Workshops

Secure Code Warrior Competition

Nearly 5 years have passed since the last Secure Code Warrior held in Turku and it’s a time to organise another round!

This competition will put your skills to the test. Players will be presented with a series of code challenges that will ask them to identify the problem, locate the insecure code, and fix the vulnerability. All challenges are based on real code examples, and are ranked from easy through to fiendishly hard!

The event is powered by Reaktor and Secure Code Warrior!

Registration: https://www.meetup.com/turkusec/events/300633487/

Date: 15.05.2024
Requirements: Laptop

16:45 – Doors open
17:15 – Short briefing from Reaktor and SCW
17:XX – Start of the competition
19:00ish – End of competition

You need to bring your own laptop to participate and we have limited amount of space available. If you want to go to sauna, equip yourself accordingly. Towels available so no worries if you didn’t bring one.

OSINT from the perspective of an ISP

Date: 15.04.2022
Time: 18:30
Venue: Hub Turku
Address: Nunnankatu 4

Learn to use the common tools that ISPs are using, to find out as much as they can about a Random IP Address, or an ISP.

During the workshop we will cover the following tools and techniques

  • RIR databases
  • Routing
  • Traceroutes
  • WHOIS
  • BGP announcements
  • Reverse DNS
  • Reverse zone delegations
  • Vuln databases
  • Webservers in the same network

Requirement: Laptops

We are hosted by the Institute for Pyrotechnical Cleaning.

Due to space limitations, 10 people, we kindly ask you to register: https://forms.gle/WTeKjp3HmrAikT6b6

WireGuard Micro-workshop on 18.03.2022

Date: 18.03.2022

Time: 18:30

Venue: Hub Turku

Address: Nunnankatu 4

On this workshop e will be playing with Wireguard VPN on some Mikrotik routers, getting it to work together and we will also have a few routers here to install.

Requirement: Laptops

We are hosted by the Institute for Pyrotechnical Cleaning.

Due to space limitations, 10 people, we kindly ask you to register: https://forms.gle/TiF4g7dz8kVc4vJ19

Cyber Security Governance Workshop a.k.a “Domains & DDOSes”

Do you want to know more about Cyber Security Governance? Are your Information Security Management skills up to date? Do you know Security Frameworks? Do you have a clue what BCP & DRP are? Can you properly report to top management about security incidents?

During the workshop the participants will take the role of an Information Security manager in a virtual company, whose core business can vary from health care to heavy industry and telecommunications. The IS manager responsibilities include: familiarizing with the core business, creating a plan to improve the company’s security posture, follow through with the plan while balancing with limited resources and reporting to the CISO when a security incidents occur. Course will implement gamification so welcome to “Domains & DDOSes”.

Lunch and refreshments will be provided. The workshop is powered by [Need_Sponsorship]

Date: 9 November 2019
Time: 11:00 – 19:00
Venue: Boost Academy/TurkuSec lab (Arwidssoninkatu 3B)

Outline

* Cyber Security Management 101

* Security Management Frameworks

– Incident reporting

– Brief introduction to different frameworks

* Compliance

* Debriefing

– Feedback

– Discussions

Requirements: Laptops

Organizer details:

Raimo Hilden, Information Security Specialist at Meyer Turku
Johannes Kossila, Business Information Security Officer at Nordea

Secure Code Warrior Competition

Are you a Secure Code Warrior?

This competition will put your skills to the test. Players will be presented with a series of code challenges that will ask them to identify the problem, locate the insecure code, and fix the vulnerability. All challenges are based on real code examples, and are ranked from easy through to fiendishly hard! Each player can choose from a range of software languages to compete fairly in the Tournament.

Registration link: https://www.surveymonkey.com/r/HJCNHLM

Date: 10.10.2019

Time: 17:50 – 20:30

Venue: Sparkup Turku, Second floor, Room Silo

Check out how the competition was in UK OWASP meetup:

Requirements: Laptop

You will have access to the platform before the event so that you can familiarize yourself with it – go wild! As soon as you register, we will send an invitation to the platform.

The event is powered by Secure Code Warrior!

Traffic Mining: Feel the packets, be the packets

The training is intended for anyone who is willing to learn more details about IP traffic and the principle of flow-based Traffic Mining (TM). You will be trained to do a hand-son Traffic Mining/Forensics job on IP traffic. In the process, you might get stuck in a rabbit hole and have to learn how to dig yourself out.

Instructor of the workshop is Stefan Burschka, Head Traffic Mining and Malware at Ruag AG.

Autumn General Meeting + Sauna Lock Sport

TurkuSec ry is hereby called to its autumn general meeting, which will be held at Turun Ylioppilaskunnan sauna, Rehtorinpellonkatu 4 A, on Tuesday 13th of November 2018 at 18:00.

The agenda is as follows:

1. Opening of the meeting

2. Election of the chairperson, the secretary, two examiners of the minutes, and if needed, two vote counters.

3. Assessing the legality and quorum of the meeting

4. Establishing the agenda and procedure of the meeting

5. Adopting a plan and a revenue and expenditure estimate and setting the membership fees for the next calendar year

6. Election of chairperson and other members of the board

7. Election of one or two auditors and their deputies.

8. Other matters mentioned in the meeting call

A member wishing to bring matters to the general meeting must inform the board in writing no later than one week before the meeting so that the matter can be discussed.

After the Autumn General meeting we will be having Sauna Locksport event. Our first Sauna LockSport event, powered by Nixu Corporation, was very successful, that’s why we are organizing it again! Lock picking is one of the widely practiced hobbies among security professionals. You never know, maybe one day during the physical penetration testing the lock picking skills may be very useful and handy. This is a perfect opportunity to brush up or learn lock picking skills. Needless to say, that the event will also be in a form of a workshop to help beginners with their lock picking conquest.

TurkuSec ry Board
Turku
20 October 2018

Reverse engineering workshop

TurkuSec is organizing a workshop on reverse engineering and everybody who is interested are welcome. We will be having total of 3 different programs to reverse, two of them are quite simple, and will be walked through during the event, while the 3rd one is aimed to people who are either already skilled in the art of reversing binaries, or suicidal.

The event will be beginner friendly, the instructor will be going through all the steps slowly, explaining everything as well as possible.

The workshop is powered by Crosskey! Food, snacks and drinks will be provided.

Registration link: www.surveymonkey.com/r/C2JTN8B
Date: 27th October
Time: 13:37 – 17:37
Venue: Boost Academy/TurkuSec lab (Arwidssoninkatu 3B)

Requirements:

– Participants shall have laptop computers, preferably running with pretty much any unix-like operating system: {free, open}bsd or some linux-based operating system
– Tools to be installed are radare2 or gnu-debugger (gdb)

At last, the main goal of the event is to have fun, and learn new stuff, all the rest is just bonus. So please don’t feel stressed or pressured at all to be somehow skilled el337 haxxor or anything, we all have different types and amounts of experience, skill etc, you get the point 🙂

Mastermind and the instructor of the workshop is k4m1.

Bug Bounty BBQ

Bug Bounty BBQ

This autumn we will be having three monthly meetups. Meetups are cool, however, we are always trying to organize more events that would enhance the knowledge, skills, and professional growth of our community. On the last Saturday of September we are organizing a bug bounty/ethical hacking session and combining it with BBQ! During the event we will choose one or two targets from HackerOne bug bounty platform and try to find bugs. Bug Bounty BBQ is powered by Primeo Oy!