Hack The Box

Mm-hmm

... with Hack the Box, and a couple of guys from our, uh, from our team, uh, launched the whole, uh, spacecraft or satellite hacking track with Hack the Box.

I think it would be interesting for, for anyone who would like to start, uh, with space cyber security.

Uh, they could also give it a try and do some challenges.

I will make sure that we have links to Hack the Box in our show notes as well.

So, um, everyone who's listening who is interested and who wants to learn more can, can follow that along.

So, uh, Milenko and Andy, thank you both so much for not just joining me today, but truly for everything you're doing, uh, for space cyber understanding and the community in general.

We're a small company.

Why would a North Korean IT worker wanna come in and, and own our shit?" Um, I have a Hack, Hack The Box meetup tomorrow, and I use Zoom to connect to the br- jector, so nice to have it working.

That makes sense to fix it.

Makes sense.

We'll also put it below in the video description.

And another thing which is just published actually today while we are recording is our cooperation with Hack the Box.

We've developed nine challenges which are freely accessible on the different levels they have.

So you can also go on Hack the Box and do the satellite cybersecurity track there.

Okay, so that's huge, right? So

I can do the labs in the book.

Yes.

But I can also join Hack the Box, do the challenges for free and basically hack space systems.

Fads, you've put in a quick entry here.

So this is Warrambo Cyber and Hack the Box CTF.

Yeah,

so at Warrambo Wasiber, we are hosting our first CTF.

at ECU Journal Up on the 2nd of October from 9 a.m. to 4 p.m. in Building 18.

And this is in collaboration with Hack the Box.

So for anyone who doesn't know what a CTF is, it's a capture the flag event where you have to complete a few challenges and get points based on that.

So we're just encouraging it for our ladies who are part of the community, of the Warembu community, but anyone really who is interested in coming to play the CTF and see what that is all about.

When searching around for the error and the problems I was having, I ran across one of many lovely write-ups that are out there from our friend 0xDF.

It was a write-up for one of the Hack the Box challenges, I believe.

And it described my situation perfectly where it's like, Oh, you can't auth with the PFX because of PK in it? Well, then run these commands to kind of parse out that PFX file and create a .CRT and a .KEY file.

And then you can authenticate to LDAP with that and get an LDAP shell.

So, yeah.

uh that was always that was always fun and there was a blockbuster up the road and um yeah that was always uh fun and exciting go to the the video store now we just pick a u a streaming channel and off we go from there so uh oh a question popped in here for um this is from oka saris 86, what labs or entry points would you recommend for someone targeting IAM, identity access management? I will admit, I don't do a lot of the, I don't do the labs like Hack the Box or Try Hack Me or any of those.

But I, you know, either one of those, you know, if there's identity access management, you're going to be focusing on policies.

You're going to be focusing on the implementation aspects of it.

I don't have any direct recommendations for it.

I apologize.

It's not my, sorry, not my daily wig, but I know a lot of other folks have done those exercises and would certainly recommend if you can find IAM ones on like try hack me or hack the box.

Certainly go through and do those.

All right, um...

Glamour Girl just found out about Hack the Box, thinking about maybe paying for it.

Is it worth investing in? This is a general question for anyone in chat.

Yeah, I think Hack the Box is great.

I will say that it's a little advanced.

It's not prohibitive.

Now, some little hints and ideas of what's going to be in the baskets this year.

We're going to have SANS classes, CompTIA certifications, EC Council, anti-siphon training, TCM security, Hack the Box, and so much more.

So if you're looking to assert, you're really excited, but you can hold off till December.

December 12th will be when the auction ends at the end of the stream, but the silent auction will be going live December 1st through the 12th.