RHEL 10 TigerVNC Alternative: Configure GNOME Remote Desktop
TigerVNC server was removed from RHEL 10. Configure GNOME Remote Desktop with RDP on RHEL, Rocky Linux, AlmaLinux, and CentOS Stream 10 as the supported replacement.
Evilginx Explained: Reverse-Proxy Phishing and MFA Session Risk
Learn how Evilginx-style reverse-proxy phishing relays OTP MFA and captures post-login session cookies in an authorized Contoso lab, why FIDO2 resists AiTM, and how defenders detect it.
BeEF Framework Tutorial: Browser Hooks, Modules, and Client-Side Testing
Hook a lab browser with BeEF on Kali, verify online browser details, run safe page-info modules, and learn why a hook is not host compromise, plus SET/Gophish and Metasploit context.
Atomic Red Team Tutorial: Breach and Attack Simulation with MITRE ATT&CK
Run Atomic Red Team ATT&CK tests on Kali with Invoke-AtomicRedTeam, verify telemetry, clean up, then place CALDERA and Infection Monkey beside Atomic for BAS.
Python for Pentesters: Networking, HTTP, Scapy, and Security Automation
Use Python on Kali for authorized pentest automation: files, subprocess, sockets, requests, Nmap XML parsing, Scapy basics, Impacket overview, concurrency, and a reusable service-check tool.
Social Engineering Toolkit (SET) Phishing Tutorial in Kali Linux
Run the Social Engineering Toolkit credential harvester in an isolated Kali lab with a local training page, dummy credentials, HTTP POST flow, traffic inspection, and SET vs Gophish guidance.
Gophish Tutorial: Create and Measure a Phishing Simulation
Create an authorized Gophish phishing simulation on Kali: sending profile, users, email template, landing page, campaign launch, event metrics, CSV export, and troubleshooting.
Social Engineering Attacks: Types, Examples, and Defenses
Learn social engineering attack types with a clear taxonomy by channel, targeting, technique, and objective — phishing vs spear phishing vs whaling, BEC, vishing vs smishing, baiting, physical methods, recognition …
Fix Terraform S3 BucketAlreadyExists and BucketAlreadyOwnedByYou
Fix Terraform S3 CreateBucket 409 errors — tell BucketAlreadyExists from BucketAlreadyOwnedByYou, understand the global bucket namespace, import an existing bucket into state, or choose a new unique bucket name.
Fix Terraform S3 Backend Error Acquiring State Lock
Fix Terraform Error acquiring the state lock on an S3 remote backend — tell S3 native .tflock locking apart from legacy DynamoDB locks, read lock metadata, clear stale locks safely, and fix backend and IAM settings.
API Penetration Testing with Postman and Burp Suite
Pentest a REST API with Postman and Burp Suite: import OpenAPI, proxy traffic, replay in Repeater, test BOLA with two JWT users, and check common JWT implementation mistakes on an authorized Flask lab.
Fix Terraform AWS ExpiredToken Session Errors
Fix Terraform AWS ExpiredToken errors caused by expired STS credentials, stale AWS_SESSION_TOKEN variables, or IAM Identity Center sessions. Diagnose the active credentials and refresh them correctly.
WPA2 WiFi Honeypot: Rogue AP and Deauthentication Testing
Build a controlled WPA2 rogue AP honeypot on Kali with mac80211_hwsim, observe same-SSID different-BSSID behavior, and test directed deauthentication and wpa_supplicant reassociation.
Evil Twin WiFi Attack: Build a Rogue AP and Captive Portal
Build an authorized evil twin on Kali with mac80211_hwsim, hostapd, dnsmasq, and a lab-only portal page, then compare WiFi-Pumpkin3 as an optional automation layer.
How to Capture and Crack a WPA/WPA2 WiFi Handshake
Capture a WPA/WPA2-Personal four-way handshake on an isolated mac80211_hwsim lab, verify EAPOL frames, and test candidate PSKs offline with Aircrack-ng on Kali.
IDOR Vulnerability: Test Broken Object-Level Authorization with Burp Suite
Test IDOR and BOLA with two accounts: prove missing object-level authorization on reads and writes with Burp Repeater, show why UUIDs do not fix access control, and prevent broken authorization in APIs.
Insecure Deserialization: How It Works and How to Test It
Learn how insecure deserialization works, how to detect serialized data, test untrusted PHP serialized state in a lab, understand gadget chains at a high level, and prevent unsafe reconstruction.
Server-Side Request Forgery (SSRF): How It Works and How to Test It
SSRF tutorial: how server-side request forgery works, find URL-fetch features, test against a controlled internal service, understand blind SSRF and metadata risk, and prevent unsafe server-side fetches.
How to Bypass CSRF Protection: Weak Token and Validation Tests
Advanced CSRF testing on DVWA: missing empty and invalid tokens, session-bound tokens, method-dependent validation, weak Referer checks, non-session cookie patterns, and SameSite limits.
AWS Cloud Penetration Testing Fundamentals: IAM, IMDS, and SSRF
Learn AWS cloud penetration testing fundamentals: how IAM identity, EC2 Instance Metadata Service (IMDS), and the SSRF-to-role-credentials path differ from traditional network pentests.
Configure S3 Bucket as Terraform Backend
Create an encrypted versioned S3 bucket with Terraform, migrate local state with terraform init -migrate-state, enable S3 native locking with use_lockfile on Terraform 1.10+, and verify remote state in the bucket.
Deploy an EKS Cluster on AWS with Terraform
Provision a minimal Amazon EKS cluster with Terraform using the terraform-aws-modules VPC and EKS modules, a managed node group on Kubernetes 1.36, and kubectl verification on Ubuntu.
Cross-Site Request Forgery (CSRF): How the Attack Works
CSRF tutorial on DVWA: how cross-site request forgery abuses cookie auth, prove a browser-delivered forged request, explain CSRF tokens and SameSite cookies, and prevent forged browser requests.
Docker Container Escape Risks: Privileged Containers, docker.sock, and Host Access
Learn which Docker configurations let a compromised container affect the host, how to inspect privileged mode, docker.sock, capabilities, and mounts, and how Docker Bench differs from CVE scanners.
Pacu AWS Pentesting Tutorial: IAM Enumeration and Privilege Escalation
Use Pacu 1.7.0 against CloudGoat iam_privesc_by_rollback to enumerate IAM permissions, interpret privilege-escalation findings, and validate a policy-version rollback path with AWS CLI evidence.
Prowler vs ScoutSuite: Audit AWS Security Misconfigurations
Run Prowler and ScoutSuite against the same AWS account with a shared read-only auditor identity that covers both tools’ documented permissions, compare IAM, S3, and EC2 findings, and manually validate mismatches before …
Fix kubectl Unauthorized After Terraform EKS Apply
Fix kubectl Unauthorized after Terraform EKS apply — confirm the AWS identity behind kubectl, list EKS access entries, and grant cluster access with enable_cluster_creator_admin_permissions or access_entries on …
Local File Inclusion (LFI): Path Traversal, RFI, and File Inclusion Attacks
Local file inclusion (LFI) tutorial on DVWA: distinguish LFI from path traversal and RFI, confirm unsafe include behavior, test wrappers and controlled execution conditions, and prevent user-controlled includes.
DVWA Tutorial: Web Pentesting Practice for Beginners
Learn how to use DVWA for web penetration testing practice: navigate vulnerability modules, understand security levels, compare defenses, and follow focused lessons for each attack.
OS Command Injection: Detection, Blind Injection, and Prevention
OS command injection tutorial: detect shell injection, confirm in-band and blind cases, compare Linux and Windows command context, use Burp Repeater, and prevent unsafe OS process calls.