Hacking Club!
Agenda
Second Meeting
16 NOV
- Topics
- Encoding (Covered)
- Cryptography (Covered)
- Web
- Hacker Toolkit / CyberStakes (7 DEC)
- Hacking Time
- Future Meetings / Logistics
First Meeting
26 OCT
- Club Intro
- How we will learn
- Topics
- Encoding
- Cryptography
- Hacker Toolkit (16 NOV)
- Web (7 DEC)
- IntroCTF (no longer up)
- Future Meetings
Welcome to Hacking Club
Who am I?
- Cyber Officer
- Assistant Professor
- Just Another Dude
What is Hacking [a Hacker]?
- Applying problem solving through a technical means to overcome a challenge or problem.
The use of a computer to gain unauthorized access to data in a system- We will do this, but only on authorized systems
How will we learn?
- Brief Introductory Material
- Gamification (/ˌɡāmifəˈkāSHən/)
- The application of typical elements of game playing (e.g., point scoring, competition with others, rules of play) to other areas of activity.
- Capture the Flag Competitions
- Real Intentionally Vulnerable Systems
- Passion
- Do what you enjoy!
Credit
All Credit Goes to Madeye
Who are you?
Answer below on white board
- What is your handle (name)?
- What do you do (job / position)?
- How good are you at computing (pick 1)?
- Your computer is a typewriter
- Know enough to reboot when in trouble
- Have installed a printer or router
- Have dabbled with some code before
- Some previous EE, CS, or IT experience
- Some Cyber Security / Hacking experience
Encoding
Encoding
How Computers Store Info
| Binary | Decimal |
|---|---|
 |
 |
Advanced Encoding
Printable Characters
| ASCII | Hexadecimal |
|---|---|
 |
 |
Super Advanced Encoding
Data and Non-Printable
| Base64 | Example |
|---|---|
 |
 |
Cryptography
Encryption
Keeping our Information Secret
| Rotational Encryption | Example |
|---|---|
 |
 |
More Encryption
Protect your Data
| Substitution Cipher | Example |
|---|---|
 |
 |
Advanced Encryption
Public Key Cryptography
| Public Key Cryptography | Example |
|---|---|
 |
 |
Super Advanced Encryption
RSA Algorithm
___ 
Super Advanced Encryption 2
RSA Calculations
___ 
RSA w/ Python
Calculating Inverse
Hashing
One Way Functions
| Crypto Hash Functions | Crypto Hash Algoritms |
|---|---|
 |
 |
Web
Web
How Clients and Servers Talk
- Hypertext Transport Protocol (HTTP):how browsers and clients talk
- Hypertext Markup Language (HTML): how web pages are described
More Web
Client Request Methods
| HTTP GET and POST | Other HTTP Methods |
|---|---|
 |
 |
Most Web
HTTP Request Example
Web Tools
How to manually interact with sites
| Netcat (nc) | Client URL (curl)) |
|---|---|
 |
 |
Web Responses
HTTP Status Codes
___ 
The Language of the Web
HTML
___ 
The Language of the Web
JS and CSS
| JavaScript (JS) | Cascading Style Sheets (CSS) |
|---|---|
| Client-side code that runs in your browser. | CSS files allow site wide formatting to be applied to HTML code. |
| Builds dynamic sites and content. | Separates data from view (presentation). |
| Plaintext file is downloaded from server and rendered in your browser. | Many prebuilt packages available like Bootstrap. |
Cookies, Cookies, Cookies
How the Web Remembers
___ 
Web Crawlers
Googlebot and robots.txt
___ 
Databases
Web Long-Term Storage
| Databases | SQL Example |
|---|---|
 |
 |
The LAMP Stack
Linux - Apache - MySQl - PHP
Network Layers
The OSI Model
Resources
Encoding / Cryptography
- ASCII Chart: https://www.asciitable.com/
- Base64: https://www.base64encode.org/
- ROT: tech.pookey.co.uk/non-wp/rot-decoder.php
- Letter Frequency: http://letterfrequency.org/
- Quip Quip: https://quipqiup.com/
- RSA Site: https://goo.gl/xWEMFg
- Cyber Chef: https://gchq.github.io/CyberChef/
- Crack Hashes: https://crackstation.net/
Web
- Command Line
- Netcat (nc): http://netcat.sourceforge.net
- Client URL (curl): https://curl.haxx.se
- Chrome
- Firefox
Time to Hack!
OverTheWire
Natas
- No Accounts Required
- http://overthewire.org/wargames/natas/
PicoCTF
picoctf.com
- Signup at PicoCTF (make individual accounts)
- Make teams of 2 (work with someone!)
- Solve problem using previous techniques
Staying Involved
Warning
Hack Responsibly
- Do not download or use Kali directly on the school network
- Use a VPN!
- Suspend your VM
- Kali is not required
- Only hack sites that give you explicit permission
How to Stay Connected
I Don’t Actually Know Who You Are
Future Meetings
Bi-Monthly Meetings
- Upcoming Topics:
- Hacker Toolkit / CyberStakes
- Reverse Engineering
- Binary Exploitation
- Other Events
What to Help with the Club?
Plenty of Work to go Around
- Topic Development
- Web Development
- Organization / Club Management
Where to go from here?
So you Want to Learn More
- Read How do I start?
- Events
- CyberStakes 2018 - acictf.com
- Old CyberStakes - hackcenter.com
- PicoCTF - picoctf.com