Lesson 1 Recap

Key concepts and threat actor profiles

Back to Main

Security Fundamentals

The CIA Triad

  • Confidentiality: Information accessible only to authorized users
  • Integrity: Data can only be modified by authorized users
  • Availability: Systems accessible when needed by authorized users
  • Non-repudiation: Activities are logged and undeniable

AAA Security Framework

  1. Authentication: Verifying user identity (passwords, 2FA)
  2. Authorization: Determining access privileges
  3. Accounting: Tracking user activities and access

Threat Actor Profiles

Nation-State/APTs

  • Highly resourceful and sophisticated
  • Primary focus: Intelligence gathering and critical infrastructure
  • Use consistent TTPs (Tactics, Techniques, Procedures)
  • Mitre Att&ck framework helps track their methods

Script Kiddies

  • Low sophistication but unpredictable
  • Use pre-made exploit tools
  • Motivations vary: humor, disruption, or learning
  • Often target public platforms and websites

Insider Threats

  • May be malicious or accidental
  • Have legitimate system access
  • Motivations: grievance, politics, or financial need
  • Particularly dangerous due to system knowledge

Cyber Criminals

  • Financially motivated
  • Range from opportunistic to highly targeted
  • Access black markets for tools and credentials
  • Use phishing, scams, and exploit kits

Ethical & Legal Considerations

Important Disclaimer

  • Security skills should only be used on systems you're authorized to assess
  • Unauthorized access is unethical and illegal
  • Always obtain proper authorization before testing
  • Follow all applicable laws and organizational policies

Password Security Lab Exercises

Online Password Attacks

Attempting to guess passwords against live services (e.g., SSH, FTP, web forms).

# Hydra SSH brute force example
hydra -l username -P wordlist.txt ssh://192.168.1.100
# Hydra HTTP form attack
hydra -l admin -P passwords.txt 192.168.1.100 http-post-form "/login.php:user=^USER^&pass=^PASS^:Invalid"

Offline Password Attacks

Cracking password hashes obtained from compromised systems.

# John the Ripper basic hash cracking
john --wordlist=rockyou.txt hashes.txt
# John with rule-based attack
john --rules --wordlist=dict.txt hashes.txt

Windows Password Policy

Managing password policies in Windows environments.

# View password policy settings
Get-ADDefaultDomainPasswordPolicy
# Set minimum password length
Set-ADDefaultDomainPasswordPolicy -MinPasswordLength 12
# Enforce password history
Set-ADDefaultDomainPasswordPolicy -PasswordHistoryCount 24