CyberCenturion X
presented by Ben Butterworth
slides: https://cybercenturion.pages.dev
CyberCenturion event details
Software Engineer at Helsing
Specifically:
CyberCenturion?
Virtual machine to simulate an insecure machine
Virtual machine image
- A re-usable set of applications and OS. Isolated from your machine.
- Download and run using tools like VMWare Workstation or VirtualBox
Tasks and skills
- Answer questions
- Fix vulnerabilities
- Find and remove bad software, leave good software.
- Check configuration. Find and fix bad config.
- Update outdated software (e.g. an old version on NGINX, Apache, PHP)
- Enable and enforce firewall rules.
Quick feedback loop
- Make 1 small change.
- Check it.
- Did it make it better or worse?
- Keep or undo.
- Repeat
From the CyberCenturion video
Gather points
Spiderman and ethics
Rules
- Teams of 2, 3 or 4 people (+1 backup)
- 4 hours from a 6 hour window on 1 day.
- You can use the internet at all times.
- I can't help during the competition.
Ideally 1 computer / person
- Only one instance of each image may be open at any one time. You should still have 1 computer each.
Prepare to win
What's different in 2023?
ChatGPT
Get more comfortable &
increase chances of winning
your next few days...
Do the practice round. Get your unique identifier Mrs Pourjam.
Make sure your computer meets the hardware requirements
The image connects to scoring servers. You need reliable internet.
Run images
See slide 6, 7 and 8 of Intro slides. Enable virtualization and make sure your machine meets hardware requirements. e.g. 8GB ram or more.
Linux familiarisation
Run a Linux Ubuntu VM on your machine. Then read "Introduction to Linux (Ubuntu)". Try all the commands on slide 9. If you break something, you can delete the VM and create a new one.
Free cyber security VMs:
Metasploitable
Optional
- Read resources provided by CyberCenturion:
- Basics of Cyber Security
- An introduction to Windows 10
- Windows Advanced Cyber Security
Interactive demonstration #1
on Windows 11
Interactive demonstration #2
on Debian Linux. Using VMWare workstation and practice image 0625Ubu.zip
Try list view to pick the newest images
On mac machines?
See instructions: https://s3.amazonaws.com/UserGuides/CyberPatriot+-+Mac+Instructions.pdf
Advanced users: VirtualBox on macOS
- VirtualBox test build on new mac (ARM) with Metasploitable
- Very buggy test build
Any questions?
CyberCenturion X presented by Ben Butterworth slides: https://cybercenturion.pages.dev CyberCenturion event details X means the 10th edition of this cybersecurity competition. images on these slides were generated with replicate.com