Главная
Study mode:
on
1
- Welcome
2
- Lesson overview & staying humble
3
- Reverse shells vs bind shells
4
- Staged vs non-stage payloads
5
- Brief bind shell demonstration with netcat
6
- Reviewing scans from last week
7
- Exploiting mod_ssl 2.8.4 w/ OpenLuck manually
8
- Exploiting Samba 2.2.1a w/ trans2open Metasploit
9
- Reviewing some of our report findings
10
- Scanning, enumerating, and exploiting Hack The Box's Lame
11
- Credential stuffing & password spraying overview
12
- Running breach-parse against Tesla.com
13
- Using Burp Suite to perform credential stuffing & password spraying
14
- Boxers or briefs?
15
- What are you drinking?
16
- Are web pentest skills and network pentest skills interchangeable?
17
- What college degree is best for cybersecurity?
18
- What's new in your life / upcoming talks?
19
- What is this channel about?
20
- Troubleshooting a Kioptrix issue
21
- Is the CEH worth pursuing?
22
- Jon Jones??
23
- Best advice to move from service desk to security?
24
- Is OSCP the best certification?
25
- Do you need a CS degree to be successful?
26
- What makes hacking unethical?
27
- How to transition from webdev to appsec?
28
- Tips for organization when testing large clients?
29
- What did you think about the Pentest+?
30
- How many more segments of Zero to Hero are left?
31
- How do you submit/plan a talk?
32
- What keyboard are you using?
33
- Are we building an AD lab next week?
34
- Are most of your assessments AD?
35
- Should I stop the OSCP and attempt the eJPT if I'm struggling?
36
- What are your specs?
37
- Are we covering all PowerShell in the course?
38
- OSCP vs HTB
39
- What is you Domain Admin % rate on all engagements?
40
- Domain Admin from a printer?
41
- How many assessments have you done total?
42
- How much time do you get per assessment?
43
- How does the OSCP help in the job market?
44
- What is an internal assessment?
45
- What should I do at a conference?
46
- Best stories from an engagement?
47
- DragonCon EFF?
48
- Is the CEH worth it with a discount?
49
- Do you ever feel pressure or anxiety when learning pentesting?
50
- Is web app your number one priority right now?
51
- How far did you get in the OSCP labs?
52
- Bob....
53
- Finding pentest work w/ a felony
54
- When is the next stream?
55
- Is eating ice bad for you?
56
- What do we need for the AD stream?
57
- Zoom on Immunity Debugger?
58
- Favorite security podcasts?
59
- Do you perform phishing campaigns?
60
- What type of phone do you have?
61
- Where do you get most of your pentest news?
62
- What kind of case do you have?
63
- What time do you wake up for work / work from home life
64
- How do remote internal pentests work?
65
- CIS Top 20
66
- What is your monitor setup?
67
- Lego Bugatti / AWAE / Arizona Cyber Range
68
- What's your watch?
69
- Do you get burned out?
70
- Does your workplace pay for training?
71
- Work schedule / down time
72
- How did you become a pentester?
73
- Overtime?
74
- Bug bounties you're a part of?
Description:
Dive into an extensive 2-hour 48-minute video tutorial on penetration testing, covering exploitation techniques, shell types, and credential stuffing. Learn about reverse and bind shells, staged vs non-staged payloads, and practical demonstrations of exploiting vulnerabilities in mod_ssl and Samba. Explore scanning and enumeration techniques using Hack The Box, and gain insights into credential stuffing and password spraying with tools like breach-parse and Burp Suite. The tutorial concludes with a comprehensive Q&A session addressing various cybersecurity topics, career advice, and personal experiences in the field of ethical hacking.

Zero to Hero Pentesting - Exploitation, Shells, and Some Credential Stuffing

Cyber Mentor
Add to list
#Information Security (InfoSec) #Penetration Testing #Cybersecurity #Ethical Hacking #Burp Suite #Metasploit #Offensive Security #Credential Stuffing
0:00 / 0:00
1 of 74

- Welcome