Making Security a Common Sense

Ladies & Gentleman, Hackers & Geeks, Nerds & Newbies.

In India we were waiting to see any ‘hacking’ magazine to happen and the wait was getting little longer. So finally ClubHack decided to come out with its own 1st  Indian “Hacking” Magazine called CHmag. We at ClubHack are very much excited about the magazine and this fits into our main objective of making hacking and information security a common sense for a common man. We hope to add a lot of sections in future, all we need is input from you on what would you like to see in your magazine Moving further we need a lot of help form the whole information security community of the country to make this a success

You think you are a uber hacker, You think you can hack into web servers, We challenge you

Don’t just brag about your skills, come and show some real muscle power  here.

ClubHack announces a live webhacking contest WebWarIII

Agenda

This is a hacking challenge focussed on web applications and challenges both hackers as well as coders. Each team gets a Ubuntu VM with a vulnerable Java application. The team gets about an hour to go through the application to identifiy vulnerabilities in the code and make appropriate code changes to fix these issues.

After an hour the IP addresses of each team’s VM is made available to other users. At this point the teams access the applications of the other teams and hunt for vulnerabilities in them.

Positive points are awarded for each vulnerability that a team identifies on other’s application. Negative points are awarded for each vulnerabilty that is discovered on the team’s application.

The team with the most number of points at the end, win.

Points can vary based on the complexity of the vulnerability.

Notes to participants:

1. All participants must carry their own laptops with VM Ware server/player installed on them.
2. The Ubuntu VM image provided by us comes with NetBeans IDE loaded.
3. Participants should bring their own set of web hacking tools.
4. Internet connection MIGHT NOT be available on this game network, so be ready accordingly.
5. Keep this game on virtual world, the temptation might rise but still don’t take this to fist fight.
6. DO NOT USE THE TRICKS LEARNT HERE ON ANY REAL WORLD WEB SERVER/WEBSITE

Website: http://clubhack.com/2009/webwar3

Hi All
As a tradition, ClubHack uses witty & creative posters during the event for awareness. these posters are generaly made to create awareness about information security and cyber crime.

Here are few samples

To continue the tradition and take it level ahead, this year ClubHack has planned to create posters and publish them in public domain for people to download and use it wherever they want. This will make sure the awareness is spread.

How to participate in the contest
To participate in contest, all you have to do is think creative, come up with a witty idea to spread cyber security awareness and create a poster out of it.

Guidelines

1. Try making it as original as possible
2. Should be creative & witty to catch attention
3. Theme should be information security awareness
4. Resolution should be 300dpi
5. Preferred size : 3ft by 5 ft (vertical)
6. Any other size also accepted
7. Source file submission is mandatory [.PSD etc]

Submission

1. submit your entries/queries to info@clubhack.com
2. Last date of submission is 30th October 2009 (till midnight IST)
3. submit only JPG/PNG/SVG before deadline for evaluation
4. winners of pre-qualification round will be required to submit the source on or before decided date

Evaluation

1. Pre-qualification round will be done by team ClubHack to eliminate offensive and other below standard entires
2. Final evaluation will be done by public voting online.

Terms & Conditions

1. All entries will be property of ClubHack
2. Same will/may be used by ClubHack for awareness campaigns and free online distribution
3. All entries will be used with proper attribution
4. You will agree to grant ClubHack a perpetual and unlimited licence to use the poster designed by you for educational, awareness creation and other purposes.
5. You will agree to indemnify ClubHack in case your design infringes upon anyone’s intellectual property or other rights.

Prizes

1. First Prize
   • 2 free entry tickets to ClubHack2009
   • 2 Free ClubHack T-Shirts
   • $75 Google adwords starting credit
2. Second Prize
   • 1 free entry ticket to ClubHack2009
   • 1 Free ClubHack T-shirt
3. Third Prize
   • 1 Free ClubHack T-shirt

Some wallpapers for your you

Click to download full size

On 10th November 2008, ClubHack with support of Cyber Crime Cell of Pune Police conducted a Wardriving in Pune, Maharashtra.

This Wardriving aimed at analysis of wireless network security in Pune city at common places like IT
parks, residential areas, market areas, hotels, airport etc.

Find the report and analysis @ http://wardrive.in

A lot is being said and written about the new vulnerability found in debian/ubuntu and other variants

This post is not to give you the technical explanation or suggest a remedy but to bring together all the fun associated an one place

Source: http://metasploit.com/users/hdm/tools/debian-openssl/

Source: http://xkcd.com/424/

Do let me know if you some across any more on these lines

happy hacking

Rohit Srivastwa