~/category/tutorials
Hands-on, lab-tested walkthroughs and demos.
33 articles
The webshell is the cockroach of offensive security: one line of code, arbitrary command execution, and still everywhere. A deep dive into what webshells are, how attackers plant and use them, how red and blue teams both put them to work, plus a hands-on Docker lab where you build a vulnerable app, drop a shell, use it, and then detect and defend against it three different ways.
A hands-on Impacket tutorial for beginners: build a lab, then walk Kerberoasting, AS-REP roasting, secretsdump/DCSync, and remote execution end to end — with the red team, blue team, and attacker view of each, plus the exact Windows event IDs that detect them and the controls that stop them.
Build a lab Active Directory domain, collect it with SharpHound, and use BloodHound CE to find the permission chains that lead to Domain Admin — plus how red teams, blue teams, and real attackers each use it, and how to detect and dismantle the paths.
A beginner-friendly, step-by-step guide to DNS tunneling: how it works, how to build a safe isolated lab with iodine, what it looks like on the wire, and — most importantly — how to detect and defend against it.
Active exploitation confirmed on Adobe ColdFusion. PoC released for Linux root escalation. ShinyHunters tearing through healthcare and education sectors. Here's the threat board and what to do about i
Attackers are mass-exploiting a critical remote code execution vulnerability in SAP NetWeaver, with security researchers confirming hundreds of internet-exposed systems compromised within days of disclosure.
CISA issued an emergency directive requiring all federal agencies to patch a critical Ivanti Endpoint Manager Mobile authentication bypass vulnerability being actively exploited by nation-state hackers.
I’m often asked by folks just getting started in cybersecurity about the best way to begin their journey. Honestly, I sometimes feel like I’m not great at answering this question because it depends on factors like current industry trends, what motivates the individual, and even the state of the job
Enabling Remote Desktop Protocol (RDP) on Kali Linux allows you to access the system remotely with a graphical interface. Below is a step-by-step guide to setting up and enabling RDP on Kali Linux, ensuring you understand each step fully and avoid potential pitfalls.Step 1: Update Your SystemBefore
The first step is to update your system. Assuming you have a relatively new build of Kali and a simple apt-get update and upgrade command, it should work fine here.Before you get started I recommend switching to root by issuing the command:sudo -i Step 1:apt-get update -y && apt-get upgrade -yNext,
A reverse shell is a type of network connection in which a remote computer establishes a connection to a local computer and allows the remote computer to execute commands on the local computer. This can be useful in a number of situations, such as when a local computer is behind a firewall and needs
As technology advances, the risk of facing cyberattacks increases. Hackers have become more sophisticated in their attack methods, and organizations have had to take extra steps to mitigate the risk of experiencing a cyber incident. One of the most common types of cyberattacks is phishing. It's a so