Decoded: The Cybersecurity Podcast

Part 9: Malware Threats and Analysis (15 Questions) 1. Which type of malware disguises itself as legitimate software to deceive users? • A) Ransomware • B) Spyware • C) Trojan Horse • D) Worm Answer: C) Trojan Horse 2. What malware self-replicates without user intervention to spread across networks? • A) Virus • B) Worm • C) Rootkit • D) Spyware Answer: B) Worm 3. Which malware encrypts a victim’s...

Part 8: Web Application Attacks (15 Questions) ⸻ Which attack exploits unsanitized user input to execute malicious SQL commands? • A) Cross-Site Scripting (XSS) • B) SQL Injection (SQLi) • C) Directory Traversal • D) Session Hijacking Answer: B) SQL Injection (SQLi) Which web attack aims to execute malicious scripts in a victim’s browser via trusted websites? • A) Cross-Site Scripting (XSS) • B) C...

Part 7: Wireless Attacks (15 Questions) 1. Which wireless security protocol is considered the weakest and easiest to crack? • A) WPA3 • B) WPA2 • C) WEP • D) 802.1X Answer: C) WEP 2. What attack captures wireless network packets to exploit encryption weaknesses? • A) Rogue AP Attack • B) Evil Twin Attack • C) Packet Sniffing • D) IV Attack Answer: D) IV Attack 3. Which tool is commonly used to per...

1. What type of attack manipulates query parameters to exploit web databases? • A) Cross-Site Scripting • B) Command Injection • C) SQL Injection • D) Clickjacking Answer: C) SQL Injection Explanation: SQL Injection inserts malicious SQL queries into web forms to manipulate backend databases. 2. Which technique exploits web page scripts to execute malicious code in browsers? • A) SQL Injection • B...

1. Which of the following is an example of a pretexting attack? • A) Sending phishing emails with malicious links • B) Impersonating an IT technician to gain system access • C) Deploying malware through USB drives • D) Exploiting unpatched software vulnerabilities Answer: B) Impersonating an IT technician to gain system access 2. Which social engineering tactic involves enticing users to plug in i...

Part 4: Windows System Hacking Techniques and Tools (15 Questions) 1. The most common technique attackers use to escalate privileges on a Windows system is the Pass-the-Hash attack. This exploit leverages Windows’ authentication mechanisms by using hashed credentials instead of plaintext passwords, allowing attackers to impersonate users without knowing the original password. 2. The Windows tool t...

Part 3: Network Scanning and Enumeration Techniques (15 Questions) 1. What defines network scanning? • A) Finding web app vulnerabilities • B) Mapping a network for active hosts and services • C) Capturing network packets for analysis • D) Exploiting open ports on a target Answer: B) Mapping a network for active hosts and services Explanation: Network scanning identifies live hosts, services, and...

Part 2: Reconnaissance & Footprinting (15 Questions) 1. What is the main goal of the reconnaissance phase in ethical hacking? • A) Exploiting vulnerabilities • B) Identifying security controls • C) Gathering target information • D) Delivering payloads Answer: C) Gathering target information Explanation: Reconnaissance involves collecting details like domains, IPs, employee info, and network archit...

Part 1: Ethical Hacking Fundamentals (10 Questions) 1. What is the main aim of a penetration test? • A) Network performance issues • B) Find vulnerabilities before attackers • C) Enhance software development • D) Prevent unauthorized access Answer: B) Find vulnerabilities before attackers 2. Which method uses tools to check systems for known weaknesses? • A) Fuzzing • B) Static Analysis • C) Vulne...

Edward Henriquez's podcast episode, "Decoded: Web Application Hacking," uses "The Web Application Hacker’s Handbook" as a foundation to explore prevalent web application attacks. The episode introduces fundamental concepts and then examines specific vulnerabilities, such as SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), and command injection, explaining how these att...

The Decoded podcast episode, hosted by Edward Henriquez, explores real-world hacking tactics drawn from Peter Kim's Hacker Playbook series, moving beyond fictional portrayals. It details the stages of an attack, starting with reconnaissance using OSINT and tools like Shodan and Nmap to gather information. The episode then examines exploitation techniques that target vulnerabilities with tools such...

The podcast episode "Decoded – Unmasking the CEH" provides a comprehensive guide to the Certified Ethical Hacker (CEH) certification. Hosted by Edward Henriquez, the episode outlines what the CEH is, its significance in cybersecurity, and the career opportunities it can unlock. It thoroughly breaks down the 20 domains covered in the CEH exam, including topics like reconnaissance, network scanning,...

Decoded: The Open-Source Arsenal – Deep Dive into DFIR Tools is a podcast episode hosted by Edward Henriquez that explores a variety of open-source tools critical for digital forensics and incident response (DFIR). The episode examines tools used in disk and memory forensics, such as Autopsy, The Sleuth Kit, Volatility, and Rekall, for analyzing compromised systems and memory dumps. It further dis...

This podcast episode of "Decoded" explores the importance of Unix in cybersecurity. It traces Unix's origins and its influence on modern operating systems and security practices. The episode highlights essential Unix commands for security professionals and explains effective patching and update strategies. It also shows how to use Ansible for automating Unix security tasks such as enforcing polici...

Edward Henriquez hosts the "Decoded Podcast". The YouTube video by "UnixGuy | Cyber Security" outlines a comprehensive six-month plan for individuals seeking entry-level cybersecurity positions without prior experience or degrees. It emphasizes practical, hands-on skills, starting with the Google Cybersecurity Certificate. The plan includes resume building, focusing on relevant experience, immedia...

PurpleLab is an open-source cybersecurity lab designed to help security teams detect, analyze, and simulate cyber threats. It provides a sandboxed environment with tools for testing detection rules, generating realistic logs, and executing malware. The lab includes a web interface, a Windows 10 virtual machine with forensic tools, and integration with the ELK stack for log analysis. Administrators...

This podcast episode of Decoded, hosted by Edward Henriquez, addresses the ever-present threat of password cracking. It explores three common methods used by hackers: brute force attacks, dictionary attacks, and rainbow table attacks. For each technique, Henriquez provides real-world examples of successful breaches, highlighting the potential damage. Most importantly, the podcast offers actionable...

This curated list highlights top books for mastering Open-Source Intelligence (OSINT). The texts cover diverse aspects, from cybercrime investigation and strategic thinking to human rights documentation and digital privacy. Several books offer practical guidance on OSINT techniques, data analysis, and ethical considerations. Some focus on applying OSINT in specific domains like cybersecurity and c...

The CrowdStrike 2024 Threat Hunting Report  analyzes the evolving cyber threat landscape over the past year.  It highlights the rise of stealthy, cross-domain attacks  targeting identity, endpoints, and cloud environments. The report emphasizes  the increasing use of legitimate tools like RMM software by adversaries  for malicious purposes and insider threats exploiting recruitment processes.  Cro...

This podcast episode discusses using artificial intelligence (AI) to enhance cybersecurity. It focuses on running Large Language Models (LLMs) locally for improved security, pretraining AI models for threat detection and anomaly identification, and building AI-driven proof-of-concept security tools. Specific open-source LLMs like DeepSeek, Tulu-3, and Tongyi are highlighted for their applications...

Ethical hacker Ryan Montgomery demonstrates various hacking techniques in a YouTube video, highlighting vulnerabilities in Wi-Fi networks, wireless devices (keyboards, mice, car keys), and even seemingly innocuous devices like vacuum cleaners. He showcases attacks like man-in-the-middle attacks and zero-click exploits, emphasizing how easily personal data (passwords, credit card information) can b...

Edward Henriquez's CyberFrontiers podcast episode discusses the rising threat of deepfakes and AI-driven social engineering. The podcast explains how deepfake technology uses AI to create realistic but fake audio and video, providing examples of real-world fraudulent activities. It then highlights efforts by tech companies and government agencies to develop deepfake detection technologies. Finally...

This podcast episode, "Patch or Perish," advocates for improved endpoint patch management to boost ROI. It highlights the substantial financial risks of inadequate patching, citing costly data breaches and downtime. The episode promotes integrating Microsoft Intune with Automox for automated patching, emphasizing cost savings through reduced manual labor, breach prevention, and increased uptime. R...

Ghost GPT, a new AI model, is explained as a significant cybersecurity threat due to its ability to create highly realistic, deceptive communications for phishing and social engineering attacks. Unlike traditional malware, its adaptive nature makes detection difficult, requiring AI-powered solutions for effective mitigation. The podcast advocates for a proactive defense strategy involving investme...

Open-source intelligence (OSINT) is the practice of gathering information from publicly available sources. The text describes how OSINT, initially used by military and intelligence agencies, is now crucial for cybersecurity. It details how organizations use OSINT to discover and analyze public-facing assets, identify potentially sensitive information, and improve their overall security posture. Th...