برچسب: Pentesting

Attacking Active Directory with Linux (LinuxAD) is a training environment and playground. Students get access to a dedicated lab setup (not shared with other students). The lab contains a Linux-based machine to execute attacks and a target AD setup. The target AD is a fully patched AD environment with all Server 2019 machines.

Complete collection of Hackers Arise courses, covering Ethical Hacking, Cybersecurity Fundamentals, Linux for Hackers, Penetration Testing, Privilege Escalation, Metasploit, Digital Forensics, Incident Response, OSINT, Network Security, Malware Analysis, and advanced offensive and defensive security techniques.

More than 95 percent of Fortune 500 use Azure today! A huge number of organizations use Azure AD (Entra ID) as an Identity and Access Management platform. This makes it imperative to understand the risks associated with Azure as it contains an enterprises infrastructure, apps, identities and a lot more!

In addition to cloud-only identity, the ability to connect on-prem Active Directory, applications and infrastructure to Azure AD brings some very interesting opportunities and risks too. Often complex to understand, this setup of components, infrastructure and identity is a security challenge.

AI Hacking 101 teaches students the fundamentals of penetration testing for AI/LLM-based applications through self-paced video instruction and guided hands-on labs. Students will learn to detect and exploit common AI vulnerabilities, with practical exercises using a custom-built lab environment featuring a vulnerable chatbot that uses Retrieval-Augmented Generation (RAG) and integrates with a company knowledge base.

The Evasion lab (Certified Evasion Techniques Professional) is designed to equip information security professionals with the expertise needed to bypass defenses in modern enterprise environments. This course delves deep into the techniques and methodologies used to bypass endpoint countermeasures like EDRs. You will gain a comprehensive understanding of Windows internals, including the distinction between user-mode and kernel-mode components, also you will gain a comprehensive understanding of EDRs internals, and how telemetries are collected.

​Throughout the course, you will learn about Windows Internals, reversing EDRs, bypassing  Microsoft Defender for Endpoint (MDE), Elastic EDR, Sysmon weaponizing kernel exploits for defense evasion and bypassing security controls like Protected Processes (PP), Process Protection Light (PPL), Digital Signature Enforcement (DSE), Attack Surface Reduction (ASR) rules and incapacitating Event Tracing for Windows (ETW) telemetry and a lot more .

Are you interested in dissecting malicious software in order to understand its mechanics and purpose? The Malware Analysis Professional Learning Path provides a holistic approach to reverse engineering and analyzing all aspects of malware. During the learning process, you will come across realistic and even real-world malware such as ransomware, botnets, and rats, against which you will perform reverse engineering, static analysis, and dynamic analysis activities.