The video demonstrates using Shelter to embed custom reverse-TCP shellcode in nc.exe, host the payload from Kali Linux, and open the modified executable to obtain a remote shell on Windows.
The tutorial targets a site identified as Tiki Wei 1.9.5 and demonstrates bypassing input filters to execute commands, create a PHP web shell, and read database credentials.
A hands-on demo shows how AWS IAM Access Analyzer can identify externally accessible resources, unused permissions, and policy needs based on CloudTrail activity, then help revoke access and reduce permissions.
A demonstration shows how GuardDuty attack sequences and Detective investigation tools link simulated AWS activity, including possible S3 data access, role anomalies, and other findings, to support cloud threat hunting.
The tutorial configures Havoc’s team server and client, creates an HTTP listener and Windows payload, then downloads and runs it on a target to demonstrate remote commands, screenshots, and file retrieval.
A tutorial demonstrates how a deceptive link can trigger a logged-in user’s browser to submit a message through a hidden form, then shows how JavaScript can automate submission and how to inspect the resulting request.
The tutorial demonstrates cross-site scripting in a chat app, using injected JavaScript to redirect users, capture session cookies, impersonate a user, and send credentials to a fake login page.
The video presents a seven-phase framework for understanding ethical hacking, using hypothetical examples of reconnaissance, payload delivery, exploitation, persistence and attackers’ objectives.
The speaker recommends building IT fundamentals, continually learning, completing hands-on projects, and earning certifications to strengthen cybersecurity job applications, while noting certifications do not guarantee employment.
The presenter demonstrates how AWS Security Lake collects OCSF-formatted logs, then uses Athena for investigation and OpenSearch for direct querying and dashboards to support security monitoring, threat hunting, and incident response.
The tutorial demonstrates how an AWS Resource Control Policy deployed through Control Tower can block external principals from accessing S3 resources, including a test where an external account’s object retrieval is denied.
The video demonstrates using Flipper Zero with an ESP32 and Wi-Fi Marauder to disconnect a mobile device from a Wi-Fi access point, then explains how forged messages impersonating device MAC addresses cause disconnection.
The tutorial demonstrates using a Flipper Zero with an ESP32 Wi-Fi Marauder board to create a fake Wi-Fi login portal and capture credentials entered by a connected user.
The video demonstrates Flipper Zero BadUSB scripts that inject keystrokes, use PowerShell to download netcat from a Kali Linux host, and connect a Windows target back to a listener for remote shell access.
The tutorial installs Wazuh on Ubuntu, enrolls an endpoint agent, and demonstrates lab detection of SSH password guessing, a netcat reverse shell, and SQL injection using built-in and custom rules.
The tutorial applies the NIST Cybersecurity Framework’s five phases to IT architecture, covering asset inventory, access controls, monitoring, incident response and tested backups.
A demo shows GuardDuty scanning new S3 uploads, tagging scan results and flagging a Metasploit-generated malicious PDF. It also explains bucket selection, EventBridge notifications and required IAM permissions.
A tutorial demonstrates GuardDuty runtime monitoring on EC2 by simulating PHP command injection and a reverse shell, then reviewing findings, process lineage, instance coverage, and automated agent configuration.
The video outlines six cybersecurity roles, describing typical responsibilities and certifications associated with paths in analysis, penetration testing, engineering, cloud security, architecture, and consulting.
