CyberCode Academy

In this lesson, you’ll learn about: footprinting, OSINT, and setting up a penetration testing lab1. Penetration Testing Methodology🔹 The First Rule: Legal Scope Before any testing: Define scope clearly Get explicit permission 👉 Why it matters: Protects you legally Defines what systems you can test Prevents unauthorized access issues 2. Footprinting & Reconnaissance🔹 Definition The process o...

In this lesson, you’ll learn about: Command & Control (C2), Actions on Objectives, and Defense in Depth1. Command & Control (C2) Phase🔹 Definition The stage where an attacker establishes a communication channel with a compromised system 🔹 Purpose Send commands to the infected machine Receive exfiltrated data Maintain persistent remote access 🔹 Evasion Techniques Attackers disguise commu...

In this lesson, you’ll learn about: Delivery, Exploitation, and Installation in the Cyber Kill Chain1. Delivery Phase (Getting the Payload to the Target)🔹 Definition The process of transferring the malicious payload to the victim 🔹 Common Delivery Methods📡 Technical Methods Using exposed services: FTP uploads Web downloads 💾 Physical Methods Infected USB drives left in: Offices Public places...

In this lesson, you’ll learn about: Active Reconnaissance and Weaponization in the Cyber Kill Chain1. Transition: From Recon to Action After passive recon, attackers move to: Active Reconnaissance → direct interaction Then → Weaponization → building attack tools 👉 This is the shift from: Collecting information → Preparing the attack 2. Active Reconnaissance (Deep Target Profiling)🔹 Definition Di...

In this lesson, you’ll learn about: reconnaissance in the Cyber Kill Chain1. What is Reconnaissance? Reconnaissance is the first phase of the Cyber Kill Chain It focuses on: Gathering information about a target 👉 Why it matters: It forms the foundation of the entire attack Poor recon = weak attack Strong recon = precise targeting 2. Passive Reconnaissance (Footprinting)🔹 Definition Collecting in...

In this lesson, you’ll learn about: cracking 64-bit software and understanding architectural differences1. Transition from 32-bit to 64-bit🔹 Register Naming Changes 32-bit: EAX, EBX, ECX 64-bit: RAX, RBX, RCX 🔹 New Registers Additional registers introduced: R8 → R15 👉 These give you: More space for data handling More efficient execution 2. Key Difference: Parameter Passing🔹 32-bit Systems Argu...

In this lesson, you’ll learn about: applying static analysis and patching to modify software behavior1. Core ConceptThis episode demonstrates how to use x64dbg with the xAnalyzer plugin to: Analyze program logic without constant execution Identify and modify key instructions Alter how a program enforces trial limitations 2. Locating Critical Logic Search for meaningful strings like: "trial period...

In this lesson, you’ll learn about: graphical static analysis and Control Flow Graphs (CFGs)Review AnswerWhen analyzing a Control Flow Graph (CFG) in x64dbg with the xAnalyzer plugin:🔹 What Green and Red Arrows Represent Green arrows Represent the successful condition (TRUE branch) The path taken when a comparison or condition is met Red arrows Represent the failed condition (FALSE branch) The pa...

In this lesson, you’ll learn about: setting up a reverse engineering lab and enhancing x64dbg with plugins1. Essential Tools for Your LabTo build a solid analysis environment, you need:🔹 Core Tools x64dbg Main debugger for static & dynamic analysis Detect It Easy (DIE) Identifies: Packers Compilers File signatures 🔹 Best Practice Organize tools in: Dedicated folders (e.g., C:\RE_Lab\Tools)...

In this lesson, you’ll learn about: static vs dynamic analysis and visual debugging with x64dbg1. Static vs Dynamic Analysis🔹 Static Analysis Analyze program without executing it Focus on: Code structure Assembly instructions Logic flow 🔹 Dynamic Analysis Execute the program Observe: Runtime behavior Memory changes Real-time execution 👉 Both are essential for reverse engineering2. Using x64dbg...

In this lesson, you’ll learn about: Check Point R80 services, WebUI access control, and system backup management1. Core Check Point ProcessesIn Check Point R80, the management server depends on several critical background services.🔹 Key Daemons CPM Main management service Handles SmartConsole operations FWM Manages communication with SmartConsole Directly affects administrator connectivity CPD Ge...

In this lesson, you’ll learn about: Gaia CLI administration, troubleshooting, and system recovery in Check Point R801. CLI Access and Navigation In Check Point Gaia, administrators manage gateways via CLI 🔹 Access Methods Console (physical access) SSH remote access SmartConsole integration 🔹 Productivity Shortcuts Tab → auto-complete commands Enter → execute Space → paginate output Q → quit long...

In this lesson, you’ll learn about: VPN management, real-time monitoring, and event correlation in Check Point R801. IPsec Site-to-Site VPN (Full Implementation) In Check Point R80, VPNs secure communication between networks over the internet 🔹 Core Components Enable IPsec on gateways Define: VPN Communities (Star / Mesh) VPN Domains (protected networks) 🔹 Advanced Control Link Selection Choose...

In this lesson, you’ll learn about: layered security, anti-spoofing, and VPNs in Check Point R801. Layered Security with Policy Packages In Check Point R80, security is built in layers, not just a single rulebase 🔹 Two Main Layers✅ Access Control Controls: Who can access what Uses: URL Filtering Application Control ✅ Threat Prevention Protects against: Malware Exploits Zero-day attacks 🔹 Key B...

In this lesson, you’ll learn about: HTTPS inspection, advanced filtering, and identity-based security in Check Point R801. HTTPS Inspection (Deep Traffic Visibility) In Check Point R80, HTTPS traffic is encrypted → normally invisible to firewalls 🔹 The Problem Malware or attacks can hide inside: SSL/TLS encrypted traffic 🔹 The Solution: HTTPS Inspection Gateway acts as a proxy: Intercepts HTTPS...

In this lesson, you’ll learn about: advanced NAT, redundancy (ClusterXL), and Software Blades in Check Point R801. Advanced NAT Implementation In Check Point R80, you can combine manual + automatic NAT 🔹 Real Scenario Manual Destination NAT Public IP → Internal web server (port 80) Automatic Hide NAT Internal server → Internet (outbound traffic) 🔹 Key Insight Same server can use: Static NAT (inc...

In this lesson, you’ll learn about: advanced NAT design, rule priority, and manual translation in Check Point R801. NAT Fundamentals in Check Point R80 In Check Point R80, NAT controls how private and public networks communicate 🔹 Hide NAT (Source NAT) Many internal devices → one public IP Typically uses: Gateway’s external IP 🔹 Use Cases Internet browsing Outbound traffic 🔹 Static NAT (Destina...

In this lesson, you’ll learn about: policy packages, troubleshooting, implied rules, and NAT in Check Point R801. Policy Packages for Scalable Management In Check Point R80, policy packages allow you to organize rules per gateway 🔹 Why Use Policy Packages Avoid one large, complex policy Assign specific rule sets to each firewall 🔹 Example Firewall 1 → Internal traffic rules Firewall 2 → DMZ or e...

In this lesson, you’ll learn about: advanced policy optimization, rule structuring, and collaborative management in Check Point R801. Time-Based Security Policies In Check Point R80, rules can depend on time conditions 🔹 How It Works Create time objects (e.g., 12 PM → 12 AM) Attach them to firewall rules 🔹 Example Use Cases Allow admin access only during work hours Block risky services at night...

In this lesson, you’ll learn about: policy management, licensing, snapshots, and advanced security design in Check Point R801. System Safety with Snapshots In Check Point R80, snapshots act as a full system backup 🔹 What Snapshots Do Capture: File system Configuration Management database 🔹 Why Use Them Before: Upgrades Major changes 👉 Think of it as a “restore point” for the entire firewall sys...

In this lesson, you’ll learn about: SmartConsole deployment, gateway integration, routing, and maintenance in Check Point R801. SmartConsole Deployment & Access The primary management tool in Check Point R80 is SmartConsole 🔹 Installation Workflow Access Gaia OS WebUI Download SmartConsole client Install on your local machine 🔹 Connection Connect to: Security Management Server IP Authenticat...

In this lesson, you’ll learn about: Check Point R80 deployment, Gaia OS setup, and distributed security architecture1. Overview of Check Point R80 Architecture This lesson introduces Check Point R80 Focus: building a distributed deployment 🔹 Two Main Components Security Management Server Controls policies Centralized management Security Gateway (Firewall) Enforces security rules Handles traffic f...

In this lesson, you’ll learn about: applying Docker to real-world apps and scalable architecture principles1. Framework-Based Starter Projects The episode provides 7 ready-to-use starter projects for popular frameworks: Flask Express (Node.js) .NET Django Ruby on Rails Golang Laravel Each project includes: Dockerfile docker-compose.yml 👉 Goal: get you running fast with real applications in Docker...

In this lesson, you’ll learn about: Docker Compose workflows, API versions, and real-world microservices orchestration1. Essential Docker Compose Commands & WorkflowUsing Docker Compose, you can manage your entire application lifecycle with a few commands:🔹 Core Commands docker-compose up → Start services docker-compose build → Build images docker-compose stop → Stop containers docker-compose...

In this lesson, you’ll learn about: Docker Compose, multi-container apps, and service orchestration1. What is Docker Compose? Docker Compose is a tool used to: Define Run Manage multi-container applications using a single command 👉 Instead of long docker run commands, you describe everything in one file2. The docker-compose.yml File Core configuration file written in YAML Uses version 3 syntax Ex...