Jump to content

Keggy

Active Members
  • Posts

    3
  • Joined

  • Last visited

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

Keggy's Achievements

Newbie

Newbie (1/14)

  1. As stated there's not really anything viable for what you're asking. I haven't seen a datacentre that will give you access to one of their firewalls, as they're usually shared. You can of course rent rackspace (not the company) and supply your own or have the DC supply firewall and have access to it. However this isn't a reality for a hobby server. You mention it's for a game server, this also brings in new difficulties as whatever you have listening for those connections might not be up to the job and relatively easy to crash with basically no data. An example is a torrent tracker, the site frontend may be served via a service like nginx, though the actual tracker may be a C application with its own socket, if that's vulnerable then it's trivial to take that part of the service down. If you're just concerned with saturation of your server's connection, then there are suppliers of dedicated and VPS's which advertise DDoS protection. Though take this with a grain of salt, if they're a reseller then chances are they also have no control of the network equipment so it's your standard L4 protection, they'll also advertise their network can handle 400Gbps+, may even note how many packets a second that equates to. If it's actually direct to the datacentre and game servers do not breach their T&C then they may be able to do something, if you report a sustained attack (though they'll likely notice if it's a VPS as you'll affect the other users) they can start to mitigate it at the network rather than the traffic reaching your NIC. Of course many DoS attacks will be from pissed off users and don't have the ability to saturate your connection, therefor blocking at a software firewall can prevent the service from getting unwanted traffic. However if it's a big attack like some kind of amplified DDoS and the traffic is getting as far as your OS, it's not going to do anything to keep it alive. You do have the option of reverse proxy / CDN services such as CloudFlare, but be aware they do not support sockets, just HTTP/S (80,443 for free anyway). If you are able to use such a service it's recommended you change your IP, and do what you can to hide the IP. If an attacker gets your IP, they can bypass CF's infrastructure and hit you directly. It's also worth noting if they get hit hard enough on the free account they'll switch your DNS to bypass mode directing any traffic straight to you. If you want to go direct and are on a tight budget you can try Kimsufi (OVH France), or even one of their Canadian resellers. Depends if you want it in EU/NA etc. Russian VPS from a DC - https://secure.vstoike.ru/cart&action=default&languagechange=English again very low price but have 3TB data allowance and again, you're stuck on 100Mb/s.
  2. Old thread, but I just did this and wondered if it was talked about anywhere. digip, you're pretty much right, there's 4 files and three of them say 'I'm number one, two and three'. The 4th one just contains documents to be copied. Although the image is not an image using steganography, it's just not an image. I opened it with hexedit, saw the 'PK' in the header. Docx files are just zips full of XML essentially, but yeah it's a docx.
  3. I might be able to help a little, the University posted for their Ethical Hacking Course I attend, I will complete the degree this year. It's advertised as the first course of its type in Europe I believe, same with their Game based degrees. Anyway, that's important because there isn't a tried and tested method of getting students to where they should be. So if you're doing the course somewhere else it's important to actually look at what you study. At Abertay we get quite a lot of students from the likes of France so I don't know what else is out there but it is a popular course initially, although roughly 50% of students have dropped out by the third year. The website will tell you the modules you will sit, you can usually find detailed descriptors of these modules through the site as well. Again this is important because often there is little between the courses, I'm a networking student but have shared many modules with the Ethical Hacking lot, plus we have our own Ethical Hacking classes. We also have web development modules which generally bore me to tears, but I guess it might be worth it. So that's working with SQL and PHP/ColdFusion. With a subject like Networking there are plenty of vendor qualification that institutes are willing to put their students through, for example I have a CCNA and multiple MCPs. While I don't think they're worth a great deal and the topics covered are really just an introduction, plus the Microsoft exams take about an hour to revise for. Most employers know this, but it doesn't hurt to have them. They have helped me get employment during the summer. And as I say we do many of the same subjects, the only 'hacking' things we do are really very basic, but again there is scope for you to learn what you want. For example we have covered metasploit in class, (D)DoS, MITM, scanning, sweeping blah blah... With a fair amount on the laws and studying famous hackers. So it's really just and intro but they are modules that you're then able to use in the future, the degree doesn't lock you down. You're also expected to produce lectures and present these on a given subject, for example rainbow tables or SQL injection. One of the main areas that the courses differ is the project. You form a team and essentially complete a real life (ish) project. The first semester is about learning the likes of how to plan a project, why projects fail and methodologies. Such as in the UK PRINCE2 is popular, well amongst larger projects anyway. The second semesters you are to build the project, again more presentations, produce documentation and all that jazz. While each computing degree does this, you have very different projects and again show how the course is taught, we for example had a choice of projects while the EHs created their own. I seem to be going on an awful lot so I'll finish in short, check what the course actually contains, and look and see what modules are carried across. Many degrees at these modern universities are mashed together for no other reason than to make money. They aren't designed 100% for your course let alone the subject. Most of the modules you do are from other courses or are just very basic. Really you aren't at any disadvantage if you go and just do Computer Science, however you may find it a little boring. Vlek007 asked about Abertay so I'll give you a quick once over. Like most your first year will be basic, it's essentially to get rid of people. The second year you start to learn the basics beyond how a computer functions, but for example you will learn more in-depth about routing protocols, ethical hacking you really continue with more techniques and the law. You're also expected to do most of the work yourself, the exams are pretty simple usually, and the course is laid back so plenty of time for you to actually go away and learn. Although they're more like this now so you can get a job and actually continue your studies. As for the lectures, it's the usual if you read the website you will get the impression they invented the world, however many of them are pretty good. For example the head of Computing and Engineering is a Cambridge graduate who has worked for the likes of Lockheed Martin, and many of them have books published that you can buy on Amazon. Although the juicy stuff doesn't happen until your later years. If you have any specific question just ask, oh if you do want to do ethical hacking you need to attend and interview and background checks.
×
×
  • Create New...