Red Team Projects • Project 03 - Active Recon with NMAP • Project 07 - Web Application Attacks: XSS, SQL Injections, Directory Traversals, and File Inclusion • Project 09 - Exploiting Alternate Data Streams • Project 12 - Exploiting Vulnerabilities w/ Metasploit (Ethical Hacking!!!) • Project 17 - Hacking An Enterprise Network • Project 19 - Brute forcing into a router with Hydra • Project 20 - Hash Cracking w/ John The Ripper and Hashcat! • Project 23 - Executing Local File Inclusion and Remote Code Execution with Burp Suite! • Project 24 - Error Based and Union Select SQL Injections! • Project 29 - Enumeration with NMAP's Scripting Engine! • Project 37 - Understanding the Security Risks of Misconfigured Sudo in Linux • Project 38 - Understanding Path Interception and Its Risks in Code Execution • Project 48 - Configuring and Bypassing Modsecurity Web Application Firewall • Project 49 - Exploiting Broken Access Controls In A Web Application (CSRF, CORS, & JWT) • Project 50 - Padding Oracle and Server-Side Template Injection Attacks • Project 51 - Exploiting Legacy Versions of Protocols • Project 53 - Burpsuite Traffic Interception 101 • Project 54 - Conducting a Man-in-the-Middle Attack w/ Burpsuite • Project 56 - Exploiting Server Side Web Vulnerabilities w/ Gobuster! • Project 57 - Using XSS to Hijack a Browsing Session! • Project 58 - Brute Forcing FTP Protocol and Exfiltrating Sensitive Information • Project 59 - Banner Grabbing w/ Nmap • Project 64 - Exploiting Client Side Vulnerabilities: Embedded Excel Macro • Project 72 - Enumerating HTTP Protocol and Exploiting Vulnerabilities in an Apache Web Server • Project 73 - Compromising a MySQL Database Server • Project 74 - Brute Forcing the SSH Protocol (Capture The Flag edition) • Project 75 - Exploiting Version Specific Protocol Vulnerabilities: SMTP • Project 76 - Exploiting WebDAV pt1: Using DavTest (Capture The Flag Edition) • Project 77 - Exploiting WebDAV pt2: Using MSFvenom (Capture The Flag Edition) • Project 78 - Using Shellshock (CVE-2014-6271) To Gain Access To An Apache Web Server! • Project 79 - Web Application Vulnerability Scanning w/ WMAP • Project 80 - Exploiting the SMB Protocol w/ PsExec (Capture The Flag Edition) • Project 81 - Using Brute Forced Credentials To Log Into A Remote Server Using FreeRDP (CFT!) • Project 82 - Exploiting The WinRM Protocol w/ CrackMapExec • Project 83 - Privilege Escalation by Bypassing UAC • Project 84 - Privilege Escalation by Impersonating Access Tokens (Capture The Flag edition) • Project 85 - Exploiting the Unattended Windows Setup Utility pt. 1 (Capture The Flag Edition) • Project 86 - Exploiting the Unattended Windows Setup Utility pt. 2: (Capture The Flag Edition) • Project 87 - Exploiting CVE-2007-6377 (Badblue 2.7) and credential hash dumping w/ Mimikatz! • Project 88 - Conducting A Pass the Hash Attack To Gain Entry Into A Web Server • Project 89 - Using Hydra To Brute Force FTP (Capture the Flag Edition) • Project 90 - Using Hydra To Brute Force SSH • Project 91 - Enumerating The Details Of A Weak Password Policy w/ Enum4linux (CTF Edition) • Project 92 - Elevating User Privileges Through Misconfigured Cron Jobs (Capture The Flag Edition) • Project 93 - Linux privilege escalation - Exploiting SUID Binaries (Capture The Flag Edition) • Project 94 - Discovering A Version Specific Exploit Tool w/ Searchsploit & Cracking Password Hashes! • Project 95 - Exploiting The NetBIOS Protocol To Access Sensitive Information On Two Target Machines! • Project 96 - Enumerating SNMP To Compromise Other Protocols • Project 97 - Conducting A SMB Relay Attack • Project 99 - Encoding Payloads with MSF Venom for Enhanced Evasion • Project 100 - Spoofing An Email Client To Send Fraudulent Mail • Project 101 - Automating Metasploit Commands with Resource Scripts • Project 102 - What Is A Rejetto HTTP File Server and Why Is It A Popular Attack Vector? • Project 103 - Exploiting A Vulnerable Apache Tomcat Web Server (Capture The Flag Edition) • Project 104 - Exploiting A VSFTPD FTP Sever Vulnerability • Project 105 - Exploiting The Sambacry Vulnerability (CVE-2017-7494) • Project 106 - Exploiting The libssh Library On A SSH Server (CVE-2018-10933) • Project 107 - What Exactly Is Meterpreter and How Can It Best Be Used For Post Exploitation Activities? 🔍 • Project 108 - Taking Screenshots of A Victim's Desktop and Other Post Exploitation Shenanigans! • Project 109 - Bypassing User Account Control with Memory Injection Techniques • Project 110 - Post Exploitation: Establishing Persistence on Windows Systems • Project 111 - Enabling RDP Post Exploitation (Capture The Flag Edition) • Project 112 - Fun With Keylogging • Project 113 - Covering Our Tracks: Clearing Windows Event Logs • Project 114 - Using Autoroute & Port Forwarding To Pivot • Project 115 - Post Exploitation Enumeration Techniques Against Linux Based Targets 🔍 • Project 116 - Exploiting CVE-2014-0476: Escalating Privileges w/ Chkrootkit Post Exploitation (CTF) • Project 117 - No Hashdump? No Worries: Alternative Means To Dumping Linux Password Hashes • Project 118 - Establishing Persistence on a Compromised Linux Host (Capture The Flag Edition) • Project 119 - Port Scanning & Enumeration w/ Armitage • Project 120 - Exploiting, Dumping, & Pivoting...OH MY! Post Exploitation Fun w/ Armitage • Project 121 - Alternative Banner Grabbing Techniques) • Project 122 - Vulnerability Scanning w/ NMAP Scripts • Project 123 - Configuring and Running Exploits Manually w/o The Metasploit Framework • Project 124 - Exploring Netcat: The Swiss Army Knife of Networking Tools • Project 125 - NetCat: Gaining Remote Access To A Target System Using A Bind Shell • Project 126 - NetCat: Gaining Remote Access To A Target System Using A Reverse Shell • Project 127 - Exploiting CVE-2013-10035: Vulnerable Version Of ProcessMaker (CTF Edition) • Project 128 - Exploiting CVE-2017-0144: EternalBlue • Project 129 - Defacing A Website via Microsoft IIS FTP Compromise • Project 130 - OpenSSH: 0 - Weak Password Policy: UNDEFEATED! Circumventing secure protocols! • Project 131 - Multifaceted Approaches To Compromising SMB (Manual vs Automated) • Project 132 - Gaining Access To A WordPress Admin Panel By Compromising Several Protocols • Project 133 - The Power of Banner Grabbing: Finding An Attacker's Point of Entry/Persistence • Project 134 - Exploiting CVE-2011-2523 and WebDAV To Gain Access To Linux System • Project 135 - Exploiting CVE-2012-1823 (CGI Argument Injection) To Gain Access To Target Host • Project 136 - Targeting CVE-2007-2447 To Exploit Linux Host 🎯 • Project 137 - Post Exploitation: Manually Enumerating System Details of A Windows Host (CTF) • Project 138 - Post Exploitation: Manually Enumerating User & Group Details of A Windows Host • Project 139 - Post Exploitation: Manually Enumerating Network Information of A Windows Host • Project 140 - Post Exploitation: Manually Enumerating Processes & Services of A Windows Host • Project 141 - Automating Enumeration of Exploited Windows Hosts with JAWS • Project 142- Post Exploitation: Manually Enumerating System Details of A Linux Host • Project 143 - Post Exploitation: Manually Enumerating User & Group Details of A Linux Host • Project 144 - Post Exploitation: Manually Enumerating Network Information of A Linux Host • Project 145 - Post Exploitation: Manually Enumerating Processes & Cron Jobs of A Linux Host • Project 146 - Automating Enumeration of Exploited Linux Hosts with LinEnum • Project 147 - Manually Exploiting CVE-2014-6287 (Capture The Flag Edition) • Project 148 - Upgrading Non-Interactive Shells on Compromised Linux Hosts • Project 149 - Enumerating Windows Configuration Vulnerabilities w/ PrivescCheck • Project 150 - PrivescCheck: Using Found Cleartext Credentials To Escalate Privileges (CTF Edition) • Project 151 - Exploiting Misconfigured Permissions & Passwords To Escalate Privileges (CTF Edition) • Project 152 - Gaining Root Access By Exploiting Sudo (Capture The Flag Edition) • Project 153 - Hiding A Backdoor User Account & Using RDP To Maintain Persistence • Project 154 - Exfiltrating SSH Private Keys To Maintain Persistent Access On Linux Hosts (CTF) • Project 155 - Maintaining Persistence on a Compromised Linux Host with Cron Jobs (Capture The Flag) • Project 156 - Dumping & Cracking Windows Password Hashes • Project 157 - Post Enumeration: Clearing Your Tracks On Windows • Project 158 - Post Enumeration: Clearing Your Tracks On Linux • Project 159 - Gone Phishing w/ Gophish • Project 160 - Using Curl and Burpsuite To Enumerate Allowed HTTP Methods • Project 161 - Exploring Site Mapping Techniques: Passive Crawling vs Active Spidering 🕷️ • Project 165 - Enumerating Web Application Details And Vulnerabilities w/ Nikto • Project 166 - Custom File & Directory Brute-Forcing w/ Gobuster • Project 167 - Enumerating WordPress Vulnerabilities /w WPScan • Project 168 - Capture The Flag Edition: Finding and Exploiting A Vulnerable WordPress Plug-in • Project 170 - Using ADFind for Active Directory Enumeration • Project 179 - Sabotaging Windows Systems and Causing Service Disruptions • Project 180 - Post-Exploitation: Creating and Mitigating Persistence Mechanism • Project 182 - Detecting Reconnaissance & Unauthorized Access Attempts w/ Wazuh • Project 184 - PowerShell Threat Detection and Response w/ Wazuh • Project 185 - Analyzing LockerGoga Ransomware Sample • Project 191 - Spear Phishing Campaign: Spoofing A Messaging App • Project 192 - Using Hashcat to Crack session token (Capture The Flag edition) • Project 207 - Prompt Injecting Lakera Gandalf • Project 208 - Prompt Injection: Testing and Bypassing An AI Chatbot’s Guardrails • Project 209 - Prompt Injection: Accessing The System Prompt & Sensitive Data From An AI Chatbot • Project 210 - Document Based Prompt Injection • Project 211 - Poisoning An AI’s RAG Pipeline • Project 212 - Testing The Effectiveness Of A Chatbot’s Guardrails and Filters • Project 216 – Exploiting An Agent Chain To Exfiltrate System Prompt and Chatbot User Prompt History