One Stop Hacking Marathon Oscp-Defensive-Cloud-Bug Bounty free download.

One Stop Hacking Marathon Oscp-Defensive-Cloud-Bug Bounty free download

Academy Udemy

Category:
Security

Views: 524
Likes: 6

Catalogue

Uploader:

oblivion

Upload Date:

2/28/2024 3:00:00 AM

To download click on link in the Links Table below

Description: Click to see full description

Published 2/2024
MP4 | Video: h264, 1280x720 | Audio: AAC, 44.1 KHz
Language: English | Size: 27.33 GB | Duration: 49h 24m
Become a Cybersecurity Pro:- OSCP, Active Directory Mastery, Cloud Security, Defensive, Mobile and Bug Bounty Expertise

What you'll learn
OSCP Prep Methodology
Bug Bounty Advance and Live Bug Bounty Sessions
Passive Information Gathering
Host And Nmap
SMB Enumeration
SMTP Enumeration
SNMP Enumeration
Web Application Assessment Tools
Web Attacks
Shells
Locating Public Exploits
Cracking SSH , RDP and WEB

Windows Privilege Escalation
Situational Awareness
Hidden In Plain View
Goldmine AKA Powershell
Automated Enumeration
Leveraging Windows Services
DLL Hijacking
Scheduled Tasks
SeImpersonate Privilege
SeBackup Privilege
UAC Attack
Always Elevated
GPO Edit
Tools For Windows Privilege Escalation
Enumerating Linux
Automated Enumeration

Abusing Binaries And Sudo
Exploiting Kernel Vulnerabilities
Exploiting Cron Jobs
Port Redirection And Tunneling
Ligolo NG
Chisel
SSH Tunneling
HTTP Tunneling
Active Directory Manual Enumeration
Active Directory Automatic Enumeration
LDAP Search
Active Directory Hacking
Cached AD Credentials

AS-REP Roasting
Lateral Movement
Impacket Tools
Others Tools For Active Directory
File Transfer Linux-Linux
File Transfer Linux -Windows
Bug Bounty Automation
ReconFTW
NucleiFuzzer
Magic Recon
Subzy
SocialHunter
Authentication bypass via OAuth implicit flow
SSRF via OpenID dynamic client registration

OAuth account hijacking via redirect_uri
Stealing OAuth access tokens via an open redirect
Stealing OAuth access tokens via a proxy page
Remote code execution via web shell upload
Web shell upload via Content-Type restriction bypass
Web shell upload via path traversal
Web shell upload via extension blacklist bypass

Web shell upload via obfuscated file extension
Remote code execution via polyglot web shell upload
Web shell upload via race condition
TXT Records and Github Recon
Early Recon for a Web Application
Hacking Windows Server Using Eternal Blue
Ligolo-ng For Tunneling
Getting Hold Of Enum and Ways
Cached AD Credentials

Lateral Movement For Active Directory
File Transfer Linux-Linux
File Transfer Windows-Linux
Meaning Of API
Security Mechanism Of API
IDOR and severity levels
No Rate Limit On Registration
No Rate Limit On Login
No Rate Limit On Contact Us Page
No Rate Limit On Redeem Page

Using Default Credentials
Infotainment, Radio Head Unit PII Leakage
RF Hub Key Fob Cloning
Misconfigured DNS High Impact Subdomain Takeover
OAuth Misconfiguration Account Takeover
Infotainment, Radio Head Unit OTA Firmware Manipulation
Misconfigured DNS Basic Subdomain Takeover
Mail Server Misconfiguration No Spoofing Protection on Email Domain
Misconfigured DNS Zone Transfer
Mail Server Misconfiguration Email Spoofing to Inbox due to Missing or Misconfigured DMARC on Email Domain
Database Management System (DBMS) Misconfiguration Excessively Privileged User / DBA

No Rate Limiting on Form Email-Triggering
No Rate Limiting on Form SMS-Triggering
Exploiting Linux Machine With ShellShock
Exploiting Linux with dev shell and Privesc with cronjob

Host header authentication bypass
Web cache poisoning via ambiguous requests

HTTP By Default
HTTPS and HTTP Both Available
Improper Cache Control
Token Is Invalidated After Use On Registration
Token Is Invalidated After Use On Login

Token Is Invalidated After Use On Invite
Token Is Invalidated After Use On Coupon
Token Is Invalidated After Use On Collaboration
Introduction To Defensive Security
Overview of Cyber Security
Importance of Defensive Security
OSI Model
TCP/IP Basics
Subnetting
Interface And Cables
Security Fundamentals
Introduction to Mobile App Pentesting
Mobile App Pentesting Process
Practical:Reconnaissance on a target
Understanding the Android Architecture
Introducing android apps building blocks
Understanding Reverse Engineering
Performing lab setup on windows
Performing lab setup on kali linux
Performing lab setup on MAC
Setting up Emulator on Android studio
Setup for physical device
Pulling apk from playstore
Introduction to injured android
What to look at in AndroidManifest xml file
RCE In CSE-Webstore
HTML Email Injection
Token Leaked In Response
External Authentication Injection
Cleartext Transmission Of Session Token
Account Lockout Bypass
Token Leakage Via 3rd Party Referrer
CRLF To XSS
Clipboard Enabled
DoS To Owner
No Secure Integrity Check
Privacy Concern
Iframe Injection
Session Fixation

Source Code Credential Storage
Cyber Security Quiz
Target Finding Methadology
Performing Static Analysis
Applying Static Analysis To Get Some Flags
Exploiting Storage Buckets
Exploiting Firebase Database
Understanding SSL Pinning
Using Burpsuite For Intercepting Traffic
Using Proxyman For Intercepting Traffic
Automation For Patching Applications
Manual Patching Of Applications
Understanding Broadcast Receiver
Decryption Using Frida
Understanding Sqlite databases In An Application
Performing Unicode Collision

Assembly Language And Shared Objects
DIVA Application
AndroGoat Application
Introduction To iOS
Automated Analysis Using MobSF
Introduction To Defensive Security
Overview of Cyber Security
Importance of Defensive Security
OSI Model
TCP/IP Basics
Subnetting
Lab Setup For Defensive
Interface And Cables
Security Fundamentals
Practical on Packet Tracer
Standard ACLs
Extended ACLs
Working Layer of Protocols
Wireshark And Nmap
Protocols and Ports
Compliance and Standards
Incident Response And Management
Risk Management
Firewall v/s IDP v/s IPS
SIEM
Windows and Linux Fundamentals
Countermeasure
Introduction To AWS Security
Monitoring & Logging in AWS

Security Reference Architecture
AWS Config Theory

Unauthorized Activity
Incident Response
Event Bridge
Overview About AWS Inspector & Defender
AWS Configuration Practicals Overview

EventBridge Practical Overview
Amazon SNS Practical Overview
CloudTrail Practical Overview
AWS Shared Responsibility Model
Introduction To Owasp Top 10
A01 - Broken Access Control
A02 - Cryptographic Failures
A03 - Injections
A04 - Insecure Design
A05 - Security Misconfigurations
A06 - Vulnerable & Outdated Componenets
A07 - Identification & Authorization Failures
A08 - Software & Data Integrity Issues
A09 - Security Logging & Monitoring Failures
A10 - SSRF
Securing Layered Web Architecture In AWS
Best Practices To Secure Layered Web Application
Edge Security Design
DDOS Attack Overview & AWS Shield Introduction
Best Practices for DDOS Protection
Designing Secure Isolated Network Architecture
Gateways & Traffic Monitoring Concept In VPC
Difference In Security Group & NACL
AWS Firewall Tools Stack Overview
Common Use Cases of Edge Security Strategy
AWS Hybrid Network Security
Building AWS Hybrid Network Security Architecture
Reachability Analysis In AWS
Host Based Security In AWS
AWS Inspector Overview
Hardening Concept Overview
CV Making
Working Of IAM in AWS
Users in AWS IAM
Roles in AWS IAM
Policies in AWS IAM
Best Practices in AWS IAM
Introduction to Access Control Concept in AWS IAM
Overview about RBAC & ABAC access control
Separation of Duties Concept in AWS
Deployment of SOD in AWS
Active Directory in AWS
AWS Managed Active Directory
AD Connector in AWS
Scalable System Design to Access AWS Resources
Requirements
Basic Bug Bounty Knowledge
Basic Linux Knowledge
Learning Approach
High Sitting Hours
PC with minimum 8GB RAM
Scripting Knowledge
Description

Overview
Section 1: Introduction
Lecture 1 Introduction
Lecture 2 Software And Tools Required
Lecture 3 Topics To Be Covered For CEH ,OSCP Prep and Bug Bounty
Lecture 4 Words Of Caution
Section 2: Passive Information Gathering
Lecture 5 Passive Information Gathering
Section 3: Active Information Gathering
Lecture 6 H

Links Table (Note: Download all parts and then extract file if below is multiple parts)

Links

Download Link

3238862

Part

https://nitroflare.com/view/23A86482D42E55D/gahgp.One.Stop.Hacking.Marathon.OscpDefensiveCloudBug.Bounty.part19.rar

3238863

Part

https://nitroflare.com/view/3607D418DE87FA0/gahgp.One.Stop.Hacking.Marathon.OscpDefensiveCloudBug.Bounty.part25.rar

3238864

Part

https://nitroflare.com/view/F7491CA90A4DCA5/gahgp.One.Stop.Hacking.Marathon.OscpDefensiveCloudBug.Bounty.part24.rar