1/29/2016 Video Writeup EFF-CTF 2016

For a while I've been trying to understand a little bit about reversing and low level stuff, sometimes it becomes a little difficult but if you want you can, so this post it is to highlight a youtube channel that I've been checking in this vacations it the Liveoverflow's great videos that solves a few reversing challenges. As you know the most recent security conference was  the Usenix enigma as it's commonly in this kind of Cons there was a Capture The Flag , The EFF was runing a hacking contest at Enigma!  The challenges included web hacking, binary analysis, cryptography challenges, and more.


So LiveOverflow solve this after a few hours and he posted this on his youtube channel, so here it is .

1/02/2015 Notes about Cyber Attacks

In this post I'd like to share with you  some  interesting notes that I've been collecting for a while, about cyberattacks and other cyber'put your word here lol' that we hear everyday in the news and maybe knowing that all the journalist and press in general are always doing mistakes in the usage of the words.

According to  the book "Inside Cyber Warfare"  This is an increasing field that has been taken as part of the patrimony of all nations.

There is a growing awareness of the vulnerability of a nation’s critical infrastructure to
network attack. Transportation, banking, telecommunications, and energy are among
the most vulnerable systems and may be subject to the following modes of attack:
• Insider threats
• Anonymous access to protected networks via the Internet and Supervisory Control
and Data Acquisition (SCADA)
• Counterfeit hardware
• Employee abuse of security guidelines leading to malware propagation inside the
firewall

So what would it happend if your country is under one cyber attack? What Would you do ?, here  is something that you could do assuming that everything is connected (knowing that this is happening right now with the Internet of Things concept ).

Keep this things :

1. A battery-powered radio capable of receiving NOAA alerts and two-way radios (walkie-talkies)
2. solar-powered or hand-cranked radio as well
3. Cash reserve should be kept within reach
4. Social Security cards and other essential documents should also be held in a secure container,since access to a computer won’t be guaranteed
5. Prepare a central point to speak with your family members take out power lines and cell phone towers

Online safety tips

 • Limit the amount of personal information you post on social media sites, chat sites, forums and online games.

• Know and use privacy settings provided on sites like Facebook and Twitter.

• Be suspicious of unknown links or requests sent through email or text messages. Don’t click on unknown links or answer strange questions sent to your mobile device, regardless of who the sender appears to be.

• In your email, turn off the option to automatically download attachments. Save and scan any attachments before opening them.

• Verify the authenticity of requests from companies or individuals by contacting them directly, especially if you are being asked to provide personal information.

• Pay close attention to website URLs. Malicious websites sometimes use a variation in common spelling (petfun.com instead of petfun.net, for example) to deceive unsuspecting computer users.

Links :

The History of Cyber Attacks Timeline: 

 http://www.nato.int/docu/review/2013/cyber/timeline/EN/index.htm

Wikipedia's definition :
https://en.wikipedia.org/wiki/Cyber-attack 

Norse's Map of Real time cyberattacks:
http://map.ipviking.com/

9/01/2014 Pwnables.kr

Well this post is to share with you an amazing site saw in #pwning channel ,I say that because in this site we can practice all the important aspects (Reversing, Programming, System Knowledge and Exploitation)it has a special thing where you need to know about Gnu/Linux Operative System and it is intended for students,professionals and enthusiast  of  Information Security.

The site is divided in four categories as it is explained below :

Toddler's Bottle: Tasks for beginners. Basic tasks for pwning. Somewhat educative.  Rookiss: These tasks suffers from typical rookie mistakes regarding computer security. Grotesque: These tasks are somewhat difficult to exploit, you need to buckle down and focus to solve these tasks. Hackers's Secret: Advanced system knowledge is required for pwning these tasks. Being smart isn't enough.

The learning process is part of you , here you'll need to do the proper homework , it can overcome the limitations imposed by the concept of tacit, also the fun thing is the key to pass some of the challenges.

Play Just for fun not for profit.