Learning Cyber Security

HTTP/DNS/Encrypted data exfiltration techniques

Table of Contents

OWASP Top Ten Part 2

Today we will be looking at the last 5 web vulnerabilities as defined by the OWASP top 10 list. OWASP maintains a document…

OWASP Top Ten Part 1

Today we will be looking at the first 5 web vulnerabilities as defined by the OWASP top 10 list. OWASP maintains a…

Performing a Log Poisoning Attack

Today we will be looking at the natas25 challenge from overthewire. We will be exploring how…

Performing a time-based SQL injection

Demonstrating a time-based injection on the natas17 overthewire…

Bypassing Sophos anti-virus with DDexec

Using DDexec to load a malicious binary in memory to avoid AV…

6 methods to setup a network pivot

Creating network pivots on both Linux and Windows OS’s

Trying out Wazuh SIEM

Testing several Wazuh features including file integrity monitoring, malware and…

Abusing DNS in my homelab

Compromising a Pi-Hole and poisoning DNS to steal user creds