For some time now, I have been contemplating writing an article on why hacking is THE most important skill of the 21st century. As if to emphasize my point, Russia has used its elite hacking teams to stage a bloodless coup of the world’s most powerful empire. These events are a case study in just […]
Continue Reading
At times, we may want to create a custom payload (for more on Metasploit payloads, see Metasploit Basics, Part 3: Payloads). For instance, we may want to embed a payload/listener into an application or other malicious software that we hope the target clicks and we can take control of their computer. This is exactly what […]
Continue Reading
In a previous tutorials in this Metasploit Basics series, we learned how to use hashdump to pull password hashes from a local system. In “Cracking Passwords with Hashcat”, you learned how to crack these hashes with hashcat. In each of these cases, the password hashes were the passwords of the users on the local system […]
Continue Reading
Welcome back, my Metasploit Cyber Warriors! Although Metasploit is an “exploitation framework” primarily used for hacking and penetration testing, it can also be used to provide some rudimentary forensic capabilities. It’s primary usefulness as a forensic tool is to gather evidence from a remote system when the physical system is unavailable to the investigator. In […]
Continue Reading
Welcome back, my aspiring Metasploit Cyber Warriors! Recently, Rapid7, the developers of the world’s most popular exploitation framework Metasploit, released a totally new rebuild! It’s been almost 8 years since Metasploit 4 and it could not have come at a better time! Rapid7 has made some important changes to Metasploit to make it easier to […]
Continue Reading
Welcome back, my aspiring cyber warriors! In this series on Web App Hacking, we continue to explore ways to hack web applications (apps). In this tutorial, we will explore Cross Site Request Forgeries or CSRF. CSRF is an attack where the attacker inherits the credentials and privileges of the legitimate user to redirect the browser […]
Continue Reading
Welcome back, my neophyte hackers! In the world of information security, the most common intrusion detection system (IDS) you will ever encounter is Snort. As you probably already know, an IDS works similarly to antivirus (AV) software on your desktop; It attempts to identify malicious software on your network and warns you of its presence. […]
Continue Reading
As Mr Robot races to the conclusion of Season 3, Elliot is determined to stop the Dark Army from doing any more damage. The Dark Army, led by White Rose, has blown up 71 buildings. As you remember, Elliot’s system has been compromised and he wants to trace the malware back to its source and […]
Continue Reading
Welcome back, my aspiring Cyber Warriors! In this series–Web App Hacking–we are exploring the many ways that an attacker can compromise Web Applications. In this tutorial, we will explore using Local File Inclusion or LFI. Many scripting languages used in web applications support the use of include() function. These make it easy for the developer […]
Continue Reading
Welcome back, my aspiring cyber warriors! Much of what we have done here in this Metasploit Basics series enables us to exploit and control a remote system anywhere on the planet earth (or at least any machine connected to the Internet on planet earth). In some cases, we may want to control a system that […]
Continue Reading
Sec+ is the first step to becoming a cybersecurity professional and a job requirement for many roles.
Join Master OTW for an immersive, LIVE Bootcamp at just $249 (Free for Subscribers/Pro).
Hurry – only 20 guest spots available! Don’t miss your chance to pass your first certification.
We have never offered a package like this before!
This all-in-one bundle has helped countless beginners achieve their first certifications, including Security+, CWA, and Linux Basics.
Order today and receive the updated Sec+ 701 in February at no extra cost!
Each month one purchaser will be selected to