Skip to main content

cybersec q1 topics

Migration

Plan: Q1 (bold items are completed)

    CIA triad ethernet cables (the “tubes”) connection: 8 wires challenge: connection speed-iperf compare with fiber, wifi: security, range, speed homebrew: linux on owner laptops IPNM: gui tool terminal: arp -a and nmap -sn 192.168.8.0/24 challenge: find the intruder nmap solo: ports challenge: find the doors network topology: /24 and /16 IP address, gateway, subnet, DNS (more on subnet and DNS next) MAC address: ID of machine challenge: ID intruder OUI lookup: who is on what machine IPNM: bonjour scan vs address scan (scope) back to addresses: test at dorm, home ethernet adapters: usb-c for laptops, home scans on wired network: compare pi server stations: wifi at first, cyber5 network (192.168.8.1 with tailscale on glinet)
    • change name
    • join cyber5 network
    • note IP address (ifconfig)
    • ping gateway
    • traceroute to 4.4.4.4
    challenge: ssh into other machines, then change password (share with me) pi scanning tools, gui? challenge: scan local wLAN navigation: network chuck videos (bring headphones) basic commands: ping, traceroute navigation: pwd, ls, cd, mkdir, touch, nano, mv, rm create hidden file ssh challenge: find the file navigation: wildcards, up, back, ctrl-c  ctrl-z extended commands:  nslookup, dig DNS and DHCP, test with IPNM  python scripts: http server setup apache2 setup network: router, inbound port mapping, AP security: MAC filtering security: client monitoring defense: MAC spoofing, arp cache poisoning defense: tcpdump defense: wireshark intro-packets defend your home project: http, ssh, ftp servers firewalls-intro static rules SPI firewalls-dynamic rules  IP addresses → MAC addresses → ports → services → scanning → attack surface  TCP/IP conversations capture, decoding PCAP locate, watch, attack simple: DDOS encryption of traffic VPN-truly safe? LAN VPN? secure web traffic: http vs. https content filtering: ad blocking (simple) linux tools: Kali linux passwords hashing parrot OS and Kali MIM wireless attacks-aircrack-ng malware-clam AV EICAR log analysis with parrot os privacy: VPNs and TOR social engineering: internal vs. external vulnerabilities social engineering a scammer: https://www.youtube.com/watch?v=ec57eDghdvM privacy SIM swapping: https://www.youtube.com/watch?v=64p_WkYc9d0


    Case studies:

      physical vulnerability: wifi, ethernet, KB, screenlocks, drives, backups LAN security: firewalls, SPI, DPI, uPNP internal holes physical hacking: stuxnet, SCADA prevention: firewall, air gap, defense in progressdepth forhuman: Snowden USB, stuxnet personal: spoofed email, password entropy OSINT: what is available to whom and why LLL analysis of three levels: personal, small shop, enterprise most common attacks: internal vs. external attack detection: log analysis cyberlaw: now and future TGC coding and scripts setup an ad blocker on rPI deep fakes: PBS Hany Farid, C2PA certification cryptocurrency-attacks iot devices-vulnerabilities

      • 17. AI enabled attacks



      Migrated from Apple WikiServer Wiki. Original page 31z410J.ID: 31z410J