iwantcoding.com
🔥 Daily 👥 Rooms 🏆 Top Log in Sign up
« Previous

Ethical Hacking HOME

Welcome to the iwantcoding.com Ethical Hacking Tutorial. Authorised security testing: think like an attacker so you can defend like one. This track only teaches techniques inside CTFs, your own lab, or scoped engagements with written authorisation.

What this tutorial covers

ChapterYou will learn
FoundationsLegal / authorisation (Rules of Engagement), methodology, MITRE ATT&CK, the Cyber Kill Chain, lab setup, writing the report.
ReconnaissanceOSINT, passive vs active recon, Nmap, subdomain discovery, Shodan / Censys, content discovery.
Web App PentestingBurp Suite, OWASP ZAP, auth testing, IDOR, broken access control, SQLi / XSS / SSRF / XXE / JWT testing.
Network & WirelessWireshark, MitM (lab only), ARP / DNS concepts, Wi-Fi, TLS pitfalls.
Exploit & Post-ExploitMetasploit basics, reverse / bind shells (lab), Linux / Windows privesc, persistence, lateral, AV / EDR considerations.
People & ProcessSocial engineering, phishing awareness, physical security, cloud / mobile / IoT pentesting basics.
Defence MindsetDetection & SIEM, blue team, purple teaming, incident response, threat modelling.
Career & CertsOSCP / CEH / PNPT, HTB / THM / VulnHub, bug bounty, coordinated disclosure.
ExamplesCheatsheet, runnable snippets, quiz, exercises, bootcamp, certificate.

Who this is for

  • Defenders who want to understand the attacker mindset.
  • CTF / HTB players levelling up.
  • Career-switchers heading into pentesting / red team.
How to use this tutorial: read the chapter, run the example with Try it Yourself », do the exercise, then take the quiz at the bottom. Hit Mark complete when you're done — the sidebar will track your progress.

Example

Example
# RULE #1: never test a system you don't have written authorization to test.
# This track is for CTFs, your own lab, bug-bounty programs, and engagements
# with a signed scope. Anywhere else, you're committing a crime.
Try it Yourself »

Discussion

Loading…

« Previous