Канал: Kandy Phan

cobalt strike: aggressor scripts intro

cobalt strike: aggressor scripts intro

C# compile with csc.exe (ATT&CK T1027.004)

C# compile with csc.exe (ATT&CK T1027.004)

cobalt strike: beacon object files (NoteThief demo)

cobalt strike: beacon object files (NoteThief demo)

cobalt strike: malleable c2 http get/post

cobalt strike: malleable c2 http get/post

OSCP: Nishang reverse Powershell

OSCP: Nishang reverse Powershell

BinExp: buffer overflow return address for gdb and no gdb

BinExp: buffer overflow return address for gdb and no gdb

OSCP: python library hijacking for privilege escalation

OSCP: python library hijacking for privilege escalation

Custom designing Nessus scan templates

Custom designing Nessus scan templates

PowerView and Impacket intro for pentesting/OSCP

PowerView and Impacket intro for pentesting/OSCP

watershell: super stealthy shell

watershell: super stealthy shell

real-time monitoring of log files in Windows and Linux

real-time monitoring of log files in Windows and Linux

ASP code injection to web shell

ASP code injection to web shell

Getting started with pwn.college

Getting started with pwn.college

deep-dive of Pwnkit (CVE-2021-4034)

deep-dive of Pwnkit (CVE-2021-4034)

How to Start Reverse Engineering

How to Start Reverse Engineering

Wireshark Tutorial: Decrypting HTTPS Traffic

Wireshark Tutorial: Decrypting HTTPS Traffic

Intro to buffer overflow

Intro to buffer overflow

Spring OAuth RCE vulnerability (CVE-2016-4977)

Spring OAuth RCE vulnerability (CVE-2016-4977)

docker container escapes

docker container escapes

Tutorial on SQL injection UNION attacks

Tutorial on SQL injection UNION attacks

Java exploiting with ysoserial and how gadget chains work

Java exploiting with ysoserial and how gadget chains work

SQL injection tutorial

SQL injection tutorial

CVE-2021-44228 (Log4Shell) - Exploitation/Detection

CVE-2021-44228 (Log4Shell) - Exploitation/Detection

Kubernetes Goat-Online: learning of Kubernetes security

Kubernetes Goat-Online: learning of Kubernetes security

Advanced SQLi: sqlmap and eval function

Advanced SQLi: sqlmap and eval function

web hacking: python Jinja2 SSTI vulnerability and code execution

web hacking: python Jinja2 SSTI vulnerability and code execution

cobalt strike: using SMB beacons

cobalt strike: using SMB beacons

Goals of our Cobalt strike learning group

Goals of our Cobalt strike learning group

Detecting VBA Macros with Yara Rules

Detecting VBA Macros with Yara Rules

Joining Linux to Active Directory (Windows Server 2019)

Joining Linux to Active Directory (Windows Server 2019)

cobalt strike: mimikatz pass-the-hash and WMI lateral movement

cobalt strike: mimikatz pass-the-hash and WMI lateral movement

cobalt strike: no disk .NET execute-assembly

cobalt strike: no disk .NET execute-assembly

cobalt strike: regsvr32 payload execution

cobalt strike: regsvr32 payload execution

cobalt strike: result of artifact kit

cobalt strike: result of artifact kit

cobalt strike: powershell web delivery

cobalt strike: powershell web delivery

CFC 2021 Red scoring Pt. 2

CFC 2021 Red scoring Pt. 2

A/V evasion and the CFC red team

A/V evasion and the CFC red team

CyberForce Competition 2021: Red Team Scoring

CyberForce Competition 2021: Red Team Scoring

hacking: UseBasicParsing and COM Objects

hacking: UseBasicParsing and COM Objects

chat about 'cheese strats' in Red-Blue cyber competitions

chat about 'cheese strats' in Red-Blue cyber competitions

how much pentesting needed for CyberForce Competition 2021

how much pentesting needed for CyberForce Competition 2021

Xml external entity injection

Xml external entity injection

No module, no RCE. also - Dude, where's my FTP?

No module, no RCE. also - Dude, where's my FTP?

Apache CVE-2021-41773 Path Traversal, what's your real risk?

Apache CVE-2021-41773 Path Traversal, what's your real risk?

Intro to cyber attack chains and Mitre ATT&CK

Intro to cyber attack chains and Mitre ATT&CK

Intro to STIGs

Intro to STIGs

CFC topology: what's my IP address??! Is IP blocking too OP for red/blue competition?

CFC topology: what's my IP address??! Is IP blocking too OP for red/blue competition?

n00b plays with OMIGOD, will it appear in CFC??

n00b plays with OMIGOD, will it appear in CFC??

how to clear windows logs with Atomic Red Team

how to clear windows logs with Atomic Red Team

ProxyShell and ProxyLogon demo

ProxyShell and ProxyLogon demo

CVE-2021-1675 PrintNightmare walk-thru

CVE-2021-1675 PrintNightmare walk-thru

Printer Bug & Unconstrained Delegation with Rubeus (n00bz learning 13)

Printer Bug & Unconstrained Delegation with Rubeus (n00bz learning 13)

n00bz learning 12b: Ransomware intro

n00bz learning 12b: Ransomware intro

n00bz learning 12a: Active Directory enumeration with powershell

n00bz learning 12a: Active Directory enumeration with powershell

n00bz learning 11b: AWS online wargame

n00bz learning 11b: AWS online wargame

n00bz learning 11a: PHP extension bypass for file upload

n00bz learning 11a: PHP extension bypass for file upload

n00bz learning 10b: Pentesting built into Devsecops

n00bz learning 10b: Pentesting built into Devsecops

n00bz learning 10a: journalctl/less/sudoers for PrivEsc

n00bz learning 10a: journalctl/less/sudoers for PrivEsc

n00bz learning 9: BloodHound tutorial for Active Directory analysis

n00bz learning 9: BloodHound tutorial for Active Directory analysis

n00bz learning 8b: Credential Guard - Protecting against credential theft in a Windows Domain

n00bz learning 8b: Credential Guard - Protecting against credential theft in a Windows Domain

n00bz learning 8a: screen 4.5.0 local privEsc for OSCP

n00bz learning 8a: screen 4.5.0 local privEsc for OSCP

n00bz learning 7b: gitlab CI/CD with Terraform via AWS

n00bz learning 7b: gitlab CI/CD with Terraform via AWS

n00bz learning 7a: Firewall Bypass with chisel port tunneling

n00bz learning 7a: Firewall Bypass with chisel port tunneling

n00bz learning 6b: creating a Cyber Lab for learning

n00bz learning 6b: creating a Cyber Lab for learning

n00bz learning 6a: RE tricks to solve FTP challenge

n00bz learning 6a: RE tricks to solve FTP challenge

n00bz podcast: learning mindset for CTF and imposter syndrome

n00bz podcast: learning mindset for CTF and imposter syndrome

n00bz learning 5b: hashcat tutorial

n00bz learning 5b: hashcat tutorial

n00bz learning 5a: Complex CTF crackme with Z3 solver and RE tips

n00bz learning 5a: Complex CTF crackme with Z3 solver and RE tips

n00bz learning 4c: intro to BeEF - Browser Exploitation Framework

n00bz learning 4c: intro to BeEF - Browser Exploitation Framework

n00bz learning 4b: multi-pivots on Windows with socat

n00bz learning 4b: multi-pivots on Windows with socat

n00bz learning 4a: PrivEsc writeable services binPath, Frida intro

n00bz learning 4a: PrivEsc writeable services binPath, Frida intro

n00bz podcast: Southeast CCDC vs DOE CyberForce Competition

n00bz podcast: Southeast CCDC vs DOE CyberForce Competition

n00bz learning cyberCTF 3b: gophish, terraform, intro to red team cloud infrastructure tooling

n00bz learning cyberCTF 3b: gophish, terraform, intro to red team cloud infrastructure tooling

n00bz learning cyberCTF 3a: running nishang powershell tcp shell

n00bz learning cyberCTF 3a: running nishang powershell tcp shell

Purpose of our Cyber learning group: How do you get good?

Purpose of our Cyber learning group: How do you get good?

n00bz learning cyberCTF 2d: ghidra tutorial with crackme

n00bz learning cyberCTF 2d: ghidra tutorial with crackme

n00bz learning cyberCTF 2c: stopping rootkit with Linux Kernel Runtime Guard

n00bz learning cyberCTF 2c: stopping rootkit with Linux Kernel Runtime Guard

n00bz learning cyberCTF 2b: unquoted service path privilege escalation

n00bz learning cyberCTF 2b: unquoted service path privilege escalation

n00bz learning cyberCTF 2a: capstone disasm, z3 solver, DCOM MMC20 lateral movement

n00bz learning cyberCTF 2a: capstone disasm, z3 solver, DCOM MMC20 lateral movement

n00bz learning cyberCTF 1a: DLL hijacking

n00bz learning cyberCTF 1a: DLL hijacking

n00bz learning cyberCTF 1b: lateral movement named pipes

n00bz learning cyberCTF 1b: lateral movement named pipes

n00bz learning cyberCTF 1c: google dorking

n00bz learning cyberCTF 1c: google dorking