CS496/596: Network Security
Location: EB 102 (TR 14:00-15:50)
Instructor: D. Kevin McGrath
- PDX username: dmcgrath
- Office hours:
Teaching Assistant: Emma Yakley
Recorded Lectures: These will be made available via [MediaSpace] as they occur. Login required.
Homework
Each homework will build in some fashion on the previous homework. This may be conceptually, but may be directly. These aren’t your typical “write answers to questions” type assignments, but rather are intended to be more hands-on. Nearly all the work I’m asking you to do is taken from tasks I had to perform professionally as a security vulnerability engineer. The first assignment will be to get the environment set up and configured. Subsequent assignments will build on this.
Submission
All work will be submitted via MarkDown documents within an internal gitlab repo. You will be using this repo for the rest of the term. This repo exists on the CECS intranet. You will need to add the TA and me to this repo as Developers. Grades and feedback will be done via a merge request from the TA.
Assignments
Pages
- Software configuration – not required, but possibly useful information on environment setup
tmuxconfig – configuration file fortmuxfrom the Software Configuration page- Powershell profile – powershell profile from the Software Configuration page
- Technical Writing – if unfamiliar with markdown or LaTeX, this page will help
- VM Setup on Windows
- VM Setup on macOS
- Kali configuration
- SSH setup – setting up SSH keys for use with the VM
- SSH Tunnel for Windows RDP – SSH tunneling trick we will be using in various places through the term
- Introduction to Networking – a brief introduction to networking concepts
- Introduction to network reconnaissance – a brief introduction to network reconnaissance and using nmap
- Cracking WiFi – a brief introduction to cracking WiFi
- Capturing packets – a brief introduction to capturing packets
- Using
wireshark– a brief introduction to usingwireshark - Introduction to
scapy– a brief introduction toscapy - 80 to 0 in Under 5 Seconds: Falsifying a Medical Patient’s Vitals – an article detailing a real-world attack on a medical device, including how he reversed the protocol (RWHAT).
- Defensive measures – a brief introduction to firewalls and IPS/IDS
- TunnelVision exploit against VPNs – an exploit a malicious network admin could use to render most VPNs useless.
- Ripple20 RH0 bug pcap file – a pcap file demonstrating the Ripple20 RH0 bug
- Ripple20 RH0 bug description – a description of the Ripple20 RH0 bug
Useful links for learning
- The Art of Packet Crafting with Scapy
scapycheatsheetnmapcheatsheettmuxcheatsheet- Linux Handbook on
tmux - Markdown
- The C Book
- The GNU
makemanual - Managing projects with
make - The
chmodcalculator - The Python tutor
- The Linux Command Line (Direct PDF link)
- Adventures with the Linux Command Line
- The Linux Development Platform
- gdb tutorial
- gef manual