An introduction to Сybersecurity for technical and non-technical audiences alike. Learn how to secure your accounts, data, systems, and software against today’s threats and how to recognize and evaluate tomorrow’s as well, both at home and at work. Learn how to preserve your own privacy. Learn to view cybersecurity not in absolute terms but relative, a function of risks and rewards (for an adversary) and costs and benefits (for you). Learn to recognize cybersecurity as a trade-off with usability itself. Course presents both high-level and low-level examples of threats, providing students with all they need know technically to understand both. Assignments inspired by real-world events.

0:00 - Introduction/whoami 6:43 - A Day in the Life of an Ethical Hacker 27:44 - Effective Notekeeping 34:27 - Important Tools 39:51 - Networking Refresher: Introduction 41:06 - IP Addresses 54:18 - MAC Addresses 57:35 - TCP, UDP, & the Three-Way Handshake 1:02:51 - Common Ports & Protocols 1:09:04 - The OSI Model 1:14:39 - Subnetting, Part 1 1:41:42 - Subnetting, Part 2 1:46:01 - Installing VMWare / VirtualBox 1:52:19 - Installing Kali Linux 1:57:55 - Configuring VirtualBox 2:01:17 - Kali Linux Overview 2:04:48 - Sudo Overview 2:10:05 - Navigating the File System 2:28:22 - Users & Privileges 2:45:21 - Common Network Commands 2:53:51 - Viewing, Creating, & Editing Files 3:00:16 - Starting and Stopping Services 3:06:38 - Installing and Updating Tools 3:18:35 - Bash Scripting 3:41:14 - Intro to Python 3:43:37 - Strings 3:51:00 - Math 3:56:45 - Variables & Methods 4:07:05 - Functions 4:16:03 - Boolean Expressions and Relational Operators 4:24:37 - Conditional Statements 4:31:35 - Lists 4:43:48 - Tuples 4:45:59 - Looping 4:50:28 - Advanced Strings 5:03:08 - Dictionaries 5:09:32 - Importing Modules 5:15:30 - Sockets 5:23:11 - Building a Port Scanner 5:41:44 - User Input 5:50:22 - Reading and Writing Files 6:00:18 - Classes and Objects 6:08:10 - Building a Shoe Budget Tool 6:22:32 - The 5 Stages of Ethical Hacking 6:27:52 - Passive Recon Overview 6:35:29 - Identifying Our Target 6:39:06 - Discovering Email Addresses 6:54:59 - Breached Credentials Part 1 7:02:21 - Breached Credentials Part 2 7:14:18 - End Part 1

0:00 - Introduction 0:17 - Hunting Subdomains Part 1 5:54 - Hunting Subdomains Part 2 10:46 - Identifying Website Technologies 17:57 - Gathering Information w/ Burp Suite 26:49 - Google Fu 32:24 - Utilizing Social Media 38:05 - Installing Kioptrix 44:28 - Scanning w/ Nmap 1:04:16 - Enumerating HTTP/HTTPS Part 1 1:19:22 - Enumerating HTTP/HTTPS Part 2 1:34:35 - Enumerating SMB 1:48:59 - Enumerating SSH 1:53:11 - Researching Potential Vulnerabilities 2:08:05 - Our Notes So Far 2:11:15 - Scanning w/ Nessus Part 1 2:21:54 - Scanning w/ Nessus Part 2 2:28:07 - Reverse Shells vs Bind Shells 2:35:12 - Staged vs Non-Staged Payloads 2:38:37 - Gaining Root w/ Metasploit 2:46:21 - Manual Exploitation 2:59:06 - Brute Force Attacks 3:07:00 - Credential Stuffing & Password Spraying 3:21:07 - Our Notes, Revisited 3:24:56 - Downloading Our Materials 3:30:17 - Buffer Overflows Explained 3:34:29 - Spiking 3:44:46 - Fuzzing 3:50:59 - Finding the Offset 3:56:22 - Overwriting the EIP 3:59:51 - Finding Bad Characters 4:07:46 - Finding the Right Module 4:16:16 - Generating Shellcode and Gaining Root 4:22:16 - Python3 and More 4:36:01 - Capstone Introduction 4:41:47 - Setting up Blue 4:45:48 - Blue Walkthrough 5:02:53 - Academy Setup 5:05:22 - Academy Walkthrough 5:49:46 - Dev Walkthrough 6:15:10 - Butler Walkthrough 6:51:33 - Blackpearl Walkthrough 7:15:08 - Conclusion

0:00:00 - Intro 0:03:00 - Keeper Security Sponsorship 0:03:48 - Course Introduction 0:10:02 - Importance of Web App Security 0:16:26 - Web App Security Standards and Best Practices 0:29:57 - Bug Bounty Hunting vs Penetration Testing 0:40:16 - Phases of a Web App Pentest 0:57:36 - CryptoCat Introduction 0:59:19 - Understanding Scope, Ethics, Code of Conduct, etc. 1:13:29 - Common Scoping Mistakes 1:37:59 - Installing VMWare / VirtualBox 1:41:14 - Installing Linux 1:50:20 - Lab Installation 1:57:36 - Web Technologies 2:02:14 - HTTP & DNS 2:05:47 - Fingerprinting Web Technologies 2:18:00 - Directory Enumeration and Brute Forcing 2:38:07 - Subdomain Enumeration 2:55:43 - Burp Suite Overview 3:34:35 - Introduction to Authentication 3:36:11 - Brute-force Attacks 3:43:11 - Attacking MFA 3:48:38 - Authentication Challenge Walkthrough 3:58:38 - Intro to Authorization 3:59:48 - IDOR - Insecure Direct Object Reference 4:06:15 - Introduction to APIs 4:11:04 - Broken Access Control 4:19:33 - Testing with Autorize 4:27:02 - Introduction to LFI/RFI 4:28:39 - Local File Inclusion Attacks 4:32:59 - Remote File Inclusion Attacks 4:40:37 - File Inclusion Challenge Walkthrough 4:45:05 - Conclusion

0:00 - Introduction 04:02 - Installing VMWare / VirtualBox 10:17 - Installing Linux 15:50 - Configuring VirtualBox 19:06 - Installing PMK 21:44 - Active Directory Overview 26:58 - Physical Active Directory Components 32:45 - Logical Active Directory Components 40:12 - AD Lab Overview 43:13 - Cloud Lab Alternative 45:17 - Downloading the Necessary ISOs 48:06 - Setting up the Domain Controller 1:01:45 - Setting Up the User Machines 1:09:38 - Setting Up Users, Groups, and Policies 1:25:23 - Joining Our Machines to the Domain 1:34:11 - Initial AD Attacks Overview 1:38:07 - LLMNR Poisoning Overview 1:45:34 - Capturing NTLMv2 Hashes with Responder 1:50:20 - Password Cracking with Hashcat 2:01:52 - LLMNR Poisoning Defenses 2:04:41 - SMB Relay Attacks Overview 2:10:03 - Quick Lab Update 2:11:02 - Discovering Hosts with SMB Signing Disabled 2:14:40 - SMB Relay Attacks Part 1 2:19:34 - SMB Relay Attacks Part 2 2:23:40 - SMB Relay Attack Defenses 2:26:15 - Gaining Shell Access 2:34:02 - IPv6 Attacks Overview 2:38:03 - Installing mitm6 2:39:20 - Setting up LDAPS 2:41:43 - IPv6 DNS Attacks 2:49:27 - IPv6 Attack Defenses 2:52:27 - Passback Attacks 2:57:43 - Other Attack Vectors and Strategies 3:06:27 - Post Compromise Enumeration Intro 3:08:29 - PowerView Overview 3:10:41 - Domain Enumeration with PowerView 3:26:00 - Bloodhound Overview 3:29:33 - Grabbing Data with Invoke Bloodhound 3:32:43 - Using Bloodhound to Review Domain Data 3:40:19 - Post-Compromise Attacks Intro 3:41:21 - Pass the Hash and Password Overview 3:44:25 - Installing crackmapexec 3:45:04 - Pass the Password Attacks 3:52:11 - Dumping Hashes with secretsdump 3:55:22 - Cracking NTLM Hashes with Hashcat 3:58:29 - Pass the Hash Attacks 4:04:54 - Pass Attack Mitigations 4:07:36 - Token Impersonation Overview 4:11:25 - Token Impersonation with Incognito 4:18:28 - Token Impersonation Mitigation 4:21:11 - Kerberoasting Overview 4:26:22 - Kerberoasting Walkthrough 4:30:14 - Kerberoasting Defenses 4:31:23 - GPP Password Attacks Overview 4:34:48 - Abusing GPP Part 1 4:43:34 - Abusing GPP Part 2 4:47:45 - URL File Attacks 4:53:22 - Mimikatz Overview 4:58:57 - Credential Dumping with Mimikatz 5:08:19 - Golden Ticket Attacks 5:15:36 - Conclusion

0:00 - Overview 2:25 - Course Introduction 11:52 - Gaining a Foothold 23:15 - Initial Enumeration 49:50 - Exploring Automated Tools 1:12:28 - Kernel Exploits 1:30:32 - Passwords and Port Forwarding 1:59:28 - Windows Subsystem for Linux 2:25:26 - Impersonation Attacks 2:52:29 - getsystem 2:56:28 - RunAs 3:10:53 - Conclusion

0:00 - Overview 1:46 - Course Introduction 9:54 - Course Tips & Resources 15:50 - Gaining a Foothold: Intro and Shell Access 23:13 - System Enumeration 29:28 - User Enumeration 34:27 - Network Enumeration 38:43 - Password Enumeration 44:41 - Automated Tools Intro 49:28 - Exploring Automated Tools 1:01:16 - Kernel Exploits Overview 1:04:45 - Escalation via Kernel Exploits 1:10:55 - Passwords and File Permissions Overview 1:11:37 - Escalation via Stored Passwords 1:20:14 - Escalation via Weak File Permissions 1:30:58 - Escalation via SSH Keys 1:36:45 - Sudo Overview 1:38:07 - Escalation via Sudo Shell Escaping 1:44:54 - Escalation via Intended Functionality 1:49:41 - Escalation via LD_PRELOAD 1:56:50 - Challenge Overview 1:58:16 - Challenge Walkthrough 2:11:07 - CVE-2019-14287 Overview 2:14:30 - Escalation via CVE-2019-14287 2:17:12 - Overview and Escalation via CVE-2019-18634 2:24:02 - SUID Overview 2:32:31 - Gaining a Foothold 2:45:41 - Escalation via SUID 2:52:23 - Conclusion

This lesson introduces IT security. I cover: What unauthorized access and data breaches are What information system security is What the tenets of information security are What the seven domains of an IT infrastructure is What the weakest link in an IT infrastructure is How an IT security policy framework can reduce How a data classification standard affects an IT infrastructure's security needs.

This video covers the Internet of Things and Security: How the Internet of Things (IoT) had evolved How the Internet transformed personal and business communications in a TCP/IP world What the effects of IoT will be on people, business and the way we live How businesses evolved from bricks and mortar to e-commerce to IoT Why today's businesses need an Internet and IoT marketing strategy How IP mobility is helping to drive an IoT world What are the key issues created by the IoT

This lessons covers - Identify malicious software and implement countermeasures Identify common attacks and develop appropriate countermeasures Recognize social engineering and reduce the risks associated with it Recognize threats and types of attacks on wireless networks Recognize threats and types of attacks on web applications

What risk management is How BIA, BCP, and DRP differ one another and how they are the same How to describe the impact of risks, threat, and vulnerabilities on an organization How to close the information security gap How to mitigate risk and achieve compliance with laws, regulations, and requirements How to keep private data confidential How to mitigate the risk of mobile workers and use of personal devices

This video covers the following: What the 4 parts of access control are What the 2 types of access control are How to define an authorization policy What identification methods and guidelines are What authentication processes and requirements are What formal models of access control are What threats there are to access controls What some effects of access control violations are What centralized and decentralized access controls are

This lesson covers: What security administration is What compliance is What professional ethics are What the infrastructure for an IT security policy is What data classification standards are What configuration management is What the change management process is What the system life cycle (SLC) and System development life cycle (SDLC) are How software development relates to security

What security auditing and analysis are How to define your audit plan What auditing benchmarks are How to collect audit data Which post-audit activities you need to perform How to perform security monitoring Which typed of log information you should capture How to verify security controls How to monitor and test your security systems

This video covers the following: How risk management relates to data security What the process of risk management is What a risk assessment is What the differences are between the quantitative and qualitative approaches to risk assessment How to develop a strategy for managing risk What countermeasures are and what factors you must consider when evaluating them What the 3 types of activity controls and how they correspond to the security life cycle What a business continuity plan (BCP) is and how organizations use it to make sure a disruption doesn't put them out of business What role backups play in disaster recovery What steps you should take to respond to security incidents What a disaster recovery plan (DRP) does What the primary steps to disaster recovery are

This lesson covers: What the Open Systems Interconnection (OSI) Reference Model is What the main types of networks are What TCP/IP is and how it works What network security risks are What basic network security defense tools are How wireless networks work and what threats they pose to network security

0:00 - Introduction 1:23 - Downloading Our Materials 7:43 - Buffer Overflows Explained 11:56 - Spiking 22:12 - Fuzzing 28:26 - Finding the Offset 33:50 - Overwriting the EIP 37:19 - Finding Bad Characters 45:15 - Finding the Right Module 53:46 - Generating Shellcode & Gaining Root 59:46 - Python 3 & More 1:13:30 - TryHackMe Brainstorm Walkthrough

0:00 - Introduction/whoami 5:13 - Important Disclaimer 7:37 - OSINT Overview 12:06 - Taking Effective Notes 20:09 - Introduction to Sock Puppets 22:52 - Creating Sock Puppets 37:19 - Search Engine Operators 1:00:39 - Reverse Image Searching 1:07:58 - Viewing EXIF Data 1:14:27 - Physical Location OSINT 1:23:43 - Identifying Geographical Locations 1:34:16 - Where in the World, Part 1 1:35:34 - Where in the World, Part 2 1:46:58 - Creepy OSINT 1:47:49 - Discovering Email Addresses 2:03:42 - Password OSINT - Introduction 2:07:25 - Hunting Breached Passwords Part 1 2:19:25 - Hunting Breached Passwords Part 2 2:29:23 - Hunting Usernames & Accounts 2:38:07 - Searching for People 2:47:54 - Voter Records 2:51:46 - Hunting Phone Numbers 3:03:04 - Discovering Birthdates 3:06:42 - Searching for Resumes 3:11:51 - Twitter OSINT Part 1 3:26:46 - Twitter OSINT Part 2 3:41:57 - Twitter OSINT Part 3 3:47:22 - Facebook OSINT 4:00:33 - Instagram OSINT 4:09:07 - Snapchat OSINT 4:11:37 - Reddit OSINT 4:17:32 - LinkedIn OSINT 4:25:41 - TikTok OSINT 4:29:05 - Conclusion

0:00 - Introduction 1:15 - NordPass Sponsorship 2:10 - Course Overview 3:46 - The OWASP Top 10 14:11 - Installing OWASP Juice Shop 21:00 - Installing Foxy Proxy 23:14 - Exploring Burp Suite 34:42 - Introducing the Score Board 37:33 - SQL Injection Overview 42:45 - SQL Injection Walkthrough 52:52 - SQL Injection Defenses 55:41 - Broken Authentication Attacks and Defenses 1:01:25 - Testing for Broken Authentication 1:09:05 - Sensitive Data Exposure Attacks and Defenses 1:13:58 - Testing for Sensitive Data Exposure 1:22:00 - XML External Entities (XXE) Overview 1:31:54 - XXE Attacks and Defenses 1:39:58 - Broken Access Control Overview 1:43:27 - Broken Access Control Walkthrough 1:47:55 - Security Misconfigurations Overview 1:52:54 - Cross-Site Scripting (XSS) Overview 2:03:27 - Reflected XSS Walkthrough 2:09:50 - Stored XSS Walkthrough 2:16:07 - Preventing XSS 2:19:55 - Insecure Deserialization 2:24:28 - Using Components with Known Vulnerabilities 2:29:06 - Insufficient Logging and Monitoring 2:32:17 - Conclusion

0:00 - Introduction 0:52 - Episode 1 - Enumeration 1:26:51 - Episode 2 - Enumeration, XSS, and UI Bypassing 2:26:03 - Episode 3 - XSS, SQL Injection, and Broken Access Control 3:19:52 - Episode 4 - XXE, Input Validation, Broken Access Control, and More XSS 4:20:03 - Episode 5 - SQL Injections and Live Bug Bounty Hunting

This video covers discussion on Information Assurance and Security course overview.

In this lecture, I provide a course overview of our free 2.5-hour Information Security Management Fundamentals Course. Course Description: Are you looking to learn the basics of information security management? Are you a business or aspiring IT professional that needs to better understand how cybersecurity works? If so, this is the perfect course for you! In this 10.5-hour course, I'll show you step-by-step, the fundamentals of information security management, teaching you essential cybersecurity core principles you need to know. If you’re looking to advance or begin your career in Information Technology (IT), this course is a must!

TABLE OF CONTENTS 00:00:00 - Introduction 00:00:17 - Passwords 00:35:08 - Two-Factor Authentication 00:45:21 - Credential Stuffing 00:47:31 - Social Enginering 00:50:02 - Phishing 00:55:21 - Machine-in-the-Middle Attacks 00:58:38 - Single Sign-On 01:01:50 - Password Managers 01:11:56 - Passkeys

TABLE OF CONTENTS 00:00:00 - Introduction 00:00:17 - Securing Data 00:02:21 - Hashing 00:39:52 - Secret-Key Cryptography 01:03:21 - Public-Key Cryptography 01:16:14 - Digital Signatures 01:27:57 - Passkeys 01:34:47 - Encryption in Transit 01:40:10 - Deletion 01:46:28 - Encryption at Rest 01:50:59 - Ransomware 01:52:24 - Quantum Computing

TABLE OF CONTENTS 00:00:00 - Introduction 00:00:17 - Wi-Fi 00:02:50 - HTTP 00:08:50 - Packet Sniffing 00:13:45 - Cookies 00:18:32 - HTTPS 00:37:56 - VPNs 00:41:11 - SSH 00:43:48 - Ports 00:51:33 - IP Addresses 00:53:33 - Deep Packet Inspection 00:54:50 - Proxy 01:03:49 - Malware 01:12:43 - Antivirus 01:15:19 - Zero-Day Attacks

TABLE OF CONTENTS 00:00:00 - Introduction 00:00:17 - Phishing 00:11:48 - Code Injection 00:26:54 - Stored Attacks 00:39:26 - SQL Injection 00:54:49 - Prepared Statements 00:59:57 - Command Injection 01:07:51 - Client-Side Validation 01:10:31 - Server-Side Validation 01:12:44 - Cross-Site Request Forgery 01:28:39 - Open Worldwide Application Security Project 01:29:11 - Arbitrary Code Execution 01:40:28 - Reverse Engineering 01:42:03 - Open-Source and Closed-Source Software 01:45:15 - App Stores 01:50:40 - Package Managers 01:51:25 - Operating Systems 01:53:03 - Vulnerability Catalogs

TABLE OF CONTENTS 00:00:00 - Introduction 00:00:17 - Preserving Privacy 00:01:15 - Web Browsing History 00:03:54 - Logs 00:06:36 - HTTP headers 00:16:47 - Fingerprinting 00:26:35 - Session Cookies 00:31:00 - Tracking Cookies 00:33:54 - Tracking Parameters 00:39:22 - Third-Party Cookies 00:49:10 - Private Browsing 00:51:40 - Supercookies 00:58:01 - DNS 01:03:21 - DNS over HTTPS 01:04:21 - DNS over TLS 01:06:59 - Virtual Private Network (VPN) 01:10:14 - Tor 01:14:09 - Permissions 01:15:43 - Location-Based Services