SHELLGym
ABSTRACT
SHELLGym is the regular cybersecurity workout you have been looking for! Whether you're just starting out and need some exercises, studying for a cert (hint: OSCP), looking at CTF challenges, or developing something cybersecurity-related (maybe your own automated tools?), SHELLGym aims to help you progress in picking up practical cybersecurity knowledge and skills. Come and go as you please, work on your own stuff with like-minded individuals, or just have fun during the workout!
AGENDA
㊙️ Red Teaming and the art of sneaky sysadmin
Also known as "post exploitation", red teaming involves simulating a threat actor that sits on a machine (or several machines in a larger network) and attempts to avoid detection while expanding their access. While part of the activity includes some basic "attack and defence", more of this workshop is about having credentialed access, and engineering tricks on how to stay hidden while moving deeper into the network.
Crafted scenarios could include tunneling, persistency-based objectives, AD-related techniques, AV evasion and so on. Participants will realise that their ability to perform some of these tricks will be limited by their knowledge of the OS and their sysadmin know-how.
⚠️ NOTE
Bring your own laptops (and laptop chargers).
VIRTUAL SHELLGyms (by request)
Hosted on Discord, do approach KK or the Div0 Crew for access
TRAINER
KK "Jim" Tan — Founder, counterShell
As a mid-careerist convert to cybersecurity, Jim picked up his practical skills through getting OSCP certified and by participating in a variety of CTFs. In his career at CSIT, he performed a variety of red-teaming and vulnerability research roles and established the Cyber Training School at CSIT as the Lead Instructor. Besides the OSCP certification, Jim is also OSCE and OSEE certified, and has a Bachelor's degree in Social Science (Psychology). He now sees psychology as a field of study where you fuzz humans until they produce unexpected behaviour.
CO-ORGANISERS & VENUE SPONSOR
IMPORTANT NOTICES
Code of Conduct: https://www.div0.sg/code-of-conduct
Terms of Use & Disclaimer Notice: https://www.div0.sg/terms-of-use-disclaimer-notice
