Learn about the story of DevSecOps, Software Development Models & Shifting Left. Room Link : https://tryhackme.com/room/sdlc Introduction : This room focuses on the Software Development Lifecycle (SDLC) framework, its phases, and components. Learning objectives : In this room, you will learn the following: Understand the SDLC framework, what it is, and why it’s important Learn…

This is a writeup/walkthrough of Hack the Box machine “Socket” by Md Amiruddin Machine Link :https://app.hackthebox.com/machines/Socket Machine IP : 10.10.11.206

Leak password hashes from a user by sending them an email by abusing CVE-2023–23397. Room Link : https://tryhackme.com/room/outlookntlmleak Task 1 : Introduction On Tuesday, March 14th, Microsoft released 83 security fixes on Patch Tuesday, including CVE-2023–23397. This critical vulnerability impacts all versions of the Outlook desktop app on any Windows system. Outlook web…

This room will discuss the various resources MITRE has made available for the cybersecurity community. Room Link : https://tryhackme.com/room/mitre Task 1 : Introduction to MITRE For those that are new to the cybersecurity field, you probably never heard of MITRE. Those of us that have been around might only associate MITRE with CVEs (Common Vulnerabilities and…

Learn the steps and procedures of a red team engagement, including planning, frameworks, and documentation. Task 1 : Introduction The key to a successful engagement is well-coordinated planning and communication through all parties involved. …

Learn about the basics of a red engagement, the main components and stakeholders involved, and how red teaming differs from other cyber security engagements. Task 1 : Introduction Cybersecurity is a constant race between white hat hackers and black hat hackers. As threats in the cyber-world evolve, so does the need for more specialized…

Learn about web applications and explore some of their common security issues. Task 1 : Introduction Every one of us uses different programs on our computers. Generally speaking, programs run on our computers, using our computer’s processing power and storage. Moreover, to use a program, we need to install it first. …

Learn about the four core features of the Diamond Model of Intrusion Analysis: adversary, infrastructure, capability, and victim. Room Link: https://tryhackme.com/room/diamondmodelrmuwwg42 Task 1 : Introduction What is The Diamond Model? The Diamond Model of Intrusion Analysis was developed by cybersecurity professionals — Sergio Caltagirone, Andrew Pendergast, and Christopher Betz in 2013. As described by…

Learn about and exploit each of the OWASP Top 10 vulnerabilities; the 10 most critical web security risks. Room Link : https://tryhackme.com/room/owasptop102021 Task 1 Introduction