How To Hack The Box To Your OSCP (Part 2)

[0nelove]

MP4 | Video: h264, 1280x720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English | Duration: 5 lectures (3h 23m) | Size: 2.32 GB
​

The Hard Boxes
What you'll learn:
Technical confidence needed to take on the OSCP exam
Attacker tradecraft mapped to the MITRE ATT&CK Framework
New tooling and techniques to conduct higher quality penetration tests and red team exercises.
Expert tips and tactics for becoming a competent offensive cyber security professional

Requirements
Basic computer with at least 16GB of RAM
VMWare Workstation Trial
VIP Hack The Box Account
Constant Curiosity and a thirst to learn new things

Description
Hack The Box is becoming ascendant in the penetration testing infosec community. It has rapidly risen to stardom as super hackers such as IppSec and 0xdf have published tons of free material helping our community graduate from n00b to ninja. Hack The Box has gameified hacking and has made the entire learning process both fun and educational.

In this course I wanted to give you a set of boxes that are more challenging to hack. If you're looking for harder boxes and want to peek inside my hacking methodology, mindset and technique then this course is for you. You won't pass the OSCP exam from simply going through these videos lectures and I currently don't have the OSCP cert. I've taken the training material and took the 24 hour exam but failed it. BUT! Instead of letting that get me down, I decided to create an online course as a means of helping me master the concepts I encountered in my training and on the exam. I created this course as a means of helping me pass the exam and helping others as we go through the journey together.

The good news is the training in this course will help you because you'll develop the attacker tradecraft and technical skillset needed to compromise systems. You'll also learn why attacks work. This isn't a course about push-button-hacking. You will learn the rationale behind various real-world attacks and understand the gotches and pitfalls newbies make when using select tools.

We are about to have a lot of fun and I can hardly wait to come along side you on your journey to earning your OSCP. Are you ready to have fun studying for this thing?

Get prepared to go on a ride. You're about to learn a lot and many of the tactics and techniques we leverage align with real world scenarios.

All attacks and techniques are mapped to the MITRE ATT&CK Framework.

If you're a software engineering dreaming about how to pwn boxes then this course is for you.

If you're the curious type who wonders what could have been done differently after rooting a box or if you want to know WHY exploits fail... then this course is for you.

If you want to stop feeling like an imposter who acts like you know what you're talking about and want to finally feel the confidence, pleasure and peace that comes from REALLY knowing what you're talking about.. then this.... course.... is for you.

Let's go! You got this baby!

Who this course is for
Students who want to understand the thinking methodology behind hacking computers
Students who want to earn their OSCP Certification

Download: How To Hack The Box To Your OSCP (Part 2)

 

[PowerUploader]

How To Hack The Box To Your OSCP (Part 2)

Download

 

[ad-team]

How To Hack The Box To Your OSCP (Part 3)
Genre: eLearning | MP4 | Video: h264, 1280x720 | Audio: AAC, 44.1 KHz
Language: English​

| Size: 3.31 GB[/center]
| Duration: 5h 20m

Master over 50 tactics, techniques and procedures, used by Red Teams and bad actors, all mapped to MITRE ATT&CK.

What you'll learn
How modern adversaries breach public facing webservers
How to weoponize benign applications with exploits
How to evade AV and EDR with advanced shellcode loaders
How attackers move laterally, create reverse tunnels and expand influence on the victim network
How to think in terms of MITRE ATT&CK and understand the vernacular.
How to test and validate SQLi, XSS, SSTI and more

Requirements
Hack The Box VIP Account
Description
Are you ready to level up your game?

Ready for the hardest boxes to hack?

Want a challenge without feeling overwhelmed or confused?

I finally did it. I finally decided to create the last series in my three part collection on pwning Hack The Box machines.

There are tons of free write-ups and Youtube videos on-line that will show you how to breach a box but almost none of them break down the process step by step.

And almost none of them include all the commands as a tidy reference.

And even fewer map all attacks to the MITRE ATT&CK Matrix.

What I've done is taken you on a journey into my mind as I help you understand how an expert hacker thinks. You will get the behind-the-curtain view into my thought process as I think through difficult scenarios and carefully step through each obstacle until the box is pwned.

In addition, after we pop the box, we'll take a step back and understand what vulnerabilities led to the initial intrusion vector by exploring host logs, vulnerable application source code and event logs.

I've prepared everything you need for learning success in one convenient package.

So, I'm going to ask again - are you ready to level up your game?

You are about to learn the following tools and techniques from an offensive perspective

MITRE ATT&CK Enterprise Framework TTPs

ping

nmap

rpcdump

rpcclient

smbmap

smbclient

crackmapexec

whatweb

Wappalyzer

curl

openssl

gowitness

Burp Proxy

Burp Embedded Chromium Browser

feroxbuster

wfuzz

Web Application Attacks: SQLi

Web Application Attacks: Reflected XSS

Web Application Attacks: SSTI

Polyglot Payloads

Web Application Attacks: Command Injection

Reverse Shells: Powershell

Reverse Shells: Powershell Upgrade

Reverse Shells: Netcat

Reverse Shells: Meterpeter

Reverse Shells: PSExec

Reverse Shells: NoPAC

Base64 Encoded Powershell Payloads

rlwrap

PEASS-ng

Blue Team: wmic

Blue Team: tasklist

Blue Team: Get-WmiObject

CSRs

Chisel

ProxyChains

FoxyProxy SOCKS Proxies

tshark

responder

hashcat

Lateral Movement

Resource Development: Commando VM!

Resource Development: Exploit Testing and Maldoc creation

Defense Evasion: charlotte

Defense Evasion: Meterpreter

certutil

SharpCollection

PowerView

Rubeus

Certify

date (sounds lame but we actually use it in a way you've never seen before)

Detection Engineering: Log Review

Secure Coding Principles: Source Code Review

If this doesn't excite you, you are not the right person for this course.

But if you're ready to freggin' have a blast and take your learning and skills to beast mode click Buy Now and let's begin!

Who this course is for
Intermediate to Advanced Red Team Operators
Intermediate to Advanced Penetration Testers
Security Conscious Software Developers
Blue Team SOC Analysts
Blue Team Threat Hunters
Cybersecurity Managers (wanting to understand initial intrusions and mitigations)

Download: How To Hack The Box To Your OSCP (Part 2)

Download: How To Hack The Box To Your OSCP (Part 2)

Free search engine download: Udemy - How To Hack The Box To Your OSCP (Part 3)

 

[PowerUploader]

How To Hack The Box To Your OSCP (Part 2)

Download