Welcome to The CyberSec Lounge

Cybersecurity training to help professionals, students, and enthusiasts develop skills to defend systems, identify vulnerabilities, and improve security postures. By Davy Rogers.

6 categories
69 lessons
Start learning
Part 1

Fundamentals

Core concepts and foundational knowledge for penetration testing and cybersecurity.

  1. What is Penetration Testing (Ethical Hacking)

    Understanding the fundamentals of penetration testing and ethical hacking.

  2. What is Linux

    Introduction to the Linux operating system and its importance in cybersecurity.

  3. The Linux Kernel

    Understanding the core of the Linux operating system.

  4. What is Cryptography

    Introduction to cryptographic concepts and their applications in security.

  5. What is Steganography

    Learn about hiding information within other data.

  6. What is a Red Team

    Understanding offensive security and red team operations.

  7. What is a Blue Team

    Understanding defensive security and blue team operations.

  8. Lab Setup

    Setting up your own penetration testing lab environment.

  9. Penetration Testing Methodology

    A systematic approach to conducting penetration tests.

Part 2

Networking

Essential networking concepts for understanding and exploiting network infrastructure.

  1. Introduction to Networking

    Fundamentals of computer networking and network architecture.

  2. What is a Network Protocol

    Understanding how network protocols enable communication.

  3. Three Way Handshake

    TCP connection establishment process explained.

  4. Addresses and Ports

    Understanding IP addresses and port numbers.

  5. Domain Name System (DNS)

    How domain names are resolved to IP addresses.

  6. Network Address Translation (NAT)

    Understanding how NAT enables private networks to connect to the internet.

  7. Subnets (Network Class)

    Network segmentation and subnet calculations.

  8. OSI Model

    The seven layers of network communication.

  9. Hexadecimal

    Understanding hexadecimal number system in networking.

  10. Broadcast Address

    Understanding broadcast addressing in networks.

  11. Loopback Address

    The localhost and loopback interface explained.

  12. Classless Interdomain Routing (CIDR)

    Modern IP addressing and routing methodology.

  13. How Data Flows Through Hubs, Switches and Routers

    Understanding network devices and data flow.

  14. Routing Traffic Between Subnets

    How routers forward packets between networks.

  15. ARP (Address Resolution Protocol)

    Mapping IP addresses to MAC addresses.

  16. TCP, UDP and Ports

    Understanding transport layer protocols and port numbers.

  17. DHCP (Dynamic Host Configuration Protocol)

    Automatic IP address assignment in networks.

  18. VLANs (Virtual LANs)

    Network segmentation using virtual LANs.

Part 3

Scripting

Master Bash and PowerShell scripting for automation and system administration.

  1. Bash - Getting Around Linux (Basics)

    Navigate the Linux filesystem using basic commands.

  2. Bash - Basics of Getting Help in Linux

    Using man pages and help commands effectively.

  3. Bash - Creating and Deleting Files and Folders in Linux

    File and directory management commands.

  4. Bash - Basics of Viewing Files in Linux

    Commands for viewing and reading file contents.

  5. Bash - Moving and Copying Files and Directories in Linux

    File operations: move, copy, and rename.

  6. Bash - Streams, Redirection, and Piping

    Understanding input/output streams and command chaining.

  7. Bash - File Permissions in Linux

    Understanding and managing Linux file permissions.

  8. Bash - Regular Expression Basics

    Pattern matching with regular expressions.

  9. Bash - xargs

    Building and executing commands from standard input.

  10. Bash - Scripting Basics

    Writing your first bash scripts.

  11. Bash - OverTheWire Challenges

    Practice bash skills with OverTheWire wargames.

  12. PowerShell - For Beginners

    Introduction to PowerShell scripting on Windows.

  13. PowerShell - Copy, Move, Delete Files

    File management with PowerShell cmdlets.

  14. PowerShell - String Manipulation

    Working with strings in PowerShell.

  15. PowerShell - foreach

    Looping through collections in PowerShell.

  16. PowerShell - If Statement

    Conditional logic in PowerShell scripts.

  17. PowerShell - Variables

    Understanding variables and data types in PowerShell.

  18. PowerShell - Create Multiple Users

    Automating user account creation with PowerShell.

Part 4

Reconnaissance

Information gathering techniques for passive and active reconnaissance.

  1. Passive Recon - Whois

    Gathering domain registration information.

  2. Passive Recon - crt.sh

    Certificate transparency log searches.

  3. Passive Recon - Google Maps

    Physical reconnaissance using mapping services.

  4. Passive Recon - Strava

    OSINT using fitness tracking applications.

  5. Passive Recon - Google Dorking/Google Hacking

    Advanced search operators for information discovery.

  6. Passive Recon - Shodan

    Internet-wide scanning and device discovery.

  7. Active Recon - Dig

    DNS queries and zone transfers.

  8. Active Recon - nmap

    Network scanning and service discovery.

  9. Active Recon - Nikto

    Web server vulnerability scanning.

  10. Active Recon - Visual Recon

    Screenshot and triage web targets at scale using modern visual reconnaissance workflows.

Part 5

Gaining Access

Exploitation techniques and vulnerability exploitation methods.

  1. SQL Injection

    Exploiting database queries to gain unauthorized access.

  2. Broken Authentication

    Exploiting authentication and session management flaws.

  3. Buffer Overflow

    Memory corruption attacks and exploitation.

  4. Remote/Local File Inclusion and Path Traversal

    Exploiting file handling vulnerabilities.

  5. Cross-Site Scripting (XSS)

    Injecting malicious scripts into web pages.

  6. Cross-Site Request Forgery (CSRF)

    Forcing users to execute unwanted actions.

  7. Password Cracking (John The Ripper)

    Cracking password hashes with John the Ripper.

  8. Password Cracking (Hashcat)

    GPU-accelerated password cracking with Hashcat.

  9. Command Injection

    Executing arbitrary commands on target systems.

  10. Exploit Development

    Creating custom exploits for vulnerabilities.

Part 6

Privilege Escalation

Techniques for elevating privileges on compromised systems.

  1. Linux Privilege Escalation

    Gaining root access on Linux systems.

  2. Windows Privilege Escalation

    Elevating privileges on Windows systems.

  3. SUID, SGID and Sticky Bit

    Understanding and exploiting special file permissions.

  4. Cron Jobs

    Exploiting scheduled tasks for privilege escalation.