Hacking is not Black & White

The talk was about the basic introduction about the CTFs and how they can be great to learn about cyber security. I designed a CTF challenge around steganography, as a pre-session challenge, to find the details about the speaker. Followed by the session and few in-session activities, and concluded with a post-session CTF challenge and QnA with the attendees.

For more - Read Here!

Transcript

1. Hey. 1
2. 2 Hacking is not black and white by Kumar Ashwin
3. Look out for something interesting. 3
4. Why are we here? 4
6. C A I Confidentiality Integrity Availability 6
7. hacking the gaining of unauthorized access to data in a system or computer. /ˈhakɪŋ/ 7
8. Web Security Mobile Security Cloud Security IoT Security Network Security Social Engineering Reverse Engineering Malware Analysis Cryptography Etc. 8
9. Good engineering involves thinking about how things can be made to work; the security mindset involves thinking about how things can be made to fail. It involves thinking like an attacker, an adversary or a criminal. https://www.schneier.com/blog/archives/2008/03/the_security_mi_1.html 9
10. Reconnaissance (OSINT) Scanning or Enumeration Exploration Maintaining Access Clearing Access Post Exploitation Reporting 10
11. 11 Red Team Blue Team Detect and prevent security controls Exploit, compromise, and circumvent https://blog.eccouncil.org/red-team-vs-blue-team/
12. Learn the CTF? way 12
13. 13 Jeopardy Attack & Defence Linear King of the Hill Life 100 Decimal 200 EasyOne 300 BINARY SCRIPTING WEB Joe’s 100 Love 200 Round 300 Code 100 Cash 200 Again 300
14. 14 Jeopardy Attack & Defence Linear King of the Hill Team 1 Team 2 Team 3 Team 4 Team 1’s Server Team 2’s Server Team 3’s Server Team 4’s Server Defend Attack
15. 15 Jeopardy Attack & Defence Linear King of the Hill Team 1 Team 2 Team 3 Team 4 Central Server
16. 16 Jeopardy Attack & Defence Linear King of the Hill Lvl 1 Lvl 2 Lvl 3 Lvl 4
17. CTFs are awesome 17 ZGV2Y3t5b3VfYXJlX2F3ZXNvbWV9
18. CTFs are a great way to learn. Not necessarily the only way. 18
19. horrible passwords 19
20. Resources 20
21. 21 ___ / /\ /__/\ / /::\ \__\:\ / /:/\:\ / /::\ / /:/ \:\ __/ /:/\/ /__/:/ \__\:\ /__/\/:/~~ \ \:\ / /:/ \ \::/ \ \:\ /:/ \ \:\ \ \:\/:/ \__\/ \ \::/ \__\/ Hacker101 www.hackingarticles.in InfoSec WriteUps POCs B O O K S Web Application Hackers Handbook Red Team Field Manual The Hacker’s Playbook
23. Did you find something interesting in the slide deck?
24. ZGV2Y3t5b3VfYXJlX2F3ZXNvbWV9
25. 25 $ whoami
26. 26 Hack for good! 0xCardinal