CofC Cybersecurity Club

Go Concurrency and Bounded Concurrency Patterns

Tue, 01 Sep 2026 00:00:00 +0000

This guide aggregates examples and content from various sources. Not all wording and code is original.

Introduction

This guide provides a foundation for implementing common concurrency patterns, including bounded concurrency, in Go. Bounded concurrency is a pattern of setting structural limits on concurrent operations, protecting finite resources like memory and compute.

Although the focus of this doc is bounded concurrency, executing this pattern requires an understanding of Go’s concurrency model. To ensure a shared vocab, the first half of this guide provides a basic explanation of Go’s concurrency mechanisms: goroutines, channels, buffers, and context. If you’re already familiar with how these operate, you can skip to the bounded concurrency notes.

Networks Introduction

Tue, 08 Feb 2022 00:00:00 +0000

In order to properly learn network security, an understanding of computer network design and protocols is necessary. This presentation was aimed at teaching simple networking basics to prepare club members to learn more on their own. For a complete introduction, please watch the meeting recording and download the slides to follow along.

Dynamic Host Configuration Protocol (DHCP)

RFC 2131

On new connection to network, DHCP server delivers 3 important pieces information

Linux Knowledge

Tue, 14 Dec 2021 00:00:00 +0000

Overview

This post will provide a high level overview of important things to know about securing and adminstrating Linux systems.

Command Line

Knowing how to use the command line is essential, Linux servers usually do not have desktop environments - and even if they do many administrative tasks are not possible to do via GUI.

Bash

The default shell in many Linux systems. Check out this guide: https://guide.bash.academy/commands/

Secure Shell (SSH)

Know how to connect into other computers via the command line using SSH as well as how to create and use SSH keys.

Lock Picking

Wed, 11 Aug 2021 00:00:00 +0000

Lock Picking

Background

Lock:
- Pins
- Springs
Pick:
- Individual Pin Pick
- Rake
- Comb
- Wafer
- Tension Wrench
Other Picks:
- Shims
- Jims (Door lock)
- Zip Gun

How does it Work?

Non-destructive way to open a lock
Takes advantage of exploiting imperfections (not every lock is 100% accurate and secure due to manufacturing imperfections)

How to Pick Locks

General Formula: tension + pick with the right pin combination = picked lock
Pin by Pin:

Tools of the Trade

Wed, 11 Aug 2021 00:00:00 +0000

Tools of the Trade

Setting up Your Box

Hardware:
- The computer you already have
- Raspberry Pi (2-4)
- Older/Used laptops (Thinkpads are what I would recommend)
The VM Route
- Kali Documentation
- Parrot Documentation
Dual-Boot Route

I personally recommend dual booting if at all possible possible

Docker
AWS
Server
- Used hardware on eBay
- ESXI hypervisor

Personal Security

Password Manager
- 1Password
- LastPass
- Remembear
2FA
- Yubikey
- Google Titan
- Biometric (If available)
- 6-digit code generator
Internet Traffic Security

Information Gathering

Thu, 05 Aug 2021 00:00:00 +0000

Information Gathering

Google Dorks

Answer: The best way to refine Google & database searches for OSINT (& schoolwork)!
Cheatsheet
Common Vulnerabilities and Exposures (CVEs)
Practice:
1. What is the CVE of the original POODLE attack?
2. What version of VSFTPD contained the smiley face backdoor?
3. What was the first 1.0.1 version of OpenSSL that was NOT vulnerable to heartbleed?
4. What was the original RFC number that described Telnet?
5. How large (in bytes) was the SQL Slammer worm?
6. Samy is my…
Answers

Network Recon

Grab your current IP and Subnet: ip addr show | grep <network interface> | grep inet | awk '{print $2}'

nmap:

Documentation
Usage: nmap -<options> <ip/subnet or address>
Common Options:
- -sn - ping scan (essentially is ping 8.8.8.8 via CLI)
- -sS - SYN or Normal scan
- -sU - UDP scan
- -p<start num-end num>
  - Default is 1-1024
  - Max port = 65535
- -sV - list all the services (+ version) running on the target
- -O - OS detection
- -Pn - treat all hosts as up up
- -A - runs nmap scripts, -O, -sV, & traceroute

Other Useful Tools:

ping <options> <ip address or hostname>
traceroute <ip or address> - shows all the hops from your machine to the ip/address
netdiscover -i <interface/subnet>

DNS Recon:

Powershell

Thu, 05 Aug 2021 00:00:00 +0000

Powershell

All files can be found here

Get Powershell

What is powershell?: Microsoft’s answer to the Linux terminal, but more Object-Oriented (OOP)
Method 1:
- Windows VM or Host OS
- Method 2:
  - Ubuntu VM or Mac with Powershell installed??? (aka PFM)
  - Uses Powershell core (and doesn’t need docker, just homebrew)

Powershell Basics:

Variables:

$var1 = 5
$var2 = “55”

Operations:

Addition:

$var1 + $var2
$var2 + $var1

Why are they different?

var ++
var += 5

Equality:

-eq: equals
-ne: not equal to
-ceq: case sensitive comparison
-gt: greater than
-gte: greater than or equal to
-lt: less than 
-lte: less than or equal to

Booleans:

-and 
-or

Conditionals:

If (<condition>){
	<code/commands>
}
Else{
	<code/commands>
}

Loops:

$question = "Are we there yet?"
$answer = "Noooooo!"
for ($i = 3; $i -gt 0; $i--){
 $question
 sleep 2
}
Write-Output "`n$answer"
**(`n) = new line, not \n like python/java/c

$services = get-service
ForEach ($thing in $services){
	$thing.name + " : " + $thing.status
}
Write-Output "`nThe last service is $($thing.name)"

$food = 'Beans', 'Greens', 'Potatoes', 'Lamb', 'Rams', 'Hogs', 'Dogs'
for ($i = 5; $i -gt 0; $i--){
 foreach($item in $food){
 Write-Output "I got $item "
 }
}
Write-Output "`nYou name it!"

while ($true){
 test-connection 127.0.0.1
}

$rabbits = 2
Do{
 Write-output "We now have $rabbits rabbits!"
 $rabbits *= 2
}
While ($rabbits -lt 10000)

$i = 0
while($i -lt 999){
 $i++
 $i
}
Write-Host "`nCount complete - We have counted up to $i" -ForegroundColor Cyan

AKA the original for-loop or you can call the for-loop a wannabe while loop, either one works with me

Functions:

Function <name>{
	Function ($parameter){
	<Insert code here>
	}
	<Insert code here>
}
<name> -parameter 1

The Cool Stuff

TCP Listener

Idea: we monitor someone’s computer and we get a notification when they open an application

function WMI_Subscription{

function server($port){
 $Tcplistener = New-object System.Net.Sockets.TcpListener $port
 $Tcplistener.Start()
 Write-host "[-] " -ForegroundColor green -NoNewline; Write-Host "Listening: 0.0.0.0:$port" -ForegroundColor cyan
 $TcpClient = $Tcplistener.AcceptTcpClient()
 $remoteclient = $TcpClient.Client.RemoteEndPoint.Address.IPAddressToString
 Write-Host "[-] " -ForegroundColor green -NoNewline; Write-Host "New connection: $remoteclient" -ForegroundColor Cyan

 $TcpNetworkstream = $TCPClient.GetStream()
 $Receivebuffer = New-Object Byte[] $TcpClient.ReceiveBufferSize
 $encodingtype = New-Object System.Text.ASCIIEncoding
 while ($TCPClient.Connected){
 $Read = $TcpNetworkstream.Read($Receivebuffer, 0, $Receivebuffer.Length) 
 [Array]$Bytesreceived += $Receivebuffer[0..($Read -1)]
 [Array]::Clear($Receivebuffer, 0, $Read)

 $ScriptBlock = [ScriptBlock]::Create($EncodingType.GetString($Bytesreceived))
 $ScriptBlock
 $TcpNetworkstream.Dispose(); $Tcpclient.Dispose(), $Tcplistener.Stop()
 }
}
server -port 6602

# Temp WMI... dies when the process terminates

Get-Process -Name notepad -ErrorAction SilentlyContinue | Stop-Process

Register-CimIndicationEvent -Query "Select * from __InstanceCreationEvent within 15 where targetInstance isa 'win32_process' and (targetinstance.name = 'notepad.exe' OR targetinstance.name = 'wordpad.exe')" `
 -SourceIdentifier "trigger" -Action{Write-Output "$(get-date) - Temp WMI Register Executed Successfully" | Out-File $env:USERPROFILE\Desktop\logger.txt -Append}

Start-Process notepad
Get-Content "$env:USERPROFILE\Desktop\logger.txt"
Get-EventSubscriber
Unregister-Event -SourceIdentifier "trigger"

Register-CimIndicationEvent -Query "Select * from __instanceModificationEvent within 15 where targetInstance isa 'win32_Service'" `
 -SourceIdentifier "trigger2" -Action{Write-Output "$(get-date) - Temp WMI Register Executed Successfully" | Out-File $env:USERPROFILE\Desktop\logger2.txt -Append}

Restart-Service -Name BITS
Get-Content "$env:USERPROFILE\Desktop\logger2.txt"
Unregister-Event -SourceIdentifier "trigger2"

Register-WmiEvent -Query "Select * from __InstanceoperationEvent within 20 where targetinstance ISA 'win32_process' AND targetinstance.name='lsass.exe'" -SourceIdentifier "beacon" `
 -Action{
 $socket = new-object System.Net.Sockets.TcpClient("127.0.0.1", "6602")
 $data = [System.Text.Encoding]::ASCII.GetBytes("This is a test")
 $stream = $socket.GetStream()
 $stream.Write($data, 0, $data.Length)
 }

Unregister-Event -SourceIdentifier "beacon"


Get-WmiObject -Namespace root/cimv2 -Class win32_localtime

Register-WmiEvent -Query "Select * from __InstanceModificationEvent within 30 WHERE TargetInstance ISA 'Win32_LocalTime' AND targetinstance.hour = 20 AND targetinstance.minute = 42 group within 30" -SourceIdentifier "beacon2" `
 -Action{
 $socket = new-object System.Net.Sockets.TcpClient("127.0.0.1", "6602")
 $data = [System.Text.Encoding]::ASCII.GetBytes("This is a test")
 $stream = $socket.GetStream()
 $stream.Write($data, 0, $data.Length)
 }

Unregister-Event -SourceIdentifier "beacon2"

Get-Job

Port Scanning

$ports = 1..100
$IP = "192.168.0.185"
$scan = foreach($port in $ports){
 try{
 $portStatus = new-object Net.Sockets.TcpClient($IP, $port)
 [pscustomobject]@{
 RemoteAddress = $IP
 RemotePort = $port
 TcpTestSucceeded = $portStatus.connected
 }
 
 $portStatus.Close()
 }

 catch{
 [pscustomobject]@{
 RemoteAddress = $IP
 RemotePort = $port
 TcpTestSucceeded = 'False'
 }
 }
}

$scan

Downgrading Powershell:

Why would we do this??
How to downgrade:

if ($PSVersionTable.PSVersion -gt [Version]"2.0") { 
powershell -Version 2 -File $MyInvocation.MyCommand.Definition exit } 
'run some code' Read-Host -Prompt "Scripts Completed : Press any key to exit"

Time Stomping:

What is it?
Why is it important?
Why you shouldn’t do it to your professors :)

file = "$env:USERPROFILE\desktop\myfile.txt"
Get-Item $file | format-list *time
(Get-Item -path $file).LastWriteTimeutc = Get-Date
(Get-Item -path $file).LastWriteTime = (Get-Date).AddDays(-270)
(Get-Item -path $file).CreationTime = "8/8/2018 09:00:00 PM"

The Duck…

General:

What is it?
Why should you know about it?

Use Cases:

Script parameters:
1. Computer information
2. USB Information
3. Installed Updates
4. Network Information
5. Network Scan
6. Port Scan
7. Saved in C:\Users
Can be used to get a reverse shell

How to get your hands on one:

Practice

Under the Wire (Sentry)

Image Forensics

Wed, 04 Aug 2021 00:00:00 +0000

Image Forensics

Materials for the Meeting

How to Extract Metadata from Files

CLI

Imago:
- Installing:
  - Github
  - pip install imago
- Running:
  - imago -i [path to directory where the file is located] -o [where do you want the output file to go] -x -t -g
    - -x = for exif metadata
    - -t = for only .jpg images
    - -g = gps info, if available
Exiftool:
- Running: exiftool <options> /path/to/file

Steganography

Download: DIIT
How to run: java -jar -Xmx512m diit-1.5.jar
Practice:
1. Stego 1.bmp
2. Stego 2.bmp
3. STEG3.bmp
4. Stego 3.bmp
5. Steg4.bmp

@pmccabe5

Ciphers and Hashing

Tue, 03 Aug 2021 00:00:00 +0000

Ciphers and Hashing

Matrials for the Meeting

Ciphers

Practice: cipherChallenge.txt

What are ciphers?

Cipher- a method to transform text to hide its meaning (Merriam-Webster def. 2)
Types of ciphers (there are a lot but here are some common ones):
- Caesar
- Vigenere
- Decimal
- Base64
- Binary
- Hex
- Baconian
- And more!

Decoding Ciphers:

Methods:
- Scripting (Python, BASH, etc.)
- Through the Web:

Hashing and Password Hashing:

Practice: hashChallenge.txt

What is Hashing?

Short Answer: a more secure cipher that is irreversible
Long Answer: It’s a way to remap the values of a string for secure transmission and file integrity (think of computer forensics) Example Hashes: see the crypto.zip file “hashSignatures.txt”
How to use file integrity: md5sum <file>, sha[1, 256, 384, 512]sum <file>
- Example - ParrotOS md5 checksum
  - Parrot Security 4.7 x64 (iso) - 97b80f3f05cb48aab61c59586e11a49a
How to Calculate Hashes

Identifying Hashes:

via CLI: hash-identifier <single hash>
via Web
You can put hashes of the same type in a file and crack all at once

Cracking Hashes:

Bash and Python Scripting

Mon, 02 Aug 2021 00:00:00 +0000

Bash and Python Scripting

Bourne Again Shell (Bash)

The Basics

Shabang: #!/bin/bash
How to run bash scripts:
Make sure the file is executable:
- ls -alth and check for an x flag
If it isn’t executable:
- chmod +x <filename.sh>
- chmod 777 <filename.sh>
bash <filename.sh>
./<filename.sh>

Variables

Conventions:

UPPERCASE= value/string/output from a command
Example: NAME=“Your Name”
Variabe usage:

echo “My name is $NAME”
echo “My name is ${NAME}, hello”

Reading User Input:

# !/bin/bash
#Read user data
echo "Please enter your full name: "
read FIRSTNAME LASTNAME	
echo "Your name is $FIRSTNAME $LASTNAME"

Positional Parameters:

#!/bin/bash
#positional parameters
echo "Execution of script $0"
echo "Enter the name of the user: $1"
#add user
adduser --home /$1 $1

Menus:

#!/bin/bash
#menus
echo "Welcome to Bob's Burgers"
echo "Please choose what you want to eat: "
meals="Burger Fries"
select option in $meals; do
	echo "The selected option is $REPLY"
	echo "The selected meal is $option"
done

Conditionals:

#!/bin/bash
#if/if-else
NAME="Patrick"
if [ "$NAME" = "Patrick" ];
then
	echo "Welcome $NAME"
fi
echo "Enter username: "
read USERNAME
if [ "$USERNAME" = "Patrick" ];
then
	echo "Welcome $USERNAME"
else
	echo "Invalid username please register an account"
fi

Loops:

#!/bin/bash
#for loops
for NAMES in $(cat names.txt); do
	echo "The name is $NAMES"
done

Functions:

#!/bin/bash
#functions
function shadowtest(){
	if [ -e /etc/shadow ];
	then
		echo "yes it exists"
	else
		echo "Nope"
	fi
}
function testpwd(){
	if [ -e /etc/passwd ];
	then
		echo "yes it exists"
	else
		echo "Nope"
	fi
}
shadowtest
testpwd

Having some fun with Bash:

Manual `ping` Sweeper:

#!/bin/bash
#ping sweep script
echo "Please enter your subnet: "
read SUBNET
for IP in $(seq 1 254); do 
	ping -c 1 $SUBNET.$IP
done

Password Generator with the `SSL` Library

#!/bin/bash
#simple password generator
echo "Enter the length of the password: "
read LENGTH 
for P in $(seq 1); 
do
	openssl rand -base64 48 | cut -c1-$LENGTH
done

File Encryptor/Decryotor:

#!/bin/bash
#file encrypter/decrypter
echo "This is a simple file encrypter/decrypter"
echo "Please choose what you want to do"
choice="Encrypt Decrypt"
select option in $choice; do
	if [ $REPLY = 1 ];
	then
		echo "You have selected encryption"
		echo "Please enter the file name"
		read file;
		gpg -c $file
		echo "The file has been encrypted"

 else
 echo "You have selected decryption"
 echo "Please enter the file name"
 read file2;
 gpg -d $file2
 echo "The file has been decrypted"
 fi
 done

DNS Reverse Lookup:

#!/bin/bash
echo "Please enter your subnet: "
read SUBNET
for IP in $(seq 1 254); do
	dig -x $SUBNET.$ip | grep $IP >> dns.txt;
done

Python Scripting

Basics:

If running via command line shabang: #!/bin/python
- IDEs:
  - IDLE
  - Pycharm

Variables:

Declaration:

Single value: test = 5
Array: test = [1, dog, 2.5]

Reading User Input:

userInput = input(“Enter a number here: ”)
print(“Your number is: ” + str(userInput))

Conditionals:

if test == true:
 print("It's true!")
elif test == false:
 print("Its false!")
else:
 print("Something is wrong")

Loops:

For loop:

for i in range(0, 5, 1):
 print(i) 
for item in arr:
	print(item)

While loop:

i = 0
while i < 5:
	print(i)
	i = i + 1

Functions:

def firstFun(x, y):
	return x + y


def main():
	variable = firstFun(5, 10)
	print(‘Variable = ’ + str(variable))
main()

The Cool Stuff:

Manual Port Scanner

#!/usr/bin/python3
import socket
host = input("Enter the host: ")
maxport = int(input("Enter the max port to scan: "))
def portScanner():
 for port in range(1, maxport + 1):
 s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
 s.settimeout(10)
 result = s.connect_ex((host, port))
 if result == 0:
 print("Port " + str(port) + " is open")
 s.close()
portScanner()

OS Library:

import os
def main():
 print(os.getcwd())
 # os.chdir("/Users/patrickmccabe/Desktop/")
 # print(os.listdir())
 # os.rmdir("Test1")
 """for dirpath, dirnames, filenames in os.walk("/Users/patrickmccabe/Desktop/"):
 print("Current path:", dirpath)
 print("Directories:", dirnames)
 print("Files:", filenames)
 print()"""
 # print("Home: ", os.environ.get('HOME'))
 # os.path.join(os.environ.get('HOME'), "test.txt")
 print(os.path.basename('/usr/share'))
 print(os.path.dirname('/usr/share'))
 print(os.path.split('/usr/share'))
 print(os.path.exists('/usr/share'))
 print(os.path.isdir('/usr/share'))
 print(os.path.isfile('/usr/share'))
 print(os.path.splitext('/usr/share'))
main()

Some Scapy Fun (Please, please be careful with this and only use it in an environment with permission):

IP Spoof: send(IP(src=“<attacker IP>”, dst=“<target IP>”)/ICMP()/“Hello world”)
Network Sniffing: sniff(iface=“<interface>”, prn=lambda x:x.summary)
BE CAREFUL WITH THIS NEXT ONE
DOS Attack: send(IP(src=“attacker IP”, dst=“<target>”)/TCP(sport=444, dport=444), count=10000)

@pmccabe5

SECCDC Champions, Headed to Nationals

Wed, 21 Apr 2021 00:00:00 +0000

After winning the Southeast regional competition (SECCDC) against 23 other schools, our Cyber Defense Team advanced to the National Collegiate Cyber Defense Competition (CCDC) — the largest college-level cyber defense competition in the country. Eight members, led by captain Patrick McCabe, faced off against teams from nine other universities starting April 23, 2021, defending mock networks against live attacks from industry professionals while juggling business tasks at the same time.

NCL Preseason Tools

Tue, 23 Mar 2021 00:00:00 +0000

NCL Preseason Tools

Cryptography

Rumkin Chipher Tools
- Basic chipers
  - Ceaser
  - Rot13
  - etc
Boxentriq Code Breaking Tools
- More polished chipher tools
  - Railfence
  - Chiper detection/bruteforce
  - Frequency analysis
Digital Invisible Ink Toolkit
- Image stego toolkit
- Handles most of NCL stego challenges
Steganography Toolkit Docker Image
- A collection of stego tools that can be helpful for more difficult challenges

Network Traffic Analysis

Wireshark
- Packet analysis
tshark
- Terminal based Wireshark
  - Filter out data and write to file
Scapy
- Python packet manipulation library
  - Packet crafting and dissection

Enumeration and Exploitation

Cutter
- Reverse engineering platform
  - Dissassembly
  - Decompiling
  - Debugging/Emulation
(The GNU Project Debugger - GDB)[https://www.gnu.org/software/gdb/]
- See what’s going on inside an executing program
ltrace Command
- Intercepts a program’s dynamic library calls, system calls, and received signals
strace Command
- Intercepts a program’s system calls and received signals

Web Application Security

Tue, 23 Mar 2021 00:00:00 +0000

Web applicaions have become increasingly complex. And with complexity comes vulnerabilities. Web applicaions are a huge target at both the client and server side. Code injection can allow a threat actor to take over a web server and/or steal valuable information, and cross site scripting vulnerabilites can allow an attacker to execute code in client web brosers. Given all of this it has become vital for security professionals to have an understanding of web app security.

Computer Networking Basics

Wed, 03 Mar 2021 00:00:00 +0000

March 3 2021 Meeting

In this meeting we discussed the basics of computer networking as well as some important software to know:

Docker & Kubernetes

Wed, 10 Feb 2021 00:00:00 +0000

February 10 2021 Meeting

In this meeting we discussed Docker and Kubernetes. For more information check out the links below:

Ansible

Wed, 03 Feb 2021 00:00:00 +0000

February 3 2021 Meeting

In this meeting we discussed Ansible, and open source configuration management, provisioning, and deployment tool. Here’s some helpful resources for working with and learning Ansible:

Lab Setup

Wed, 20 Jan 2021 00:00:00 +0000

COFC DevOPS: Setup

Github Repository

Goals:

Set up 3 virtual machines
- 1 Ubuntu (Command Machine)
- 2 CentOS “webservers”
Set up an non-root user that is a part of the wheel group on our webservers

Prerequisites:

VirtualBox
ISOs:
- Ubuntu 20.04 Minimal
- Alternate Download

Configuration Steps:

Download Virtualbox
Download ISOs
We will want to have the following configurations for our three VMs:
- 16 GB of storage per VM
- 1024 MB of RAM per VM
- Network will be set to Host Only Adapter
We will set up the Ubuntu Server first and then the CentOS Servers
- We will need to update our repositories and packages that are installed on the system with the following commands:
  - sudo apt update: update the software repositories
  - sudo apt full-upgrade: download and upgrade the software packages
- Some notes for the Ubuntu Server:
  - We will need to check to see if the following packages are installed:
    - git
    - ansible
    - net-tools
    - python
    - python3
  - We will need to make sure we start the SSH service and enable it on startup: sudo systemctl start ssh; sudo systemctl enable ssh
  - We will need to create a non-root user for the VM:
    - Create user: sudo useradd [username] [for this lab we will use devops as the non-root user]
    - Set password for the user: passwd devops
    - Add the user to the sudo group: sudo usermod -aG sudo devops

Book

Linux Basics for Hackers

Zach Dayton's DFIR Presentation

Wed, 16 Sep 2020 00:00:00 +0000

In this meeting Zach Dayton, one of our industry contacts, gave a presentation on Digital Forensics and Incidence Response (DFIR).

The slides can be found here.

Virtualization

Wed, 09 Sep 2020 00:00:00 +0000

September 9 2020 Meeting

Virtualization and Bash lead by Patrick McCabe
Docker Containerization lead by Matt Walter

Introduction to Virtualization

What is required?

A computer
Internet connection
Patience (Depending on the OS, current packages will be downloaded during the install)

What is Virtualization?

Virtualization is a way to run other Operating Systems (OS) on top of your host’s (computer’s) operating system. The way we virtualize an OS is through the use of a hypervisor. There are two types of hypervisors. They are the following:

Join Our Discord Server!

Fri, 04 Sep 2020 00:00:00 +0000

Hello, again!

We are currently transitioning away from slack to use discord as our primary means of communication.

Join us here: https://discord.gg/uBCwjeG

Our Github Page

Wed, 19 Aug 2020 00:00:00 +0000

For those looking for the link, here is the link to our club github page. Feel free to contribute make PR’s for anything you’d like to add. :)

If you are an active club member we will also add you to our GitHub organization upon request.

Github Link

https://github.com/cofcsecurity

Welcome!

Wed, 12 Aug 2020 00:00:00 +0000

Hello everyone, welcome to the new Cybersecurity Club Website. We hope you all find it useful, and enjoy its look!

Also, if you have any suggestions for what we should put here, let us know!

This site is a work in progress and we will constantly be looking to improve it!

Mac Virtual Machine Installation Guide

Mon, 01 Jan 0001 00:00:00 +0000

MacBook M1, M2, M3 instructions are below. Not sure which chip you have? Ask in Discord and we can help you check.

Step 1: Install software to run virtual machines

Apple Silicon has a different CPU architecture, so it needs different virtualization software to actually use your Mac’s hardware. We use UTM (Universal Turing Machine). It’s on the App Store, but that copy costs money — the link below gets you the same app for free, unless you’d like to support the developers directly.

Past Schedules

Mon, 01 Jan 0001 00:00:00 +0000

Fall 2023 Schedule

Meetings

Week	Date	Topic	Notes
1	Sep. 7	Getting Started with Virtual Machines	-
2	Sep. 12	What is Cyber Security	-
2	Sep. 14	Using your Virtual Machines	-
3	Sep. 19	Introduction to Networking	-
3	Sep. 21	SSH and RDP and The Range	-
4	Sep. 26	Intro to Linux	-
4	Sep. 28	Linux Deep Dive and The Range	-
5	Oct. 3	Intro to Windows	-
5	Oct. 5	Windows and The Range	-
6	Oct. 10	Offensive Security	-
6	Oct. 12	HiveStorm Practice	-
7	Oct. 17	Fall Break No Meeting	-
7	Oct. 19	The Range Practice	-
8	Oct. 24	Cryptology	-
8	Oct. 26	The Range	-
9	Oct. 31	Happy Halloween No Meeting	-
9	Nov. 2	Firewalls on End Devices	-
10	Nov. 7	Defensive Security Lab	-
10	Nov. 9	The Range Practice	-
11	Nov. 14	The Dark Web	-
11	Nov. 16	Range Practice (Last Meeting Of Semester)	-

Spring 2022 Schedule

Meetings

Week	Date	Topic	Notes
1	-	Classes Begin	-
2	Jan. 18	Getting Started	Plans for Spring
3	Jan. 25	SECCDC Prep	-
4	Feb. 1	SECCDC Prep	-
5	Feb. 8	Firewalls	-
6	Feb. 15	EDR	Endpoint Detection and Response with Wazuh
7	Feb. 22	Cyber Discussions	-
8	Mar. 1	SECCDC Practice	-
9	-	Spring Break	SECCDC
10	Mar. 15	SECCDC Debrief	-
11	Mar. 22	-	-
12	Mar. 29	NCL Practice	-
13	Apr. 5	PCDC Practice	-
14	Apr. 12	PCDC Debrief	-
15	Apr. 19	Final Meeting of Spring	-

Other Important Dates

Date	Note
Jan. 15	SECCDC Registration Deadline
Jan. 31	NCL Registration Opens
Feb. 12	SECCDC Qualifier
Mar. 9-10	SECCDC Regional
Mar. 28 - Apr. 4	NCL Preseason
Apr. 8-10	NCL Individual Game
Apr. 10	PCDC
Apr. 22-24	NCL Team Game

Fall 2021 Schedule

Meetings

Week	Date	Topic	Notes
1	-	-	-
2	Aug. 31	Getting Started	Introduction and planning
3	Sep. 7	The Basics	Virtualization and Kali
4	Sep. 14	Cryptography	Encryption, hashing, and cracking
5	Sep. 21	Computer Networks	-
6	Sep. 28	Guest Speaker	Personal and Application Security
7	Oct. 5	NCL Tune Up	Preseason prep
8	Oct. 12	Cyber Discussions	-
9	Oct. 19	NCL Practice	Preseason review and individual game prep
10	Oct. 26	Infrastructure as Code	-
11	Nov. 2	Guest Speaker	DevOps
12	Nov. 9	NCL Review	Individual game and team game review
13	Nov. 16	Final Meeting of Fall	-

Other

Date	Note
Aug. 23	NCL Registration Opens
Oct. 2	Raymond James CTF
Oct. 9	Hivestorm Competition
Oct. 11-18	NCL Preseason
Oct. 22-24	NCL Individual Game
Nov. 5-7	NCL Team Game

Spring 2021 Schedule

Week	General Topic	Advanced Topic	Date	Special Notes
01	Introduction and Planning	-	Jan. 13	7:30 pm
02	Virtualization	-	Jan. 20	-
03	Scripting	-	Jan. 27	-
04	Ansible	-	Feb. 03	-
05	Docker/Kubernetes	-	Feb. 10	-
06	Cyber Discussion	-	Feb. 17	-
08	What is a Computer Network	-	Feb. 24	-
09	Network Security	-	Mar. 03	-
10	NCL Tune Up	-	Mar. 10	-
11	Cyber Discussion	-	Mar. 17	-
12	Web App Security	-	Mar. 24	-
13	Splunk	-	Mar. 31	-
14	Defense by Offense	-	Apr. 07	-
15	End of Year Party	-	Apr. 14	-

Fall 2020 Schedule

Week	General Topic	Advanced Topic	Date	Special Notes
1	Intro to club	none	Sept. 4	2:00 pm
2	Introduction to Virtualization and Bash	Docker	Sept. 9	None
3	Recon	Forensics (Zach Dayton)	Sept. 16	NCL Gym Opens
4	Ciphers & Hashing	Multi-layer hashes/encrypted files/fingerprinting/hash collisions	Sept. 23	None
5	Intro to Networking	Advanced Networking	Sept. 30	None
6	NCL Training	NCL Refresh	Oct. 7	None
8	Mini BSides	None	Oct. 14	NCL Preseason October 12 - 19
9	Scripting	Scapy	Oct. 21	NCL October 23 - 25
10	Exploitation	None	Oct. 28	None
11	Web Apps	None	Nov. 4	NCL Postseason Nov. 6 - 8
12	Zoom Party CTF	None	Nov. 11	None
13	Planning	None	Nov. 18	Officers Only

VirtualBox and Hyper-V Virtual Machine Setup

Mon, 01 Jan 0001 00:00:00 +0000

VirtualBox VM setup on Windows

Most Windows systems now have enough resources to run both a hypervisor and a VM. The main constraint is disk space — make sure you have room for the OS image plus extra storage. If you plan on running intensive services inside the VM, you’ll also want to bump up the RAM and CPU cores it’s allowed to use. Questions any time — ask in Discord.

Windows Virtual Machine Installation Guide

Mon, 01 Jan 0001 00:00:00 +0000

For Windows

Step 1: Install VirtualBox

First, install VirtualBox — this is the software that runs the virtual machine.

Link: virtualbox.org/wiki/Downloads

Click the download button circled above. Once installed, double-click the file shown below.

Then follow all the prompts VirtualBox gives you.

Step 2: Install 7-Zip

We need 7-Zip to extract a download that was compressed using it — same idea as a regular zip folder, just a different tool.

CofC Cybersecurity Club

Go Concurrency and Bounded Concurrency Patterns

Introduction

Networks Introduction

Dynamic Host Configuration Protocol (DHCP)

Linux Knowledge

Overview

Command Line

Bash

Secure Shell (SSH)

Lock Picking

Lock Picking

Background

How does it Work?

How to Pick Locks

Tools of the Trade

Tools of the Trade

Setting up Your Box

Personal Security

Information Gathering

Information Gathering

Google Dorks

Network Recon

nmap:

Other Useful Tools:

DNS Recon:

Powershell

Powershell

Get Powershell

Powershell Basics:

Variables:

Operations:

Addition:

Equality:

Booleans:

Conditionals:

Loops:

Functions:

The Cool Stuff

TCP Listener

Port Scanning

Downgrading Powershell:

Time Stomping:

The Duck…

General:

Use Cases:

How to get your hands on one:

Practice

Image Forensics

Image Forensics

How to Extract Metadata from Files

CLI

Steganography

Ciphers and Hashing

Ciphers and Hashing

Ciphers

What are ciphers?

Decoding Ciphers:

Hashing and Password Hashing:

What is Hashing?

Identifying Hashes:

Cracking Hashes:

Bash and Python Scripting

Bash and Python Scripting

Bourne Again Shell (Bash)

The Basics

Variables

Conventions:

Reading User Input:

Positional Parameters:

Menus:

Conditionals:

Loops:

Functions:

Having some fun with Bash:

Manual ping Sweeper:

Password Generator with the SSL Library

File Encryptor/Decryotor:

DNS Reverse Lookup:

Python Scripting

Manual `ping` Sweeper:

Password Generator with the `SSL` Library