# PENITS - General Information

# Links to Challenges/Wargames

[Pentesterlab](https://pentesterlab.com/exercises?only=free&sort=difficulty)  
[OverTheWire](http://overthewire.org/wargames/)   
[HackThisSite](https://www.hackthissite.org/)  
[HackTheBox](https://www.hackthebox.eu/)  
[VulHub](https://www.vulnhub.com/)  
[HackThis](https://www.hackthis.co.uk/levels/)  
[HackUCF](https://ctf.hackucf.org/challenges)

# VMs and Software

#### Linux
* radare2 (included into cutter)
* Cutter [github.org](https://github.com/radareorg/cutter) (has radare2 console window)
* Editor (VSCode?)
* Burp Suite
* PyCharm
* nmap
* openVPN

David: Manjaro xfce  
Markus: Manjaro xfce  
Paul: Manjaro xfce

#### Windows 
* IDA Pro 5 & 7
* JetBrains dotPeek
* Visual Studio Community
* OllyDbg
* VSCode
* Burp Suite

David: ?  
Markus: Win10Pro x64  
Paul: ?  

[Server 2016 Evaluierung](https://sid-500.com/2017/08/08/windows-server-2016-evaluation-how-to-extend-the-trial-period/)

#### Tips

Cutter installer: qt webenginewidgets  
Install package qtwebengine5-dev   
[ARCH](https://www.archlinux.org/packages/extra/x86_64/qt5-webengine/)


# Resources

#### radare2

[radare2 docu book](https://radare.gitbooks.io/radare2book/)  
[r2 cheat sheet](https://github.com/radare/radare2/blob/master/doc/intro.md)

#### Malware Analysis

[Malware Analysis using Process Dump (YT)](https://www.youtube.com/watch?v=dCU7N-Oh3jg)  


# GNURadio Fuckery

### Stuff i discoverd while installing or using GNURadio:

1) Check before what Release you use  
I tried to use 3.7.13 without checking, installation failed.   
See if there is a patch available that is easy to implement. Like for 3.7.11

2) Set revision via PyBOMB does NOT use Release tags!  
It however uses commit hashes, so that works at least.

3) Keep backups of your VM, if not try not to lose sanity.  
Backup regulary, e.g. after each successful step. 

4) Test EVERYTHING, AFTER EACH STEP  
Shit WILL fuck up.  
Its gnuradio, shit will explode if you look at it the wrong way.

5) Choose your install location wisely  
Hint: Do not use /usr/local as its default.  
If it goes wrong you are basically fucked from the beginning.