Welcome back, my novice hackers! In this series on Web App Hacking, we are examining multiple ways to hack web sites and web applications. In this particular tutorial we will examine directory or path traversal. In this type of attack, the hacker is able to get access files on the underlying server that might be […]
Continue Reading
Welcome back my rookie hackers! Every so often, I run across a new hacking tool that really gets me excited. Autosploit is one of those! Autosploit combines the power of two of my favorite tools, Shodan and Metasploit! AutoSploit uses Shodan to find specific targets based upon their banners and then Metasploit to automate the […]
Continue Reading
The worst thing that can happen to any hacker is being detected by a security admin, the security technologies (IDS, firewall, etc.), or a forensic investigator. Every time we send a packet to our intended target, that packet contains our IP address in the IP header. When we make a TCP connection, the target system […]
Continue Reading
Welcome back, my novice hackers! A few years back (2016 precisely) a major hack took place that had significant repercussions around the world. This was a hack of the servers at Mossack Fonseca, a major law firm in Panama and became know as the Panama Papers hack. This law firm specializes in assisting the rich […]
Continue Reading
Welcome back my novice hackers! Recently, I have received numerous questions regarding how to update the msfconsole built into Kali. Until recently that was an easy question to answer. You simply enter “msfupdate” at the command line. Now, Rapid7–the developers of Metasploit– have changed how we update Metasploit when it is built into an operating […]
Continue Reading
In this series, I have been trying to familiarize you with the many features of the world’s best framework for exploitation, hacking, and pentesting, Metasploit. There are so many features, and techniques for using those features, that few pentesters/hackers are aware of all of them. Many times, when doing a pentest/hack, we need to run […]
Continue Reading
Welcome back, my tenderfoot hackers! Do you need to get a Wi-Fi password but don’t have the time to crack it? In previous tutorials, I have shown how to crack WEP, WPA2, and WPS, but some people have complained that cracking WPA2 takes too long and that not all access points have WPS enabled (even […]
Continue Reading
SCADA and Industrial Control Sites (ICS) are among the most crucial and most vulnerable sites. These sites include everything from nuclear power plants, to home HVAC systems and everything in between. The security of these systems is slightly different than traditional IT systems. In traditional IT systems we are protecting the data. With SCADA/ICS systems […]
Continue Reading
Welcome back, my hacker novitiates! If you have been following this new Snort series, you know that Snort is the world’s most widely used intrusion detection/protection system. Now a part of the world’s largest network equipment company, Cisco, it is likely to be found everywhere in one form or another. This makes a compelling argument […]
Continue Reading
Welcome back, my tenderfoot hackers! As you should know from before, Snort is the most widely deployed intrusion detection system (IDS) in the world, and every hacker and IT security professional should be familiar with it. Hackers need to understand it for evasion, and IT security professionals to prevent intrusions. So a basic understanding of […]
Continue ReadingWe are celebrating our 10th year in business with a gift to you.
For THIS MONTH ONLY you can get everything you need to launch you cybersecurity career at the discounter price of $149
Learn Linux, Networking, Sec+ 701 certification, Radio Basics, Python, Wi-Fi Hacking, Remaining Anonymous, Cryptography, Wireshark, and Nmap – all in one bundle!
If purchased separately, this material would cost over $1,000
This bundle also includes Master OTW’s highly anticipated upcoming book, Python Basics for Hackers, along with his best-selling titles, Linux Basics for Hackers and Network Basics for Hackers.
Plus, every month, one lucky purchaser will win
A FREE 3-YEAR TRAINING PACKAGE
Thanks for growing with us. To celebrate, we’re giving you 35% OFF all training packages! USE CODE YEAR10
UNLOCK ACCESS TO LIVE & RECORDED CLASSES AND MASTER OTW’S BESTSELLING CYBERSECURITY BOOKS
Click here to see everything included in the training packages
