Intro to security and hacking

1. 53[|_||2!7¥ & #@[|<!/V6 - 101
Runcy Oommen
http://runcy.me

2. Today’s Agenda
Brief intro to security & hacking
Resources to get started
Tools & software
Demo
Live “ETHICAL” hacking (if time permits)

4. Let’s define SECURITY
“Do what is required and only what is required”

5. There are different hats, but what do they mean?

6. BLACK HATS
 The bad guys (and girls) in the computer world
 Responsible for writing malware to gain access to the systems
 Motive – personal or financial gain, cyber espionage, protest or
perhaps just addicted to the thrill of cyber crime
 They range from amateurs (getting their feet wet by spreading
malware) to experienced hackers (stealing data specifically financial
or PII)

7. WHITE HATS
 Choose to use their powers for good than evil a.k.a “ethical hackers”
 Could be paid employees or contractors in companies to find security
holes/vulnerabilities
 Use the same methods as black hats, but with permission
 They perform what is known as penetration testing (pen tests)

8. GREY HATS
 As in life, there are grey areas - blend of both black hat and white
hat activities
 Grey hats look for vulnerabilities w/o owner’s permission
 If issue is found, report it but with a small fee to fix the issue
 If owner does not comply, post the exploit for the world to see
 They’re not inherently malicious with their intentions, but just
looking to get something out of their discoveries

13. How/Where do I begin?
 Talk to your two friends and about “Ethical Hacking”
 Tons and tons of videos on
 Follow topics about security & hacking on
 Make it a habit & keep visiting
 Join a mailing list –
 Train and certify for either (or both) –
 Familiarize and practice for Top 10

14. “
”
ALL YOU NEED IS “KALI”
What all do I need to begin with?

15. Questions on everyone’s mind now:
 Why did I not know that hacking was a religious affair?
 How many times should I perform pooja?
 What’s the average appeasement time before being blessed?

16. I’m serious, but it’s “KALI LINUX”

17. Always Remember…

18. Hacking Myths!
Myth 1: You become a hacker after wearing a hoodie
Ans: Wearing a hoodie will not enhance your skills.
Wear it when feeling cold or to cover your ugliness
Myth 2: Hackers are maladjusted young people who live
in their mothers’ basements
Ans: Many of them are not teens, have a day job and
have steady relationships with peers and families
Ans: Predominantly male dominated, but that doesn’t
mean there are female hackers
Myth 3: Hacking is a boys only club
Myth 4: All hacking is bad
Ans: Hacking is not always about compromising data, but about
understanding the underlying nature of the technology

20. WHAT’S THE DEMO?
Brute force a website login using Hydra & Burpsuite (from Kali Linux)
THINGS YOU NEED
 Kali Linux (actually any *nix will do)
 DVWA (Damn Vulnerable Web Application)
 Hydra
 Burpsuite
 Web Browser
 Username/password Lists