CSEC Blog
Updates, recaps, and write-ups from the University of Maryland Cybersecurity Club.
Anonymous Communications
Anonymous communication systems - anonymity properties, mix networks, and a deep comparison of Tor and I2P against passive and active adversaries.
Wireshark 101
Network protocol analysis with Wireshark - the OSI model, common protocols, and capturing and filtering live traffic with hands-on challenges.
Reverse Engineering
Reverse engineering fundamentals - binary formats, x86 assembly, IDA Pro workflows, and static analysis techniques.
Pwn (Binary Exploitation)
Binary exploitation on Linux - assembly basics, stack mechanics, and buffer overflow attacks with hands-on challenges.
Cross-Site Scripting
XSS vulnerabilities - how browsers trust scripts, the Same-Origin Policy, and the three types of cross-site scripting attacks.
SQL Injection Deep Dive
SQL injection techniques - from authentication bypass and UNION attacks to blind injection and database schema mapping.
Windows Usermode Implant Development
C2 implant architecture, EDR evasion techniques, and Windows internals for offensive security.
Linux
The Linux operating system - shell commands, filesystem structure, process management, and system hardening.
Elliptic Curve Cryptography
The mathematical foundations of ECC - modular arithmetic, group theory, ECDH, and ECDSA with hands-on implementation.
OSINT
Open Source Intelligence - Google dorking, social media recon, geographic intelligence, and metadata extraction.
Classic Cryptography
The history of cryptography - from Caesar ciphers to public key encryption - with hands-on challenges.
Windows Binary Exploitation
Windows memory architecture, buffer overflows, and binary mitigations like ASLR, DEP, and stack canaries.
Web Attacks
Common web attack techniques - IDOR, XXE, XSS, and SQL injection - with hands-on practice.
Penetration Testing
The history of pentesting, the engagement lifecycle, and hands-on training with Nmap and the Metasploit Framework.
Fuzzing
Automated vulnerability discovery - coverage-guided fuzzing, mutation techniques, and a hands-on AFL++ workshop.