Welcome back, my aspiring SCADA/ICS cyberwarriors! Let’s begin by congratulating you on your foresight in committing to study SCADA/ICS hacking and security. This is certainly THE most important security issue this decade! In general, SCADA/ICS hacks have been of two types; Hack the protocols (modbus, DNP3, Profitnet, etc); Hack the Human Machine Interface (HMI) In […]
Continue Reading
Welcome back, my aspiring cyberwarrior! One of the most time-consuming, but necessary, activities in hacking is reconnaissance. Before we can hack a system, we need to know what operating system it’s running, what ports are open, what services are running, and hopefully, what applications are installed and running. Good reconnaissance increases our chance for success […]
Continue Reading
Many novices to cybersecurity underestimate the importance of social engineering. More experienced hands understand that social engineering is probably the greatest threat to our networks. Many of the most significant hacks in history had a social engineering element including; BlackEnergy3 Target POS 2016 Presidential Campaign and DCCC email hack RSA NY Times SONY Pictures and […]
Continue Reading
Welcome back, my aspiring OSINT experts! The Internet is the largest repository of data in the history of the world! Learn how and where to access it to bring its power and intelligence into your hands! Open Source Intelligence Open source Intelligence (OSINT) is useful and applicable to so many industries, such as; Pentesting and […]
Continue Reading
Welcome back, my aspiring Web App cyberwarriors! Among the most important types of web app attacks is the XXE attack. This is the XML eXternal Entity Injection attack. This type of vulnerability allows an attacker to interfere with the app’s processing of XML data. Many applications use the XML format to transmit data between the […]
Continue Reading
Welcome back, my aspiring OSINT cyber warriors! The Internet is the largest and deepest repository of data in the history of the world. With that tautology out of the way, let’s get down to work, and maybe, a little fun. All the data on the Internet can be very valuable to an investigator or hacker, […]
Continue Reading
Welcome back, my fledgling hackers! The next tutorial in this Web App Hacking series involves among the most critical vulnerabilities in web applications, cross site scripting or XSS. XSS annually makes it into the OWASP Top Ten web application vulnerabilities for good reason. In the most simple terms, XSS allows the attacker to send malicious […]
Continue Reading
Welcome back, my aspiring cyber warriors! In general, we can say that the solution to many injection attacks in web applications is “Input Validation”. Input validation makes certain that only the type of input that the application was developed to handle is input and not malicious commands or scripts masquerading as data. Some applications enable […]
Continue Reading
Welcome back, my aspiring cyberwarriors! Often, when doing a pentest, we have multiple Wi-Fi access points to test for security. Rather than testing each one individually with tools such as aircrack-ng, Reaver, pyrit, and hcxdumptool, and others, we can automate that testing with a single tool such as wifite. Wifite enables us to test all […]
Continue Reading
Hacking is the new martial art of the 21st century. To become a master hacker, you must think strategically and analytically. Master OTW offers some of his strategic wisdom for the novice hacker that every hacker should be armed with before doing battle. 1. Fools are always speaking. The wise listen. 2. Hacking is a […]
Continue Reading
Sec+ is the first step to becoming a cybersecurity professional and a job requirement for many roles.
Join Master OTW for an immersive, LIVE Bootcamp at just $249 (Free for Subscribers/Pro).
Hurry – only 20 guest spots available! Don’t miss your chance to pass your first certification.
We have never offered a package like this before!
This all-in-one bundle has helped countless beginners achieve their first certifications, including Security+, CWA, and Linux Basics.
Order today and receive the updated Sec+ 701 in February at no extra cost!
Each month one purchaser will be selected to