Lessons
The following lessons explain different programming concepts and have been published by our members. Search for a particular lesson using the filters
In this article, you will explore the world of Cross-Site Scripting (XSS), a vulnerability that turns the browser into an attack field without the user noticing. You will learn how JavaScript can be used both to create rich experiences and to inject malicious code. You will discover practical examples, understand the types of XSS, and develop a critical eye to identify vulnerable code. Because in web defense, the enemy often hides in what seems innocent.
In this article, you dive into the art of reading code as a tool for cyber defense. It's not just about finding errors, but about detecting subtle alterations that could indicate an attack. You will learn the fundamentals of Python, understand how attackers manipulate scripts, and train your mind to restore the original intent of the code. This is an exercise in analysis, logic, and active listening: code also speaks, if you know how to read it.
This lesson introduces you to the art of intercepting and analyzing data in transit. Learn to use Burp Suite to capture HTTP requests, identify encoded information, decode it with CyberChef, and apply cracking techniques to reveal passwords and secrets hidden in plain sight.
Learn how a simple, poorly protected file upload function can open the door to a reverse shell. This lesson explores common PHP vulnerabilities, from arbitrary uploads to remote code execution, and shows you how to establish reverse shells from compromised servers.
Sometimes, a single quote is enough to bring down a system. In this practical and responsible guide, you'll learn how SQL injection is exploited and how to crack passwords via hashes, using tools like SQLMap, John the Ripper, and Hashcat. Because understanding vulnerabilities is the first step to protecting them.
Discover essential network scanning techniques to identify active devices and vulnerabilities during your pen-testing phases.
Discover the essential techniques for using the Nessus scanner to protect your organization's assets through automated vulnerability scanning.
This article immerses you in a cyber defense challenge with a deeply human focus: rescuing a lost agent through clues hidden in code. You'll learn to deduce geographic information with Python, generate custom dictionaries, use Hydra to automate controlled attacks, and decode base64 messages. More than a technical exercise, it's a lesson in how cybersecurity also involves empathy, ingenuity, and commitment to those who trust us to protect them.
A letter to remind you that you are not alone in this transformation. Today you are right in the middle of this challenge, and I want you
Face the course's most complex challenge. Learn to identify exposed backups, access with Evil-WinRM, abuse scheduled tasks to escalate privileges in Windows, and decode the final flag in Base64. This challenge tests your observation, creativity, and everything learned in previous days.
Windows may seem solid, but beneath its surface lie misconfigured services, vulnerable scheduled tasks, and forgotten credentials waiting to be exploited. This lesson teaches you how to escalate privileges in a corporate environment, using techniques like service abuse, unprotected binaries, and specialized tools such as WinPEAS and PowerUp.
Master IPTables and Protect Your Network with Advanced Firewall Techniques
Unlock the secrets of cybersecurity with our lesson on identifying vulnerable systems and services! Learn essential techniques for penetration testing, including port scanning, service identification, and vulnerability analysis. Equip yourself with the skills to protect businesses and society from cyber threats. Join us today!
Crafting Optimal Enterprise Network Architectures: Balancing Performance, Security, and Scalability for Seamless Operations and Growth.
This article takes you on a digital hunting mission where there is no malware or clear alerts, only subtle clues hidden in the data. You will learn to use Python to filter names, identify patterns, and apply conditional logic like a true forensic analyst. The goal: find an impostor among a list of identities, and decode a hidden base64 message. A lesson on how defense can also be an active search for the truth.
Learn how a vulnerable WordPress installation with the RevSlider plugin can be the perfect entry point for a reverse shell. This challenge explores the use of Metasploit, exploiting outdated plugin versions, and the offensive mindset that turns an innocent blog into an opportunity.
This exercise is not just about tools, but about observation and deduction. Learn to exploit services like WordPress and SMB using lateral thinking. Discover how public information can become an attack dictionary, and how enum4linux can help you open hidden doors.
Gaining access to a system is just the beginning. The real conquest starts with privilege escalation. In this lesson, you'll learn to identify misconfigurations, abuse SUID binaries and poorly configured sudo, and how to move laterally between users to dominate the system.
Learn effective techniques and tools for maintaining persistent access during penetration testing. Discover methods such as creating additional user accounts, installing backdoors, using persistent malware, scheduling tasks, and leveraging covert channels to ensure long-term access. Understand ethical practices and tools like PowerShell Empire, Covenant, and more for efficient post-exploitation.
Discover Nmap, the ultimate tool for port scanning and network mapping! This powerful software helps identify hosts, services, and potential vulnerabilities in your network, making it essential for penetration testing. With user-friendly commands and advanced scripting capabilities, Nmap is a game-changer for cybersecurity enthusiasts.