Hugging Face's logo

Spaces:
scotty055
/
security-quickcheat-pro
Running

App Files Community
security-quickcheat-pro / revision.html
scotty055's picture
scotty055
can you remove the linux cli section from the revision sheet and expand the Lab exercise reminder to explain that we covered online and offline password attacks. Explain breifly what each is then include a short commandline reference for hydra, john (john the ripper) and windows powershell password policy enumeration and configuration
c53fc4c verified
Raw History Blame Contribute Delete
10.9 kB
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Security+ Revision Guide | QuickCheat Pro</title>
<script src="https://cdn.tailwindcss.com"></script>
<script src="https://unpkg.com/feather-icons"></script>
<style>
@media print {
.no-print {
display: none !important;
}
body {
padding: 0;
margin: 0;
background: white;
color: black;
}
.print-section {
page-break-inside: avoid;
}
}
.info-card {
background: linear-gradient(145deg, #f1f5f9, #e2e8f0);
border-radius: 0.5rem;
}
</style>
</head>
<body class="bg-gray-50 text-gray-800 font-sans">
<div class="container mx-auto px-4 py-8 max-w-4xl">
<!-- Header -->
<header class="mb-8 text-center no-print">
<h1 class="text-4xl font-bold text-primary mb-2">Security+ Revision Guide</h1>
<p class="text-lg text-secondary">Key concepts and threat actor profiles</p>
<div class="flex justify-center gap-4 mt-4">
<button onclick="window.print()" class="px-6 py-2 bg-primary text-white rounded-lg hover:bg-blue-700 transition flex items-center">
<i data-feather="printer" class="mr-2"></i> Print Guide
</button>
<a href="index.html" class="px-6 py-2 bg-secondary text-white rounded-lg hover:bg-green-700 transition flex items-center">
<i data-feather="arrow-left" class="mr-2"></i> Back to Main
</a>
</div>
</header>
<!-- Main Content -->
<main class="bg-white shadow-lg rounded-lg p-6 print:p-0">
<!-- Security Fundamentals Section -->
<section class="mb-10 print-section">
<h2 class="text-2xl font-bold text-primary border-b-2 border-primary pb-2 mb-4 flex items-center">
<i data-feather="shield" class="mr-2"></i> Security Fundamentals
</h2>
<div class="grid grid-cols-1 md:grid-cols-2 gap-6">
<div>
<h3 class="font-semibold text-secondary mb-2">The CIA Triad</h3>
<ul class="list-disc pl-5 space-y-2">
<li><strong>Confidentiality:</strong> Information accessible only to authorized users</li>
<li><strong>Integrity:</strong> Data can only be modified by authorized users</li>
<li><strong>Availability:</strong> Systems accessible when needed by authorized users</li>
<li><strong>Non-repudiation:</strong> Activities are logged and undeniable</li>
</ul>
</div>
<div class="info-card p-4">
<h3 class="font-semibold text-secondary mb-2">AAA Security Framework</h3>
<ol class="list-decimal pl-5 space-y-2">
<li><strong>Authentication:</strong> Verifying user identity (passwords, 2FA)</li>
<li><strong>Authorization:</strong> Determining access privileges</li>
<li><strong>Accounting:</strong> Tracking user activities and access</li>
</ol>
</div>
</div>
</section>
<!-- Threat Actors Section -->
<section class="mb-10 print-section">
<h2 class="text-2xl font-bold text-primary border-b-2 border-primary pb-2 mb-4 flex items-center">
<i data-feather="users" class="mr-2"></i> Threat Actor Profiles
</h2>
<div class="grid grid-cols-1 md:grid-cols-2 gap-4">
<div class="bg-gray-50 p-4 rounded-lg">
<h3 class="font-semibold text-secondary mb-2">Nation-State/APTs</h3>
<ul class="list-disc pl-5 space-y-1">
<li>Highly resourceful and sophisticated</li>
<li>Primary focus: Intelligence gathering and critical infrastructure</li>
<li>Use consistent TTPs (Tactics, Techniques, Procedures)</li>
<li>Mitre Att&ck framework helps track their methods</li>
</ul>
</div>
<div class="bg-gray-50 p-4 rounded-lg">
<h3 class="font-semibold text-secondary mb-2">Script Kiddies</h3>
<ul class="list-disc pl-5 space-y-1">
<li>Low sophistication but unpredictable</li>
<li>Use pre-made exploit tools</li>
<li>Motivations vary: humor, disruption, or learning</li>
<li>Often target public platforms and websites</li>
</ul>
</div>
<div class="bg-gray-50 p-4 rounded-lg">
<h3 class="font-semibold text-secondary mb-2">Insider Threats</h3>
<ul class="list-disc pl-5 space-y-1">
<li>May be malicious or accidental</li>
<li>Have legitimate system access</li>
<li>Motivations: grievance, politics, or financial need</li>
<li>Particularly dangerous due to system knowledge</li>
</ul>
</div>
<div class="bg-gray-50 p-4 rounded-lg">
<h3 class="font-semibold text-secondary mb-2">Cyber Criminals</h3>
<ul class="list-disc pl-5 space-y-1">
<li>Financially motivated</li>
<li>Range from opportunistic to highly targeted</li>
<li>Access black markets for tools and credentials</li>
<li>Use phishing, scams, and exploit kits</li>
</ul>
</div>
</div>
</section>
<!-- Ethical Considerations Section -->
<section class="print-section">
<h2 class="text-2xl font-bold text-primary border-b-2 border-primary pb-2 mb-4 flex items-center">
<i data-feather="alert-triangle" class="mr-2"></i> Ethical & Legal Considerations
</h2>
<div class="bg-yellow-50 p-4 rounded-lg border border-yellow-200">
<h3 class="font-semibold text-yellow-600 mb-2">Important Disclaimer</h3>
<ul class="list-disc pl-5 space-y-2">
<li>Security skills should only be used on systems you're authorized to assess</li>
<li>Unauthorized access is unethical and illegal</li>
<li>Always obtain proper authorization before testing</li>
<li>Follow all applicable laws and organizational policies</li>
</ul>
</div>
<div class="mt-4">
<h3 class="font-semibold text-secondary mb-2">Password Security Lab Exercises</h3>
<div class="mb-4">
<h4 class="font-semibold text-gray-700 mb-1">Online Password Attacks</h4>
<p class="mb-2">Attempting to guess passwords against live services (e.g., SSH, FTP, web forms).</p>
<div class="code-block bg-gray-800 text-gray-100 p-3 rounded-lg text-sm mb-3">
<span class="text-green-300"># Hydra SSH brute force example</span><br>
<span class="text-blue-300">hydra</span> -l username -P wordlist.txt ssh://192.168.1.100<br>
<span class="text-green-300"># Hydra HTTP form attack</span><br>
<span class="text-blue-300">hydra</span> -l admin -P passwords.txt 192.168.1.100 http-post-form "/login.php:user=^USER^&pass=^PASS^:Invalid"
</div>
</div>
<div class="mb-4">
<h4 class="font-semibold text-gray-700 mb-1">Offline Password Attacks</h4>
<p class="mb-2">Cracking password hashes obtained from compromised systems.</p>
<div class="code-block bg-gray-800 text-gray-100 p-3 rounded-lg text-sm mb-3">
<span class="text-green-300"># John the Ripper basic hash cracking</span><br>
<span class="text-blue-300">john</span> --wordlist=rockyou.txt hashes.txt<br>
<span class="text-green-300"># John with rule-based attack</span><br>
<span class="text-blue-300">john</span> --rules --wordlist=dict.txt hashes.txt
</div>
</div>
<div>
<h4 class="font-semibold text-gray-700 mb-1">Windows Password Policy</h4>
<p class="mb-2">Managing password policies in Windows environments.</p>
<div class="code-block bg-gray-800 text-gray-100 p-3 rounded-lg text-sm">
<span class="text-green-300"># View password policy settings</span><br>
<span class="text-blue-300">Get-ADDefaultDomainPasswordPolicy</span><br>
<span class="text-green-300"># Set minimum password length</span><br>
<span class="text-blue-300">Set-ADDefaultDomainPasswordPolicy</span> -MinPasswordLength 12<br>
<span class="text-green-300"># Enforce password history</span><br>
<span class="text-blue-300">Set-ADDefaultDomainPasswordPolicy</span> -PasswordHistoryCount 24
</div>
</div>
</div>
</section>
</main>
<style>
.code-block {
background-color: #1e293b;
color: #f8fafc;
border-radius: 0.5rem;
font-family: monospace;
}
</style>
<!-- Footer -->
<footer class="mt-12 text-center text-sm text-gray-500 no-print">
<p>Security+ Revision Guide - QuickCheat Pro</p>
<p class="mt-1">For optimal printing, use Chrome/Firefox and select "Background graphics" in print settings</p>
</footer>
</div>
<script>
feather.replace();
</script>
</body>
</html>