Hi! I run a club at my university devoted to helping ~30 members learn more about hacking and cybersecurity, and I'd love to get more suggestions for activities we can do on a shoestring budget.<p>What free/cheap interactive tutorials and lessons have you enjoyed?<p>So far, I plan to:<p>- Work through the Bandit box on OverTheWire.org [1]<p>- Talk about social engineering with the Social Engineer Toolkit [2]<p>- Practice CTFs with PicoCTF [3]<p>- ... hack the planet?<p>[1] https://overthewire.org/wargames/bandit/<p>[2] https://github.com/trustedsec/social-engineer-toolkit<p>[3] https://picoctf.org/
Cybersecurity Educational Resources : <a href="https://github.com/CSIRT-MU/edu-resources">https://github.com/CSIRT-MU/edu-resources</a><p>Web search / check out what other college cyber security clubs / national organizations are using/doing//hosting!<p>Affiliating a club with a national parent organization(s) may also provide additional resources.<p>a few links from sites via "cyber security club activities" web search:<p><pre><code> https://www.cyber-fasttrack.org/cyber-collegiate/
https://nationalcyberleague.org/
https://www.sans.org/mlp/cybersecurity-training-community/</code></pre>
Could you talk a bit more about your university, your club, the goals of this club, and the type of people showing up to the club? A university is a different place than a community college. A university with a quality CS program is a different place than a university without one. People from technical programs (using tools) can be very different than those in a science/engineering program (writing tools).<p>Security before this class (or a similar class): <a href="https://www.cs.cmu.edu/~213/" rel="nofollow noreferrer">https://www.cs.cmu.edu/~213/</a> is a very very different beast than security after it.<p>Red teaming is different than blue teaming. Defense is a nearly entirely different way of looking at security than offense.<p>Reverse engineering/binary exploitation is a fairly different skill set than web exploitation.<p>Is your goal to participate in competitions or just to be in a better position to get higher paying jobs?
I knew a guy who swore by hack the box
<a href="https://www.hackthebox.com/" rel="nofollow noreferrer">https://www.hackthebox.com/</a><p>Flan scan is a pretty good tool to play around with.