Zoom Logo

CCSO General Meeting - Shared screen with speaker view
Ryan Davis
46:41
Kali ISO: https://cdimage.kali.org/kali-2020.3/kali-linux-2020.3-installer-amd64.isoVirtualBox:https://download.virtualbox.org/virtualbox/6.1.14/VirtualBox-6.1.14-140239-Win.exe
Cara Schwartz
48:16
You have to be an IST student to get VMware for free
Jameswell Zhang
48:50
Bing >:
Eugene Ryoo
49:34
oracle. for all your virtualization and tik tok related needs
Giancarlo Mastrocola
49:37
If we have VMware should we download birtualbox
Cara Schwartz
50:10
You should be able to do all of the steps in VMware the instructions will just be a little different
Giancarlo Mastrocola
50:19
Sounds good thanks
Petr Esakov
55:19
Pentesterlab is not free though
Kaden Anderson
55:56
I have the ISO downloaded
nicobove
55:58
Kali is still downloading for me
Edward Burke
56:03
I dont
Andrew Maier
56:09
Me neither
Cara Schwartz
56:21
What are you missing @Edward and @Andrew?
Edward Burke
57:11
Whenever I try to download vm box it fails
Petr Esakov
57:23
@Edward. Hop over to the breakout room
Ryan Davis
01:00:38
im still working on it
Steven Villec
01:00:45
I'm waiting for vmware
Ryan Davis
01:00:47
had to install virtual box extension
Sean Lawrence
01:00:48
I’m still getting a failed to open session, on virtualbox
Julian Romano
01:00:50
I got the virtual box but im struggling to get kali
Kira Leavitt
01:00:51
What if our kali is an iso instead of an ovo?
nicobove
01:00:51
Kali is almost done downloading for me
Eugene Ryoo
01:00:55
did Zach explain the difference between iso and ova?
Kaden Anderson
01:01:04
I have the virtual box open but I downloaded the ISO from the link in the slack announcment
Alexander Kadunce
01:01:09
I just got virtual box open
Kira Leavitt
01:01:52
should we have downloaded from the link you gave or the kali website?
Jameswell Zhang
01:02:20
Kira, that should be the download link that was shown in the demonstration!
Jameswell Zhang
01:02:39
Actually I take that back, that is the .iso file
Kaden Anderson
01:02:59
^ will he demonstrate the installation for an ISO file?
Julian Romano
01:03:25
so does the first process not involve the link in the slack
Jameswell Zhang
01:05:13
Correct, Julian
Thomas Fryar
01:05:43
the slack link directs you to the iso file
RON LONG
01:06:00
older version yes
nicobove
01:06:06
The extension pack failed to install
Julian Romano
01:06:45
I think I downloaded the wrong thing so it might take me a few
Michael Forcina
01:07:11
Click on the machine>settings>ports>usb>disable usb controller
Michael Forcina
01:07:23
Fixes the error
Julian Romano
01:10:18
I do
Julian Romano
01:14:14
yes
RON LONG
01:14:41
Sean here is link to set bios for virtualization if you needed it
RON LONG
01:14:45
https://smallbusiness.chron.com/enable-virtual-hardware-bios-68364.html
Andrew Maier
01:14:52
The OVA correct?
Julian Romano
01:16:45
so even if we have windows we want it on linux
Ryan Davis
01:17:30
How much memory and processors should we give to kali
Cara Schwartz
01:18:12
You should typically give no more than half of your ram to the VM
Cara Schwartz
01:18:21
4096 is should be plenty
Giancarlo Mastrocola
01:18:46
Would it be better to install vmware on a ssd or my Macs hard drive
Julian Romano
01:20:42
can I hop over to the breakout room I just missed a little of what u said
Andrew Maier
01:20:53
Do we need the OVA and iso file?
RON LONG
01:21:05
no either or
Andrew Maier
01:22:22
Also, where do we access the processor options
Zachariah Malinich
01:23:00
Select Kali - Settings - System
Ryan Davis
01:27:34
how do you set the max harddrive space? I cant find it in settings
Kira Leavitt
01:27:59
do we select Yes write changes to disk?
Kira Leavitt
01:30:03
I have to go to another meeting soon, do I just accept those default options?
Julian Romano
01:33:17
how do u get to the place where you make a username
Kareem Jelks
01:38:56
Is anyone here participating in NCL?
Kaden Anderson
01:39:52
What’s NCL?
Kareem Jelks
01:40:06
national cyber league
Jameswell Zhang
01:40:07
It's fantastic
Kareem Jelks
01:40:41
a lot of cool competencies to learn
nicobove
01:40:50
Does cyber force require tryouts?
Sean Lawrence
01:42:52
Do you need to have a team for NCL?
RON LONG
01:43:49
no
RON LONG
01:44:23
BUT you have to compete in the individual competition in order to participate in a Team
Sean Lawrence
01:44:44
👍
RON LONG
01:45:17
The World Campus Tech club has a couple teams every year, this year I think we (Tech club) will have probably 3 or more
Julian Romano
01:46:45
Once we select the ISO file in the storage setting where do we go from there
Julian Romano
01:46:50
settings*
Petr Esakov
01:49:24
Click "OK" and then press the green start button
Petr Esakov
01:49:31
that should launch the VM
Julian Romano
01:49:42
ok
Kaden Anderson
01:51:58
How did you create the snapshot again?
RON LONG
01:52:32
Basically like setting a restore point in WIn ?
RON LONG
01:52:44
That is how I think about it
Kareem Jelks
01:52:59
Like Zach mentioned, it is nice for malware analysis, so that you can get a redo if there was an error in the analysis of malware.
RON LONG
01:53:28
Correct
Kaden Anderson
01:53:50
Okay thank you
Kareem Jelks
01:54:11
is this the latest Kali version
Petr Esakov
01:54:17
Yes
Kareem Jelks
01:55:02
Has the curriculum been shared?
Petr Esakov
01:55:31
No, just the tentative plan for topics in the future
Petr Esakov
01:55:41
A recording will of this meeting will be provided
Giancarlo Mastrocola
01:55:58
Petr what key switches you using
Kareem Jelks
01:56:00
any Machine Learning lol
Petr Esakov
01:56:16
Blue. Very loud. I try to mute myself, but I sometimes forget
Kareem Jelks
01:56:30
Are we using Legion since it can do nmap, Nikto, and hydra, just to name a few
Petr Esakov
01:57:16
Legion? Not familiar. Kali has those installed already. Parrot OS is also a good alternative
Jameswell Zhang
01:57:29
Kareem, those are also available on Kali
Kareem Jelks
01:57:39
Legion is preinstalled on this version of Kali
Kareem Jelks
01:57:54
that is why I asked my previous question about the Kali version
Jameswell Zhang
01:58:01
CLI << GUI
Jameswell Zhang
01:58:05
*** >>
Jameswell Zhang
01:58:09
whOOPS
Jameswell Zhang
01:58:26
Almost got excommunicated from the club
Cara Schwartz
01:58:31
hehe
Kareem Jelks
01:58:47
I use both Kappa
Giancarlo Mastrocola
01:59:36
So will we start learning how to use like linux next meeting?
Jameswell Zhang
02:00:10
Next meeting will have a bit of Kali tools, but is focusing on teaching Cryptography
Jameswell Zhang
02:00:16
(Yours truly will be teaching)
Kareem Jelks
02:00:19
Which adapter is best for malware analysis?
RON LONG
02:00:23
WE had an issue last week with network settings with using just NAT
Giancarlo Mastrocola
02:00:35
Looking forward to it
Petr Esakov
02:00:46
We will go over using Linux a bit at a time. If you want to learn more about Linux specifically, I recommend Bandit on overthewire
Petr Esakov
02:00:59
https://overthewire.org/wargames/bandit/
Kareem Jelks
02:01:00
Network NAT is what should be used for that challenge
RON LONG
02:01:01
Cole might be able to explain, but then again that was with the Mr. Robot machine last week, so I don't know if that mattered
Jameswell Zhang
02:01:10
https://overthewire.org/wargames/bandit/
Kareem Jelks
02:01:11
@ron
Kareem Jelks
02:05:07
Since you mention reverse shell, is that on the curriculum?
Kareem Jelks
02:05:38
cool
RON LONG
02:05:55
So which is safer, with respect to exposing the bare metal to harmful sites etc
Kareem Jelks
02:06:21
Host Only is for malware
Cara Schwartz
02:06:36
NAT is typically safer because your host should have anti-virus/firewalls
Cara Schwartz
02:07:04
if your vm is configured with a strong firewall configuration than it shouldn't make a big difference
Kareem Jelks
02:07:36
Did you take cyber366 @cara?
Cara Schwartz
02:07:56
haha yes
Kareem Jelks
02:08:03
makes sense
Cara Schwartz
02:08:04
my experience is probably not similar to yours
Cara Schwartz
02:08:51
I didn't really learn malware analysis just how to multiply matrices
Kareem Jelks
02:09:01
sounds cool
Cara Schwartz
02:09:11
nah I hate caculus
Kareem Jelks
02:09:18
The labs are literally a cake walk
Kareem Jelks
02:10:15
This is the most important meeting
RON LONG
02:10:17
Thanks guys, look forward to learning more about use of Kali resources. Thanks again I'm out
RON LONG
02:10:59
Awesome, I WILL be there !!
Kareem Jelks
02:11:02
How many open meetings are there for CPTC?
Steven Villec
02:11:18
We can just sit in on that?
Kareem Jelks
02:11:22
cool
Sean Lawrence
02:11:30
What time is the meeting tomorrow?
Thomas Fryar
02:11:30
awesome
Ryan Davis
02:11:48
Are you recording tomorrow's meeting?
Kareem Jelks
02:12:33
ls -la
Giancarlo Mastrocola
02:13:11
Wait oops
Jameswell Zhang
02:13:13
sudo rm -r /
Steven Villec
02:13:23
I finished my vmware install petr so I'm good
Ryan Davis
02:13:40
yes
Kareem Jelks
02:18:23
how come you did /20 and not /24 for cidr?
Kareem Jelks
02:19:18
cool
Ryan Davis
02:24:50
Why would a t5 break a computer?
Cara Schwartz
02:25:23
some computers are so sensitive to the timing of requests that they may shutdown if they get too many requests too quickly
Steven Villec
02:25:49
telnet >>> zoom remote control
Kareem Jelks
02:26:50
telnet is port 23
Kareem Jelks
02:28:48
john the ripper
Thomas Fryar
02:29:00
spoofing
Kareem Jelks
02:29:25
can you try ls -la
Kareem Jelks
02:32:16
sounds scary
Kareem Jelks
02:36:47
what is the diff between the two if they have the same results?
Kareem Jelks
02:37:07
I missed a portion of the explanation
Kareem Jelks
02:45:00
Nikto?
Kareem Jelks
02:45:13
cool
Kareem Jelks
02:45:58
Thanks for the lessons!!!
Kareem Jelks
02:46:42
Scan the FBI server for extra brownie points
Cara Schwartz
02:47:19
https://overthewire.org/wargames/bandit/
Kareem Jelks
02:49:02
very cool
Thomas Fryar
02:49:17
facts
Kareem Jelks
02:50:51
Resume review? Like I have my personal achievements on a separate document
Kareem Jelks
02:51:15
that makes sense @Petr