Meetup Recap

Meetup Recap for 11/2 and Announcement

For those who missed today’s meeting, we prepared for CNY Hackathon and the NCL team game this weekend by exploring the infosec virtual lab environment and scanning for services on open ports within the provided network.

 

Announcement:

The student branch of the IEEE (Institute of Electrical and Electronics Engineers) and the Alpha Omega Epsilon STEM sorority are holding a networking event and career panel Sunday, November 7th at the Sheraton Hotel. “IEEE is the world’s largest technical professional organization dedicated to advancing technology for the benefit of humanity.” To learn more click here. Make sure to sign up if you are interested. The first 30 people to sign up will have access to a special event.

Meetup Recap 10/19/2021

Hello everyone! Thanks for taking time to come during midterm week.

This week we went through nmap scans on an Ubuntu (a Linux distribution) VM and through the terminal of a host machine. We did a live demonstration of an easy nmap challenge in the NCL gym, discussed some of its practical uses, and talked about TCP, ICMP, and UDP ports and their uses.

Make sure to participate in the NCL individual game this weekend and prepare for the team game. Start looking for teammates now! The team game is on the first weekend of November starting Friday the 5th and ending on Sunday the 7th.

If you are interested in CNY hackathon, sign up now! It is on November 6th, transportation is currently being set up. Make sure to let us know if you plan to attend.

NCL (National Cyber League)

Nmap Scans

Meetup Recap 10/12/2021

This week we went over file permissions (for owner, group, and others) and user management in Kali Linux. For file permissions, we went over how to use “chmod” to change file read/write/execute permissions, “chown” to change the owner of the file, and “chgrp” to change the group who can access the file. We also discussed how to create new users and give them passwords, create new groups, and change group access permissions.

 

As a reminder, the NCL preseason started on Monday! If you are participating in NCL continue to work on it throughout the week and remember to make a debrief of one of the challenges.

Next week we are going to prep for CNY hackathon (this competition is beginner friendly), practice in the NCL gym, and go through some challenges from picoCTF.

 

For those who want more practice in Linux, here is the challenge given at the meeting:

Create a VM where there are three main groups​

Admin​
-John​
-Macy​
-Alice​

Marketing​
-Tyler​
-Sam​

Sales​
-Ceasars​

Create a directory that only sales can read and write​
Create a directory that only marketing can read and write​
Create a directory that only admins can read and write

Meetup Recap 10/5

This week’s meetup was an exciting one. We welcomed speaker Jake Mihevc one of the founders of CNY Hackathon who gave us a little bit of insight on what to expect for this year’s competition and was awesome enough to give the club a few resources to help members practice for hackathons.  We also got the chance to dive into the importance of log analysis and demoed a challenge from NCL!

Below are a few of the resources given:

Meetup Recap 9/28

Hey Info Sec Club Members!

Our meetup this week consisted of going over the terminal and how to navigate it! We went our resources on our resoures pages and solve challenges on picoctf.org and https://cyberskyline.com/events/ncl (Forensic Category). Those who had filled out the NCL voucher form, you should have received your NCL voucher and agreement for the voucher, Use it or Lose it!

Encryption Challenge + NCL Raffle

Hey everyone!

We hope you all enjoyed yesterday’s meeting, and have managed to play around a little bit with the different CTFs we displayed last night. We will be posting the group channels for people interested in doing them in the GroupMe chat, so make sure you’re in that. Here are the encryption challenges, and they are also up on the website, on the Practice Cybersecurity page. Also, don’t forget, if you want to have a chance at free National Cyber League (NCL) CTF tickets, send a short paragraph to isc@syr.edu about why you want to participate in NCL, and how you’re interested in contributing to the club. The NCL registration deadline is this Friday, so in order to qualify for the tickets, you must send in the paragraph by midnight tonight. Finally, for those you’re interested in participating in the CyberSEED CTF, fill out the interest form below. The CyberSEED CTF is significantly more difficult than NCL, but if you’re interested in that $3000 grand prize, it’s worth it if you have the experience. There is also an interest form for those who want to attend B-Sides Rochester. Just make sure you also register for your free tickets ASAP as well. 

B-Sides Rochester Interest Form

CyberSEED Interest Form

Solutions to Last Weeks Challenge

If you have any questions, please let us know at isc@syr.edu. Have a great week!

Recap – 9/29/20

We hope you guys enjoyed the last meeting and that you all continue to practice with Nmap. And don’t forget to complete the NCL challenges, get what you can out of this amazing resource! If you still haven’t registered for NCL, we have a few tickets left over to give away. Fill out the form. This is the last call for the NCL tickets, as they will expire Friday due to late registration. So fill out the form ASAP. Tickets will be given out on a first come, first serve basis. Also, if you’re interesting in a competition where you get to build something instead of breaking into it, check out the Hack Upstate competition this weekend, an event where you can share ideas, form teams, build projects, and win awesome prizes in 24 hours. Even if you don’t know how to program, you can participate if you an entrepreneur type who’s always thinking of some cool tech ideas, or you’re passionate about design. And finally, the NYSERNET conference will be streaming Thursday and Friday, and topics such as defending against ransom ware and automation in network/security will be discussed. You can check out the agenda on the website to see other activities they’ll be having. Conferences like this help with getting a feel for the industry, who’s in it, and how you yourself can join it, so don’t miss it! All relevant links will be down below.

Meeting Presentation

NCL Giveaway

Hack Upstate Website

NYSERNET Website

 

 

Recap – 9/22/20

We hope you guys enjoyed the last meeting, and that you found Hashcat interesting. And to the NCL raffle winners, we hope you master it throughout the semester. And if you want a challenge, don’t forget to check out the hashes on our Practice Cybersecurity to break using hashcat. Also, if you missed the BSides Denver Security Conference, don’t worry, we got you.  The link to the recording, as well as other important things, will be put below. Finally, if you aren’t doing anything at 3PM tomorrow, be sure to check out Emily Simen’s Bits of Advice talk on her post grad experiences. She’s worked at Cisco and the US Open, and is currently working with RSM, one of the nation’s top accounting firms, so she’s got some quality advice for you.

BSides Denver Stream

Hivestorm Competition Website (Get your team of 4 together soon, registration closes Oct 1st)

Bits of Advice – Emily Simens (3PM 9/25/2020)

Meeting Presentation

 

Recap – 9/15/20

Thanks everyone that came to this week’s meeting, we hope you learned more about the OSI networking model and how it can be used with Wireshark to intercept packets and gain valuable information. Continue Reading

Recap – 9/8/2020

We want to thank everyone that came out to this week’s meeting, we had a lot of fun with picoCTF! We also got to look at Hack the Box a bit. If you missed it, the challenge for next week is to simply create an account for Hack the Box (P.S. it’s not as simple as you think). Continue Reading