Skip to Main Content
Talk Beginner

Open-Sourced Security: Tools, Roadmaps, and Building in the FOSS Way

Proposal status is Rejected
Session Description

Most students begin their security journey by trying out small tricks like phishing or CTF challenges, but rarely connect it to the larger ecosystem of open source security. This talk will explore how the open-source movement powers modern cybersecurity — from the tools we use, to the roadmaps we follow, to the new opportunities for contribution.

I will start with a short demo of a phishing scenario as a hook, then move into how attackers and defenders alike rely on open-source software. We will cover:

  • Open Source Security Tools
    (Nmap, Wireshark, Metasploit, OWASP ZAP, Trivy, OpenVAS, etc.)

  • Learning with Open Source Assets

    • Kurogoi OSINT & security roadmap

    • OWASP resources

    • HackTricks, GTFOBins, Open SSF

    • CTFtime + FOSS security blogs

  • What’s Missing & What Can Be Built

    • Open-source phishing awareness kits for clubs

    • Simulation software of real world scenarios

    • FOSS-first security training platforms

    • Lightweight DevSecOps pipelines for students/projects

  • How to Start Contributing

    • Submitting docs & writeups

    • Fixing bugs & adding features in security projects

    • Community-driven research (e.g., Trace Labs OSINT, Defcon Recon Village style)

The talk aims to inspire students to move beyond just “using” hacking tools, to building, contributing, and learning security the open-source way

Key Takeaways

  • How open-source fuels cybersecurity innovation.

  • The essential security tools every beginner can start with.

  • Public roadmaps (like Kurogoi) and resources to self-learn.

  • Contribution paths: how to give back to FOSS security projects.

  • Ideas for what the community can still build in the open-source security space.

References

https://github.com/kurogai
https://book.hacktricks.wiki/en/index.html
https://gtfobins.github.io/
https://openssf.org/training/

Session Categories

Knowledge Commons (Open Hardware, Open Science, Open Data etc.)
Community
Engineering practice - productivity, debugging

Speakers

Eshan Singh
Eshan Singh Tech interest and enthusiast

I’m Eshan Singh, a 21-year-old technology enthusiast who has been professionally involved for the last 2 years in various fields, IoT, DevOps, full-stack development, and cybersecurity. My love for technology extends beyond merely creating solutions: I actively promote learning through free educational programs, training for government sectors, and workshops at universities.

In my career, I’ve engaged in security auditing, microVM-based automation, and the optimization of infrastructure for companies across India and the UAE. As a Tech Specialist at DEF CON Delhi, I’ve designed Capture The Flag (CTF) challenges for hundreds of participants and overseen intricate technical operations.

When I’m not engrossed in coding or container orchestration, I’m working with communities to make innovative security and automation ideas more approachable. My objective is to connect advanced technology with practical applications, while motivating the upcoming generation of creators.