CyberCode Academy

In this lesson, you’ll learn about: Preparing the Metasploit lab environment by configuring its required backend database components. Starting the PostgreSQL service, which stores scan results, hosts, credentials, and workspace data used during assessments. Initializing the Metasploit database using the msfdb init command to create, configure, and link the database properly. Launching the Metasplo...

In this lesson, you’ll learn about: Linux operating system fundamentals, including its architecture and why command-line proficiency is critical for cybersecurity tasks such as vulnerability discovery and command injection testing. File System Hierarchy Standard (FHS) structure, understanding key root directories like /etc (configuration), /bin (essential binaries), /home (user data), and /var (lo...

In this lesson, you’ll learn about: Kali Linux, a Unix-like operating system designed for penetration testing and security assessments, preloaded with hundreds of specialized tools. Deployment options, including full hard drive installation, portable live USB/CD for field testing, and virtualized environments such as VMware Workstation for safe lab setups. System maintenance best practices, using...

In this lesson, you’ll learn about: Building a digital forensics “utility belt” using open-source and low-cost tools to support incident response and investigations. All-in-one forensic suites, including bootable environments and remote response platforms that combine multiple tools for disk analysis, memory inspection, and evidence handling. Disk imaging and recovery techniques, using forensic im...

In this lesson, you’ll learn about: Core mitigation strategies and layered security controls used to defend modern network infrastructures against evolving threats. Asset inventory and continuous discovery, including identifying authorized and unauthorized devices and software using DHCP and DNS logs. Secure configuration management, ensuring hardware, software, and virtual systems comply with def...

In this lesson, you’ll learn about: How to shift from reactive to proactive security by using intrusion detection tools and manually analyzing network logs to identify threats early. The importance of an Incident Response Plan (IRP), including clearly defined roles, responsibilities, and escalation paths to ensure proper and authorized incident handling. The structured incident handling lifecycle,...

In this lesson, you’ll learn about: The Foundations of Organizational Risk Management Why security must begin with understanding a system’s requirements, limitations, and operational environment before deployment How improper preparation can lead to security failures, operational risks, and legal consequences The Four Stages of the Risk Management Process Framing: Defining the organizational conte...

In this lesson, you’ll learn about: The Modern Cybersecurity Landscape How cybersecurity has evolved from an IT-only concern into a shared responsibility for all users Why understanding the attacker’s mindset is essential for identifying and preventing threats Social Engineering and Human Exploitation How attackers manipulate emotions like fear, curiosity, greed, and trust The differences between...

In this lesson, you’ll learn about: Converting Python Scripts into Executables Installing and using PyInstaller to package Python code into standalone .exe files Understanding how executables allow programs to run on systems without Python installed Compilation Process with PyInstaller Using the command pip3 install pyinstaller to install the packaging tool Running PyInstaller on a Python script t...

In this lesson, you’ll learn about: Programmatic Privilege Modification How to use the AdjustTokenPrivileges API to enable or disable specific privileges Understanding the TOKEN_PRIVILEGES structure and how privilege attributes are modified Enabling critical privileges like SeDebugPrivilege to allow advanced system access Preparing for Token Manipulation Identifying a target process or user throug...

In this lesson, you’ll learn about: Fundamentals of Windows Access Tokens Tokens define a process's privileges, such as shutting down the system or debugging memory Tokens are static: you can enable/disable existing privileges but cannot add new ones Difference between default tokens (limited rights, e.g., SeChangeNotify) and administrative tokens (powerful rights, e.g., SeDebugPrivilege) Programm...

In this lesson, you’ll learn about: Defining Windows Internal Structures in Python Representing structures like PROCESS_INFORMATION and STARTUPINFO using ctypes. Structure Mapping Windows data types (HANDLE, DWORD, LPWSTR) with the _fields_ attribute Instantiating structures for API calls to configure or retrieve process information Spawning System Processes Using CreateProcessW from kernel32.dll...

In this lesson, you’ll learn about: Interfacing Python with Windows API using ctypes Loading core DLLs: user32.dll and kernel32.dll Executing basic functions like MessageBoxW Mapping C-style data types (e.g., LPCWSTR, DWORD) to Python equivalents Error Handling and Privileges Using GetLastError to debug API failures Common errors such as "Access Denied" (error code 5) Understanding how token privi...

In this lesson, you’ll learn about: Fundamentals of Windows Processes and Threads A process is a running program with its own virtual memory space Threads are units of execution inside processes, allocated CPU time to perform tasks Access tokens manage privileges and access rights; privileges can be enabled, disabled, or removed but cannot be added to an existing token Key System Programming Termi...

In this lesson, you’ll learn about: Building a Professional Portfolio Creating a GitHub account and configuring it for public repositories Initializing repositories specifically for Python projects Uploading and organizing files to showcase practical work for employers Setting Up a Windows-Based Technical Workspace Installing Python 3 and verifying it is correctly added to the system PATH Installi...

In this lesson, you’ll learn about: The major security threat categories in machine learning: model stealing, inversion, poisoning, and backdoors How model stealing attacks replicate black-box models through API querying Why attackers may clone models to reduce costs, bypass licensing, or craft offline adversarial examples The concept of model inversion, where sensitive training data (e.g., faces...

In this lesson, you’ll learn about: What deepfakes are and how neural networks enable face, voice, and style transfer The standard face swap pipeline: extraction → preprocessing → training → prediction Why conducting a local dry run helps validate datasets before scaling to expensive GPU environments The importance of face alignment, sorting, and dataset cleaning to reduce false positives How ligh...

In this lesson, you’ll learn about: The difference between white-box and black-box threat models in machine learning security Why gradient-based models are vulnerable to carefully crafted input perturbations The core intuition behind the Fast Gradient Sign Method (FGSM) as a sensitivity-analysis technique How adversarial perturbations exploit a model’s local linearity and gradient structure The pu...

In this lesson, you’ll learn about: What adversarial machine learning is and why ML-based malware classifiers are vulnerable to manipulation The difference between feature-engineered models like Ember and end-to-end neural approaches like MalConv Why handling real malware (e.g., Jigsaw ransomware) requires a properly isolated virtual machine lab How libraries such as LIEF and pefile are used to sa...

In this lesson, you’ll learn about: What fuzzing is and why it’s a powerful technique for discovering software vulnerabilities The difference between basic randomized fuzzing and more advanced, coverage-guided approaches How code coverage helps measure which parts of a program are exercised during testing Why naive random input generation is inefficient for complex formats like PDFs The concept of...

In this lesson, you’ll learn about: How CAPTCHA systems (like Really Simple CAPTCHA for WordPress) are designed to prevent automated abuse The role of reconnaissance in identifying security mechanisms on web applications (for defensive testing with permission) How OpenCV is used in computer vision for: Grayscale conversion Image thresholding Noise reduction and morphological operations (e.g., dila...

In this lesson, you’ll learn about: What digital identity is and how IP and MAC addresses are used to track users Why masking an IP address is essential for protecting location and online activity How the Tor network provides anonymity by routing traffic through multiple global nodes The role of ProxyChains in forcing applications to operate through anonymizing networks What a MAC address represen...

In this lesson, you’ll learn about: Why default router settings are a major security risk and commonly targeted by attackers How changing the administrative IP address reduces exposure to automated attacks The importance of replacing default usernames and passwords with strong, unique credentials Why disabling WPS is critical to preventing brute-force and PIN-based attacks How enabling modern encr...

In this lesson, you’ll learn about: Using a Raspberry Pi as a mobile platform for wireless penetration testing Leveraging Wifite, an automated tool for auditing Wi‑Fi networks Exploiting WPS vulnerabilities through the Pixie Dust attack to quickly recover router credentials Performing dictionary attacks on WPA/WPA2 networks by capturing handshake packets and testing against common password lists U...

In this lesson, you’ll learn about: How a Raspberry Pi can be configured as a portable wireless security lab Methods for remotely accessing a headless Raspberry Pi using command-line and graphical interfaces The concept of wireless interference and denial-of-service at a high level (without operational details) Differences between automated and manual approaches to wireless disruption from a conce...