EH-Net

Ethical Hacking Discussions and Related Certifications => Network Pen Testing => Topic started by: LSOChris on November 17, 2006, 01:47:26 PM



Title: LSO Rootwar this Saturday 18 NOV @ 1500 EST
Post by: LSOChris on November 17, 2006, 01:47:26 PM
We'll have a Hacking Competetion/Rootwars Tomorrow 18 Nov @ 3pm EST time.


Be sure to meet up 30 min prior to the start of the game so I can assign you
to a team. International folks please check the world clock at:
www.timeanddate.com/worldclock/ so you are there on time as for many of
you it will be late Saturday evening or early Sunday morning.

IRC Info:
Server: irc.deepirc.org
Channel: #lso-RootWar
IRC Command
List: http://ircportal.star-fury.com/html/irc_commands.html


We will meet in IRC, assign teams and go from there. Feel free to invite other people to play.
This game is going to be for "newbies". We will be helping people along
through the game.


Title: Re: LSO Rootwar this Saturday 18 NOV @ 1500 EST
Post by: LSOChris on November 18, 2006, 11:49:55 PM
it was a good rootwar (really more of a challenge) today

started out bruteforcing telnet users on a linux box with hydra or medusa

that box was dual NIC'ed.  from there you could move your tools over and attack the other two boxes on the private network.  A couple of remote roots, password dumping and password cracking.

the most important lesson of the day was to secure your root by setting up a backdoor or adding a user account so you dont have to keep re-running your exploit.



Title: Re: LSO Rootwar this Saturday 18 NOV @ 1500 EST
Post by: p0et on November 19, 2006, 06:24:52 PM
Good summary, Chris.  It was awesome!  I've only done 1 hacking challange before (for a SANS cert) but this was very different.  At SANS, we were given an IP addy and told "have at it". This RootWar challange was a lot more defined in what you could use and had available for the hack. So in that regard, it was a lot more challanging.  Can't wait till next Sat.


Title: Re: LSO Rootwar this Saturday 18 NOV @ 1500 EST
Post by: LSOChris on November 20, 2006, 10:29:06 AM
awesome!  glad you liked it.

we think the challenges are a better way to teach people new to security.

plus we can try to teach techniques and methods this way to help people later by forcing them to do certain hacks or do it a certain way.