Presentation for Cyber Crime 101 course

[pebcak]

I'm going to do a guest presentation for a college level course -- an introduction to cyber crime. It'll be later in the semester; so the students will have more of a basis for my content.

My presentation will include a few examples of prominent malware and groups involved -- some BHEK and infection vectors, ChronoPay / Glavmed feud, underground economy and forums, etc...

But I'd like to do a basic demonstration -- some act of hacking that will strike fear into the heart of a college freshman. Do you all have any ideas or suggestion? Any here want to contribute?

Thanks!
-pebcak

[Kulverstukas]

Social engineering? and students are careless, so you will have a hard time "striking fear" into them.

[Mordred]

Nothing spells "OMFG" like exploiting one of your students laptop and exposing his pr0n to the whole class.


Not but seriously now, I actually don't think anything except targeting one of the students for your PoC will create as much shock as what you're looking for (if I understood correctly).

[Yo$H]

Yeah you couldn't be more right,  I know if my tutor was doing a presentation for the class on cyber security etc and had basically got my personal details up onto the screen and called me up to verify, it would have the desired effect lol 

[pebcak]

the professor shot down my arp spoofing demo

[Traitor4000]

the professor shot down my arp spoofing demo

but why 

[Resistor]

Do something like a facebook session cookie hijack imo.

[Spacecow]

You could always do something simple like a java drive-by using VMs and then "stealing" some info from the target. Would be relevant to the subject.

[GoldDust]

As much as it'd probably be fun to actually hit a target with a real exploit, it's unlikely that an academic institution would allow you to do this. Why don't you just do a setup? Setup a fake website and make it exploitable. Then just hit it with a SQL injection and have it barf out a bunch of fake CC#? Super easy and you'll look kick ass. -GD