Learn As I Learn - Technology, Product and Cybersecurity

Episode 10: Advanced Cybersecurity Principles: Beyondthe Basics Description: Deepen your understanding of securityprinciples! Explore concepts like least privilege, separation of duties, defense in depth, security by design, encryption, hashing, and the three types of security controls (preventive, detective, corrective). Learn how these principles form a resilient and auditable security architect...

Episode 9: Ethical Hacking Foundations: Concepts, Laws& Frameworks Description: Understand the blueprint of cybersecurity! This episode covers the core principles of InfoSec (CIA Triad), what ethical hacking entails, key cyber laws and regulations (GDPR, HIPAA), structured attacker models like the Cyber Kill Chain and MITRE ATT&CK, and fundamental security controls.

Episode 8: Log Analysis & Forensics: InvestigatingIncidents with Event Viewer & SIEM Description: Become a digital detective! Learn hands-on log analysis for incident response on Windows Server 2022. Configure audit policies, simulate login failures, use ChatGPT to identify event IDs (e.g., 4624, 4625), and analyze logs using Event Viewer. We'll also cover installing and configuring Sp...

Episode 7: AI in Reconnaissance & Scanning:Smarter Attack & Defense Description: Explore the cutting edge ofnetwork security! This episode demonstrates running network scanning exercisesusing AI-driven security tools (Nmap with ChatGPT). Learn how AI enhances IPdiscovery, host detection, port scanning (SYN, UDP, ICMP Echo, Xmas, Maimon,Null), and service enumeration, providing efficient in...

Episode 6: Phishing in Action: AI-Driven SocialEngineering & Detection Description: Understand and detect phishing attacks! This episode integrates AI (ChatGPT) for creating persuasive phishing emails, using tools like TheFatRat to generate undetectable payloads. You'll learn how social engineering works, how to deliver payloads, and how toinvestigate suspicious emails using SysTools EML V...

Episode 5: Malware Unpacked: Hands-on Analysis &Reverse Engineering Description: Dissect malware like a pro! This practical session provides hands-on experience in malware analysis and reverse engineering using tools like PeStudio (for string analysis, imports, VirusTotal indicators) and EXEinfo PE (for byte analysis and graphs). Analyze a ransomwaresample in a controlled environment.

Episode 4: Real-world Exploitation: System Compromisewith njRAT Description: Dive into a full system exploitation scenario! This episode demonstrates compromising a Windows Server using the remote accesstrojan (RAT) njRAT. You'll learn to download, install, configure, generate amalicious payload, share it, and then control the victim machine, includingkeylogging.

Episode 3: Hacking Windows: Generating Payloads withMetasploit Description: Master system exploitation! Learn to generate acustom payload using the Metasploit Framework (msfvenom)on Kali Linux, deliver it to a Windows target, and execute post-exploitationactivities through a Meterpreter session (e.g., sysinfo,hashdump, screenshot).

Episode 2: Session Hijacking 101: Man-in-the-Middlewith ARP Spoofing Description: Intercept credentials in action! Thisepisode demonstrates session hijacking through a Man-in-the-Middle (MITM)attack using ARP spoofing and credential sniffing tools like dsniff on Kali Linux. Learn to interceptunencrypted login credentials and understand the risks of insecurecommunication.

Episode 1: DDoS Unleashed: Hands-on Flood AttacksDescription: Witness and understand Denial-of-Service attacks! Thispractical session simulates a Distributed Denial of Service (DDoS) attack byconfiguring an FTP server on Windows and launching a flood attack using KaliLinux's hping3. Observe system impact andthe importance of proactive monitoring.

Glimpse into this series: Season 3: Exploitation, Forensics & AdvancedDefense Episode 1: DDoS Unleashed: Hands-on Flood AttacksDescription: Witness and understand Denial-of-Service attacks! Thispractical session simulates a Distributed Denial of Service (DDoS) attack byconfiguring an FTP server on Windows and launching a flood attack using KaliLinux's hping3. Observe system impact andthe i...

Episode 10: Web Server Security: Architecture, AttackSurface & Hardening Description: Fortify your web fortress! Understand the architecture of web servers (Apache, Nginx, IIS) and theirextensive attack surface, including misconfigurations, buffer overflows, andDoS flaws. Learn essential hardening techniques like disabling unused services,restricting permissions, and proactive patching.

Episode 9: IDS/IPS Evasion & Deception: PlayingDigital Cat and Mouse Description: Master the art of stealth andcounter-stealth! This episode explores attacker techniques for bypassingIDS/IPS (like protocol tunneling, packet fragmentation, traffic blending) andhow defenders deploy honeypots and deception technologies to lure, detect, andstudy intruders.

Episode 8: Network Traffic Analysis: TCP/IP, UDP, andWireshark Flags Description: Decode network conversations! Learn to use Wireshark to capture and analyze both connection-oriented (TCP) and connectionless (UDP) traffic. We'll examine the TCP three-way handshake (SYN, SYN-ACK, ACK flags) and observe UDP's behavior, understanding how protocolsfunction at the packet level. Command to gener...

Episode 7: Vulnerability Assessment: Real-timeScanning with Nessus Description: Become a vulnerability hunter! This episode guides you through performing real-time vulnerability scanning of a target machine (Bee-Box) using Nessus. You'll learn to set up Nessus, initiate an advanced scan, interpret severity levels, and explore remediation strategies. Download Nessus URL: https://www.tenable.com...

Episode 6: Firewall & Proxy Bypassing: Nikto forEvasion & Vulnerability Scanning Description: Sneak past defenses! Learn how to use Nikto to scan web servers for known vulnerabilities and misconfigurations. Discover evasion tactics like spoofing the User-Agent header, using evasion flags, and employing custom path mutation to bypass intrusion detection systems. Commands: 1. nikto -h http:/...

Episode 5: Firewall & Proxy Bypassing: Metasploitfor Web Recon Description: Think like an attacker! In this lab-focusedepisode, use Metasploit to perform advanced web server fingerprinting, scan forHTTP methods (GET, POST, PUT, DELETE), check for WebDAV vulnerabilities, anddiscover hidden directories. Understand how these techniques help attackersidentify initial entry points.

DHCP Dynamics: Implementing a DHCP Server in WindowsServer 2022 Description: Automate IP address assignment! Learn how toinstall and configure a DHCP server on Windows Server 2022. We'll cover settingup scopes, defining IP ranges, and verifying automatic IP distribution toclient machines like Kali Linux.

Episode 3: DNS Demystified: Installing a DNS Server in Windows Server 2022 Description: Get fluent in DNS! This episode walks you through installing and configuring a DNS server on Windows Server 2022. You'll learn to set up zones, create host records (A, MX, CNAME), and prepare Kali Linux as a DNS client to test name resolution.

Episode 1: Network Basics: Hubs vs. Switches Explained Description: Understand the core of your network! This episode uses Packet Tracer to illustrate the fundamental differences between hub and switched networks. See how data flows, the impact on efficiency, and the security implications of each.

Episode 2: Building Networks: Designing and Subnetting IP Schemes Description: Become a network architect! Learn to design and subnet IP address schemes in a simulated environment using Packet Tracer. We'll configure IP addresses for PCs and routers across different subnets and verify connectivity, essential for scalable and secure networks.

We'll cover: 1. Network Basics: Hubs vs. Switches 2. Building Networks: Designing andSubnetting IP Schemes Description 3.DNS Demystified: Installing a DNS Serverin Windows Server 2022 Description 4: DHCP Dynamics: Implementing a DHCP Serverin Windows Server 2022 Description 5: Firewall & Proxy Bypassing: Metasploitfor Web Recon Description 6: Firewall & Proxy Bypassing: Nikto forEvasio...

Episode 10: Locking It Down: Restricting User Accesswith File Permissions Description: Secure your sensitive data! Learn thecritical skill of restricting user access to folders using NTFS permissions inWindows Server 2022. We'll demonstrate creating new users, setting explicit"Deny" permissions, and verifying their effectiveness, highlightingthe importance of granular access control.

Episode 9: Files & Formats: Working with FAT32 andNTFS Description: Demystify file systems! This episode guides youthrough creating and managing files in both FAT32 and NTFS formats on WindowsServer 2022. You'll learn how to format drives, perform file operations, verifyallocation, and configure advanced NTFS permissions for security.

Dig deep into system memory! Learn how to illustrate the memory layout of a basic program and use advanced PowerShell commands (WMI, security-focused queries) todebug, check process integrity, detect DLL injections, and identify suspicious processes on Windows Server 2022. Commands: Get-Process | Where-Object { $_.ProcessName -eq "notepad" } Get-WmiObject -Class Win32_OperatingSystem | S...