SHELLgym

​ABSTRACT
SHELLgym is the regular cybersecurity workout you have been looking for! Whether you're just starting out and need some exercises, studying for a cert (hint: OSCP), looking at CTF challenges, or developing something cybersecurity-related (maybe your own automated tools?), SHELLgym aims to help you progress in picking up practical cybersecurity knowledge and skills. Come and go as you please, work on your own stuff with like-minded individuals, or just have fun during the workout!

​AGENDA
Getting and using shells.

​Finally, a topic in SHELLgym that covers shells! For this session, we'll talk about remote access, from exploits versus payloads, to simple persistency. Then, we'll do some triaging and threat hunting to detect such shells in our environment. The session will roughly follow this sequence:

​1. Remote access: bind/reverse shells
2. A simple, traditional killchain from exploit to payload to persistency
3. Getting inspired by MITRE TTPs
4. Threat hunting

​⚠️ NOTE
Requirements: a computer, so that you can connect to the network, administer your shells, and enjoy a more interactive hands-on experience.

​VIRTUAL SHELLgyms in APRIL (by request)
Hosted on Discord, do approach KK or the Div0 Crew for access

​TRAINER
KK "Jim" Tan — Founder, counterShell
As a mid-careerist convert to cybersecurity, Jim picked up his practical skills through getting OSCP certified and by participating in a variety of CTFs. In his career at CSIT, he performed a variety of red-teaming and vulnerability research roles and established the Cyber Training School at CSIT as the Lead Instructor. Besides the OSCP certification, Jim is also OSCE and OSEE certified, and has a Bachelor's degree in Social Science (Psychology). He now sees psychology as a field of study where you fuzz humans until they produce unexpected behaviour.

​SPONSORS

• ​VENUE SPONSOR: CyberSG TIG Collaboration Centre

​IMPORTANT NOTICES

• ​Code of Conduct: https://www.div0.sg/code-of-conduct

• ​Terms of Use & Disclaimer Notice: https://www.div0.sg/terms-of-use-disclaimer-notice