Fixing PwnKit for the Cyber Defense Competition
In the last Cyber Defense Competition, a major exploit tool PwnKit was used to gain access. Here is how I fixed it for this competition, and watched red team...
All Posts
Here are all the posts including labs, projects, and anything else that did not fit in the blog well.
Recent posts
Cyber Tractor Challenge
My experience with the John Deere event that brought in students from around the country to test the security of John Deere equipment
John Deere Internship at 6 Weeks
Talking about my summer internship at John Deere at halfway through
CYBE231 Lab 12 - Final Project Part 3
The last part of the final project where we had to attack other networks and get into the systems that had been secured by other students
CYBE231 Lab 11 - Final Project Part 2
The second part of the final project where we used the information gathered in the last lab to remediate systems
CYBE231 Lab 10 - Final Project Part 1
The beginning of the final project where we conduct a penetration test on a set of systems
CYBE231 Lab 9 - The Internet of Things , Malware, and the Joy of Botnets
We use a de-fanged Mirari malware to infect a network of IoT devices to create our own mini-botnet
CYBE231 Lab 8 - Social Engineering
Using information gathered to exploit the human vulnerability in systems
CYBE231 Lab 7 - Physical Security
Showing how important physical security is, and ways to exploit physical access
CYBE231 Lab 6 - OWASP
Using the OWASP pre-made web applications as victims for web exploitation
CYBE231 Lab 5 - Auditing and Remediation of Vulnerable Systems
Discovering vulnerabilities on systems, and then taking steps to fix the issues found
CYBE231 Lab 4 - Cracking & Lateral Movement
Taking hashes from compromised systems and using them in various ways to gain access to other systems
CYBE231 Lab 3 - Vulnerabilities and Foothold
Taking first steps into finding a vulnerability and exploiting it to get a foothold
CYBE231 Lab 2 - Network Scanning
Scanning and enumerating a network to find potential services to target
CYBE231 Lab 1 - Passive Recon
Looking at OSINT and recon that can be used to gather information about a target
ISU2 Cyber Defense Competition
A short post about my team’s “strategy” for the Cyber Defense Competition when on an extreme time crunch
CYBE230 Lab 12 - Capstone
A final capstone project where we are given a very vulnerable machine, and need to find the issues while describing potential fixes
CYBE230 Lab 11 - Analyzing Log Files
Sending logs off to a centralized logging server, and monitoring for malicious looking traffic
CYBE230 Lab 10 - SSH / UFW / VPN
Setting up virtual tunnel with SSH, creating system firewalls with UFW, and setting up an openVPN server on pfsense
CYBE230 Lab 9 - Modern Web Vulnerabilities
BUilding a Django web server to demonstrate the vulnerabilities of modern web applications
CYBE230 Lab 8 - Traditional Web Vulnerabilities
Building a LAMP web server, and learning about older web vulnerabilities
CYBE230 Lab 7 - Install Postfix
Creating a basic mail server that can send and receive email between classmates
CYBE230 Lab 6 - Install OpenLDAP
Setting a centralized directory service for Linux systems
CYBE230 Lab 5 - Packages and DNS
Taking a dive into the distributed networking ideas of DNS, and issues that arise with it.
CYBE230 Lab 4 - Network Firewalls
Creating a network firewall to secure the traffic coming to and from our network
CYBE230 Lab 3 - Accounts, Permissions, and Network Tools
Taking a looking at how users and permissions in Linux work, and testing out common network analysis tools.
CYBE230 Lab 2 - Server Install and Linux File System
Installing a headless server, and using the Linux file system all from the command line!
CYBE230 Lab 1 - Installing VMs
This lab goes over the basic usage of creating a VM, inside ESXI