Author: Todd Dow

  • Cryptogeddon Mission Pack 2: Protect SCADA Secrets

    Mission Cover - Mission Pack 2Authorities recently discovered that foreign militants are in possession of North American public infrastructure plans, focusing primarily on supervisory control and data acquisition (SCADA) systems. The documentation includes architectural and system drawings, security assessments and vulnerability reports. Intelligence indicates that bloggers are prepping the public release of this information and that they will be encouraging sleeper cells in various North American cities to carry out attacks on public infrastructure vulnerabilities that are outlined in the documents.

    Intelligence indicates that the militants are working with the blog scadaplans.cryptogeddon.com.

    Your assignment is to find the documents, extract them from the bloggers’ CMS before they are able to publish the documents online and identify the target infrastructure and their vulnerabilities so that they can be hardened against attack.

    NOTE: This mission requires the use of Amazon Web Services (AWS) EC2 and this mission is compatible with Amazon Web Services’ Free Tier.

    Additional info:
    25 pages
    Buy it now: Amazon.com | Kobo

  • Cryptogeddon Newsletter – September 20, 2013

    Welcome to the first official Cryptogeddon Newsletter!

    Here’s what I’ll be covering in this newsletter:

    • Soft Launch Summary
    • Mission 1 Feedback
    • Request for Additional Feedback
    • Status of Mission Pack 2
    • In the News
    • Upcoming appearances

    Soft Launch Summary:

    First of all, thanks to everyone that has purchased Mission Pack 1. Your interest in Cryptogeddon is appreciated. I am thankful to you for your interest. I hope you are enjoying Mission Pack 1 and I hope you’ll come back for additional Mission Packs in the future.

    It’s been an exciting couple of weeks since I first launched Cryptogeddon. The site officially went live on Wednesday September 11. I turned it on and shared the link with my Twitter and Facebook feeds. Within a few hours, I started to get some traffic and my first official sale occurred on launch day at 3:10pm! I’ve read before that the first sale is the best one, and that is absolutely true!

    I didn’t know what to expect when I launched the site, but to have my first sale on day 1 was quite exciting. I’ve had consistent sales and traffic every day since then. This is great news, as it reinforces my motivation to build additional missions as quickly as possible and to make them as good as possible.

    My first few sales were from European customers, primarily in Germany. I was initially puzzled by this as I suspected a common link amongst these customers, but I didn’t know what that common link would be. After a bit of research, I discovered that a German blog called heise Security (http://www.heise.de/) made mention of my site in a weekly update (http://www.heise.de/security/meldung/lost-found-Was-von-der-Woche-uebrig-blieb-1955505.html) to their readers. Google Translate was fantastic in helping me understand what the blog post said: “Some solve in their free time crossword, the other hacking challenges. In the latter distribution has Cryptogeddon specialized. So far, one finds there though only a mission pack, but the offer is to be gradually expanded.” Thanks to heise Security for the mention! I really appreciate it!

    Mission 1 Feedback:

    Thank you to everyone that has submitted feedback pertaining to Mission 1. Based on the feedback, it would appear that the mission was solid. A couple of minor issues were uncovered, which I have now corrected in an updated Mission 1 package. Anyone that purchased Mission 1 should have received an email letting them know where to download the updated Mission Pack.

    There were 3 key pieces of feedback that I have incorporated:

    1. Put the “STOP READING – SPOILER ALERT!” on a separate page so that the reader doesn’t accidentally skim the page and spoil any surprises.
    2. Mission 1 told participants to post their questions on the “Mission Pack 1” page. The Mission Pack 1 page doesn’t allow comments, so I have moved this to the FAQ page instead.
    3. The links in the table of contents didn’t work. For now, I’ve removed the hyperlinks. I’ll re-add them in future if I can find a suitable method.

    Request for Additional Feedback:

    I am grateful for your interest in Cryptogeddon and I welcome any feedback that you might be able to offer. There are 3 ways you can do that:

    1. Submit your feedback on the FAQ page: http://cryptogeddon.com/blogs/news/9120555-faq
    2. Complete a feedback survey: http://www.surveymonkey.com/s/V8NHVYX
    3. Email me directly at toddhdow [at] gmail [dot] com;

    If you don’t mind, I would appreciate some feedback via the feedback survey: http://www.surveymonkey.com/s/V8NHVYX

    Status of Mission Pack 2:

    I am just putting the finishing touches on Mission Pack 2. The official title is “Cryptogeddon Mission Pack 2: Protect SCADA Secrets”. Some of the key tools and concepts in this mission will be the use of Amazon Web Services (ec2), WordPress, steganography and geo-location. Mission Pack 2 will be available on Cryptogeddon.com by Tuesday September 24 at the latest. I expect it’ll be ready for purchase sometime this weekend. Keep checking back!

    In the News:

    Software Hamilton posted a recent interview that I did with Kevin Browne. In the interview, I talk about infosec, I introduce Cryptogeddon and I talk about some of the challenges that came with building this project.

    German blog heise Security mentioned Cryptogeddon in their weekly summary for September 13.

    Upcoming Appearances:

    I’ll be speaking at a couple of events in the near future:

    Both DemoCamp and Sector will be great events. I encourage you to attend and to say hi to me at the events.

    Thanks again for your support of Cryptogeddon. Keep an eye out for Mission 2, coming soon!

    Todd

     

  • Introducing Cryptogeddon

    Hi ,

    I want to take this opportunity to formally welcome you to the Cryptogeddon mailing list. Thanks for subscribing.

    First, I’d like to let you know that Cryptogeddon.com is now live and the first mission pack is available for purchase. And, I’d like to share a recent blog post that I wrote introducing Cryptogeddon. The piece is available to read at toddhdow.com and on softwarehamilton.com.

    And, I have a couple of pieces of exciting news to share with you:


    Introducing “Cryptogeddon Mission Pack 1: Detect the Mole”:

    SpaceWay Aeronautics believes they have been hacked. They suspect that foreign competitors have access to the blueprints for their next generation space vehicle.

    You need to verify their suspicions by finding the files, the method of transmission and the employee(s) responsible for doing this. SpaceWay suspects that one of their servers was compromised due to suspicious activity. They have provided an image of the server for you to analyze.

    Your assignment is the analyze the machine and confirm SpaceWay’s suspicions. Assuming you find evidence of compromise, you are to identify the files that have been transmitted, identify the person(s) responsible for this breach and identify the destination of the files.

    • Cryptogeddon Mission Pack 1 is a downloadable pdf document. It is 22 pages in length and provides all of the information you need to participate in this exciting infosec challenge.
    • This mission requires the use of Amazon Web Services (AWS) EC2 and this mission is compatible with Amazon Web Services’ Free Tier.
    • For a limited time, you can get special pricing for Mission Pack 1 – just $0.99! Click here to buy now!

    Early Adopter Feedback Survey:
    As an early subscriber to the Cryptogeddon mailing list, I’d like to share a unique opportunity with you to help shape the long term success of Cryptogeddon: I’m looking for some feedback from my early adopters to help make the product better. I’d like to know your thoughts on usability, design, layout, navigation, etc. as you’re interacting with Cryptogeddon.

    • I would appreciate if you could take the time to complete this survey: Cryptogeddon Early Adopter Feedback Survey
    • Please be honest and share your thoughts as I will be using this feedback to improve Cryptogeddon to make it better for you.

    Thank you for allowing me into your inbox. I really appreciate the opportunity to reach out to you directly. I have a real passion for infosec and I hope that you’ll like Cryptogeddon as much as I do. Thanks again for your interest and talk soon!

    Todd

  • Cryptogeddon Mission Pack 1: Detect the Mole

    Cryptogeddon Mission Pack 1: Detect the Mole

    Mission Cover - Mission Pack 1SpaceWay Aeronautics believes they have been hacked. They suspect that foreign competitors have access to the blueprints for their next generation space vehicle.

    You need to verify their suspicions by finding the files, the method of transmission and the employee(s) responsible for doing this. SpaceWay suspects that one of their servers was compromised due to suspicious activity. They have provided an image of the server for you to analyze.

    Your assignment is the analyze the machine and confirm SpaceWay’s suspicions. Assuming you find evidence of compromise, you are to identify the files that have been transmitted, identify the person(s) responsible for this breach and identify the destination of the files.

    NOTE: This mission requires the use of Amazon Web Services (AWS) EC2 and this mission is compatible with Amazon Web Services’ Free Tier.

    Additional info:
    22 pages
    Buy it now: Amazon.com | Kobo

  • What can we expect in the first Cryptogeddon mission packs?

    You can expect a good overview of the infosec landscape. You’ll see a few common types of scenarios:

    • Recovery of stolen data;
    • Identification of system vulnerabilities;
    • Identification of organized crime members and the location of stolen property;
    • Assess the security of business systems;

    You’ll get to analyze a few common platforms, including:

    • Linux & Windows
    • Apache, IIS
    • Amazon Web Services
    • Android & iOS
    • WordPress
    • Various social media platforms including Twitter, Google+ & Facebook

    And you’ll learn how to apply various infosec tools, including:

    • TrueCrypt
    • md5
    • SSH
    • openssl
    • Metasploit & Kali
    • Nessus