CyberCode Academy

In this lesson, you’ll learn about: Defining Windows Internal Structures in Python Representing structures like PROCESS_INFORMATION and STARTUPINFO using ctypes. Structure Mapping Windows data types (HANDLE, DWORD, LPWSTR) with the _fields_ attribute Instantiating structures for API calls to configure or retrieve process information Spawning System Processes Using CreateProcessW from kernel32.dll...

In this lesson, you’ll learn about: Interfacing Python with Windows API using ctypes Loading core DLLs: user32.dll and kernel32.dll Executing basic functions like MessageBoxW Mapping C-style data types (e.g., LPCWSTR, DWORD) to Python equivalents Error Handling and Privileges Using GetLastError to debug API failures Common errors such as "Access Denied" (error code 5) Understanding how token privi...

In this lesson, you’ll learn about: Fundamentals of Windows Processes and Threads A process is a running program with its own virtual memory space Threads are units of execution inside processes, allocated CPU time to perform tasks Access tokens manage privileges and access rights; privileges can be enabled, disabled, or removed but cannot be added to an existing token Key System Programming Termi...

In this lesson, you’ll learn about: Building a Professional Portfolio Creating a GitHub account and configuring it for public repositories Initializing repositories specifically for Python projects Uploading and organizing files to showcase practical work for employers Setting Up a Windows-Based Technical Workspace Installing Python 3 and verifying it is correctly added to the system PATH Installi...

In this lesson, you’ll learn about: The major security threat categories in machine learning: model stealing, inversion, poisoning, and backdoors How model stealing attacks replicate black-box models through API querying Why attackers may clone models to reduce costs, bypass licensing, or craft offline adversarial examples The concept of model inversion, where sensitive training data (e.g., faces...

In this lesson, you’ll learn about: What deepfakes are and how neural networks enable face, voice, and style transfer The standard face swap pipeline: extraction → preprocessing → training → prediction Why conducting a local dry run helps validate datasets before scaling to expensive GPU environments The importance of face alignment, sorting, and dataset cleaning to reduce false positives How ligh...

In this lesson, you’ll learn about: The difference between white-box and black-box threat models in machine learning security Why gradient-based models are vulnerable to carefully crafted input perturbations The core intuition behind the Fast Gradient Sign Method (FGSM) as a sensitivity-analysis technique How adversarial perturbations exploit a model’s local linearity and gradient structure The pu...

In this lesson, you’ll learn about: What adversarial machine learning is and why ML-based malware classifiers are vulnerable to manipulation The difference between feature-engineered models like Ember and end-to-end neural approaches like MalConv Why handling real malware (e.g., Jigsaw ransomware) requires a properly isolated virtual machine lab How libraries such as LIEF and pefile are used to sa...

In this lesson, you’ll learn about: What fuzzing is and why it’s a powerful technique for discovering software vulnerabilities The difference between basic randomized fuzzing and more advanced, coverage-guided approaches How code coverage helps measure which parts of a program are exercised during testing Why naive random input generation is inefficient for complex formats like PDFs The concept of...

In this lesson, you’ll learn about: How CAPTCHA systems (like Really Simple CAPTCHA for WordPress) are designed to prevent automated abuse The role of reconnaissance in identifying security mechanisms on web applications (for defensive testing with permission) How OpenCV is used in computer vision for: Grayscale conversion Image thresholding Noise reduction and morphological operations (e.g., dila...

In this lesson, you’ll learn about: What digital identity is and how IP and MAC addresses are used to track users Why masking an IP address is essential for protecting location and online activity How the Tor network provides anonymity by routing traffic through multiple global nodes The role of ProxyChains in forcing applications to operate through anonymizing networks What a MAC address represen...

In this lesson, you’ll learn about: Why default router settings are a major security risk and commonly targeted by attackers How changing the administrative IP address reduces exposure to automated attacks The importance of replacing default usernames and passwords with strong, unique credentials Why disabling WPS is critical to preventing brute-force and PIN-based attacks How enabling modern encr...

In this lesson, you’ll learn about: Using a Raspberry Pi as a mobile platform for wireless penetration testing Leveraging Wifite, an automated tool for auditing Wi‑Fi networks Exploiting WPS vulnerabilities through the Pixie Dust attack to quickly recover router credentials Performing dictionary attacks on WPA/WPA2 networks by capturing handshake packets and testing against common password lists U...

In this lesson, you’ll learn about: How a Raspberry Pi can be configured as a portable wireless security lab Methods for remotely accessing a headless Raspberry Pi using command-line and graphical interfaces The concept of wireless interference and denial-of-service at a high level (without operational details) Differences between automated and manual approaches to wireless disruption from a conce...

In this lesson, you’ll learn about: How to convert a standard Raspberry Pi into a portable penetration testing device The required hardware components, including a touchscreen display, portable power source, and external wireless adapter Why a specialized Wi‑Fi adapter with packet injection support is essential for advanced network attacks The step-by-step assembly process for building a compact,...

In this lesson, you’ll learn about: The purpose of this segment as a preparation and logistics guide for working with single-board computers Where to acquire Raspberry Pi hardware, with emphasis on the official Raspberry Pi website The advantages of purchasing bundled kits that include SD cards, power adapters, and essential peripherals The Raspberry Pi 3 as the minimum recommended model for follo...

In this lesson, you’ll learn about: What a Raspberry Pi is and why it’s described as a low-cost, credit-card-sized single-board computer How installing an operating system on a micro SD card turns the device into a fully functional computer The types of operating systems supported, including Linux and Windows Common use cases such as DIY projects, robotics, and embedded systems Why the Raspberry P...

In this lesson, you’ll learn about: The forensic purpose of Inception for accessing live, locked systems without powering them down Why volatile memory preservation makes Inception valuable during on-scene triage How the DMA exploit works via FireWire and Thunderbolt interfaces The concept of planting a temporary RAM-based authentication bypass that disappears after reboot How Inception is integra...

In this lesson, you’ll learn about: A technical overview of memory acquisition using Magnet RAM Capture and FTK Imager How RAM footprint size affects evidence integrity during live memory collection The key features of Magnet RAM Capture, including custom output paths and memory image splitting Why file segmentation is operationally important when handling large RAM captures The role of FTK Imager...

In this lesson, you’ll learn about: The role of RAM acquisition in digital forensics and why volatile memory is critical evidence How benchmarking RAM extraction tools helps investigators make defensible tactical decisions A technical comparison between Belkasoft RAM Capturer and Magnet RAM Capture The trade-offs between system footprint and extraction speed during live memory capture How both too...

In this lesson, you’ll learn about: Why Benchmarking RAM Extraction Tools Matters How benchmarking supports defensible tool selection in forensic investigations. Using measurable metrics to justify decisions during reports or court testimony. Understanding that different systems and environments can affect tool behavior. Key Benchmarking Criteria RAM Footprint: Measuring how much memory the tool c...

In this lesson, you’ll learn about: Why RAM Is Critical Forensic Evidence How volatile memory captures data that never touches disk and is lost on shutdown. Recovering private browsing sessions, chat data, webmail content, and remnants of failed wiping attempts. Identifying in-memory malware, including rootkits, injected code, and hidden processes that evade disk-based scanners. Extracting encrypt...

In this lesson, you’ll learn about: Validating Network Drive Activity with Shellbags How Windows Shellbags act as a silent witness for user interaction with network shares and mapped drives. Why UsrClass.dat is a critical artifact for proving access to remote resources, even when permissions are restricted. Recording Remote Folder Access How accessing a mapped network drive (e.g., Z:) generates Sh...

In this lesson, you’ll learn about: USB Forensics Using Shellbag Artifacts How Windows Shellbags can be leveraged to reconstruct user interaction with removable media. Why Shellbags are valuable for determining whether files were copied to or from USB devices, even when the media is no longer connected. Initial Evidence Generation and Collection Creating controlled forensic artifacts by moving tes...

In this lesson, you’ll learn about: Practical ShellBag Forensics Workflow How ShellBags function as registry-based artifacts that record user folder interaction and view preferences. The full investigative cycle: evidence creation, acquisition, analysis, and validation. Registry Hive Acquisition Creating controlled user activity (e.g., test folders) to deliberately generate ShellBag evidence. Expo...