Welcome back, my aspiring OSINT cyber warriors! John Matherly began Shodan in 2009 to collect banner information from nearly early IP address on the planet, put that data into a huge database,and index that data for our use. Shodan has been so successful that it has inspired others to imitate and improve upon it. Censys.com […]
Continue Reading
Welcome back, my aspiring cyber warriors! Whether you are an aspiring master hacker, network engineer or security engineer, there is one tool that each of the roles need to be familiar with, nmap. nmap began as a simple, modest, port-scanning tool utilizing the ability to send TCP, UDP or ICMP packets to a host and […]
Continue Reading
Welcome back my aspiring cyber warriors! In my earlier tutorial, I showed you some of the basics of using Shodan, “the world’s most dangerous search engine”. In this tutorial, we will expand and extend your knowledge of the capabilities of Shodan to find outdated and vulnerable online systems. Often times, aspiring cyber warriors assume that […]
Continue Reading
Welcome back, my aspiring cyber warriors! Sometimes the best information is just there for our asking! Given a little knowledge and some simple tools and techniques, we can harvest information about individuals and organizations that they are not aware they are providing us! Organizations often post documents on their website usually in a Word .doc […]
Continue Reading
Welcome back, my aspiring cyber warriors! Web sites are built using a variety of technologies (see Web Technologies here). In most cases, before we develop a hacking strategy of the web site, we need to understand the technologies employed in building the website. Web site attacks are not generic. Attacks against WordPress-based web sites won’t […]
Continue Reading
The Internet is the largest treasure trove of data in the history of humankind! This repository of data is so large that companies and scientists are straining to understand and manage its scale. We can mine that data with many different tools and sources. When that data is combined with data from multiple sources, a […]
Continue Reading
Welcome back, my neophyte hackers! In the world of information security, the most common intrusion detection system (IDS) you will ever encounter is Snort. As you probably already know, an IDS works similarly to antivirus (AV) software on your desktop; It attempts to identify malicious software on your network and warns you of its presence. […]
Continue Reading
Reconnaissance is crucial for successful hacking/pentesting. Maltego is a unique tool for finding data via open source information across the world wide web and displaying the relationships between this information in a graphical format. From Paterva’s, Maltego’s developer, own web page, they describe Maltego as; “Maltego is an interactive data mining tool that renders directed […]
Continue Reading
Welcome back, my aspiring hackers! As I often say, reconnaissance is a crucial part of hacking. You must carefully and thoroughly gather information on the target before attacking, otherwise you are usually wasting your time and risking detection. There are many tools for this purpose many of which I have demonstrated here such as nmap, […]
Continue Reading
Welcome back, my fledgling hackers! As we have progressed through this series on Metasploit Basics, we have used numerous techniques to exploit your target system including; 1. SMB Exploits (EternalBlue and MS08_067, for instance); 2. File Format (ms14-0440_sandworm, office_word_hta); 3. Browser Exploits (autopwn, Abobe Flash and numerous others); 4. Social Engineering Toolkit(SET); Custom Payloads with […]
Continue Reading
Sec+ is the first step to becoming a cybersecurity professional and a job requirement for many roles.
Join Master OTW for an immersive, LIVE Bootcamp at just $249 (Free for Subscribers/Pro).
Hurry – only 20 guest spots available! Don’t miss your chance to pass your first certification.
We have never offered a package like this before!
This all-in-one bundle has helped countless beginners achieve their first certifications, including Security+, CWA, and Linux Basics.
Order today and receive the updated Sec+ 701 in February at no extra cost!
Each month one purchaser will be selected to