks

        Understanding Smart Contract Authorization and Visibility

        Visibility:

        Simple Visibility Example:

        Implementing Authorization:

        Example Walk-through of No Authorization

        Thinking about Smart Contracts as unpublished API's for DApps

            Case of the Video Game Heist

        Enumerating functions in a contract

            Hands on Lab - Directly Calling Public Functions with Web3

            Hands on Lab - Example Fix with Simple Authorization

        Exit Scam Warning

            Hands on Lab - Example Fix-2 Using Modifiers for Simple Authentication

            Hands on Lab - Example Using Openzeppelin for Role Based Access Control

            Exam Prep - DApp Target + Detailed Lab Guide

        Authorization Summary:

        Authorization References


    Chapter 8 - Dude Where's My Data: Storage Vs Memory Attacks

       Intro - Not Written Yet – Up Next

       Code Example -  Not Written Yet – Up Next

       Case study? - Not Written Yet – Up Next

       Exploiting vulnerability -  Not Written Yet – Up Next

       Summary -  Not Written Yet – Up Next

       References -  Not Written Yet – Up Next


    Chapter 9 - Do I know you:  TxOrigin vs Message.sender Attacks

        What's the difference?

        Man In the Middle Via tx.origin

            Hands on Lab -  Simple tx.origin Example Walkthrough

            Hands on Lab -  Vulnerable TX.Origin Example Walkthrough

            Exam Prep - DApp Target + Detailed Lab Guide

        Action steps to familiarize yourself with the contract:

        Attack Options:

        Summary

        References


    Chapter 10 - Who Am I: Delegate Call Attacks

        How delegate calls work:

        Delegate Call vs Call

        Simple Delegate Call Example Code

        Simple Delegate Code Example Walkthrough

            Hands on Lab - Simple Delegate Example Walkthrough

        Variable Memory Issues with Delegate Calls

        DelegateCall Storage Simple Example Code

            Hands on Lab - DelegateCall Storage Walkthrough

            Exam Prep - DApp Target + Detailed Lab Guide

        Case Study - Parity Wallet Attack:

        Attack Transactions Explained

        Dangerous fallback function using delegatecall

        The Parity Wallet Code

        Delegate Chapter Summary

        Delegate References:


    Chapter 11 - Look into My Crystal Ball: Bad Randomness Issues

        Cryptographic Implementations and Predictable PRNGs

        Simple BlockHash Example

            Hands on Lab - BlockHash Vulnerability Walk and Talk

            Exam Prep - DApp Target + Detailed Lab Guide

        Preventing Randomness Issues

        Bad Randomness Summary

        Bad Randomness References


    Chapter 12 - Automated Static Application Security Testing

        Content - Not written - Up Next 

            Hands On Lab - Not written - Up Next 

        Summary Not written - Up Next 

        References - Not written - Up Next 


Chapter 13 - CTF Exam

        Final Exam and CTF Certification Exam Target 

        Final Exam Reporting


Appendices

    Appendix I – Pre-Requisite Suggestions:

        Programming Pre-Requisites:

        Web Application Hacking Pre-Requisites:

    Appendix II – Other Blockchain Learning Resources and Certifications

    Appendix III – Non-Exhaustive Scoping Questions

    Appendix IV – Non-Exhaustive List of things to check for



Continue reading
  1. Best Pentesting Tools 2018
  2. Pentest Tools Linux
  3. Hackers Toolbox
  4. Pentest Tools For Ubuntu
  5. Hacker Security Tools
  6. Hacking Tools For Mac
  7. Hacking Apps
  8. Hak5 Tools
  9. Hack Tools For Pc
  10. Hacking Tools For Windows Free Download
  11. Best Hacking Tools 2019
  12. Hacking Tools 2020
  13. Hacker Tools Free
  14. Hack Tools Github
  15. Easy Hack Tools
  16. Pentest Tools Linux
  17. Hacking Tools Mac
  18. Pentest Tools Free
  19. Hacking Tools Name
  20. World No 1 Hacker Software
  21. Pentest Tools Kali Linux
  22. Pentest Tools For Mac
  23. Pentest Tools Alternative
  24. Pentest Tools Alternative
  25. Hacking Tools And Software
  26. Pentest Tools Framework
  27. Hack Tools For Ubuntu
  28. Hacking Tools For Kali Linux
  29. Hacking Tools Github
  30. Pentest Tools For Android
  31. Hacking Tools
  32. Pentest Tools For Windows
  33. Hack Tools 2019
  34. Tools For Hacker
  35. Black Hat Hacker Tools
  36. Hacker Tools Apk
  37. Hack Website Online Tool
  38. Pentest Automation Tools
  39. Hacker Tools 2019
  40. Hacking Tools For Windows Free Download
  41. Hack Apps
  42. Pentest Tools Download
  43. Pentest Tools Windows
  44. Pentest Tools For Android
  45. Hacking Tools Pc
  46. Pentest Recon Tools
  47. Hacker Tools Github
  48. Hacker Tools Software
  49. Pentest Tools Online
  50. What Are Hacking Tools
  51. Pentest Tools Website Vulnerability
  52. Hacking Tools Download
  53. Hacking Tools For Windows
  54. Pentest Tools
  55. Hack Rom Tools
  56. Pentest Tools For Android
  57. Pentest Tools For Ubuntu
  58. Growth Hacker Tools
  59. Hacking Tools Kit
  60. Pentest Tools Website
  61. Pentest Reporting Tools
  62. Hacking Tools Free Download
  63. Pentest Tools Review
  64. Hacker Security Tools
  65. Pentest Reporting Tools
  66. Hacking Tools And Software
  67. Hacking Tools Windows
  68. Pentest Tools Apk
  69. Tools For Hacker
  70. Pentest Tools Website Vulnerability
  71. Pentest Tools Bluekeep
  72. Pentest Tools Android
  73. Growth Hacker Tools
  74. Hacker Tools 2019
  75. Pentest Tools Bluekeep
  76. Pentest Tools Github
  77. Hacker Security Tools
  78. Hacker Hardware Tools
  79. Hacking Tools Online
  80. Pentest Tools Alternative
  81. Hack Tools For Games
  82. Hacking Tools For Windows Free Download
  83. Hacker Tools Free
  84. Blackhat Hacker Tools
  85. Beginner Hacker Tools
  86. Pentest Automation Tools
  87. Pentest Tools Framework
  88. Pentest Tools Nmap
  89. Hacker Tools Windows
  90. Hacking Tools For Windows
  91. Pentest Tools Github
  92. Hacking Tools For Kali Linux
  93. Hak5 Tools
  94. Android Hack Tools Github
  95. What Is Hacking Tools
  96. Nsa Hacker Tools
  97. Hacker Tools Windows
  98. Hacking Tools Free Download
  99. Pentest Automation Tools
  100. Termux Hacking Tools 2019
  101. Hacking Tools For Pc
  102. Hacking Tools Windows 10
  103. Pentest Box Tools Download
  104. Computer Hacker
  105. Game Hacking
  106. Pentest Tools Website Vulnerability
  107. Hack Tools 2019
  108. Hacking Apps
  109. Hack Tools Pc
  110. Hacking Tools Pc
  111. Hack Tools Mac
  112. How To Make Hacking Tools
  113. Hacker Tools List
  114. Pentest Tools Android
  115. Pentest Tools
  116. Hacking Tools And Software
  117. Pentest Tools Free
  118. Best Pentesting Tools 2018
  119. Hack Tools Github
  120. Hacking Tools For Mac
  121. Github Hacking Tools
  122. Install Pentest Tools Ubuntu
  123. Hacking Tools For Windows
  124. Hacking Tools Name
  125. Hacking Tools For Windows 7
  126. Pentest Tools Alternative
  127. Tools 4 Hack
  128. Hack Tools Online
  129. Hacking Tools For Pc
  130. Hacker Tools Hardware
  131. Hacks And Tools
  132. Pentest Tools For Android
  133. Hacking Tools Kit
  134. Nsa Hack Tools
  135. Hack Tools For Pc
  136. Kik Hack Tools
  137. Hacking Tools For Windows 7
  138. Pentest Reporting Tools
  139. Hak5 Tools
  140. Hacking Tools Windows 10
  141. Android Hack Tools Github
  142. Hacking Tools For Pc
  143. Pentest Tools For Windows
  144. Hack Tools 2019
  145. Hackers Toolbox
  146. Hack Tools For Games
  147. Hacking Tools 2019
  148. Hacking Tools Usb
  149. Hacker Tools For Ios
  150. Growth Hacker Tools
  151. Install Pentest Tools Ubuntu
  152. Hack Tools For Mac
  153. Wifi Hacker Tools For Windows
  154. Hack Tools For Ubuntu
  155. Hack Tools For Games
  156. Physical Pentest Tools
  157. Hacker Security Tools
  158. Wifi Hacker Tools For Windows
  159. Pentest Tools Bluekeep
  160. Hacker Tools Windows
  161. Hacker Tools Mac
  162. Pentest Tools Website Vulnerability
  163. Free Pentest Tools For Windows
  164. Pentest Tools Find Subdomains
  165. Pentest Tools Linux
  166. New Hacker Tools
  167. Hacking Tools Windows 10
  168. Bluetooth Hacking Tools Kali
  169. Pentest Recon Tools
  170. Pentest Tools Port Scanner
  171. Hacking Tools Mac

No comments:

Post a Comment

My Blog List

Blog Archive

Kiwi Arts Now Sold at Image Spa!

Kiwi Arts Now Sold at Image Spa!
Buy Natural Wood Bangles at Image Spa!

Kiwi Arts on Artfire

Store not available