#HackerBox

[sodakliberty]

Realtime fun with HackerBox 65

Realtime fun with HackerBox 65

HackerBox 65 Contents I did it! After blogging about HackerBox 64 just a few days ago, I finally looked at the current HackerBox. HackerBox 65 is called Realtime. The project revolves around learning about RealTime Operating System (RTOS), using a real-time RTC shield with an ESP32, and creating a functioning clock with an LED matrix. This was a well-packed little kit. Testing the ESP-WROOM-32…

[nick-momrik]

HackerBox #0029 Field Kit Updates

HackerBox #0029 Field Kit Updates

I’ve customized the items in the HackerBox Field Kit and explained everything in this video.

You can find the example code I put together for all of the modules in my hackerbox-29-field-kit GitHub repo.

I plan to keep the kit in my backpack, especially for trips up north when I visit family. Maybe I shouldn’t take this with me on…

[vxo]

#HackerBoxes knows how to amuse me

[ict-marketresearch-reports]

Quantum Cryptography Market Share, Growth Prospects and Key Opportunities by 2025

According to a research report "Quantum Cryptography Market Growth by Component (Solutions and Services), Services (Consulting and Advisory, Deployment and Integration, and Support and Maintenance), Security Type (Network and Application Security), Vertical & Region - Global Forecast to 2025" published by MarketsandMarkets, the global quantum cryptography market size is estimated to be USD 89 million in 2020 and projected to reach USD 214 million by 2025 at a CAGR of 19.1%. Factors such as the growing incidents of cyber-attacks in the era of digitalization, increasing cybersecurity funding, rising demand of next-generation security solutions for cloud and IoT technologies, and evolving next-generation wireless network technologies are expected to drive the growth of the global quantum cryptography market.

Solution segment to account for a higher market share during the forecast period

The quantum cryptography solutions segment includes the revenue generated from Quantum Key Distribution (QKD) platforms, QKD servers, virtual encryptors, QKD distributors, key and policy managers, SDK to integrate cryptography, quantum cryptography communication device, quantum security gateway, Quantum Random Number Generator (QRNG), hackerbox, quantum secure communication network products, and repeaters, along with factors essential for the implementation of quantum cryptography. This solution helps in encrypting the critical information without being leaked midway.

Increasing demand for consultations to solve the problems that hinder commercial clients’ business growth set to fuel the growth of consulting and advisory segment

Quantum cryptography service providers render a variety of services, such as consulting and advisory, deployment and integration, and support and maintenance service. Quantum cryptography consulting and advisory services play an important role in the implementation of the required set of solutions and techniques for securing the transmission of data. For this, qualified industry experts and security professionals are involved as consultants. Consultants help enterprises devise security strategies, minimize risks, understand the maturity of their quantum cryptography solutions, and reduce compliance costs. Advisory services assist organizations in solving a problem that hinders their business growth; the experts guide the path or directs the clients on where to go for help. Advisory service is provided by experienced experts, who offer hands-on, practical help, advice, and support business areas that will help make a difference to the business.

Americas region is expected to grow at the highest CAGR during the forecast period

The rise in cyber-attacks in this region is one of the major factors responsible for the growth of the market. Due to the high adoption of encryption-based applications in the Americas, the attacks are increasing dramatically and becoming more sophisticated. Furthermore, the growing IT management complexity, along with the increasing need for data privacy and security is an important factor driving the quantum cryptography market in the region. Countries such as the US, Canada, Brazil, and Mexico are generating significant revenue in this market. The organizations in this region are focusing on securing their applications and networks using various quantum cryptography appliances. In addition, the region has witnessed several government initiatives followed by heavy funding in research and development.

Major vendors in the global quantum cryptography market include ID Quantique (Switzerland), QuintessenceLabs (Australia), NuCrypt (US), Qasky (China), Crypta Labs (UK), Qubitekk (US), Post-Quantum (UK), MagiQ Technologies (US), ISARA (Canada), QuNu Labs (India), QuantumCTek (China), Quantum Xchange (US), Aurea Technologies (France), qutools (Germany), Infineon (Germany), Mitsubishi Electric (Japan), IBM (US), HP (US), NEC (Japan), Toshiba (Japan), Microsoft (US), Raytheon Technologies (US), Crypto Quantique (UK), Qrypt (US) and Onboard security (US).

About MarketsandMarkets™

 MarketsandMarkets™ is a blue ocean alternative in growth consulting and program management, leveraging a man-machine offering to drive supernormal growth for progressive organizations in the B2B space. We have the widest lens on emerging technologies, making us proficient in co-creating supernormal growth for clients.

 The B2B economy is witnessing the emergence of $25 trillion of new revenue streams that are substituting existing revenue streams in this decade alone. We work with clients on growth programs, helping them monetize this $25 trillion opportunity through our service lines - TAM Expansion, Go-to-Market (GTM) Strategy to Execution, Market Share Gain, Account Enablement, and Thought Leadership Marketing.

 Built on the 'GIVE Growth' principle, we work with several Forbes Global 2000 B2B companies - helping them stay relevant in a disruptive ecosystem. Our insights and strategies are molded by our industry experts, cutting-edge AI-powered Market Intelligence Cloud, and years of research. The KnowledgeStore™ (our Market Intelligence Cloud) integrates our research, facilitates an analysis of interconnections through a set of applications, helping clients look at the entire ecosystem and understand the revenue shifts happening in their industry.

 To find out more, visit www.MarketsandMarkets™.com or follow us on Twitter, LinkedIn and Facebook.

 Contact: Mr. Aashish Mehra MarketsandMarkets™ INC. 630 Dundee Road Suite 430 Northbrook, IL 60062 USA : 1-888-600-6441 sales@marketsandmarkets.com

[fail-unsafe]

Week 4 Tutorial Notes

Notes from my COMP6841 Week 4 tutorial:

Tips: - CTFs - Hackerbox

Tools in Kali Linux: - nmap: Port scanner (find open ports on other devices) - burp suite: Intercept network packets/traffic (useful for XSS) - metasploit: collection of exploits for old software/OSs

XSS is when you inject scripts into a browser (e.g. in a YouTube comment, put a script tag in your comment). It's like the Javascript version of SQL injection attacks

FoxyProxy allows you to bounce between different proxies without manually changing them.

2 main uses of hashes: - fingerprinting - passwords

`md5sum <filename>` is a built-in Linux command

Problem with just hashes: If you got a rainbow table, you can just hash all known passwords and see if they match the hashes in the database. Solution: Salting; append a string (unique to each user) to their password, THEN hash that. i.e. H(password + salt) and store the salt for each user in the database next to the hash. E.g.

Usernames | Hash | Salt ...    | ... | ...

HMAC: H(plaintext | password) Send only the hash and the plaintext

Exercise: Look up length-extension attack on a HMAC

1 million plaintext passwords Takes 12 bits of work to hash any of them 50% of passwords are weak 500 hashed passwords in our database

H("password") = 12 bits H("123456") = 12 bits

1million * 12bits 1million has 20 bits in it. Thus, 2^20 * 2^12 = 2^32

12-50 bits/work per second on a computer is realistic

Tips for cracking cryptogram: - If it ends with `'_`, _ is probably a `s` or `t` (`t` for short words )

[nicolecomp6441]

Week 3: Tutorial & Module 3

Tutorial:

• Corruption and greed is an inherent human weakness • Separation of Power - Law enforcement, courts unbiased, governmental system creates the laws • M&M concept - if there's one dent in the outer shell, you've got access. ie. someone on the inside • Nothing is secure, you can always brute force. Security is about to make it difficult to get secrets not about making mathematically unbreakable • Cryptograms.puzzlegram • EXAM - WEEK 5 SATURDAY ○ Whichever is higher - Mid sem exam or part A of final exam • RFID tagging • Pen testing - hackerbox. Bash and python are most useful for this. Exploits are done in python. Bash is versatile.

Case Study: Doors on Planes:

Analysis Question - produce a shortlist of recommendations for actions to be taken to prevent future disasters:

• Both Pilots should have master code that should override any lock unique to each flight

• Install bathroom and kitchen in cockpit

• Stricter and regular - Psychiatric testing for pilots

• Communication to ground at all times - External contact with ground control with people outside of cockpit at all times

• Reinforce rule that one pilot should always stays in the cockpit

• Air lock system - 2 doors 

• Splitting power - cabin jury

• Extra people on board who know how to fly

• Automation - AI to fly the plane

• Can't give control to just one type - dictatorship

Protecting against outsider and insider threats at the same time is hard. Similar to Type 1 and type 2 errors at the same time

[codified-likeness-utility]

[phobos302]

My tshirt arrived while I was on the road for work, finally today with a day off this was of course the first thing I chose to wear today aaand my new Hackerbox arrived... I’m a happy space pirate today

[sodakliberty]

A look back at HackerBox 64: Scope

A look back at HackerBox 64: Scope

HackerBox 64 has been sitting on my bench for a month or two, waiting to be opened. Now that I’m getting caught up with other projects, I finally had a chance to play with the kit. It’s a pretty cool kit for novices in the electronics/maker hobby area. This particular kit has an open-source digital oscilloscope and function generator to assemble. In this post, I will briefly go over what is in…

[nick-momrik]

Catching up on Electronics Projects

I’m behind on a bunch of electronics subscription boxes and projects, so I’m just going to list out a bunch of stuff. None of its worthy of its own post anyway.

One of the projects for HackerBox #0023 was to build a custom antenna out of PVC, copper wire, and glue. I did a pretty piss poor job of drilling my holes in a straight line (as you can see in the picture), but I connected it to a…

[vxo]

@hackerboxes not too awful honestly! My first time soldering a part of this pitch and I got it. No shorts, everything checks out. #smt

[ict-marketresearch-reports]

Quantum Cryptography Market Innovations, Technology Growth and Research -2025

According to a research report "Quantum Cryptography Market Forecast by Component (Solutions and Services), Services (Consulting and Advisory, Deployment and Integration, and Support and Maintenance), Security Type (Network and Application Security), Vertical & Region - Global Forecast to 2025" published by MarketsandMarkets, the global quantum cryptography market size is estimated to be USD 89 million in 2020 and projected to reach USD 214 million by 2025 at a CAGR of 19.1%. Factors such as the growing incidents of cyber-attacks in the era of digitalization, increasing cybersecurity funding, rising demand of next-generation security solutions for cloud and IoT technologies, and evolving next-generation wireless network technologies are expected to drive the growth of the global quantum cryptography market.

Solution segment to account for a higher market share during the forecast period

The quantum cryptography solutions segment includes the revenue generated from Quantum Key Distribution (QKD) platforms, QKD servers, virtual encryptors, QKD distributors, key and policy managers, SDK to integrate cryptography, quantum cryptography communication device, quantum security gateway, Quantum Random Number Generator (QRNG), hackerbox, quantum secure communication network products, and repeaters, along with factors essential for the implementation of quantum cryptography. This solution helps in encrypting the critical information without being leaked midway.

Increasing demand for consultations to solve the problems that hinder commercial clients’ business growth set to fuel the growth of consulting and advisory segment

Quantum cryptography service providers render a variety of services, such as consulting and advisory, deployment and integration, and support and maintenance service. Quantum cryptography consulting and advisory services play an important role in the implementation of the required set of solutions and techniques for securing the transmission of data. For this, qualified industry experts and security professionals are involved as consultants. Consultants help enterprises devise security strategies, minimize risks, understand the maturity of their quantum cryptography solutions, and reduce compliance costs. Advisory services assist organizations in solving a problem that hinders their business growth; the experts guide the path or directs the clients on where to go for help. Advisory service is provided by experienced experts, who offer hands-on, practical help, advice, and support business areas that will help make a difference to the business.

Americas region is expected to grow at the highest CAGR during the forecast period

The rise in cyber-attacks in this region is one of the major factors responsible for the growth of the market. Due to the high adoption of encryption-based applications in the Americas, the attacks are increasing dramatically and becoming more sophisticated. Furthermore, the growing IT management complexity, along with the increasing need for data privacy and security is an important factor driving the quantum cryptography market in the region. Countries such as the US, Canada, Brazil, and Mexico are generating significant revenue in this market. The organizations in this region are focusing on securing their applications and networks using various quantum cryptography appliances. In addition, the region has witnessed several government initiatives followed by heavy funding in research and development.

Major vendors in the global quantum cryptography market include ID Quantique (Switzerland), QuintessenceLabs (Australia), NuCrypt (US), Qasky (China), Crypta Labs (UK), Qubitekk (US), Post-Quantum (UK), MagiQ Technologies (US), ISARA (Canada), QuNu Labs (India), QuantumCTek (China), Quantum Xchange (US), Aurea Technologies (France), qutools (Germany), Infineon (Germany), Mitsubishi Electric (Japan), IBM (US), HP (US), NEC (Japan), Toshiba (Japan), Microsoft (US), Raytheon Technologies (US), Crypto Quantique (UK), Qrypt (US) and Onboard security (US).

About MarketsandMarkets™

MarketsandMarkets™ provides quantified B2B research on 30,000 high growth niche opportunities/threats which will impact 70% to 80% of worldwide companies’ revenues. Currently servicing 7500 customers worldwide including 80% of global Fortune 1000 companies as clients. Almost 75,000 top officers across eight industries worldwide approach MarketsandMarkets™ for their painpoints around revenues decisions.

Our 850 fulltime analyst and SMEs at MarketsandMarkets™ are tracking global high growth markets following the "Growth Engagement Model – GEM". The GEM aims at proactive collaboration with the clients to identify new opportunities, identify most important customers, write "Attack, avoid and defend" strategies, identify sources of incremental revenues for both the company and its competitors. MarketsandMarkets™ now coming up with 1,500 MicroQuadrants (Positioning top players across leaders, emerging companies, innovators, strategic players) annually in high growth emerging segments. MarketsandMarkets™ is determined to benefit more than 10,000 companies this year for their revenue planning and help them take their innovations/disruptions early to the market by providing them research ahead of the curve.

MarketsandMarkets’s flagship competitive intelligence and market research platform, "Knowledgestore" connects over 200,000 markets and entire value chains for deeper understanding of the unmet insights along with market sizing and forecasts of niche markets.

Contact: Mr. Aashish Mehra MarketsandMarkets™ INC. 630 Dundee Road Suite 430 Northbrook, IL 60062 USA : 1-888-600-6441 sales@marketsandmarkets.com

[sandlerresearch]

Quantum Cryptography Market by Component (Solutions and Services), Services (Consulting and Advisory, Deployment and Integration, and Support and Maintenance), Security Type (Network and Application Security), Vertical & Region - Global Forecast to 2025 published on

https://www.sandlerresearch.org/quantum-cryptography-market-by-component-solutions-and-services-services-consulting-and-advisory-deployment-and-integration-and-support-and-maintenance-security-type-network-and-application-s.html

Quantum Cryptography Market by Component (Solutions and Services), Services (Consulting and Advisory, Deployment and Integration, and Support and Maintenance), Security Type (Network and Application Security), Vertical & Region - Global Forecast to 2025

Global quantum cryptographymarket size to grow at a CAGR of 19.1% during the forecast period

The global quantum cryptography market size is estimated to be USD 89 million in 2020 and is projected to reach USD214million by 2025, at a CAGR of 19.1% during the forecast period. Major growth factors for the market include the growing incidents of cyber-attacks in the era of digitalization, increasing cybersecurity funding, rising demand of next-generation security solutions for cloud and IoT technologies, and evolving next-generation wireless network technologies. However, lack of expertise and high implementation costcouldrestrain the market growth.

Growing demand for integration of quantum cryptography solutions is set to fuel the growth of solutions segment

The continuous increase of data transmitted electronically has led to an increased need for and reliance on cryptography. Quantum cryptography solutions enable people to experience the same level of trust and confidencein the digital world as in the physical world. These solutions further enablemillions of people to interact electronically via e-mail, eCommerce, ATMs, cell phones, etc. The quantum cryptographic solutions such as Quantum Key Distribution (QKD) platforms, QKD servers, virtual encryptors, QKD distributors, key and policy managers, SDK to integrate cryptography, quantum cryptography communication device, quantum security gateway, Quantum Random Number Generator (QRNG), hackerbox, quantum secure communication network products, and repeaters, used to secure advanced cyber-attacks are in huge demand across the globe. Moreover, this solution can easily be integrated with existing security systems. Hence, the solution segment is expected to hold the highest market share in the quantum cryptography space.

North America to hold the largest market size, and to grow at the highest growth rate during the forecast period

The US is the most developed country in terms of technology adoption and investments. The widespread adoption of PCs and internet services for business purposes and storage of critical data across the world has increased the propensity of data breach and theft. In addition, the major growth factors that would drive the adoption of quantum cryptography include the growing need for data privacy and security and an increasing number of cyber-attacks. The Americas are the largest revenue contributors in the quantum cryptography market, as the market is being driven by the early adoption of advanced technologies such as cloud and IoT, high level of IT capabilities, and higher IT investments.

In-depth interviews were conducted with Chief Executive Officers (CEOs), marketing directors, other innovation and technology directors, and executives from various key organizations operating in the quantum cryptography marketplace.

The following list provides the breakup of primary respondents’ profiles:

By company type: Tier 1: 35%, Tier 2: 45%, and Tier 3: 20%

By Designation: C level Executives: 35%,Director Level: 25%, and Others: 40%

By region: North America: 45%, Europe: 20%, APAC: 30%, and Rest of the World: 5%

Major vendors in the global quantum cryptography market include ID Quantique (Switzerland), QuintessenceLabs (Australia), NuCrypt (US), Qasky (China), Crypta Labs (UK), Qubitekk (US), Post-Quantum (UK), MagiQ Technologies (US), ISARA (Canada), QuNu Labs (India), QuantumCTek (China), Quantum Xchange (US), Aurea Technologies (France), qutools (Germany), Infineon (Germany), Mitsubishi Electric (Japan), IBM (US), HP (US), NEC (Japan), Toshiba (Japan), Microsoft (US), Raytheon Technologies (US), Crypto Quantique (UK), Qrypt (US) and Onboard Security (US).

Research Coverage:

The report includes an in-depth competitive analysis of the key players in the quantum cryptography market, along with their company profiles, recent developments, and key market strategies. The report segments the global quantum cryptography market by component (solutions and services), security type, vertical, and region.

Key Benefits of Buying the Report:

The report would help the market leaders/new entrants in the quantum cryptography market with the information on the closest approximations of the revenue numbers for the overall quantum cryptography market and sub segments. The report would also help stakeholders understand the competitive landscape and gain more insights to better position their businesses and plan suitable go-to-market strategies. It also helps stakeholders understand the pulse of the market and provides them with information on the key market drivers, restraints, challenges, and opportunities.

[uncutvenus]

HackerBox 0046: Persistence

http://dlvr.it/RCDdxT

[eendacott-blog]

[Wk3] Tutorial

- Corruption in the US with lack of Separation of Powers     -> Justices in the Supreme Court, Attorney General - M & M Security     -> Hard exterior shell -> insiders single point of failure     -> SHOULD be layers - Prioritising protection and work ratio - easy for good guys, hard for bad guys - Cryptogram - no letter frequency in the exam!

MID SEM Saturday Wk5 -> If you fuck up the mid semester your mid semester mark can be replaced by Part A in the exam

- Kris knows people in the Govt/Fed Security - HackerBox -> pentest website - OSPC -> exploits in the real world e.g. MS1710 - Languages BASH and Python

Pen-testing (About the mindset) 1. Recon - gather information 2. Exploit - targeting e.g. web application etc. 3. Post-Exploit - establishing persistence 4. Persistance Elevation

Case Study: Doors

Produce a shortlist of recommendations for actions to be taken. Recommended actions:

- Master-code for pilot and co-pilot -> overrides everything, unique to each flight - Put a bathroom in the cockpit! -> Finding the right balance. easy for the good guy and hard for bad guys - Stricter assessment of pilots especially on their wellbeing and vetting - External of cockpit contact to to ground control -> automatic warning system for ground control on uncharacteristic behaviour - Airlock - Two Factor Authentication - Splitting power -> separation of power

[laibfekievva]

Defcon 26 Hackerboxes Badge https://t.co/Qk1m9SAmID

Defcon 26 Hackerboxes Badge https://t.co/Qk1m9SAmID

— Laibfe.Kievva (@LKievva) February 8, 2019

via http://twitter.com/LKievva/status/1093676603526270976 from Twitter https://twitter.com/LKievva