Ask HN: Resources for College Cybersecurity Club? | Hacker News Reader

Ask HN: Resources for College Cybersecurity Club?

8 points_z2co11 comments

Hi! I run a club at my university devoted to helping ~30 members learn more about hacking and cybersecurity, and I'd love to get more suggestions for activities we can do on a shoestring budget.

What free/cheap interactive tutorials and lessons have you enjoyed?

So far, I plan to:

- Work through the Bandit box on OverTheWire.org [1]

- Talk about social engineering with the Social Engineer Toolkit [2]

- Practice CTFs with PicoCTF [3]

- ... hack the planet?

[1] https://overthewire.org/wargames/bandit/

[2] https://github.com/trustedsec/social-engineer-toolkit

[3] https://picoctf.org/

View on HN

Cybersecurity Educational Resources : https://github.com/CSIRT-MU/edu-resources

Web search / check out what other college cyber security clubs / national organizations are using/doing//hosting!

Affiliating a club with a national parent organization(s) may also provide additional resources.

a few links from sites via "cyber security club activities" web search:

   https://www.cyber-fasttrack.org/cyber-collegiate/
   https://nationalcyberleague.org/
   https://www.sans.org/mlp/cybersecurity-training-community/

Wow! That's quite the gold mine of resources! Thanks for sharing.

"The Cybersecurity Body of Knowledge The ACM/IEEE/AIS/IFIP Recommendations for a Complete Curriculum in Cybersecurity" might be helpful as comprehensive overview to navigating different cyber security subject areas.

Could you talk a bit more about your university, your club, the goals of this club, and the type of people showing up to the club? A university is a different place than a community college. A university with a quality CS program is a different place than a university without one. People from technical programs (using tools) can be very different than those in a science/engineering program (writing tools).

Security before this class (or a similar class): https://www.cs.cmu.edu/~213/ is a very very different beast than security after it.

Red teaming is different than blue teaming. Defense is a nearly entirely different way of looking at security than offense.

Reverse engineering/binary exploitation is a fairly different skill set than web exploitation.

Is your goal to participate in competitions or just to be in a better position to get higher paying jobs?

I knew a guy who swore by hack the box https://www.hackthebox.com/

Flan scan is a pretty good tool to play around with.

Check out AccessCyber.co + and reach out if you would like to set up an AccessCyber Chapter at your university/ college. Thanks!

Cyber guardian program and maybe check out isc.sans.org.

Interesting! I hadn't heard of these resources. I see they have a lot of paid certifications that might be out of our budget, but that's super interesting! thanks for sharing.

This thread has your group in mind:

https://news.ycombinator.com/item?id=37281745

Go through https://pwn.college/

Tryhackme.com has been the best resource for me.

Reply on news.ycombinator.com