Network Hacking 101

## What is this?

Bring your laptop and by the end of this workshop, everyone can walk away having intercepted some packets. If you want to secure your home network, the best place to start is to learn how to attack it!

This is a chance to have fun taking a crack at network hacking in an environment where you won't be violating the Computer Fraud and Abuse Act*! You’ll also learn how you can use these skills to assess and improve the security of your own networks.

### More Network Hacking!

We also now host an intermediate-level version of this workshop, building on these challenges with more active attacks on network exchanges. Check it out!

## How will it work?

The workshop will be in person, and most of time will be for you to work on a series of introductory hacking challenges. Additionally, we'll spend some at the start on a networking crash course as a group.

The content is also available online, and you can check it out now at notebook.naumachiactf.com. I encourage you check out the materials and try the challenges ahead of time. Feel free to ask me any questions on Discord at chat.naumachiactf.com.

### Topics we’ll cover

• Network crash course in peeling back the layers

• Network sniffing and the world of broadcast traffic

• Man-in-the-middle attacks through ARP poisoning

• Network scanning and finding your next target

## What do I need to hack?

You’ll need to bring laptop and the following tools:

• OpenVPN: Connect to the challenges you will be hacking

• Wireshark (tcpdump also works): Capture and dissect network traffic

• netcat (nc): Swiss-army-knife of networking

• nmap: Scan and search for vulnerable targets

• bettercap: Man-in-the-middle attack tool and network attack platform

• python3 (optional): Build new attack tools

For more information and installation instructions, check out the dependencies page of the workshop materials.

--

• Speaking of the Computer Fraud and Abuse Act: Only use the techniques learned in this workshop in your own home and on other networks where you have consent of those you are sharing it with (e.g. Don't intercept traffic at your (least) favorite local coffee shop). Not only is it potentially illegal, it's extremely rude.