Security Fundamentals
The CIA Triad
- Confidentiality: Information accessible only to authorized users
- Integrity: Data can only be modified by authorized users
- Availability: Systems accessible when needed by authorized users
- Non-repudiation: Activities are logged and undeniable
AAA Security Framework
- Authentication: Verifying user identity (passwords, 2FA)
- Authorization: Determining access privileges
- Accounting: Tracking user activities and access
Threat Actor Profiles
Nation-State/APTs
- Highly resourceful and sophisticated
- Primary focus: Intelligence gathering and critical infrastructure
- Use consistent TTPs (Tactics, Techniques, Procedures)
- Mitre Att&ck framework helps track their methods
Script Kiddies
- Low sophistication but unpredictable
- Use pre-made exploit tools
- Motivations vary: humor, disruption, or learning
- Often target public platforms and websites
Insider Threats
- May be malicious or accidental
- Have legitimate system access
- Motivations: grievance, politics, or financial need
- Particularly dangerous due to system knowledge
Cyber Criminals
- Financially motivated
- Range from opportunistic to highly targeted
- Access black markets for tools and credentials
- Use phishing, scams, and exploit kits
Ethical & Legal Considerations
Important Disclaimer
- Security skills should only be used on systems you're authorized to assess
- Unauthorized access is unethical and illegal
- Always obtain proper authorization before testing
- Follow all applicable laws and organizational policies
Password Security Lab Exercises
Online Password Attacks
Attempting to guess passwords against live services (e.g., SSH, FTP, web forms).
# Hydra SSH brute force example
hydra -l username -P wordlist.txt ssh://192.168.1.100
# Hydra HTTP form attack
hydra -l admin -P passwords.txt 192.168.1.100 http-post-form "/login.php:user=^USER^&pass=^PASS^:Invalid"
hydra -l username -P wordlist.txt ssh://192.168.1.100
# Hydra HTTP form attack
hydra -l admin -P passwords.txt 192.168.1.100 http-post-form "/login.php:user=^USER^&pass=^PASS^:Invalid"
Offline Password Attacks
Cracking password hashes obtained from compromised systems.
# John the Ripper basic hash cracking
john --wordlist=rockyou.txt hashes.txt
# John with rule-based attack
john --rules --wordlist=dict.txt hashes.txt
john --wordlist=rockyou.txt hashes.txt
# John with rule-based attack
john --rules --wordlist=dict.txt hashes.txt
Windows Password Policy
Managing password policies in Windows environments.
# View password policy settings
Get-ADDefaultDomainPasswordPolicy
# Set minimum password length
Set-ADDefaultDomainPasswordPolicy -MinPasswordLength 12
# Enforce password history
Set-ADDefaultDomainPasswordPolicy -PasswordHistoryCount 24
Get-ADDefaultDomainPasswordPolicy
# Set minimum password length
Set-ADDefaultDomainPasswordPolicy -MinPasswordLength 12
# Enforce password history
Set-ADDefaultDomainPasswordPolicy -PasswordHistoryCount 24