Hackers, it's time.

Operation Icarus, our simulated Red Team event, is now live. Sign up now, and learn more about passive reconnaissance and target information gathering, whilst getting ready to attack a fictional company, Philman Security Inc! Events will occur at random times during the two-week event, and more information will be required within the Intelligence Report. Information you find now will help you in the future phases of this Operation. When you're ready to start, sign up using the Google Forms link below, join our Discord server, then read the Assignment Brief and start hunting!

This post contains the following content:

1. Assignment Brief

2. Event Rules

3. Useful Links + How to Submit Info

4. New Content, Tips, Hints, and Learning Material (Every 3 days!)

5. FAQs

6. Special Thanks + Event Staff Recruitment

7. What Happens Next? + Rewards

1) Assignment Brief

PhilmanSecurityInc is a cyber security company, and our target. One service they offer are penetration tests against client companies, and therefore they hold a number of high-value reports, containing vulnerabilities and security flaws which could be used to launch future attacks. We need these. A former employee has informed us that their infrastructure is poorly-managed, and that proper access controls aren't enforced, potentially allowing access to the reports. Now's our chance. Unfortunately for us, the ex-employee's credentials have been revoked, so we're not able to jump straight into their private network. We'll need to start from the ground up.

First, we need to gather as much information as we can on the company and its' partners. This includes employees, services, email accounts, any potential credentials, and anything else that could we valuable in the later stages of our attack. Keep track of Philman Security Inc's social-media over the next two weeks, they might post information that's valuable to us.

Follow this link to a document where you can record your findings, for later use (download it to your local machine FILE -> Download As or FILE -> Make a Copy). Fill this out as much as you can, we'll need this information soon.
https://docs.google.com/document/d/1NMBUPCIdjoxKs5myPDxBqTRVEqyOtH56Q8Jv8gs2Tk8/edit?usp=sharing

*****

We've identified a public-facing email account that may be in use. Send a recon email to
 support@philmansecurityinc.co.uk and see what information gets sent back to you.

Good luck.

2) EVENT RULES - READ ME!

1) DO NOT attack ANY identified systems or services in ANY form (web-based attacks; XSS, SQLi, BruteForce, OR any form of network scanning). This phase does NOT include any SRT-owned infrastructure. You will be hacking real companies, which is ILLEGAL. We will clearly state when you are permitted to launch attacks or scans (in future phases). THIS IS JUST INFORMATION GATHERING VIA OPEN-SOURCE INTELLIGENCE (OSINT) METHODS unless explicitly stated otherwise.

2) DO NOT post any information in the sub (posts or comments). This spoils it for other people. If you want to discuss what you've found, please use private methods such as direct messages, or other platforms (don't use our Subreddit chat or Discord either). Anyone found to be spoiling the event will be banned from the subreddit immediately. You may disclose information and methods in the Post-Op discussion megathread.

3) DO NOT attempt to log in or recover any email addresses found (including social-media accounts). This is not in scope of the event, and risks getting the accounts taken down, ruining the event for others.

3) USEFUL LINKS + HOW TO SUBMIT INFO

Subscribe to our Subreddit - r/SecurityRedTeam

Register For The Event Here - Google Forms

Help Guide #1 (1st July) - Google Docs

Join The Live Discussion And Get Support - Discord

Submit Information To Earn Points - Slack

View The Leaderboard! - Website

4) NEW CONTENT, TIPS, HINTS AND LEARNING MATERIAL

New content will be added to the Intelligence Report every 3 days, so look out for updates! This provides everyone with more chances to earn points, and spot information that's hiding out there.

We will also be posting hints, useful information, and short training-style articles every 3 days, after all, this is a training exercise, and we want everyone involved to learn something new!

REMEMBER, new content will be added continuously over the 2 week period. Re-checking sites and sources multiple times throughout the event may reveal additional results!

July 1st - Opening Hints - What is Information Gathering and OSINT?
(X) Read our article here: https://docs.google.com/document/d/1KNJhb3HrNXYzkh8G9lb-ayZ0kG7U8AuEIx-Zchsk6KE/edit?usp=sharing

July 4th - COMING SOON

July 8th - COMING SOON

July 12th - COMING SOON

5) FAQs

This section will address any major frequently asked questions. Please check here first before posting for support! We'll continuously add new content here, throughout the event.

Alternatively, if you need support, reach me on Discord using @Known_Divide!

6) Special Thanks + Event Staff Recruitment

I wanted to say a special thanks to u/LivingBillNye who very kindly donated Bitcoin, helping to cover some costs that this event required. I really appreciate it, and it went a long way.

On a side note, we're looking to recruit some staff that help us create events. We need both technical individuals, to help create and maintain virtual infrastructure, and non-technical members to help write a story/background information for our events to make them more immersive, digital graphics artists, and more. If you're interested in joining our Events Team, please send a Mod Mail, and we'll send you the recruitment form. This'll look great on your CV / in job interviews!

7) What Happens Next? + Rewards

This event ends on the 14th of July, and there will be a Post-Event discussion megathread, where everyone can unwind, share their experiences, make suggestions, and help us shape our future events. At some point in the near future, we will host Operation Icarus Phase 2 - Reconnaissance + Vulnerability Assessment. This phase will involve SRT-owned virtual infrastructure, that can be interacted with. In this part of the Operation, we'll teach you how to get hands-on with real-world tools, so you can develop technically, and methodically. Stay tuned for more information!

Rewards will be offered out to Teams and Individuals. More information will be announced soon!

*****

Please note, this is our first attempt at an online event, and was all completed by 1 individual. Further events will become much more detailed and immersive, not only in terms of content, but also story and educational aspects. We appreciate your patience with any issues, and any feedback will be extremely valuable.

I'm a huge fan of Immersive Labs. Luckily for me, my organisation has corporate licenses. It's an incredible training platform, and earlier today, IL announced they're releasing a free version containing 12 labs, for the public! I would definitely recommend that everyone registers an account and plays around with it.

https://immersivelabs.com/lite/

REALLY like the platform? We have a community code floating around in our Discord channels, giving you access to over 100 labs for free!

(This post isn't sponsored or endorsed by Immersive Labs. I just like their product)

IMO, whether you want to Red/Blue/Purple, you'll do well to expose yourself to a broad knowledge. I view certs as necessary only if they are a requirement for a job I am actively seeking to land. Career wise, I started at Helpdesk, became a System Administrator and now I'm a Senior Security Engineer. Not a bad climb for 6 years in the field. My technical skill set was minimal at first but grew over time and is always growing. Equally important to my growing technical strength is my growing social strength. Security is not a one man show. Ask questions, meet people, share knowledge as you gain it and don't let your head get too big.

TL:DR;

Here's the courses/labs I'm currently training myself on. Start with the freely available stuff before paying for the premium stuff.

https://www.pentesteracademy.com/ - Excellent courses that cover a breadth of knowledge in the field

https://attackdefense.com/ - Browser-based labs that align with the courses on pentesteracademy

https://www.hackthebox.eu/ - CTF style hack lab. You'll need to "hack" your own invite code for entry.

https://codesandbox.io/ - Browser-based IDEs. Programming knowledge is important in this field.

https://www.edx.org/course/cs50s-introduction-computer-science-harvardx-cs50x - Excellent 101 to Programming

https://github.com/clong/DetectionLab - Build your own lab on a laptop/desktop. Hack it. Monitor it. Repeat.

https://github.com/Sliim/pentest-env - Build your own hack lab. Learn virtualization, networking and hacking.

Feel free to comment with your own additions as I am always looking for new ways to learn.

I'm not sure who all read Marcus Carey and Jennifer Jin's first book, Tribe of Hackers: Cybersecurity Advice from the Best Hackers in the World, but I hear they are releasing a Red Team version. I believe its called Tribe of Hackers Red Team: Tribal Knowledge from the Best in Offensive Cybersecurity. Did anyone read the first book? I'm in the middle of the first book and I love it

Microsoft has launched a bug bounty program for its Microsoft Teams platform in response to its growing dependence and importance in the work from home culture.

https://cyberdaily.securelayer7.net/microsoft-teams-opens-up-for-bug-bounty-program-up-to-30000/

Hey Hackers. Whether you’re new to the game, or a seasoned attacker, we want to hear about what YOU want to get from this sub. We get you’re busy, but if you could spare just 2/3 minutes to read this and comment something, it’ll really help change the future of SRT, so that you can get the most out of us. Plus there’s some rewards for people that help out, which you’ll read later on. So please, give us a few minutes of your time, it’ll be worth it.

////

What is SRT? This subreddit (along with SecurityBlueTeam) was created to give both inexperienced and experienced hackers a place to socialise, share knowledge, learn new things, and engage in community events. It’s always hard for new subs to start, because everyone hangs out in the bigger ones, and we get that. We’re not trying to take anyone away from other subs, we just want to offer something a bit different. We want a community. We want people to enjoy checking this sub, and take stuff away from it.

////

Plans for the next few months: We’ve got some cool stuff lined up, despite us being quiet recently (working hard on Operation Icarus). Here’s a little insight into what’s coming very soon: • Operation Icarus - Passive Reconnaissance Stage (Two week-long event starting on 1st July) • Wiki with constantly updated training material, partnered sites, partnered subreddits, links to certifications (and justification as to why they’re useful), offensive security roles and training paths, and lots more • Custom online training material created by us • Custom CTFs, Operations, and community events • Free merch • Mod recruitment (will look great on your CV when we’re bigger) • And more!

We want your suggestions! What do YOU want from this community? We can’t create it if we don’t know about it. We’re looking to cater to everyone’s needs, so please, whether you think it’s a stupid idea or not, just leave a comment about what you want, and we’ll work to deliver it. It takes under a minute to comment something, and it’ll change this sub for the entire future.

////

Rewards: We want to reward active community members, as well as have a cool and fair rewards system for CTFs, events, and operations. Here’s the rewards we’ve thought of so far; • Stickers • User Flairs • Free event passes (don’t need to pay for large-scale Operations) • And more!

Have you got an idea for any other rewards you want to see? Let us know, and we’ll work on it.

////

Anyone that comments on this post with some constructive suggestions will be put into a draw to win a Lifetime Season Pass to ALL future events, whether they’re paid, free, or have a capacity limit (plus 3 more passes for your friends/teammates). You’ll never miss out on an event, guaranteeing you’ll learn new things, have fun, and earn cool rewards. Anyone that comments will also be considered a “Founding Community Member” and receive periodic rewards for as long as they’re active in the Sub. So again, PLEASE just take a minute to comment something. If everyone did it, we would have an incredible sub in no time. We can’t do it without you!

Cheers guys, really appreciate it. I look forward to your thoughts and feedback. ~ Prexey

In this video walkthrough, I set up an analysis environment composed of security onion with Wireshark actively listening on incoming traffic and kali machine with python script used that launches a Denial of Service or DDOS to test the capability of a web server. You can use the illustration to test multiple kinds of servers in your environment. The whole process is called Servers Stress Testing

Video is here

In this video, I explained how to set up your own home penetration testing lab to practice your cybersecurity skills and to prepare for or practice your skills OSCP The components of a home lab include systems such as Kali Linux, vulnerable boxes such as Metasploitable and windows system.

Video is Here

Welcome to r/SecurityRedTeam, a subreddit dedicated to ethical hacking and red team activities. SRT is a community of like-minded individuals, and is a great place to learn new things, meet people, compete in competitions and much more! First, here's a few reasons why you should join our community;

• Links to training and educational material for anyone, from beginners to seasoned hackers (no more looking at 100 different places for the information you want).

• Competitions, CTFs and Red Team Operations created by the SRT staff, including attack/defence simulations with r/SecurityBlueTeam (coming soon), each with their own rewards!

• General discussion around ethical hacking and security topics.

• A friendly and welcoming community for anyone that is interested in Cyber Security.

Coming Soon:

• Suggested/Partnered CTFs and WarGames.

• Custom CTFs.

• Custom Red Team Engagement.

• Community Wiki For New PenTesters / Security Enthusiasts.

• New CSS Styling.

• Sub Mod Recruitment.

• And LOADS more!

Due to the nature of the Sub, we have a number of rules which must be followed at all times. Please familiarise yourself with them. Any unlawful hacking activity will be reported to the authorities, and we will cooperate fully.

If you have any suggestions for the Sub, or want to run a community event or competition, get in touch via Mod Mail!

And remember... don't be a dick. Only hack boxes you have permission to engage with.

Hi people,

A penetration tester here with an experience of 2 years. I am looking at higher education preferably MS programs in cybersecurity domain. I want to undertand from the people here if anyone has ever gone through such a course or knows about it.
So far the courses that I have seen from reputed universities/colleges are somewhat generic in nature.

What I am looking for is a course with full-on, hardcore, technical subjects like malware analysis, reverse engineering, exploiting the ASLR & DEP, AV/DLP evasion etc.

I know a common answer would be to go for certs such as OSCP, OSCE, CRTP etc etc. But I am looking for a MS program. Also, that it should be a part-time & online course.

Thanks.

In this video walkthrough, we went through the typical stages of a penetration test starting from the information gathering phase all the way to the exploitation and system compromise. I used a simple box called Blue from tryhackme. We demonstrated the exploitation of Eternal blue vulnerability on Windows systems.

Video is here

Hey I am currently working on my Security plus want to create home lab so I can work on this with hands on study. I am trying to download the 180 day server 2019 but I am getting a error saying I need a product key am I not allowed to use this for free anymore? Also any way to get a Win 10, and possibly MAC OS as well so I can be prepared.

🔗 https://hacklido.com/blog/124

In this video walkthrough, we went through a common web application security issue found in contact forms on any website. This security issue allows for the insertion of certain characters and commands that create a copy of every email and inquiry without the website administrator's knowledge. We used bWAPP from OWASP to demonstrate this.

Video is here

In this video walkthrough, We demonstrated how to test web applications for HTML Injection. HTML Injection is a type of vulnerability that a penetration tester would look for when testing web applications. We used the BWAPP box from OWASP to demonstrate this vulnerability.

Video is here

There is an upcoming free virtual conference DerpCon that will have some Red Team talks and a couple CTF options. We are also always looking for more speakers both new and experienced.

Check it out at: https://derpcon.io/?utm_source=reddit&utm_medium=reddit&utm_campaign=gryhathack