Investigating an Infected Windows Active Directory | TryHackMe Recovering Active Directory
We covered the process of incident response and the steps taken to investigate and recover an infected…
TryHackMe Walkthrough
Rootkit Analysis to Privilege Escalation | TryHackMe Athena
We covered the boot2root challenge Athena from TryHackMe. We scanned the machine with Nmap and discovered SMB…
Windows Active Directory Hardening and Security | TryHackMe
We covered some basic security and hardening techniques that can be implemented on Windows server systems with…
Malware Static Analysis | Part Three | TryHackMe Basic Static Analysis
We covered the second part of malware static analysis. We went through analyzing strings, hashes and signatures….
Phishing Email Analysis with PhishTool | Part One | TryHackMe Threat Intelligence Tools
We covered the first part of Phishing Email Analysis with PhishTool. We demonstrated key areas to consider…
Analysis of Print Nightmare Exploit | TryHackMe Print Nightmare, again and thrice !
We covered the Print Nightmare Exploit from a defensive perspective where we performed an incident response and…
Hashing and SSL Basics | TryHackMe Intro to Cryptography
We covered hashing functions including MD5 and SHA256 in addition to public key infrastructure and SSL/TLS certificates….
LocalPotato (CVE-2023-21746) | Windows Privilege Escalation | TryHackMe
A local privilege escalation (LPE) vulnerability in Windows was reported to Microsoft on September 9, 2022, by…
Docker Vulnerabilities Part Two | Escaping Docker Containers Shell
We covered two methods to escape docker containers including the method of mounting the full host file…
Understanding Secure Network Architecture Design | TryHackMe
We covered secure network architecture design concepts such as VLANs, security zones, access control lists, DNS snooping…
Demonstrating Session Hijacking & Linux Privilege Escalation | TryHackMe Hijack
We covered a boot to root machine where we started with an Nmap scan to discover several…
Vulnerability Management Explained | Scanning Vulnerabilities with OpenVas | TryHackMe
We covered vulnerability management, vulnerability scanning, vulnerability management frameworks and the lifecycle of a vulnerability management program…
Escaping Docker Containers Using Linux Capabilities | TryHackMe The Docker Rodeo
We covered the fifth part of exploiting Docker containers. We discussed one of the popular methods of…
Escaping Web Server Docker Container with SSRF | TryHackMeThe Great Escape
We covered a Docker container running a web server that is vulnerable to server side request forgery….
Exploiting Docker Container with E-Commerce Website | TryHackMe The Marketplace
We demonstrated gaining root access to a docker container running a web server with an SQL database….
Information Security Risk Management Explained | TryHackMe
We covered risk management process and its components and frameworks. We explained the different steps taken to…
CVE-2023-4911 Looney Tunables | Linux Local Privilege Escalation
We covered and explained CVE-2023-4911 Looney Tunables that affects mostly all Linux distributions and allows an attacker…
PASTA Framework Explained | Threat Modeling | TryHackMe
We covered the PASTA (Process for Attack Simulation and Threat Analysis) framework for risk assessment and threat…
Microsoft STRIDE Framework Explained | Threat Modeling | TryHackMe
We covered the STRIDE framework developed by Microsoft for threat modeling. STRIDE framework categorizes threats into 6…
Microsoft DREAD Framework Explained | Threat Modeling | TryHackMe
We covered the Microsoft DREAD risk assessment Framework. DREAD is used widely to assess risks and threats…