CyberCode Academy

In this lesson, you’ll learn about: Web Application Firewalls (WAFs): Protecting the application layer by inspecting HTTP/HTTPS and WebSocket traffic. Breaking SSL encryption to detect threats using malware signatures and logic-based anomaly detection. Deployment options: hardware, software, or cloud services; open-source examples like ModSecurity. API Gateways and Microservices Security: Acting a...

In this lesson, you’ll learn about: GNS3 Platform Foundation and Image Integration: Installing GNS3 Windows All-in-One and preparing the environment for professional network emulation. Importing manufacturer-specific device images (e.g., Cisco 3745 router, ASA firewall) to run actual device code instead of generic simulators. Building a Routed Network: Configuring IP addresses and routing paths on...

In this lesson, you’ll learn about: Initializing and Configuring a Cisco PIX Firewall: Physical and software setup: connecting to the RS232 console port via USB-to-serial adapter and using Putty. Navigating the Cisco IOS CLI: moving from basic prompts to privilege mode and the configuration environment (config t). Administrative tasks: Checking existing configurations with show configure. Creating...

In this lesson, you’ll learn about: Firewall Fundamentals and Windows Configuration: What a firewall is and how it mediates between network zones using rules based on source/destination addresses and ports. Windows Firewall network profiles: Domain, Private, and Public. Key practices: Application Control: Allow specific programs, block vulnerable protocols like SMB/RPC on public networks. Advanced...

In this lesson, you’ll learn about: The fundamentals of VPNs and IPsec Key management and Security Associations (SA) IPsec protocols: AH vs. ESP Operational modes: Transport vs. Tunnel 1. VPNs and IPsec Fundamentals A VPN (Virtual Private Network) creates a secure, logical tunnel over the public internet, allowing private communication without costly dedicated lines. IPsec (Internet Protocol Secur...

In this lesson, you’ll learn about: The purpose and security objectives of TLS/SSL How a simplified "Toy TLS" model illustrates key concepts How actual TLS works, including handshake, key derivation, and record protocols The role of cipher suites and secure data transfer 1. Core Security Services of TLS/SSL TLS (Transport Layer Security) is designed to protect communications over insecure networks...

In this lesson, you’ll learn about: What PGP is and where it operates in the network stack How PGP secures email confidentiality and authenticity The three-part structure of a PGP-secured message How session keys, public keys, and digital signatures work together The cryptographic algorithms supported by PGP Introduction Pretty Good Privacy (PGP) is an application-layer security protocol designed...

In this lesson, you’ll learn about: What end point authentication is and why it matters Why early authentication methods failed How replay attacks and spoofing work The role of nonces in proving “liveness” Why public keys alone are not enough How digital certificates solve Man-in-the-Middle attacks Introduction End point authentication is the process by which one entity proves its identity to anot...

In this lesson, you’ll learn about: How data integrity is ensured using cryptographic hash functions How MD5 and SHA-1 generate fixed-length message digests Why encryption alone does not guarantee identity How Certification Authorities (CAs) authenticate identities and prevent impersonation Introduction This lesson explains how secure digital communication relies on two critical pillars beyond enc...

In this lesson, you’ll learn about: What asymmetric (public key) cryptography is and why it is needed How the RSA algorithm works and where it is used in practice How Diffie-Hellman enables secure key exchange over public networks Why asymmetric cryptography is vulnerable without authentication Introduction This lesson provides an in-depth explanation of asymmetric key cryptography, focusing on RS...

In this lesson, you’ll learn about: How modern cryptography differs from classical ciphers The building blocks of bit-oriented encryption How DES, 3DES, and AES work at a high level Why block cipher modes of operation are necessary Introduction This lesson provides a structured overview of modern cryptographic techniques, focusing on how today’s encryption systems operate at the bit level, how com...

In this lesson, you’ll learn about: What traditional (classical) ciphers are and why they were used The two main categories of traditional encryption techniques How substitution ciphers hide information How transposition ciphers obscure messages by rearranging characters Introduction This lesson introduces traditional ciphers, also known as classical encryption algorithms. These methods were devel...

In this lesson, you’ll learn about: The fundamental goals of computer network security The four core security properties used to protect network communications The classic security model involving Alice, Bob, and Eve Common threat behaviors observed in insecure communication channels Introduction This lesson introduces the foundations of computer network security by explaining its core objectives...

In this lesson, you’ll learn about: The adversarial relationship between red teams and blue teams Core evasion philosophies used during red team engagements How host-based monitoring tools like Sysmon detect attacker behavior Common indicators defenders rely on to identify malicious activity Why understanding detection tools is essential for both attackers and defenders Overview This lesson explor...

In this lesson, you’ll learn about: The purpose of persistence in red team operations Common local Windows persistence mechanisms and how they function Event-driven persistence using WMI The difference between host-level and domain-level persistence Why Kerberos Golden Tickets represent a critical enterprise risk Overview This lesson provides a comprehensive technical explanation of Windows persis...

In this lesson, you’ll learn about: The purpose of manual lateral movement in red team operations Why native Windows utilities are critical for stealth and reliability Three core lateral movement methodologies used in authorized engagements Privilege context differences between execution methods How these techniques relate to common automated tools Overview This lesson delivers a technical deep di...

In this lesson, you’ll learn about: The role of post-exploitation in red team operations Why redundancy is critical for operational reliability Multiple ethical techniques for file handling, execution, and process control Methods for controlled system impact and disruption The importance of cleanup and reversibility in professional engagements Overview This lesson provides a technical demonstratio...

In this lesson, you’ll learn about: The purpose and importance of network enumeration in red teaming Windows Domain Enumeration techniques for situational awareness Host Enumeration methods for analyzing a specific target system How user sessions, services, and processes influence attack paths Why continuous enumeration is critical in dynamic enterprise networks Overview This lesson provides a com...

In this lesson, you’ll learn about: Essential Linux command-line administration basics Core Windows command-line networking and system commands How to navigate, inspect, and manage files on both platforms Practical Windows domain user and group management Why command-line proficiency is critical for security professionals Overview This lesson provides a foundational overview of essential command-l...

In this lesson, you’ll learn about: The purpose and mindset of red teaming in cybersecurity The difference between red teams and blue teams How the MITRE ATT&CK framework structures real-world attacks Core Windows command-line environments used in security operations The role of Command and Control (C2) frameworks in post-exploitation Widely used red team and post-exploitation analysis tools T...

In this lesson, you’ll learn about: How Android malware can achieve remote control without external binaries The security risks of native Java networking and execution APIs Behavioral patterns of reverse-connection Trojans on mobile devices Why “living off the land” techniques are effective for malware How defenders detect Java-based reverse shells on Android Practical security lessons for Android...

In this lesson, you’ll learn about: How Android malware finalizes execution workflows (conceptually) Why file permissions are a critical security control on Android How malicious apps abuse legitimate Java APIs for command execution The importance of threading and permissions in Android security Network-based indicators of reverse-connection malware How defenders detect and stop reverse-shell beha...

In this lesson, you’ll learn about: How malicious Android apps are structured at a conceptual level Why attackers focus on legitimacy and user trust in Trojan design The role of embedded binaries in Android malware (theory only) How Android sandboxing works and why attackers try to bypass it The typical execution workflow used by Android Trojans What defenders should look for when analyzing suspic...

In this lesson, you’ll learn about: What a Trojan horse is from a cybersecurity theory perspective How remote control mechanisms work at a conceptual level The difference between bind shells and reverse shells (theory only) Why reverse connections are commonly discussed in malware analysis How malware labs are typically simulated safely using emulators Why understanding attacker tooling helps impr...

In this lesson, you’ll learn about: Why common wireless security features like captive portals and WEP are fundamentally unsafe How to properly secure Wi-Fi networks using WPA/WPA2 and strong passwords The real risks of WPS and Evil Twin attacks How user behavior impacts wireless security Step-by-step best practices for securely configuring a wireless router How MAC address access control adds an...