Pick a topic to start. Your lesson opens in a new page with slides.
Practical scripting skills for security-minded engineers: automation, log parsing, simple network inspection and safe reconnaissance using Python, Bash, and PowerShell. For ethical use only.
Open-Source Intelligence techniques for lawful research: mapping people, companies, and internet infrastructure using public data and responsible workflows.
Practical, defensible techniques to discover assets and gather host/service details using passive data sources and controlled active scans. Emphasis on legality, safety, and minimizing impact.
A practical guide to the OWASP Top 10 web risks: what they are, real-world examples, detection tips, and concrete mitigations you can implement today.
Discover common API weaknesses in REST and GraphQL, how auth schemes work, and how to test and defend rate limits and authorization safely.
Understand risks from unsafe deserialization, template injection, and insecure file uploads — detection, safe patterns, and concrete mitigations for developers and defenders.
Techniques attackers use to move inside networks: pivoting between hosts, creating tunnels (SSH, SOCKS, VPN), and forwarding ports. Focus on lawful, lab-based learning and defensive detection & mitigation.
Hands-on techniques to find and responsibly remediate Linux privilege escalation paths caused by misconfigurations, SUID binaries, sudo rules, cron jobs, capabilities, and container weaknesses.
Core security practices for containerized applications and Kubernetes clusters: image hygiene, runtime hardening, cluster controls (RBAC, NetworkPolicy), secrets management, and incident readiness.
Understand how mobile apps are secured and tested. Learn static analysis (code and APK/IPA review), dynamic analysis (runtime testing, traffic interception), and safe reverse engineering practices for Android and iOS.
Practical overview of common desktop-app attack vectors (Electron, .NET): tampering, code injection, IPC abuse, insecure update channels, DLL hijacking, and defensive controls for developers and defenders.
Practical defenses and lab-safe techniques for wireless security: understanding WPA2/3, detecting rogue APs and evil-twin attacks, hardening Wi-Fi deployments, and Bluetooth (classic & BLE) fundamentals and risks.
An approachable primer to static and dynamic reverse engineering using Ghidra and IDA: binary formats, disassembly, decompilation, basic debugging, function/strings recovery, and safe lab practices.
Foundations of memory corruption (stack/heap overflows, use-after-free), mitigation techniques (NX, ASLR, canaries), and a high-level introduction to Return-Oriented Programming (ROP) — all taught for defensive understanding and safe lab practice.
Foundational defensive knowledge for understanding malware: taxonomy, safe static & dynamic analysis practices, payload triage, creating YARA detection rules, and hunting workflows — all for lab and incident-response use.
Understand SQL injection concepts, safe detection methods, secure coding patterns (parameterized queries, ORM usage), DB hardening, and monitoring approaches — taught for defenders and lab-only testing.
Concise, defensive primer on Cross-Site Scripting (XSS): types, safe coding patterns, detection, and remediation. Focused on practical fixes and authorized testing only.
Practical, defensive primer on clickjacking: how it works, protections (X-Frame-Options, CSP frame-ancestors, sandboxing), safe testing, detection, and quick hardening steps for web teams.
Introductory guide to authorized physical security assessments: scope definition, legal and safety policies, access control testing, tailgating simulations, and reporting within organizational boundaries.
Defensive primer on Directory Traversal: how path-traversal vulnerabilities arise, safe coding patterns (normalization, allowlists), detection, testing in lab, and operational mitigations. Focused on protection and authorized testing only.
Defensive introduction to logging architecture, Security Information and Event Management (SIEM), and Endpoint Detection & Response (EDR) systems. Covers data sources, correlation logic, and detections for common attacker techniques, tactics, and procedures (TTPs).
Focused guide on Reflected Cross-Site Scripting: how reflected XSS works, common vectors (query parameters, headers), safe detection practices, concrete mitigations, and operational controls — for defenders and authorized testers.
Core principles for defenders: building detection pipelines, performing threat hunts, and running incident response operations effectively. Focused on visibility, containment, and continuous improvement.
Defensive coverage of file upload risks: insecure handling, path traversal via archives, executable uploads, content-type spoofing, and safe storage/serving patterns. Includes detection, testing in authorized labs, remediation, and monitoring recommendations.
Essential guide for blue teams performing digital forensics triage. Covers evidence handling, imaging, volatile memory capture, and network traffic analysis for rapid detection and containment.
Defensive primer on data extraction against AI systems: threat models (model inversion, extraction, prompt injection), detection signals, mitigations (rate-limits, output policies, redaction, fine-tuning controls), logging, and response — focused on protecting sensitive data and preserving privacy.
Defensive primer on Denial of Service (DoS) and Distributed Denial of Service (DDoS): attack types, detection signals, capacity planning, mitigations (network, application, rate-limits), testing rules (policy-bound), and incident response playbooks — all focused on protecting availability.
Defensive primer on prompt injection: threat models, detection signals, safe testing rules, input-side and output-side mitigations, monitoring, and incident response — focused on protecting models, prompts, and sensitive data.