CyberCode Academy

How do you know whether a Linux server is actually secure? Security professionals need more than preventive controls. They need the ability to monitor system activity, investigate suspicious behavior, audit sensitive resources, and verify what is exposed to the network. In this episode, we move from detailed internal auditing with the Linux Audit System to active network reconnaissance and firewal...

A secure Linux environment is only as effective as your ability to understand what is happening inside it. Servers continuously generate information about authentication attempts, system activity, application behavior, administrative actions, and security events. Without proper log management and auditing, this information can become difficult to analyze, consume valuable storage, or disappear ent...

This episode explores two essential components of enterprise Linux administration and security: centralized identity management and system logging. The lesson begins with the deployment of an Identity Management (IdM) Server, covering the process of establishing a centralized authentication and authorization environment. You will configure the server's hostname, Kerberos realm, time synchronizatio...

This episode explores essential Linux system-hardening techniques designed to protect both physical console access and remote administration interfaces. The lesson focuses on three practical security controls: disabling the Ctrl+Alt+Del reboot mechanism, protecting the GRUB bootloader with authentication, and configuring pre-login SSH warning banners. Together, these measures demonstrate how Linux...

This episode explores two fundamental components of Linux access control: group administration and Pluggable Authentication Modules (PAM).The lesson begins with practical group management, examining how administrators can organize users around shared resources and delegate specific group-management responsibilities without granting full root privileges. From there, the episode moves into the archi...

This episode provides a practical guide to strengthening Linux file system security, progressing from protecting shared directories against accidental or unauthorized deletions to implementing granular access controls and continuously monitoring system integrity. The lesson focuses on three essential Linux security mechanisms: the Sticky Bit, File Access Control Lists (FACL), and the Advanced Intr...

Advanced Linux administration requires a deeper understanding of both filesystem behavior and Unix permission mechanisms. In this episode, we explore the powerful capabilities of the XFS filesystem and examine special permission mechanisms that can significantly influence how users and applications interact with the operating system. We begin with XFS administration, focusing on filesystem mount o...

Linux storage management goes far beyond formatting a disk and mounting it. Understanding how modern Linux file systems work—and how their configuration affects security, reliability, and performance—is an essential skill for system administrators and security professionals. In this episode, we move from the architectural foundations of Linux file systems into practical storage administration and...

A secure Linux server begins with more than a hardened configuration file. Enterprise security requires a layered approach that protects the system from physical tampering, unauthorized remote access, insecure services, filesystem abuse, and exposure of sensitive data. In this episode, we move from fundamental operating system hardening to advanced protection for data at rest. We examine how admin...

Maintaining a secure and reliable Linux environment requires more than simply installing the latest software. Administrators must understand how security updates are identified and applied, how package authenticity is established, and how installed software can be inspected and verified at a lower level. In this episode, we explore the security-focused package management workflows used across Red...

This episode, we shift our focus from application development to the security of the underlying server infrastructure. A newly deployed server can quickly become a target for automated scanning, credential attacks, and other unauthorized activity. Building a secure environment therefore requires more than simply installing an operating system and deploying applications. It requires a layered secur...

This final hands-on integration session, we bring the client-side component and the central control panel together into a complete communication workflow. The episode focuses on transforming an isolated client application into an integrated node capable of registering its system information, periodically checking for pending tasks, processing authorized instructions, and returning execution result...

This episode, we bring the control-panel backend together into a complete PHP, MySQL, and JavaScript database-driven communication architecture. Building on the authentication and dashboard functionality from previous episodes, we now connect the individual components into a closed-loop workflow for registering client nodes, managing queued tasks, receiving returned results, and displaying those r...

This episode, we continue developing our PHP-based control panel by moving beyond authentication and building the authenticated administration layer. We begin by establishing administrator credentials, then implement a dedicated session-protection mechanism to secure private pages. Finally, we transform the control panel into a dynamic dashboard capable of retrieving database records and presentin...

This episode, we build a PHP and MySQL control panel backend from the ground up, progressing from database initialization and server configuration to user authentication and session management. The episode focuses on connecting a web application to a MySQL database while introducing important security concepts such as prepared statements, parameter binding, password hashing, and session-based auth...

This episode moves beyond local command processing and introduces the fundamentals of network-based communication in a C# security-testing environment. The lesson begins by improving the reliability of the existing application through structured exception handling and more robust command parsing. It then examines the concepts behind periodic HTTP communication, connection monitoring, and graceful...

In this episode, we build a custom interactive command-line shell in C#, exploring how applications can combine filesystem navigation, system reconnaissance, and operating-system command execution into a single interface. The episode takes a practical, step-by-step approach, beginning with basic directory operations and gradually introducing system information gathering and command execution.1. Di...

This episode introduces the core concepts behind offensive C# development for authorized penetration testing and red-team environments. The walkthrough follows a simplified offensive-tool lifecycle, beginning with host reconnaissance and progressing through persistence mechanisms and dynamic retrieval of additional components. The focus is on understanding how C# can interact directly with the Win...

This episode establishes the essential development foundations across Windows and Linux, preparing the workspace for advanced scripting, application development, and future security-focused projects. The episode takes a practical, hands-on approach, configuring a Windows development environment and then building a complete local web and database stack on Ubuntu.1. Configuring the Windows Developme...

This episode provides a complete, step-by-step guide to building a practical virtual sandbox using VirtualBox or VMware. The goal is to create isolated and reliable Windows and Linux environments that can be used for software development, testing, and server-side application work.1. Preparing the Virtualization EnvironmentThe episode begins by covering the essential software and installation media...

This module provides a hands-on exploration of mobile malware analysis through two distinct case studies, one for iOS and one for Android, designed to let you work independently to uncover the functionality of malicious programs. The episode is structured into the following key components: 1. iOS Case Study: Corporate Security Assessment The first scenario involves a corporate iPhone reported for...

This episode provides a comprehensive guide to designing and equipping a professional mobile malware analysis lab, with a focus on building a secure, repeatable, and well-instrumented environment for both iOS and Android research.1. Lab Design and InfrastructureThe episode begins by emphasizing that a professional malware lab requires more than simply running a few virtual machines. Researchers mu...

This episode focuses on designing a professional, scalable, and repeatable mobile malware analysis laboratory, moving beyond a simple virtual-machine setup toward an environment suitable for long-term security research.1. Strategic Lab PlanningBefore building the lab, analysts should define its purpose and scope: Determine whether the environment will be air-gapped, isolated, or internet-connected...

This episode covers dynamic analysis of Android applications, with a strong emphasis on runtime interaction, monitoring, and debugging.1. Android Dynamic Analysis with DrozerThe episode introduces Drozer, an Android security assessment framework that allows researchers to interact with application components while they are running. Key capabilities include: Establishing communication between the a...

Dynamic Mobile Malware Analysis — iOS and AndroidThis episode expands dynamic malware analysis beyond basic runtime observation and introduces process instrumentation, debugging, network capture, and automated mobile-security frameworks across both iOS and Android. The central idea is:Static analysis tells you what a sample may be capable of; dynamic analysis shows what it actually does when execu...