Raven1 VulnHub CTF Walkthrough - Boot-To-Root
Comprehensive walkthrough of Raven1 CTF challenge from VulnHub, demonstrating boot-to-root exploitation techniques for ethical hacking and penetration testing practice.
OWASP Juice Shop - SQL Injection
Learn to perform SQL injection on OWASP Juice Shop in this hands-on demonstration. Gain practical skills in identifying and exploiting web application vulnerabilities to enhance your cybersecurity knowledge.
Stop Trivializing Cybersecurity - Level Up and Treat Yourself Like a Professional
Elevate your cybersecurity approach: Treat it as a professional discipline, emphasizing continuous learning and skill development to effectively combat evolving threats.
Installing and Configuring Suricata for Intrusion Detection
Learn to install and configure Suricata, a powerful open-source threat detection engine combining IDS, IPS, and network security monitoring for enhanced cybersecurity protection.
Installing and Configuring Wazuh for SIEM - Blue Team Operations
Learn to set up Wazuh SIEM for detecting intrusions, attacks, and malicious activity. Covers installation and agent configuration on Windows and Linux for effective security data management.
Installing & Configuring Snort
Learn to install and configure Snort 2 for intrusion detection. Explore the process of capturing network traffic, identifying malicious activity based on predefined rules, and setting up logging and notifications.
Bypassing UAC with UACMe - HEK.SI 2022 Conference Presentation
Comprehensive guide to bypassing User Account Control on Windows 10 for privilege escalation, presented at HEK.SI 2022. Covers techniques using UACMe tool to elevate privileges and enhance system access.
Windows Post Exploitation - Dumping & Cracking NTLM Hashes
Demonstra o processo de extração e quebra de hashes NTLM no Windows, além de cobrir o uso de hashes NTLM para ataques Pass-The-Hash em cenários de pós-exploração.
Revisiting Parrot OS - Pros and Cons for Penetration Testing
Explore the pros and cons of Parrot OS for penetration testing, including reasons for discontinuing its use and its current strengths and weaknesses in cybersecurity applications.
Log4J Vulnerability (Log4Shell) - Exploitation and Mitigation
Exploración detallada de la vulnerabilidad Log4Shell en Log4J, demostrando técnicas de explotación y mitigación en Apache Solr. Incluye explicación del impacto y gravedad de esta falla crítica de seguridad.
Windows Enumeration with winPEAS
Automate Windows local enumeration and identify privilege escalation vectors using winPEAS. Learn efficient techniques for system analysis and vulnerability detection.
Cybersecurity Career Roadmap - Paths, Certifications, and Skills
Explore diverse cybersecurity paths, certifications, and skills needed for transitioning into a cybersecurity career. Gain insights into industry-recognized resources and career progression opportunities.
Windows Red Team Credential Access Techniques - Mimikatz & WCE
Explore Windows credential access techniques using Mimikatz and WCE to dump passwords and hashes from memory. Learn post-exploitation methods for red team operations and penetration testing.
Windows Red Team Persistence Techniques - Persistence With PowerShell Empire
Explore Windows Red Team persistence techniques using PowerShell Empire for maintaining access to targets. Learn about this post-exploitation framework and its features for bypassing protections.
Linux Red Team Exploitation Techniques - Exploiting WordPress & MySQL
Aprenda técnicas de exploração de equipe vermelha para identificar e explorar vulnerabilidades em servidores Linux com aplicações web, focando em WordPress e MySQL.
Windows Red Team Exploitation Techniques - Luckystrike & PowerShell Empire
Explore Windows Red Team exploitation techniques for initial access, including creating malicious macro documents and setting up a C2 server with PowerShell Empire & Starkiller.
Red Team Reconnaissance Techniques
Explore active and passive reconnaissance techniques for Red Team operations, including information gathering on organizations, infrastructure, and personnel to support targeting and adversary lifecycle phases.
Red Team Adversary Emulation With Caldera
Explore automated Red Team adversary emulation using MITRE Caldera, a framework built on ATT&CK for simulating attacks and testing organizational security defenses.
Active Directory Enumeration With PowerView
Learn to perform Active Directory enumeration using PowerView, a powerful tool for gathering information about network domains, users, and computers in penetration testing scenarios.
Windows Post Exploitation - Local Enumeration
Learn manual local enumeration techniques for Windows targets using built-in commands to gather user, group, and system information, and identify active security features.
Steel Mountain Walkthrough - Manual Windows Exploitation
Gain initial foothold and elevate privileges on Windows target by exploiting Unquoted Service Paths manually and with Metasploit. Learn practical techniques for Windows penetration testing.