Category

Cybersecurity and Ethical Hacking Tutorials

Learn cybersecurity concepts, ethical hacking techniques, system hardening, and best practices to secure applications and infrastructure.

The Security section covers cybersecurity concepts, ethical hacking techniques, and system hardening practices.

Security is critical for protecting systems, networks, and applications from threats. These tutorials help you understand vulnerabilities, offensive-security lab setups, and defensive controls.

Browse the articles below for penetration-testing walkthroughs, hardening guides, and certification-oriented topics.

You can also explore Linux and Networking for deeper insights.

130 articles

Security category illustration with shield, access control, and threat defense graphics
security

How to Bypass Android Lock Screen? [100% Working]

Android PIN bypass refers to the process of bypassing the PIN code that is used to lock and secure an Android device. This can be done through various

Kennedy Muthii5 min read
security

Difference between /dev/tty and /dev/pts (tty vs pts) in Linux

What is the difference between /dev/pts and /dev/tty. Why do I get /dev/pts instead of /dev/tty on my Linux terminal. TTY vs PTS. /dev/tty vs /dev/pts.

Deepak Prasad3 min read
security

Browser-in-the-Browser Attack

A browser-in-the-browser attack is an exploit that involves an attacker using a malicious browser to gain access to a target system. This type of attack is

Kennedy Muthii4 min read
security

How to setup Android Pentesting Lab [100% Free]

Step by Step instructions to setup Android pentesting lab with examples

Kennedy Muthii6 min read
security

Perform Postgres DB Brute Force Attack

In this guide, I will show how an attacker can perform a Postgres brute force attack on a target system to gain access to a database.

Kennedy Muthii5 min read
security

Perform VNC Brute Force Attack

In this guide, I will illustrate ways a bad actor may perform a VNC brute force attack to gain access and control a target computer.

Kennedy Muthii5 min read
security

How to Brute Force Attack on Web Forms? [Step-by-Step]

In the previous guide, we learned how to generate a word list using Crunch. In this guide, we will learn how to brute force a web form using THC-Hydra. We

Kennedy Muthii5 min read
security

Wordlist Generator using Crunch

Use crunch as wordlist generator or generating password strings for brute force attacks

Kennedy Muthii5 min read
security

Automated web cache deception attack [Tutorial]

Many of the websites on the internet are still prone to a web cache deception attack. In this kind of attack, a bad actor will “fool” a webserver to serve

Kennedy Muthii5 min read
security

Use canary tokens for intrusion detection [Tutorial]

Step by Step instructions to use canary tokens for intrusion detection

Kennedy Muthii5 min read
security

DDoS attack with Torshammer Tool

Step by step instructions to perform a DDO attack on a website and bring down the website

Kennedy Muthii5 min read
security

5 Most Used Tools to Dox Someone [Free and Paid]

5 paid and open source doxing tools to dox someone using different methods

Kennedy Muthii6 min read
security

Snapchat Phishing using Grayfish [100% Working]

Step by step instructions to perform snapchat phishing using grayfish. Hack snapchat account using grayfish with examples

Kennedy Muthii5 min read
security

Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks in Ubuntu

The other day I noticed this specific message on the console of Virtual Box VM installed with Ubuntu 22.04 RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! As you …

Deepak Prasad5 min read
security

How to perform Evil Twin WiFi Attack [Step-by-Step]

Step by Step instructions to perform evil twin wifi attack on WPA/WPA2 devices. Use airgeddon to perform evil twin wifi attack on Kali Linux

Kennedy Muthii6 min read
security

How to set up WordPress Reverse Shell [100% Working]

Step by Step instructions to setup wordpress reverse shell using 3 different methods. Setup reverse shell using metasploit framework, vulnerable plugins, editing wordpress themes.

Deepak Prasad6 min read
security

Steps to embed payload in PDF [100% Working]

step by step instructions to embed payload in pdf to attack a windows system. Get backdoor access to windows system by exploiting a pdf file

Kennedy Muthii6 min read
security

Using WPA2 WiFi Honeypot for Ethical Hacks [Step-by-Step]

Create a malicious WiFi honeypot to steal passwords and other personal information of our targets.

Kennedy Muthii7 min read
security

Easy OSINT using infooze tool V 1.0 [With Examples]

Infooze is an open source intelligence tool made with Nodejs and automates the information gathering process helping the user gather information in a quicker

Kennedy Muthii6 min read
security

Damn Vulnerable Web Application hacking [Top 3 Easy Exploits]

Damn Vulnerable Web Application hacking [Top 3 Easy Exploits] damn vulnerable web app Hello learners, in this guide we will be learning how to execute web attacks on Damn Vulnerable Web App. DVWA is an open source …

Kennedy Muthii6 min read
security

How to create windows undetectable payload - technowlogger

A keylogger is a tool mainly used by hackers to collect user input data on a device. An example of a keylogger is the technowlogger. Over the years, hackers

Kennedy Muthii5 min read
security

Social Engineering Toolkit Credentials Phishing [5 Easy Steps]

In some Kali Linux distributions, social engineering toolkit is already installed. To install SET, we will clone it from its official github repository as

Kennedy Muthii5 min read
security

Use SocialFish V3.0 for simplified phishing [Step-by-Step]

Hello learners, in this guide we will be using socialfish to acquire credentials form our target. In the previous guides we learnt what is social engineering

Kennedy Muthii5 min read
security

How to install Caine 11.0 VM [Step-by-Step]

Hello learners, in this guide I will be showing you how you can install Caine forensic operating system as a virtual machine. The full meaning of the word

Kennedy Muthii6 min read
security

3 easy steps to obfuscate android payload to avoid detection [ApkBleach]

Hello learners, in the first part of our android payload guide, we embedded an android payload to a legitimate application. The application is however getting

Kennedy Muthii5 min read
security

Complete Shodan Tutorial | The Search Engine for Hackers

Shodan is a search engine but very different from regular search engines like Google, Yahoo, Bing, etc., which search the web for standard websites. Shodan

Deepak Prasad7 min read
security

Encode message in image with Steganography [Step-by-Step]

In this tutorial we learn about 3 different tools which can be used to encode or decode messages inside image using steganography.

Kennedy Muthii6 min read
security

Analyze phishing email using Thephish [100% Working]

In this tutorial we shared step by step instructions to analyze phishing email using ThePhish which uses other open source yet powerful tools (MISP, Cortex and TheHive).

Kennedy Muthii5 min read
security

How to bypass CSRF Protection [5 Different Methods]

In this article, we have learnt about what is an CSRF attack and how we can use CSRF attacks to exploit and also bypass CSRF protection.

Deepak Prasad7 min read
security

Analysing Volatility Memory Dump [6 Easy Steps]

In this step by step tutorial we were able to perform a volatility memory analysis to gather information from a victim computer as it appears in our findings. We were able to discover a malware which has camouflaged as a …

Kennedy Muthii7 min read