Hacktoberfest'24 _ GDG on Campus BU.pptx

the ppt of hacktober fest infosession conducted by gdg-bu

1. welcomes you to HACKTOBERFEST !!

2. What is Hacktoberfest ?? Hacktoberfest is an annual, month-long celebration of open-source software development, held every October, which encourages developers of all skill levels to contribute to open-source projects hosted on GitHub and GitLab.

3. t hen w hat’s Open Source?? Open source refers to a software development model where the source code is made publicly available for anyone to use, modify, and distribute. Open source projects are often developed collaboratively by a community of developers and contributors. The idea behind open source is to promote transparency, collaboration, and continuous improvement.

4. WHY Open Source?? Real-World Experience: Open-source contributions let students apply classroom knowledge to real-world projects, gaining practical coding and problem-solving skills. Increases Legitimacy: Your work is publicly visible on platforms like GitHub, providing proof of your coding skills and commitment, boosting credibility with recruiters. ?

5. WHY Open Source?? Networking: Collaborating on projects connects you with industry professionals and other developers, opening doors to mentorship and job opportunities. Strong Portfolio: Contributions show real project experience, enhancing your portfolio and making you stand out for internships and jobs. ?

6. PAR BHAI START KAISE KARU??? GIT KAISE CHALATE HAII??? Best Way? Cheat Sheet. ( check this out )

7. Time to get our hands dirty!!

8. LET’S INSTALL GIT (i mean we asked you to do it pehle se) (angri 😾 )

9. Which of the following is a popular open-source web browser? A) Safari B) Internet Explorer C) Mozilla Firefox D) Google Chrome

10. Which open-source office suite is considered an alternative to Microsoft Office? A) LibreOffice B) Google Docs C) Apple iWork D) WPS Office

11. Who is considered the creator of Linux?

12. What version control system is commonly used in open source development?

13. MERN STACK??

14. Git and Node js Installation

15. Node js ?

16. Javascript Runtime What does it actually change in development NPM contains over 1.5 million packages Cross Platform ?

17. HTML, CSS, JS and now WHAT ?

18. REACT -Facebook, 2013

19. Component based Javascript library Simplicity in its component Based structure (JSX) Community help Various frontend issues on big orgs React in OS :

20. Sample Contribution ;)

21. Steps 1- Fork the following repository

22. Steps 2- Clone it using git git clone <repoLink>

23. Steps 3- Follow along (installing packages ,running the code and doing some changes) 4- git status 5- git add <directory> 6- git commit -m “my first commit” 7- git push origin main 8- Follow along

24. FAQs

25. OSINT????

26. What is OSINT (Open Source Intelligence)

27. (^.^) OSINT refers to collecting and analyzing publicly available data from Open sources.

28. It isn’t A Modern Technique

29. World War II

30. Open sources. Person Company Organisarion Social media

31. Most Popular Tool For Accessing OSINT

32. Google Dorking

33. Resource: OSINT FrameWork

34. Respect privacy laws Avoid malicious uses Ensure OSINT is conducted within legal boundaries

35. A Cyber Security Analyst

36. Early Threat Detection Vulnerability Assessment Threat Intelligence Sharing Tracking and Monitoring Cybercriminals Importance of OSINT in Cyber Security

37. Threat Hunting and Early Detection Incident Investigation Cybersecurity Awareness and Reporting A nd many moree… What does a cyber security analyst do with OSINT

38. On Campus • Bennett University GROW with G O O G L E Grow, Learn, Connect TOGETHER Nilay Gupta GDG on Campus Organiser/Lead

39. Welcome Everyone!

40. this talk, What did we just do? How to OSS your way?? GSoC Honeynet’s IntelOwl Some more on GSoC :P

41. fork->clone->install->run->

42. Ask the right questions (literally!!)

43. Bad questions: These questions won't get you too far in an online communities.  (Rule of thumb: Try to not be lazy and do your research!)  "Bhaiya bhaiya, Meine thodi C++ ki hai mein GSoC kaise karu?" → Truly answering this requires research “What is open source/gsoc?” → Easy to google "Bhaiya roadmap bna doge hamare liye?" → Easy to google "installing and setting up arch isn't even that tough. Why the ego?" → too brave

44. Good questions:  (Rule of thumb: Always google your questions first and try being specific.)  - "Hey, My opensearch instance isn't working. It is giving xyz error that I think is because of abc" → Precise - "I know this should be obvious but it isn't, where does a smart contract run it's code? I am not sure about this because I can't believe that it runs the same code everywhere. That's inefficient!" → The answer to it is actually pretty interesting. - "How do computers even generate random numbers? I know it has something to do with seeding but how do kernels even come up with the seeds?" → At least shows that you tried.

45. 2. How do you get good enough’ ?

46. 2. How do you get good enough’ ? (that's the neat part, you don't :P)

47. 3. How to get into FOSS ?

48. Basic guidelines  Find a project you like (algora.io, up-for-grabs.net, reddit, friends, GSoC projects etc) If you're new to either the tech stack or the project, finding an issue with the tag "Good first issue" might be useful! Speak to maintainers and ask them help to set it up And get gud :)

49. 4. Some cool programs :) (which you’ve been waiting for)

50. Remember, these are supposed to be entry level :) Google Summer of Code Students work with mentors from participating organizations, gaining practical coding experience while enhancing their resumes. LFX Mentorship LFX Mentorship, part of the Linux Foundation, offers a structured mentorship platform for students and early-career professionals. Hacktoberfest Hacktoberfest is an annual event that encourages students and developers to contribute to open source projects by submitting pull requests on GitHub in return for merch (stopped from this year) :)

51. DO NOT JUST EDIT A README FILE!!!!

52. IntelOwl Project Making the life of cyber security analysts easier

53. Say “hi” to the team :) Matteo Lodi @matte_lodi Threat Intelligence Team @0ssig3no Simone Berni mlodic 0ssigeno

54. Enjoying myself in the Cyber Security field!

55. Enjoying myself in the Cyber Security field! I have the best colleagues ever!

56. Enjoying myself in the Cyber Security field! I have the best colleagues ever! I’ll never stop learning!

57. Enjoying myself in the Cyber Security field! I have the best colleagues ever! I’ll never stop learning! We are like superheroes!

58. Enjoying myself in the Cyber Security field! I have the best colleagues ever! I’ll never stop learning! We are like superheroes! This is my dream job!

59. Unveil the reality

60. Unveil the reality Cyber security analysts are: understaffed overworked working 24/7 without work-life balance used as scapegoats do a lot of manual work which could be automated ref: Bitlyft ref: DarkReading ref: AECS

61. Automate, automate, automate 2017: Working in a little team of cyber security analysts Overwhelmed by security alerts Stuck in repetitive and boring tasks Burnt-out myself

62. Automate, automate, automate 2017: Working in a little team of cyber security analysts Overwhelmed by security alerts Stuck in repetitive and boring tasks Burnt-out myself We needed to start to automate our most common workflows.

63. The bottleneck: acquisition of threat intelligence context www.suspicious.domain.com suspicious file analyst

64. The bottleneck: acquisition of threat intelligence context www.suspicious.domain.com suspicious file analyst ... analyst

65. The bottleneck: acquisition of threat intelligence context www.suspicious.domain.com suspicious file a single button click or a single API request M a g i c S e c u ri t y T o o l analyst ... analyst analyst

66. We were looking for a tool Our requirements were:

67. We were looking for a tool Automated extraction of threat intelligence data from different sources Full-featured Web Application with user-friendly interface Our requirements were:

68. We were looking for a tool Automated extraction of threat intelligence data from different sources Full-featured Web Application with user-friendly interface Client library for easy integrations with other security tools High possibility of customization to allow different use cases Our requirements were:

69. We were looking for a tool Automated extraction of threat intelligence data from different sources Full-featured Web Application with user-friendly interface Client library for easy integrations with other security tools High possibility of customization to allow different use cases High level of scalability and speed Open source Our requirements were:

70. We were looking for a tool Automated extraction of threat intelligence data from different sources Full-featured Web Application with user-friendly interface Client library for easy integrations with other security tools High possibility of customization to allow different use cases High level of scalability and speed Open source Written with the most recent technologies Well maintained and updated Our requirements were:

71. IntelOwl was born Born in Certego at the start of 2020, it is a great example of a successful Open Source project: right now it is one of the most popular Threat Intel projects on GitHub (>3k stars). IntelOwl provides data enrichment of threat intel artifacts (IP, Domain, URL, files, PCAP, hash, etc).

72. IntelOwl solution www.suspicious.domain.com Wi thOUT Intel Owl suspicious file analyst ... analyst

73. IntelOwl solution www.suspicious.domain.com Wi thOUT Intel Owl With Intel Owl suspicious file analyst analyzers analyst a single button click or a single API request ... analyst

74. IntelOwl Repository & Tech Stack The most common (and open source) technologies and framework are used and we keep them constantly updated: Docker Python3 ReactJS Django ecosystem Celery PostgreSQL ElasticSearch Nginx Uwsgi Daphne RabbitMQ/SQS/Redis

75. IntelOwl: How to use the platform

76. IntelOwl: Phishing verification

77. Thank you for listening! intelowlproject/IntelOwl This presentation was reviewed and built together with our awesome team: Daniele Rosetti , Pier Giorgio Bergonzi and Martina Carella. The icons were collected from: FlatIcon Memes were generated with Imgflip @intel_owl

78. Happy?

79. What’s in a name ;) Google Developers Groups On Campus Organiser by G o o g l e Google Summer of Code 2024 at Honeynet with over 30,000 lines of code Smart Bu Hackathon #4, 2023 9 CGPA :P Founded a tech community in high school Fullstack, DevOps and Cloud [Java, Js, Ts, Go, Py, C++] Organised and hosted 20+ on campus events with my team <3 Reached over 10,000 students in the last 3 years BLAH, BLAH, BLAH----------------------------------------------->

80. THANKS FOR JOINING!! KEEP CONTRIBUTING !!!