Resources

Virtual Machines

• Virtual Machine Configuration (Kali Linux and Metasploitable2)

Cheat Sheets

• Exploit Proof-of-Concepts (POCs)

Linux:

• Linux Post-Exploit Cheat Sheet
• Linux Enumeration Cheat Sheet

Lecture Slides

#	Topic
1	Welcome & Introduction
2	Networking Recap of COMP 177
3	Penetration Testing: Overview
4	Penetration Testing: Reconnaissance
5	Penetration Testing: Scanning
6	Penetration Testing: Vulnerability Scanning
7	Penetration Testing: Exploitation
8	Penetration Testing: Post-Exploitation
9	NICE Challenge Labs
10	Penetration Testing: Social Engineering
11	Network Security Devices: Firewalls, IDS, Honeypots
12	Penetration Testing: Physical Security
13	Crypto 1: Intro, One-Time Pads, Block Ciphers
14	Crypto 2: Stream Ciphers, Nonce, IVs
15	Crypto 3: Public Key Encryption, Authentication
16	Crypto 4: Cryptographic Libraries
17	Crypto 5: Hashes and Passwords
18	Crypto 6: RNG and Entropy
19	Closing Thoughts
Bonus-01	Bonus Topic: NAT Slipstream Attacks

Cryptography

• Crypto 101 e-book [Free/PDF, (2020)]
  • Written by Laurens Van Houtven and distributed at https://www.crypto101.io/. Updated directly at GitHub repo. (See also: Local mirror, may be out of date compared to github copy)
  • Big picture ideas + Commentary on breaking crypto. Light on the math! Incomplete / work in progress.
• Cryptography: An Introduction (3rd Edition) [Free/PDF, 2006]
  • Written by Nigel Smart, a cryptographer & computer science professor specializing in the area of elliptic curve cryptography.
  • Note: The free e-book is no longer being updated as-of 2016. See Cryptography Made Simple (2016, Springer Publishing) for purchase.
  • Heavy on the math!
• Cryptography Engineering [Paid, 2010]
  • Written by Niels Ferguson (Cryptographer, Microsoft), Bruce Schneier (Cryptographer), and Tadayoshi Kohno (Professor, University of Washington)
• A Graduate Course in Applied Cryptography [Free/PDF, 2020]
  • Written by Dan Boneh (Professor, Stanford University) and Victor Shoup (Professor, New York University)
  • Heavy on the math!
  • See also: Local mirror of v0.6, may be out of date compared to latest version at http://toc.cryptobook.us/
• Evaluation of Some Blockcipher Modes of Operation by Phillip Rogaway, February 2011. (See also: Local Mirror)