Infrastruktur & Security: Sichere Web-Applikationen durch Hacking-Lab Walter Sprenger, Geschäftsführer, Compass Security Network Computing AG

1. Hacking-Lab Introduction
www.hacking-lab.com
Walter Sprenger
Compass Security AG

2. Hacking-Lab – Hands-On Experience
Real Knowledge derives from practical
exercises!
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 2

3. Hacking-Lab Usage
Security Conferences
Universities
Security Trainings
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 3

4. Hacking-Lab Community
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 4

5. Hacking-Lab Components
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 5

6. Use-case of hacking-lab
Awareness Campaign
MBO program for Security Engineering
Skill Testing (assessments of candidates)
Security Trainings
Certification
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 6

7. Hacking-Lab Challenges
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 7

8. Categories Hacking-Lab Challenges
Web Security VoiP / SS7 / GSM
Malware / Trojan / Bugs Wireless Security
Windows Security
Unix / Linux Security
Apple Security
Penetration Testing Crypto Challenges
Networking Programming
Forensics
Fun Challenge
Reverse Engineering
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 8

9. OWASP Top 10 - 2010
Compass covers ALL OWASP TOP 10 (2007 and 2010)
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 9

10. *Vulnerable* Systems in Hacking-LabX
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 10

11. Working from Remote?
VPN is required to access the lab!
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 19

12. Hacking-Lab LiveCD Project
https://www.hacking-
lab.com/Remote_Sec_Lab/livecd.html
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 20

13. Hacking-Lab LiveCD Project
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 21

14. Hacking-Lab LiveCD Project
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 22

15. Download Free LiveCD
http://media.hacking-lab.com/largefiles/livecd/
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 23

16. https://www.hacking-lab.com/tutorial/
 How to use LiveCD using the
VirtualBox Appliance
 How to install LiveCD in Vmware 8
workstation
 How to use OpenVPN
 https://www.hacking-lab.com/FAQ/
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 24

17. OWASP Top 10 – Free Cases
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 25

18. 4 Steps to use hacking-Lab
Step 1
Register
in Step 2
Hacking-Lab
Login to
Hacking-Lab,
read challenge Step 3
description
Download
LiveCD and
run it Step 4
Access to Lab
with LiveCD
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 26

19. Step 1
Step 1
Register
in
Hacking-Lab
Event: “ONE Experience”
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 27

20. Step 2
Step 2
Login to
Hacking-Lab,
read challenge
description
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 28

21. Step 3
Step 3
Download
LiveCD and
run it
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 29

22. Step 4
Step 4
Access to Lab
with LiveCD
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 30

23. Free EVENT for «ONE Experience»
Free
OWASP Top 10
Challenges
http://one-schweiz.ch ONE Experience | 9. + 10. Mai 2012 31

24. Kontakt
Referent/in
Walter Sprenger
CEO, Compass Security AG
walter.sprenger@csnc.ch
ONE Schweiz
schmid + siegenthaler consulting gmbh
Willistattstrasse 23
CH-6206 Neuenkirch
info@one-schweiz.ch
http://one-schweiz.ch/dialog ONE Experience | 9. + 10. Mai 2012 32