CyberCode Academy

This episode provides a practical guide to strengthening Linux file system security, progressing from protecting shared directories against accidental or unauthorized deletions to implementing granular access controls and continuously monitoring system integrity. The lesson focuses on three essential Linux security mechanisms: the Sticky Bit, File Access Control Lists (FACL), and the Advanced Intr...

Advanced Linux administration requires a deeper understanding of both filesystem behavior and Unix permission mechanisms. In this episode, we explore the powerful capabilities of the XFS filesystem and examine special permission mechanisms that can significantly influence how users and applications interact with the operating system. We begin with XFS administration, focusing on filesystem mount o...

Linux storage management goes far beyond formatting a disk and mounting it. Understanding how modern Linux file systems work—and how their configuration affects security, reliability, and performance—is an essential skill for system administrators and security professionals. In this episode, we move from the architectural foundations of Linux file systems into practical storage administration and...

A secure Linux server begins with more than a hardened configuration file. Enterprise security requires a layered approach that protects the system from physical tampering, unauthorized remote access, insecure services, filesystem abuse, and exposure of sensitive data. In this episode, we move from fundamental operating system hardening to advanced protection for data at rest. We examine how admin...

Maintaining a secure and reliable Linux environment requires more than simply installing the latest software. Administrators must understand how security updates are identified and applied, how package authenticity is established, and how installed software can be inspected and verified at a lower level. In this episode, we explore the security-focused package management workflows used across Red...

This episode, we shift our focus from application development to the security of the underlying server infrastructure. A newly deployed server can quickly become a target for automated scanning, credential attacks, and other unauthorized activity. Building a secure environment therefore requires more than simply installing an operating system and deploying applications. It requires a layered secur...

This final hands-on integration session, we bring the client-side component and the central control panel together into a complete communication workflow. The episode focuses on transforming an isolated client application into an integrated node capable of registering its system information, periodically checking for pending tasks, processing authorized instructions, and returning execution result...

This episode, we bring the control-panel backend together into a complete PHP, MySQL, and JavaScript database-driven communication architecture. Building on the authentication and dashboard functionality from previous episodes, we now connect the individual components into a closed-loop workflow for registering client nodes, managing queued tasks, receiving returned results, and displaying those r...

This episode, we continue developing our PHP-based control panel by moving beyond authentication and building the authenticated administration layer. We begin by establishing administrator credentials, then implement a dedicated session-protection mechanism to secure private pages. Finally, we transform the control panel into a dynamic dashboard capable of retrieving database records and presentin...

This episode, we build a PHP and MySQL control panel backend from the ground up, progressing from database initialization and server configuration to user authentication and session management. The episode focuses on connecting a web application to a MySQL database while introducing important security concepts such as prepared statements, parameter binding, password hashing, and session-based auth...

This episode moves beyond local command processing and introduces the fundamentals of network-based communication in a C# security-testing environment. The lesson begins by improving the reliability of the existing application through structured exception handling and more robust command parsing. It then examines the concepts behind periodic HTTP communication, connection monitoring, and graceful...

In this episode, we build a custom interactive command-line shell in C#, exploring how applications can combine filesystem navigation, system reconnaissance, and operating-system command execution into a single interface. The episode takes a practical, step-by-step approach, beginning with basic directory operations and gradually introducing system information gathering and command execution.1. Di...

This episode introduces the core concepts behind offensive C# development for authorized penetration testing and red-team environments. The walkthrough follows a simplified offensive-tool lifecycle, beginning with host reconnaissance and progressing through persistence mechanisms and dynamic retrieval of additional components. The focus is on understanding how C# can interact directly with the Win...

This episode establishes the essential development foundations across Windows and Linux, preparing the workspace for advanced scripting, application development, and future security-focused projects. The episode takes a practical, hands-on approach, configuring a Windows development environment and then building a complete local web and database stack on Ubuntu.1. Configuring the Windows Developme...

This episode provides a complete, step-by-step guide to building a practical virtual sandbox using VirtualBox or VMware. The goal is to create isolated and reliable Windows and Linux environments that can be used for software development, testing, and server-side application work.1. Preparing the Virtualization EnvironmentThe episode begins by covering the essential software and installation media...

This module provides a hands-on exploration of mobile malware analysis through two distinct case studies, one for iOS and one for Android, designed to let you work independently to uncover the functionality of malicious programs. The episode is structured into the following key components: 1. iOS Case Study: Corporate Security Assessment The first scenario involves a corporate iPhone reported for...

This episode provides a comprehensive guide to designing and equipping a professional mobile malware analysis lab, with a focus on building a secure, repeatable, and well-instrumented environment for both iOS and Android research.1. Lab Design and InfrastructureThe episode begins by emphasizing that a professional malware lab requires more than simply running a few virtual machines. Researchers mu...

This episode focuses on designing a professional, scalable, and repeatable mobile malware analysis laboratory, moving beyond a simple virtual-machine setup toward an environment suitable for long-term security research.1. Strategic Lab PlanningBefore building the lab, analysts should define its purpose and scope: Determine whether the environment will be air-gapped, isolated, or internet-connected...

This episode covers dynamic analysis of Android applications, with a strong emphasis on runtime interaction, monitoring, and debugging.1. Android Dynamic Analysis with DrozerThe episode introduces Drozer, an Android security assessment framework that allows researchers to interact with application components while they are running. Key capabilities include: Establishing communication between the a...

Dynamic Mobile Malware Analysis — iOS and AndroidThis episode expands dynamic malware analysis beyond basic runtime observation and introduces process instrumentation, debugging, network capture, and automated mobile-security frameworks across both iOS and Android. The central idea is:Static analysis tells you what a sample may be capable of; dynamic analysis shows what it actually does when execu...

Dynamic iOS Malware Analysis — Key Takeaways Application Entry Point The standard entry point for an iOS application is UIApplicationMain. It initializes the application runtime and connects the application to its App Delegate, which manages important lifecycle events. Method Swizzling Method swizzling allows an analyst to intercept or replace a class method at runtime. In a controlled malware-ana...

Mobile Malware Static Analysis — Module ConclusionThis episode serves as a knowledge check and consolidation of the basic static-analysis methodology covered across both iOS and Android. The emphasis is not on learning one particular tool, but on developing a repeatable investigation process.1. iOS Static AnalysisSeveral important tools and artifacts are reinforced.class-dumpUsed primarily to extr...

Android Basic Static Analysis — Advanced Study GuideThis episode demonstrates how to perform basic static analysis of Android applications, moving from initial malware triage to manifest analysis, code decompilation, and identification of suspicious functionality.1. Android Malware Analysis MethodologyAlthough Android and iOS have very different architectures, the fundamental malware-analysis meth...

iOS Basic Static Analysis — Advanced Study GuideThis episode moves from the fundamentals of iOS malware analysis into hands-on static binary analysis, demonstrating how command-line utilities and reverse-engineering tools can reveal valuable information without executing the malware.1. otool — Inspecting Mach-O Binariesotool is one of the most useful command-line utilities for examining Apple Mach...

iOS Malware Analysis — Key TakeawaysThis episode introduces the fundamentals of iOS malware analysis, combining the historical evolution of mobile threats with the methodology used by security researchers to investigate them.1. Understanding Mobile MalwareMobile malware is malicious software designed to disrupt devices, steal information, gain unauthorized access, or perform malicious actions. Com...