We all know to be careful on coffee shop (and Noisebridge) WiFi, but maybe you don’t know what an attack actually looks like. Let’s fix that! This workshop is hands-on, with the goal of having every person walk away having intercepted some packets and popped some reverse shells! It’s facilitated online using a piece of infrastructure I hacked together dubbed Naumachia (I’m an engineer, not a marketer). You can check it out now at naumachiactf.com Topics we’ll cover:- Network crash course in peeling back the layers- Network sniffing and the world of broadcast traffic- Man-in-the-middle attacks through ARP poisoning- Network scanning and finding your next target- DNS poisoning so that your too can be facebook.com What do I need to hack? You’ll need a laptop and the following tools:- OpenVPN* Connect to the challenges you will be hacking- Wireshark (tcpdump also works)* Capture and dissect network traffic- nmap* Scan and search for vulnerable targets- ettercap* Intercept and manipulate traffic- arpspoof* Another good way to intercept traffic- bettercap (optional)* Next-generation replacement for ettercap (but a bit unreliable)- python3* Build new attack tools- netcat (nc)* Swiss-army-knife of networking It’s highly recommended that you use Linux or MacOS, but these tools are availible for Windows as well. If you have a Windows laptop\, I recommend you install Linux in a VM*. Kali is the canonical offensive security distribution if you need to pick one. (youtu.be/FVmWMogGX4Q ) *Windows Subsystem for Linux (WSL) is great, but doesn’t work with packet capturing, so you won’t be able to use it here Disclaimer: I am by no means an expert in this topic; part of the reason it’s a 101 :P ---------------------------------------Tool installation instructions * OpenVPN- Debian Linux: apt install openvpn- MacOS: tunnelblick.net/cInstall.html#installing-tunnelblick- Windows: openvpn.net/community-downloads* Wireshark (tcpdump also works)- Debian Linux: apt install wireshark- MacOS and Windows: www.wireshark.org/download.html* nmap- Debian Linux: apt install nmap- MacOS: brew install nmap- Windows: nmap.org/download.html* netcat (nc)- Debian Linux: apt install netcat- MacOS: brew install netcat* python3- Debian Linux: apt install python3- MacOS: brew install python- Windows: www.python.org/downloads* arpspoof- Debian Linux: apt install dsniff- MacOS: port install dsniff or from github.com/ggreer/dsniff* ettercap- Debian Linux: apt install ettercap- MacOS: brew install ettercap* bettercap- All: www.bettercap.org/installation