cybersec q1 topics
Plan: Q1 (bold items are completed)
- CIA triad
- ethernet cables (the “tubes”)
- connection: 8 wires
- challenge: connection speed-iperf
- compare with fiber, wifi: security, range, speed
- homebrew: linux on owner laptops
- IPNM: gui tool
- terminal: arp -a and nmap -sn 192.168.8.0/24
- challenge: find the intruder
- nmap solo: ports
- challenge: find the doors
- network topology: /24 and /16
- IP address, gateway, subnet, DNS (more on subnet and DNS next)
- MAC address: ID of machine
- challenge: ID intruder
- OUI lookup: who is on what machine
- IPNM: bonjour scan vs address scan (scope)
- back to addresses: test at dorm, home
- ethernet adapters: usb-c for laptops, home scans on wired network: compare
- pi server stations: wifi at first, cyber5 network (192.168.8.1 with tailscale on glinet)
- change name
- join cyber5 network
- note IP address (ifconfig)
- ping gateway
- traceroute to 4.4.4.4
- challenge: ssh into other machines, then change password (share with me)
- pi scanning tools, gui?
- challenge: scan local wLAN
- navigation: network chuck videos (bring headphones)
- basic commands: ping, traceroute
- navigation: pwd, ls, cd, mkdir, touch, nano, mv, rm
- create hidden file
- ssh challenge: find the file
- navigation: wildcards, up, back, ctrl-c ctrl-z
- extended commands: nslookup, dig
- DNS and DHCP, test with IPNM
- python scripts: http server
- setup apache2
- setup network: router, inbound port mapping, AP
- security: MAC filtering
- security: client monitoring
- defense: MAC spoofing, arp cache poisoning
- defense: tcpdump
- defense: wireshark intro-packets
- defend your home project: http, ssh, ftp servers
- firewalls-intro static rules
- SPI firewalls-dynamic rules
- IP addresses → MAC addresses → ports → services → scanning → attack surface
- TCP/IP conversations
- capture, decoding PCAP
- locate, watch, attack
- simple: DDOS
- encryption of traffic
- VPN-truly safe?
- LAN VPN?
- secure web traffic: http vs. https
- content filtering: ad blocking (simple)
- linux tools: Kali linux
- passwords
- hashing
- parrot OS and Kali
- MIM wireless attacks-aircrack-ng
- malware-clam AV EICAR
- log analysis with parrot os
- privacy: VPNs and TOR
- social engineering: internal vs. external vulnerabilities
- social engineering a scammer: https://www.youtube.com/watch?v=ec57eDghdvM
- privacy
- SIM swapping: https://www.youtube.com/watch?v=64p_WkYc9d0
Case studies:
- physical vulnerability: wifi, ethernet, KB, screenlocks, drives, backups
- LAN security: firewalls, SPI, DPI, uPNP internal holes
- physical hacking: stuxnet, SCADA
- prevention: firewall, air gap, defense in depth
- human: Snowden USB, stuxnet
- personal: spoofed email, password entropy
- OSINT: what is available to whom and why
- LLL analysis of three levels: personal, small shop, enterprise
- most common attacks: internal vs. external
- attack detection: log analysis
- cyberlaw: now and future TGC
- coding and scripts
- setup an ad blocker on rPI
- deep fakes: PBS Hany Farid, C2PA certification
- cryptocurrency-attacks
- iot devices-vulnerabilities
• 17. AI enabled attacks
Migrated from Apple Server Wiki. Original page ID: 31z410J