Skip to main content

cybersec q1 topics

Plan: Q1 (bold items are completed)

  • CIA triad
  • ethernet cables (the “tubes”)
  • connection: 8 wires
  • challenge: connection speed-iperf
  • compare with fiber, wifi: security, range, speed
  • homebrew: linux on owner laptops
  • IPNM: gui tool
  • terminal: arp -a and nmap -sn 192.168.8.0/24
  • challenge: find the intruder
  • nmap solo: ports
  • challenge: find the doors
  • network topology: /24 and /16
  • IP address, gateway, subnet, DNS (more on subnet and DNS next)
  • MAC address: ID of machine
  • challenge: ID intruder
  • OUI lookup: who is on what machine
  • IPNM: bonjour scan vs address scan (scope)
  • back to addresses: test at dorm, home
  • ethernet adapters: usb-c for laptops, home scans on wired network: compare
  • pi server stations: wifi at first, cyber5 network (192.168.8.1 with tailscale on glinet)
    • change name
    • join cyber5 network
    • note IP address (ifconfig)
    • ping gateway
    • traceroute to 4.4.4.4
  • challenge: ssh into other machines, then change password (share with me)
  • pi scanning tools, gui?
  • challenge: scan local wLAN
  • navigation: network chuck videos (bring headphones)
  • basic commands: ping, traceroute
  • navigation: pwd, ls, cd, mkdir, touch, nano, mv, rm
  • create hidden file
  • ssh challenge: find the file
  • navigation: wildcards, up, back, ctrl-c  ctrl-z
  • extended commands:  nslookup, dig
  • DNS and DHCP, test with IPNM 
  • python scripts: http server
  • setup apache2
  • setup network: router, inbound port mapping, AP
  • security: MAC filtering
  • security: client monitoring
  • defense: MAC spoofing, arp cache poisoning
  • defense: tcpdump
  • defense: wireshark intro-packets
  • defend your home project: http, ssh, ftp servers
  • firewalls-intro static rules
  • SPI firewalls-dynamic rules
  •  IP addresses → MAC addresses → ports → services → scanning → attack surface 
  • TCP/IP conversations
  • capture, decoding PCAP
  • locate, watch, attack
  • simple: DDOS
  • encryption of traffic
  • VPN-truly safe?
  • LAN VPN?
  • secure web traffic: http vs. https
  • content filtering: ad blocking (simple)
  • linux tools: Kali linux
  • passwords
  • hashing
  • parrot OS and Kali
  • MIM wireless attacks-aircrack-ng
  • malware-clam AV EICAR
  • log analysis with parrot os
  • privacy: VPNs and TOR
  • social engineering: internal vs. external vulnerabilities
  • social engineering a scammer: https://www.youtube.com/watch?v=ec57eDghdvM
  • privacy
  • SIM swapping: https://www.youtube.com/watch?v=64p_WkYc9d0


Case studies:

  1. physical vulnerability: wifi, ethernet, KB, screenlocks, drives, backups
  2. LAN security: firewalls, SPI, DPI, uPNP internal holes
  3. physical hacking: stuxnet, SCADA
  4. prevention: firewall, air gap, defense in depth
  5. human: Snowden USB, stuxnet
  6. personal: spoofed email, password entropy
  7. OSINT: what is available to whom and why
  8. LLL analysis of three levels: personal, small shop, enterprise
  9. most common attacks: internal vs. external
  10. attack detection: log analysis
  11. cyberlaw: now and future TGC
  12. coding and scripts
  13. setup an ad blocker on rPI
  14. deep fakes: PBS Hany Farid, C2PA certification
  15. cryptocurrency-attacks
  16. iot devices-vulnerabilities

• 17. AI enabled attacks



Migrated from Apple Server Wiki. Original page ID: 31z410J