Noob Village

An amazing opportunity to join members of the #RSAC community at #RSAC2025. BlackGirlsHack / BGH Foundation VetSec Women in CyberSecurity (WiCyS) Women + Cybersecurity = Women's Society of Cyberjutsu Last Mile Education Fund Raíces Cyber Org Cyversity Mind Over Cyber Women in Security and Privacy (WISP) The Diana Initiative

Can you hear them now? We talked to the Radio Frequency Village to find out all about what they do and how you can get involved! Look at the latest video on our #HSC101 playlist - https://buff.ly/47jB8us or go straight to the source at https://buff.ly/3XnjGQW RF Village encompasses the gamut of radio frequencies (WiFi, Bluetooth, Software Defined Radio (SDR), talk to satellites, and more). Those who are new, as well as kids, are welcome although there are not currently kid or n00b specific activities. To participate please bring at least a laptop with WiFi capabilities.

Want to know more about how #DEFCONCTF works? We asked the #NautilusInstitute for you! Check out the newest video in our #HSC101 playlist to find out more! https://buff.ly/47jB8us #TDI2025 Nautilus Institute (https://buff.ly/3XDBgBU)is the current group which has been running the DEF CON Capture the Flag competition (CTF) since 2022. The pre-qualifier is in spring and is a free online jeopardy style CTF open to anyone all over the world. The competition itself is a Attack - Dense CTF with heavy focus on binaries and reverse engineering. Those who are new, as well as kids, are welcome to participate in the qualifiers although there are not currently kid or n00b specific categories in the qualifiers. To participate in the qualifiers you will need a team of people who all have computers and internet connections. It is recommended you try some online jeopardy style CTF competitions in advance if possible, there are many free ones throughout the year. What is a CTF? https://buff.ly/3TlnfpC. What is a jeopardy style CTF competition? https://buff.ly/3ToC76Z. Find a CTF: https://buff.ly/3Eau5Yi As always check out https://buff.ly/3ZezfNF for our guide to Hacker Summer Camp

We are doing this! This is the beginning of our planning. If you want to join the team, we have a link to our Discord and volunteer signup on our website (noob-village (dot)org). We are looking for a lab sponsor that will start working with us early to provide a Noob-friendly CTF alongside continuous workshops in the village about how to complete the CTF. We will also be looking for CISOs (and CISO-like folk) who are interested in participating in a speed-dating group mentoring session we want to run in the village. There's plenty of time, but we are not going to wait until the last minute to make this awesome.

We're kicking things back off. Emboldened by this past hacker summer camp, we want to take some of the best ideas and some things we saw lacking from the cons to make things better for new people (new to Def Con, new to Cybersecurity, self-identified noobs like Josh Mason). We have started a discord server to increase the flow of ideas and organize and plan. Link in the comments.

New Blog Post! Free & Affordable Training News Monthly: May - June, 2024 - Curated Newly Released DFIR & OSINT Training, Books, & Tools From May - Upcoming Live Training and Conferences for June - Changes and Additions to the Free & Affordable Training Site - Current Discounts https://lnkd.in/gQg3J4-T #DFIR #OSINT #IncidentResponse #MalwareAnalysis

I've been trying out the #nextJS app routing system. I decided to make an intentionally vulnerable Next.js app. It's called Hack This App, and it's on GitHub. I want to add more vulnerabilities as I go along. Check it out and if you're new to GitHub and coding, feel free to make contributions or request features. Hack around, Have Fun, and Learn. https://lnkd.in/d9YAeetu

I don't often get to catch ???? Gerald Auger, Ph.D.'s Simply Cyber streams because of my work schedule, but I was able to today and was handed the baton for the #simplycybercommunitychallenge! As I like to jokingly tell my new employees during their orientation, my current role is a part-time college job that got carried away. I've been working as a retail manager for a decade and a half, most recently a Store Manager for Barnes & Noble--which is a book lover's dream retail job! I have always had an interest in technology, all the way back to figuring out how to program games on my TI-83 calculator in middle school. A few years ago I decided to put my time and resources into learning technology oriented skills, and fell in love with cybersecurity as a whole. I've got my Sec+ under my belt and have done countless courses--I just love learning. In particular, I am very interested in the GRC side of cybersecurity. I love teaching others, giving feedback, and communicating technical issues to laypeople. It's a very gratifying role to fill. I ran a home inspection business on the side for seven years, and my favorite part of those jobs were when I could sit a potential homeowner down and walk through what I found, break down what it means for them practically, and help them decide what their risk appetite allows--not at all dissimilar to conducting and delivering a risk analysis for a business. I've never been good at networking on social media, but this community is fantastic and I look forward to continuing to be a part of it! #teamcyber #simplycybercommunitychallenge

I don't often get to catch ???? Gerald Auger, Ph.D.'s Simply Cyber streams because of my work schedule, but I was able to today and was handed the baton for the #simplycybercommunitychallenge! As I like to jokingly tell my new employees during their orientation, my current role is a part-time college job that got carried away. I've been working as a retail manager for a decade and a half, most recently a Store Manager for Barnes & Noble--which is a book lover's dream retail job! I have always had an interest in technology, all the way back to figuring out how to program games on my TI-83 calculator in middle school. A few years ago I decided to put my time and resources into learning technology oriented skills, and fell in love with cybersecurity as a whole. I've got my Sec+ under my belt and have done countless courses--I just love learning. In particular, I am very interested in the GRC side of cybersecurity. I love teaching others, giving feedback, and communicating technical issues to laypeople. It's a very gratifying role to fill. I ran a home inspection business on the side for seven years, and my favorite part of those jobs were when I could sit a potential homeowner down and walk through what I found, break down what it means for them practically, and help them decide what their risk appetite allows--not at all dissimilar to conducting and delivering a risk analysis for a business. I've never been good at networking on social media, but this community is fantastic and I look forward to continuing to be a part of it! #teamcyber #simplycybercommunitychallenge

I'm going to buy someone a CompTIA #Security+ SY0-701 voucher. It could be you. I've put out many challenges in the past. Some people have blown me away. Some people have failed at the challenges but are my closest friends. Few people complete the challenges. You post 30 days about how you're studying for Sec+ and you tag me. I'll give people some buffer. The 30 days don't have to be every day. After I see your 30th post, I'll DM you and coordinate sending you a free Ian Neil Packt study guide. If you have already purchased it, then I'll send you a different study guide. Anyone who posts 30 days before the end of March gets a study guide. Then, I'll randomly pick one of those folks and buy them a voucher. So, if you complete the challenge, you get something. I'll get you started with a plan. Go to YouTube and search for all the Security+ 701 content you can find and make a playlist and add it. Go to securityplus(.)training and get all of Ian's free resources. Like flashcards, multiple full practice exams, and PBQs (performance-based questions). Go to Professor Messer's page and watch all of his free videos. Go to Cybrary, get a free account and take their free Security+ course. I'll post a link to 700 flash cards I made that you can use to study. Follow Jesse Johnson and Slay Security+, live Mondays and Thursdays, sponsored by Simply Cyber and Mason SC (yes, I'm helping Jesse build the course, because I don't have the time to and he's super creative and awesome). What do you post about? "I'm doing Josh Mason's #secpluschallenge. Today I did flashcards for 30 minutes and watched a video on asymmetric encryption. Day 2/30" That's fine. Tag me so I don't miss anything and I can share your progress with everyone else. If I can highlight you and help you get a job out of this, then I will be overjoyed. Why am I doing this? I can. I'm inspired by what John Strand and the team at Black Hills Information Security, Wild West Hackin' Fest, Antisyphon Training, the folks at TCM Security, Cyber Insecurity, Hack Red Con, and Hack Space Con do for the community. If anyone has resources to add, put them in the comments. I'll put links to all the things I mentioned above. If anyone wants to donate and help me give out more vouchers and stuff, I'll put a link to Cyber Supply Drop's donation page (501c3 tax-deductible donations) in the comments. If you read this far, the first person to comment with the name of 5 friends who could use this, I'll send you a study guide. If you don't have 5 friends to tag, then at least reshare it with your thoughts and leave an encouraging comment for others. **Dislaimer: as of 19 Feb at 11:22 AM EST, all of this is coming out of my own pocket. I'm going to need your address so I can order a book to be delivered to you. If I cannot DM you, I won't be able to get you your prize.**