Ghostcat-PWN: When Old Tomcat Opens the Door of an Org (CVE-2020-1938 Full Exploit Walkthrough)

MCP Security Nightmare: Remote Code Execution via MCP

KubePwn (Part-11) - Data Exfiltration and Persistence (complete cluster access)

KubePwn (Part-10) - Privilege Escalation (container breakout) to Full cluster compromise

KubePwn (Part-9) - Enumerating Linux Capabilities & Identifying Escape Vectors in K8s cluster

KubePwn (Part-8 contd..) - Digging into Privilege Misconfigurations & Escape Vectors in K8s cluster

KubePwn (Part-8 contd..) - Digging into Privilege Misconfigurations & Escape Vectors in K8s cluster

KubePwn (Part-8) - Digging into Privilege Misconfigurations & Escape Vectors in K8s cluster

KubePwn (Part-7) - Infiltrating into K8 cluster using Remote Code Execution (RCE)

KubePwn (Part-6) - Infiltrating into K8 cluster using Server Side Template Injection

KubePwn (Part-5) - Infiltrating into K8 cluster using Malicious FIle Upload

KubePwn (Part-4) - Infiltrating into K8 cluster using SSRF (Server-Side Request Forgery)

KubePwn (Part-3) - Infiltrating into Kubernetes Cluster: Vulnerable App enumeration and exploitation

KubePwn (Part-2) - Kubernetes Red and Blue Team Lab Setup Like a Pro with a single click!!

KubePwn - An Ultimate APT-Style Red and Blue Team Lab - Introduction & Lab Setup - from Zero to Hero

Malware analysis on Microsoft office documents - Threat Hunting like a pro | DFIR

Automated Kubernetes Forensics: A Practical Threat Hunting Lab for Real-World Investigations

Kubernetes Forensics: A Practical Threat Hunting Lab for Real-World Investigations

Prompt Injection Exploit on GitHub AI Agents – Live Technical Demonstration

CTI Masterclass Part-II | Automating CTI & hunting APT groups | Automating CTI Lab with Docker

Complete Cyber Threat Intelligence (CTI) Masterclass | Learn and Hunt APT36 espionage group

🧠 Memory Forensics | Hands-on Ransomware Infected machine | Real-World Memory Analysis like a Pro

Docker forensics - in-depth threat analysis for threat hunters

pe32ransomware - an amateur but interesting ransomware that connects over telegram bot | DFIR

Emotet - The Malware Kingpin Exposed | Complete DFIR and malware analysis

Designing a Bullet Proof Incident Response (IR) Playbook - Stop Incidents from Becoming Disasters

Medusa ransomware unlocked - complete in depth ransomware analysis and digital forensics

Agent Tesla - CVE-2017-0199 - malware analysis

DarkGate malware - Digital Forensics and Incident Response

EDR bypass - throwback using direct syscalls with AES encryption

Sock puppets - OSINT and Investigation

OSINT & Investigations - Lab Setup like a real investigator

Living off the Land attack via TPMtool

Dirtypipe - Linux Privilege Escalation CVE2022-0847

log4j Remote Code Execution demo - CVE2021-44228

Meterpreter Reverse Shell Complete EDR Bypass

Certificate Signing - Signing malwares with digital certificates to bypass AVs at runtime

MP4 malwares - Compromise remote machine using video files

ADCS NTLM Relay - Compromise the DC

Hive-Nightmare - Windows 10 CVE-2021-36934

Print Nightmare LPE Windows11 AV Bypassed (Fully undetectable) - FUD

Windows Simple Backdoor - Bypassed latest Anti-Virus

Reverse Engineering - ReverseME

S3 bucket -- Compromise and Data Leakage (leaking data through security holes)

AWS Identity Access Management (IAM) - Local Privilege Escalation (LPE)

Compromising the remote user's system through jpeg icons creating shortcut links

Malware deployment (Reverse Connection) through Excel (office tools) -- Macro based FUD excel

md5-collisions

Phishing or malware execution through PDF

Phishing or malware execution through Office Tools - Red Team awareness

Code Caving - How to create or hide a backdoor behind the actual softwares