white2hack 📚

Advanced Web Penetration Testing Certification, Hack The Box Academy, 2024 HTB Certified Web Exploitation Expert (HTB CWEE) is a highly hands-on certification that assesses candidates' skills in identifying advanced and hard-to-find web vulnerabilities using both black box and white box techniques. HTB CWEE certification holders will possess technical competency in the web security, web penetration testing, and secure coding domains at an advanced level and be well-versed in the application debugging, source code review, and custom exploit development aspects of web security testing. They will also be able to professionally conduct web penetration tests against modern and highly secure web applications, as well as report vulnerabilities found in code or arising from logical errors. ❗️Official page Passwords: @hindsec #education #web

Keycloak - Open Source Identity and Access Management by Santanu Das (Udemy), 2022 This Basic Keycloak Course will provide you a good foundation to leverage Keycloak in your Projects. Keycloak is an Opensource Identity and Acccess Management tool with a focus on Modern applications such as single-page applications, mobile applications, and REST APIs. Keycloak builds on Industry standard protocols supporting OAuth 2.0, OpenID Connect, and SAML 2.0. Using industry standard protocols is important from both a security perspective and in terms of making it easier to integrate with existing and new applications. ❗️Official page #education #defensive #SecDevOps

Как сделать резюме, которое дойдет до работодателя. Фильтры ATS в 2025 году ATS (Applicant tracking system) — ПО, которое помогает работодателям и рекрутерам искать и отбирать кандидатов на первичном этапе. По статистике StandOut CV за 2023 год, ATS отклоняет на первом этапе 75% резюме. Компания Oorwin, которая сама предлагает продукты для автоматизации рекрутинга, упоминает такое же количество отказов — 75%. В итоге живой рекрутер видит только каждое четвертое резюме. В этой статье рассказано, как работают системы ATS и как составить резюме, которое точно попадет в руки реального человека. ❗️Источник ⛳️Предыдущий пост #job #world

Инструменты атакующих на российскую ИТ инфраструктуру в 2023 – 2024 годах, Семен Рогачев (Бастион), 2024 В статье рассказано какие инструменты сегодня чаще всего используются в кибератаках на российскую Linux- и Windows-инфраструктуру Источник #pentest

Practical Digital Forensics: a Guide for Windows and Linux Users, Akashdeep Bhardwaj, Pradeep Sing, Ajay Prasad, 2024 Practical Digital Forensics: A Guide for Windows and Linux Users is a comprehensive resource for novice and experienced digital forensics investigators. This guide offers detailed step-by-step instructions, case studies, and real-world examples to help readers conduct investigations on both Windows and Linux operating systems. It covers essential topics such as configuring a forensic lab, live system analysis, file system and registry analysis, network forensics, and anti-forensic techniques. The book is designed to equip professionals with the skills to extract and analyze digital evidence, all while navigating the complexities of modern cybercrime and digital investigations. #book #forensic

SQL инъекции и тестирование баз данных для начинающих, Mefodiy Kelevra (Udemy), 2024 (2018 leak) На этом курсе Вы познакомитесь с основами тестирования баз данных на проникновение! Научитесь находить и эксплуатировать уязвимости инъекций SQL! Мы изучим просты инъекции SQL, инъекции слепым методом, методом Time - based а так же encoded based Научимся использовать sqlmap чтобы автоматизировать тестирование на проникновение! ❗️Официальная страничка #education #web

Practical Red Teaming: Field-Tested Strategies for Cyber Warfare by Sarang Tumne (Cyber Insane), 2023 This book also caters to a diverse audience within the cybersecurity realm. This includes Red Teamers seeking to sharpen their skills, CISOs strategizing on organizational cybersecurity, and Application and Network Security Administrators aiming to understand and enhance their defense mechanisms. It's also an invaluable resource for System Administrators, Auditors, and members of Threat Hunting and SOC Teams who are looking to deepen their understanding of offensive cybersecurity tactics. #book #pentest

Windows User Account Forensics and Windows User Activity Analysis by Lex Program (Baris Dincer), 2024

Windows User Account Forensics and Windows User Activity Analysis by Lex Program (Baris Dincer), 2024 #forensic #windows

Practical Forensic. Analysis of Artifacts on iOS and Android Devices Investigating Complex Mobile Devices by Mohammed Moreb, 2022 You’ll walkthrough the various phases of the mobile forensics process for both Android and iOS-based devices, including forensically extracting, collecting, and analyzing data and producing and disseminating reports. Practical cases and labs involving specialized hardware and software illustrate practical application and performance of data acquisition (including deleted data) and the analysis of extracted information. You'll also gain an advanced understanding of computer forensics, focusing on mobile devices and other devices not classifiable as laptops, desktops, or servers. This book is your pathway to developing the critical thinking, analytical reasoning, and technical writing skills necessary to effectively work in a junior-level digital forensic or cybersecurity analyst role. #book #forensic #mobile

Black Hat Europe 2024, London, Dec 2024 Black Hat Europe returns to the ExCeL in London with a four-day program this December 9-12, 2024. The event will open with two-and four-day options of deeply technical hands-on cybersecurity trainings, with courses available for all skill levels. ❗️Official page 📌GitHub #event

Active Directory Penetration Tester by HTB Academy, 2024 The Active Directory Penetration Tester Job Role Path is designed for individuals who aim to develop skills in pentesting large Active Directory (AD) networks and the components commonly found in such environments. This path equips students with the skills needed to evaluate the security of AD environments, navigate complex Windows networks, and identify elusive attack paths. This path includes advanced hands-on labs where participants will practice techniques such as Kerberos attacks, NTLM relay attacks, and the abuse of services like AD Certificate Services (ADCS), Exchange, WSUS, and MSSQL. Students will also learn how to exploit misconfigurations in Active Directory DACLs and Domain Trusts, perform evasion tactics in Windows environments, and leverage Command and Control (C2) frameworks for post-exploitation activities. By combining theoretical foundations with practical exercises and a structured methodology for identifying AD vulnerabilities, this path enables students to conduct professional security assessments on complex AD infrastructures and effectively report security weaknesses discovered by chaining multiple vulnerabilities. ❗️Official page #windows #pentest #education