Security DungeonKrátke video z nášho včerajšieho workshopu pre #AjTyvIT #SecurityGirl
RE: https://infosec.exchange/@malwarelab_eu/116090625825285648
MalwareLab (@[email protected])
Attached: 1 video Yesterday I led a half-day workshop for a group of high school students. The content was purely practical: a lot of labs and hands-on exercises and challenges about computer networks, #networktrafficanalysis and #cybersecurity. Girls made their own Ethernet cables to connect to our lab network. Then they analyzed common network protocols and their privacy issues and how the browser settings can affect the amount of sensitive information in the network traffic. Pro tip: together with HTTPS-Only Mode in all windows, also enable DNS over HTTPS using Increased Protection or Max Protection. Pro tip 2: even with those hardened settings, it is often possible to see which websites the user visits, because of TLS SNI or TLS Certificates After that, the girls had the opportunity to try CTF-like activity in the lab network full of old #MikroTik and #Ubiquiti devices and virtual machines with various services exposed. A little bit off-topic: This was the first workshop I completely led using my old #ThinkPad with #FreeBSD #MayTheSourceBeWithYou #PCAPorItDidntHappen #education #womeninstem #womenintech #SecurityGirl #AjTyvIT #wireshark #CTF #handsonlearning #learningbydoing
MalwareLab