security

How to perform DNS Cache Poisoning (Spoofing)

DNS Cache Poisoning is an attack that's also known as DNS Spoofing. It's a type of cyber attack where hackers exploit vulnerabilities in the Domain Name

Deepak Prasad7 min read
security

How to perform Denial of Service (DoS) Attack

Imagine being at a cafe with a friend, trying to have a conversation when all of a sudden, a group of people come in and start shouting. You can’t even hear

Deepak Prasad7 min read
security

Exploit Vulnerabilities using Metasploit

Metasploit is a mighty and elastic framework that you can use in the development, examination, and implementation of exploits. In 2003 H.D. Moore created it,

Deepak Prasad7 min read
security

6 Tools to Perform Credential Attack [100% Working]

Credential attacks are a type of cybersecurity threat that focuses on one thing: gaining unauthorized access to systems or networks. Attackers do this by

Deepak Prasad15 min read
security

Vulnerability Scanning Tools with Examples

Vulnerability scanning is the process of inspecting an information system for known security weaknesses. This process provides results with no

Deepak Prasad14 min read
security

Network Reconnaissance using Nmap [Cheat Cheet]

Network reconnaissance is a critical part of any network pentesting operation. Knowing more information about the target’s network will let us know about the

Deepak Prasad13 min read
security

Top Open-source intelligence (OSINT) Tools

OSINT aka Open source Intelligence is the data and information that is retrieved from all kinds of sources like Social media , Search engines , Domains , DNS Names , emails , journals , newspapers and what not.

Deepak Prasad13 min read
security

How to Hack Social Media Accounts - ZPhisher [5 Simple Steps]

Step by step instructions to hack social media accounts using automated phishing tool i.e. zphisher with practical example.

Kennedy Muthii5 min read
security

How to Install GoBuster with Basic Usage on Ubuntu

This tutorial will guide you through steps to install Gobuster on Ubuntu, configuring it, and basic to advanced usage tips, including working with wordlists and uninstalling if needed.

Deepak Prasad8 min read
security

WPScan: WordPress Vulnerability Scanner Guide

WPScan is a WordPress vulnerability scanner, a penetration testing tool used to scan for vulnerabilities on WordPress-powered websites.

Deepak Prasad6 min read
security

Create forensic image with FTK Imager [Step-by-Step]

Step by step instructions to obtain forensic image and volatile memory image from PC using FTK Imager with screenshots

Kennedy Muthii6 min read
security

Social Engineering Attacks [8 Common Attacks]

Different types of social engineering attacks and how they are performed explained in detail

Kennedy Muthii7 min read
security

Install Tor Browser on Rocky Linux

Step by step instructions to install and configure tor browser in Rocky Linux. 2 different ways to install tor browser in Linux with screenshots

Deepak Prasad6 min read
security

6 easy steps to setup offline two factor authentication in Linux

Configure Google Authenticator with Offline two factor authentication to secure ssh, sudo and su using PAM module pam_google_authenticator.so in RHEL/CentOS 7/8

Deepak Prasad10 min read
security

Automate phishing campaigns using FiercePhish [Step-by-Step]

With the help of a robust open-source tool FiercePhish, you can manage a wide range of phishing operations as well as carry out several phishing engagements

Kennedy Muthii6 min read
security

Install & Configure OpenVPN Server Easy-RSA 3 (RHEL/CentOS 7) in Linux

Install and configure openvpn server and openvpn client with easy-rsa 3 in centos or rhel 7 linux. Create CA, CSR certificates for openvpn server client model.

Deepak Prasad14 min read
security

Setup Hacking Lab with Metasploitable [7 Easy Steps]

We will setup hacking lab which will consist of an attack orchestrating Operating System which in our case we will use the Kali Linux operating system and a vulnerable operating system which in our case is the …

Kennedy Muthii5 min read
security

How to Inject Encoded Payload

One major problem that most Ethical hackers and penetration testers face is bypassing Anti-Virus software when executing payloads. If you are running an

Deepak Prasad8 min read
security

Tutorial: Encrypt, Decrypt, Sign a file with GPG Public Key in Linux

How to and Tutorial on encrypting decrypting signing message file with GPG key pair passphrase of private public key in Linux with example on command line

Deepak Prasad12 min read
security

Simple steps to install & configure ClamAV in CentOS 7

Step by step guide to install and configure ClamAV on CentOS / RHEl 7 Linux. ClamAV is an open source antivirus tool to protect against trojan, viruses etc

Deepak Prasad9 min read
security

Automate SSH Brute Force Attack

SSH brute force attacks are a type of cyber attack that is becoming increasingly common. They involve the use of automated software to try and gain access to

Kennedy Muthii5 min read
security

Beginners guide to use ssh config file with examples

beginners guide to learn and use ssh config file with example to define different SSH client arguments, There are different configuration files which can be used to define..

Deepak Prasad7 min read
security

How to PROPERLY Open Port in RHEL/CentOS Linux

Examples to open port in linux RHEL/CentOS 7/8 Use netstat to check port status. centos open firewall port. how to open and close ports. check if port is open

Deepak Prasad13 min read
security

Nettacker - Automated Pentesting Framework [Tutorial]

Nettacker is an open-source penetration testing tool that automates various network attacks and is part of the OWASP (Open Web Application Security Project)

Kennedy Muthii6 min read
security

Reverse Shell Cheat Sheet With Examples [100% Working]

This post will give you a detailed guide on how to create Reverse Shells with Netcat. Let’s dive in.

Deepak Prasad9 min read
security

Setup Virtual Penetration Testing Lab [Step-by-Step]

A virtual penetration testing lab creates a safe and convenient environment for ethical hackers to sharpen their skills and test the various security tools available in the cybersecurity field. However, it provides much …

Deepak Prasad9 min read
security

How to crack hash using hashview

Step by Step instructions to crack hash using hashview in Linux.

Kennedy Muthii7 min read
security

6 Banner Grabbing Tools with Examples [100% Working]

The 6 different tools which we can use for Banner grabbing are Dmitry, Netcat, Nikto, Wget, cURL and nmap

Kennedy Muthii5 min read
security

5 DNS Enumeration Tools with Best Practices & Examples

5 different tools which can be used to perform DNS enumeration from WIndows or Linux. Examples and Best practices.

Deepak Prasad6 min read
security

4 different MITM Attacks with Xerosploit [Step-by-Step]

Hello learners, we have learnt of how man in the middle attacks can be performed previously. In this article we will use xerosploit to perform attacks.

Kennedy Muthii6 min read