Skip to content

NottsCSS/forensics-workshop

Repository files navigation

Forensics workshop by CSS 23rd October 2019

Purpose of this workshop

We all can agree that computer science is such a big and overwhelming field that it can sometimes be hard to find a field that you like to pursue your career in. The goal of this workshop is to expose students to something new that they usually would not come across during their years studying in Nottingham. This workshop aims to get your feet wet with some basic digital forensics and linux skills.

Where are these challenges taken from?

They are taken from the 2018 picoCTF. I highly suggest you to try the challenges even if you are not interested in computer security as I have personally learned a lot from these challenges, not just in digital forensics but also in fields such as general computing skills, web security and binary exploitation.

Pre-requisites

For this workshop, we will be using VirtualBox to run a guest Kali Linux virtual machine. However, VirtualBox requires a technology called VT-x for intel machines, or AMD-V for AMD machines. To check if your computer is compatible, refer below.

Windows

  1. Refer to this link
  2. Note: VT-x or AMD-V may be disabled in the bios, check your CPU model online to see if it is VT-x enabled. If so, enable it in the bios.

MacOS

  1. Open a terminal
  2. Type in this command: sysctl -a | grep machdep.cpu.features | grep VMX
  3. If the output looks something like this, you can use VirtualBox:
machdep.cpu.features: FPU VME DE PSE TSC MSR PAE MCE CX8 APIC SEP MTRR PGE MCA CMOV PAT PSE36 CLFSH DS ACPI MMX FXSR SSE SSE2 SS HTT TM PBE SSE3 PCLMULQDQ DTES64 MON DSCPL VMX SMX EST TM2 SSSE3 FMA CX16 TPR PDCM SSE4.1 SSE4.2 x2APIC MOVBE POPCNT AES PCID XSAVE OSXSAVE SEGLIM64 TSCTMR AVX1.0 RDRAND F16C
  1. If the output is empty, your machine does not support VT-x

Linux

If you are already using a linux distribution, you can just use your current machine for this workshop.

Installation

First, you will have to install VirtualBox. You can download it here.

Once you have VirtualBox installed, you can proceed to download the pre-made VirtualBox image for Kali Linux (recommended) or manually install Kali Linux Light.

Kali Linux

Make sure to choose from the VirtualBox Images section instead of VMware or Hyper-V.

image

After you have finish downloading, proceed to open VirtualBox.

image

Once you see the main menu, you can go ahead and import the appliance we just downloaded, by clicking on the import button.

image

And once you have located the file you've downloaded previously, click on next and then import. Then after successfully importing, you should see the device ready to be started at the main menu.

image

Kali Linux Light

After you have finish downloading, proceed to open VirtualBox.

image

Once you are at the main menu, click on new and name your device as Kali Linux.

image

Continue with the installer interface with the default values, and you should see your machine ready to be started in the main menu.

About

Forensics workshop 24th October

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages