security
SSH Pivoting and Tunneling: Port Forwarding, SOCKS & sshuttle
Reach an internal service through a dual-homed jump host using SSH local, remote, and dynamic SOCKS forwards, ProxyChains, sshuttle, and Metasploit route basics — with a namespace pivot practice lab you build on Kali …
security
Evilginx Explained: Reverse-Proxy Phishing and MFA Session Risk
Learn how Evilginx-style reverse-proxy phishing relays OTP MFA and captures post-login session cookies in an authorized Contoso lab, why FIDO2 resists AiTM, and how defenders detect it.
security
BeEF Framework Tutorial: Browser Hooks, Modules, and Client-Side Testing
Hook a lab browser with BeEF on Kali, verify online browser details, run safe page-info modules, and learn why a hook is not host compromise, plus SET/Gophish and Metasploit context.
security
Atomic Red Team Tutorial: Breach and Attack Simulation with MITRE ATT&CK
Run Atomic Red Team ATT&CK tests on Kali with Invoke-AtomicRedTeam, verify telemetry, clean up, then place CALDERA and Infection Monkey beside Atomic for BAS.
security
Python for Pentesters: Networking, HTTP, Scapy, and Security Automation
Use Python on Kali for authorized pentest automation: files, subprocess, sockets, requests, Nmap XML parsing, Scapy basics, Impacket overview, concurrency, and a reusable service-check tool.
security
Social Engineering Toolkit (SET) Phishing Tutorial in Kali Linux
Run the Social Engineering Toolkit credential harvester in an isolated Kali lab with a local training page, dummy credentials, HTTP POST flow, traffic inspection, and SET vs Gophish guidance.
security
Gophish Tutorial: Create and Measure a Phishing Simulation
Create an authorized Gophish phishing simulation on Kali: sending profile, users, email template, landing page, campaign launch, event metrics, CSV export, and troubleshooting.
security
Social Engineering Attacks: Types, Examples, and Defenses
Learn social engineering attack types with a clear taxonomy by channel, targeting, technique, and objective — phishing vs spear phishing vs whaling, BEC, vishing vs smishing, baiting, physical methods, recognition …
security
API Penetration Testing with Postman and Burp Suite
Pentest a REST API with Postman and Burp Suite: import OpenAPI, proxy traffic, replay in Repeater, test BOLA with two JWT users, and check common JWT implementation mistakes on an authorized Flask lab.
security
WPA2 WiFi Honeypot: Rogue AP and Deauthentication Testing
Build a controlled WPA2 rogue AP honeypot on Kali with mac80211_hwsim, observe same-SSID different-BSSID behavior, and test directed deauthentication and wpa_supplicant reassociation.
security
Evil Twin WiFi Attack: Build a Rogue AP and Captive Portal
Build an authorized evil twin on Kali with mac80211_hwsim, hostapd, dnsmasq, and a lab-only portal page, then compare WiFi-Pumpkin3 as an optional automation layer.
security
How to Capture and Crack a WPA/WPA2 WiFi Handshake
Capture a WPA/WPA2-Personal four-way handshake on an isolated mac80211_hwsim lab, verify EAPOL frames, and test candidate PSKs offline with Aircrack-ng on Kali.
security
IDOR Vulnerability: Test Broken Object-Level Authorization with Burp Suite
Test IDOR and BOLA with two accounts: prove missing object-level authorization on reads and writes with Burp Repeater, show why UUIDs do not fix access control, and prevent broken authorization in APIs.
security
Insecure Deserialization: How It Works and How to Test It
Learn how insecure deserialization works, how to detect serialized data, test untrusted PHP serialized state in a lab, understand gadget chains at a high level, and prevent unsafe reconstruction.
security
Server-Side Request Forgery (SSRF): How It Works and How to Test It
SSRF tutorial: how server-side request forgery works, find URL-fetch features, test against a controlled internal service, understand blind SSRF and metadata risk, and prevent unsafe server-side fetches.
security
How to Bypass CSRF Protection: Weak Token and Validation Tests
Advanced CSRF testing on DVWA: missing empty and invalid tokens, session-bound tokens, method-dependent validation, weak Referer checks, non-session cookie patterns, and SameSite limits.
security
AWS Cloud Penetration Testing Fundamentals: IAM, IMDS, and SSRF
Learn AWS cloud penetration testing fundamentals: how IAM identity, EC2 Instance Metadata Service (IMDS), and the SSRF-to-role-credentials path differ from traditional network pentests.
security
Cross-Site Request Forgery (CSRF): How the Attack Works
CSRF tutorial on DVWA: how cross-site request forgery abuses cookie auth, prove a browser-delivered forged request, explain CSRF tokens and SameSite cookies, and prevent forged browser requests.
security
Docker Container Escape Risks: Privileged Containers, docker.sock, and Host Access
Learn which Docker configurations let a compromised container affect the host, how to inspect privileged mode, docker.sock, capabilities, and mounts, and how Docker Bench differs from CVE scanners.
security
Pacu AWS Pentesting Tutorial: IAM Enumeration and Privilege Escalation
Use Pacu 1.7.0 against CloudGoat iam_privesc_by_rollback to enumerate IAM permissions, interpret privilege-escalation findings, and validate a policy-version rollback path with AWS CLI evidence.
security
Prowler vs ScoutSuite: Audit AWS Security Misconfigurations
Run Prowler and ScoutSuite against the same AWS account with a shared read-only auditor identity that covers both tools’ documented permissions, compare IAM, S3, and EC2 findings, and manually validate mismatches before …
security
Local File Inclusion (LFI): Path Traversal, RFI, and File Inclusion Attacks
Local file inclusion (LFI) tutorial on DVWA: distinguish LFI from path traversal and RFI, confirm unsafe include behavior, test wrappers and controlled execution conditions, and prevent user-controlled includes.
security
DVWA Tutorial: Web Pentesting Practice for Beginners
Learn how to use DVWA for web penetration testing practice: navigate vulnerability modules, understand security levels, compare defenses, and follow focused lessons for each attack.
security
OS Command Injection: Detection, Blind Injection, and Prevention
OS command injection tutorial: detect shell injection, confirm in-band and blind cases, compare Linux and Windows command context, use Burp Repeater, and prevent unsafe OS process calls.
security
Server-Side Template Injection (SSTI): Detect and Identify Template Engines
SSTI tutorial: detect a server-side template injection vulnerability with benign payloads such as {{7*7}}, identify engines like Jinja2 from response behavior, and keep template source trusted.
security
Cross-Site Scripting (XSS): Reflected, Stored, and DOM XSS
XSS attack tutorial on Kali with DVWA: learn reflected, stored, and DOM XSS through the input-context-execution model, prove each type safely, then cover Burp checks, prevention, CSP, and XSS vs CSRF.
security
SQL Injection Tutorial with DVWA and sqlmap
SQL injection tutorial on Kali: understand the vulnerable query, confirm SQLi manually on DVWA, UNION and blind techniques, then automate with sqlmap cookies, Burp requests, and limited enumeration.
security
Burp Suite Tutorial: Proxy, Repeater, and Intruder for Web Testing
Burp Suite tutorial for beginners on Kali: Proxy, HTTP history, target scope, intercept, Repeater, Intruder, external browser setup, and troubleshooting with DVWA on localhost.
security
Why msfvenom Encoded Payloads Are Still Detected by Antivirus
msfvenom encoders change payload bytes for bad characters, not AV evasion. See why shikata_ga_nai still gets detected and how to test encoding honestly in a lab.
security
SSH Brute Force Attack with Hydra and Medusa on Kali Linux
Learn how to test SSH logins with Hydra and Medusa on Kali Linux using username and password lists, controlled threads, credential verification, and practical troubleshooting.