Top Sites>HHackers Arise – EXPERT CYBERSECURITY TRAINING FOR ETHICAL HACKERS

# As a condition of accessing this website, you agree to abide by the following
# content signals:

# (a)  If a Content-Signal = yes, you may collect content for the corresponding
#      use.
# (b)  If a Content-Signal = no, you may not collect content for the
#      corresponding use.
# (c)  If the website operator does not include a Content-Signal for a
#      corresponding use, the website operator neither grants nor restricts
#      permission via Content-Signal with respect to the corresponding use.

# The content signals and their meanings are:

# search:   building a search index and providing search results (e.g., returning
#           hyperlinks and short excerpts from your website's contents). Search does not
#           include providing AI-generated search summaries.
# ai-input: inputting content into one or more AI models (e.g., retrieval
#           augmented generation, grounding, or other real-time taking of content for
#           generative AI search answers).
# ai-train: training or fine-tuning AI models.

# ANY RESTRICTIONS EXPRESSED VIA CONTENT SIGNALS ARE EXPRESS RESERVATIONS OF
# RIGHTS UNDER ARTICLE 4 OF THE EUROPEAN UNION DIRECTIVE 2019/790 ON COPYRIGHT
# AND RELATED RIGHTS IN THE DIGITAL SINGLE MARKET.

# BEGIN Cloudflare Managed content

User-agent: *
Content-Signal: search=yes,ai-train=no
Allow: /

User-agent: Amazonbot
Disallow: /

User-agent: Applebot-Extended
Disallow: /

User-agent: Bytespider
Disallow: /

User-agent: CCBot
Disallow: /

User-agent: ClaudeBot
Disallow: /

User-agent: CloudflareBrowserRenderingCrawler
Disallow: /

User-agent: Google-Extended
Disallow: /

User-agent: GPTBot
Disallow: /

User-agent: meta-externalagent
Disallow: /

# END Cloudflare Managed Content

User-agent: *
Disallow: /wp-admin/
Disallow: /wp-login.php
Disallow: /?s=         # Blocks search result pages
Disallow: /tag/        # Blocks tag archives


Allow: /wp-admin/admin-ajax.php

Sitemap: https://hackers-arise.com/sitemap.xml

Sitemap: https://hackers-arise.com/sitemap.rss

Generated by All in One SEO v4.9.3, this is an llms.txt file, used by LLMs to index the site.

# Hackers Arise

EXPERT CYBERSECURITY TRAINING FOR ETHICAL HACKERS

## Sitemaps

- [XML Sitemap](https://hackers-arise.com/sitemap.xml): Contains all public & indexable URLs for this website.

## Posts

- [Articles](https://hackers-arise.com/articles/)
- [Database Hacking, Part 02: The Basics of SQL Injection and SQL Injection Tools](https://hackers-arise.com/database-hacking-part-2-the-basics-of-sql-injection-and-sql-injection-tools/) - Welcome back my aspiring white hat hackers to this series on Database Hacking.In the first installment in this series, we learned the fundamentals of databases including the Structured Query Language or SQL. This is the language of databases. The primary method of hacking databases is to inject this SQL into web forms and other applications
- [SCADA Hacking and Security: This is How the World Ends!](https://hackers-arise.com/scada-hacking-and-security-this-is-how-the-world-ends/) - As the cyberwar to save Ukraine enters Round 2, SCADA/ICS is likely to become the target of both sides. In this article, I simply try to lay out a case of why SCADA Hacking and Security is among the most critical area of cybersecurity (update March 23, 2022).Recently, the US National Security Administration (NSA) warned
- [BlueTooth Hacking, Part 02: BlueTooth Reconnaissance](https://hackers-arise.com/bluetooth-hacking-part-2-bluetooth-reconnaissance/) - The beauty of Bluetooth hacking is that it gives you a clear window into the world of the target. Nearly every device has Bluetooth capabilities now, and people store a great deal of personal information on their phones and tablets. If we can hack their Bluetooth connection, we can access all of that great information
- [Off-Grid Communications, Part 1: Introduction to Meshtastic Networks](https://hackers-arise.com/off-grid-communications-part-1-introduction-to-meshtastic-networks/) - Welcome back, my aspiring cyberwarriors! In our eventful time, the ability to communicate off-grid has become more valuable than ever. Whether you're preparing for emergencies, exploring remote locations, or simply want a decentralized communication network that doesn't rely on cellular towers or internet infrastructure, Meshtastic offers a powerful solution. In this article, we will explore
- [Artificial Intelligence in Cybersecurity, Part 3: Getting Started with Model Context Protocol (MCP)](https://hackers-arise.com/artificial-intelligence-ai-in-cybersecurity-getting-started-with-model-context-protocol-mcp/) - In this article, we'll dive into what MCP is all about, how it works, and explore its practical applications in hacking and cybersecurity. We'll break down the concepts and show how you can start using MCP to enhance your projects!
- [The CyberWarrior Handbook, Part 01](https://hackers-arise.com/the-cyberwarrior-handbook-part-1/) - Welcome back, my cyberwarriors! In this series, we will detail how an individual or small group of cyberwarriors can impact global geopolitics. The knowledge and tools that YOU hold are a superpower that can change history. Use it wisely. To begin this discussion, let’s look at the actions of a small group of hackers at
- [SCADA (ICS) Hacking and Security: Hacking Nuclear Power Plants, Part 1](https://hackers-arise.com/scada-ics-hacking-and-security-how-nuclear-plants-are-hacked-in-under-an-hour-part-1/) - Explore how modern nuclear power plants operate, how their digital safety systems are designed and can be abused. Teleperm XS platform and real-world research, lays the groundwork for understanding how a cyber attack could unfold.
- [PowerShell for DFIR, Part 1: Log Analysis and System Hardening](https://hackers-arise.com/powershell-for-defenders-part-1-log-analysis-and-system-hardening/) - Defenders can use PowerShell to analyze Windows logs and harden systems using DeepBlueCLI and WELA.
- [Digital Forensics: Browser Fingerprinting, Part 2 - Audio and Cache-Based Tracking Methods](https://hackers-arise.com/digital-forensics-browser-fingerprinting-part-2-audio-and-cache-based-tracking-methods/) - Audio processing and browser caching can also expose users, as modern fingerprinting goes far beyond visuals
- [Digital Forensics: Browser Fingerprinting, Part 1 - Visual Identification Techniques](https://hackers-arise.com/digital-forensics-browser-fingerprinting-visual-identification-techniques-part-1/) - By analysing subtle visual rendering differences through Canvas and WebGL, powerful tracking systems can link anonymous browsing activity back to the same device.
- [Digital Forensics: AnyDesk – Favorite Tool of APTs](https://hackers-arise.com/digital-forensics-anydesk-favorite-tool-of-apts/) - Learn how AnyDesk forensic artifacts can help you uncover remote connections, attacker identities, and signs of data theft
- [Artificial Intelligence in Cybersecurity, Part 8: AI-Powered Dark Web Investigations](https://hackers-arise.com/artificial-intelligence-in-cybersecurity-part-8-ai-powered-dark-web-investigations/) - Searching the dark web manually is time-consuming. Robin uses AI to do it for you, turning raw data into actionable intelligence in minutes.
- [Wi-Fi (802.11) Hacking Strategies](https://hackers-arise.com/wi-fi-802-11-hacking-strategies/) - Welcome back, aspiring cyberwarriors!Many beginners attempt to crack Wi-Fi passwords but struggle to determine the most effective approach for their specific situation. Not every technique works under every circumstance, and choosing the wrong strategy can waste hours and lead to frustration.This article presents Wi-Fi cracking strategies ordered from simplest to most complex, with effectiveness and
- [Drone Hacking: Build Your Own Hacking Drone, Part 2](https://hackers-arise.com/drone-hacking-build-your-own-hacking-drone-part-2/) - In Part 2, we set up remote control of the drone via 4G and prepare for our first wireless attacks.
- [Digital Forensics: How Hackers Compromise Servers Through File Uploads](https://hackers-arise.com/digital-forensics-how-hackers-compromise-servers-through-file-uploads/) - Learn how attackers exploit insecure file uploads to gain remote shells and establish persistence
- [PowerShell For Hackers, Part 10: Timeroasting Users](https://hackers-arise.com/powershell-for-hackers-part-10-timeroasting-users/) - See how hackers can quietly extract user password hashes by abusing Active Directory account attributes without noisy attacks
- [We Have Successfully Accessed Many IP Cameras in Ukrainian Territory to Spy on Russian Activities](https://hackers-arise.com/we-have-successfully-accessed-many-ip-cameras-in-ukrainian-territory-to-spy-on-russian-activities/) - Welcome back, my cyberwarriors! This article was first published at Hackers-Arise in April 2022, just 2 months after the Russians invaded in Ukraine. At the request of the IT Army of Ukraine, we were asked to help the war efforts by hacking a large number of IP cameras within Ukrainian territory. In this way, we
- [React2Shell Vulnerability Exploited to Build Massive IoT Botnet](https://hackers-arise.com/react2shell-vulnerability-exploited-to-build-massive-iot-botnet/) - The React2Shell vulnerability, identified as CVE-2025-55182, poses a critical risk by allowing attackers to exploit IoT devices and web servers with a single malicious HTTP request, leveraging flaws in how React Server Components handle data. In this article, we’ll explore the roots of React2Shell and how we can exploit this vulnerability in IoT devices.
- [Linux: HackShell - Bash For Hackers](https://hackers-arise.com/linux-hackshell-bash-for-hackers/) - HackShell is a stealth-focused Bash environment built for hackers. See how it can help you hide your presence
- [Drone Hacking: Build Your Own Hacking Drone, Part 1](https://hackers-arise.com/drone-hacking-build-your-own-hacking-drone-part-1/) - See how FPV drones can be turned into remote hacking tools, extending wireless attack reach.
- [Digital Forensics: Basic Linux Analysis After Data Exfiltration](https://hackers-arise.com/digital-forensics-basic-linux-analysis-after-data-exfiltration/) - A practical Linux forensic investigation after data exfiltration, showing how evidence can uncover how sensitive data was stolen.
- [Password Cracking: Stealing Credentials with PCredz](https://hackers-arise.com/password-cracking-stealing-credentials-with-pcredz/) - PCredz can pull credentials and other sensitive data from network captures, helping you spot weak authentication flows
- [Open Source Intelligence (OSINT): Tools and Techniques for Vehicle Investigation, Part 1](https://hackers-arise.com/open-source-intelligence-osint-tools-and-techniques-for-vehicle-investigation-part-1/) - From identifying license plates to tracking sightings through community-powered databases, vehicle OSINT opens new doors for investigators. This article explores key tools and techniques to analyze vehicles using publicly available data.
- [What Will Be Key Cybersecurity Issues  in 2026?](https://hackers-arise.com/what-will-be-key-cybersecurity-issues-in-2026/) - Welcome back, my aspiring cyberwarriors! As we enter 2026, cybersecurity will be among the most important issues your organization, and our society, will face. Let's take moment to review the most important issues we will be facing to help you better prepare. Rather than leveling off or declining, cyber attacks continue at an unprecedented pace.
- [Database Hacking: Get Started with MongoBleed Vulnerability](https://hackers-arise.com/database-hacking-get-started-with-mongobleed-vulnerability/) - MongoBleed (CVE-2025-14847) is a serious unauthenticated memory leak vulnerability affecting MongoDB versions 3.6 through 8.2. It allows attackers to remotely extract sensitive data, including credentials, API keys, and query fragments, due to a flaw in how zlib-compressed messages are handled. This article explains how the vulnerability works, how to set up a safe lab environment, and how to exploit it using a proof-of-concept script.
- [Digital Forensics:  Drone Forensics for Battlefield and Criminal Analysis](https://hackers-arise.com/digital-forensics-drone-forensics-for-battlefield-and-criminal-analysis/) - See how DroneXtractor can be used to extract, parse, and visualize DJI drone flight data. It is useful for both battlefield and criminal investigations.
- [Artificial Intelligence in Cybersecurity, Part 7: AI-Powered Vulnerability Scanning with BugTrace-AI](https://hackers-arise.com/artificial-intelligence-in-cybersecurity-part-7-ai-powered-vulnerability-scanning-with-bugtrace-ai/) - This article walks through installing and configuring the BugTrace-AI, explains its three scanning modes, and demonstrates how generative AI can uncover logic flaws and security weaknesses that traditional scanners often miss.
- [Artificial Intelligence in Cybersecurity, Part 6: Automate Threat Modeling with STRIDE GPT](https://hackers-arise.com/using-artificial-intelligence-ai-in-cybersecurity-automate-threat-modeling-with-stride-gpt/) - Welcome back, aspiring cyberwarriors! The STRIDE methodology has been the gold standard for systematic threat identification, categorizing threats into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. However, applying STRIDE effectively requires not just understanding these categories but also having the experience to identify how they manifest in specific application architectures.
- [Artificial Intelligence in Cybersecurity, Part 5: Accelerate Your Python Development with Terminal‑Integrated AI](https://hackers-arise.com/using-artificial-intelligence-ai-in-cybersecurity-accelerate-your-python-development/) - Welcome back, aspiring cyberwarriors and AI users! If you're communicating with AI assistants via browsers, you're doing it in a slow way. Any content, for example, such as code, must first be added to the chatbot and then copied back to the working environment. If you are working on several projects, you have a whole
- [Artificial Intelligence in Cybersecurity, Part 4: Creating a Custom MCP Server For Log Analysis](https://hackers-arise.com/using-artificial-intelligence-ai-in-cybersecurity-creating-a-custom-mcp-server-for-log-analysis/) - Welcome back, aspiring cyberwarriors! In our previous article, we examined the architecture of MCP and explained how to get started with it. Hundreds of MCP servers have been built for different services and tasks—some are dedicated to cybersecurity activities such as reverse engineering or reconnaissance. Those servers are impressive, and we’ll explore several of them
- [Artificial Intelligence in Cybersecurity, Part 2: Automated Password Cracking with BruteForceAI](https://hackers-arise.com/automated-password-cracking-with-bruteforceai/) - Nowadays, security engineers make an effort to get people to use complex passwords, and 2FA is becoming required on more and more platforms. This makes password cracking more time-consuming and sometimes only a first step toward access, but it can still be the hacker's best entry point to an account or network. Today, I'd like
- [Artificial Intelligence in Cybersecurity, Part 1: Using AI for Port Scanning](https://hackers-arise.com/artificial-intelligence-in-cybersecurity-using-ai-for-port-scanning/) - Welcome back, aspiring cyberwarriors! Nmap has been the gold standard of network scanning for decades, and over this time, it has obtained hundreds of command-line options and NSE scripts. It's great from one side, you can tailor the command for your needs, but on the other side, it requires expertise. What if you could simply
- [Digital Forensics: Analyzing BlackEnergy3 with Volatility](https://hackers-arise.com/digital-forensics-volatility-analyzing-blackenergy/) - A real memory dump from a Windows system infected with BlackEnergy.
- [Mobile Forensics: Simple Methods to Extract Media and Messages from WhatsApp, Signal, and Telegram](https://hackers-arise.com/mobile-forensics-simple-methods-to-extract-media-and-messages-from-whatsapp-signal-and-telegram/) - Low-effort ways to extract messages and media from WhatsApp, Signal, and Telegram without rooting phones or using advanced techniques.
- [Open Source Intelligence (OSINT): Explore GPS/GNSS Jamming Around the World](https://hackers-arise.com/open-source-intelligence-osint-explore-gps-gnss-jamming-around-the-world/) - Welcome back, aspiring cyberwarriors! In our previous article on anti-drone warfare, we discussed the topic of jamming. Based on observations from the Russian-Ukrainian war, jamming is not only a legitimate electronic warfare technique but also a highly effective one. One notable incident involved Ursula von der Leyen’s plane, which was reportedly affected by suspected Russian
- [Android Hacking: How Hackers Use Android Debug Bridge (ADB) to Take Over Devices](https://hackers-arise.com/android-hacking-how-hackers-use-android-debug-bridge-adb-to-take-over-devices/) - Welcome back, aspiring cyberwarriors! According to StatCounter, in 2025 Android powers over 3.3 billion users worldwide, dominating the global mobile OS market with a 71.85% share. But beyond phones, Android also powers a wide range of devices, including tablets, TVs, automotive systems, XR devices, and more. Today, I’d like to show you how all of
- [SDR (Signals Intelligence) for Hackers: Building a Low- Cost, Private 4G LTE Network](https://hackers-arise.com/sdr-signals-intelligence-for-hackers-building-a-low-cost-private-4g-lte-network/) - Welcome back, my aspiring cyberwarriors! New technological developments in recent years has made it possible to build a private cellular network at very low cost. This can be useful to many organizations who place their privacy at a premium such as firms engaged in research and development of intellectual property (IP) or law firms, to
- [Mobile Forensics: Extracting Data from WhatsApp](https://hackers-arise.com/mobile-forensics-extracting-data-from-whatsapp/) - A brief guide to extracting and interpreting core WhatsApp artifacts on Android and iOS
- [Password Cracking: Getting Started with John the Ripper](https://hackers-arise.com/password-cracking-getting-started-with-john-the-ripper/) - Welcome back, aspiring cyberwarriors! John the Ripper (often called "John") is a tool that earned a reputation as one of the most powerful and versatile in the field. Originally developed by Openwall, John has become an essential tool for penetration testers, security auditors, and anyone else who needs to assess password strength. In this tutorial,
- [Digital Forensics: Registry Analysis for Beginners, Part 1 - Hives, Logs, and Acquisition](https://hackers-arise.com/digital-forensics-registry-analysis-for-beginners-part-1-hives-logs-and-acquisition/) - A beginner-friendly walkthrough of Windows Registry forensics, focusing on understanding core hives and acquiring registry data safely for evidence analysis.
- [Digital Forensics: Volatility - Analyzing a Malicious VPN](https://hackers-arise.com/digital-forensics-volatility-analyzing-a-malicious-vpn/) - Uncovering a VPN-themed stealer that hid its C2 traffic behind a SOCKS proxy to evade NIDS
- [SCADA Hacking: Inside Russian Facilities, Part 5](https://hackers-arise.com/scada-hacking-inside-russian-facilities-part-5/) - Welcome back, cyberwarriors. This is the final part in our series on SCADA hacking. We continue diving into operations conducted by the Cyber Cossacks, a unit formed by OTW at the request of the Ukrainian government. These missions were carried out together with various Ukrainian hacker groups across the country. In unity we are strong!
- [Digital Forensics: An Introduction to Basic Linux Forensics](https://hackers-arise.com/digital-forensics-an-introduction-to-basic-linux-forensics/) - Learn how to perform basic Linux forensics. Commands will give you a reliable starting point for incident response before moving into deeper file system, memory, and artifact analysis.
- [Network Security: Get Started with QUIC and HTTP/3](https://hackers-arise.com/network-security-get-started-with-quic-and-http-3/) - Welcome back, aspiring cyberwarriors! For decades, traditional HTTP traffic over TCP, also known as HTTP/1 and HTTP/2, has been the backbone of the web, and we have tools to analyze, intercept, and exploit it. But nowadays, we have HTTP/3, which is steadily increasing adoption across the web. In 2022, around 22% of all websites used
- [Bug Bounty: Get Started with httpx](https://hackers-arise.com/bug-bounty-get-started-with-httpx/) - Welcome back, aspiring cyberwarriors! Before we can exploit a target, we need to understand its attack surface completely. This means identifying web servers, discovering hidden endpoints, analyzing response headers, and mapping out the entire web infrastructure. Traditional tools like curl and wget are useful, but they're slow and cumbersome when you're dealing with hundreds or
- [Digital Forensics: Volatility – Memory Analysis Guide, Part 2](https://hackers-arise.com/digital-forensics-volatility-memory-analysis-guide-part-2/) - Learn the commands you need for Memory Analysis with Volatility 2 and 3. Perform network enumeration, extract registry hives and keys, locate and dump in-memory files and more.
- [Mobile Forensics: Investigating a Murder](https://hackers-arise.com/mobile-forensics-investigating-a-murder/) - Performing a logical extraction, processing artifacts with ALEAPP, and correlating recent activity to reconstruct a timeline that identifies persons of interest and actionable next steps for investigators.
- [Command and Control (C2): Using Browser Notifications as a Weapon](https://hackers-arise.com/command-and-control-c2-using-browser-notifications-as-a-weapon/) - Welcome back, my aspiring hackers! Nowadays, we often discuss the importance of protecting our systems from malware and sophisticated attacks. We install antivirus software, configure firewalls, and maintain vigilant security practices. But what happens when the attack vector isn't a malicious file or a network exploit, but rather a legitimate browser feature you've been trusting?
- [Smart Home Hacking, January 13-15](https://hackers-arise.com/smart-home-hacking-january-13-15/) - Welcome back, my aspiring cyberwarriors! Smart homes are increasingly becoming common in our digital world! These smart home devices have become of the key targets of malicious hackers. This is largely due to their very weak security. In 2025, attacks on connected devices rose 400 percent, with average breach costs hitting $5.4 million In this
- [Unraveling the Web of Russian Disinformation Campaigns](https://hackers-arise.com/unraveling-the-web-of-russian-disinformation-campaigns/) - Introduction: Hello world of Hackers Arise, in this post, we delve into the complex world of Russian disinformation campaigns on the internet. As Master OTW clearly established in his interview with Yaniv Hoffman (watch the video below), the disinformation campaign carried out by the high-ranking Russian authorities is not something new. It has been developed
- [Offensive Security: Get Started with Penelope for Advanced Shell Management](https://hackers-arise.com/offensive-security-get-started-with-penelope-for-advanced-shell-management/) - Welcome back, aspiring cyberwarriors! In the world of penetration testing and red team operations, one of the most critical moments comes after you've successfully exploited a target system. You've gained initial access, but now you're stuck with a basic, unstable shell that could drop at any moment. You need to upgrade that shell, manage multiple
- [Open Source Intelligence (OSINT): Strategic Techniques for Finding Info on X (Twitter)](https://hackers-arise.com/twitter-x-strategic-osint-techniques/) - Welcome back, my aspiring digital investigators! In the rapidly evolving landscape of open source intelligence, Twitter (now rebranded as X) has long been considered one of the most valuable platforms for gathering real-time information, tracking social movements, and conducting digital investigations. However, the platform's transformation under Elon Musk's ownership has fundamentally altered the OSINT landscape,
- [Powershell for Hackers, Part 9: Hacking with PsMapExec](https://hackers-arise.com/powershell-for-hackers-part-9-hacking-with-psmapexec/) - PsMapExec makes offensive PowerShell work quieter by running fully in memory, dumping SAM and LSASS credentials, executing remote commands, and a lot more
- [SDR (Signals Intelligence) for Hackers: Getting Started with Anti-Drone Warfare](https://hackers-arise.com/sdr-signals-intelligence-for-hackers-getting-started-with-anti-drone-warfare/) - Welcome back, aspiring cyberwarriors! In modern warfare, we're dealing with a whole new battlefield—one that's invisible to the naked eye but just as deadly as kinetic warfare. Drones, or unmanned aerial vehicles (UAVs), have completely changed the game. From small commercial quadra-copters rigged with grenades to sophisticated military platforms conducting precision strikes, these aerial threats
- [Automating Your Digital Life with n8n](https://hackers-arise.com/automating-your-digital-life-with-n8n/) - Welcome back, aspiring cyberwarriors! As you know, there are plenty of automation tools out there, but most of them are closed-source, cloud-only services that charge you per operation and keep your data on their servers. For those of us who value privacy and transparency, these solutions simply won't do. That's where n8n comes into the
- [What is NVIDIA's CUDA and How is it Used in Cybersecurity?](https://hackers-arise.com/what-is-nvidias-cuda-and-how-is-it-used-in-cybersecurity/) - Welcome back my aspiring cyberwarriors! You have likely heard of the company NVIDIA. Not only are the dominant company in computer graphics adapters (if you are gamer, you likely have one) and now, artificial intelligence. In recent weeks, they have become the most valuable company in the world ($5 trillion). The two primary reasons that
- [Digital Forensics: Investigating Conti Ransomware with Splunk](https://hackers-arise.com/digital-forensics-investigating-conti-ransomware-with-splunk/) - Conti ransomware investigation using Splunk. Tracing the attack from the initial ProxyShell breach to lateral movement, credential theft, and final encryption.
- [Open Source Intelligence (OSINT): Using Flowsint for Graph-Based Investigations](https://hackers-arise.com/open-source-intelligence-osint-using-flowsint-for-graph-based-investigations/) - Welcome back, aspiring cyberwarriors! In our industry, we often find ourselves overwhelmed by data from numerous sources. You might be tracking threat actors across social media platforms, mapping domain infrastructure for a penetration test, investigating cryptocurrency transactions tied to ransomware operations, or simply trying to understand how different pieces of intelligence connect to reveal the
- [Smart Home Hacking: Getting Started](https://hackers-arise.com/smart-home-hacking-getting-started/) - Welcome back, my aspiring cyberwarriors! As smart homes become ever more common in our digital world, they have become a favorite target for hackers around the world. We have seen SO many smart home devices compromised and then the hackers use those devices to pivot to other devices connected to the local area network such
- [Hacking with the Raspberry Pi: Network Enumeration](https://hackers-arise.com/hacking-with-the-raspberry-pi-network-enumeration/) - Welcome back, my aspiring cyberwarriors! We continue exploring the Raspberry Pi's potential for hacking. In this article, we'll dive into network enumeration. Enumeration is the foundational step of any penetration test—it involves systematically gathering detailed information about the hosts, services, and topology of the network you're targeting. For the purposes of this guide, we'll assume that
- [Hacking with the Raspberry Pi: Getting Started with Port Knocking](https://hackers-arise.com/hacking-with-the-raspberry-pi-getting-started-with-port-knocking/) - Learn how to secure SSH access on your Raspberry Pi using port knocking, a technique that hides open ports from attackers.
- [Digital Forensics: Investigating a Cyberattack with Autopsy](https://hackers-arise.com/digital-forensics-investigating-a-cyberattack-with-autopsy/) - Practical Autopsy workflow for investigating an E01 image after a cyberattack
- [Digital Forensics: Repairing a Damaged Hard Drive and Extracting the Data](https://hackers-arise.com/digital-forensics-repairing-a-damaged-hard-drive-and-extracting-the-data/) - Restoring a damaged drive and recovering deleted evidence by repairing the boot sector.
- [Web App Hacking:Tearing Back the Cloudflare Veil to Reveal IP's](https://hackers-arise.com/web-app-hackingtearing-back-the-cloudflare-veil-to-reveal-ips/) - Uncover real IP addresses behind Cloudflare with CloudRip. This guide covers installation, usage, and insights on its benefits and limitations in cybersecurity.
- [Web App Hacking: Getting Started with Caido](https://hackers-arise.com/web-app-hacking-getting-started-with-caido/) - Welcome back, hacker novitiates! In this lesson, we’re diving into Caido, a modern and lightweight web security auditing toolkit designed to simplify your web application security testing. Let’s walk through what Caido is, how to get started, and what powerful features it offers. Step 1: What Is Caido? Caido is a web security auditing toolkit
- [SCADA/ICS Forensics, Nov. 18-20](https://hackers-arise.com/scada-ics-forensics-nov-18-20/) - Welcome back, my aspiring SCADA/ICS security engineers! SCADA/ICS hacking is one of the most important areas of cybersecurity and one of the least understood. SCADA/ICS systems power our entire industrial infrastructure and are critical to the every day functioning of our economy and lives. These systems include; Electrical generation and transmission Chemical processing Oil refineries
- [SCADA (ICS) Hacking and Security: SCADA Protocols and Their Purpose](https://hackers-arise.com/scada-ics-hacking-and-security-scada-protocols-and-their-purpose/) - Learn about the core SCADA/ICS protocols and how they are used
- [Digital Forensics: Volatility - Memory Analysis Guide, Part 1](https://hackers-arise.com/digital-forensics-volatility-memory-analysis-guide-part-1/) - Learn how to approach Memory Analysis with Volatility 2 and 3. Identify processes and parent chains, inspect DLLs and handles, dump suspicious regions and more
- [PowerShell for Hackers - Survival Edition, Part 4: Blinding Defenders](https://hackers-arise.com/powershell-for-hackers-survival-edition-part-4-blinding-defenders/) - Learn to stay invisible by abusing native Windows binaries, living-off-the-land techniques and scripting engines for stealthy execution.
- [Intermediate Cryptography Training, November 4-6](https://hackers-arise.com/intermediate-cryptography-training-october-28-30/) - Cryptography is a fundamental skill to cybersecurity! Cryptography is what keeps our systems and data secure. Without it, all of our information is at risk. This class to designed to give you a strong background in cryptography further enhancing you knowledge and skill in this key field making you even more valuable in the cybersecurity
- [Security Operations Center (SOC):Getting Started with SOC](https://hackers-arise.com/security-operations-center-socgetting-started-with-soc/) - Welcome back, aspiring cyberwarriors! In today's highly targeted environment, a well-designed Security Operations Center (SOC) isn't just an advantage - it's essential for a business's survival. In addition to that, the job market has far more jobs on the blue team than the red team. Getting into a SOC is often touted as one of
- [Cyber Threat Intelligence (CTI): Finding C2 Servers, Malware and Botnets](https://hackers-arise.com/cyber-threat-intelligence-cti-finding-c2-servers-malware-and-botnets/) - Welcome back my cyberwarriors! One of the key tasks for those defending a country’s, institution’s or corporation’s assets is to understand what threats exist. This is often referred to as Cyber Threat Intelligence or CTI. It encompasses understanding what the threat actors (hackers and nations) are doing and which are threats to your organization. In
- [Hacking Artificial Intelligence (AI): Hijacking AI Trust to Spread C2 Instructions](https://hackers-arise.com/hacking-artificial-intelligence-ai-hijacking-ai-trust-to-spread-c2-instructions/) - Welcome back, aspiring cyberwarriors! We’ve come to treat AI assistants like ChatGPT and Copilot as knowledgeable partners. We ask questions, and they provide answers, often with a reassuring sense of authority. We trust them. But what if that very trust is a backdoor for attackers? This isn't a theoretical threat. At the DEF CON security
- [PowerShell for Hackers-Survival Edition, Part 3: Know Your Enemy](https://hackers-arise.com/powershell-for-hackers-survival-edition-part-3-know-your-enemy/) - Understand what telemetry defenders rely on to minimize noisy moves and reduce detection.
- [Sliver, Command and Control (C2): Building a Persistent C2, Part 4](https://hackers-arise.com/sliver-command-and-control-c2-building-a-persistent-c2-part-4/) - “Often, the battle goes not to the strongest, but rather to the most persistent.” — OTW In earlier articles, we walked through everything from getting the first C2 online to gaining a foothold on a machine and escalating privileges. Most of the hard work is done. Once you’ve got high-level access, you’re in a strong
- [Open Source Intelligence (OSINT): Infrastructure Reconnaissance and Threat Intelligence in Cyberwar with Overpass Turbo](https://hackers-arise.com/osint-advanced-queries-overpass-turbo/) - Welcome back, aspiring cyberwarriors! In previous tutorials, you've learned the basics of Overpass Turbo and how to find standard infrastructure like surveillance cameras and WiFi hotspots. Today, we're diving deep into the advanced features that transform this web platform from a simple mapping tool into a sophisticated intelligence-gathering system. Let's explore the unique capabilities of
- [SCADA (ICS) Hacking and Security: An Introduction to SCADA Forensics](https://hackers-arise.com/scada-forensics-introduction/) - Learn how SCADA forensics bridges industrial control and cybersecurity. Find out how we collect and analyze evidence from PLCs, RTUs, HMIs, and control networks while keeping operations safe.
- [Logic Basics for Cybersecurity, Part 2 Propositional Logic Basics](https://hackers-arise.com/logic-basics-for-cybersecurity-part-2-propositional-logic-basics/) - Welcome back, my aspiring cyberwarriors! In an earlier post, I introduced you to logic. Logic is one of the most under-rated skills in cybersecurity. Without it, you are destined to fail or underperform. In this tutorial, I will attempt to advance your knowledge of logic by introducing you to propositional logic. Propositional logic is used
- [Network Forensics: Analyzing a Server Compromise (CVE-2022-25237)](https://hackers-arise.com/network-forensics-analyzing-a-server-compromise-cve-2022-25237/) - Tracing a server compromise from credential stuffing to CVE-2022-25237 exploitation that led to SSH-key persistence. All with the help of Wireshark
- [The Dunning-Kruger Effect: When Confidence Talks Louder Than Skill](https://hackers-arise.com/the-dunning-kruger-effect-when-confidence-talks-louder-than-skill/) - The Dunning-Kruger effect shows why confidence often peaks before competence. In cybersecurity, it’s a reminder that curiosity, not certainty, builds true skill.
- [Open Source Intelligence (OSINT): Using Overpass Turbo for Strategic CyberWar Intelligence Gathering](https://hackers-arise.com/open-source-intelligence-osint-using-overpass-turbo-for-strategic-cyberwar-intelligence-gathering/) - Welcome back, aspiring cyberwarriors! In the first article, we explored how to use Overpass Turbo reveals some valuable assets. In this article, we'll explore how this web-based OpenStreetMap mining tool can be weaponized for reconnaissance operations, infrastructure mapping, and target identification in cyber warfare scenarios. Let’s get rolling! Why Overpass Turbo Matters in Cyber Warfare
- [PowerShell: Moving from Bash to PowerShell](https://hackers-arise.com/powershell-moving-from-bash-to-powershell/) - Map familiar Bash commands to their PowerShell equivalents and learn practical one-liners for file, text, network, and system tasks.
- [Google Dorks for Reconnaissance: How to Find Exposed Obsidian Vaults](https://hackers-arise.com/google-dorking-discovering-exposed-obsidian-vaults/) - Welcome back, aspiring cyberwarriors! In the world of OSINT Google dorking remains one of the most popular reconnaissance techniques. While many hackers focus on finding vulnerable web applications or exposed directories, there's a goldmine of sensitive information hiding in plain sight: personal knowledge bases and note-taking systems that users inadvertently expose to the internet. Today,
- [OSINT: Finding Surveillance Cameras with Overpass Turbo](https://hackers-arise.com/osint-finding-surveillance-cameras-with-overpass-turbo/) - Welcome back, aspiring cyberwarriors! In the reconnaissance phase of any security engagement, information gathering is paramount. Previously, we discussed using Google Earth Pro for investigations. Today, let’s shift our focus from satellite OSINT to map‑based reconnaissance. Many of you are already familiar with Google Maps and its alternatives, such as OpenStreetMap (OSM). But did you know that you can
- [PowerShell for Hackers, Part 1: The Basics](https://hackers-arise.com/powershell-for-hackers-part-1-the-basics/) - Welcome back, my aspiring cyberwarriors! Today we start our series on PowerShell for hackers. In this opening article, we explore the core techniques of PowerShell, starting with foundational concepts before advancing to topics like PowerShell and LDAP filters, leveraging PowerView, and crafting scripts for tasks such as establishing backdoors, exfiltrating data, and extracting password hashes.
- [PowerShell for Hackers, Part 8: Privilege Escalation and Organization Takeover](https://hackers-arise.com/powershell-for-hackers-privilege-escalation-and-organization-takeover/) - Use AMSI bypasses, Mimikatz, and PowerUp to escalate from a single foothold into full domain compromise
- [PowerShell for Hackers, Part 7: Detecting Users, Media Control, and File Conversion](https://hackers-arise.com/powershell-for-hackers-part-5-detecting-users-media-control-and-file-conversion/) - Use our PowerShell scripts to detect user presence, convert and move files as text, and install simple autostart persistence.
- [PowerShell for Hackers, Part 6: Evading Detection](https://hackers-arise.com/powershell-for-hackers-evading-detection/) - Obfuscation is the hacker’s camouflage. Make PowerShell payloads harder to spot by defenders and SIEM filters.
- [PowerShell for Hackers, Part 5: How to Crash and Burn Windows with Powershell](https://hackers-arise.com/powershell-for-hackers-how-to-crash-and-burn-windows-with-powershell/) - Learn how PowerShell can be weaponized for maximum disruption. From RAM and CPU overloads to wiping licenses, disabling hardware, and corrupting the Master Boot Record.
- [PowerShell for Hackers - Survival Edition, Part 1: Basic Recon](https://hackers-arise.com/powershell-for-hackers-survival-edition-part-1/) - Learn how to survive inside hostile Windows environments with PowerShell Survival Edition. Part 1 covers commands for careful enumeration with survival in mind.
- [PowerShell for Hackers - Survival Edition, Part 2: Advanced Recon](https://hackers-arise.com/powershell-for-hackers-finding-modules-and-using-dsquery/) - Use built-in AD modules and Invoke-Command to run focused queries remotely, staying under the radar while exploring the environment.
- [Digital Forensics: Investigating a Ransomware Attack](https://hackers-arise.com/digital-forensics-investigating-a-ransomware-attack/) - Analyzing a memory dump after a ransomware attack with Volatility to find processes, parent–child chains, injected code, and other valuable artifacts
- [Getting Started with the Raspberry Pi for Hacking: Using Spiderfoot for OSINT Data Gathering](https://hackers-arise.com/getting-started-with-the-raspberry-pi-for-hacking-using-spiderfoot-for-osint-data-gathering/) - Welcome back, aspiring hackers! Raspberry Pi is a great starting point for exploring cybersecurity and hacking in particular. You can grab a $50 board, connect it to the TV, and start learning. Otherwise, you can install the OS on the Pi and control it from your phone. There are a lot of opportunities. In this article,
- [Using Digital Forensic Techniques to Compromise Russian Linux Systems](https://hackers-arise.com/using-digital-forensic-techniques-to-compromise-russian-linux-systems/) - Welcome back, cyberwarriors. In today’s article, we will walk through a real-world compromise that was made possible through digital forensics. During one of our recent engagements, we landed on a machine located outside the primary domain. Unfortunately, this system held no immediately useful credentials or access paths for lateral movement. Our team attempted a variety
- [Python Basics for Hackers: Building a Wi-Fi Scanner Capable of Locating the Position of Local AP's](https://hackers-arise.com/python-basics-for-hackers-building-a-wi-fi-scanner-capable-of-locating-the-position-of-local-aps/) - Hackers Arise Wi-Fi Radar Welcome back, aspiring cyberwarriors! One of our advanced student who goes by the handle Mike211 has developed a Wi-Fi scanning script that we want to share with all of you. What makes this script different and special is it's ability to locate the Wi-Fi access points (AP) in your area. I"ll
- [Advanced Linux Persistence: Strategies for Remaining Inside a Linux Target](https://hackers-arise.com/advanced-linux-persistence-strategies-for-remaining-inside-a-linux-target/) - From memory-only implants and OS configuration tricks to LD_PRELOAD hooks, rc.local startup hooks, and cloud-relay tunneling. A strategic playbook shows how advanced techniques complement basic persistence to build a resilient foothold.
- [How to Find an Entry-Level Job in Cybersecurity](https://hackers-arise.com/how-to-find-an-entry-level-job-in-cybersecurity/) - Welcome back, my aspiring cyberwarriors! So many of you have written me about the difficulties of finding an entry-level job in cybersecurity that I thought I should offer you some of my insights. At this moment in history, artificial intelligence (AI) is making it particularly difficult to find that entry-level job as companies are using
- [Advanced Windows Persistence, Part 2: Using the Registry to Maintain Persistence](https://hackers-arise.com/advanced-windows-persistence-part-2-using-the-registry-to-maintain-persistence/) - Learn registry-based Windows persistence with AppInit DLLs, LSASS packages, Winlogon hijacks, and Office keys. These methods survive reboots.
- [SDR (Signals Intelligence) for Hackers: Capturing Aircraft Signals](https://hackers-arise.com/sdr-signals-intelligence-for-hackers-capturing-aircraft-signals/) - Airplanes constantly broadcast unencrypted ADS-B signals at 1090 MHz, see how we captured and interpreted that data with dump1090 and BladeRF
- [Web App Hacking: Finding Web App Vulnerabilities with Caido Scanner](https://hackers-arise.com/web-app-hacking-finding-vulnerabilities-with-caido-scanner/) - Welcome back, my aspiring cyberwarriors! Caido continues to grow in popularity in the tech community, and it's well-deserved. Since the publication of our previous articles, developers have brought improvements to the Replay, Match & Replace tabs, updated the Plugin Store, and even more. There are dozens of different plugins that significantly improve the functionality of
- [Network Basics for Hackers, Part 05: Domain Name Service (DNS) and BIND. How it Works and How it Breaks](https://hackers-arise.com/network-basics-for-hackers-domain-name-service-dns-and-bind-how-it-works-and-how-it-breaks/) - Welcome back, my aspiring cyber warriors!The Domain Name System or DNS is one of those network protocols that makes the world go round. Without it, we would need to remember innumerable IP addresses just to navigate to our favorite web sites. Imagine trying to remember the IPv4 (32-bit) addresses of Facebook, Amazon and Hackers-Arise, just
- [Getting Started with the Raspberry Pi: How to Install Kali Linux ARM Edition](https://hackers-arise.com/hacking-with-the-raspberry-pi-install-kali-linux-arm-edition/) - Welcome back, my aspiring cyberwarriors! The Raspberry Pi is small and affordable single-board computer that has become extraordinarily popular. Built upon the powerful and efficient ARM processor, it can be used for hacking and pentesting! It might be the ideal, low-cost platform to start your journey in cybersecurity. Installing Kali Linux on a Raspberry Pi
- [Building Command and Control (C2) Server During a Cyber War, Part 5 : Domain Reconnaissance](https://hackers-arise.com/building-command-and-control-c2-server-during-a-cyber-war-part-5-domain-reconnaissance/) - Welcome back, cyberwarriors. We are continuing our session on Sliver C2 and practicing in a real environment. It's always best to apply your skills in the real world, where you learn fast. Your actions must be well thought-out and careful to avoid detection. The goal is to gain knowledge about the environment you’ve entered and
- [Hacking with the Raspberry Pi: Cracking Wi‑Fi](https://hackers-arise.com/hacking-with-the-raspberry-pi-cracking-wi‑fi/) - The humble Raspberry Pi has evolved far beyond its origins in learning programming and DIY projects. With its compact form factor, low power consumption, and impressive capabilities, Raspberry Pi makes a great platform for portable hacking. In this article, I'd like to begin a series about using the Raspberry Pi as a hacking platform. Today,
- [Reverse Engineering Malware: Getting Started with Ghidra, Part 01](https://hackers-arise.com/reverse-engineering-malware-getting-started-with-ghidra-part-1/) - Welcome back, my aspiring cyber warriors! There are a number of excellent tools available to use in the field of reverse engineering (see Reverse Engineering, Part 3: Getting Started with IDA Pro and Part 5: Getting Started with OllyDbg ), but now we have an excellent new option known as Ghidra. Ghidra was developed by
- [ARM Assembly for Hackers, Part 2: Leveraging GDB to Understand the ADD Instruction](https://hackers-arise.com/arm-assembly-for-hackers-part-2-leveraging-gdb-to-understand-the-add-instruction/) - Welcome back, cyberwarriors! In a previous article, we explored some of the ARM assembler commands. Today, we will delve into the practical application of the ADD instruction. By leveraging the power of the GNU Debugger (GDB), we will explore how to analyze and manipulate this instruction to gain deeper insights into ARM architecture. Prepare an
- [Sliver: Building C2 During a Cyber War - Part 6: Lateral Movement](https://hackers-arise.com/sliver-building-c2-during-a-cyber-war-part-6-lateral-movement/) - Welcome back, cyberwarriors. In our previous chapter, we explored domain reconnaissance and emphasized how critical it is to understand your target environment in depth. Even a small Active Directory domain can contain a surprisingly complex network of access control lists (ACLs), security groups, machines, Group Policy Objects (GPOs), and other components. To effectively navigate that
- [Digital Forensics: Analyzing a USB Flash Drive for Malicious Content](https://hackers-arise.com/digital-forensics-analyzing-a-usb/) - Analyzing a malicious USB by extracting its files, finding autorun artifacts and embedded PDF payloads.
- [ARM Assembly for Hackers: Learning 32-bit Architecture for Exploit Development](https://hackers-arise.com/arm-assembly-for-hackers-learning-32-bit-architecture-for-exploit-development/) - You may have already noticed that ARM processors are everywhere — in phones, routers, smart TVs, and of course, IoT devices. In fact, ARM has become one of the most widely used CPU architectures globally. And just like traditional PCs, ARM-based IoT devices are vulnerable to classic exploitation techniques — such as buffer overflows. If
- [Counter-Surveillance: How to Know Whether You Are Being Followed](https://hackers-arise.com/physical-surveillance-detection-using-chasing-your-tail-to-know-if-youre-being-followed/) - Welcome back, aspiring cyberwarriors! In our line of work, situational awareness is everything. Whether you're conducting a sensitive penetration test, meeting with a whistleblower, or simply need to know if that black sedan has been behind you for the last three stops - having the ability to detect physical surveillance could be the difference between
- [Major Retailers are Spying on You!: How to Prevent it](https://hackers-arise.com/major-retailers-are-spying-on-you-how-to-prevent-it/) - This iconic scene in Minority Report where purchases are tied to bio-metrics is no longer science fiction, it is your impending future. In more and more stores, networked cameras tag your face, follow your path, and link this information to loyalty profiles and purchase histories. In an era of rising surveillance, retail harvesting may seem
- [Network Espionage - Using Russian Cameras as Proxy, Part 3](https://hackers-arise.com/network-espionage-using-russian-cameras-as-proxy-part-3/) - Welcome back, cyberwarriors. Hope you’re enjoying the series so far. Today we are wrapping it up with the final part, focused on modifying camera firmware. This is the most advanced and risky method. It takes time and precision. The biggest challenge is finding firmware that’s suitable for editing and compiling back without breaking the device.
- [The One-Man APT with Artificial Intelligence, Part III: From Zero to Local Dominance](https://hackers-arise.com/the-one-man-apt-with-articial-intelligence-part-iii-from-zero-to-local-dominance/) - With in-memory execution and simulated exfiltration already in place, the next step was obvious: persistence. Advanced threats like Koske don’t just run once—they stay alive, blend into the system, and return after every reboot. That’s exactly what I set out to replicate in this phase. The goal? To see if the AI could not only
- [The One-Man APT, Part I: A Picture That Can Execute Code on the Target](https://hackers-arise.com/the-one-man-apt-part-i-a-picture-that-can-execute-code-on-the-target/) - Have you ever wondered if it’s possible to replicate the stealthy behavior of a modern cyber‑attack using artificial intelligence? As part of my research, I focused on the techniques used by a Linux-based threat known as Koske — malware that cleverly hides inside AI-generated panda images and executes a range of actions like in-memory code
- [The One-Man APT – Part II: Stealthy Exfiltration with AI](https://hackers-arise.com/the-one-man-apt-part-ii-stealthy-exfiltration-with-ai/) - In the first part of this project, I explored how artificial intelligence can be used to simulate the early stages of a stealthy APT—focusing on polyglot files, in-memory execution, and basic command-and-control behavior. Everything was generated by the AI: from code to corrections, including full payload packaging inside an image file. Escalating the Simulation: Persistence
- [What is Quantum Computing How Does It Threaten Cybersecurity?](https://hackers-arise.com/what-is-quantum-computing-how-does-it-threaten-cybersecurity/) - Welcome back, my aspiring cyberwarriors! For decades now, people have been talking with baited breath about quantum computing and its potential to revolutionize computing. So far, no commercial products have appeared. This isn't dissimilar (I know, a double negative) from what happened to artificial intelligence. For decades, people talked about the promise of AI, and
- [ARM Assembly: Getting Started](https://hackers-arise.com/arm-assembly-getting-started/) - Welcome back, aspiring security researchers! In the world of offensive security, understanding assembly language is important for exploit development, reverse engineering, and vulnerability research. Whether you're analyzing malware, developing proof-of-concept, or conducting security assessments on ARM-based IoT devices, assembly knowledge gives you the skills to understand how vulnerabilities actually work at the processor level. As
- [It's Time to Elevate Your Cybersecurity Game! Earn the Crown Jewel of Cybersecurity Certifications!](https://hackers-arise.com/it-s-time-to-elevate-your-cybersecurity-game-earn-the-crown-jewel-of-cybersecurity-certifications/) - The CISSP is widely considered to be the premier cybersecurity certifications. The average salary in the US is almost $150,000 and I'll bet your boss has one. If not, their boss is certified with the CISSP. This is your ticket to a rewarding, high-paying career in cybersecurity. A Four-Day boot camp, September 23-26 Now, you
- [Password Cracking: Stealing SSH Credentials with PAM](https://hackers-arise.com/password-cracking-stealing-ssh-credentials-with-pam/) - Patch PAM on Linux to harvest SSH credentials in real time. By adding a logging script into the authentication chain, every password-based login is silently captured.
- [Can Hackers "See" Inside Your Home Using Wi-Fi to Track Your Location and Movement?](https://hackers-arise.com/can-hackers-see-inside-your-home-using-wi-fi-to-tr/) - Welcome back, my aspiring cyberwarriors! The quick answer is "Yes!". It might seem like science fiction, but now we have the capability to "see" through walls and track the location and movement of targets. This is thanks to new technological developments in both artificial intelligence and SDR. Remember, Wi-Fi is simply sending and receiving radio
- [Digital Forensics: Getting Started Becoming a Forensics Investigator](https://hackers-arise.com/digital-forensics-getting-started-becoming-a-forensics-investigator/) - This guide maps out the investigative process and introduces the essential utilities every analyst should know.
- [SCADA Hacking: Inside Russian Facilities, Part 4](https://hackers-arise.com/scada-hacking-inside-russian-facilities-part-4/) - Part 4 – Cyber Cossacks Ops Welcome back, cyberwarriors. In Part 4 we dig deeper into operations by The Cyber Cossacks alongside other Ukrainian hacker units. We’ll expand on the companies we hit, their backgrounds and how we exploited their SCADA environments. Golfstream – St. Petersburg, Russia OOO Golfstream is one of the leading housing
- [Exploit Development: Finding And Overwriting Variables On The Stack](https://hackers-arise.com/exploit-development-finding-and-overwriting-variables-on-the-stack/) - Hi there, aspiring cyberwarriors! In the previous article, we discussed creating a stack and locating variables within it. Today, let's dive into overwriting variables, a key concept that will help build your foundational knowledge in exploit development. When variables are stored in memory, they follow specific patterns and rules that determine how they can be
- [Digital Forensics: System Monitoring with osquery](https://hackers-arise.com/digital-forensics-system-monitoring-with-osquery/) - Welcome back, aspiring cyberwarriors! In a modern environment, numerous devices can be connected to an organization's infrastructure and networks. Security teams and digital forensics professionals tasked with tracking and gathering information from these devices need a tool that allows them to query the operating system like a database. And we have a tool for this
- [Bug Bounty Hunting, Part 02: Stealthy Parameter Detection with ParamSpider](https://hackers-arise.com/bug-bounty-hunting-part-2-stealthy-parameter-detection-with-paramspider/) - Welcome back, my aspiring cyberwarriors!When attempting to hack/pentest a website, it can be extremely useful to get the parameters of various pages. These might include php, woff, css, js, png,svg, php, jpg and others. Each of these parameters might indicate a particular vulnerability such as SQL injection, XSS, LFI, and others. When we have discovered
- [Python Basics for Hacker is Now Available for Pre-Order](https://hackers-arise.com/python-basics-for-hacker-is-now-available-for-pre-order/) - Due to overwhelming demand from our students and readers, Python Basics for Hackers is now available for preorder. We estimate a publication date of September 2025. This book designed for those who want to enter cybersecurity but have little or no coding experience. To truly reach the pinnacles of cybersecurity, you really need python. Python is the scripting
- [Mobile Hacking: How the Mexican Drug Cartels Built their Own Cellular Infrastructure to Avoid Surveillance](https://hackers-arise.com/mobile-hacking-how-the-mexican-drug-cartels-built-their-own-cellular-infrastructure-to-avoid-surveillance/) - Welcome back, my aspiring cyberwarriors!Mobile hacking can take many forms. It can entail any of the following;(1) a hack against a singular phone such Pegasus and many other IoS and Android malware,(2) an attack against the mobile infrastructure such as SS7 (Chinese hackers have recently compromised the entire US telecom system using SS7), or(3) you
- [Advanced Windows Persistence, Part 1: Remaining Inside the Windows Target](https://hackers-arise.com/advanced-windows-persistence-part-1-remaining-inside-the-windows-target/) - Learn advanced Windows persistence through hidden accounts, registry hijacks, IFEO tricks, GFlags abuse, and WMI event subscriptions. These stealthy techniques weaponize system settings to ensure durable backdoors across reboots.
- [PowerShell for Hackers, Part 4: Operational Scripts](https://hackers-arise.com/powershell-for-hackers-part-4-operational-scripts/) - Welcome back, aspiring cyberwarriors! Now that you know the basics, we’re ready to start writing our own scripts. There will be times when off-the-shelf tools won’t do exactly what you need, or when certain repetitive tasks begin to eat up time and attention. That’s when you’ll need to start developing your own scripts that are
- [Web App Hacking: Automated Security Workflows in Caido](https://hackers-arise.com/web-app-hacking-automated-security-workflows-in-caido/) - Welcome back, hacker novitiates! In previous articles, we explored some of Caido’s basic features, which are generally similar to those found in Burp Suite and ZAP. In today’s article, I’d like to demonstrate how Caido enables you to automate the testing process through its intuitive visual interface. Step #1: Fire up Kali and Caido For
- [Open Source Intelligence: Free Satellite Services for Investigations](https://hackers-arise.com/open-source-intelligence-free-satellite-services-for-investigations/) - Welcome back, hacker novitiates! Satellites have become a crucial element in our modern economies. No modern military can operate effectively without up-to-date visual and signal intelligence. The good news is that we don’t need a security clearance or military service to access this data. It’s all openly available, and as OSINT practitioners, we should be
- [Post Exploitation: Maintaining Persistence in Windows](https://hackers-arise.com/post-exploitation-maintaining-persistence-in-windows/) - Learn basic Windows persistence to maintain access through shell loops, autostart entries, scheduled tasks, services, and in-memory payloads. Each method balances stealth, privilege, and durability.
- [Web App Hacking: Online Password Cracking with Caido](https://hackers-arise.com/web-app-hacking-online-password-cracking-with-caido/) - Welcome back, hacker novitiates! While tools like Burp Suite have dominated web hacking for years, today I’d like to show you how to conduct a password attack using Caido. Caido brings a fresh approach to web application penetration testing with its clean interface, powerful features, and developer-friendly design (an introduction to this tool can be
- [How to DoS a Media Server: The Memory Leak Vulnerability in ffmpeg (CVE-2025-25469)](https://hackers-arise.com/how-to-dos-a-media-server-the-memory-leak-vulnerability-in-ffmpeg-cve-2025-25469/) - Welcome back, cyberwarrior novitiates! In a previous article, we used FFmpeg for streaming camera videos. However, it’s important to keep in mind that FFmpeg is one of the most ubiquitous multimedia processing tools worldwide. It is used in everything from streaming platforms and media servers to desktop applications and mobile software. In this article, I’d
- [Digital Forensics: Extracting PDF Metadata](https://hackers-arise.com/digital-forensics-extracting-pdf-metadata/) - Welcome back, cyberwarrior novitiates! PDF files often store metadata that can reveal valuable information such as the document author, creation and modification dates, software used, and even embedded scripts or hidden content that may be leveraged during OSINT investigations, legal investigations, cyber operations, or penetration tests. In this article, I’d like to show you how
- [CyberWar: Compromising a Russian Dispatch Service](https://hackers-arise.com/cyberwar-compromising-a-russian-dispatch-service/) - A single unprotected workstation was abused to harvest credentials, gain domain-admin access, and deploy stealth backdoors across virtual servers, routers, and telephony systems. Within hours the dispatch service was rendered inoperable.
- [Metasploit Basics for Hackers: Evading Windows Anti-Virus (AV)](https://hackers-arise.com/metasploit-basics-for-hackers-evading-windows-anti-virus-av/) - Welcome back, my aspiring cyberwarriors! In this series, we are looking at using the wold's most popular hacking framework, Metasploit. As Metasploit has become more popular, the major anti-virus developers have found ways to detect and remove metasploit based payloads making it increasingly difficult to successfully exploit these systems with Metasploit. In this tutorial, I
- [Sliver in a Cyberwar - Kerberoasting and DACL Abuse](https://hackers-arise.com/sliver-in-a-cyberwar-kerberoasting-and-dacl-abuse/) - Sliver can be used to find weak permissions and exposed accounts. Hackers may steal credentials, gain long-term high-level access, and spread through the network.
- [Linux Persistence: Strategies for Survival in a Cyber War](https://hackers-arise.com/linux-persistence-strategies-for-survival-in-a-cyber-war/) - Basic persistence on Linux in a cyberwar covers the fundamental ways you can maintain access after compromise. Each offering different trade-offs in longevity and stealth.
- [Machine Learning, Part 01: Getting Started with the Basics](https://hackers-arise.com/machine-learning-part-01-getting-started-with-the-basics/) - Welcome back, my aspiring AI practitioners! Often, to build intelligent systems, we need to tackle complex problems that traditional programming simply can't handle efficiently. It might be recognizing objects in images, understanding human speech, or predicting future trends. The key, of course, is to let machines learn these patterns themselves, rather than trying to code
- [Open Source Intelligence (OSINT): Leaked Secrets with TruffleHog](https://hackers-arise.com/open-source-intelligence-osint-leaked-secrets-with-trufflehog/) - TruffleHog scans Git repositories and their full history to find high-entropy strings and regex matches that indicate exposed secrets. When combined with dumped .git data, those findings can reveal credentials that give access to databases, cloud accounts, or third-party services.
- [SCADA Hacking and Security - Compromising Russian IoT Systems](https://hackers-arise.com/scada-hacking-and-security-compromising-russian-iot-systems/) - Welcome back, cyberwarriors. We continue our series on SCADA system compromise with another significant breach that recently occurred. In the context of the ongoing cyber conflict in Ukraine, our team of Cyber Cossacks successfully compromised yet another Russian organization responsible for deploying and overseeing meter systems throughout Russian regions and occupied Crimea. For years, this
- [Exploit Development: Format String Vulnerability](https://hackers-arise.com/exploit-development-format-string-vulnerability/) - Welcome back, my aspiring cyber warriors! In the world of cybersecurity, some vulnerabilities persist despite being well-known for decades. Format string vulnerabilities are among these enduring security issues that continue to plague software systems. Despite being over twenty years old, format string vulnerabilities are still found in dozens of real systems every year, potentially leading
- [ARM CPU Architecture: The Power of Simplicity and Efficiency](https://hackers-arise.com/arm-cpu-architecture-the-power-of-simplicity-and-efficiency/) - Welcome back, hacker novitiates! In today's digital world, ARM processors are everywhere! Nearly every phone and tablet uses ARM processors. The new Apple products now all have ARM processors. Some lightweight notebooks, such as Chromebooks, use ARM processors. IoT devices are largely powered by ARM. Soon, artificial intelligence, now dominated by NVIDIA GPU's, will be
- [SCADA Hacking: Taking Over a Russian Gas Station](https://hackers-arise.com/scada-hacking-taking-over-a-gas-station/) - Welcome back cyberwarriors! We are continuing our series on SCADA exploitation with another successful operation added to the record. This time, our focus shifts to a gas station. This breach didn’t originate with the gas station itself, but rather through an administrator’s personal workstation who worked at a different company. Low Russian wages and poor
- [PowerShell for Hackers, Part 3: Exploring PowerView](https://hackers-arise.com/powershell-for-hackers-part-3-exploring-powerview/) - Welcome back, cyberwarriors! Having covered the fundamentals of PowerShell, its filters, and LDAP queries, we’re now ready to approach PowerView. PowerView is a PowerShell tool designed for Active Directory enumeration and reconnaissance, commonly used in offensive security assessments. It helps identify domain users, groups, computers, permissions, trust relationships, and misconfigurations that could be exploited for
- [OSINT for Business: Getting Started Using Open-Source Techniques for Business](https://hackers-arise.com/osint-getting-started-with-business-intelligence/) - Welcome back, aspiring hackers! Who truly earns the money? Who owns the business? Who is responsible for criminal activities or questionable operations? These are the crucial questions that journalists and OSINT investigators grapple with today. Sometimes, the answers are straightforward and clear. But more often they’re not. This guide will introduce you to the core
- [Supply Chain Attack: Getting Started with LottieFiles Case](https://hackers-arise.com/supply-chain-attack-getting-started-with-lottiefiles-case/) - Welcome back, hacker novitiates! Supply chain attacks have become one of the most powerful weapons in a threat actor's arsenal. Rather than striking a target directly, attackers compromise a third-party supplier—such as software vendors, managed service providers (MSPs), or open-source projects—to gain broad, downstream access. In this tutorial, we will take a look at LottieFiles
- [Feroxbuster. Is It The Fastest Content Discovery Tool?](https://hackers-arise.com/feroxbuster-is-it-the-fastest-content-discovery-tool/) - Welcome back, tenderfoot hackers! Web content discovery is a crucial phase in web application hacking. The ability to efficiently enumerate directories, files, and endpoints on a web server can uncover hidden attack surfaces—such as admin panels, backup files, and sensitive resources—that aren't directly linked within the main application. For years, tools like DIRB were the
- [Web App Hacking: OWASP-ZAP Introduction](https://hackers-arise.com/web-app-hacking-owasp-zap-introduction/) - Welcome back, aspiring hackers! Web apps are often the best vector to an organization’s server/database, an entry point to their entire internal network. By definition, the web app is designed to take an input from the user and send that input back to the server or database. In this way, the attacker can send their
- [CVE-2025-53770: Critical SharePoint Zero-Day Under Active Exploitation](https://hackers-arise.com/cve-2025-53770-critical-sharepoint-zero-day-under-active-exploitation/) - Welcome back, rookie hackers! CVE-2025-53770 is a critical remote code execution (RCE) vulnerability with a CVSS score of 9.8 that affects on-premises Microsoft SharePoint servers. This vulnerability has been actively exploited in the wild as a zero-day by unknown threat actors and is part of the notorious "ToolShell" exploit chain that enables unauthenticated attackers to
- [Insecure De-serialization: Millions of Applications May Be Vulnerable](https://hackers-arise.com/insecure-de-serialization-millions-of-applications-may-be-vulnerable/) - Welcome back, rising cyberwarriors! Insecure deserialization represents one of the most critical security vulnerabilities in modern software applications, ranking among OWASP's Top 10 Web Application Security Risks (part of Software and Data Integrity Failures). This vulnerability occurs when applications deserialize untrusted data without proper validation, potentially allowing attackers to execute arbitrary code, manipulate application logic,
- [Software Defined Radio for Hackers, Part 05: How to Track Aircraft with SDR](https://hackers-arise.com/software-defined-radio-for-hackers-part-5-how-to-track-aircraft-with-sdr/) - Welcome back, my aspiring radio hackers! Nearly every vehicle in the world gives off/sends out a radio signal of one type or another. This applies to cars, planes, ships, and nearly everything else. These radio signals can be used to track the location of these vehicles with a simple device such as the RTL-SDR. Nearly
- [IP Camera Hacking: The FFmpeg Tool for Streaming Camera Video](https://hackers-arise.com/ip-camera-hacking-the-ffmpeg-tool-for-streaming-camera-video/) - Welcome back, aspiring cyberwarriors! As you know, Hackers-Arise has been deeply involved in the cyberwar to help save Ukraine from the brutal Russian aggression. As part of that effort, we were asked by the Ukrainian military to hack IP cameras throughout Ukraine in order to spy on Russian activities. As part of that
- [Powershell for Hackers, Part 2: LDAP Filters for Active Directory Reconnaissance](https://hackers-arise.com/powershell-for-hackers-part-2-filters/) - Welcome back to our PowerShell for Hackers series! Today, we’ll explore a more advanced topic: PowerShell and LDAP filters. These tools allow precise searches within Active Directory (AD). LDAP is a protocol used for querying directory services to retrieve details about user accounts, computers, groups, or policies. By using LDAP filters in PowerShell scripts, you
- [Taking Over a Russian Domain using Techniques from Digital Forensics](https://hackers-arise.com/taking-over-a-russian-domain-using-techniques-from-digital-forensics/) - Welcome back, cyberwarriors. Cyber Cossacks here with a new walkthrough. In a recent engagement, we managed to take control of an entire domain starting from a separate machine that wasn’t joined to it. In modern enterprise networks, virtualization and segmented infrastructure are often used as safeguards. For some administrators it’s an architectural illusion of security
- [How Artificial Intelligence (AI) Large Language Models (LLMs) Work, Part 1](https://hackers-arise.com/how-artificial-intelligence-ai-large-language-models-llms-work-part-1/) - Welcome back, my aspiring cyberwarriors! We are living on the cusp of one of the most exciting eras in the history of technology! Artificial Intelligence (AI) is about to change everything we do and change the way the world operates. This change will likely be more dramatic and consequential than the invention of printing press
- [OSINT: Tracking the Suspect's Precise Location Using Wigle.net](https://hackers-arise.com/osint-tracking-the-suspects-precise-location-using-wigle-net/) - Welcome back, my aspiring OSINT investigators! There is SO much information available to us on the Internet that sometimes it can be overwhelming in its scope. It is up to the professional OSINT investigator to find the key data source and extract the necessary information. In some investigations, we may have information on the Wi-Fi
- [Critical Remote Code Execution (RCE) in Roundcube, CVE-2025-49113: Your Email is Not Safe!](https://hackers-arise.com/critical-remote-code-execution-rce-in-roundcube-cve-2025-49113-your-email-is-not-safe/) - Welcome back, rookie cyberwarriors! Roundcube is one of the most widely used open-source webmail clients, integrated by default into major hosting platforms such as cPanel and Plesk. In June 2025, a critical security vulnerability — CVE-2025-49113 — was publicly disclosed. This flaw allows remote code execution (RCE) by authenticated users, potentially putting more than 53
- [Who is Fancy Bear (APT28) and What Do They Do?](https://hackers-arise.com/who-is-fancy-bear-apt28-and-what-do-they-do/) - Welcome back, aspiring cyberwarriors! Understanding Advanced Persistent Threats (APTs) is essential for anyone working in cybersecurity, as they represent some of the most sophisticated and stealthy attacks in the digital world. Among these threats, APT28—also known as Fancy Bear, Sednit, or Sofacy—stands out as one of the most skilled and persistent hacking groups in the
- [Mobile Forensics, Part 1: The Fundamentals and Best Tools for Mobile Forensics](https://hackers-arise.com/mobile-forensics-part-1-the-fundamentals-and-best-tools-for-mobile-forensics/) - Welcome back, my aspiring cyberwarriors! In June 2007, Apple introduced the smartphone. Since then, this model of mobile device has come to dominate the mobile market. As the smartphone has proliferated across the globe, these devices have become the repositories of our personal and professional lives. Stored inside these devices are; Our text messages Our
- [SCADA Hacking: Inside Russian SCADA/ICS Facilities](https://hackers-arise.com/scada-hacking-inside-russian-scada-ics-facilities/) - Part 1 - Intro SCADA hacking is one of the most dangerous forms of cyber attacks today. These systems control industrial processes, critical infrastructure, and manufacturing lines. Despite their importance, most SCADA setups remain poorly secured. They often run on outdated software, use default configurations, and lack even basic protections. Specialists from IOActive and Embedi
- [SCADA Hacking: Inside Russian Facilities, Part 3](https://hackers-arise.com/scada-hacking-inside-russian-facilities-part-3/) - Part 3 - Cyber Cossacks Ops Hello cyberwarriors! We are continuing our series on SCADA hacking, and this time we are diving into operations carried out by our Cyber Cossacks together with other Ukrainian hacker units. The Cyber Cossacks is a team of Ukrainian hackers trained and formed by OTW at the request of Ukrainian
- [Sliver: Building Command and Control (C2) During a Cyber War, Part 3 - Privilege Escalation](https://hackers-arise.com/sliver-building-command-and-control-c2-during-a-cyber-war-part-3-privilege-escalation/) - Welcome back, cyberwarriors! While others are playing capture the flag (CTF) games, our cyber cossacks are playing with live ammunition to keep Putin and his cronies from overwhelming Ukraine with their brutal attacks. Here is the latest installment from Overwatch from the front lines in the cyberwar with Russia. In my previous post, we covered
- [Wi-Fi Hacking: Dragonblood Attacks against WPA3](https://hackers-arise.com/wi-fi-hacking-dragonblood-attacks-against-wpa3/) - Welcome back, aspiring cyberwarriors! In a previous article, we examined the core of WPA3 - the Simultaneous Authentication of Equals (SAE) handshake, also known as Dragonfly. This mechanism replaced WPA2’s vulnerable Pre-Shared Key (PSK) authentication and enhanced overall security. However, within a year of deployment, security researchers identified a comprehensive suite of vulnerabilities collectively known
- [Sliver: Building Command and Control(C2) During a Cyber War, Part 2 - Sessions, Beacons, and Implant Fundamentals](https://hackers-arise.com/sliver-building-command-and-controlc2-during-a-cyb/) - Sessions, Beacons, and Implant Fundamentals Welcome back, cyberwarriors. As we move deeper into the practical workings of Sliver, this second part of our series explores the foundation of every command and control (C2) operation: implants, sessions, and beacons. These core components give Sliver its flexibility and effectiveness across diverse target environments. Understanding how Sliver facilitates
- [Volodymyr, the Ukrainian hacker who sabotages Moscow between two video conferences](https://hackers-arise.com/volodymyr-the-ukrainian-hacker-who-sabotages-mosco/) - Check out this article about our Aircorridor! Aircorridor began as a member of our Cyber Cossack School in Ukraine and now is a full-time staff member of Hackers-Arise. Check out how he and other young Ukrainians are resisting Putin's brutal attempt to bring Ukraine to its knees. We are very proud of you, Aircorridor! Slava
- [CyberWar: Inside the Russian Government!](https://hackers-arise.com/cyberwar-inside-the-russian-government/) - Welcome back, aspiring cyberwarriors! As the digital frontlines of the cyber conflict continue to expand, engagements are no longer isolated events. The campaign now stretches deep into Russia’s internal infrastructure. In a recent operation, the focus turned to the Komi Republic - an expansive and sparsely populated territory in the far north. The target was
- [Sliver: Building a C2 During a Cyber War, Part 1](https://hackers-arise.com/sliver-building-a-c2-during-a-cyber-war-part-1/) - Hello cyberwarriors. This series is about Sliver - a command and control (C2) framework actively used by us, the Cyber Cossacks, during the ongoing cyber war against Russia. We aim to show you the techniques and tactics we use and demonstrate how Sliver can become a powerful and reliable tool when used properly. At its
- [Wi-Fi Hacking: Attacking Air-Gapped Systems via Wi-Fi Emissions](https://hackers-arise.com/wi-fi-hacking-attacking-air-gapped-systems-via-wi-fi-emissions/) - Welcome Back, my aspiring cyberwarriors! One of the tried and true rules of cybersecurity is that if you air-gap your systems and network then you are safe. That was largely true until now! Most famously, Iran had air-gapped their nuclear facilities at Natanz and yet Stuxnet was still able to penetrate that system. This was
- [Sock Puppets: Creating Fake Accounts for OSINT Operations](https://hackers-arise.com/sock-puppets-creating-fake-accounts-for-osint-operations/) - Welcome back, aspiring cyberwarriors! In our line of work, maintaining anonymity while conducting investigations is often critical. Whether you're researching a potential security threat, investigating suspicious activity, or simply gathering intelligence without revealing your identity, the ability to operate undetected is a valuable skill. One of the most effective tools in our arsenal for this
- [CyberWar! Taking Over a Russian Corporate Mail](https://hackers-arise.com/cyberwar-taking-over-a-russian-corporate-mail/) - Welcome back, cyberwarriors. It’s Collateral here again. Today we’ll look at an attack vector that goes beyond password complexity and 2FA. This method proved successful during one of our latest operations targeting a Russian company. The environment we encountered was complex with segmented network and no straightforward access paths. But this is where one of
- [CyberWar: The Breach at Avtodor – Inside a Russian Government Infrastructure Network, Part 1](https://hackers-arise.com/cyberwar-the-breach-at-avtodor-inside-a-russian-government-infrastructure-network-part-1/) - Welcome back, my aspiring cyberwarriors! The conflict between Russia and Ukraine should be a warning bell to all of you of the importance of cyberwar in our modern age. All wars now have an element of cyberwar and the Russia/Ukraine conflict highlights that truth. At the request of Ukrainian officials, we opened a
- [Ukraine/Russia CyberWar! Targeting Russian Websites with SQL Injection](https://hackers-arise.com/ukraine-russia-cyberwar-targeting-russian-websites-with-sql-injection/) - Welcome back, aspiring cyberwarriors! Collateral here again from an undisclosed place in Ukraine. Today we’re diving into SQLMap, one of the most powerful tools for SQL injections. This is the first part of a four-part series where we’ll explore how to manually test and exploit vulnerable targets, go deeper with automation using Nuclei and Python dorking,
- [Ukraine/Russia Cyber War! Using SQLi Against Russian Websites, Part 2](https://hackers-arise.com/ukraine-russia-cyber-war-using-sqli-against-russian-websites-part-2/) - Hello cyberwarriors! This is Collateral from Ukraine again! In the first segment of this series, we walked through different modifications of SQLMap payloads. Today, we’re continuing our SQL injection series, but will focus on automating the scanning process to save time and make it easier to work with larger sets of websites. We’ll
- [Malware Evasion – Evading Russian Antivirus (AV) Applications](https://hackers-arise.com/malware-evasion-evading-russian-antiviruses/) - Welcome back, my cyberwarriors. It’s Collateral here again. Today we’ll walk through one of the obfuscation methods we use during engagements. This time, we’re bypassing well-known Russian antivirus software like Kaspersky, DrWeb, and others that might be running on a typical system. This process is called evasion. The goal is to stay quiet, avoid detection,
- [SCADA Hacking: Inside Russian SCADA/ICS Facilities, Part 2](https://hackers-arise.com/scada-hacking-inside-russian-facilities-part-2/) - Part 2 - Water Towers Welcome back! We are continuing our series on SCADA hacking. Today, we walk through how we compromised a SCADA system controlling several water towers belonging to a well-known company in Russia. Along with the towers, we also gained access to a range of other SCADA systems within the organization from
- [Social Engineering: Delivering Phishing EMail to Russian Companies and Government](https://hackers-arise.com/social-engineering-delivering-phishing-email-to-russian-companies-and-government/) - Welcome back, cyberwarriors. In this article we'll walk you through creating phishing emails and building effective phishing campaigns to target Russia. Our goal is to create a practical guide to help you craft your own campaign. The focus will be on the methods used in real phishing attacks. This articles won't go into the specifics
- [Bash Scripting: Mastering Debugging of Our Password Cracking Script](https://hackers-arise.com/bash-scripting-mastering-debugging-of-our-password-cracking-script/) - Welcome bask, aspiring cyberwarriors! Hackers-Arise has previously published articles on the basics of Bash scripting. During this time, the importance of this skill has not diminished, so today we will explore how to debug your code. And since the best way to learn is through practice, we'll create a simple password cracking tool inspired by
- [The "Homeland" VP Pacemaker Hack: Is This Attack Realistic?](https://hackers-arise.com/the-homeland-vp-pacemaker-hack-is-this-attack-realistic/) - Welcome back, my aspiring cyberwarriors! IoT hacking is one the cutting-edge fields of cybersecurity. This includes IP cameras, Bluetooth devices, Home Security systems, Smart Home devices, and well...unfortunately, medical devices. Each of these devices is vulnerable to attackers taking control of the device, using it in a botnet, or even using it as foothold within
- [Network Espionage - Using Russian Cameras as Proxies, Part 2](https://hackers-arise.com/network-espionage-using-russian-cameras-as-proxies-part-2/) - Welcome back, cyberwarriors. We’re continuing the series on camera hacking. This time we’re going into reverse engineering to take over devices that can’t be accessed with basic attacks. As you’ve seen, SSH brute-forcing or logging into a web panel doesn’t always work. That’s when firmware reverse engineering comes in. Case 3: Reverse Engineering Let’s say
- [Intermediate Cryptography: In the Crypto Wars, ChaCha20 is your new weapon of choice.](https://hackers-arise.com/intermediate-cryptography-in-the-crypto-wars-chacha20-is-your-new-weapon-of-choice/) - Welcome back, my aspiring cyberwarriors! Cryptography, the hiding of data, is one of the fundamental skills of cybersecurity. Without cryptography, all of our data would be exposed in all of our communications and data storage. Cryptography is used to store our passwords (hashing), exchange symmetric keys (asymmetric cryptography), and encrypt our data streams (TLS) and
- [NeuraLink: What Could Possibly Go Wrong? The ultimate invasion—reading or leaking your innermost thoughts?](https://hackers-arise.com/neuralink-what-could-possibly-go-wrong-the-ultimate-invasion-reading-or-leaking-your-innermost-thoughts/) - Welcome back, my aspiring cyberwarriors! As the world of IoT hacking continues to expand, new frontiers are emerging. One of those frontiers is in human-device interface such glucose monitors, insulin pumps, heart pacemakers and whatever the medical device industry comes up with next. One of these human-device interfaces is the neural-link. Neuralink is an American
- [How Cloudflare Works: The Hacker Blueprint](https://hackers-arise.com/how-cloudflare-works-the-hacker-blueprint/) - Welcome back, my aspiring cyberwarriors! Often when we attack websites, we run up against Cloudflare. Cloudflare protects about 19.3% of all websites in the world. It's primary product is DDoS protection but also provides Content Delivery Systems (CDN) and Internet security products. If the attacker is to get past this ubiquitous cybersecurity product, you first
- [Wi-Fi Hacking: The Nearest Neighbor Attack, Attacking Your Neighbor Through the Backdoor](https://hackers-arise.com/wi-fi-hacking-the-nearest-neighbor-attack-attacking-your-neighbor-through-the-backdoor/) - Welcome back, my aspiring cyberwarriors! Since the beginning of the introduction of Wi-Fi in the 1990's, Wi-Fi attacks have been limited geographically. In other words, you can attack Wi-Fi and those connected to it, if you are in the range of the Wi-Fi signal or about 100 meters. Now, we know that Wi-Fi can be
- [Logic Basics for Cybersecurity: One of the Most Under-Rated Skills in Cybersecurity](https://hackers-arise.com/logic-in-cybersecurity-one-of-the-most-under-rated-skills-in-cybersecurity/) - Welcome back, aspiring cyberwarriors! Today, let’s sharpen one of your most important weapons: logic. Whether you’re exploiting a system, defending a network, or analyzing malware, clear logical thinking is essential. Let’s break down the basics of logic using real-world cybersecurity examples. What Is Logic in Cybersecurity? Logic is the science of reasoning. In hacking and
- [CyberWar: The Breach at Avtodor-- Control and Collapse – Breaking Down the Infrastructure, Part 2](https://hackers-arise.com/cyberwar-the-breach-at-avtodor-control-and-collapse-breaking-down-the-infrastructure-part-2/) - Welcome back, cyberwarriors! In my previous article I detailed the process of infiltrating the Avtodor, the Russian state-run company overseeing the construction and maintenance of roads and highways. In part II we finally execute our well laid plans. Taking Over the Specialized Vehicles Most dispatcher terminals ran a vehicle monitoring app—basic fleet management. You’d expect
- [SCADA/ICS Security in Cyber Warfare: Exposing Vulnerabilities in Russian ICS Infrastructure](https://hackers-arise.com/scada-ics-security-in-cyber-warfare-exposing-vulnerabilities-in-russian-ics-infrastructure/) - Welcome back, aspiring cyberwarriors. In today's article we will explore Russian industrial control system (ICS), revealing vulnerabilities waiting to be exploited. These systems are critical, yet security often remains an afterthought. Even Russia, which has spent years aggressively hardening its cybersecurity in preparation for its invasion of Ukraine, continues to suffers from vulnerabilities and basic
- [Password Cracking: Creating Custom Password List with cupp](https://hackers-arise.com/password-cracking-creating-custom-password-list-with-cupp/) - Welcome back, my aspiring cyberwarriors! If the hacker can obtain or crack the target’s password, in many cases, this can lead to complete account compromise and takeover. Many people use simple passwords that are relatively easy to crack with a good word list. From our examination and analysis of data dumps on the dark web,
- [Wireless Hacking: Cracking the WPA2-PSK with aircrack-ng](https://hackers-arise.com/wireless-hacking-cracking-the-wpa2-psk-with-aircrack-ng/) - When Wi-Fi was first developed in the late 1990s, Wired Equivalent Privacy (WEP) was created to give wireless communications confidentiality. WEP, as it became known, proved terribly flawed and easily cracked. As a replacement, most wireless access points now use Wi-Fi Protected Access 2 with a pre-shared key for wireless security, known as WPA2-PSK. WPA2
- [Mr. Robot Hacks, Part 07: How Elliot Hacks Everyone's Password](https://hackers-arise.com/mr-robot-hacks-part-7-how-elliot-hacks-everyones-password/) - Welcome back, my Mr. Robot fans! In the television show, Mr. Robot on FX (past episodes are on Amazon Prime), Elliot seems to be able to hack anyone’s password. For anyone who has attempted to crack a password, you know it isn’t exactly that easy. Brute forcing long and complex passwords can be time-consuming and
- [Cracking WPS Pin with Bully](https://hackers-arise.com/cracking-wps-pin-with-bully/) - Welcome back, my nascent hackers! Like anything in life, there are multiple ways of getting a hack done. In fact, good hackers usually have many tricks up their sleeve to hack into a system. If they didn’t, they would not usually be successful. No hack works on every system and no hack works all of
- [Cracking Passwords with hashcat](https://hackers-arise.com/cracking-passwords-with-hashcat/) - Continuing with my series on how to crack passwords, I now want to introduce you to one of the newest and best designed password crackers out there—hashcat. The beauty of hashcat is in its design, which focuses on speed and versatility. It enables us to crack multiple types of hashes, in multiple ways, very fast.
- [Spray and Succeed: The Hacker’s Guide to Unlocking Weak Passwords](https://hackers-arise.com/spray-and-succeed-the-hackers-guide-to-unlocking-weak-passwords/) - Welcome back, my aspiring cyberwarriors! At the dawn of the Information Age, passwords emerged as the preeminent method for verifying identity. Over half a century later, the password persists as the most common form of digital authentication, securing everything from computers and bank accounts to social media and mobile devices. As cyberattacks grow more sophisticated, security
- [Password Cracking Strategies](https://hackers-arise.com/password-cracking-strategies/) - Welcome back, my hacker apprentices Recently, I started my password cracking series with an introduction to the principles and technologies involved in the art of cracking passwords. In past guides, I showed some specific tools and techniques for cracking Windows, online, Wi-Fi, Linux, and even SNMP passwords. This series is intended to help you hone your skills
- [Online Password Cracking with THC-Hydra and Burp Suite](https://hackers-arise.com/online-password-cracking-with-thc-hydra-and-burp-suite/) - Welcome back, my budding hackers! “How to hack online passwords” such as email, social media, authentication forms, etc. is one the budding hackers’ most frequent questions. Although it has become much more difficult in recent years, it is still possible. Here we will use two essential hacking tools to demonstrate how to hack online passwords,
- [Python Basics for Hackers, Part 03: Building an FTP Password Cracking Tool](https://hackers-arise.com/python-scripting-for-hackers-part-3-building-an-ftp-password-cracking-tool/) - This is the third installment of my Python scripting series. If you haven’t read the previous two articles, take some time now to go back and read Part 1 (Introduction) and Part 2 (Building a Banner Grabbing Tool) before you proceed here. As I mentioned in previous tutorials, Python is probably the most widely used
- [Password Cracking Strategy: Using pipal to Determine Common Password Patterns](https://hackers-arise.com/password-cracking-strategy-using-pipal-to-determine-common-password-patterns/) - Welcome back, my aspiring cyber warriors! In my book “Getting Started Becoming a Master Hacker” and an earlier post, I encouraged you to develop custom password lists before you attempt to brute force passwords. Most often, users create passwords that are simple, common, and follow simple patterns that are easy for them to remember. If
- [Web App Hacking: Online Password Cracking with Burp Suite (Web App Authentication)](https://hackers-arise.com/web-app-hacking-online-password-cracking-with-burp-suite-web-app-authentication/) - Welcome back, my aspiring cyber warriors! In this series, we are exploring the myriad of ways to hack web applications. As you know, web applications are those apps that run the websites of everything from your next door neighbor’s website, to the all-powerful financial institutions that run the world. Each of these applications is vulnerable
- [Password Cracking: Creating a Custom Wordlist with crunch](https://hackers-arise.com/password-cracking-creating-a-custom-wordlist-with-crunch/) - Welcome back, my aspiring cyberwarriors! In this series on password cracking, I have been attempting to develop your skills in the age-old art of password cracking. Although it might seem like a simple and straightforward exercise, those of you who have attempted password cracking know that there are many subtleties to this art. In many
- [Strategies for Password Cracking in Cybersecurity](https://hackers-arise.com/strategies-for-password-cracking-in-cybersecurity/) - Strategies for Password Cracking in Cybersecurity Welcome back, my aspiring cyberwarriors! People often ask, how do I crack passwords? The answer is that there are many ways and it is important that you think strategically to prevent many hours and days fruitlessly. For instance, trying to brute force a hash of long and complex password
- [Network Forensics: Getting Started With Stratoshark](https://hackers-arise.com/network-forensics-getting-started-with-stratoshark/) - Welcome back, aspiring Digital Forensics Investigators! For decades, the open-source Wireshark network protocol analyzer has been an essential tool for networking professionals, enabling them to inspect and troubleshoot network traffic through packet analysis. However, as organizations have increasingly shifted workloads to the cloud, they've struggled with reduced visibility into system activity. To address this gap,
- [Now that the US Has Bombed Iran, Should We Expect Attacks Against US Critical Industrial Infrastructure (SCADA/ICS)?](https://hackers-arise.com/if-the-us-attacks-iran-will-iran-attack-us-industrial-facilities-scada-ics/) - Welcome back, my cyberwarriors! As the US and Iran lurch toward a military confrontation, we must ask whether the US and other western nations' industrial facilities are at risk. Unquestionably, Iran does NOT have the military capabilities to counter the US in a kinetic war, but could they terrorize the US industrial facilities instead? In
- [Wi-Fi Hacking: Inside DragonFly, the WPA3’s Next-Gen Wireless Authentication Protocol](https://hackers-arise.com/wi-fi-hacking-inside-dragonfly-the-wpa3s-next-gen-wireless-authentication-protocol/) - Welcome back, aspiring cyberwarriors! On June 25, 2018, the Wi-Fi Alliance officially introduced WPA3, a new era for wireless security. While WPA2 has dominated the landscape for over a decade, the world has changed, threats have evolved, and so has the need for more robust authentication. At the core of WPA3’s improvements is the Dragonfly
- [VPN Hacking: Authentication Bypass on Fortinet Fortios](https://hackers-arise.com/vpn-hacking-authentication-bypass-on-fortinet-fortios/) - Welcome back, my aspiring cyberwarriors! The cybersecurity industry is dependent upon a few developers to produce routers and VPN's to keep our data safe. Unfortunately, many of these developers have failed to provide products that take into account even the most rudimentary cybersecurity practices. Many of them are like Swiss cheese, full of vulnerable holes
- [Network Espionage: Using Russian Cameras as Proxies to Hide Your Data](https://hackers-arise.com/network-espionage-using-russian-cameras-as-proxy/) - Hello, cyberwarriors. You’ve heard how camera hacking plays a role in espionage. In our previous series, we covered how we’ve been spying on Russian forces in occupied Ukrainian territory. During the ongoing cyberwar, we’ve gained access to a large number of cameras across Russia, starting in the occupied areas and reaching deep into Moscow. This
- [Pivoting within the Network: Getting Started with Chisel](https://hackers-arise.com/pivoting-within-the-network-getting-started-with-chisel/) - Welcome back, aspiring cyberwarriors! When performing a penetration test or cyberwar mission, you're typically not targeting just one computer. Often, you're targeting multiple systems and need to move across the network, pivoting to gain further access to the environment. However, pivoting can sometimes be challenging. In this article, I'd like to introduce you to a
- [IoT Embedded Linux: BusyBox, the Most Widely Used Linux in IoT](https://hackers-arise.com/busybox-the-swiss-army-knife-of-embedded-linux/) - Welcome back, my aspiring cyberwarriors! To be able to hack the Internet of Things(IoT), smart home, smart TV, IP camera, VPN, routers and other such devices, the more you understand of Linux, the more success you will have. Nearly all of these devices use embedded Linux with tiny small kernels. The most popular of these
- [Windows Privilege Escalation with Russian Software](https://hackers-arise.com/windows-privilege-escalation-with-russian-software/) - Welcome back, my aspiring cyberwarriors. Since the beginning of the Russian invasion of Ukraine many American companies have pulled out of Russia, forcing local developers to build replacement tools. The number of these companies is growing, but their software often lacks proper security design. Some of these tools get flagged by antivirus, which leaves the
- [VPN Hacking: How VPN's Work and How They Break Our Security](https://hackers-arise.com/vpn-hacking-how-vpns-work-and-how-they-break-our-security/) - Original publication date: February 18, 2025Welcome back, my aspiring cyberwarriors!In recent posts, I have emphasized the risks inherent in VPN’s. Virtual Private Networks or VPN’s are designed to keep us safe and secure but in recent years they have failed us miserably. In highlighting these failings, we have encountered a lot of confusion and misconceptions
- [Windows Network Exploitation with Impacket Framework](https://hackers-arise.com/windows-network-exploitation-with-impacket-framework/) - Welcome back, aspiring cyberwarriors! While many security professionals are familiar with popular frameworks like Metasploit or Burp Suite, there's a powerful Python library that often flies under the radar despite being one of the most versatile and essential tools in any red teamer's arsenal. That tool is Impacket, and today we're going to explore why
- [Web App Hacking: Katana, A Next-Generation Crawling and Spidering Framework](https://hackers-arise.com/web-app-hacking-katana-a-next-generation-crawling-and-spidering-framework/) - Welcome back, aspiring cyberwarriors! The ability to effectively map, crawl, and spider web applications can mean the difference between a successful engagement and missing critical vulnerabilities that could compromise an entire organization. Traditional crawling tools have served us well over the years, but as web applications become increasingly complex with modern JavaScript frameworks, single-page applications,
- [VPN Vulnerabilities You Should Know About in 2025](https://hackers-arise.com/vpn-vulnerabilities-you-should-know-about-in-2025/) - This article was originally posted on 2025/04/24 VPNs are meant to be a tool for protection — but the reality paints a very different picture. Almost daily, we see hackers exploiting vulnerabilities in both consumer and corporate VPNs. If you think your VPN keeps you safe, it might be time to think again. In this article, we’ll
- [Radio Basics for Hackers, Part 02: Amplitude, Modulation, decibels and gain](https://hackers-arise.com/radio-basics-for-hackers-part-2-amplitude-modulation-decibels-and-gain/) - Welcome back, my aspiring radio hackers! As you know, radio hacking is the leading-edge of cybersecurity! Nearly everything digital around us emits, radiates or receives radio waves. These include our cellphones, computers, automobiles, remote controls, key fobs, GPS, and this list could go on and on. This is a little understood field of cybersecurity by
- [MitM: Using driftnet to View the Target's Graphics Files](https://hackers-arise.com/mitm-using-driftnet-to-view-the-targets-graphics-files/) - Using MiTM with driftnet to View the Target’s Images In each of our previous MiTM attacks, we have been able to place ourselves between two users and to view their traffic. This traffic can been seen by using such tools as Wireshark and other packet sniffers. As we can see below, Wireshark shows us with
- [Software Defined Radio (SDR) for Hackers, Part 02: Building Our First SDR Radio (FM)](https://hackers-arise.com/software-defined-radio-sdr-for-hackers-part-2-building-our-first-sdr-radio-fm/) - Welcome back, my aspiring RF hackers! In part 1 of this series, we set up the HDSDR software and the RTL-SDR hardware to work together to create our software-defined radio. Now that we have those elements functioning, let’s use our radio initially for some simple, basic radio signal capture such as your local FM radio
- [Routersploit: Hacking the Internet of Things (IoT)](https://hackers-arise.com/routersploit-hacking-the-internet-of-things-iot/) - Welcome back, my hacker novitiates! As you have probably already know, the Internet of Things (IoT) has become one of the most important targets for hackers in recent years. The Internet of Things includes just about any device that has an Internet connection such as routers, web cams, baby monitors, Alexa and Google home speakers,
- [Open Source Intelligence (OSINT): Reverse Image Searches for Investigations](https://hackers-arise.com/open-source-intelligence-osint-reverse-image-searches-for-investigations/) - Welcome back, my aspiring OSINT experts! There is SO much data on the Internet that just about anything can be found, if you know how and where to look. One issue that comes up often is reverse-image searching. The issue is, “can you find where an image originated or was used elsewhere on the Internet?”.
- [Radio Basics for Hackers, Part 03: Sampling](https://hackers-arise.com/radio-basics-for-hackers-part-3-sampling/) - Welcome back my aspiring cyber warriors!Sampling is the process of converting a continuous signal into a discrete signal. In the context of radio signals, sampling is the process of converting an analog radio signal into a digital signal. Remember, the original signal is all analog but our computer systems are all digital. Sampling enables the
- [Radio Basics for Hackers, Part 04: How Antennas Work and Which are Most Effective](https://hackers-arise.com/radio-basics-for-hackers-part-4-how-antennas-work-and-which-are-most-effective/) - Welcome back, my aspiring radio hackers! Antennas are often overlooked in the grand scheme of radio hacking but they play a crucial role in our capability to send and receive radio signals. Different antennas are optimized for different frequencies and in many cases, without a proper antenna you will likely be frustrated in your efforts.
- [Evading Wireless Authentication with ICMPTX](https://hackers-arise.com/evading-wireless-authentication-with-icmptx/) - In previous Wi-Fi hacking tutorials, I have shown you ways to create an Evil Twin, to DoS a wireless AP, and to crack WEP and WPA2 passwords, but in this tutorial, I will show you something a little bit different. ​ In many restaurants, hotels, airports, airplanes, and cafes, they have open authentication on the wireless
- [How to Use Your Hacking Skills to Catch a Terrorist](https://hackers-arise.com/how-to-use-your-hacking-skills-to-catch-a-terrorist/) - Previously in my “Spy on Anyone” series, we used our hacking skills to turn a target’s computer system into a bug to record conversations and found and downloaded confidential documents on someone’s computer. In this tutorial, I will show you how to spy on anybody’s Internet traffic.​ For the sake of making things interesting, let’s assume we
- [Metasploit Web Delivery for Linux/Unix/MacOSX](https://hackers-arise.com/metasploit-web-delivery-for-linux-unix-macosx/) - Metasploit, one of my favorite hacking/pentesting tools, has so many capabilities that even after my many tutorials on it, I have only scratched the surface of it capabilities. For instance, it can be used with Nexpose for vulnerability scanning, with Nmap for port scanning, and with its numerous auxiliary modules, nearly unlimited other hacking related capabilities.
- [SDR for Hackers: The DragonOS for Software Defined Radio](https://hackers-arise.com/sdr-for-hackers-the-dragonos-for-software-defined-radio/) - Welcome back, my aspiring radio hackers! Radio hacking using inexpensive SDR’s is the state-of-the art in hacking. So many communication mediums using radio waves that the list could fill this tutorial but a few include; Bluetooth Cellular phones Satellite phones Wi-Fi National defense and Police radio Satellite communication Remote controls GPS NFC Automobile key fobs
- [Python Basics for Hackers, Part 0: Programming Concepts](https://hackers-arise.com/python-basics-programming-concepts/) - Welcome back, my aspiring cyberwarriors! To ascend to the status of cyberwarrior, you must have some basic programming capabilities. In the field of hacking and cybersecurity, this usually means BASH and Python scripting. Python scripting is the most popular among cybersecurity professionals due to its extensive libraries and modules that are useful in cybersecurity (you
- [Satellite Hacking: An Introduction to Satellites and Satellite Systems](https://hackers-arise.com/satellite-hacking-an-introduction-to-satellites-and-satellite-systems/) - Welcome back, my aspiring cyberwarriors! Satellites and the communication they engender have become a crucial element in our modern economies. They enable us to use the internet, television, GPS, and mobile communication from anywhere on the planet. In addition, the world’s most powerful militaries are dependent upon satellites for visual and signal reconnaissance and communication.
- [Signal Intelligence with a Software Defined Radio (SDR): The Quiet Revolution in Cybersecurity and Cyberwarfare](https://hackers-arise.com/signal-intelligence-with-a-software-defined-radio-sdr-the-quiet-revolution-in-cybersecurity-and-cyberwarfare/) - Welcome back, aspiring cyberwarriors! Software-Defined Radio (SDR) has changed the way we communicate and conduct warfare. This comprehensive analysis explores the technical depths of SDR systems, their real-world applications, and their impact on military operations and satellite communications. Through detailed examples and case studies, we’ll examine how SDR has become a cornerstone of modern
- [Introduction to the IoT/Embedded Linux: The OpenWRT Project](https://hackers-arise.com/introduction-to-the-iot-embedded-linux-the-openwrt-project/) - Welcome back, my aspiring cyberwarriors! As you know, the various mobile carriers around the world sell a device they often refer to as a “network extender”. These are actually femtocells or very small cellphone towers. The local cellphone connects to the network extender/femtocell and the signal is then sent across the internet to the cellular
- [The Return of the Devastating DDoS Attacks or The Revenge of the IoT](https://hackers-arise.com/the-return-of-the-devastating-ddos-attacks-or-the-revenge-of-the-iot/) - Welcome back, my aspiring cyberwarriors! As you well know, the Distributed Denial of Service (DDoS) attack is one of simplest attacks. It is simply brute-force packet jamming a network to render it useless or nearly useless. When its done with just a few nodes it can be easily thwarted by a number techniques such as
- [IoT Hacking: RFID Basics for Hackers](https://hackers-arise.com/iot-hacking-rfid-basics-for-hackers/) - OTW Master OTW is a renowned cybersecurity expert, ethical hacker, and digital forensics consultant with over two decades of experience. A former computer science professor, he has trained hackers for all branches of the U.S. military, including the NSA, CIA, and U.S. Cyber Command. As the author of the influential books, Linux Basics for Hackers,
- [Mr. Robot Returns!](https://hackers-arise.com/mr-robot-returns/) - Mr. Robot Returns October 11!As most of you know, Mr. Robot is my favorite TV show. The storyline is familiar to most of us in the White Hat Hacker community. Elliot is an asocial, cyber-security engineer by day and a white hat, vigilante hacker by night. He is enticed by the black hat/social reform organization,
- [Mr. Robot Hacks: How f/society Hacked of the SmartHome of The Evil Corp Exec](https://hackers-arise.com/mr-robot-hacks-how-f-society-hacked-of-the-smarthome-of-the-evil-corp-exec/) - Welcome back, Mr. Robot fans! In the first episode of season 2 of Mr. Robot (eps2.0_unm4sk-pt1.tc), the hackers of f/society took control of the SmartHome of the General Counsel (the in-house, lead attorney) of Evil Corp. This woman’s elegant home, in the tony Greenwich Village section of New York City, had everything automated including the
- [Mr. Robot Hacks: How Angela Stole Her Boss' Password Using mimikatz](https://hackers-arise.com/mr-robot-hacks-how-angela-stole-her-boss-password-using-mimikatz/) - As always, Mr.Robot has proven fascinating in its story line and realistic in its hacking. In episode 6 of this Season 2, Angela, Elliot’s best friend and now a junior executive at E Corp, is looking for information regarding the toxic chemical leak by E Corp that killed both her mother and Elliot’s father. Angela
- [Mr. Robot Hacks, Season 3: How Elliot Covered his Tracks](https://hackers-arise.com/mr-robot-hacks-season-3-how-elliot-covered-his-tracks/) - Finally! “Mr. Robot” is back! The first episode of season 3 did not disappoint. Elliot is back and hacking again! The 5/9 hack of Evil Corporation has left the world in chaos and the economy crippled. There is no electricity, no banking system and little Internet access. Elliot is feeling responsible and bit guilty. The
- [Mr. Robot Hacks, Season 3 E.9: How Elliot Traces the Dark Army](https://hackers-arise.com/mr-robot-hacks-season-3-e-9-how-elliot-traces-the-dark-army/) - As Mr Robot races to the conclusion of Season 3, Elliot is determined to stop the Dark Army from doing any more damage. The Dark Army, led by White Rose, has blown up 71 buildings. As you remember, Elliot’s system has been compromised and he wants to trace the malware back to its source and
- [Mr. Robot Hacks: How Elliot Hacked the Prison](https://hackers-arise.com/mr-robot-hacks-how-elliot-hacked-the-prison/) - Welcome back, my rookie hackers! In Season 1 Episode 6 Elliot is being blackmailed by the ruthless and unrelenting drug dealer, Vera, to hack him out of jail. He is holding Elliot’s new love interest, Shayla, hostage and has given Elliot until midnight to hack the jail’s computer system in order to release him. Elliot
- [Mr. Robot Hacks, Part 08: How Darlene Hacks the Car in Season 4](https://hackers-arise.com/mr-robot-hacks-part-8-how-darlene-hacks-the-car-in-season-4/) - Welcome back, my Mr Robot fans! As many of you already know, Mr.Robot is my favorite TV show and if it were a movie, it would be the BEST hacker movie ever. Not only do I love it for the writing, directing and acting (the star, Rami Malek, won an Academy Award in 2019), but
- [Mr. Robot Hacks: How Elliot Hacked the FBI Cellphones](https://hackers-arise.com/mr-robot-hacks-how-elliot-hacked-the-fbi-cellphones/) - Welcome back, my Mr. Robot aficianados! In Season 2 of Mr. Robot, the FBI is on the trail of Elliot and f/society for the 5/9 hacks that crippled Evil Corp and the global economy.The FBI is investigating inside Evil Corp and Elliot must develop a way to hack their phones to eavesdrop on their conversations.
- [Mr. Robot Hacks: How f/society Ransomed Evil Corp for $5.9 million](https://hackers-arise.com/mr-robot-hacks-how-f-society-ransomed-evil-corp-for-5-9-million/) - Welcome back, my greenhorn cyberwarriors! For those of you who are new to Mr. Robot, Elliot Alderson is an asocial IT security engineer who teams up a with a group of hackers (f/society) determined to use their hacking skills to make a better world. They were able to seriously damage the data on the world’s
- [Mr Robot Hacks: Building a Deadman's Switch in Python](https://hackers-arise.com/mr-robot-hacks-building-a-deadman-s-switch-in-python/) - Welcome back, my Mr Robot aficionados! As you know, Mr. Robot is my favorite TV show because of its realistic depiction of hacking. Nearly all of the hacks in the show are real, although the time frame may be compressed (real hacking is not like a TikTok video). In the first season, Elliot's "girlfriend", Shayla,
- [Mr Robot Hacks: How Elliot Used a Raspberry Pi to Hack Steel Mountain](https://hackers-arise.com/mr-robot-hacks-how-elliot-used-a-raspberry-pi-to-hack-steel-mountain/) - Welcome back, my Mr Robot afacionados! A number of you have written me telling me how much you enjoy the Mr. Robot series on USA Network and Amazon Prime. I am also a huge fan! If you haven’t seen it yet, you should. It may be the best hacking show on TV. Mr. Robot is
- [Mr. Robot Hacks: How Elliot Hid His Data in Audio Files](https://hackers-arise.com/mr-robot-hacks-how-elliot-hid-his-data-in-audio-files/) - Welcome back, my Mr. Robot aficionados! As you know, Mr. Robot is my favorite TV show this year, and not just for the realistic hacking. Rami Malek, the actor who plays Elliot, is incomparable in his depiction of a young man with social anxiety who is alienated from a superficial, materialistic society and wants to
- [Mr Robot Hacks: How Elliot and f/society Cloned the Key Card to Enter Steel Mountain](https://hackers-arise.com/mr-robot-hacks-how-elliot-and-f-society-cloned-the-key-card-to-enter-steel-mountain/) - Welcome back, my Mr. Robot aficionados! As you know, Mr. Robot is my favorite TV show even though the show last aired nearly a decade ago. Excellent writing and acting make this a must watch, but the real-life hacking almost makes it requisite for hackers and aspiring cyberwarriors. In Season 1, Episode 5, Elliot and
- [Hack to Spy: Building a Raspberry Spy Pi](https://hackers-arise.com/hack-to-spy-building-a-raspberry-spy-pi/) - As nearly all of you know by now, the Raspberry Pi is a powerful and inexpensive computer that anyone can own and use. The Raspberry Pi is only slightly larger than a credit card and yet powerful enough to fulfill nearly any of your computing needs. In this series, we will be building what I
- [SCADA Hacking: Anatomy of a SCADA Malware, BlackEnergy 3 Attack on the Ukraine Grid](https://hackers-arise.com/scada-hacking-anatomy-of-a-scada-malware-blackenergy-3-attack-on-the-ukraine-grid/) - Welcome back to this series on SCADA Hacking and Security!SCADA/ICS security is critical for SO many reasons. Among the most important is that any cyber warfare in the future will likely involve some form of SCADA/ICS hacking to take down the opponent’s critical infrastructure such as electricity, water, oil refining and transportation. As we in
- [Hack Like the NSA: The Quantum Insert](https://hackers-arise.com/hack-like-the-nsa-the-quantum-insert/) - Over the years, I have written many articles chronicling the many hacks of the NSA, including the recent hack of the Juniper Networks VPN. (By the way, my speculation in that article has proven to be correct. The NSA did embed a backdoor on those devices). Many readers here have expressed surprise, condemnation, and a
- [Network Basics for Hackers, Part 08: Simple Network Management Protocol (SNMP) Theory, Reconnaissance and Exp](https://hackers-arise.com/network-basics-for-hackers-simple-network-management-protocol-snmp-theory-reconnaissance-and-exp/) - Welcome back my aspiring cyber warriors!The Simple Network Management Protocol or SNMP is among the least understood protocols, yet so vitally important to the successful operation of your network. If an attacker can breach the SNMP, they may be able to unmask your encrypted VPN communication (see NSA’s ExtraBacon exploit here) as well as see
- [Confessions of a Professional Hacker: How Russian Hackers Compromised the 2016 U.S. Presidential Election](https://hackers-arise.com/confessions-of-a-professional-hacker-how-russian-hackers-compromised-the-2016-u-s-presidential-election/) - On July 13, 2018, the U.S. Justice Department handed down a 29-page indictment against 12 intelligence officers of the GRU, Russia’s military intelligence agency. In this indictment, the U.S. Justice Department investigators (Robert Mueller’s team) provide granular detail of the step-by-step activity of these Russian hackers. Russia’s Internet Research Agency In this article, I would
- [Zmap for Scanning the Internet: Scan the Entire Internet in 45 minutes](https://hackers-arise.com/zmap-for-scanning-the-internet-scan-the-entire-internet-in-45-minutes/) - Welcome back my aspiring cyber warriors! Most of you are aware of the power of nmap and nmap scripts for reconnaissance on a target and target networks. These tools can be used for numerous tasks such as simple port scanning to service and version detection. Despite the power and simplicity of nmap, it can be
- [Satellite Hacking: How Russia Knocked out the ViaSat System at the Outset of the Ukraine War](https://hackers-arise.com/satellite-hacking-how-russia-knocked-out-the-viasat-system-at-the-outset-of-the-ukraine-war/) - Welcome back, my aspirational cyberwarriors! Satellite hacking is the new frontier in cyber warfare! Satellites are an essential infrastructure in any industrialized, digitally advanced nation. Not only do they carry radio, television, Internet and telephone calls, but they are an critical element each nations military infrastructure. An attacker who can interfere or degrade satellite signals
- [Is ToR Safe and Anonymous?](https://hackers-arise.com/is-tor-safe-and-anonymous/) - Welcome back, my aspirational cyberwarriors! Most of you know that the The Onion Network or ToR is the backbone of the Dark Web. First developed by the US Navy to hide their online activity, it is now an open-source project available to all via the ToR Project . Many people believe that their activities’ online
- [So...You Thought Your VPN Was Keeping you Safe and Secure?](https://hackers-arise.com/so-you-thought-your-vpn-was-keeping-you-safe-and-secure/) - Welcome back, my aspiring cyberwarriors! Although VPN’s are sold to keep you safe and secure online, many of them are from from safe and secure. In fact, some of them may actually make you less secure. This is because the developers, in many cases, did not take the most rudimentary steps toward securing these
- [The Medusa Ransomware Threat: Anatomy of a Cybercrime Operation](https://hackers-arise.com/the-medusa-ransomware-threat-anatomy-of-a-cybercrime-operation/) - Welcome back, aspiring cyberwarriors! In Greek mythology, Medusa was once a beautiful woman until Athena’s curse transformed her into a winged creature with a head full of snakes. She is seen as both a monster and a protector, possessing the power to turn anyone who gazes upon her face to stone. Ransomware groups often adopt
- [SCADA/ICS Hacking and Security: Chinese APT, Volt Typhoon, Has Compromised Numerous Industrial Systems in the US!](https://hackers-arise.com/scada-ics-hacking-and-security-chinese-apt-volt-typhoon-has-compromised-numerous-industrial-systems-in-the-us/) - Welcome back, aspiring cyberwarriors! In a cyberwar, SCADA and ICS industrial systems can be both a target and a weapon! Although the ongoing tensions between the U.S. and China are often framed as a trade war, Chinese state-sponsored actors have been known to compromise and maintain persistent access to critical U.S. infrastructure—sometimes for years. In this article,
- [NymVPN. Is This the World's Most Secure VPN?](https://hackers-arise.com/nymvpn-is-this-the-worlds-most-secure-vpn/) - Welcome back, my aspiring cyberwarriors! The landscape of digital privacy continues to evolve as surveillance capabilities expand globally. Our digital footprints are continuously tracked, analyzed, and leveraged by various entities. While traditional privacy tools focus on encrypting the content of communications, they often overlook a significant vulnerability: metadata. This “data about your data” reveals communication
- [NymVPN Setup & Testing: A Hands-On Walkthrough](https://hackers-arise.com/nymvpn-setup-testing-a-hands-on-walkthrough/) - Welcome back, aspiring cyberwarriors! In recent years, VPN’s have been marketed as a sure-fire way to keep your safe from hackers.Unfortunately, that has been shown to be in-arguably false with dozens of vulnerabilities found in all the major VPN developers. See our article here on the major recent vulnerabilities found in these devices, many of which
- [Advice from a Professional Hacker: The 12 Best Hacker Movies of All Time](https://hackers-arise.com/advice-from-a-professional-hacker-the-12-best-hacker-movies-of-all-time/) - As a movie buff AND a professional hacker, I love the opportunity to combine my passions, so I have decided to review the best hacker movies of all time and give you my best 12 list. In recent years, Hollywood has caught the hacker bug and now nearly ever crime or adventure movie has a
- [Ultimate List of Meterpreter Scripts](https://hackers-arise.com/ultimate-list-of-meterpreter-scripts/) - Metasploit framework is an incredible hacking and pentesting tool that every hacker worth their salt should be conversant and capable of. In this post, I will try to provide you with the most complete list and description available anywhere on the web. You will want to bookmark this page too, as no one remembers all
- [Welcome to Hackers Arise!](https://hackers-arise.com/welcome-to-hackers-arise/) - Welcome back, my tenderfoot hackers!Hackers Arise! is my new home and I hope you will make it yours as well. Hackers Arise will be a training camp for all things infosec, including the latest hacking techniques, the best hacking tools, digital forensics, Linux tutorials, scripting and so much more! Of course, we will be continuing
- [Operating System (OS) Fingerprinting with p0F](https://hackers-arise.com/operating-system-os-fingerprinting-with-p0f/) - I have said it many times before and I will say it again, good reconnaissance is crucial to successful hacking! Without it thorough reconnaissance, you are probably wasting tour time. There have been many cases where hackers have spent days and weeks doing reconnaissance before they even beginning to try to hack/exploit a system or
- [PowerShell for Hackers, Part 01](https://hackers-arise.com/powershell-for-hackers-part-1/) - As you know, I firmly believe that to be a true professional hacker, you need to be proficient in Linux. There are a number of good reasons for this. Most hacking tools are developed in Linux (well over 90 percent). Linux offers us greater granularity of control. The terminal in Linux gives us complete control
- [Hackers-Arise Gets International Recognition for Exploiting SCADA System Vulnerability](https://hackers-arise.com/hackers-arise-gets-international-recognition-for-exploiting-scada-system-vulnerability/) - October 25, 2016, Voice of America (VOA) News (voanews.com) ran an article about the vulnerability of SCADA/ICS systems. In that article in the second paragraph titled “Headline Grabbers”, it cited: Because of the potential for catastrophic damage, some hackers have long targeted ICS networks in hopes of grabbing headlines. Just last month, an anonymous hacker
- [Cryptography Basics, Part 03: Attack Models for Cryptanalysis](https://hackers-arise.com/cryptography-basics-part-3-attack-models-for-cryptanalysis/) - Welcome back, my aspiring cyber warriors!In an earlier tutorial, I tried to explain some of the basic concepts and terms of cryptography. Not only are those terms and concepts key to becoming effective in the world of cyber security, but they are required to pass such certification exams such as the CISSP, CCSP, CWA, Security+
- [Scraping Potential Passwords from a Target's Website using CeWL](https://hackers-arise.com/scraping-potential-passwords-from-a-targets-website-using-cewl/) - Welcome back, my novice hackers! In my series on cracking passwords, I began by showing off some basic password-cracking principles; developed an efficient password-cracking strategy; demonstrated how to use Hashcat, one of the most powerful password-cracking programs; and showed how to create a custom wordlist using Crunch. In this tutorial, I will show you how
- [Web App Hacking, Part 05: Enumerating Users and Bruteforcing Passwords on Wordpress Sites](https://hackers-arise.com/web-app-hacking-part-5-enumerating-users-and-bruteforcing-passwords-on-wordpress-sites/) - Welcome back, my newbie hackers! In previous articles this section, I showed you how to find WordPress sites and how to identify the vulnerabilities in these sites (WordPress comprises nearly 30% of all websites). In this tutorial, we will use wpscan again to enumerate the user accounts on that WordPress site and then brute force
- [Hackers-Arise Announces First Annual Tutorial Contest! First Prize is $500 plus](https://hackers-arise.com/hackers-arise-announces-first-annual-tutorial-contest-first-prize-is-500-plus/) - Welcome back, my aspiring cyber warriors! Hackers-Arise just announced its first annual cyber warrior tutorial contest! Anyone is eligible to enter and the deadline is March 30. First prize is $500, a Subscriber spot at Hacker-Arise and an intern position here at Hackers-Arise. Second prize is a Subscriber spot and a autographed copy of Master
- [Automobile Hacking: The ICS Simulator, Part 01](https://hackers-arise.com/automobile-hacking-the-ics-simulator-part-1/) - Welcome back, my aspiring automobile cyber warriors! Automobile hacking is the cutting edge of the hacking discipline! Automobile and other vehicle hacking could have dramatic effects on society as we know it. Imagine a cyber war scenario where the opposing generals employ hackers to commandeer the adversaries tanks, jeeps and other vehicles. Or a bit
- [Cryptography Basics for Hackers, Part 01](https://hackers-arise.com/cryptography-basics-for-hackers-part-1/) - Welcome back, my aspiring cyberwarriors! As cyberwarriors, we are often faced with the hurdle or promise of cryptography and encryption. Every cyber security engineer worth their pocket protector understands that encryption make the hacker/attacker’s task much more difficult. In addition, in some cases it may be useful to the attacker to hide their actions and
- [Cryptography Basics for Hackers, Part 02: Hashes and Hashing](https://hackers-arise.com/cryptography-basics-for-hackers-part-2-hashes-and-hashing/) - Welcome back, my aspiring cyberwarriors! In the first part of this series, Cryptography Basics for Hackers, we reviewed each of the many types of encryption. One of those types is hashing or one-way encryption. Hashing is used throughout cybersecurity to ensure integrity for such things as software downloads, passwords, and digital certificates. In digital forensics,
- [Open Source Intelligence(OSINT): Scraping Cryptocurrency Wallet Addresses and Balances](https://hackers-arise.com/open-source-intelligenceosint-scraping-cryptocurrency-wallet-addresses-and-balances/) - Welcome back, my aspiring OSINT investigators! With the growth of the cryptocurrency market in recent years, has come the growth of cryptocurrency scams and thefts. As a result, there is tremendous demand for investigators conversant in crypto investigations. This is the first of many posts on how to investigate cryptocurrencies from an OSINT perspective. In
- [SCADA Hacking: Snake, a New Variant of Ransomware Targets SCADA/ICS](https://hackers-arise.com/scada-hacking-snake-a-new-variant-of-ransomware-targets-scada-ics/) - Welcome back, my aspiring SCADA Hackers! The recent ransomware attack against the Colonial Pipeline in the US reminds us that SCADA/ICS infrastructure is NOT immune from ransomware attacks. In fact, this attack should remind us just how vulnerable industrial systems are to cyber-attacks and the potential ramifications of such attacks. Remember, with SCADA/ICS systems you
- [How to Make the Metasploit Meterpreter Persistent](https://hackers-arise.com/how-to-make-the-metasploit-meterpreter-persistent/) - How to Remotely Install an Auto-Reconnecting Persistent Back Door on Someone’s PC Most of my recent posts have addressed using Metasploit’s Meterpreter and what we can do once we have embedded it on the victim’s system. This includes remotely installing a keylogger, enabling the webcam, enabling the microphone and recording, and disabling the antivirus software,
- [Open Source Intelligence (OSINT): Using OSINT Techniques to Track the Suez Canal Blockage](https://hackers-arise.com/open-source-intelligence-osint-using-osint-techniques-to-track-the-suez-canal-blockage/) - Welcome back, my aspiring OSINT experts! The Internet is the largest repository of data in the history of the world! Learn how and where to access it to bring its power and intelligence into your hands! Open Source Intelligence Open source Intelligence (OSINT) is useful and applicable to so many industries, such as; Pentesting and
- [Software Defined Radio, Part 03: Intercepting Airport and Aircraft Communication](https://hackers-arise.com/software-defined-radio-part-3-intercepting-airport-and-aircraft-communication/) - Welcome back, my aspiring radio hackers! Software Defined Radio (SDR) is one of the little-known, leading edges of cybersecurity! If you have not read SDR for Hackers, Part 1 and Part 2, please do so now. There you learn how to setup and install your inexpensive software defined radio (SDR) hardware and software as well
- [Hacking  Artificial Intelligence (AI) Large Language Models (LLMs)](https://hackers-arise.com/hacking-large-language-models-llms/) - Large Language Models (LLMs) like ChatGPT, Claude, and Llama have become increasingly integrated into various applications and systems. While these AI systems offer tremendous capabilities, they also introduce new attack surfaces that can be exploited. Understanding these vulnerabilities is crucial not only for security professionals but also for developers implementing these technologies. As you know,
- [Splunk for Security Monitoring, Part 01](https://hackers-arise.com/splunk-for-security-monitoring-part-1/) - In recent years, a new tool has come onto the market that is becoming increasing useful and popular for monitoring a network. This tool is known as Splunk (I presume that the name is a play on the word “spelunking” or cave exploring). Splunk is really a simple idea whose time has arrived. It collects
- [Splunk for Security Monitoring, Part 02 (Splunk Processing Language Basics)](https://hackers-arise.com/splunk-for-security-monitoring-part-2-splunk-processing-language-basics/) - Welcome back, my greenhorn hackers! In an earlier tutorial, I introduced you to Splunk for Security Monitoring. In this installment, we will examine the Splunk Processing Langauage or SPL. This is the language built into Splunk for searching for specific information among all the machine data that Splunk has gathered and indexed for us. Without
- [Telegram Secure App Breached by Russian Intelligence](https://hackers-arise.com/telegram-secure-app-breached-by-russian-intelligence/) - Just a heads up, my novice hackers. Russian intelligence has breached the secure communication app, Telegram. I know many of you are using this app believing that its communication is secure. Buried within the 35 page dossier compiled by a former British intelligence agent regarding Russia/Putin’s compromising Trump, lies a bit of information that is
- [OTW Recommended Products: VMWare, Kasperky and Palo Alto Networks](https://hackers-arise.com/otw-recommended-products-vmware-kasperky-and-palo-alto-networks/) - Many of my readers ask me for recommendations on products that I use. Beginning with this post I will list products that I endorse. In ALL cases, these will be be products that I actually use and endorse, not simply advertisements for anything, like you will find in nearly every other website. If don’t use
- [Evading Firewalls and IDS/IPS While Scanning the Target](https://hackers-arise.com/evading-firewalls-and-ids-ips-while-scanning-the-target/) - As an outside attacker/pentester, we often have to deal with security devices that may interfere with our unfettered access to the network and its hosts by our scanning tools. At the least, we should expect firewalls and IDS’s to attempt to block or alert on our scanning activity. Although this might not be disastrous initially,
- [Bypassing Password Authentication on Win 7](https://hackers-arise.com/bypassing-password-authentication-on-win-7/) - Editor’s Note: This article was submitted by Skrub, a loyal reader from my Null Byte days. Although he submitted it as two separate articles, I combined them into a single article with two parts. Enjoy! This is my first article on Hackers-Arise, it’s based off of a project that I’m working on at school which
- [Using FOCA to Gather Website Metadata](https://hackers-arise.com/using-foca-to-gather-website-metadata/) - My preference for Linux as a hacking platform is well documented, and I have even created a series of tutorials to train new hackers. Without being proficient in Linux, you can’t really call yourself a hacker. Every once in while, though, a hacking tool comes out for Windows that makes me stand up and take
- [Hack to Spy: Building a Raspberry Spy Pi, Part 03](https://hackers-arise.com/hack-to-spy-building-a-raspberry-spy-pi-part-3/) - In my previous two posts in this series, I showed you how to set up a Raspberry Pi to be a spy device and then showed you how to use the Pi’s software to capture still images from your newly created Spy Pi. In this article, I will show you how to capture full video
- [Building a Raspberry Spy Pi, Part 04: Adding Listening Capability](https://hackers-arise.com/building-a-raspberry-spy-pi-part-4-adding-listening-capability/) - Welcome back, my hacker noviates! In this series, we are building a Spy Pi using the tiny, but powerful Raspberry Pi. Our intention is build a device that can be used to watch and listen in any remote location. For the first 3 segments in this series, you can read them here. In this fourth
- [Be Careful Out There! The Legal Issues of Hacking](https://hackers-arise.com/be-careful-out-there-the-legal-issues-of-hacking/) - So many of you have asked me about what is legal and illegal in hacking/pentesting that I decided it was time to address it directly. In our discipline, we may WANT to ignore the legal consequences until they slap us upside the head, but that’s not a very prudent strategy. To help all my apprentice
- [Website Scraping, Part 01: Email Scraping for Hackers](https://hackers-arise.com/website-scraping-part-1-email-scraping-for-hackers/) - As a pentester/hacker, gathering email addresses from potential victims can have a multitude of uses. When we have email addresses of key personnel, we can launch attacks by email to get people to click on a malicious link or direct them to our malicious website where we can send XSS attacks and others browser-based attacks.
- [Physical Security: Lock Picking Basics for Hackers](https://hackers-arise.com/physical-security-lock-picking-basics-for-hackers/) - Welcome back, my aspiring cyberwarriors! Physical perimeter security is just a important as your IT perimeter security. If the hacker can gain access to your physical systems…GAME OVER! Taking over you network is SO much easier once the attacker is physically inside your perimeter and on your network. For this reason, we have begun a
- [IoT Hacking: How We Hacked the Dahua Cameras In Ukraine and Russia](https://hackers-arise.com/iot-hacking-how-we-hacked-the-dahua-cameras-in-ukraine-and-russia/) - Welcome back, my aspiring cyberwarriors! As you know, Hackers-Arise played a key role in the Ukrainian resistance to Russia’s brutal attack. We did many things to support Ukraine including attacking Russia’s industrial infrastructure, DoS’ed the corporate and government websites, and trained hackers to protect Ukraine. What we may be most famous for is the hacking
- [What is a Mesh Network and How Does it Work with the Internet of Things (IoT)?](https://hackers-arise.com/what-is-a-mesh-network-and-how-does-it-work-with-the-internet-of-things-iot/) - Welcome back, my aspiring cyberwarriors! In my book, Network Basics for Hackers, I talked about the various types of network topologies. For your local area network (LAN), the star topology network is the most important and prevalent. I also mentioned the mesh topology because I believe that this will become the most important network topology
- [What is Zigbee and Why is it Used Extensively in SCADA and IoT?](https://hackers-arise.com/what-is-zigbee-and-why-is-it-used-extensively-in-scada-and-iot/) - Welcome back, my aspiring cyberwarriors! As our digital world expands to greater and greater physical space, the need for a simple, energy efficient wireless protocol becomes increasingly necessary. SCADA/ICS facilities sometimes span miles or even tens of miles and the ability to span these miles with cable simply is not practical. These types of facilities
- [Exploit Development: Building Your Own Fuzzer with BASH](https://hackers-arise.com/exploit-development-building-your-own-fuzzer-with-bash/) - Welcome back, my aspiring cyberwarriors! In the digital battleground of cybersecurity, web application fuzzing stands as a critical technique for uncovering vulnerabilities and developing exploits. This practical guide equips aspiring cyber warriors with the knowledge to wield BASH scripting as a powerful weapon in creating custom fuzzing tools. Fuzzing is a dynamic analysis
- [Exploit Development: Fuzzing with American Fuzzy Lop++ (AFL++) to Find Zero-Day Vulnerabilities](https://hackers-arise.com/exploit-development-fuzzing-with-american-fuzzy-lop-afl-to-find-zero-day-vulnerabilities/) - Welcome back, my aspiring cyberwarriors! Finding vulnerabilities in applications and services is the first step toward developing your own zero-day exploit. Vulnerability scanners are great for finding KNOWN vulnerabilities, but to find unknown or zero-day vulnerabilities a fuzzer is an excellent tool that you should be familiar with. As you know, fuzzing is the
- [Software Defined Radio for Hacker: How to Spoof your Global Position (GPS) to Hide Your Location](https://hackers-arise.com/software-defined-radio-for-hacker-how-to-spoof-your-global-position-gps-to-hide-your-location/) - Welcome back, my aspiring cyberwarrior!As you already know, it is possible to spoof both your IP address and MAC address, but can you spoof my global position (GPS)? The answer, of course, is YES! This is one of the beauties of becoming conversant and skilled in Software Defined Radio (SDR). There are a number of reasons
- [Linux Basics for Hackers, Part 03: Creating, Removing and Renaming Files and Directories](https://hackers-arise.com/linux-basics-for-the-aspiring-hacker-part-3-creating-removing-and-renaming-files-and-directories/) - Welcome back, my aspiring hackers!In part 1 of this series, I introduced you to the file system, the cd or change directory command and some other Linux basics. In Part 2 of this series, I showed you how to find stuff in Linux.In this tutorial we will be looking at how to;1. create a file2.
- [Linux Basics for Hackers, Part 04: Networking](https://hackers-arise.com/linux-basics-for-the-aspiring-hacker-part-4-networking/) - From working with thousands of aspiring hackers, I have found that very often the greatest hurdle to getting started in hacking is unfamiliarity with Linux. After years of working with the GUI’s of MAC and Windows, newbies in this field get scared away by the command line and Linux. Overcoming that hurdle is primary motivation
- [Linux Basics for Hackers, Part 06: Managing File Permissions](https://hackers-arise.com/linux-for-hackers-part-6-managing-file-permissions/) - I’ve been writing these Linux tutorials in an attempt to fill the void in the education of some aspiring hackers into the Linux operating system. Without good Linux skills, the world of hacking is largely closed door to you. There is a lot to know, and in this tutorial, we’ll look at Linux file permissions.Linux
- [Linux Basics for Hackers, Part 09: Text Manipulation](https://hackers-arise.com/linux-for-hackers-part-9-text-manipulation/) - As I have mentioned several times in my previous Linux tutorials, nearly everything in Linux is a file, and very often they are text files. For instance, all of the configuration files in Linux are text files. To reconfigure an application in Linux, we simply need to open the configuration file, change the text, re-save,
- [Linux Basics for Hackers, Part 10: Loadable Kernel Modules (LKM)](https://hackers-arise.com/linux-basics-for-hackers-part-10-loadable-kernel-modules-lkm/) - Welcome back, my aspiring cyberwarriors!In this continuing series on Linux Basics for Hackers, I now want to address Loadable Kernel Modules (LKMs). LKM’s are critical to the Linux administrator as they provide them the capability to add functionality to the kernel without having to recompile the kernel. Things like video and other device drivers can
- [Digital Forensics: Hackers-Arise Uncovers Mastermind of Global Scam!](https://hackers-arise.com/digital-forensics-hackers-arise-uncovers-mastermind-of-global-scam/) - As you know, Hackers-Arise offers a service we call Digital Forensic Investigator for Hire. Most of our cases fit into the following categories;1. Cyber Bullying2. Identity Theft3. Bitcoin and other cryptocurrencies stolen4. Porn revengeRecently, a totally different type of case came to our attention.Apparently, there is an organization known as the World Association of Science,
- [Network Forensics: Wireshark Basics, Part 01](https://hackers-arise.com/network-forensics-wireshark-basics-part-1/) - Welcome back, my aspiring Digital Forensics Investigators!Although Wireshark is the most widely used network and protocol analyzer, it is also an essential tool to the field of network forensics. For that reason, every Digital Forensic Investigator should be proficient using Wireshark for network and malware analysis.This tutorial is intended to provide the aspiring digital forensic
- [Basics of XORing](https://hackers-arise.com/basics-of-xoring/) - In a recent tutorial, I showed you how to use shikata_ga_nai to change the signature of a payload to evade detection by security devices (firewalls, IDS, etc.) and AV software. Shikata_ga_nai is an encoding module in Metasploit that XORs the payload through multiple iterations (the number of iterations is up to you), thereby changing the
- [Linux Firewalls: Uncomplicated Firewall (ufw)](https://hackers-arise.com/linux-firewalls-uncomplicated-firewall-ufw/) - Welcome back, my aspiring security engineers!There are a multitude of reasons for using Linux but one of the most overlooked is its capabilities and versatility as a firewall. While many firms spend thousands or tens of thousands of dollars on state-of-the art firewalls, you can build your own with just few hours of your time.
- [Linux Firewalls: Creating an Application Layer IDS/IPS with fwsnort](https://hackers-arise.com/linux-firewalls-creating-an-application-layer-ids-ips-with-fwsnort/) - Welcome back, my aspiring cyberwarriors!In a previous tutorial here, I introduced you to the Linux firewall, iptables. iptables enables you create a custom firewall for your network quickly and easily without the cost of the commercial firewalls. In this tutorial, we will build upon iptables to create an application layer IDS/IPS by combining iptables with
- [Network Basics for Hackers, Part 03: Subnetting, Network Masks, and CIDR Basics](https://hackers-arise.com/network-basics-for-hackers-part-3-subnetting-network-masks-and-cidr-basics/) - Welcome back, my aspiring cyber warriors!In this series, we are exploring networks of all kinds and how to break them. In this tutorial we will examine subnetting and CIDR notation. To begin, let’s state the obvious. First, to become a network engineer or network security engineer you should understanding subnetting. Second, there a number of tools
- [Network Basics for Hackers, Part 04: Address Resolution Protocol or ARP](https://hackers-arise.com/network-basics-for-hackers-address-resolution-protocol-or-arp/) - Welcome back, my aspiring cyber warriors!Understanding the many network protocols can enhance your ability to gain information and access to your target. Address Resolution Protocol (or ARP as it commonly known) is used on Ethernet networks to assign IP addresses to globally unique MAC addresses. In this way, when a new system enters the network,
- [Linux Basics for Hackers, Part 11: Linux Firewalls (iptables)](https://hackers-arise.com/linux-basics-for-hackers-part-11-linux-firewalls-iptables/) - Welcome back, my aspiring cyber warriors!A firewall is one of the key security measures necessary for a secure network. Linux has a number of firewalls available to the infosec practitioner that can be crucial to securing their systems without the high cost of commercial systems. It only requires a bit of knowledge and training.A firewall
- [Network Basics for Hackers, Part 07: Server Message Block (SMB) and Samba](https://hackers-arise.com/network-basics-for-hackers-server-message-block-smb-and-samba/) - Welcome back, my aspiring cyber warriors!This series is intended to provide the aspiring cyber warrior with all the information you need to function in cyber security from a network perspective, much like my “Linux Basics for Hackers” is for Linux. In this tutorial we will address Server Message Block or SMB. Although most people have heard
- [Web App Hacking: Web Application Technologies, Part 01](https://hackers-arise.com/web-app-hacking-web-application-technologies-part-1/) - Welcome back, my aspiring hackers!Before embarking upon the study of web application hacking, you need to be familiar with the technologies being used by web apps. To hack the web applications, we need at least a cursory understanding of the multitude of technologies being implemented into modern web applications. To that end, I will try
- [Wi-Fi Hacking: Anatomy of Wi-Fi Frames for Hackers](https://hackers-arise.com/wi-fi-hacking-anatomy-of-wi-fi-frames-for-hackers/) - Welcome back, my aspiring Wi-Fi Hackers!In previous tutorials here at Hackers-Arise, we have demonstrated how to hack Wi-Fi (IEEE 802.11) access points using multiple techniques, including;1. WPA2 aircrack-ng Attack2. WPS Reaver Attack3. Evil Twin Attack4. PMKID Attack5. Continuous Denial of Service (DoS) Attack6. Evading Wi-Fi Authentication7. Using wifiphisher to Social Engineer a Wi-Fi PasswordIn this
- [Network Forensics, Part 03: tcpdump for Network Analysis](https://hackers-arise.com/network-forensics-part-3-tcpdump-for-network-analysis/) - Welcome back, my aspiring network forensic analysts!tcpdump in ActionTcpdump was among the very first (1988) Linux/UNIX based sniffers and is built into most Linux/UNIX distributions. Although it may not be the easiest sniffer use, its versatility and lightweight design make it worth knowing. Tcpdump can be particularly useful if you have to analyze a non-GUI
- [Automobile Hacking, Part 01: The CAN Protocol](https://hackers-arise.com/automobile-hacking-part-1-the-can-protocol/) - Automobile hacking is one of the leading-edge areas of our hacking discipline. As our automobiles have become smarter and smarter, they include more and more electronics, making them more and more vulnerable. As we are literally and figuratively turning the corner into the era of the driver-less or autonomous car, hacking automobiles will become even
- [Essential Tools of the Master Hacker](https://hackers-arise.com/essential-tools-of-the-master-hacker/) - Welcome back, my aspiring cyber warriors!Often when students start down the path towards becoming a master hacker, they can become overwhelmed by the plethora of tools that are available to them. Often times, this can lead to frustration and inertia or worse, as the number of tools seems more than one can address and master. For
- [SCADA Hacking: SCADA/ICS Communication Protocols (Modbus)](https://hackers-arise.com/scada-hacking-scada-ics-communication-protocols-modbus/) - SCADA/ICS systems are differentiated from traditional information systems in a number of ways. Probably the most important differentiation are the many communication protocols. Unlike traditional IT systems with their standardized TCP/IP protocols, SCADA/ICS systems are marked by significant variation in their communication protocols.SCADA/ICS ManufacturersThere are numerous SCADA/ICS protocols sometimes different protocols within the many manufacturers
- [Windows Remote CMD Commands for Hacking](https://hackers-arise.com/windows-remote-cmd-commands-for-hacking/) - Many new hackers come from a Windows background, but seldom–if ever–use its built-in command-line tools. As a hacker, you will often be forced to control the target system using just Windows commands and no GUI. Although we would love to get Metasploit’s Meterpreter on the target and use all its capabilities on the owned system, that
- [Linux Basics for Hackers, Part 02: Finding stuff](https://hackers-arise.com/linux-basics-for-the-aspiring-hacker-part-2-finding-stuff/) - In many cases, the greatest hurdle to becoming a white hat hacker is proficiency with the command line (cli) Linux. This series is designed specifically for those with aspirations of becoming a pentester/white hat hacker, but lack the basic CLI Linux skills. Aspiring Hackers just starting with Linux are often faced with the dilemma of how to
- [Linux Basics for Hackers, Part 05: Adding and Removing Software](https://hackers-arise.com/linux-for-hackers-part-5-adding-and-removing-software/) - One of the most fundamental tasks in Linux or–for that matter–any operating system, is adding and removing software. We often need to install software that did not come with our distribution or remove unwanted software. In Debian (of which Kali and Ubuntu belong to), the software package manager is aptitude. Within aptitude, the primary command
- [Linux Basics for Hackers, Part 07: BASH Scripting Basics](https://hackers-arise.com/linux-for-hackers-part-7-bash-scripting-basics/) - This series, Linux for Hackers, was developed to help familiarize the uninitiated into the world of using Linux for hacking. If you have not read Part 1-6, you can find them here. Any self-respecting hacker must be able to script. For that matter, any self-respecting Linux administrator must be able to script. With the arrival of
- [The Hacker Methodology](https://hackers-arise.com/the-hacker-methodology/) - Many newbie hackers seem to be confused regarding the process or methodology to employ a successful hack. Most want to simply go straight to the exploit without doing the due diligence to make certain that the hack will work and you won’t get caught.Here, I want to lay out for you the proper methodology, with
- [Basics of Hexadecimal](https://hackers-arise.com/basics-of-hexadecimal/) - It has become clear from some of your questions that quite a few of you are unfamiliar with the hexadecimal system, or simply, hex. The hexadecimal system is used throughout computing and if you have never studied this Base16 numering system, it may appear relatively opaque.For those of you who may have been overwhelmed by
- [Linux Basics for Hackers, Part 08: Managing the User Environment](https://hackers-arise.com/linux-for-hackers-part-8-managing-the-user-environment/) - Managing the User EnvironmentAmong the areas that Linux newcomers find problematic, managing the user environment variables might be the most obscure. Although Windows operating systems have environment variables, most users seldom–if ever–manage their environment variables. To get the most from our Linux hacking system, you need to both understand and manage environment variables for optimal
- [Netcat, the All-Powerful](https://hackers-arise.com/netcat-the-all-powerful/) - Netcat is one of those few tools–like nmap, Metasploit, Wireshark and few others– that every hacker should be familiar with. It is simple, elegant and has a multitude of uses.For instance, netcat can be used to;scan to see if a port is open on a remote systempull the banner from a remote systemconnect to a
- [IP Camera Hacking: Hacking IP Cameras with Cameradar](https://hackers-arise.com/ip-camera-hacking-hacking-ip-cameras-with-cameradar/) - Welcome back, my aspiring IP camera hackers!As most of you know, we have played a key role in the defense of Ukraine. Among our many activities in defense of Ukraine is the hacking of IP cameras throughout the country. In this way, we can spy on Russian activities and war crimes. We did this at
- [Physical Security: Single Pin Lockpicking for Hackers and Pentesters](https://hackers-arise.com/physical-security-single-pin-lockpicking-for-hackers-and-pentesters/) - Welcome back, my aspiring cyberwarriors! Physical security is often an overlooked area of cybersecurity. If the attacker can physical gain access to your facility and your devices, GAME OVER! As a result, we have begun a new tutorial series and classes on physical security. Introduction Lock picking is a critical skill in a pentester’s toolkit,
- [Introduction to Regular Expressions (Regex)](https://hackers-arise.com/introduction-to-regular-expressions-regex/) - Welcome back, my aspiring cyber warriors! This next subject might seem a bit obscure to the uninitiated–but I promise– this lesson will benefit you significantly either as a hacker or system admin. This tutorial will cover what is usually referred to as a regular expressions, or regex for short. Manipulating Text in Linux Remember, nearly
- [Metasploit Basics for Hackers, Part 01: Getting Started with Metasploit](https://hackers-arise.com/metasploit-basics-for-hackers-part-1-getting-started-with-metasploit/) - Welcome back, my aspiring cyber warriors! In this series, I will introduce you to the world’s most popular hacking/pentesting platform, Metasploit! Metasploit is the world’s leading exploitation/hacker framework. It is used–to some extent–by nearly every hacker/pentester. As such, you really need to become familiar with it if you want to enter and prosper in
- [Open Source Intelligence (OSINT): OSINT Tools for Bitcoin Investigations](https://hackers-arise.com/open-source-intelligence-osint-osint-tools-for-bitcoin-investigations/) - Welcome back, my aspiring OSINT investigators! One of the most lucrative areas for OSINT investigators is the Bitcoin and cryptocurrency scam and theft investigations and recovery. As the price of these cryptocurrencies has soared, so has the incidence of scams and thefts. A reputable source has estimated the value of bitcoin and crypto-currency thefts and
- [The Default Passwords of Nearly Every IP Camera](https://hackers-arise.com/the-default-passwords-of-nearly-every-ip-camera/) - Welcome back, my aspiring camera hackers!As you know, at the beginning of the Russian invasion of Ukraine, the Ukrainian Army asked for our assistance to hack IP cameras across Ukraine. This was intended provide surveillance to the Ukraine military and intelligence on Russian troop movements and later to record war crimes. You can read more
- [Reverse Engineering Malware, Part 03: IDA Pro Introduction](https://hackers-arise.com/reverse-engineering-malware-part-3-ida-pro-introduction/) - Welcome back to my Reverse Engineering Malware course! This course is designed for those of you who want to ascend to the pinnacle of Digital Forensics and Cyber Security. There are many tools available for reverse engineering, but one disassembler stands alone. Nearly everyone in this industry uses IDA Pro to some extent. IDA Pro
- [Digital Forensics, Part 08: Live Analysis with sysinternals](https://hackers-arise.com/digital-forensics-part-8-live-analysis-with-sysinternals/) - Welcome back, my aspiring forensic investigators! In this tutorial, we will use another tool that can be used in for live system forensics—Sysinternals—a suite of tools developed by Mark Russinovich. Many times as a forensic investigator, we need to examine a live system in a corporate investigation or incident response, without the need or the
- [Wireless Hacking: Getting Started with aircrack-ng](https://hackers-arise.com/wireless-hacking-getting-started-with-aircrack-ng/) - In the first part of my series on Wi-Fi hacking, we discussed the basic terms and technologies associated with Wi-Fi. Now that you have a firm grip on what Wi-Fi is exactly and how it works, we can start diving into more advance topics on how to hack Wi-Fi. In this article, we’ll take a
- [SCADA Hacking: SCADA/ICS Protocols (Profinet/Profibus)](https://hackers-arise.com/scada-hacking-scada-ics-protocols-profinet-profibus/) - One of the challenges of hacking/pentesting SCADA/ICS has been that the protocols employed by this industry are different and distinct from “normal” IT. SCADA/ICS installations use a wide variety of protocols that often share little with the well-known Ethernet and TCP/IP protocols. For years, this difference has shielded these installations from security issues as a
- [Metasploit Framework Updated to Hack Cars!](https://hackers-arise.com/metasploit-framework-updated-to-hack-cars/) - The powerful hacker exploitation framework, Metasploit, has recently been updated with attacks against automobiles. This is HUGE, as automobile hacking will be one of the hottest Infosec areas over the next few years.Rapid7 (the developer of Metasploit) research director Craig Smith says Metasploit can now work with almost any vehicle interface.“Metasploit condensed a slew of
- [Can We Hack the Hacker?](https://hackers-arise.com/can-we-hack-the-hacker/) - With each day’s dawning, come new cyber attacks. No one is immune from these attacks; national governments, corporations and individuals are all vulnerable to these attacks and they seem to be accelerating as our world becomes increasingly dependent upon digital means of functioning. In a era where nearly every aspect of our lives has a
- [Reverse Engineering Malware, Part 04: Windows Internals](https://hackers-arise.com/reverse-engineering-malware-part-4-windows-internals/) - Welcome back to my Reverse Engineering Malware series. In general, reverse engineering of malware is done on Windows systems. That’s because despite recent inroads by Linux and the Mac OS, Windows systems still comprise over 90% of all computing systems in the world. As such, well over 90% of malware is designed to compromise Windows
- [Reverse Engineering Malware: Why YOU Should Study Reverse Engineering Malware](https://hackers-arise.com/reverse-engineering-malware-why-you-should-study-reverse-engineering-malware/) - I am about to embark upon probably the most technically demanding tutorial series, Reverse Engineering Malware. Before I do so, I thought I would take a few moments to explain why YOU should study and invest your time into reverse engineering. Please take a moment to read the following and then, hopefully, decide whether this
- [Man-the-Middle (MiTM) Attack with ARPspoofing](https://hackers-arise.com/man-the-middle-mitm-attack-with-arpspoofing/) - ARPspoofing and MiTM One of the classic hacks is the Man in the Middle attack. In this attack, the hacker places themselves between the client and the server and thereby has access to all the traffic between the two. In general, when an attacker wants to place themselves between a client and server, they will
- [Reconnaissance with Unicornscan](https://hackers-arise.com/reconnaissance-with-unicornscan/) - Port Scanning with Unicornscan In this section of Hackers-Arise, we have looked at a variety of tools for port scanning and OS fingerprinting from nmap, hping and p0f. In this lesson on port scanning and reconnaissance, I want to introduce you to one more tool, unicornscan. While nmap is the most widely used port scanner
- [Android Hacking, Part 02: Setting Up an Android Hacking Lab](https://hackers-arise.com/android-hacking-setting-up-an-android-hacking-lab/) - Each and every day, the world is turning to and adopting the smartphone platform as the digital device of choice. People are not only using smartphones for voice communication, but also web services, email, SMS, chatting, social networking, photography, payment services, and so on. There are 2.3 billion smartphone subscriptions in the world today, and
- [Avast's CCleaner being used by hackers. Hackers-Arise finds crypto-currency attacks linked to Av](https://hackers-arise.com/avasts-ccleaner-being-used-by-hackers-hackers-arise-finds-crypto-currency-attacks-linked-to-av/) - Almost two weeks ago, as part of a forensic investigation for our client, we discovered crypto-currency attacks coming from Avast AV. Avast’s attorneys used their clout to force our website offline this past weekend to keep the word from getting out. We had to remove the article to get Hackers-Arise back online or face a
- [Metasploit Basics: Car Hacking with Metasploit](https://hackers-arise.com/metasploit-basics-car-hacking-with-metasploit/) - As part of this rapid development in automobile/car hacking, one of my favorite hacking tools, Metasploit, has developed the capability and modules to connect to cars (for more on Metasploit, check out my series “Metasploit Basics” and my upcoming Metasploit Kung-Fu course that now includes car hacking with Metasploit). If your version of Metasploit does
- [Using Hping3 for Reconnaissance, Part 01](https://hackers-arise.com/using-hping3-for-reconnaissance-part-1/) - One of the most time-consuming, but necessary, activities in hacking is reconnaissance. Before we can hack a system, we need to know what operating system it’s running, what ports are open, what services are running, and hopefully, what applications are installed and running. Good reconnaissance increases our chance for success and reduces our chances of
- [Web App Hacking: Overview and Strategy for Beginners](https://hackers-arise.com/web-app-hacking-overview-and-strategy-for-beginners/) - In previous tutorials, we have touched on some of the techniques and tools for web app hacking. We looked at web app vulnerability testing, website cloning, web app footprinting, web app password cracking, and many others. In this series, we will begin with the basics and slowly advance to more advanced techniques and tools. This
- [Web App Hacking: Spidering a Web Site with Web Scarab](https://hackers-arise.com/web-app-hacking-spidering-a-web-site-with-web-scarab/) - Web Applications (apps) provide so much opportunity for mischief by hackers. They can be defaced and compromised and probably most importantly, they can provide an entre’ point to the corporation’s internal network and resources (most importantly, the database). This series is designed to show you the many ways to hack these Internet facing applications. Now
- [Satellite Hacking, Part 01: Getting Started](https://hackers-arise.com/satellite-hacking-part-1-getting-started/) - Welcome back, my aspiring radio satellite hackers! In this series of tutorials, we will be exploring hacking satellites from a multitude of approaches. Satellites have become a ubiquitous and necessary technology in our everyday lives. They provide us with internet access, television and radio signals, location services, satellite phone service and, of course, satellite images
- [The Art and Science of Social Engineering in the Age of AI, February 11-13](https://hackers-arise.com/the-art-and-science-of-social-engineering-in-the-age-of-ai-february-11-13/) - Many novices to cybersecurity underestimate the importance of social engineering. More experienced hands understand that social engineering is probably the greatest threat to our networks. Many of the most significant hacks in history had a social engineering element including; BlackEnergy3 attack against Ukraine’s power gridTarget POS2016 Presidential Campaign and DCCC email hack Bangladesh Bank HeistTwitter Bitcoin
- [Kubernetes Hacking: Attacking Kubernetes Clusters Using The Kubelet API](https://hackers-arise.com/kubernetes-hacking-attacking-kubernetes-clusters-using-the-kubelet-api/) - Welcome back, aspiring cyberwarriors! In this article, we will explore how to search for and exploit vulnerabilities in the Kubernetes Kubelet API, focusing on its default unauthenticated access. Kubernetes is a portable, extensible, open-source platform for managing containerized workloads and services. When you deploy Kubernetes, you get a cluster. A Kubernetes cluster consists of a set
- [Socat: The Advanced Hacker's Network Tool](https://hackers-arise.com/socat-the-advanced-hackers-network-tool/) - Welcome back, my aspiring cyberwarriors! In the world of cybersecurity, certain tools become legendary not because they’re flashy, but because they’re incredibly powerful when used correctly. Socat is one such tool, serving as an advanced version of Netcat. The name stands for “Socket CAT,” and while it might seem intimidating at first, it’s become an essential
- [Database Hacking: SQLite Essentials and Attack Strategies](https://hackers-arise.com/database-hacking-sqlite-essentials-and-attack-strategies/) - Welcome back, aspiring cyberwarriors! SQLite is one of the most commonly used database engines, embedded in countless applications, mobile devices, and web services. Its compact design makes it a popular choice for developers, but it’s also an attractive target for hackers. Whether you’re a penetration tester, cyberwarrior, or security researcher, mastering SQLite can open up new
- [Hackers-Arise Now Offers Key Cybersecurity Services!](https://hackers-arise.com/hackers-arise-now-offers-key-cybersecurity-services/) - All of you know about the excellent cybersecurity training Hackers-Arise offers but now we are expanding to offer your business the services of our outstanding staff! These services include; Penetration TestingVulnerability AssessmentDigital ForensicsIncident ResponseInvestigating, Identifying, and Finding Your HackersTracking Hackers and others across the InternetFinding lost relatives, friends, or loversStaff consulting and trainingCybersecurity training materialsDeveloping a Cybersecurity
- [Linux Basics for Hackers, the Make Command: Compiling and Installing Software from Source in Linux](https://hackers-arise.com/linux-basics-for-hackers-the-make-command-compiling-and-installing-software-from-source-in-linux/) - Welcome back, aspiring Linux enthusiasts! In our journey through the Linux ecosystem, we often encounter situations where the software we need isn’t available through standard package managers like apt or yum. Or perhaps we need a bleeding-edge version with features not yet available in the repositories. When this happens, knowing how to compile and install software
- [Python Basics for Hackers, Part 6: Decoding an Encrypted Message with Frequency Analysis (Cryptanalysis)](https://hackers-arise.com/python-basics-for-hackers-part-6-decoding-an-encrypted-message-with-frequency-analysis-cryptanalysis/) - Welcome back, my aspiring cyberwarriors! Cryptography is a fundamental skill of cybersecurity. It enables so many of the protocols and technologies that keep our data safe such as passwords, Internet traffic, database info, messaging, and so much more. Cryptanalysis is the flip side of cryptography. It is the science of de-crypting or unmasking the encrypted data. Imagine
- [Linux Basics for Hackers: Building a Router with nftables](https://hackers-arise.com/linux-basics-for-hackers-building-a-router-with-nftables/) - Welcome back, aspiring cyberwarriors! As you know, traditional hardware routers can be expensive, inflexible, and often come with proprietary firmware that limits your control. By leveraging the power of Linux and nftables, you can create a customized routing solution that gives you complete control over your network traffic, security policies, and performance optimizations. Nftables represents the evolution
- [Open-Source Intelligence (OSINT): Unmasking YouTube with OSINT Tools!](https://hackers-arise.com/open-source-intelligence-osint-unmasking-youtube-with-osint-tools/) - Welcome back, aspiring cyberwarriors! In our digital investigations, we often need to extract valuable intelligence from video content. This might include identifying locations, uncovering connections between individuals, finding deleted content, or simply gathering information that someone has inadvertently shared on camera. It is critical that we know how to effectively search through the massive repository of
- [BASH Scripting for Hackers, Part 01: BASH Scripting Basics](https://hackers-arise.com/bash-scripting-for-hackers-part-01-bash-scripting-basics/) - If you have already read Linux Basics for Hackers, Part 07: BASH Scripting Basics you can skip this article and move to the more advanced article BASH Scripting for Hackers, Part 02: Building a Continuous Wi-Fi Denial of Service Tool. This article covers the same information as Linux Basics for Hackers, Part 07 This series, Linux
- [Scripting Basics for Hackers: BASH Scripting for Reconnaissance](https://hackers-arise.com/scripting-basics-for-hackers-bash-scripting-for-reconnaissance/) - Tools are only as good as the person using them. It doesn't matter if you have the latest computer or the fanciest keyboard – if you don't understand how systems work, you won't be able to hack them effectively. That's why learning, practicing, and gaining real-world experience are so important in cybersecurity. With this in
- [Physical Security: Hacking Elevators to Gain Physical Access](https://hackers-arise.com/physical-security-hacking-elevators-to-gain-physical-access/) - Welcome back, my aspiring cyberwarriors! In the area of physical security and red team operations, elevators present an often-overlooked but strategically important vector. While they may seem like mundane infrastructure, elevators are embedded with layers of logic, legacy systems, and mechanical overrides that can be leveraged or manipulated with the right knowledge. Understanding
- [Vagrant: Building Secure Testing Environments](https://hackers-arise.com/vagrant-building-secure-testing-environments/) - Welcome back, aspiring cyberwarriors! Creating and managing virtual machines has traditionally been a tedious and time-consuming process. System administrators and developers often struggled with the challenges of replicating virtual environments across different servers, a task that becomes exponentially more complex when dealing with multiple VMs. This complexity not only slowed development cycles but also
- [Vulnerability Scanning: Automatic Search For Known CVEs With CVEScannerV2](https://hackers-arise.com/vulnerability-scanning-automatic-search-for-known-cves-with-cvescannerv2/) - Welcome back, aspiring cyberwarriors! During reconnaissance, our goal is to identify vulnerable services within our target’s network. To streamline this process, CVEScannerV2 was developed – a powerful Nmap script that bridges the gap between network scanning and vulnerability assessment. This tool enhances the capabilities of the widely-used Nmap scanner, offering security professionals a comprehensive
- [Open-Source Intelligence(OSINT): Sherlock - The Ultimate Username Enumeration Tool](https://hackers-arise.com/open-source-intelligenceosint-sherlock-the-ultimate-username-enumeration-tool/) - Welcome back, aspiring OSINT investigators! Social media platforms hold a wealth of personal and professional information, making them valuable for reconnaissance in penetration testing and cyberwarfare operations. Sherlock is a lightweight yet powerful tool designed to search for social media profiles using a username. In this article, we’ll guide you through installing and using
- [Cyber Threat Intelligence (CTI) and Network Defenses: Getting Started with CrowdSec](https://hackers-arise.com/cyber-threat-intelligence-cti-and-network-defenses-getting-started-with-crowdsec/) - Welcome back, aspiring cyberwarriors! In the ever-evolving landscape of cybersecurity, new tools and approaches are constantly emerging to combat the growing sophistication of cyber threats. One such innovative solution is CrowdSec, a free and open-source security automation tool that leverages the power of crowdsourcing to detect and mitigate cyber attacks. This article delves into
- [SDR (Signals Intelligence) for Hackers: Soon, all Cellphones will be Connected by Satellites](https://hackers-arise.com/sdr-signals-intelligence-for-hackers-soon-all-cellphones-will-be-connected-by-satellites/) - Welcome back, my aspiring cyberwarriors! In earlier posts here, we have described hacking satellite communication systems. While many might see that type of hacking as very advanced and maybe a bit esoteric, new technologies are about to make satellite communication ubiquitous for everyone with a cellphone. We are on the cusp on an era
- [The Hackers-Arise Cybersecurity/Hacker Starter Bundle](https://hackers-arise.com/the-hackers-arise-cybersecurity-hacker-starter-bundle/) - So many of you have asked for an inexpensive cybersecurity starter package and we have responded! The following package provides everything you need to get started in cybersecurity/infosec for just $169! Buy it now! This package includes;Linux Basics for Hackers v2 companion videos ($99 value)Certified WhiteHat Hacker Associate(CWA) Prep v2 course ($99 value)Getting Started Becoming
- [Hackers-Arise is Seeking an Editor!](https://hackers-arise.com/hackers-arise-is-seeking-an-editor/) - Hackers-Arise is a rapidly growing cybersecurity and training company. With our rapid expansion, we are in need a skilled editor. This editor will be responsible for editing our web site text and Master OTW’s books. Requirements:Excellent English writing skills (need not be native)Excellent editing skills in Microsoft Word or Open OfficeA working knowledge of hacking and
- [Bluetooth Hacking, Part 01: Getting Started with Bluetooth](https://hackers-arise.com/bluetooth-hacking-part-1-getting-started-with-bluetooth/) - Welcome back, my aspiring cyberwarriors! Today, Bluetooth is built into nearly all our devices and gadgets. These include our computers, smartphones, iPods, tablets, speakers, game controllers, keyboards, and many other devices. In this series, we will be focused on hacking mobile devices, tablets, and phones as they are the most fertile ground for hackers. The
- [Network Basics for Hackers, Part 06: Simple Mail Transport Protocol (SMTP)](https://hackers-arise.com/network-basics-for-hackers-part-6-simple-mail-transport-protocol-smtp/) - Welcome back, my aspiring cyberwarriors! In this series, Network Basics for Hackers, we explore the structure, operation and vulnerabilities of the major network protocols. In this way, the aspiring hacker/pentester/cyberwarrior will hopefully gain insight into not only it’s operation but also its vulnerabilities. In this segment of this series, we will examine the Simple Mail
- [Wi-Fi Hacking: Creating a Wi-Fi Scanner with Python and Scapy](https://hackers-arise.com/wi-fi-hacking-creating-a-wi-fi-scanner-with-python-and-scapy/) - Welcome back, my aspiring cyber warriors! Although there are numerous tools to hack Wi-Fi (802.11), to create your own tools you will need to understand the Wi-Fi protocol. In a previous tutorial, I explained the various types of frames in Wi-Fi. Now we will use that information to crate our own Wi-Fi scanner very similar
- [OSINT: Finding Email Passwords in Dumps with h8mail](https://hackers-arise.com/osint-finding-email-passwords-in-dumps-with-h8mail/) - Welcome back, my aspiring OSINT Investigators! Often as OSINT investigators, pentesters and hackers, we need to determine if a email address of the target exits and, if so, whether it has been compromised. There are a multitude of locations where compromised emails and passwords are stored and not all of them contain all the latest
- [Software Defined Radio (SDR) for Hackers: Setting Up Your HackRF One](https://hackers-arise.com/software-defined-radio-sdr-for-hackers-setting-up-your-hackrf-one/) - Welcome back, my aspiring SDR hackers! In the previous tutorials in this series, we used the inexpensive but capable RTL-SDR for our radio hacking adventures. Although the RTL-SDR is very capable of receiving a wide variety of radio signals, it is not capable of sending radio signals. In addition, the frequency range of the RTL-SDR
- [Essentials Skills of a Professional Hacker](https://hackers-arise.com/essentials-skills-of-a-professional-hacker/) - Many of my aspiring hackers have written to me asking the same thing. “What skills do I need to be a good, professional hacker?” As the hacker is among the most skilled information technology disciplines, it requires a wide knowledge of IT technologies and techniques. To truly be a great hacker, one must master many
- [Open Source Intelligence (OSINT): This Person Doesn't Exist (Deep Fakes and AI)](https://hackers-arise.com/open-source-intelligence-osint-this-person-doesnt-exist-deep-fakes-and-ai/) - Welcome back, my aspiring OSINT investigators! In OSINT investigations, we often run across a face that does not appear anywhere else on the Internet. When we run image searches on the major image search engines such as Google, Bing, Tin Eye or even the facial recognition software, PimEyes, we come up empty-handed. This could be
- [Confessions of a Professional Hacker: Can the CIA or other Intelligence Agencies Track My Every Move?](https://hackers-arise.com/confessions-of-a-professional-hacker-can-the-cia-or-other-intelligence-agencies-track-my-every-move/) - Welcome back my aspiring cyberwarrior and others interested in cybersecurity! When people find out I am a professional hacker, one of the most common questions they ask is, “Can the CIA (or other intelligence agency) track my every move?” The short answer is Yes!, they can track your every move if you have a
- [Privilege Escalation: The Dirty Pipe Exploit to Escalate Privileges on Linux Systems](https://hackers-arise.com/privilege-escalation-the-dirty-pipe-exploit-to-escalate-privileges-on-linux-systems/) - Welcome back, my aspiring cyberwarriors! Often, after successfully compromising a system, we are limited to the privilege’s of the compromised user. Regular users on systems usually have very limited privileges and can not access many of the resources or make changes to their systems and resources (databases, etc.). This is one of the many ways
- [Hackers-Arise Announces a Partner Program for Cybersecurity Training Centers Around the World!](https://hackers-arise.com/hackers-arise-announces-a-partner-program-for-cybersecurity-training-centers-around-the-world/) - Now, your training program can partner with one of the best cybersecurity training programs in the world!Hackers-Arise now offers an partner program where your training center can;Use Hackers-Arise Affiliate name and logoPurchase books for your training program from Hackers-Arise at deep discountsPurchase videos and other training materials at deep discounts.Contract with Hackers-Arise trainers at deep
- [The Cyber Cossacks: Hackers-Arise's New School in Kharkiv, Ukraine!](https://hackers-arise.com/the-cyber-cossacks-hackers-arises-new-school-in-kharkiv-ukraine/) - Ukrainian officials have requested that Hackers-Arise open a new cybersecurity/hacker school in Ukraine to train the next generation of cyber cossacks to protect Ukraine. These classes will begin in January 30, 2023 and is open to talented and motivated Ukraine citizens who are interested in protecting Ukraine from further Russian cyber attacks. Kharkiv is just 40
- [Radio Basics for Hackers, Part 01: Electromagnetic Radiation, Frequency and Wavelength](https://hackers-arise.com/radio-basics-for-hackers-part-1-electromagnetic-radiation-frequency-and-wavelength/) - Welcome back my aspiring cyberwarriors! As you already know, radio hacking is the leading edge of cybersecurity! So many things in our digital lives operate from radio signals, such as; Cellphones Drones Wi-Fi Bluetooth Near Field Payment Systems (NFC) Automobile Key Fobs Remote Control Systems such as home security RFID Satellite Signals GPS and so
- [Software Defined Radio (SDR) for Hackers: Choosing the Best Hardware for SDR](https://hackers-arise.com/software-defined-radio-sdr-for-hackers-choosing-the-best-hardware-for-sdr/) - Welcome back, my aspiring RF hackers! Before embarking upon the study of SDR for Hackers it is good idea to take a close look at the options available for hardware in this field. Of course, you will need a computer with a USB port but there are numerous options available for the radio receiver/transceiver. Let’s
- [What is a CyberWarrior? The Hackers-Arise Cyberwarrior Philosophy](https://hackers-arise.com/what-is-a-cyberwarrior-the-hackers-arise-cyberwarrior-philosophy/) - If you are reading this, you are very likely interested in the field of cybersecurity. You may also be considering studying cybersecurity, in order to make it your dream profession. If so, you have come to the right place! The Hackers-Arise Philosophy At Hackers-Arise, we don’t think about Red-Teams or Blue-Teams or White-Hat vs
- [Why YOU Should Study Software Defined Radio (Signals Intelligence) for Hackers!](https://hackers-arise.com/why-you-should-study-software-defined-radio-sdr-for-hackers/) - Hacking radio signals (RF) IS the leading edge of cybersecurity! So many applications in our modern life use radio frequency elements that it is hard to list them all. For instance, consider the following list: Automobile and vehicle access and monitoring Mouse and keyboards Cellphone Signals Remote control Telemetry Satellite transmissions Police and military
- [Hackers-Arise Announces a New Class! Using Artificial Intelligence in Cybersecurity](https://hackers-arise.com/hackers-arise-announces-a-new-class-using-artificial-intelligence-in-cybersecurity/) - Welcome back, my cyberwarriors!In recent months, AI or artificial intelligence has made great strides toward becoming a tool we may use everyday in cybersecurity. Very soon, we will likely be using it similarly to the way we use a search engine such as Google, Bing, or Shodan. These rapid developments seem to have raised a lot
- [Hackers-Arise Featured in Norway Public Television Documentary on the Cyberwar in Ukraine](https://hackers-arise.com/hackers-arise-featured-in-norway-public-television-documentary-on-the-cyberwar-in-ukraine/) - The war in Ukraine began February 24, 2022 when Putin marched his troops from Belorussia to invade Ukraine and attempt to capture the Ukraine capital, Kiev. The brave Ukrainians resisted this invasion and pushed back Putin’s troops. Within minutes of the war starting, Ukrainian officials made a request of the hackers of the world to
- [Metasploit](https://hackers-arise.com/metasploit/) - This section will be dedicated to training you on Metasploit. Metasploit is THE most popular hacking framework in the world and it is FREE. Although it does have its shortcomings, every aspiring hacker should understand how to use Metasploit. Below, I have begun with some Metasploit Basics and more will be coming soon. Metasploit, The
- [Ransomware: Build Your Own Ransomware, Part 01](https://hackers-arise.com/ransomware-build-your-own-ransomware-part-1/) - Welcome back, my aspiring cyberwarriors! Ransomware is rapidly becoming the most important form of malware afflicting our digital systems. Companies across the globe are being hit with various forms of malware including the new variant, Snake, designed specifically for SCADA/ICS systems. The Colonial Pipeline in the US was shutdown for nearly a week before paying
- [How to Find the Right Exploit for the Job](https://hackers-arise.com/how-to-find-the-right-exploit-for-the-job/) - This tutorial is designed to help you find and use exploits that will work against known vulnerabilities. As you already know, there is no “silver bullet” exploit that works against all systems, under all circumstances. Exploits are very specific. They work ONLY under very specific circumstances. In many cases, they are only effective against a
- [Using Shodan: The World's Most Dangerous Search Engine](https://hackers-arise.com/using-shodan-the-worlds-most-dangerous-search-engine/) - Welcome back, my aspiring cyber warriors! Nearly all of us have used a search engine such as Google or Bing to find material on the web. These search engines crawl the entire web and index nearly every word contained on those pages and rank them. This enables us find the information we are looking for
- [Covering your BASH Shell Tracks - Anti-Forensics](https://hackers-arise.com/covering-your-bash-shell-tracks-anti-forensics/) - Those of us who use the BASH shell regularly, love the fact that our history can be recovered simply by using the up and down arrows. This saves us significant time in re-writing our commands. The BASH or Bourne Again Shell saves the command history is a file called bash_history. At the same time, this
- [SCADA Hacking: Finding SCADA Systems using Shodan](https://hackers-arise.com/scada-hacking-finding-scada-systems-using-shodan/) - Welcome back, my aspiring cyber warriors! Previously, I wrote a tutorial on using Shodan–the world’s most dangerous search engine–to find unprotected web cams. As you know, Shodan simply scans the world’s IP addresses and pulls the banner and then indexes those banners. We can then search through Shodan for the parameters revealed in those banners
- [SCADA Hacking: Finding and Enumerating SCADA sites with nmap and nmap scripts](https://hackers-arise.com/scada-hacking-finding-and-enumerating-scada-sites-with-nmap-and-nmap-scripts/) - Welcome back, my hacker novitiates! With this lab, we will conduct recon on a SCADA target using port scanning and nmap scripts. Up until this point we have used passive recon using Shodan and Google dorks, but now we will be using a more active approach to find SCADA systems and do some active reconnaissance
- [SCADA Hacking: Monitoring SCADA Sites with Splunk](https://hackers-arise.com/scada-hacking-monitoring-scada-sites-with-splunk/) - SCADA sites are among the most vulnerable sites on the planet. These sites include industrial control systems, water treatment facilities, nuclear power plants, the electrical grid and just about any other industrial facility. These sites are likely to be the targets in any cyber war, or worse, targets of a cyber terrorist attack. Although we
- [The Cyber Most Wanted List](https://hackers-arise.com/the-cyber-most-wanted-list/) - The FBI has posted a “Most Wanted Cyber Criminal” list. I hope you aren’t on it.OTW OTWMaster OTW is a renowned cybersecurity expert, ethical hacker, and digital forensics consultant with over two decades of experience. A former computer science professor, he has trained hackers for all branches of the U.S. military, including the NSA, CIA,
- [Community Posts: Installing Kali in Virtual Box](https://hackers-arise.com/community-posts-installing-kali-in-virtual-box/) - We have our first community post on Hackers-Arise. G was gracious and generous enough to offer this short tutorial on installing Kali 2.0 on VirtualBox. If you have an article you would like to submit to Hackers-Arise, send it to admin-hackers-arise@protonmail.com OTW Hey guys! I’m G. Recently, I finally decided to check out Kali 2.0
- [Hacking the Mitsubishi Outlander PHEV](https://hackers-arise.com/hacking-the-mitsubishi-outlander-phev/) - In recent years, automobiles have become increasingly sophisticated. Most cars now have numerous integrated circuits (ICs) and a lots of software, both to optimize the vehicle operation (fuel and oxygen consumption, anti-lock brakes, automatic sensing and braking systems, for instance) and amenities for the owners. With this increased complexity and sophistication has come increased vulnerability.
- [How to Spy on Anyone's Smartphone](https://hackers-arise.com/how-to-spy-on-anyones-smartphone/) - Our smartphones are the reservoirs of our life. They contain so much personal and business information that anyone who can get into our smartphones will lay our life bare. It is clear that some national governments and employers are now spying on our smartphone activity. If one can compromise our cell phones they basically have
- [SCADA Hacking: Default Passwords for Nearly Every SCADA System](https://hackers-arise.com/scada-hacking-default-passwords-for-nearly-every-scada-system/) - Maybe not surprisingly, many SCADA systems still are authenticated with their default passwords from the manufacturer. SCADA security managers have relied upon “security by obscurity”, but those that do now–with Shodan and these passwords–will soon be looking for a new position! Enjoy! OTWMaster OTW is a renowned cybersecurity expert, ethical hacker, and digital forensics consultant
- [Digital Forensics, Part 01: Capturing a Forensically Sound Image](https://hackers-arise.com/digital-forensics-part-1-capturing-a-forensically-sound-image/) - Digital forensics is rapidly growing field of information security. The hacker needs to understand what evidence can be recovered and the security engineer needs to know how to find it. These skills are applicable to law enforcement, corporate investigations, network intrusions, malware analysis and incident response, among many others. No matter what area of information
- [SCADA Hacking: Building a SCADA Honeypot](https://hackers-arise.com/scada-hacking-building-a-scada-honeypot/) - In this tutorial, we will be setting up a SCADA/ICS Honeypot. As you know, a honeypot is a computer system that looks and acts like a vulnerable system. This particular honeypot is on an Ubuntu system with several SCADA protocols including modbus. Honeypots can be used to study attackers or divert them from more valuable
- [Anti-Forensics: How to Clear Evidence Like Hillary Clinton](https://hackers-arise.com/anti-forensics-how-to-clear-evidence-like-hillary-clinton/) - Those of my readers in the U.S. certainly know, and those of my readers elsewhere in the world probably know, the U.S. is having a presidential election this year. These candidates are BOTH disliked and distrusted by the majority of Americans. Donald Trump due to his narcissistic, racist, mysogynistic, and xenophobic bullying and Hillary Clinton
- [Digital Forensics, Part 03: Recovering Deleted Files](https://hackers-arise.com/digital-forensics-part-3-recovering-deleted-files/) - In the first two parts of this series, we captured a forensically sound image of the hard drive or other storage device and an image of the RAM. In this tutorial, we will recover any files deleted by the suspect. Among the most fundamental skills necessary for a forensic investigator, recovering deleted files is probably
- [SCADA Hacking: Testing and Monitoring our SCADA HoneyPot](https://hackers-arise.com/scada-hacking-testing-and-monitoring-our-scada-honeypot/) - In the previous article in this series, we built a sophisticated, low-interaction SCADA honeypot with conpot. In this article, we will now test that Honeypot to see what it looks like to an outside attacker. It’s critical that our HoneyPot look and act like an authentic SCADA system, if we are to be successful in
- [Web App Hacking: Getting Started with OWASP-ZAP](https://hackers-arise.com/web-app-hacking-getting-started-with-owasp-zap/) - Web apps are often the best vector to an organization’s server/database, an entry point to their entire internal network. By definition, the web app is designed to take an input from the user and send that input back to the server or database. In this way, the attacker can send their malicious input back to
- [Digital Forensics, Part 04: Finding Key Evidence in the Forensic Image](https://hackers-arise.com/digital-forensics-part-4-finding-key-evidence-in-the-forensic-image/) - In the previous articles in this series, we captured an forensic image of the suspect’s hard drive, we captured a forensic image of the suspect’s RAM and we had used Autopsy to recover deleted files from our first image. In this lab, we will use Autopsy to do file analysis. In order words, we will
- [Evading AV: Anatomy of ClamAV](https://hackers-arise.com/evading-av-anatomy-of-clamav/) - Welcome back, my novice hackers! One of the most common questions that Hackers-Arise readers ask is: “How can I evade detection by antivirus software on the target?” I have already talked about how AV software works, but to obtain a deeper understanding, what better way is there than opening up and dissecting some AV software?
- [SCADA Hacking: Modbus Master/Slave Simulation](https://hackers-arise.com/scada-hacking-modbus-master-slave-simulation/) - SCADA/ICS systems use many different protocols to communicate than your standard IT systems. The most widely used and the de facto standard is the modbus protocol. First developed by Modicon (now Schneider Electric) in 1979 as a serial protocol, it has been modified and updated to run over TCP and is often referred to as
- [Web App Hacking: Finding Vulnerable WordPress Sites](https://hackers-arise.com/web-app-hacking-finding-vulnerable-wordpress-sites/) - WordPress-based websites are among the most numerous on this planet (maybe other planets too, but I can’t vouch for that). According to WordPress’s own website, WordPress powers 23% of the top 10 million websites. That’s approximately 2.3 million sites using WordPress! WordPress websites are also among the most vulnerable websites. Generally, WordPress hosts small-to medium-sized
- [Digital Forensics, Part 06: Analyzing Windows Pre-fetch Files for Evidence](https://hackers-arise.com/digital-forensics-part-6-analyzing-windows-pre-fetch-files-for-evidence/) - This is the sixth tutorial in my Digital Forensics series. If you would like to read the previous 5, go the Forenics tab at the top of the Menu bar to find the first 5. Introduction to the Windows Prefetch SystemObviously, Microsoft did not implement the prefetch system for forensic analysis, but rather to improve
- [How to Use Maltego, Part 01: Gathering Info on a Domain](https://hackers-arise.com/how-to-use-maltego-part-1-gathering-info-on-a-domain/) - Before we attempt to exploit any target, it is wise to do proper reconnaissance. Without doing reconnaissance, you will likely be wasting your time and energy as well as risking your freedom. In previous guides, I have demonstrated multiple ways to perform reconnaissance including passive recon with Netcraft, active recon with Nmap or hping3, recon
- [Digital Forensics, Part 07: Browser Forensics](https://hackers-arise.com/digital-forensics-part-7-browser-forensics/) - This is the seventh installment in my Digital Forensics series. To read the first 6, please click here. Often, the web browser that a suspect uses can provide us a bounty of information on what the suspect was doing online before the capture of the system. Since so much activity is conducted using the browser
- [Hacking Databases, Part 01: Getting Started with Terms and Technologies](https://hackers-arise.com/hacking-databases-part-1-getting-started-with-terms-and-technologies/) - This is the first installment of a new series I am running here on Hackers Arise called “Hacking Databases”. We will start with the basics and progress to the more advanced techniques for hacking databases. Although there is a multitude of different hacker types, the one target they all share is the database. I often
- [What it Takes to Become a Successful Professional Hacker](https://hackers-arise.com/what-it-takes-to-become-a-successful-professional-hacker/) - If you are reading this, you too probably aspire to become a professional hacker. That’s good. Hacking is rapidly becoming one of the most sought after and most valuable skill sets by IT security firms, pentesters, militaries, spy and espionage organizations, and military contractors. Right now, most of these organizations cannot get enough well-trained hackers,
- [Web App Hacking, Part 04: Using Dirb to Find Hidden Directories](https://hackers-arise.com/web-app-hacking-part-4-using-dirb-to-find-hidden-directories/) - Welcome back, my hacker novitiates! Often, to hack a website, we need to connect to and exploit a particular object within the website. It might be an admin panel or a sub-directory that is vulnerable to attack. The key, of course, is to find these objects, as they may be hidden. DIRB, developed by The
- [Using Wikto to Find Website Vulnerabilities](https://hackers-arise.com/using-wikto-to-find-website-vulnerabilities/) - When we are trying to find vulnerabilities in a website to attack, we need a solid web server vulnerability scanner. Internet-facing web apps can open enormous opportunities for us as they are often riven with vulnerabilities and can often offer an entry point to the internal network and resources. Previously, I had showed you how
- [SCADA Hacking: Metasploit SCADA Modules](https://hackers-arise.com/scada-hacking-metasploit-scada-modules/) - As a penetration tester/hacker, we have many resources we can use to test SCADA/ICS system security. One of the most popular is the Metasploit Framework. Here, I have tried to compile a list of most of the Metasploit modules that are useful for testing/hacking SCADA/ICS. Please keep in mind that SCADA/ICS sites use varied hardware
- [Metasploit Basics, Part 02: Metasploit Module Types](https://hackers-arise.com/metasploit-part-2-metasploit-module-types/) - In my first article in this Metasploit series, I introduced you to some of the key commands you need to know before using Metasploit. In this second article in the series, I want to introduce you the different types of modules found in Metasploit. When you start Metasploit into the msfconsole, you are greeted by
- [Metasploit Basics, Part 03: Payloads](https://hackers-arise.com/metasploit-basics-part-3-payloads/) - Welcome back, my tenderfoot hackers! As you know, Metasploit is an exploitation framework that every hacker should be knowledgeable of and skilled at. It is one of my favorite hacking tools. Metasploit enables us to use pre-written exploits against known vulnerabilities in operating systems, browsers and other applications and place a rootkit/listener/payload on the target
- [SCADA Hacking: SCADA Protocols (DNP3)](https://hackers-arise.com/scada-hacking-scada-protocols-dnp3/) - One the most important distinguishing characteristics of SCADA/ICS systems from that of traditional IT systems is that these systems communicate by distinctly different and, sometimes, proprietary protocols. In my previous tutorial, I detailed the inner anatomy of a the most common SCADA/ICS protocol, MODBUS. In this article we will examine probably the second most widely
- [SCADA Hacking: SCADA/ICS Risk Assessment and Management, Part 01](https://hackers-arise.com/scada-hacking-scada-ics-risk-assessment-and-management-part-1/) - Introduction One of the most crucial activities involved in securing SCADA/ICS systems is the initial Risk Assessment. Risk assessment is considered one of the industry’s Best Practices. If you presently work in information security, you are probably aware that risk assessment can be slippery and nebulous concept. Identifying and quantifying risk in any information technology
- [Vault7 Reveals that Even the CIA Reverse Engineers Malware to Re-Use Code](https://hackers-arise.com/vault7-reveals-that-even-the-cia-reverse-engineers-malware-to-re-use-code/) - The recent CIA data dump from Wikileaks named Vault7, reveals many things about the CIA’s cyber intelligence efforts. For my part, the revelation that much of the malicious code that the CIA uses to spy on foreign nationals from around the world, uses “snippets” of code from known public malware was among one of the
- [Web App Hacking, Part 04: Finding Vulnerabilities in WordPress Sites](https://hackers-arise.com/web-app-hacking-part-4-finding-vulnerabilities-in-wordpress-sites/) - WordPress is the most ubiquitous of the Content Management Systems for building websites. According to WordPress, this CMS is used in 27% of the top 10 million websites! That gives us lots of fertile ground to cultivate in our hacking adventures! Built on PHP, Apache and MySQL, it provides developers a simple and easy to
- [Scripting for Hackers, Perl Part 01: Introduction to Perl](https://hackers-arise.com/scripting-for-hackers-perl-part-1/) - To ascend the upper echelons of Master Hacker, you MUST develop scripting skills. It’s all great and well to use other hackers’ tools, but to get and maintain the upper hand, you must develop your own unique tools, and you can only do that by developing your scripting skills. The History of Perl Probably the
- [Hackers-Arise Purchases Snort Training Institute](https://hackers-arise.com/hackers-arise-purchases-snort-training-institute/) - Today, Hackers-Arise announced the purchase of the Snort Training Institute! The Snort Training Institute is the premier training organization for the world’s most widely used Intrusion Detection System (IDS). Now, with the inclusion of the Snort Training Institute, Hackers-Arise will be able to offer the best offensive AND defensive cyber security training.All Snort Training Institute
- [Scripting for Hackers, Perl Part 02: Building a Port Scanner with Perl](https://hackers-arise.com/scripting-for-hackers-perl-2-building-a-port-scanner-with-perl/) - Scripting skills are essential to ascend to the upper echelons of the hacker clique. Without scripting skills, you are dependent upon others to develop your tools. When others develop your tools, you will always be behind the curve in the battle against security admins. Remember, there is an ongoing chess match between the security admins
- [SCADA Hacking: Hacking the Schneider Electric TM221 Modicon PLC using modbus-cli](https://hackers-arise.com/scada-hacking-hacking-the-schneider-electric-tm221-modicon-plc-using-modbus-cli/) - SCADA/ICS security is probably the most important and most overlooked field of cyber security. In an era where cyber warfare is an everyday occurrence and cyber terrorism is an ongoing threat, these huge industrial facilities have large bulleyes on their backs. In some cases, taking down or disrupting just one of these plants could cost
- [SCADA Hacking: SCADA Risk Assessment with CSET](https://hackers-arise.com/scada-hacking-scada-risk-assessment-with-cset/) - In an earlier article, I laid out some of the varied methods of risk assessment in SCADA/ICS systems from academia, government and industry groups. As I pointed out there, SCADA/ICS risk estimation is especially difficult and nebulous. The probabilities of an event are difficult-to-impossible to obtain and the consequences of the event are sometimes so
- [Metasploit Basics, Part 06 :The Armitage Metasploit User Interface](https://hackers-arise.com/metasploit-basics-part-6-the-armitage-metasploit-user-interface/) - Welcome back, my aspiring White Hat Hackers! In this series on the world’s most popular exploitation framework, Metasploit, we have looked at the many ways to get started, including; 1. Getting Started and Keywords 2. Modules 3. Payloads 4. Connecting the postgresql Database 5. Scanning and Reconnaissance Before we advance to exploitation, I want to
- [How to Evade AV with OWASP-ZSC, Part 01](https://hackers-arise.com/how-to-evade-av-with-owasp-zsc-part-1/) - Among the tools available to create shellcode capable of going undetected by Anti-Virus (AV) software, OWASP-ZSC (Zero-day ShellCode) may be the most versatile. OWASP-ZSC is project of OWASP, continues under development and has some useful features not found in some of the other applications in this category. In this tutorial, I will attempt to demonstrate
- [Hacking DNS to Re-Direct Anyone on your LAN to your Website](https://hackers-arise.com/hacking-dns-to-re-direct-anyone-on-your-lan-to-your-website/) - There are SOOOO many ways to hack a system or network, which means you need to think creatively in order to be successful. Many novice hackers focus way too much energy on cracking passwords (which should be a last resort unless you have specialized tools or a 10,000 machine botnet) or exploiting a vulnerability in
- [Browser Exploitation Framework (BeEF), Part 01](https://hackers-arise.com/browser-exploitation-framework-beef-part-1/) - There are multitude of ways to exploit a target’s system. Newbie hackers often focus on the operating system or applications, but few think to exploit the browser. If you can exploit the browser, then you can have access to everything the target accesses on the Internet. Furthermore, the browser is a repository for credentials and
- [Digital Forensics, Part 09: Extracting EXIF Data from Graphics Files](https://hackers-arise.com/digital-forensics-part-9-extracting-exif-data-from-graphics-files/) - In many cases when a computer, phone, or mobile device is seized for evidence, the system will have graphic images that might be used as evidence. Obviously, in some cases these graphic images may be the evidence such as in child pornography cases. In other situations, the graphic images may tell us something about where
- [Exploit Development, Part 02: Writing a Simple Buffer Overflow](https://hackers-arise.com/exploit-development-part-2-writing-a-simple-buffer-overflow/) - I. Introduction In the previous lesson in this module, we explored the basics of buffer overflows. We defined buffer overflows and looked at the fundamental theory behind the buffer overflow. In addition, we looked at how dangerous and persistent these buffer overflow attacks can be by examining how many critical vulnerabilities are related to buffer
- [Anti-Forensics: Avoiding the Pitfalls of Reality Winner](https://hackers-arise.com/anti-forensics-avoiding-the-pitfalls-of-reality-winner/) - This past week, NSA contractor Reality Winner, was caught and arrested for leaking information to the Interecept. This was evidence that the NSA had collected that clearly showed how the Russian hackers had attempted (maybe successfully) to hack the U.S. election system. This may be the MOST definitive evidence of how the Russians hacked the
- [Metasploit Basics, Part 07: Adding a New Module (EternalBlue)](https://hackers-arise.com/metasploit-basics-part-7-adding-a-new-module-eternalblue/) - Welcome back, my greenhorn hackers! Often, new modules are developed for Metasploit, but are not included in the base configuration or updates. In such cases, you will need to manually add the module to Metasploit. In reality, this is not difficult with a touch of basic information and a dash of Linux skills. One place
- [Metasploit Basics, Part 08: Exploitation with EternalBlue](https://hackers-arise.com/metasploit-basics-part-8-exploitation-with-eternalblue/) - Welcome back, my aspiring hackers! The Metasploit framework has become a multipurpose pentesting tool–but at its heart–it’s an exploitation tool. Up to this point in this series on Metasploit, we have been getting familiar with the various aspects of this tool, but now we will get to the best part, exploitation of another system! In
- [Exploit Development, Part 03: Finding Vulnerabilities by Fuzzing with Spike](https://hackers-arise.com/exploit-development-part-3-finding-vulnerabilities-by-fuzzing-with-spike/) - Often, as part of the exploit development process, we will want to test an application for vulnerabilities, especially buffer overflows. One of the ways we can do that is to send random, varying length, invalid data at the application and see what happens. If we can get the application to crash, this often is a
- [Automobile Hacking, Part 03: Metasploit for Car Hacking](https://hackers-arise.com/automobile-hacking-part-3-metasploit-for-car-hacking/) - Automobile or car hacking is the leading edge of the hacking/penetration testing field. With the arrival of self-driving cars in the very near future, this field will only become even more important. For some background on this field, read my articles on the CAN protocol and the SocketCAN to better understand the technologies involved. As
- [SCADA Hacking: Ladder Logic Programming Simulation of a PLC](https://hackers-arise.com/scada-hacking-ladder-logic-programming-simulation-of-a-plc/) - Nearly every SCADA/ICS system is built around programmable logic controllers or PLC’s. To understand the vulnerabilities of these systems, you must have some basic understanding of the programming of these systems. In this tutorial, we will learn a bit of PLC ladder programming to help you understand the logic and programming of the essential PLC’s
- [Web App Hacking, Part 07: Injecting a Backdoor into a Website with weevely](https://hackers-arise.com/web-app-hacking-part-7-injecting-a-backdoor-into-a-website-with-weevely/) - Welcome back my rookie Web App Hackers! Often, you will have the opportunity to upload a file to website such a Word Doc, a PDF or a picture such as a .jpg or .png. You have probably uploaded pictures to Facebook or Twitter and maybe uploaded DOC or PDF documents to your company’s or school’s
- [Web App Hacking, Part 06: Exploiting XMLRPC for Bruteforcing WordPress Sites](https://hackers-arise.com/web-app-hacking-part-6-exploiting-xmlrpc-for-bruteforcing-wordpress-sites/) - WordPress is the world’s most widely used Content Management System (CMS) for websites, comprising almost 28% of all sites on the Internet. This means that tens of millions of websites use this CMS and the vulnerabilities we find there can be used on so many sites that it makes sense to devote significant time and
- [Android Hacking, Part 01: Android Basics](https://hackers-arise.com/android-hacking-part-1-android-basics/) - Welcome back, my rookie hackers! Before we delve into this much anticipated section on “Hacking Android”, we first need to understand a bit about the Android operating system. The Android operating system was purchased by Google when it acquired a company named curiously enough, Android Inc., in 2005. A couple years later in 2007, Google
- [Web App Hacking, Part 08: Cloning a Web Site with httrack](https://hackers-arise.com/web-app-hacking-part-8-cloning-a-web-site-with-httrack/) - Welcome back, my nascent hackers! Often when attempting to hack a web site, it might be useful to make a copy and work with it off-line. While working online, often our actions will be detected by security devices such as an IDS or WAF and security engineers. By taking the web site off-line, we can
- [SCADA Hacking: Hackers-Arise First to Reveal Vulnerability Now Recognized by Schneider Electric and](https://hackers-arise.com/scada-hacking-hackers-arise-first-to-reveal-vulnerability-now-recognized-by-schneider-electric-and/) - Once again, Hackers-Arise receives international recognition in SCADA Hacking!On March 28, 2017, OTW detailed here how an attacker can get the Schneider Electric Modicom TM221 to spew out key information that an attacker can use to exploit the system. You can read about it here.Today, April 10, 2017, that vulnerability was recognized by Schneider Electric
- [Python Basics for Hackers, Part 02: Building a Banner Grabbing Tool](https://hackers-arise.com/python-scripting-for-hackers-part-2-building-a-banner-grabbing-tool/) - In an earlier tutorial, I introduced you to probably the most popular scripting language for hackers, Python. To become a professional hacker, you need to have some scripting skills and Python is a good choice if you want to master just one. In this latest guide, I will expand your background in Python and offer
- [Metasploit Basics, Part 10: Pivoting to Compromise the Network](https://hackers-arise.com/metasploit-basics-part-10-pivoting-to-compromise-the-network/) - Welcome back, my Metasploit aficionados! In this series, we began with the Metasploit basics and have progressed through exploitation and creating our own custom payloads. In this tutorial, we will examine how we can proceed after having exploited a single system on a network to controlling the entire network. Very often to compromise a
- [PowerSploit, Part 01: How to Control Nearly any Windows System with Powersploit](https://hackers-arise.com/powersploit-part-1-how-to-control-nearly-any-windows-system-with-powersploit/) - A few years back, Microsoft implicitly recognized the superiority of the Linux terminal over the GUI-based operating system by developing PowerShell. Since Windows 7, every Windows operating system has had PowerShell installed by default, and they even made PowerShell capable of running Linux commands on Windows! PowerShell is a powerful environment to get just about
- [Metasploit Basics, Part 11: Exploiting Fileformat Vulnerabilities in MS Office](https://hackers-arise.com/metasploit-basics-part-11-exploiting-fileformat-vulnerabilities-in-ms-office/) - Welcome back, my fledgling hackers! As the operating system developers become more and more security conscious, operating system exploits become rarer. Not so rare that we don’t see them anymore (see ExternalBlue and the .NET vulnerability CVE-2017-8759), but rare enough that hackers tend to focus their efforts on the applications and their output files for
- [Exploiting SNMPv1 for Reconnaissance](https://hackers-arise.com/exploiting-snmpv1-for-reconnaissance/) - As you know, the Simple Network Management Protocol uses UDP ports 161 and 162 to manage network devices. Network devices use this protocol to communicate to each other and can be used by administrators to manage the devices. As hackers, if we can access the SNMP protocol, we can harvest a vast resource of information
- [Hack Like the NSA:The EXTRABACON Zero-Day Exploit on Cisco ASA Firewalls](https://hackers-arise.com/hack-like-the-nsathe-extrabacon-zero-day-exploit-on-cisco-asa-firewalls/) - As most of you know, recently an entity within the NSA–or very close to the NSA–was hacked. This NSA associated group, often referred to as the Equation Group was most probably responsible for both the Stuxnet and Flame malware of a few years back. I believe that this group is the TAO (NSA’s offensive unit
- [SCADA Hacking: Exploiting SCADA/ICS Systems with the Command Line Tool, modbus-cli](https://hackers-arise.com/scada-hacking-exploiting-scada-ics-systems-with-the-command-line-tool-modbus-cli/) - For those of you who have been following my series on SCADA hacking, you are aware that SCADA/ICS systems do NOT use the usual protocols that we are accustomed to in the TCP/IP/Ethernet world. There are a over 100 different protocols being used within the SCADA/ICS world, most of which were developed to work over
- [Digital Forensics, Part 10: Mobile Forensics (Android)](https://hackers-arise.com/digital-forensics-part-10-mobile-forensics-android/) - Over the past decade or so, the growth of the mobile market has been the fastest growing segment of the IT industry. We now have portable smart phones and tablets being used throughout the consumer and business market. These add an extra challenge to the forensic investigator, but can also contain a cornucopia of information
- [Snort IDS for Hackers, Part 02: Basic Configuration of your Snort IDS](https://hackers-arise.com/snort-ids-for-hackers-part-2-basic-configuration-of-your-snort-ids/) - Welcome back, my tenderfoot hackers! As you should know from before, Snort is the most widely deployed intrusion detection system (IDS) in the world, and every hacker and IT security professional should be familiar with it. Hackers need to understand it for evasion, and IT security professionals to prevent intrusions. So a basic understanding of
- [Snort IDS for Hackers, Part 03: Sending Intrusion Alerts to MySQL](https://hackers-arise.com/snort-ids-for-hackers-part-3-sending-intrusion-alerts-to-mysql/) - Welcome back, my hacker novitiates! If you have been following this new Snort series, you know that Snort is the world’s most widely used intrusion detection/protection system. Now a part of the world’s largest network equipment company, Cisco, it is likely to be found everywhere in one form or another. This makes a compelling argument
- [SCADA Hacking: DoSing a SCADA site](https://hackers-arise.com/scada-hacking-dosing-a-scada-site/) - SCADA and Industrial Control Sites (ICS) are among the most crucial and most vulnerable sites. These sites include everything from nuclear power plants, to home HVAC systems and everything in between. The security of these systems is slightly different than traditional IT systems. In traditional IT systems we are protecting the data. With SCADA/ICS systems
- [Wireless Hacking: How to Hack a Wi-Fi AP without Cracking Passwords](https://hackers-arise.com/wireless-hacking-how-to-hack-a-wi-fi-ap-without-cracking-passwords/) - Welcome back, my tenderfoot hackers! Do you need to get a Wi-Fi password but don’t have the time to crack it? In previous tutorials, I have shown how to crack WEP, WPA2, and WPS, but some people have complained that cracking WPA2 takes too long and that not all access points have WPS enabled (even
- [Metasploit Basics, Part 12: Creating RC Scripts](https://hackers-arise.com/metasploit-basics-part-12-creating-rc-scripts/) - In this series, I have been trying to familiarize you with the many features of the world’s best framework for exploitation, hacking, and pentesting, Metasploit. There are so many features, and techniques for using those features, that few pentesters/hackers are aware of all of them. Many times, when doing a pentest/hack, we need to run
- [Metasploit Basics, Part 14: Updating the msfconsole](https://hackers-arise.com/metasploit-basics-part-14-updating-the-msfconsole/) - Welcome back my novice hackers! Recently, I have received numerous questions regarding how to update the msfconsole built into Kali. Until recently that was an easy question to answer. You simply enter “msfupdate” at the command line. Now, Rapid7–the developers of Metasploit– have changed how we update Metasploit when it is built into an operating
- [Confessions of a Professional Hacker: How Hackers Obtained the Secrets of the Panama Papers that Roc](https://hackers-arise.com/confessions-of-a-professional-hacker-how-hackers-obtained-the-secrets-of-the-panama-papers-that-roc/) - Welcome back, my novice hackers! A few years back (2016 precisely) a major hack took place that had significant repercussions around the world. This was a hack of the servers at Mossack Fonseca, a major law firm in Panama and became know as the Panama Papers hack. This law firm specializes in assisting the rich
- [How to Evade Detection with proxychains](https://hackers-arise.com/how-to-evade-detection-with-proxychains/) - The worst thing that can happen to any hacker is being detected by a security admin, the security technologies (IDS, firewall, etc.), or a forensic investigator. Every time we send a packet to our intended target, that packet contains our IP address in the IP header. When we make a TCP connection, the target system
- [Web App Hacking, Part 10: Directory or Path Traversal](https://hackers-arise.com/web-app-hacking-part-10-directory-or-path-traversal/) - Welcome back, my novice hackers! In this series on Web App Hacking, we are examining multiple ways to hack web sites and web applications. In this particular tutorial we will examine directory or path traversal. In this type of attack, the hacker is able to get access files on the underlying server that might be
- [Metasploit Basics, Part 18: Marrying the Power of Shodan with Metasploit](https://hackers-arise.com/metasploit-basics-part-18-marrying-the-power-of-shodan-with-metasploit/) - Welcome back my rookie hackers! Every so often, I run across a new hacking tool that really gets me excited. Autosploit is one of those! Autosploit combines the power of two of my favorite tools, Shodan and Metasploit! AutoSploit uses Shodan to find specific targets based upon their banners and then Metasploit to automate the
- [Network Forensics, Part 01](https://hackers-arise.com/network-forensics-part-1/) - Welcome back, my hacker apprentices! Network forensics is key element of most digital forensics and incident response (DFIR) investigations. When our systems have been compromised by an attacker, its up the DFIR investigator to determine the who, what, where and how of the attack. In other words, what can a DFIR investigator learn about the
- [Network Forensics, Part 02: Detecting and Analyzing a SCADA DoS Attack](https://hackers-arise.com/network-forensics-part-2-detecting-and-analyzing-a-scada-dos-attack/) - Welcome back, my aspiring network forensic investigators! Now that you have a basic understanding of Wireshark and have conducted an analysis of a malware attack using Wireshark, let’s expand our purview of network attacks to that critical but often overlooked area of IT security, SCADA/ICS security. Unlike most attacks on IT security, attacks on SCADA/ICS
- [Metasploit Kung-Fu Videos Now For Sale!](https://hackers-arise.com/metasploit-kung-fu-videos-now-for-sale/) - So many people have asked us for the Metasploit Kung-Fu course videos, we are now putting them on sale!If you just want to become proficient in the world’s most widely used pentesting framework or want to earn the prestigious Metasploit Certified Expert (MCE) certification (these videos covers all the areas on the exam), this may
- [Reverse Engineering Malware, Part 06: System Level or Behavioral Analysis](https://hackers-arise.com/reverse-engineering-malware-part-6-system-level-or-behavioral-analysis/) - Welcome back, my aspiring malware analysts! In my introductory tutorials on reverse engineering malware (Part 1-5) we introduced many new concepts. Now its time to put some of those concepts to work and begin analyzing some sample malware! In Part 1 of this series, I pointed out that there are two primary ways of analyzing
- [How to Exploit Nearly Any Windows System Using CVE-2017-8759](https://hackers-arise.com/how-to-exploit-nearly-any-windows-system-using-cve-2017-8759/) - On September 12, 2017, FireEye revealed that they had found malware in the wild that exploited CVE-2017-8759. This malware exploits a vulnerability in the .NET Framework that enables the attacker to execute remote code on the target system (RCE). This is a big deal as remote code execution means that the attacker can run their
- [Metasploit Basics, Part 15: Post- Exploitation Fun (Web Cam, Microphone, Passwords and more)](https://hackers-arise.com/metasploit-basics-part-15-post-exploitation-fun-web-cam-microphone-passwords-and-more/) - Welcome back, my fledgling hackers! As we have progressed through this series on Metasploit Basics, we have used numerous techniques to exploit your target system including; 1. SMB Exploits (EternalBlue and MS08_067, for instance); 2. File Format (ms14-0440_sandworm, office_word_hta); 3. Browser Exploits (autopwn, Abobe Flash and numerous others); 4. Social Engineering Toolkit(SET); Custom Payloads with
- [Metasploit Basics, Part 17: Automobile Hacking with Metasploit](https://hackers-arise.com/metasploit-basics-part-17-automobile-hacking-with-metasploit/) - Automobile or car hacking is the leading edge of the hacking/penetration testing field. With the arrival of self-driving cars in the very near future, this field will only become even more important. For some background on this field, read my articles on the CAN protocol and the SocketCAN to better understand the technologies involved. As part of this rapid
- [Metasploit Basics, Part 19: Web Delivery for Windows](https://hackers-arise.com/metasploit-basics-part-19-web-delivery-for-windows/) - Welcome back, my Metasploit aficianodos! In the previous part of this series, we looked at how to use Metasploit’s web delivery exploit to create a script to connect to a UNIX, Linux, or OS X machine using Python. Many members of the Hackers-Arise community have asked me, “Can we do the same for a Windows
- [Snort Basics: How to Read and Write Snort Rules, Part 01](https://hackers-arise.com/snort-basics-how-to-read-and-write-snort-rules-part-1/) - Welcome back, my novice hackers! My recent tutorials have been focused upon ways to NOT get caught. Some people call this anti-forensics—the ability to not leave evidence that can be tracked to you or your hack by the system administrator or law enforcement. One the most common ways that system admins are alerted to an
- [Exploit Development, Part 01: Anatomy of Buffer Overflows](https://hackers-arise.com/exploit-development-part-1-anatomy-of-buffer-overflows/) - Introduction Buffer Overflows Buffer overflows are probably the most insidious type of attack. A buffer overflow is basically when a memory area is given too much data for the allotted space and the memory area overflows. This overflow can then enable the attacker to execute their own specially crafted code. The attacker’s code is often
- [SCADA Hacking: Anatomy of Cyber War, the Stuxnet Attack](https://hackers-arise.com/scada-hacking-anatomy-of-cyber-war-the-stuxnet-attack/) - As you study SCADA/ICS hacking and security, it is useful to look back at some of the most successful SCADA/ICS attacks in history. In this way, you may gain some insight as to how future attacks may attempt to infiltrate your industrial control systems. Among the most famous and ingenious of these SCADA/ICS attacks became
- [Metasploit Basics, Part 21: Capturing Credentials with mimikatz](https://hackers-arise.com/metasploit-basics-part-21-capturing-credentials-with-mimikatz/) - Metasploit is such a powerful tool that I can only scratch the surface of its capabilities here. As it has developed over the years, it is now possible to use Metasploit for nearly everything from recon to post exploitation to covering your tracks. Given its versatility, every aspiring hacker should have at least a tentative
- [Web App Hacking, Part 12: Comprehensive Web Recon with TIDoS](https://hackers-arise.com/web-app-hacking-part-12-comprehensive-web-recon-with-tidos/) - Welcome back, my aspiring hackers! As I often say, reconnaissance is a crucial part of hacking. You must carefully and thoroughly gather information on the target before attacking, otherwise you are usually wasting your time and risking detection. There are many tools for this purpose many of which I have demonstrated here such as nmap,
- [Maltego 4, Part 02: Reconnaissance on a Person (Boris Epshteyn)](https://hackers-arise.com/maltego-4-part-2-reconnaissance-on-a-person-boris-epshteyn/) - Reconnaissance is crucial for successful hacking/pentesting. Maltego is a unique tool for finding data via open source information across the world wide web and displaying the relationships between this information in a graphical format. From Paterva’s, Maltego’s developer, own web page, they describe Maltego as; “Maltego is an interactive data mining tool that renders directed
- [Metasploit Basics, Part 22: Exploiting and Controlling a System When You Have Physical Access](https://hackers-arise.com/metasploit-basics-part-22-exploiting-and-controlling-a-system-when-you-have-physical-access/) - Welcome back, my aspiring cyber warriors! Much of what we have done here in this Metasploit Basics series enables us to exploit and control a remote system anywhere on the planet earth (or at least any machine connected to the Internet on planet earth). In some cases, we may want to control a system that
- [Web App Hacking, Part 11: Local File Inclusion (LFI)](https://hackers-arise.com/web-app-hacking-part-11-local-file-inclusion-lfi/) - Welcome back, my aspiring Cyber Warriors! In this series–Web App Hacking–we are exploring the many ways that an attacker can compromise Web Applications. In this tutorial, we will explore using Local File Inclusion or LFI. Many scripting languages used in web applications support the use of include() function. These make it easy for the developer
- [Snort IDS for Hackers, Part 01: Installing Snort](https://hackers-arise.com/snort-intrusion-detection-system-ids-for-hackers-part-1-installing-snort/) - Welcome back, my neophyte hackers! In the world of information security, the most common intrusion detection system (IDS) you will ever encounter is Snort. As you probably already know, an IDS works similarly to antivirus (AV) software on your desktop; It attempts to identify malicious software on your network and warns you of its presence.
- [Web App Hacking, Part 12: Cross Site Request Forgery (CSRF)](https://hackers-arise.com/web-app-hacking-part-12-cross-site-request-forgery-csrf/) - Welcome back, my aspiring cyber warriors! In this series on Web App Hacking, we continue to explore ways to hack web applications (apps). In this tutorial, we will explore Cross Site Request Forgeries or CSRF. CSRF is an attack where the attacker inherits the credentials and privileges of the legitimate user to redirect the browser
- [Metasploit Basics: Installing Metasploit 5 into Kali 2018 and New Features](https://hackers-arise.com/metasploit-basics-installing-metasploit-5-into-kali-2018-and-new-features/) - Welcome back, my aspiring Metasploit Cyber Warriors! Recently, Rapid7, the developers of the world’s most popular exploitation framework Metasploit, released a totally new rebuild! It’s been almost 8 years since Metasploit 4 and it could not have come at a better time! Rapid7 has made some important changes to Metasploit to make it easier to
- [Metasploit Basics, Part 23: Remote Windows Forensics with Metasploit](https://hackers-arise.com/metasploit-basics-part-23-remote-windows-forensics-with-metasploit/) - Welcome back, my Metasploit Cyber Warriors! Although Metasploit is an “exploitation framework” primarily used for hacking and penetration testing, it can also be used to provide some rudimentary forensic capabilities. It’s primary usefulness as a forensic tool is to gather evidence from a remote system when the physical system is unavailable to the investigator. In
- [Metasploit Basics, Part 20: Creating a Fake SMB Server to Capture Credentials](https://hackers-arise.com/metasploit-basics-part-20-creating-a-fake-smb-server-to-capture-credentials/) - In a previous tutorials in this Metasploit Basics series, we learned how to use hashdump to pull password hashes from a local system. In “Cracking Passwords with Hashcat”, you learned how to crack these hashes with hashcat. In each of these cases, the password hashes were the passwords of the users on the local system
- [Metasploit Basics, Part 09: Using msfvenom to Create Custom Payloads](https://hackers-arise.com/metasploit-basics-part-9-using-msfvenom-to-create-custom-payloads/) - At times, we may want to create a custom payload (for more on Metasploit payloads, see Metasploit Basics, Part 3: Payloads). For instance, we may want to embed a payload/listener into an application or other malicious software that we hope the target clicks and we can take control of their computer. This is exactly what
- [CWA Prep course videos available for purchase! Now, get a 50% off Voucher for the CWA Exam!](https://hackers-arise.com/cwa-prep-course-videos-available-for-purchase-now-get-a-50-off-voucher-for-the-cwa-exam/) - So many of you who could not attend the CWA Prep course have asked whether you could purchase class videos that we have now made them available for purchase!For just $99, you can get almost 20 hours of class videos covering all 14 domains of the CWA exam. Simply follow along as OTW covers all
- [Advice from a Professional Hacker: Why Hacking is THE Most Important Skill Set of the 21st Century](https://hackers-arise.com/advice-from-a-professional-hacker-why-hacking-is-the-most-important-skill-set-of-the-21st-century/) - For some time now, I have been contemplating writing an article on why hacking is THE most important skill of the 21st century. As if to emphasize my point, Russia has used its elite hacking teams to stage a bloodless coup of the world’s most powerful empire. These events are a case study in just
- [Metasploit Basics, Part 16: Metasploit SCADA Hacking](https://hackers-arise.com/metasploit-basics-part-16-metasploit-scada-hacking/) - Metasploit is widely recognized as a powerful tool to conduct penetration testing and hacking on traditional IT systems, but few people recognize that it also has capabilities within the more obscure–but increasingly important– SCADA/ICS sector. Information security for SCADA/ICS is the next great frontier in our industry! If you want to learn more about SCADA/ICS
- [Open Source Intelligence (OSINT), Part 01: Mining Intelligence from Twitter (@mattgaetz)](https://hackers-arise.com/open-source-intelligence-osint-part-1-mining-intelligence-from-twitter-mattgaetz/) - The Internet is the largest treasure trove of data in the history of humankind! This repository of data is so large that companies and scientists are straining to understand and manage its scale. We can mine that data with many different tools and sources. When that data is combined with data from multiple sources, a
- [Metasploit Basics, Part 25: Web Delivery with Linux/UNIX/OsX](https://hackers-arise.com/metasploit-basics-for-hackers-part-25-web-delivery-with-linux-unix-osx/) - Welcome back, my aspiring cyber warriors! Metasploit, one of my favorite hacking/pentesting tools, has so many capabilities that even after my many tutorials, I have only scratched the surface of its capabilities. For instance, it can be used with Nexpose for vulnerability scanning, with nmap for port scanning, and with its numerous auxiliary modules, nearly
- [Web App Hacking, Part 15: Web site Fingerprinting with Whatweb](https://hackers-arise.com/web-app-hacking-part-15-web-site-fingerprinting-with-whatweb/) - Welcome back, my aspiring cyber warriors! Web sites are built using a variety of technologies (see Web Technologies here). In most cases, before we develop a hacking strategy of the web site, we need to understand the technologies employed in building the website. Web site attacks are not generic. Attacks against WordPress-based web sites won’t
- [Metasploit Basics, Part 04: Connecting and Using the postgresql Database with Metasploit](https://hackers-arise.com/metasploit5-basics-part-4-connecting-and-using-the-postgresql-database-with-metasploit/) - Welcome back, my aspiring Metasploit Cyber Warriors! In this series, we are exploring the power and features of the world’s most popular and powerful exploitation framework, Metasploit. In this tutorial, we will be examining how to connect the postgresql database to Metasploit. In this way, we can speed up our Metasploit module searches, save our
- [Web App Hacking, Part 14: OS Command Injection](https://hackers-arise.com/web-app-hacking-part-14-os-command-injection/) - Welcome back, my aspiring cyber warriors! In this tutorial on Web App Hacking, we’ll examine Operating System command injection. This web site vulnerability enables the attacker to inject and execute operating system commands into the underlying server and often fully compromise the server and all its data. If the attacker can inject OS commands on
- [Open Source Intelligence (OSINT), Part 05: Collecting Metadata with Metagoofil](https://hackers-arise.com/osint-part-5-collecting-metadata-with-metagoofil/) - Welcome back, my aspiring cyber warriors! Sometimes the best information is just there for our asking! Given a little knowledge and some simple tools and techniques, we can harvest information about individuals and organizations that they are not aware they are providing us! Organizations often post documents on their website usually in a Word .doc
- [Snort IDS for Hackers, Part 05: Testing your Snort IDS Against Known Exploits](https://hackers-arise.com/snort-basics-for-hackers-part-5-testing-your-snort-ids-against-known-exploits/) - Welcome back, my greenhorn cyber warriors! In my previous posts in this series, we installed Snort, configured Snort, set up Snort to send alerts to a database (MySQL) and wrote Snort rules. In this post, we will test our new Snort installation to see whether it can detect and alert us on well-known attacks before
- [Database Hacking, Part 03: Using sqlmap for SQL Injection Against MySQL and WordPress](https://hackers-arise.com/database-hacking-part-3-using-sqlmap-for-sql-injection-against-mysql-and-wordpress/) - SQL Injection is one of the most important and common attacks on web sites. Nearly every website has a database behind it containing confidential and valuable information that can often be compromised by a well-designed SQL injection attack. There are many SQL injection tools, but probably the most popular is sqlmap. In this tutorial, we
- [Network Forensics: Wireshark Basics, Part 02](https://hackers-arise.com/network-forensics-wireshark-basics-part-2/) - Welcome back, my aspiring network forensics investigators! In my previous post in this series, I introduced you to the most widely-used network forensics tool in the world, Wireshark. No network forensic investigator can do without it this valuable tool! In this tutorial, we will try to advance your knowledge and understanding of Wireshark to the
- [Shodan, Part 02: Finding Outdated and Vulnerable Systems Around the World](https://hackers-arise.com/shodan-part-2-finding-outdated-and-vulnerable-systems-around-the-world/) - Welcome back my aspiring cyber warriors! In my earlier tutorial, I showed you some of the basics of using Shodan, “the world’s most dangerous search engine”. In this tutorial, we will expand and extend your knowledge of the capabilities of Shodan to find outdated and vulnerable online systems. Often times, aspiring cyber warriors assume that
- [Automobile Hacking, Part 05: Hacking the Car Alarm Systems to Take Control of the Vehicle](https://hackers-arise.com/automobile-hacking-part-5-hacking-the-car-alarm-systems-to-take-control-of-the-vehicle/) - Welcome back, my budding cyber warriors! Automobile or car hacking is the cutting-edge of the cyber security world right now. With the advent of digital systems in automobiles and other vehicles and the soon-to-be autonomous driving cars, this field is rife with potential cyber security issues that will significantly impact our society and safety. This
- [Digital Forensics, Part 11: Recovering Stored Passwords from the Browser](https://hackers-arise.com/digital-forensics-part-11-recovering-stored-passwords-from-the-browser/) - Welcome back, my aspiring cyber warriors! When conducting a forensic investigation on a suspect’s computer, the first step, of course, is to make a forensically sound image of the storage devices and if the system is running, make a forensically sound image of the RAM, as well. Sometimes, we may want to gain access to
- [Its Finally Here! Master OTW's New Book !](https://hackers-arise.com/its-finally-here-master-otws-new-book/) - Following the resounding success of “Linux Basic for Hackers”, Master OTW has published his next book, “Getting Started Becoming a Master Hacker”. If you liked Linux Basics for Hackers”, you will LOVE this one!This book is meant to be a follow-up and companion to “Linux Basics for Hackers” by building upon the knowledge base established
- [MiTM Attack with Ettercap](https://hackers-arise.com/mitm-attack-with-ettercap/) - Welcome back, my rookie cyber warriors! Man-in-the-Middle attacks can be among the most productive and nefarious attacks. If the attacker/hacker can place themselves between two systems (usually client and server) they can control the flow of traffic between the two systems. In this way they can eavesdrop on the traffic, delete the traffic, inject malware
- [SCADA Hacking: Finding Vulnerable SCADA Systems using Google Hacking](https://hackers-arise.com/scada-hacking-finding-vulnerable-scada-systems-using-google-hacking/) - Welcome back, my tenderfoot hackers! Google Hacking and Dorks As most of you know, Google crawls the globe and stores and indexes the information it finds on nearly every web site and page. Saying this involves a lot of information is an significant understatement. Few people, though, understand that Google has a proprietary language to
- [Port Scanning and Recon with nmap, Part 01](https://hackers-arise.com/port-scanning-and-recon-with-nmap-part-1/) - Welcome back, my aspiring cyber warriors! Whether you are an aspiring master hacker, network engineer or security engineer, there is one tool that each of the roles need to be familiar with, nmap. nmap began as a simple, modest, port-scanning tool utilizing the ability to send TCP, UDP or ICMP packets to a host and
- [Bluetooth Hacking, Part 03: The BlueBourne Exploit](https://hackers-arise.com/bluetooth-hacking-part-3-the-bluebourne-exploit/) - When BlueTooth was first introduced in 1994 by Ericcson Corporation of Sweden, it was very insecure. Hackers could steal information and send unsolicited messages to the unsuspecting. In recent years, additional security has been built-in to the protocol and much of the IT security industry has sat back and said, “Its fixed and unhackable”. On
- [Hack like the NSA: The New Shadow Brokers Exploits](https://hackers-arise.com/hack-like-the-nsa-the-new-shadow-brokers-exploits/) - Recently, Shadow Brokers–that mysterious group that has been trying to sell stolen NSA zero-day exploits over most of the last year–released over a 300 MB of new material. In this cornucopia of new exploits are attacks that target Windows systems back to Windows 2000 up to Windows 8, the Solaris OS, the SWIFT international payments
- [Database Hacking, Part 04: Extracting Data with sqlmap](https://hackers-arise.com/database-hacking-part-4-extracting-data-with-sqlmap/) - Welcome back, my aspiring White Hat Hackers! In my previous tutorials in this series, I taught you the basics of SQL injection (the most common method of hacking online databases) and then how to use it against a MySQL database. In this tutorial, we will look at how to now extract the key data from
- [SCADA Hacking: Hacking the Schneider Automated Building System](https://hackers-arise.com/scada-hacking-hacking-the-schneider-automated-building-system/) - SCADA and ICS systems control industrial processes around the world. Everything from railroads, to traffic lights, to oil refineries to commercial buildings are all controlled by these SCADA/ICS systems. Some of the recent concern about these systems is the possible hacking of them by terrorists or by cyber war opponents. In either case, the results
- [Network Forensics, Part 02: Packet-Level Analysis of the NSA's EternalBlue Exploit](https://hackers-arise.com/network-forensics-part-2-packet-level-analysis-of-the-nsas-eternalblue-exploit/) - Welcome back, my aspiring cyber warriors! In April 2017, a nefarious group known only as the Shadow Brokers, released to the world a group of exploits that had been stolen from the U.S. espionage agency, the National Security Agency (NSA). The NSA is charged with protecting U.S. citizens from terrorist and other threats to U.S.
- [Metasploit Basics, Part 24: The New Evasion Modules in Metasploit 5](https://hackers-arise.com/metasploit-basics-for-hackers-part-24-the-new-evasion-modules-in-metasploit-5/) - Welcome back, my aspiring cyber warriors! With the release of Metasploit 5, one of the most notable changes has been the addition of a new type of module type, the evasion modules. These new modules are designed to help you create payloads that can evade anti-virus (AV) software on the target system. Years ago, penetesters
- [Open-Source Intelligence (OSINT): Gathering Open- Source Security Data using Censys](https://hackers-arise.com/open-source-intelligence-osint-gathering-open-source-security-data-using-censys/) - Welcome back, my aspiring OSINT cyber warriors! John Matherly began Shodan in 2009 to collect banner information from nearly early IP address on the planet, put that data into a huge database,and index that data for our use. Shodan has been so successful that it has inspired others to imitate and improve upon it. Censys.com
- [Android Hacking, Part 03: How to Embed a Backdoor into an Android APK](https://hackers-arise.com/android-hacking-part-2-how-to-embed-a-backdoor-into-an-android-apk/) - Welcome back, my fledgling hackers! Mobile devices–smartphones and tablets–are proliferating around the world and slowly overtaking desktop and laptop machines. These mobile devices generally run either the iOS or the Android operating system, with Android comprising the bulk of all mobile device OS’s (82%). Considering the growth of the mobile market and the dominance of
- [Automobile Hacking: The ICS Simulator, Part 02](https://hackers-arise.com/automobile-hacking-the-ics-simulator-part-2/) - Welcome back, my aspiring automobile cyber warriors! In part 1 of the series on the ICS simulator, we installed the can-utils and the ICS simulator instrument panel and controls. In this tutorial, we will use the can-utils or SOCKET CAN to view and analyze the CAN traffic. As you remember from my Automobile Hacking, Part
- [Automobile Hacking, Part 04: How to Hack the Keyless Entry System](https://hackers-arise.com/automobile-hacking-part-4-how-to-hack-the-keyless-entry-system/) - Welcome back, my aspiring cyber warriors! As automobiles become increasingly complex and digital, the opportunities for hacking these transportation vehicles increase exponentially. One of the many conveniences that these new cars offer is proximity door locking/unlocking and engine starting. This feature was first introduced in 1999 and is known as Passive Keyless Entry and Start
- [BASH Scripting for Hackers, Part 02: Building a Continuous Wi-Fi Denial of Service Tool](https://hackers-arise.com/bash-scripting-for-hackers-part-2-building-a-continuous-wi-fi-denial-of-service-tool/) - Welcome back, my aspiring cyberwarriors! Now that you understand a bit of BASH scripting, let’s try to use our BASH scripting skills in conjunction with our Wi-Fi Hacking skills to write a simple script to create a Denial of Service (DoS) to a Wi-Fi AP. If you are unfamiliar with the aircrack-ng suite of tools
- [Digital Forensics, Part 05: Analyzing the Windows Registry for Evidence](https://hackers-arise.com/digital-forensics-part-5-analyzing-the-windows-registry-for-evidence/) - Although nearly all Microsoft Windows users are aware that their system has a registry, few understand what it does, and even fewer understand how to manipulate it for their purposes. As a forensic analyst, the registry can be a treasure trove of evidence of what, where, when, and how something occurred on the system. In
- [OSINT: How to Use the DNS Cache to Determine the Target's AV Software](https://hackers-arise.com/osint-how-to-use-the-dns-cache-to-determine-the-targets-av-software/) - Welcome back, my greenhorn hackers! In previous tutorials, we have looked at ways to re-encode your payloads and other malware to evade AV software. We have also looked at the inner workings of Clam AV to better understand how this type of software works. Sometimes, we can encode our malware with applications such as Shellter
- [Finding the F5 Systems Vulnerable to CVE-2020-5902 using Shodan](https://hackers-arise.com/finding-the-f5-systems-vulnerable-to-cve-2020-5902-using-shodan/) - Welcome back, my aspiring cyberwarriors!On July 4, 2020 (US Independence Day), F5 released a security patch for their BIG-IP systems that allows the attacker to take control of the affected systems. This vulnerability is rated a 10/10 in severity and assigned CVE-2020-5902. This vulnerability is so severe that an attacker with even rudimentary skills can;to
- [Open Source Intelligence (OSINT), Part 06: Open-Source Flight and Aircraft Tracking Data](https://hackers-arise.com/osint-part-6-open-source-flight-and-aircraft-tracking-data/) - Welcome back, my aspiring cyber warrior! There is SO much data on the Internet that the issue not IF the data is available, but rather where. At times, we may want to track flights in an investigation. You may want to track the flights of powerful and nefarious individuals or track military flights. Maybe you
- [Splunk for Security Monitoring, Part 03: Creating a Real-Time Alert](https://hackers-arise.com/splunk-for-security-monitoring-part-3-creating-a-real-time-alert/) - Welcome back, my aspiring cyber warriors! In earlier posts here at Hackers-Arise, I introduced you to Splunk, an excellent tool for managing all your machine-generated data. In this tutorial, I will show you how to use Splunk to generate real-time alerts on just about any machine-data condition that arises on your system or network. Splunk
- [Reverse Engineering Malware, Part 02: Assembler Language Basics](https://hackers-arise.com/reverse-engineering-malware-part-2-assembler-language-basics/) - Most of the work we will be doing in reverse engineering will be with assembler language. This simple and sometimes tedious language can reveal a plethora of information on the source code. When we can’t see or recover the source code of the malware or other software, we can use tools such as dis-assemblers and
- [Digital Forensics, Part 02: Live Memory Acquisition and Analysis](https://hackers-arise.com/digital-forensics-part-2-live-memory-acquisition-and-analysis/) - In some cases, the forensic investigator will need to grab an image of the live memory. Remember, RAM is volatile and once the system is turned off, any information in RAM will be likely lost. This information may include passwords, processes running, sockets open, clipboard contents, etc. All of this information must be captured before
- [Linux Basics for Hackers, Part 0: Getting Started with Kali Linux 2020](https://hackers-arise.com/getting-started-with-kali-linux-2020/) - Welcome back, my aspiring cyber warriors! Kali Linux is the operating system of choice for aspiring hackers and advanced hackers as well. Developed by Offensive Security, it contains many of the tools a hacker needs to get started. Recently, Offensive Security released a new version of Kali Linux nominally known as Kali Linux 2020.2. They
- [Wi-Fi (802.11) Hacking: How to Hack the WPS PIN with Reaver](https://hackers-arise.com/wi-fi-802-11-hacking-how-to-hack-the-wps-pin-with-reaver/) - Welcome back, my budding hackers! One of the most popular areas for those starting out in this discipline is hacking Wi-Fi. Wi-Fi has been rife with vulnerabilities and insecurities over the years and nearly everyone wants to take advantage of this. When Wi-Fi was first developed in the late 90’s, the original encryption/security standard, Wired
- [Reverse Engineering Malware: Getting Started with Ghidra, Part 02](https://hackers-arise.com/reverse-engineering-malware-getting-started-with-ghidra-part-2/) - Welcome back, my aspiring cyber warriors! Reverse engineering malware is among the highest-level skill sets in our discipline and it’s salaries reflect elevated position in the cyber security ecosystem. It requires years of diligent study to become proficient and this is good place to start. If you have not yet done so, go back and
- [Metasploit Basics, Part 13: Exploiting Android Mobile Devices (Updated)](https://hackers-arise.com/metasploit-basics-part-13-exploiting-android-mobile-devices-updated/) - Welcome back, my budding hackers! The growth of the mobile device market has been dramatic over the past 10 years. From its birth in 2007 with the advent of the Apple phone, mobile devices now comprise over 50% of all web traffic in 2020. There are 5B mobile devices on the planet or about one
- [Why Hackers Make the Best InfoSec Engineers](https://hackers-arise.com/why-hackers-make-the-best-infosec-engineers/) - At first blush, the idea of putting a hacker in charge of your information security might seem absurd or, at least, ill-advised. Who would even think of putting someone who is skilled and knowledgeable in how to breach my network in charge of protecting it? Isn’t that comparable to the proverbial fox guarding the hen
- [Web App Hacking: BurpSuite, Part 03: Testing for Persistent XSS](https://hackers-arise.com/web-app-hacking-burpsuite-part-3-testing-for-persistent-xss/) - Welcome back, my aspiring cyberwarriors! Cross Site Scripting or XSS is one of the most problematic vulnerabilities in web applications. It ranks among the OWASP Top 10 website vulnerabilities nearly every year. For more on cross-site scripting, check out my post here. In this tutorial, I will demonstrate how to use the BurpSuite to test
- [Web App Hacking: BurpSuite, Part 04: Remote File Inclusion (RFI)](https://hackers-arise.com/web-app-hacking-burpsuite-part-4-remote-file-inclusion-rfi/) - Welcome back, my aspiring web app hackers! In this series on Web App Hacking, we are exploring the multitude of ways of hacking web applications. Here, we are delving into the most widely used Web App Hacking tools, BurpSuite (BurpSuite is on my essential hacking tools list here). In an earlier post here at Hackers-Arise,
- [Vulnerability Scanning, Part 01: Nexpose](https://hackers-arise.com/vulnerability-scanning-part-1-nexpose/) - Welcome back, my aspiring cyberwarriors! One of the keys to being successful as a hacker, pentester, or cyber warrior is the ability to find vulnerabilities or flaws in the target system. Vulnerabilities are holes or weaknesses that can be exploited (hacked). We have looked at several ways to do that including various Web application vulnerability
- [Snort IDS for Hackers, Part 06: Configuring Snort to Detect the SolarWinds/Sunburst Backdoor](https://hackers-arise.com/snort-basics-for-hackers-part-6-configuring-snort-to-detect-the-solarwinds-sunburst-backdoor/) - Welcome back, my aspiring cyberwarriors! In recent weeks I’m certain you have heard about the SolarWinds/Sunburst hack. Just to review, Russian state-sponsored actors hacked into the SolarWinds update server and installed malware into the software updates. As a result, everyone who received the March 2020 update, now has a Russian backdoor on their system. This
- [Metasploit Basics, Part 27: Compromising an Exim Email Server](https://hackers-arise.com/metasploit-basics-part-27-compromising-an-exim-email-server/) - Welcome back, my aspiring cyberwarriors! Email is one of the most important services and protocols in our daily digital life. Without it, most of us would be non-functional. Despite this criticality, many vulnerabilities still exist in these systems. The key protocol for email is SMTP or Simple Mail Transfer Protocol running, by default, on port
- [Automobile Hacking: ICS Simulator, Part 03. Reverse Engineering the CAN Signals](https://hackers-arise.com/automobile-hacking-ics-simulator-part-3-reverse-engineering-the-can-signals/) - Welcome back, my aspiring car hackers! In the previous tutorial in this series, we learned how to use the CAN utilities or can-utils to capture and send CAN packets. Now, with those tools we can begin to isolate and reverse engineer the CAN packets to take control of the vehicle! Step #1: Use the Controller
- [Netcat- the All-Powerful Linux Utility](https://hackers-arise.com/netcat-the-all-powerful-linux-utility/) - Welcome back, my aspiring cyberwarriors! Netcat is one of those few tools–like nmap, Metasploit, Wireshark and few others– that every hacker should be familiar with. It is simple, elegant, and has a multitude of uses. For instance, netcat can be used to; scan to see if a port is open on a remote system pull
- [A Brief and Glorious History of Hacking (updated to SolarWinds)](https://hackers-arise.com/a-brief-and-glorious-history-of-hacking-updated-to-solarwinds/) - Welcome back, my fledgling hackers! Hacking has a long and storied history in the U.S. and around the world. It did not begin yesterday, or even at the advent of the 21st century, but rather dates back at least 40 years. Of course, once the Internet migrated to commercial use in the 1990s, hacking went
- [Open Source Intelligence (OSINT), Part 03: Extracting Employee Names from Companies (Tesla and Breitbart) on LinkedIn](https://hackers-arise.com/osint-part-3-extracting-employee-names-from-companies-tesla-and-breitbart-on-linkedin/) - Welcome back, my aspiring cyber warriors! The Internet is the deepest and widest data repository in the history of the world! Those who can extract and cultivate intelligence from it, will be empowered like none other! This data can be used for offensive security and forensic investigations, among many other applications. Crosslinked is one more
- [The Cyber Warrior Wisdom of Master OTW](https://hackers-arise.com/the-cyber-warrior-wisdom-of-master-otw/) - Hacking is the new martial art of the 21st century. To become a master hacker, you must think strategically and analytically. Master OTW offers some of his strategic wisdom for the novice hacker that every hacker should be armed with before doing battle. 1. Fools are always speaking. The wise listen. 2. Hacking is a
- [Python Basics for Hackers, Part 04: How to Find the Exact Location of any IP Address](https://hackers-arise.com/python-basics-for-hackers-part-4-how-to-find-the-exact-location-of-any-ip-address/) - Welcome back, my aspiring cyberwarriors! As hackers, we instinctively want to know as much as possible. Among this desired information may be the Geo-Location of an IP address. Thankfully for us, our friends over at MaxMind have built a database that’ll do just that! Thing is, if we want to use it, we have to
- [Automobile Hacking, Part 02: The can-utils or SocketCAN](https://hackers-arise.com/automobile-hacking-part-2-the-can-utils-or-socketcan/) - Welcome back, my aspiring automobile hackers! Now that we laid out the basics of the most common protocol used in automobiles, the Controller Area Network or CAN, we can now proceed to installing the can-utils. can-utils is a Linux specific set of utilities that enables Linux to communicate with the CAN network on the vehicle.
- [MitM Attacks: Hijacking Software Updates Like SolarWinds with evilgrade](https://hackers-arise.com/mitm-attacks-hijacking-software-updates-like-solarwinds-with-evilgrade/) - Welcome back, my aspiring cyberwarriors! In this tutorial, we will examine what happens if that update or upgrade is hijacked by a malicious entity. All of our systems, periodically download upgrades and updates trusting that these are coming from the software developer. What if they were not? What if these updates/upgrades were coming from a
- [OSINT: Scraping email Addresses with TheHarvester](https://hackers-arise.com/osint-scraping-email-addresses-with-theharvester/) - Welcome back, my aspiring OSINT investigators! There are a multitude of tools to scrape email addresses from various locations, but theHarvester is one of the best! It’s easy to use and effective. In addition, it is even better at enumerating subdomains than many of tools specifically designed for that purpose. Unlike some of the other
- [Wi-Fi Hacking: Using wifite for Multiple Attack Strategies against Wi-Fi AP's](https://hackers-arise.com/wi-fi-hacking-using-wifite-for-multiple-attack-strategies-against-wi-fi-aps/) - Welcome back, my aspiring cyberwarriors! Often, when doing a pentest, we have multiple Wi-Fi access points to test for security. Rather than testing each one individually with tools such as aircrack-ng, Reaver, pyrit, and hcxdumptool, and others, we can automate that testing with a single tool such as wifite. Wifite enables us to test all
- [Web App Hacking: BurpSuite, Part 02: Bypass Weak Input Validation to Upload Malware to a Website](https://hackers-arise.com/web-app-hacking-burpsuite-part-2-bypass-weak-input-validation-to-upload-malware-to-a-website/) - Welcome back, my aspiring cyber warriors! In general, we can say that the solution to many injection attacks in web applications is “Input Validation”. Input validation makes certain that only the type of input that the application was developed to handle is input and not malicious commands or scripts masquerading as data. Some applications enable
- [Digital Forensics: Hackers-Arise Uncovers Mastermind of Global Scam!](https://hackers-arise.com/digital-forensics-hackers-arise-uncovers-mastermind-of-global-scam-2/) - As you know, Hackers-Arise offers a service we call Digital Forensic Investigator for Hire. Most of our cases fit into the following categories; 1. Cyber Bullying 2. Identity Theft 3. Bitcoin and other cryptocurrencies stolen 4. Porn revenge Recently, a totally different type of case came to our attention. Apparently, there is an organization known
- [Web App Hacking, Part 09: Cross Site Scripting (XSS)](https://hackers-arise.com/web-app-hacking-part-9-cross-site-scripting-xss/) - Welcome back, my fledgling hackers! The next tutorial in this Web App Hacking series involves among the most critical vulnerabilities in web applications, cross site scripting or XSS. XSS annually makes it into the OWASP Top Ten web application vulnerabilities for good reason. In the most simple terms, XSS allows the attacker to send malicious
- [Open Source Intelligence (OSINT), Part 04: Google Hacking to Find Unsecured Web Cams](https://hackers-arise.com/open-source-intelligenceosint-part-4-google-hacking-to-find-unsecured-web-cams/) - Welcome back, my aspiring OSINT cyber warriors! The Internet is the largest and deepest repository of data in the history of the world. With that tautology out of the way, let’s get down to work, and maybe, a little fun. All the data on the Internet can be very valuable to an investigator or hacker,
- [Web App Hacking: XXE Vulnerabilities and Attacks](https://hackers-arise.com/web-app-hacking-xxe-vulnerabilities-and-attacks/) - Welcome back, my aspiring Web App cyberwarriors! Among the most important types of web app attacks is the XXE attack. This is the XML eXternal Entity Injection attack. This type of vulnerability allows an attacker to interfere with the app’s processing of XML data. Many applications use the XML format to transmit data between the
- [The Art of Social Engineering training, April 13-15](https://hackers-arise.com/the-art-of-social-engineering-training-april-13-15/) - Many novices to cybersecurity underestimate the importance of social engineering. More experienced hands understand that social engineering is probably the greatest threat to our networks. Many of the most significant hacks in history had a social engineering element including; BlackEnergy3 Target POS 2016 Presidential Campaign and DCCC email hack RSA NY Times SONY Pictures and
- [Port Scanning and Reconnaissance with Hping3](https://hackers-arise.com/port-scanning-and-reconnaissance-with-hping3/) - Welcome back, my aspiring cyberwarrior! One of the most time-consuming, but necessary, activities in hacking is reconnaissance. Before we can hack a system, we need to know what operating system it’s running, what ports are open, what services are running, and hopefully, what applications are installed and running. Good reconnaissance increases our chance for success
- [OSINT: Harvesting Venmo Transactions](https://hackers-arise.com/osint-harvesting-venmo-transactions/) - Welcome back, my aspiring OSINT cyber warriors! The Internet is the Largest Data Repository in the History of the World! Imagine how much information you could extract if you had access to all the financial information of the target of your investigation. If you could see their bank information and their credit card transactions, you
- [Open Source Intelligence (OSINT): Tracking Marine Traffic Around the World](https://hackers-arise.com/open-source-intelligence-osint-tracking-marine-traffic-around-the-world/) - Welcome back, my aspiring OSINT investigators! The Internet is the largest repository of data in the history of the world! Learn how and where to access it to bring its power and intelligence into your hands! Open Source Intelligence (OSINT) Open source Intelligence (OSINT) is useful and applicable to so many industries, such as; Pentesting
- [SCADA Hacking: Attacking SCADA/ICS Systems through the Human Machine Interface (HMI)](https://hackers-arise.com/scada-hacking-attacking-scada-ics-systems-through-the-human-machine-interface-hmi/) - Welcome back, my aspiring SCADA/ICS cyberwarriors! Let’s begin by congratulating you on your foresight in committing to study SCADA/ICS hacking and security. This is certainly THE most important security issue this decade! In general, SCADA/ICS hacks have been of two types; Hack the protocols (modbus, DNP3, Profitnet, etc); Hack the Human Machine Interface (HMI) In
- [SCADA Hacking: The Triton Malware Threat to SCADA/ICS Infrastructure](https://hackers-arise.com/scada-hacking-the-triton-malware-threat-to-scada-ics-infrastructure/) - Welcome back, my aspiring SCADA cyber warriors! SCADA/ICS infrastructure is under continuous threat. These systems are crucial to any nation’s economic health and well-being and are the primary target in any cyber war. These systems include the electrical grid, waster water systems, manufacturing, petrochemical refining, chemical processing and nearly any industrial process. If an adversary
- [Software Defined Radio (SDR) for Hackers, Part 01: Getting Started](https://hackers-arise.com/software-defined-radio-sdr-for-hackers-part-1-getting-started/) - Welcome back, my aspiring cyber warriors! In recent years, the ability to receive and send radio signals from your computer has become a reality! This has become to be known as Software Defined Radio (SDR). With this capability has come to the ability to capture, decode, replay and hack these signals with all the power
- [Dreaming of Becoming a Cyber Warrior? You can join our team NOW by becoming a Hackers-Arise MEMBER!](https://hackers-arise.com/dreaming-of-becoming-a-cyber-warrior-you-can-join-our-team-now-by-becoming-a-hackers-arise-member/) - You can become a Hackers-Arise MEMBER and receive the following;1. “Linux Basics for Hackers v2” Video Companion ($99 value).2. “CWA Prep” (Introduction to Hacking) Video ($99 value).3. An Autographed copy of Master OTW’s new book “Getting Started Becoming a Master Hacker” ($30 value. You just pay shipping).4. A digital copy of Master OTW’s 2021 book
- [Anatomy of Ransomware, Part 01: Chimera](https://hackers-arise.com/anatomy-of-ransomware-part-1-chimera/) - Ransomware is a type of malware that has become almost epidemic in recent years. Consumers and businesses are being hit with this malware around the world. After infecting the victim’s computer, this malware encrypts the victim’s data making it unusable. The victim can only recover their data after paying a ransom (hence, its name) to
- [Reconnaissance: Scanning and DoSing with Scapy](https://hackers-arise.com/reconnaissance-scanning-and-dosing-with-scapy/) - Welcome back, my aspiring cyberwarriors! We have explored a number of packet manipulation tools here on Hackers-Arise that can be very effective for network scanning, such as nmap and hping. As you know, almost any packet crafting/manipulation tool can also be used for DoSing (denial-of-service attacks). Given the power of creating just about any type
- [Advice from a Professional Hacker: How Hackers Are Stealing Your Bitcoin and Other Cryptocurrencies](https://hackers-arise.com/advice-from-a-professional-hacker-how-hackers-are-stealing-your-bitcoin-and-other-cryptocurrencies/) - As the price of the cryptocurrencies has skyrocketed over the last few years, the theft of cryptocurrencies has soared right along with it. It appears that hackers have decided it is much easier and more lucrative to steal the cryptocurrencies than the traditional, government-issued fiat currencies ($, pounds, Euros, etc.) and the possible consequences, more
- [Open Source Intelligence (OSINT), Part 02: recon-ng to Identify the Same User on Multiple Platforms](https://hackers-arise.com/open-source-intelligence-osint-part-2-recon-ng-to-identify-the-same-user-on-multiple-platforms/) - Welcome back, my aspiring cyber warriors! The Internet is the largest data repository the world has ever known! Open Source Intelligence or OSINT is the way to gather and unlock the intelligence embedded in all that data. In recent years, a brand new reconnaissance framework has become available to us that leverages many of the
- [Bug Bounty Hunting, Part 01: Getting Started](https://hackers-arise.com/bug-bounty-hunting-part-1-getting-started/) - Welcome back my aspiring bounty hunters! In recent years, bug bounty hunting has become a lucrative and legitimate career for those with hacking skills! In this series, we will introduce you to the field of bug bounty hunting and train you to find those bugs for the lucrative bounties! Before we get into the technical
- [Software Defined Radio(SDR) for Hackers, Part 04: Intercepting and Decoding Confidential Pager Data](https://hackers-arise.com/software-defined-radiosdr-for-hackers-part-4-intercepting-and-decoding-confidential-pager-data/) - Welcome back, my aspiring RF hackers! Although few people still use pagers, they were once a common communication device used by many industries to notify employees, contractors and others of urgent information. Pagers are a wireless telecommunication device that sends and displays alphanumeric and voice messages. These pagers, once the state-of-the-art mobile communication system, are
- [Reverse Engineering Malware, Part 01: Getting Started](https://hackers-arise.com/reverse-engineering-malware-part-1-getting-started/) - In my introductory article in this new series, I attempted to lay out the merits of why you should study Reverse Engineering Malware. I’m hoping that you found that argument compelling enough that you have come back and are ready to dedicate yourself to this exciting discipline. I’m sure your hard work and dedication will
- [SCADA Hacking: Developing Zero-Day SCADA Exploits](https://hackers-arise.com/scada-hacking-developing-zero-day-scada-exploits/) - As white-hat hackers, ultimately we want to be able to develop exploits for SCADA/ICS systems. In this way, we can find vulnerabilities and exploits before the Black Hats and patch the vulnerability before any bad guys take advantage of it. In this article, I want to give you a basic outline of the process of
- [The Hackers-Arise Cybersecurity/Hacker Starter Bundle](https://hackers-arise.com/the-hackers-arise-cybersecurity-hacker-starter-bundle-2/) - So many of you have asked for an inexpensive cybersecurity starter package and we have responded! The following package provides everything you need to get started in cybersecurity/infosec for just $149! This package includes;Linux Basics for Hackers v2 companion videos ($99 value)Certified WhiteHat Hacker Associate(CWA) Prep v2 course ($99 value)Getting Started Becoming a Master Hacker
- [Software Defined Radio (SDR) for Hackers, Part 04: Intercepting International Space Station Signals](https://hackers-arise.com/software-defined-radio-sdr-for-hackers-part-4-intercepting-international-space-station-signals/) - Welcome back, my aspiring RF hackers! In this series, we are exploring how we can use a simple and inexpensive rtl-sdr dongle, in conjunction with our computer and software, to listen, intercept, decode and decrypt various radio frequency signals. These include such things as cellphones, pagers, garage door openers, remotes, automobile remote door openers, police
- [Reverse Engineering Malware, Ghidra Part 03: Analyzing the WannaCry Ransomware](https://hackers-arise.com/reverse-engineering-malware-ghidra-part-3-analyzing-the-wannacry-ransomware/) - Welcome back, my aspiring cyber warriors! Reverse engineering is one of the most highly sought and most valuable cybersecurity/infosec skills. Few people have developed their skill levels to be proficient in this highly sought after skill. Ghidra is a relatively new and free reverse engineering tool from the US spy agency, NSA. In this tutorial,
- [Open Source Intelligence (OSINT), Spyse, Part 01: Finding Critical Information about a Domain](https://hackers-arise.com/open-source-intelligence-osint-spyse-part-1-finding-critical-information-about-a-domain/) - Welcome back, my open source intelligence (OSINT) investigators. In previous tutorials, we have examined numerous web services that compile key information that is useful to pentesters, hackers and bug hunters. These include; Google Hacking Shodan Censys BuiltWith Netcraft and others These are all great tools but I’m going to show you a new kid on
- [Metasploit Basics, Part 05: Using Metasploit for Reconnaissance (nmap, EternalBlue, SCADA, and MS SQL)](https://hackers-arise.com/metasploit-basics-part-5-using-metasploit-for-reconnaissance-nmap-eternalblue-scada-and-ms-sql/) - Welcome back, my rookie hackers! As you know, reconnaissance is a crucial part of the hacker/pentester’s job. Without good reconnaissance, it is likely that all your work and effort will go for naught. As Metasploit has evolved from strictly an exploitation framework to a multi-faceted, penetration testing tool, it has added additional capabilities, including reconnaissance.
- [Reverse Engineering Malware, Part 05: OllyDbg Basics](https://hackers-arise.com/reverse-engineering-malware-part-5-ollydbg-basics/) - In this series, we are examining how to reverse engineer malware to understand how it works and possibly re-purposing it. Hackers and espionage agencies such as the CIA and NSA, regularly re-purpose malware for other purpose. Previously, we looked at the basics of IDA Pro, the most widely used disassembler in our industry. In this
- [OSINT: Google Hacking and Dorks to Find Key Information](https://hackers-arise.com/osint-google-hacking-and-dorks-to-find-key-information/) - As all of us know, Google operates the most widely used Internet search engine on the planet. Google crawls nearly every web page, of every website, and builds a massive database of all the information it gathers. Most people then use Google’s database to search by keywords for articles relevant to the subject of their
- [It's Finally Here! Metasploit5 Basics for Hackers](https://hackers-arise.com/its-finally-here-metasploit5-basics-for-hackers/) - It’s finally here! Master OTW’s Long Awaited Next BookMetasploit5 Basics for HackersMaster OTW’s new book, following closely in the footsteps of his previous books–Linux Basics for Hackers and Getting Started Becoming a Master Hacker–is meant to fill a gap in the industry for a simple-to-use, accessible guide to getting started with Metasploit (the world’s most
- [Open Source Intelligence (OSINT): Facial Recognition for Investigations](https://hackers-arise.com/open-source-intelligence-osint-facial-recognition-for-investigations/) - Welcome back, my aspiring OSINT investigators! Very often in an investigation, we have a picture and we are trying to identify the subject. This might be a picture from a scammer on a dating site, a picture from a Facebook page, a picture sent via SMS, WhatsApp, Snapchat, TikTok or other chat medium or a
- [Wi-Fi Hacking, Part 11: The PMKID Attack](https://hackers-arise.com/wi-fi-hacking-part-11-the-pmkid-attack/) - Welcome back, my aspiring cyber warriors! As you know, the key to hacking the WPA2-PSK is to capture the PSK (pre-shared key or password) as it passes through the air in the 4-way handshake between the client and the AP (you must be in monitor mode to do so). This requires that we either wait
- [Android Hacking, Part 04: A Compendium of Android Remote Administration Trojans (RATS)](https://hackers-arise.com/android-hacking-part-4-a-compendium-of-android-remote-administration-trojans-rats/) - Welcome back, my aspiring cyberwarriors! In light of the recent revelations regarding Israel’s NSO group and their cellphone malware known as Pegasus, I thought it would be good time to catalog some of the better-known Remote Access Trojans (RATs) available for the Android OS. This is not meant as an exhaustive list, but simply a
- [Reverse Engineering Malware: Reversing and Disassembly Tools](https://hackers-arise.com/reverse-engineering-malware-reversing-and-disassembly-tools/) - Welcome back, my aspiring malware analysts! In previous tutorials here, I have demonstrated the power of such reversing and disassembly tools as Ollydbg, IDAPro and Ghidra. In this tutorial I’d like to share and demonstrate a few simpler tools that you are certain to want to have in your malware analysis toolbox. Each of these
- [Linux Firewalls Training, November 2-4](https://hackers-arise.com/linux-firewalls-training-november-2-4/) - Now is your chance to learn to build and manage your own Linux firewall! This course, taught by Master OTW, the author of Linux Basics for Hackers, will show you how to build sophisticated firewalls with Linux. With recent developments, it is now possible to create a firewall as sophisticated as the commercial firewalls costing
- [SCADA Hacking: Finding Specific SCADA Systems with Censys](https://hackers-arise.com/scada-hacking-finding-specific-scada-systems-with-censys/) - Welcome back, my aspiring SCADA Security Engineer! As you know, SCADA/ICS systems around the world are under attack. These systems are industrial systems that make up the infrastructure of any nation’s economy and are the prime targets in any cyberwar. In such a war, these systems can be easily found via a variety of tools
- [Web App Hacking: Fuzzing Web Apps to Find Bugs with BurpSuite](https://hackers-arise.com/web-app-hacking-fuzzing-web-apps-to-find-bugs-with-burpsuite/) - Welcome back, my aspiring cyberwarriors! In previous tutorials here on Hackers-Arise, we have used the BurpSuite for a number of purposes to test, evaluate and hack web applications. BurpSuite is among that set of tools that every hacker/pentester/bug bounty hunter should be familiar with! In this tutorial, we will be using the BurpSuite to fuzz
- [How To Study and Pass the Certified Whitehat Hacker Associate (CWA) Exam](https://hackers-arise.com/how-to-study-and-pass-the-certified-whitehat-hacker-associate-cwa-exam/) - Many of you have been asking me, “How can I study for the CWA certification exam, and what material is covered on the exam?” Here is the answer you have been waiting for! The White Hat Hacker Associate (CWA) covers 14 domains or subject areas. Everything you need to know is here on Hackers-Arise. There
- [Linux Basics for Hackers, Part 12: The Linux Philosophy](https://hackers-arise.com/linux-basics-for-hackers-part-12-the-linux-philosophy/) - Welcome back my aspiring hackers! Although this article may have been better placed first in this series, I doubt that anyone would have read it when just starting out studying Linux. Now, that you are well into your Linux studies and have some familiarity with how it operates, I’d like to take this moment to
- [Certified Cloud Security Professional (CCSP) Earn the Most Respected Cloud Security Certification!](https://hackers-arise.com/certified-cloud-security-professional-ccsp-earn-the-most-respected-cloud-security-certification/) - Welcome back, my aspiring cyberwarrior!The Certified Cloud Security Professional (CCSP) from ISC2 is the world’s most respected and sought-after cloud security certification. Now, you can take your career to the next level by becoming CCSP certified. Certification Magazine lists the top 75 certifications in its 2021 Annual Salary Survey. According to their survey, the CCSP
- [Evading Antivirus: How Antivirus Works](https://hackers-arise.com/evading-antivirus-how-antivirus-works/) - Welcome back my aspiring cyberwarriors! Before beginning on the journey to learn to how to evade AV, it is critical to first understand how AV works. In this brief post, we will examine the primary methods that antivirus developers use to detect malware Most antivirus products today use one of just a few engines. Each
- [Ransomware, Part 01: History and Evolution of Ransomware and Ransomware Attacks](https://hackers-arise.com/ransomware-part-1-history-and-evolution-of-ransomware-and-ransomware-attacks/) - Welcome back, my aspiring cyberwarriors! Recent events have once again emphasized the importance of SCADA security! On May 7, 2021, Colonial Pipeline was attacked with ransomware and was forced the close down a pipeline carrying 45% of the gasoline to major US East Coast cities (NYC, Philadelphia, Washington DC, etc.). This set up gasoline shortages
- [Linux Basics for Hackers, Part 13: Running Kali Linux in Windows (WSL)](https://hackers-arise.com/linux-basics-for-hackers-part-13-running-kali-linux-in-windows-wsl/) - Welcome back my aspiring cyber warriors! As most of you know, I am the author of the best-selling book, Linux Basics for Hackers from No Starch Press. I was inspired to write it from experience teaching hacking to US military and intelligence personnel. Over and over again, I found very talented students who were stymied
- [Database Basics for Hackers, Part 01: Getting Started](https://hackers-arise.com/database-basics-for-hackers-part-1-getting-started/) - Welcome back, my aspiring cyber warriors! Although there is a multitude of different hacker types and hacking techniques, the one target they all share is the database. I often refer to the database as the hacker’s Holy Grail, or the ultimate prize for an effective hack. That’s because the database—almost by definition—is the repository of
- [OSINT: Using Spiderfoot for OSINT Data Gathering](https://hackers-arise.com/osint-using-spiderfoot-for-osint-data-gathering/) - Welcome back, my aspiring OSINT experts! Open Source Intelligence –or OSINT as it has become known –is a leading-edge field in hacking/pentesting, forensics and data science. OSINT is changing the way private investigators, pentesters and data scientists do their job. Open Source Intelligence uses the resources freely available on the Internet (no illegal activities necessary)
- [Wireless Hacking, Part 10: Creating an Evil Twin Wi-Fi AP to Eavesdrop on the Target's Traffic](https://hackers-arise.com/wireless-hacking-part-10-creating-an-evil-twin-wi-fi-ap-to-eavesdrop-on-the-targets-traffic/) - Welcome back, my aspiring cyber warriors! There are a multitude of strategies and techniques for hacking wireless networks. You can see a list of the tutorials in the Wireless Hacking section here on Hackers-Arise. Here, we will look at one more technique for hacking Wi-Fi for spying on the target’s traffic. One such strategy would
- [Using Your Cyberwarrior Skills to Catch a Terrorist](https://hackers-arise.com/using-your-cyberwarrior-skills-to-catch-a-terrorist/) - Welcome back, my aspiring cyberwarriors! Previously in my “Spy on Anyone” series, we used our hacking skills to turn a target’s computer system into a bug to record conversations and found and downloaded confidential documents on someone’s computer. In this tutorial, I will show you how to spy on anybody’s Internet traffic to find keywords
- [Getting Started Bug Bounty Hunting, March 15-17](https://hackers-arise.com/getting-started-bug-bounty-hunting-march-15-17/) - If you ever dreamed of becoming a Bug Bounty Hunter, this is the course for you!Bounty hunting has grown dramatically in recent years and has now become one of the primary occupations of legitimate and legal hacking. This is a place where you can use your hacking skills legally and get paid for it. In
- [Network Forensics, Part 05: Wi-Fi (802.11) Forensics](https://hackers-arise.com/network-forensics-part-5-wi-fi-802-11-forensics/) - Welcome back my aspiring DFIR analysts! In recent recent years, Wi-Fi has become ubiquitous throughout our home and working environments. It provides convenience and a limited amount of security, enough to be used by most people. In any investigation where Wi-Fi is available, you will be negligent to not inspect and analyze the Wi-Fi network
- [Open Source Intelligence (OSINT): Using Google Earth Pro Satellite Imagery for Investigations](https://hackers-arise.com/open-source-intelligence-osint-using-google-earth-pro-satellite-imagery-for-investigations/) - Welcome back, my aspiring investigators! Open Source Intelligence (OSINT) is a very broad field with a multitude of applications throughout information security and other fields. These applications include; Pentesting and security assessment Economic and financial assessments Environmental Assessments Crime investigations People Searches Thwarting hacks, scams, and other criminal activity Journalism The list could go on
- [Shodan: Using Shodan to Find Vulnerable Russian SCADA/ICS Sites](https://hackers-arise.com/shodan-using-shodan-to-find-vulnerable-russian-scada-ics-sites/) - Welcome back, my aspiring cyberwarriors! As the war between Russia and Ukraine escalates, the risks to the world’s peace and prosperity intensifies. Russia has been using cyber war techniques against Ukraine for over a decade and if the sanctions against Russia intensify (their stock market fell nearly 50% on the first day of sanctions), it
- [Finding Vulnerabilities in Russian Sites with netlas.io](https://hackers-arise.com/finding-vulnerabilities-in-russian-sites-with-netlas-io/) - Welcome back, my heroes! The barbaric attack against Ukraine by Russian forces continues. Ukraine has officially requested that hackers from around the world assist their fight against this aggression. Stopping Russia now at Ukraine may be essential to saving Europe in the future. An effective cyber war against Russia may make them think twice about
- [Finding Outdated and Vulnerable Systems in Russian Using Shodan](https://hackers-arise.com/finding-outdated-and-vulnerable-systems-in-russian-using-shodan/) - Welcome back, my cyberwarriors! The Russian invasion of Ukraine continues and the courageous people of Ukraine need our help. In previous posts, I have emphasized that there are many outdated and vulnerable systems around the world. Not everyone updates and upgrades their operating systems. These systems are particularly vulnerable to known attack vectors. Russia is
- [The App That May Save Ukraine!](https://hackers-arise.com/the-app-that-may-save-ukraine/) - Welcome back, my cyberwarriors! I truly appreciate all of the work you have done to support the brave people of Ukraine. You are all heroes! Right now, it appears that Russia will try to take out the communication system of Ukraine including its Internet service. Although the government just implemented Starlink from Elon Musk’s SpaceX
- [Crashing (DoS) Russian Servers with the Bluekeep Vulnerability](https://hackers-arise.com/crashing-dos-russian-servers-with-the-bluekeep-vulnerability/) - Welcome back, my aspiring cyberwarriors! Putin’s brutal invasion of Ukraine must be stopped. While the Ukrainian people are having bombs dropped on their heads and are living without heat and electricity, those of us with the skills and knowledge are obligated to do what we can from our warm, cozy offices and homes. Remember, Putin
- [Stop Putin Now! Performing a DoS Attack against Russian Wi-Fi AP's](https://hackers-arise.com/stop-putin-now-performing-a-dos-attack-against-russian-wi-fi-aps/) - Welcome back, my cyberwarriors! Now that the brutal Russian invaders have taken and occupied some Ukrainian cities, the next stage is cyber guerilla warfare. This means attacking and disrupting the Russian occupiers at every turn. Some will use Molotov cocktails, some will use Stinger missiles and some will use cyber attacks. In this tutorial, I
- [Clogging, Saturating and DoSing Russia's Internet with zmap](https://hackers-arise.com/clogging-saturating-and-dosing-russias-internet-with-zmap/) - Welcome back, my cyberwarriors! Stopping Russia’s naked and brutal aggression is paramount. If we can’t join the front lines to defend Ukraine, at least we can put pressure on Russia through our cyber skills. Even if you have limited IT/cybersecurity skills, you can still help by keeping Russian military and commercial websites offline. As many
- [SDR for Hackers: Jamming Russian Military Signals in Ukraine](https://hackers-arise.com/sdr-for-hackers-jamming-russian-military-signals-in-ukraine/) - The situation has become even more desperate in recent days. The Russians are shelling cities indiscriminately killing women and children. They are now narrowing in on Kyiv and the mayor has imposed a two day curfew in anticipation of heavy fighting. The cyber war against Russia is entering Round 2. The first round was won
- [Ukraine Needs Your help! Updated with Instructions and Default Username](https://hackers-arise.com/ukraine-needs-your-help-updated-with-instructions-and-default-username/) - Ukraine needs your help!From a source inside Ukraine, I have received a list of IP addresses with cameras within the Russian occupied areas of Ukraine. We need the camera credentials so that we can identify the Russian soldiers committing the atrocities and record them for prosecution. If each person simply took one IP address and
- [SCADA Hacking: "Mysterious" Explosions and Fires at Russian Industrial Sites](https://hackers-arise.com/scada-hacking-mysterious-explosions-and-fires-at-russian-industrial-sites/) - Welcome back, my cyberwarrior heroes! As I mentioned in my second interview with David Bombal, the second round of the Ukraine/Russia Cyberwar will involve SCADA/ICS hacking. Recently, Russia once again attempted to hack Ukraine’s electrical grid (it successfully turned out the lights in Ukraine in 2014 and 2015) but was stymied by a stiff cyber
- [Finding the Location of the Russian Oligarch's Mega Yachts. U.S. Now Offering Up to $5M Reward!](https://hackers-arise.com/finding-the-location-of-the-russian-oligarchs-mega-yachts-u-s-now-offering-up-to-5m-reward/) - Welcome back, my cyberwarriors! We all stand in solidarity against the naked aggression of the Putin regime against Ukraine. The Ukrainian government has requested our help. There is something that each of us can do to save Ukraine now and Western Europe ultimately from this despicable dictator and his blood lust. Russia is a kleptocracy.
- [Software Defined Radio, Part 06: Building a Cellphone IMSI Catcher (Stingray)](https://hackers-arise.com/software-defined-radio-part-6-building-a-cellphone-imsi-catcher-stingray/) - Welcome back, my aspiring RF hackers! Among the multitude of radio signals swirling around us everyday are the mobile telephone signals that all of us have become so dependent upon. Mobile networks use several different technologies including GSM, CDMA, TDMA, 4G, LTE, 5G and many others. For almost two decades now, law enforcement around the
- [Social Engineering Attacks: Creating a Fake SMS Message](https://hackers-arise.com/social-engineering-attacks-creating-a-fake-sms-message/) - Welcome back, my aspiring cyber warriors! Social engineering is a key feature of some of the biggest hacks in history! Many novice hackers are so focused upon mastering the technical aspects of hacking that they ignore at their own peril the power of social engineering. When nation-state actors such as Russia’s Sandworm hacking team (one
- [Hackers-Arise Selected One of Top 5 Cybersecurity Web Sites in the World!](https://hackers-arise.com/hackers-arise-selected-one-of-top-5-cybersecurity-web-sites-in-the-world/) - Recently, the website clearancejobs.com, site specializing in jobs requiring security clearance, cited Hackers-Arise as one of the Top 5 Cybersecurity web sites in the world. Here is what they said about Hackers-Arise;You can read the complete article here. OTWMaster OTW is a renowned cybersecurity expert, ethical hacker, and digital forensics consultant with over two decades
- [Linux Basics for Hackers, Part 14: Using the curl command to Download Web Site Source Code](https://hackers-arise.com/linux-basics-for-hackers-part-14-using-the-curl-command-to-download-web-site-source-code/) - Welcome back my aspiring cyber warriors! Now that you have mastered the Basics of Linux, let’s begin looking at some of the more esoteric but equally powerful Linux commands for the hacker.One of those key commands is curl or client URL. This command enables the Linux user to send and receive to a specified URL,
- [SCADA Hacking: The Key Differences between Security of SCADA and Traditional IT systems](https://hackers-arise.com/scada-hacking-the-key-differences-between-security-of-scada-and-traditional-it-systems/) - For those who are coming from a traditional IT or IT security background, SCADA/ICS systems security can prove prove daunting. Many of the technologies, modes and mindset of the traditional IT are not applicable to SCADA/ICS systems. In this brief article, I’d like to enumerate and elaborate on just a few of the most important
- [Using MultiBlue to Control Any Bluetooth Mobile Device](https://hackers-arise.com/using-multiblue-to-control-any-bluetooth-mobile-device/) - We recently began an exploration of ways to hack using the Bluetooth protocol. As you know, Bluetooth is a protocol that connects near field devices such as headsets, speakers, and keyboards. Its minimum range is a 10-meter radius (~33 feet) and maximum is at 100 meters (~328 feet). I already explained the basics of Bluetooth
- [How Elliot and f/society made their Hacks Untraceable](https://hackers-arise.com/how-elliot-and-f-society-made-their-hacks-untraceable/) - Last season Elliot and fsociety successfully took down Evil Corp! They have effectively destroyed over 70% of the world’s consumer and student debt! Free at last! Free at last! ​ Of course, global financial markets crashed as well, but that’s another story. Although there were many elements that made the hack successful, such as Darlene
- [Building a Honeypot to Capture Zero-Day Exploits, Part 01](https://hackers-arise.com/building-a-honeypot-to-capture-zero-day-exploits-part-1/) - The Holy Grail of any hacker is to develop a zero-day exploit—an exploit that has never been seen by antivirus (AV) or intrusion detection systems (IDS) developers. In that way, the hacker can exploit systems with their newly discovered vulnerability without detection! To get a zero-day, you have at least two choices: (1) develop your
- [Getting Started with Bluetooth Hacking](https://hackers-arise.com/getting-started-with-bluetooth-hacking/) - This section of Hackers-Arise is dedicated to hacking the Bluetooth protocol. Bluetooth is the pico-net that extends at least 10m around our devices and enables us to connect headsets, speakers, and other devices to our mobile devices. If one can hack the Bluetooth protocol, you can potentially steal sensitive information and contacts, intercept phone messages,
- [Working with Exploits: Using Exploit-DB to find Exploits](https://hackers-arise.com/working-with-exploits-using-exploit-db-to-find-exploits/) - I. Introduction This section of this course is designed to help you find and use exploits that will work against known vulnerabilities. As you already know, there is no “silver bullet” exploit that works against all systems, under all circumstances. Exploits are very specific. They work ONLY under very specific circumstances. In many cases, they
- [Evading AV with shellter](https://hackers-arise.com/evading-av-with-shellter/) - One key area on the minds of all hackers is how to evade security devices such as an intrusion detection system (IDS) or antivirus (AV) software. This is not an issue if you create your own zero-day exploit, or capture someone else’s zero-day. However, if you are using someone else’s exploit or payload, such as
- [Building a Honeypot to Capture Zero-day Malware, Part 02](https://hackers-arise.com/building-a-honeypot-to-capture-zero-day-malware-part-2/) - The Golden Fleece of hackers is to develop a zero-day exploit, an exploit that has not been seen by antivirus (AV) software or and intrusion detection system (IDS). A zero-day exploit is capable of skating right past these defenses as they do not contain a signature or another way of detecting them. Developing a zero-day
- [Cryptography Basics for the Aspiring Hacker](https://hackers-arise.com/cryptography-basics-for-the-aspiring-hacker/) - As hackers, we are often faced with the hurdle of cryptography and encryption. Every cyber security engineer worth their pocket protector understands that encryption make the hacker/attacker’s task much more difficult. In some cases it may be useful to the hacker, to hide actions and messages. Many applications and protocols use encryption to maintain confidentiality
- [The Brief History of Russian Cyberattacks Against Ukraine and the Risks they Pose to the West](https://hackers-arise.com/the-brief-history-of-russian-cyberattacks-against-ukraine-and-the-risks-they-pose-to-the-west/) - Welcome back, my cyber warriors! As the war in Ukraine rages on, it’s important to keep in mind that this war didn’t begin in February of this year, but rather it has been simmering for almost a decade. Ever since the people of Ukraine overthrew their despotic Russian puppet in 2014, the Russians have been
- [Round 2 of the Great Cyberwar of 2022: Attacking Russia's Schneider Electric SCADA/ICS Sites](https://hackers-arise.com/round-2-of-the-great-cyberwar-of-2022-attacking-russias-schneider-electric-scada-ics-sites/) - Welcome back, my cyber warriors! Round 1 of the Great Cyberwar of 2022 went to Ukraine and its allies from around the world. Among the many successful attacks were the brief takeover of Russia Today TV, the defacement of multiple websites, and probably most importantly, the massive DDoS of Russia’s Internet architecture. We successfully made
- [Netcat, the All- Powerful](https://hackers-arise.com/netcat-the-all-powerful-2/) - Netcat, the All- Powerful Netcat is one of those few tools–like nmap, Metasploit, Wireshark and few others– that every hacker should be familiar with. It is simple, elegant and has a multitude of uses. For instance, netcat can be used to; scan to see if a port is open on a remote system pull the
- [Network Basics for Hackers, Part 02: TCP/IP](https://hackers-arise.com/networking-basics-for-hackers-part-2/) - In the first part of this series, I introduced you to the basics of networking including IP addresses, ports, NAT, and DHCP. In this lesson, I want to introduce you to the basics of TCP/IP, i.e., Transmission Control Protocol (TCP) and Internet Protocol (IP). These are the most common protocols used on the internet for
- [Google Hacking: The Ultimate List of Google Dorks to find Unsecured Web Cams](https://hackers-arise.com/google-hacking-the-ultimate-list-of-google-dorks-to-find-unsecured-web-cams/) - Welcome back, my aspiring hackers!As you know, we at Hackers-Arise have been deeply involved in the cyberwar to save Ukraine from the brutal Russian aggression. As part of the that effort, we were asked to hack IP cameras throughout Ukraine to spy on Russia activities by the Ukraine military. To read more about this, click
- [Open Source Intelligence (OSINT): Finding Vulnerable Systems Across the Internet with Netlas.io](https://hackers-arise.com/open-source-intelligence-osint-finding-vulnerable-systems-across-the-internet-with-netlas-io/) - Welcome back, my aspiring cyberwarriors! Oftentimes, as cyberwarriors, we need to check to see whether our systems or others’ are vulnerable to various known vulnerabilities and attacks. Whether a penetration tester, security engineer or other malicious actors, such information can be critical to the success of your mission. There are number of other websites that
- [Hackers-Arise announces a new program: "Break Down the Digital Iron Curtain" program](https://hackers-arise.com/hackers-arise-announces-a-new-program-break-down-the-digital-iron-curtain-program/) - Welcome back my aspiring cyberwarriors!So many people have written that they would love to participate in Hackers-Arise’ training programs but the incomes in their countries and the exchange rate with the dollar is far too weak. We have a program for you!Beginning today, students from the former Soviet Republic states can now get 60% off
- [Python Basics for Hackers, Part 05: Creating a Web Site Scraper to Find Potential Passwords](https://hackers-arise.com/python-basics-for-hackers-part-5-creating-a-web-site-scraper-to-find-potential-passwords/) - Welcome back, my aspiring cyberwarriors! Creating password lists is a key element of a successful password cracking strategy. In nearly every case, we need to provide a list of potential passwords to the password cracking tool whether it be hashcat, John the Ripper, BurpSuite, cameradar or others (the exception being a true brute force attack
- [Remaining Anonymous: Getting Started with Tails](https://hackers-arise.com/remaining-anonymous-getting-started-with-tails/) - This article is from our Ukraine intern _aircorridor. He lays out how to install one of the most secure Linux OSés, Tails.Getting started with Tails After a full-scale invasion of Ukraine, the amount of Tor bridge users have grown up. End-to-end encrypted messengers like Signal went to the charts. People around the world realize a
- [50% off Subscriber and Subscriber Pro for those in non-industrialized Nations!](https://hackers-arise.com/50-off-subscriber-and-subscriber-pro-for-those-in-non-industrialized-nations/) - We recognize that incomes vary dramatically from one nation to the next and we don’t want to exclude anyone from the best cybersecurity training anywhere!If you live in a non-industrialized nation, you can become a Subscriber or Subscriber Pro at 50% off!If you live in a country other than those listed above, you are eligible.Don’t
- [SCADA Hacking: The Most Important SCADA/ICS Attacks in History](https://hackers-arise.com/scada-hacking-the-most-important-scada-ics-attacks-in-history/) - Welcome back, my aspiring SCADA/ICS cyberwarriors! SCADA and ICS are the most important cybersecurity issues in this decade. Although traditional IT is still saddled with a number of serious issues including ransomware, the threat to SCADA/ICS systems extends far beyond the individual facility and the profit margins of the individual company. The crippling of a
- [Database Hacking: Common SQL Injection Commands](https://hackers-arise.com/database-hacking-common-sql-injection-commands/) - Welcome back, my aspiring cyberwarriors! According to the Open Web Application Security Project (OWASP), command injection is perennially one of the most serious and numerous attacks against web applications. In addition, these attacks usually involve serious financial damage to the companies and other institutions as they are attacks against the database, the repository of so
- [Android Hacking: The libwebp Vulnerability (zero-day/zero-click)](https://hackers-arise.com/android-hacking-the-libwebp-vulnerability-zero-day-zero-click/) - Welcome back, my aspiring cyberwarriors! In recent days, a new and severe vulnerability has been found among the Android ecosystem that puts all Android devices, and even Apple iOS devices, at risk. It enables the attacker to send images via SMS and take control of the device with no user interaction! This vulnerability was first
- [Getting Started with Docker, Part 01: Installing Kali Linux in a docker Container](https://hackers-arise.com/getting-started-with-docker-part-1-installing-kali-linux-in-a-docker-container/) - Welcome back, my aspiring cyberwarriors! Increasingly, we are seeing cybersecurity tools and apps using docker. For instance, in my tutorial on IP camera credential brute forcing, we used docker to contain our app. To help you understand docker, Aircorridor has written a short tutorial here to explain what it is and how it works. What
- [The Ultimate Guide to Troubleshooting your Evil-Droid problems](https://hackers-arise.com/the-ultimate-guide-to-troubleshooting-your-evil-droid-problems/) - If you’ve ever used Evil-Droid, you’ve probably encountered a variety of issues to solve. In order to save you from wandering all over the internet searching for forums and videos to separately address each of these problems, we have created this post so that you can use this powerful tool without any further hassle. We’ll
- [Command & Control Series Part 01 (Installing your own C2 Server on Kali Linux)](https://hackers-arise.com/command-control-series-part-i-installing-your-own-c2-server-on-kali-linux/) - This series of posts is designed to guide you through setting up your own Command and Control (C2) server, specifically using the Havoc C2 Framework. Before diving into the technical aspects, let’s first establish what a C2 server is in the context of Cyber Operations. A Command and Control (C2) server is an integral element
- [The Cyberwar vs Putin: What We Are Doing and What You Can Do to Help](https://hackers-arise.com/the-cyberwar-vs-putin-what-we-are-doing-and-what-you-can-do-to-help/) - This brutal war initiated by Putin and his cronies drags on and on. With each day, Putin and his people brutally attack the Ukrainian people and commit war crimes. Note that I do not say the Russian people. In general, the Russian people are good, honest and hard working people. Unfortunately, their government was hijacked
- [Command & Control Series Part 03 (Installing your Redirector)](https://hackers-arise.com/command-control-series-part-iii-installing-your-redirector/) - In the dynamic landscape of cybersecurity operations, the use of Command and Control (C2) servers stands as a critical component for orchestrating coordinated tasks across compromised systems. However, directly interacting with a C2 can often leave an operator exposed to detection and countermeasures. This is where the strategic implementation of a redirector plays a pivotal
- [Getting Started with PGP for email](https://hackers-arise.com/getting-started-with-pgp-for-email/) - Welcome back, my aspiring cyberwarriors! Pretty Good Privacy or PGP has been around for over 30 years and has proven that it is pretty good! PGP is used in many different environments but most widely in email. The most common use for PGP is to enable people to confidentially send messages and data to each
- [DDoS Attacks: Flooding Russian Sites with Fragmented UDP Packets](https://hackers-arise.com/ddos-attacks-flooding-russian-sites-with-fragmented-udp-packets/) - Welcome back, my aspiring cyber warriors! At the beginning of the cyberwar between Russia and Ukraine, Hackers-Arise, the IT Army of Ukraine and over 17,000 hackers around the world (this is the Russian estimate. we believe it is much higher) set out to make Russia’s digital assets unavailable. In this way, the Russians would not
- [Wireless Hacking with WifiPhisher](https://hackers-arise.com/wireless-hacking-with-wifiphisher/) - In previous tutorials, I have shown how to crack WEP, WPA2, and WPS, but some people have complained that cracking WPA2 takes too long and that not all access points have WPS enabled (even though quite a few do). To help out in these situations, I present to you an almost surefire way to get a
- [Using Metasploit's psexec to Hack](https://hackers-arise.com/using-metasploits-psexec-to-hack/) - It’s been awhile since we did a Metasploit tutorial, and several of you have pleaded with me for more. I couldn’t be happier to oblige, as it’s my favorite tool. For the next several weeks, I’ll intersperse some new guides that’ll help expand your Metasploit skills and keep you abreast of new developments in Metasploit,
- [Ultimate List of Meterpreter Commands](https://hackers-arise.com/ultimate-list-of-meterpreter-commands/) - Several of you have asked me for a complete list of commands available for the meterpreter because there doesn’t seem to be a complete list anywhere on the web. So here it goes! Hack a system and have fun testing out these commands! Step 1: Core Commands​ At its most basic use, meterpreter is a
- [How to Record Anyone's  Conversation](https://hackers-arise.com/how-to-record-anyones-conversation/) - Now that nearly everyone and everyplace has a computer, you can use those remote computers for some good old “cloak and dagger” spying. No longer is spying something that only the CIA, NSA, KGB, and other intelligence agencies can do—you can learn to spy, too.​ In this series, we will explore how we can use
- [How to Hack Web Cams](https://hackers-arise.com/how-to-hack-web-cams/) - Welcome back, my hacker novitiates!​ Like in my last article on remotely installing a keylogger onto somebody’s computer, this guide will continue to display the abilities of Metasploit’s powerful Meterpreter by hacking into the victim’s webcam. This will allow us to control the webcam remotely, capturing snapshots from it. ​ Why exactly would you want
- [Abusing DNS for Reconnaissance](https://hackers-arise.com/abusing-dns-for-reconnaissance/) - Welcome back, my tenderfoot hackers! As you know, DNS, or Domain Name Service, is critical to the operation of the Internet. It provides us with the ability to type in domain names such as www.hackers-arise.com rather than the IP address. This simple service saves us from having to memorize thousands of our favorite website IP
- [Google Hacking for Reconnaissance](https://hackers-arise.com/google-hacking-for-reconnaissance/) - Many who are new to hacking, tend to discount the need to do information gathering and want to rush right into attacking the target system. Those with more experience, like yourselves, understand that the more we know about the target, the better our chances of success. Furthermore, for every minute we spend gathering information about
- [Email Scraping and Maltego](https://hackers-arise.com/email-scraping-and-maltego/) - For more on the email scraping tool, the Harvester, click here. ​ As a pentester/hacker, gathering email addresses from potential victims can have a multiple of uses. When we have email addresses of key personnel, we can launch attacks by email to get people to click on a malicious link or direct them to our
- [nmap for Recon and DoS](https://hackers-arise.com/nmap-for-recon-and-dos/) - Welcome back, my nascent Hackers!​ In previous articles , we looked at a passive way to gather information necessary for a hack. The advantage of using passive recon is that it’s totally undetectable, meaning that the target never knows you’re scouting them and you leave no tracks. The disadvantage, of course, is that it’s limited
- [Network Basics for Hackers! Networks--How they work, and how they can be broken](https://hackers-arise.com/network-basics-for-hackers-networks-how-they-work-and-how-they-can-be-broken-2/) - Did you love Linux Basics for Hackers? Then you will love this book!Once again, Master OTW–in his inimical style of making the complex appear simple–now addresses computer network and their protocols. There has never been a book quite like this! Master OTW breaks down each of the many network protocols showing you how they work and
- [Creating a Fake SMB Server with Metasploit](https://hackers-arise.com/creating-a-fake-smb-server-with-metasploit/) - In previous tutorials, we learned how to steal system tokens that we could use to access resources, how to use hashdump to pull password hashes from a local system, and how to grab password hashes from a local system and crack them. In each of these cases, the password hashes were the passwords of the
- [Reverse Engineering Malware, Part 5: OllyDbg Basics](https://hackers-arise.com/reverse-engineering-malware-part-5-ollydbg-basics-2/) - In this series, we are examining how to reverse engineer malware to understand how it works and possibly re-purposing it. Hackers and espionage agencies such as the CIA and NSA, regularly re-purpose malware for other purpose. Previously, we looked at the basics of IDA Pro, the most widely used disassembler in our industry. In this
- [Hack to Spy: Building a Raspberry Pi Spy, Part 02](https://hackers-arise.com/hack-to-spy-building-a-raspberry-pi-spy-part-2/) - Welcome back, my rookie hackers! In this series, we are building a Raspberry Pi that we can use to spy. In part 1, we set the operating system, installed the camera and then established a SSH connection to Spy Pi. Here, we will configure and test the camera so that can then use to spy
- [AutoSploit: The Powerful Marriage of Shodan and Metasploit!](https://hackers-arise.com/autosploit-the-powerful-marriage-of-shodan-and-metasploit/) - Welcome back my rookie hackers! Every so often, I run across a new hacking tool that really gets me excited. Autosploit is one of those! Autosploit combines the power of two of my favorite tools, Shodan and Metasploit! AutoSploit uses Shodan to find specific targets based upon their banners and then Metasploit to automate the use
- [Evading AV with Veil-Evasion](https://hackers-arise.com/evading-av-with-veil-evasion/) - One of the most important issues any hacker must address is how to get past security devices and remain undetected. These can include antivirus software, intrusion detection systems, firewalls, web application firewalls, and numerous others. As nearly all of these devices employ a signature-based detection scheme where they maintain a database of known exploits and
- [Working with Metasploit's msfvenom](https://hackers-arise.com/working-with-metasploits-msfvenom/) - Eluding and evading antivirus software and intrusion detection systems is one of the most critical tasks of the hacker. As soon as a new exploit is developed and discovered, the AV and IDS developers build a signature for the attack, which is then likely to be detected and prevented. One obvious way around this problem
- [Metasploit Resource File  Scripts](https://hackers-arise.com/metasploit-resource-file-scripts/) - In this series, I have been trying to familiarize you with the many features of the world’s best framework for exploitation, hacking, and pentesting, Metasploit. There are so many features, and techniques for using those features, that few pentesters/hackers are aware of all of them. Many times, when doing a pentest/hack, we need to run
- [Wi-Fi Hacking, Part 17: Wi-Fi Hacking with Bettercap](https://hackers-arise.com/wi-fi-hacking-part-17-wi-fi-hacking-with-bettercap/) - Welcome back my aspiring cyberwarriors! In this series on Wi-Fi (802.11) hacking, we have examined a multitude of approaches to Wi-Fi hacking including; Wireless Hacking Strategies Getting Started with aircrack-ng Hacking WPA2-PSK Continuous DoSing of a Wireless AP Hacking WPS with Reaver Hacking WPA2-PSK without Password Cracking Evading Wi-Fi Authentication Evil Twin Attack to Spy
- [Port Scanning and Recon with nmap, Part 02: The nmap scripts (nse)](https://hackers-arise.com/port-scanning-and-recon-with-nmap-part-2-the-nmap-scripts-nse/) - Welcome back, my aspiring cyber warriors! In my earlier post here at Hackers-Arise, I introduced you to an essential tool in the pentesters/hackers toolbox. Every pentester/hacker must be proficient in the use of nmap. First introduced by Fyodor in 1998 in Phrack magazine, nmap has been a staple of every hacker/pentester’s toolbox for over 20
- [Open Source Intelligence (OSINT): Finding Breached Email Addresses , Passwords and Other Credentials](https://hackers-arise.com/open-source-intelligence-osint-finding-breached-email-addresses-passwords-and-other-credentials/) - Welcome back, my aspiring OSINT Investigators! In the course of OSINT or forensic investigations, there are often times when you will need an email password of the subject of your investigation. In a security assessment or pentest, you may want to check to see whether you can obtain the passwords of users in the target
- [Python Basics for Hackers, Part 01: Getting Started](https://hackers-arise.com/python-scripting-for-hackers-part-1-getting-started/) - Welcome back, my hacker novitiates! I began this series on scripting a while back to teach all aspiring hackers how to write some basic scripts for hacking and reconnaissance. Without developing some basic scripting skills, the aspiring hacker will be condemned to the realm of the script kiddie. This means that you will be limited
- [What is a White Hat Hacker?](https://hackers-arise.com/what-is-a-white-hat-hacker/) - Welcome back, my cyberwarriors!Hackers-Arise is a white-hat hacker training site. This means that we use our skills for good. Obviously, this means things like penetration testing and cyber-security. That is the textbook definition of a white hat hacker and one you will see on many hacking/cybersecurity certification exams. Rather than be confined by the textbook
- [Software Defined Radio (SDR) for Hackers: Radio Frequency Attack Methods](https://hackers-arise.com/software-defined-radio-sdr-for-hackers-radio-frequency-attack-methods/) - Welcome back, my aspiring radio hackers! With the advent of inexpensive radio devices such as the RTL-SDR, HackRF, LimeSDR and bladeRF, the possibility of hacking radio frequency (RF) communication and control devices has been blown wide open to anyone in the cybersecurity/infosec field. Although not commonly included in penetration tests, radio hacks should be considered
- [SCADA Hacking: Sending Random Inputs into the Russian Industrial Systems](https://hackers-arise.com/scada-hacking-sending-random-inputs-into-the-russian-industrial-systems/) - Welcome back, my aspiring cyberwarriors! SCADA hacking and security is different from traditional hacking in numerous ways. For a review of how SCADA hacking is different, check out my article here. One of the key ways that SCADA Hacking and Security is different is that the security professional is protecting the process and not necessarily
- [Hackers-Arise Announces a New Training Program: Digital Forensics and Incident Response (DFIR)!](https://hackers-arise.com/hackers-arise-announces-a-new-training-program-digital-forensics-and-incident-response-dfir/) - Many of our aspiring cyberwarriors have been asking for a separate digital forensics and incident response (DFIR) training program and we have responded!This new program will use many of the existing courses on our Subscriber and Subscriber Pro platform and add additional, new courses specifically for digital forensics and incident response. We recognize that not
- [Bluetooth Hacking: Injecting Commands into a Bluetooth Device with BlueDucky](https://hackers-arise.com/bluetooth-hacking-injecting-commands-into-a-bluetooth-device-with-blueducky/) - Welcome back, my aspiring cyberwarriors! Bluetooth is a nearly ubiquitous protocol used to communicate between devices in close proximity or a piconet, such as speakers, headphones, and cellphones. If an attacker can exploit Bluetooth, it may be able to take control of or eavesdrop on any of these devices. There are numerous classes of Bluetooth
- [Ukraine/Russia War: Mobile Phones and Networks Weaponized to Target on Both Sides](https://hackers-arise.com/ukraine-russia-war-mobile-phones-and-networks-weaponized-to-target-on-both-sides/) - Welcome back, my cyberwarriors! In our digital age, we are blessed with many digital wonders. Among these is the mobile phone. The mobile phone enables us to call nearly any body from anywhere, take photos, listen to music, text and email, and other myriad pleasures and convenience. At the same time, this mobile phone can
- [Command & Control Series Part 02 (Operating your own C2 Server)](https://hackers-arise.com/command-control-series-part-ii-operating-your-own-c2-server/) - Introduction. We already know what a C2, or Command and Control server is and, if you are not familiar you should take a look at our first post of this series. In the first post of this series, we walked through setting up and configuring one. Now, it’s time to test its functionality and get
- [Hacking Active Directory](https://hackers-arise.com/hacking-active-directory/) - Agent, your mission—code-named “Digital Lockpick”—is set within the cyber walls of Active Directory, the nexus of network security. Your mission, should you choose to accept it: to exploit the Server Message Block (SMB) protocol, a seemingly innocuous yet vital pathway through which information travels. This operation hinges on mastering the SMB Relay Attack, a tactic
- [Anti-Forensics: Using Veracrypt to Hide Your Most Sensitive Data](https://hackers-arise.com/anti-forensics-using-veracrypt-to-hide-your-most-sensitive-data/) - Welcome back, my aspiring cyberwarriors! In our industry, we often carry around some very valuable and sensitive data. This might include a bug bounty technique, a zero-day, future plans in our cyberwar, or simply confidential information on our family and friends that they have shared with us. It is critical that this information not fall
- [Hackers-Arise Offers the Best Cybersecurity Training on the Planet! Listen to What our Students are Saying!](https://hackers-arise.com/hackers-arise-offers-the-best-cybersecurity-training-on-the-planet-listen-to-what-our-students-are-saying/) - Hackers-Arise Offers the Best Cybersecurity Training on the Planet! We attract the best students from around the world and make them the best cyberwarriors on the planet! Don’t take our word for it, look what are students are saying! These are all unsolicited testimonials from real people!To participate in this state-of-the-art training, we offer multiple
- [Hacking the Cloud: Getting Started](https://hackers-arise.com/hacking-the-cloud-getting-started/) - Cloud technologies are great for making it easy to set up infrastructure for apps and services. Increasingly, companies and independent developers are moving their projects to AWS, Azure, or others. In this article, we’ll get familiar with the basics of cloud technologies, find out what services we can use, and analyze how hackers can gain
- [Open Source Intelligence (OSINT): Using OSINT in Cyberwar!](https://hackers-arise.com/open-source-intelligence-osint-using-osint-in-cyberwar/) - Welcome back, aspiring cyberwarriors! As you know, people leave digital footprints across the internet that can be discovered through careful searching. While someone might think their online presence is minimal, a skilled investigator can often compile surprising amounts of information using nothing but open-source intelligence techniques (OSINT) and a standard web browser. Let's dive into
- [Vulnerability Scanning with Nuclei: The High-Speed, Customizable Solution for Advanced Vulnerability Scanning](https://hackers-arise.com/vulnerability-scanning-with-nuclei-the-high-speed-customizable-solution-for-advanced-vulnerability-scanning/) - Welcome back, my aspiring cyberwarriors! Nuclei is an advanced, open-source vulnerability scanner that has gained significant popularity among cybersecurity professionals, penetration testers and developers. Known for its exceptional speed, high degree of customizability, and accuracy in identifying security vulnerabilities, misconfigurations, and potential exploits across a wide range of digital assets and networks. This article
- [Be Careful Out There! The Legal Issues of Hacking](https://hackers-arise.com/be-careful-out-there-the-legal-issues-of-hacking-2/) - So many of you have asked me about what is legal and illegal in hacking/pentesting that I decided it was time to address it directly. In our discipline, we may WANT to ignore the legal consequences until they slap us upside the head, but that’s not a very prudent strategy. To help all my apprentice
- [NEW No-Click Critical Vulnerability in Microsoft Windows: CVE-2025-21298](https://hackers-arise.com/new-no-click-critical-vulnerability-in-microsoft-windows-cve-2025-21298/) - Welcome back, my aspiring cyberwarriors! Over the years, Microsoft Windows operating system, the world’s most widely used OS, has been riddled with security vulnerabilities. As the years have gone by and Microsoft has become more security conscience, the number of critical vulnerabilities has waned, but every so often we find another that make the
- [Bluetooth Hacking: Using Bettercap for BLE Reconnaissance and Attacks!](https://hackers-arise.com/bluetooth-hacking-using-bettercap-for-ble-reconnaissance-and-attacks/) - Welcome back, my aspiring cyberwarriors! Bluetooth is the most underappreciated attack vector into all your devices. Nearly all our devices have a bluetooth adapter and connection that is vulnerable to attack. This includes our cellphones, laptops, Smart Home devices, ICS devices and our ubiquitous bluetooth speakers and headsets. If the attacker can gain access
- [Cryptography Basics for Hackers, Part 4: Building a Simple Encryption Algorithm in Python](https://hackers-arise.com/cryptography-basics-for-hackers-part-4-building-a-simple-encryption-algorithm-in-python-2/) - Welcome back, my aspiring cyberwarriors! Cryptography is one of foundational technologies of cybersecurity. It helps to keep our information safe, secure, and confidential. Without cryptography, anyone could read our messages or our stored data. In our previous tutorial in Cryptography Basics, I described one of the oldest forms of cryptography, The Caesar Cipher.
- [Hacking the Cloud: Privilege Escalation in AWS](https://hackers-arise.com/hacking-the-cloud-privilege-escalation-in-aws/) - In the previous tutorial, we learned about cloud technologies and how to conduct data gathering. It’s not always the case that the user whose access you managed to obtain will be an administrator, so it’s worth learning how to perform privilege escalation in an IAM environment. It’s recommended to start from the policies: our goal
- [Hackers-Arise Announces a New Training Program: Digital Forensics and Incident Response (DFIR)!](https://hackers-arise.com/hackers-arise-announces-a-new-training-program-digital-forensics-and-incident-response-dfir-2/) - Many of our aspiring cyberwarriors have been asking for a separate digital forensics and incident response (DFIR) training program and we have responded!This new program will use many of the existing courses on our Subscriber and Subscriber Pro platform and add additional, new courses specifically for digital forensics and incident response. We recognize that not
- [Will Artificial Intelligence make Cybersecurity Engineers Obsolete?](https://hackers-arise.com/will-artificial-intelligence-make-cybersecurity-engineers-obsolete/) - Welcome back, my aspiring cyberwarriors!Probably the most common question I have received in recent months is, “Will AI Make Cybersecurity Engineers Obsolete?”This leads to the subsequent and inevitable question, “Am I wasting my time training to become a cyberwarrior?”As you know, we are on the brink of an artificial intelligence revolution! AI will likely change
- [Cyberwar Mission Part 01: Hack the Adversary's 2FA Protected Account](https://hackers-arise.com/cyberwar-mission-hack-the-adversarys-account/) - To prevent password stealing and password hacking, many applications have adopted 2FA authentication. 2FA or 2-factor authentication, requires that the user authenticate not only using a username name and password (1 factor authentication but als a second authentication method such as send a one time password (2-factor authentication) to an authenticated device such as a
- [Cyberwar Mission: Hack the Adversary's 2FA Protected Account](https://hackers-arise.com/cyberwar-mission-hack-the-adversarys-account-2/) - To prevent password stealing and password hacking, many applications have adopted 2FA authentication. 2FA or 2-factor authentication, requires that the user authenticate not only using a username name and password (1 factor authentication but als a second authentication method such as send a one time password (2-factor authentication) to an authenticated device such as a
- [Internet of Things (IoT) Hacking, October 8-10](https://hackers-arise.com/internet-of-things-iot-hacking-october-8-10/) - The Internet of Things is growing exponentially! These devices represent an incredible cybersecurity threat to every organization and nation. When these devices are compromised and used for singular purpose, these can take down an company or country.These IoT devices can be a potent weapon to any nation for cyber warfare or cyber criminals to extort
- [Cyberwar Mission Part  02: Reconnaissance in the Adversary's Docker Images](https://hackers-arise.com/cyberwar-mission-2-reconnaissance-in-the-adversarys-docker-images/) - Welcome back, my aspiring cyberwarriors! In this series, Aircorridor, our man in Ukraine, takes you along on his real-life cyberwar missions in the war against the brutal Russian war machine. Come along and enjoy and learn as he uses his budding cyberwar skills to help save his nation from Putin and his kleptocrat cronies! The
- [Bypassing Next Generation Firewalls with fragtunnel](https://hackers-arise.com/bypassing-next-generation-firewalls-with-fragtunnel/) - Welcome back, my aspiring cyberwarriors! A firewall is a critical component of network security that acts as a barrier between trusted internal networks and untrusted external networks, such as the Internet. It monitors and controls incoming and outgoing network traffic based on predetermined security rules. Firewalls can be implemented as hardware devices, software
- [Hacker Legend Profiles: The Very Strange Case of Jeremy Hammond](https://hackers-arise.com/jeremy-hammond-one-of-the-worlds-most-famous-hackers/) - Welcome back, my aspiring cyberwarriors! In this new series, I want to profile some the most important hackers in history. I’m hoping that you can learn from their experience and gain a broader perspective on your chosen field of study. In this first profile, let’s look at the strange case of Jeremy Hammond. Jeremy Hammond
- [Satellite Hacking: Hacking the Iridium Satellite System](https://hackers-arise.com/satellite-hacking-hacking-the-iridium-satellite-system/) - Welcome back, my aspiring cyberwarriors! In our modern digital era, satellites have been used for numerous essential services, such as: GPS Internet Broadband Connectivity Satellite Phone Emergency Response and Disaster Relief Broadcast TV and Radio Weather Data Scientific Data Collection Remote Sensing and Imaging and many more. If the security of these communications are compromised
- [Cyberwar Mission Part 03: Using QRCodes in Phishing and Social Media Attacks](https://hackers-arise.com/cyberwar-mission-3-turning-your-enemies-strength-against-them/) - Welcome back, aspiring cyberwarriors. In this article, one of our fighters in Ukraine (Sierra) demonstrates how they use social engineering to turn Russian tactics against them. In each new article here, we delve into the cyberwarrior wisdom of Master OTW and its application in cyber warfare. In this edition, I will discuss Master
- [Using the Brand New IPv6 Exploit to DoS a Windows System](https://hackers-arise.com/using-the-brand-new-ipv6-exploit-to-dos-a-windows-system/) - Welcome back, my aspiring cyberwarriors! Recently, security researchers discovered a critical vulnerability in the Windows IPv6 packet processing system, which was subsequently assigned the identifier CVE-2024-38063. This vulnerability can lead to a denial of service, as well as remote code execution (RCE) via specially crafted IPv6 packets. Unlike many vulnerabilities that require user interaction or
- [Linux Firewalls: The Modern NFTable Firewall](https://hackers-arise.com/linux-firewalls-the-modern-nftable-firewall/) - Welcome back, my aspiring cyberwarriors! Firewalls play a key role in cybersecurity as they can filter out unwanted and malicious traffic from your network. Although firewalls will not make your network impenetrable, they will make it much more difficult for attackers to find and access your network. Many companies sell excellent products, some costing tens
- [Cyberwar Mission #3: Using QRCodes in Phishing and Social Media Attacks](https://hackers-arise.com/cyberwar-mission-3-turning-your-enemies-strength-against-them-2/) - Welcome back, aspiring cyberwarriors. In this article, one of our fighters in Ukraine (Sierra) demonstrates how they use social engineering to turn Russian tactics against them. In each new article here, we delve into the cyberwarrior wisdom of Master OTW and its application in cyber warfare. In this edition, I will discuss Master OTW’s strategy of:
- [Data Science Analytics for Cybersecurity, December 17-19](https://hackers-arise.com/data-science-analytics-for-cybersecurity-december-17-19/) - Welcome back, my cyberwarriors!Right now, we are on the advent of the Age of Artificial Intelligence!You will either embrace this new technology or be left behind!AI is changing our world and profession rapidly. To give you a leg up on this new technology as it applies to cybersecurity, we are offering new class, Data Science
- [The SQLite Database: The Ubiquitous Database that Few Understand](https://hackers-arise.com/the-sqlite-database-the-ubiquitous-database-that-few-understand/) - Welcome back, my aspiring cyberwarriors! While most IT and cybersecurity professionals are familiar with the big database management systems such as Oracle, DB2, MS SQL Server, MySQL, and postgresql, few understand that most widely used database in the world, sqlite! That;s likely because it quietly being used in everything from your phone to your browser
- [Getting Started with Physical Security](https://hackers-arise.com/getting-started-with-physical-security/) - Welcome back, my aspiring cyberwarriors! This is my latest installment of our physical security series, which is a key element of any comprehensive security strategy. In this article you’ll learn the techniques used to protect personnel, hardware, and data from damage and loss. Despite the focus on digital threats, the importance of proper physical security
- [Linux Basics for Hackers: The Linux Logging System](https://hackers-arise.com/linux-basics-for-hackers-the-linux-logging-system/) - Welcome back, my aspiring cyberwarriors! One of the most overlooked areas on the Linux operating system is the logging system. If you are a system administrator or security engineer, this is where all the information you will need resides to determine the problems with your operating system, including who, what and why of your intrusion.
- [Hacker Profiles: The Tragic Case of Aaron Swartz](https://hackers-arise.com/hacker-profiles-the-tragic-case-of-aaron-swartz/) - Welcome back, my aspiring cyberwarriors! In this series, we are examining the cases of some of the world’s most famous (infamous?) hackers. I believe that the more you know about these cases, the better you can protect yourself from similar outcomes. In all of these cases we will detail, the outcomes were legal and incarceration
- [Bluetooth Hacking, January 28-30](https://hackers-arise.com/bluetooth-hacking-january-14-16/) - Bluetooth Hacking is one of the least understood and under-appreciated threats to your cellphone, desktop, SCADA, Smart Home and IoT devices! For years, cybersecurity researchers considered Bluetooth safe and secure, but in recent weeks and months, numerous frightening and severe vulnerabilities have been found within this protocol. These exploits include sending arbitrary commands into your phone
- [What is Data Compression and What Role Did it Play in the libwebp Cellphone Attack?](https://hackers-arise.com/what-is-data-compression-and-what-role-did-it-play-in-the-libwebp-cellphone-attack/) - Welcome back, my aspiring cyberwarriors! Data compression makes the world go round! Well, almost. Without data compression our digital world would slow down considerably and even reading this article would be difficult and cumbersome. Nearly everything that is transmitted over the web is compressed to reduce latency and free up bandwidth. Compression is one of
- [SCADA/ICS Hacking in Cyber Warfare: Hacking Gas Stations in Russia](https://hackers-arise.com/scada-ics-hacking-in-cyber-warfare-hacking-gas-stations-in-russia/) - Welcome back, aspiring cyberwarriors. As the war rages on, Russia’s gas exports have taken on heightened significance. This resource is literally and figuratively fueling Putin’s war efforts, which only underscores the need for attacks on this sector’s infrastructure. In this article, in collaboration with a student from Cyber Cossacks School – Citadel–we’ll show
- [Cyber Threat Intelligence: Malware Bazaar on the Frontlines of Threat Intelligence](https://hackers-arise.com/cyber-threat-intelligence-malware-bazaar-on-the-frontlines-of-threat-intelligence/) - Welcome back, aspiring cyberwarriors! In the complex realm of cybersecurity, professionals face a continuously evolving landscape of digital threats. To address this challenge, MalwareBazaar was introduced as a collaborative defense platform, revolutionizing the way cybersecurity experts analyze and combat malicious software. Conceived by abuse.ch, a distinguished Swiss cybersecurity research organization, MalwareBazaar collects known
- [Data Analytics for Cybersecurity, Part 01: Getting Started with R Programing Language for Cybersecurity Analytics](https://hackers-arise.com/data-analytics-for-cybersecurity-part-1-getting-started-with-r-programing-language-for-cybersecurity-analytics/) - Welcome back, my aspiring cyberwarriors! As our digital world progresses toward a circumstance where data analytics and artificial intelligence become key components of any cybersecurity strategy, it is becoming increasingly critical that you understand these techniques to remain relevant and employed in the most exciting and well-paying field in IT. Towards that end, we
- [Cryptography Basics for Hackers, Part 04: Building a Simple Encryption Algorithm in Python](https://hackers-arise.com/cryptography-basics-for-hackers-part-4-building-a-simple-encryption-algorithm-in-python/) - Welcome back, my aspiring cyberwarriors! Cryptography is one of foundational technologies of cybersecurity. It helps to keep our information safe, secure, and confidential. Without cryptography, anyone could read our messages or our stored data. In our previous tutorial in Cryptography Basics, I described one of the oldest forms of cryptography, The Caesar Cipher.
- [Reverse Engineering Malware: Cactus Ransomware, Basic Static Analysis](https://hackers-arise.com/reverse-engineering-malware-cactus-ransomware-basic-static-analysis/) - Ransomware is always evolving, and Cactus is no exception. When I came across this sample, I knew it was worth a closer look. It’s built to obfuscate, encrypt, and evade, but like any malware, it leaves behind clues. In this series, I’ll walk you through the process of analyzing Cactus ransomware, starting with static analysis.
- [Data Analytics for Cybersecurity, Part 1: Getting Started with R Programing Language for Cybersecurity Analytics](https://hackers-arise.com/data-analytics-for-cybersecurity-part-1-getting-started-with-r-programing-language-for-cybersecurity-analytics-2/) - Welcome back, my aspiring cyberwarriors! As our digital world progresses toward a circumstance where data analytics and artificial intelligence become key components of any cybersecurity strategy, it is becoming increasingly critical that you understand these techniques to remain relevant and employed in the most exciting and well-paying field in IT. Towards that end, we
- [Hackers-Arise Announces a New Training Program: The Path to Cyberwarrior!](https://hackers-arise.com/hackers-arise-announces-a-new-training-program-the-path-to-cyberwarrior/) - In our continuing efforts to offer the best cybersecurity training on the planet, we are announcing new training program in 2025! Many of you have asked for a program where you can pay monthly and take advantage of advanced courses in the Subscriber Pro training package such as; IoT Hacking, SDR for Hackers, Bluetooth Hacking, SCADA/ICS
- [Chinese State-Sponsored Hackers Inside the US Mobile Telecom System: Mobile Telecom Companies Vulnerable to SS7 Vulnerability](https://hackers-arise.com/chinese-state-sponsored-hackers-inside-the-us-mobile-telecom-system-mobile-telecom-companies-vulnerable-to-ss7-vulnerability/) - Welcome back, my rookie cyberwarriors! In recent weeks, a series of sophisticated cyber attacks has once again exposed critical vulnerabilities in the Signaling System 7 (SS7) protocol, a fundamental component of global telecommunications infrastructure that manages call routing, SMS messaging, and cellular network interoperability. These security breaches, detected across multiple major U.S. telecommunications carriers
- [X's Artificial Intelligence, Grok, Got it Right!](https://hackers-arise.com/xs-artificial-intelligence-grok-got-it-right/) - Welcome back, my aspiring cyberwarriors! We are in the age of artificial intelligence! It will change our daily lives and work lives in dramatic ways that are still hard to predict. We can say for sure that if you don’t embrace artificial intelligence, you career in cybersecurity will be short-lived. At the very least, AI makes
- [Mobile Telecom Networks for Hackers, Getting Started: Mobile Network Basics](https://hackers-arise.com/mobile-telecom-networks-for-hackers-getting-started-mobile-network-basics/) - Welcome back, my aspiring cyberwarriors! The world is rapidly becoming dominated by mobile cellular networks. Not long ago, telecom services were tethered to a cable to each and every home. While this worked well for decades, the advent of cellular technologies has enable us to cut the cord thereby enabling billions of people who
- [Mobile Networks Basics for Hackers, Part 02](https://hackers-arise.com/mobile-networks-basics-for-hackers-part-2/) - Welcome back, my aspiring cyberwarriors! In our modern digital era, mobile or cellular networks are the dominant mode of communication. People use mobile networks to talk, text, and data communication. Cellular networks have become an essential means of communication for people around the world. About 80% of the terrestrial world is accessible to a
- [Is Hacking IP Cameras Just for Voyeurs or Does it Have Strategic and National Security Implications?](https://hackers-arise.com/is-hacking-ip-cameras-just-for-voyeurs-or-does-it-have-strategic-and-national-security-implications/) - Welcome back, my aspiring cyberwarriors! Hacking IP cameras has always had a bit of voyeuristic appeal to the aspiring cyberwarrior. Many want to be able to watch people (girlfriends, spouses, and colleagues) without being detected. This is a more basic application of this skill. The higher-level application of these skills concerns the strategic interests of
- [Can Artificial Intelligence Be Used to Track Your Location?](https://hackers-arise.com/can-artificial-intelligence-be-used-to-track-your-location/) - Welcome back, my aspiring cyberwarriors! We all know that when pictures are taken, they contain Exif data. This EXIF data includes such things as the camera used, the date the aperature used, and the GPS data. In the early years of social media, all this data was left into the photos that you uploaded to
- [Mobile Networks Basics for Hackers, Part 2](https://hackers-arise.com/mobile-networks-basics-for-hackers-part-2-2/) - Welcome back, my aspiring cyberwarriors! In our modern digital era, mobile or cellular networks are the dominant mode of communication. People use mobile networks to talk, text, and data communication. Cellular networks have become an essential means of communication for people around the world. About 80% of the terrestrial world is accessible to a
- [OSINT: Automatic Collection Of All Available Information With Intelligence X](https://hackers-arise.com/osint-intelligencex/) - Learn how to use IntelligenceX, a powerful OSINT tool for uncovering leaked data, historical web snapshots, and dark web information. This guide walks you through account setup, search techniques, and practical examples to strengthen your cybersecurity investigations.
- [Software Defined Radio Basics (Signals Intelligence) for Hackers, June 10-12](https://hackers-arise.com/software-defined-radio-basics-signals-intelligence-for-hackers-june-10-12/) - Welcome my aspiring open-source signals intelligence officers! A few years back there was revolution in signals intelligence similar to the revolution of the first PC, the Internet, and the smartphone. That revolution turned your computer into a powerful signals intelligence tool that used to cost hundreds of thousands of dollars. Those devices were only in the
- [OSINT: Tracking US Spy Planes Surveilling the Mexican Cartels](https://hackers-arise.com/osint-tracking-us-spy-planes-surveilling-the-mexican-cartels/) - Welcome back, aspiring cyberwarriors! OSINT has applications in so many fields including pentesting, investigations, cybersecurity, threat intelligence, missing persons, and criminal investigations. OSINT can also help to anticipate future conflicts on the geopolitical stage. Just like the Ukraine/Russia War, we are now seeing indications–via OSINT– that a new storm may be brewing! The
- [Malware Analysis: Process Injection in the REMCOS RAT](https://hackers-arise.com/malware-analysis-process-injection-in-the-remcos-rat/) - Process injection is one of those stealthy techniques malware loves to use to stay under the radar. By injecting malicious code into legitimate processes, attackers can hide in plain sight, making detection a real challenge. In this post, I’ll walk you through an actual malware sample that uses process injection, breaking down how it works.
- [Hackers-Arise Announces a New Program! SDR (Signals Intelligence) for Hackers!](https://hackers-arise.com/hackers-arise-announces-a-new-program-sdr-signals-intelligence-for-hackers/) - Hackers-Arise is so excited to offer this new program and career path! Software Defined Radio and specifically, Signals Intelligence, is the cutting edge of cybersecurity! So many have asked for a specific career path in this field that we responded! If you a newcomer to cybersecurity or seasoned professional, you will find this program an excellent
- [It's Time to Elevate Your Cybersecurity Game! Earn the Crown Jewel of Cybersecurity Certifications!](https://hackers-arise.com/its-time-to-elevate-your-cybersecurity-game-earn-the-crown-jewel-of-cybersecurity-certifications/) - The CISSP is widely considered to be the premier cybersecurity certifications. The average salary in the US is almost $150,000 and I’ll bet your boss has one. If not, their boss is certified with the CISSP. This is your ticket to a rewarding, high-paying career in cybersecurity. Now, you can go to the head of the
- [Open-Source Intelligence or OSINT: You Can’t Hide on Telegram!](https://hackers-arise.com/open-source-intelligence-or-osint-you-cant-hide-on-telegram/) - Welcome back, aspiring cyberwarriors! A lot of people believe that the widely-used social media site, Telegram, offers them anonymity to post confidential information. In this post, we will show you how you can find key information and de-anonymize users on Telegram. Role in the Ukraine/Russia War As one of the few social media platforms still
- [Open Source Intelligence (OSINT): The Versatile Email Address Search Tool](https://hackers-arise.com/open-source-intelligence-osint-the-versatile-email-address-search-tool/) - Welcome back, aspiring cyberwarriors and OSINT investigators! In our digital age, email addresses have become the keys to our online identities. They’re used for everything from social media accounts to financial services, making them prime targets for hackers. As OSINT investigators, pentesters, and hackers, we often need to determine if a target’s email address has
- [Network Basics for Hackers, Part 01: IP Addresses, Ports, NAT, and DHCP](https://hackers-arise.com/networking-basics-for-hackers-part-1/) - With our dramatic growth over the last year, we have added many new aspiring hackers who are still lacking in the basics of network and networking. In addition, with the new White Hat certifications, the exam requires some basic networking skills and knowledge to pass. As a result, I decided to offer my own take
- [Linux Basics for Hackers, Part 01](https://hackers-arise.com/linux-basics-for-aspiring-hackers-part-1/) - Many aspiring hackers are unfamiliar with Linux having learned computer basics in a Windows or Mac environment. Sometimes this unfamiliarity is the single most important obstacle to mastering the essential skills to become a professional white hat hacker. For many good reasons, Linux is THE only hacking platform. That having been said, to become a
- [Cybersecurity Through the Eyes of the Adversary - Free Webinar](https://hackers-arise.com/cybersecurity-through-the-eyes-of-the-adversary-free-webinar/) - They do not begin with malware. They begin with you. Before a single exploit is launched, before a payload is dropped, adversaries are already inside your environment in a different way. They are mapping identity. They are tracing privilege. They are studying how trust flows between users, service accounts, cloud roles, and operational systems. Identity
- [InfoSec: Getting Started with Identity and Access Management (IAM)](https://hackers-arise.com/infosec-getting-started-with-identity-and-access-management-iam/) - In this article, we'll explore the key concepts of Identity and Access Management (IAM), including its core components and common vulnerabilities that can threaten security
- [CVE-2026-25253: How Malicious Links Can Steal Authentication Tokens and Compromise OpenClaw AI Systems](https://hackers-arise.com/cve-2026-25253-how-malicious-links-can-steal-authentication-tokens-and-compromise-openclaw-ai-systems/) - This article examines the CVE-2026-25253 vulnerability in the OpenClaw AI assistant, highlighting how it enables attackers to capture authentication tokens through malicious web pages and compromised WebSocket connections
- [Linux: Zapper - How Hackers Hide Malicious Process](https://hackers-arise.com/linux-zapper-how-hackers-hide-malicious-process/) - Learn the various ways attackers use Zapper to hide their processes
- [Long Range Acoustic Device (LRAD), Part 2: Tactics and Countermeasures](https://hackers-arise.com/long-range-acoustic-device-lrad-part-2-tactics-and-countermeasures/) - Learn what high-intensity directional sound does to the human body, and which practical countermeasures reduce harm when these systems are deployed.
- [Long Range Acoustic Device (LRAD), Part 1: From Navy Origins to Venezuela's 2026 Raid](https://hackers-arise.com/long-range-acoustic-device-lrad-part-1-from-navy-origins-to-venezuelas-2026-raid/) - From its naval origins to its use in Venezuela and in crowd control worldwide, see how focused sound became a modern tool of power.
- [Linux: Using Advanced Linux Commands in Recon](https://hackers-arise.com/linux-using-advanced-linux-commands-in-recon/) - Learn how to use advanced Linux commands to parse pentest reconnaissance data.
- [Drone Hacking: Build Your Own Hacking Drone, Part 4](https://hackers-arise.com/drone-hacking-build-your-own-hacking-drone-part-4/) - In the final part we show how to capture credentials, hashes, and network intelligence by targeting devices and protocols
- [Off-Grid Communications, Part 5: Choosing the Right Hardware for Your Meshtastic Network](https://hackers-arise.com/off-grid-communications-part-5-choosing-the-right-hardware-for-your-meshtastic-network/) - In this article, we will help you choose the right hardware for Meshtastic by looking at the major device types, comparing different platforms, and matching hardware to your specific needs
- [Off-Grid Communications, Part 4: Securing Your Meshtastic Communications](https://hackers-arise.com/off-grid-communications-part-4-securing-your-meshtastic-communications/) - In this article, we will explore the encryption options that Meshtastic provides for group communication and direct messages
- [Digital Forensics: Tracing an HTA-Based Compromise](https://hackers-arise.com/digital-forensics-tracing-an-hta-based-compromise/) - Investigating a staged HTA infection, hidden persistence, and remote access. Everyday Windows artifacts and legitimate apps can reveal the full attack path when you know where to look.
- [Digital Forensics: Registry Analysis for Beginners, Part 2 – System Information and Basic Persistence](https://hackers-arise.com/digital-forensics-registry-analysis-for-beginners-part-2-system-information-and-basic-persistence/) - The most important Windows Registry locations used to quickly understand a system’s identity, configuration, networks, and persistence mechanisms.
- [Artificial Intelligence in Cybersecurity, Part 9: How to Test MCP Servers for Security Vulnerabilities](https://hackers-arise.com/artificial-intelligence-in-cybersecurity-part-9-how-to-test-mcp-servers-for-security-vulnerabilities/) - As AI applications increasingly rely on Model Context Protocol (MCP) servers, it's important to address the security risks they pose. In this article, we explore Mcpwn, a specialized security scanner designed to identify vulnerabilities in MCP servers
- [Off-Grid Communications, Part 3: Extending Meshtastic Communication Range with MQTT Bridges](https://hackers-arise.com/off-grid-communications-part-3-extending-meshtastic-communication-range-with-mqtt-bridges/) - In this article, we will configure a Lilygo T-Echo device to use a public Meshtastic MQTT server and explore how to communicate with it over a long distance from your local mesh network.
- [Off-Grid Communications, Part 2: Getting Started with Meshtastic on LILYGO T-Echo Device](https://hackers-arise.com/off-grid-communications-part-2-getting-started-with-meshtastic-on-lilygo-t-echo-device/) - In this article, we will configure Meshtastic firmware on the Lilygo T-Echo device and connect it to the mesh network.
- [Drone Hacking: Build Your Own Hacking Drone, Part 3](https://hackers-arise.com/drone-hacking-build-your-own-hacking-drone-part-3/) - See how we carried out our first wireless attack using a lightweight Raspberry Pi mounted on a drone.

## Pages

- [Home](https://hackers-arise.com/) - Hackers Arise offers expert cybersecurity training on tools, techniques, and industry news. Explore courses and articles to stay ahead in cybersecurity.
- [Live Training Schedule](https://hackers-arise.com/schedule/) - Training Schedule Enroll in our Subscriber or Subscriber Pro training package and enjoy live, instructor-led classes at no additional cost. Schedule 2026February Advanced Linux February 17–19 4PM UTC SubscriberPRO March PowerShell for Hackers March 10–12 3PM UTC Subscriber orSubscriber PRO April Metasploit Basics for Hackers April 7–9 3PM UTC Subscriber orSubscriber PRO OSINT v3 April
- [Terms of Service](https://hackers-arise.com/terms-of-service/) - Terms of Service Welcome to Hackers-Arise.com. By accessing or using this website, you agree to be bound by the following terms and conditions. If you do not agree with any part of these terms, please do not use our services. Use of the WebsiteHackers-Arise.com provides educational content, training materials, and other resources related to cybersecurity
- [fsociety Archive](https://hackers-arise.com/fsociety-archive/) - Mr. Robot If you haven’t started this series yet, make the time. It’s one of the best series of the last decade. Sam Esmail crafted a masterpiece that is sharp and unusually authentic in its portrayal of hacking. The techniques are grounded in reality with . Below are some of the best clips and my
- [Hackers for Hire](https://hackers-arise.com/hackers-for-hire-2/) - At Hackers-Arise, we are offering a new service called Hackers for Hire. Companies, institutions and individuals who need the assistance of a well-trained and certified hacker can come here and we will find you the right hacker for the job.With members of our community from every nation on the face of the earth, we can
- [Getting Started](https://hackers-arise.com/getting-started/) - Getting Started: Foundational Cybersecurity Tutorials & Guides Welcome to your starting point in the world of ethical hacking and cybersecurity. At Hackers Arise, we’ve curated a collection of beginner-friendly tutorials, articles, and resources designed to help you build a solid foundation. Whether you’re just getting started or looking to strengthen your core skills, this page
- [Training Packages](https://hackers-arise.com/training-packages/) - Cybersecurity Training Packages Beginner to Intermediate Subscriber 41 Courses 5 eBooks Live Courses Recorded Courses 3 Years of Training Package Details Beginner to Advanced & Specialized Career Subscriber PRO 72 Courses 5 eBooks Live Courses Recorded Courses 3 Years of Training Package Details Beginner to Intermediate Path to Cyberwarrior Tier 1 41 Courses 5 eBooks
- [Corporate Cybersecurity Training](https://hackers-arise.com/corporate-cybersecurity-training/) - Corporate Cybersecurity Training Subscriber PRO Corporate 72 Courses 5 eBooks Live Courses Recorded Courses Unlimited Team Members 3 Years Package Details
- [Subscriber PRO Corporate](https://hackers-arise.com/corporate-cybersecurity-training/subscriber-pro-corporate/) - Subscriber PRO Corporate Total Cybersecurity Training for Your Team View Pricing Subscriber Pro Corporate provides your team with state-of-the-art cybersecurity training and updates at a minimal cost. With this program you can send unlimited* team members to our training to get them abreast of new developments in Cybersecurity.The Subscriber PRO Corporate plan is a premium
- [Career Training](https://hackers-arise.com/career-training/) - Focused Cybersecurity Career Training Digital Forensics & Incident Response Career Training 16 Courses Live Courses Recorded Courses 3 Years of Training Package Details Software-Defined Radio (Signals Intelligence) Career Training 8 Courses Live Courses Recorded Courses 3 Years of Training Package Details
- [Memberships](https://hackers-arise.com/memberships/) - Memberships Member Gold 41 Courses 5 eBooks Recorded Courses Monthly Subscription Package Details Member 2 Courses 50% Off Individual Courses 5 eBooks Recorded Courses 30% Off When You Upgrade to Subscriber Annual Subscription Package Details
- [Digital Forensics & Incident Response (DFIR) Career Training](https://hackers-arise.com/career-training/dfir/) - Digital Forensics & Incident Response (DFIR) Career Training Learn How Hackers Slip Up and How to Hunt Them Down View Pricing Every day, attackers compromise networks, wipe evidence, and demand ransom in cryptocurrency. If you want to stop them, you need more than classroom theory. You need digital forensics and incident response skills that work
- [Software Defined Radio Career Training](https://hackers-arise.com/career-training/sdr/) - Software-Defined Radio: Master Signals Intelligence​ View Pricing If you’re serious about mastering the battlefield beyond Ethernet cables and Wi-Fi routers, you need to understand one thing: the air is the new frontline. And Software-Defined Radio (SDR) is how we fight there.Our SDR Cybersecurity Training Program isn’t for tourists. This is a deep-dive into how modern
- [Subscriber PRO: Comprehensive and In-Depth Cybersecurity Training​](https://hackers-arise.com/training-packages/subscriber-pro/) - Subscriber PRO: Total Access Cybersecurity Training View Pricing If you’re serious about becoming a cybersecurity professional, if you want the skills to go to war online, then this is where you start.The Subscriber PRO training package gives you complete access to every course we offer for three full years. From first steps to advanced tactics,
- [Subscriber: Build Foundational Techniques and Core Skills](https://hackers-arise.com/training-packages/subscriber/) - Subscriber: Build Foundational Techniques and Core Skills Master the foundations of cybersecurity and build essential job skills View Pricing Whether you’re new to cybersecurity or at an intermediate stage in your career, the Subscriber training package includes all of our beginner, intermediate, and selected advanced courses giving you a strong foundation with room to grow. Attend
- [Path to Cyberwarrior](https://hackers-arise.com/training-packages/path-to-cyberwarrior/) - Path to Cyberwarrior: A Tiered Training Program for Real-World Readiness View Pricing Path to Cyberwarrior is a structured, three-year training pipeline built for long-term skill development. The program is divided into two stages, each designed to build on the last. First 18 Months: Core Skill Building Your first 18 months include access to the full
- [Cybersecurity Training for All Levels: Beginner to Professional](https://hackers-arise.com/training-levels/) - #Hackers Arise offers cybersecurity training for every budget and skill level. Compare our training packages to find the right path to achieve your goals.
- [About](https://hackers-arise.com/about/) - Empowering the Next Generation of Ethical Hackers Hackers Arise is a hands-on cybersecurity training platform built on teaching practical hacking skills . Founded by Master OTW (Occupy the Web), author of several bestselling hacker training books, Hackers Arise has become a trusted source for aspiring penetration testers, forensics analysts, OSINT investigators, and anyone looking to
- [Cookie Notice](https://hackers-arise.com/cookie-notice/) - Cookie Notice At Hackers-Arise.com, we use cookies and similar technologies to improve your browsing experience, analyze site traffic, and personalize content. Some cookies are essential to the functionality of the site; others help us understand how visitors interact with it.By continuing to use this site, you consent to the use of cookies in accordance with
- [Master OTW on Youtube](https://hackers-arise.com/master-otw-on-youtube/) - Master OTW on Youtube: Hacking Tutorials and Real-World Cybersecurity Demos Master OTW is also a frequent guest on cybersecurity YouTube channels, including David Bombal and Yaniv Hoffman. Explore the collection of Master OTW’s YouTube videos, which feature hands-on hacking tutorials, in-depth cybersecurity lessons, and real-world demonstrations. OTW on David Bombal OTW on David Bombal 25
- [Privacy Policy](https://hackers-arise.com/privacy-policy-2/) - Privacy Policy At Hackers-Arise.com, we are committed to protecting your privacy. We do not sell, rent, or trade your personal data. This policy explains what information we collect, how we use it, and your rights regarding that information. Information We Collect Information You Provide to UsWhen you interact with our site, we may collect:Your name
- [Member Gold](https://hackers-arise.com/member-gold/) - Member Gold: Flexible Cybersecurity Training That Fits Your Life​​ View Pricing Whether you’re an aspiring cybersecurity enthusiast or a seasoned IT professional, Member Gold provides a range of courses to help you build both skills and confidence without the commitment of a three-year plan. This monthly subscription includes courses on OSINT, Industrial Control Systems (SCADA),
- [Member](https://hackers-arise.com/member/) - Become a MEMBER Perfect for cybersecurity professionals just starting out and not ready for a long-term commitment or or an aspiring hacker who only wants specific courses, the Member Bundle offers full support and one year of access to our training platform. Here’s what’s included: Courses: “Linux Basics for Hackers v2” Video Companion Certified WhiteHat
- [Training Paths](https://hackers-arise.com/training-paths/) - Find the Right Training Program for You Choosing the right cybersecurity training program doesn’t have to be overwhelming. Whether you’re just starting out or looking to specialize, this guide helps you identify where you stand, what your goals are, and which learning path will get you there. From foundational courses to advanced certifications, we break
- [Dashboard](https://hackers-arise.com/dashboard/) - [wpuf_dashboard]
- [Account](https://hackers-arise.com/account/) - [wpuf_account]
- [Edit](https://hackers-arise.com/edit/) - [wpuf_edit]
- [Login](https://hackers-arise.com/login/) - [wpuf-login]
- [Subscription](https://hackers-arise.com/subscription/) - [wpuf_sub_pack]
- [Payment](https://hackers-arise.com/payment/) - Please select a gateway for payment
- [Thank You](https://hackers-arise.com/thank-you/) - Payment is completeCongratulations, your payment has been completed!
- [Order Received](https://hackers-arise.com/order-received/) - Hi, we have received your order. We will validate the order and will take necessary steps to move forward.
- [Advertising](https://hackers-arise.com/advertising/) - Advertise with Us​ Hackers-Arise attracts thousands of educated IT security professionals from the around the world every day. According to Amazon’s Alexa.com, nearly all our readers have at least a bachelor’s degree and nearly all read our site from work. In addition, unlike so many other IT security websites, over 63% reside in the U.S.,
- [Digital Forensics Investigator for Hire](https://hackers-arise.com/digital-forensics-investigator-for-hire-2/) - Hire a Digital Forensics Investigator If you’ve been hacked, scammed, stalked, or defrauded we can trace who did it.Cybercrime is no longer rare. Every day, people and businesses are targeted by hackers, surveillance operations, and online fraud. Bank accounts are emptied. Crypto disappears. Private messages, photos, and calls are silently monitored.If you suspect you’ve been
- [Frequently Asked Questions (FAQ)](https://hackers-arise.com/faq/) - Frequently Asked Questions What type of cybersecurity training is available at Hackers-Arise? Hackers-Arise offers training in both offensive and defensive security. It is our belief that a true cyberwarrior should be conversant in both strategies to be effective.Hackers-Arise offers 4 training levels, MEMBER (beginner), Subscriber (beginner to Intermediate), and Subscriber PRO (advanced and specialty courses).
- [Cancel a Subscription](https://hackers-arise.com/cancel-a-subscription/) - Need to Cancel a Subscription? Sorry to see you go, but we’re glad we were part of your cybersecurity journey. Thank you for choosing Hackers-Arise. You’re always welcome back when you’re ready to keep learning. If you created your subscription through our Ecwid website you can cancel your subscription here.Login > Go to My Account >
- [List of Courses](https://hackers-arise.com/courses/) - ONLINE COURSES All courses are recorded and can be viewed at your leisure in our Training PlatformClick on the course name to navigate directly to it. Course names in White are upcoming. Edit Course SubscriberSubscriber PROCyberwarrior (Tier Number)Member GoldMemberDFIRSDR Linux Basics for Hackers✓✓1✓✓ Getting Started Becoming a Master Hacker ✓✓1✓50% off Radio Basics for Hackers✓✓1✓50%
- [Honeypot](https://hackers-arise.com/getting-started/honeypot/) - Honeypot This section introduces cybersecurity professionals to deploying honeypots for capturing zero-day exploits and malware. These step-by-step guides walk you through setting up effective traps to detect and analyze advanced threats, making them essential for threat researchers, penetration testers, and SOC analysts seeking real-world data on attacker behavior. Building a Honeypot to Capture Zero-Day Exploits,
- [Anti-Forensics](https://hackers-arise.com/getting-started/anti-forensic/) - Anti-Forensics is the study of how to counter forensic methods. A skilled forensic investigator can learn the who, what, where, and how of a hack with adequate knowledge, time, and resources. Anti-forensics focuses on how to make the forensic investigator’s job more difficult or impossible.​ Cyberwar Network Espionage – Using Russian Cameras as Proxies, Part
- [Evading AV](https://hackers-arise.com/getting-started/evading-av/) - Gaining access to the target’s system can be more complex than simply running an exploit against the system. Usually, you can expect that the target system has some type of anti-virus protection (your payload is a virus). To be successful then, you must find a way to evade the anti-virus software. This section is dedicated
- [Vulnerability Scanning](https://hackers-arise.com/getting-started/vulnerability-scanning/) - Vulnerability scanning is an essential skillset as a security engineer or pentester. The idea here that you use a tool that checks your network or website for known vulnerabilities. This is a standard and best practice.There are a number of tools avialble for this task. Nessus is probably the most popular but Nexpose is becoming
- [Exploit Development](https://hackers-arise.com/getting-started/exploit-development/) - ARM Assembly for Hackers: Learning 32-bit Architecture for Exploit Development You may have already noticed that ARM processors are everywhere — in phones, routers, smart TVs, and of course, IoT devices. In fact, ARM has become one of the most widely used CPU architectures globally. And just like traditional PCs, ARM-based IoT devices are vulnerable
- [MiTM](https://hackers-arise.com/getting-started/mitm/) - Man-in-the-Middle Attacks are among the most nefarious attacks. In these attacks, the hacker places themselves between the client and server. In this way, the attacker can eavesdrop or even alter the communication between the end points. Imagine someone reading all your email and other communication and even worse, intercepting it and altering it.​ How to
- [Reverse Engineering Malware](https://hackers-arise.com/getting-started/reverse-engineering-malware/) - In this series, we will examine how to reverse engineer malware. Like so many skills in information security, these skills can be used by both Black and White Hats. White Hats use to it understand how the malware works to defeat it and to assign attribution; the Black Hats use it to reverse engineer a
- [Software Defined Radio for Hackers](https://hackers-arise.com/getting-started/software-defined-radio-for-hackers/) - This new, innovative course from Hackers-Arise exemplifies the cutting-edge courses available only at Hackers-Arise. Radio signals swirl around us everywhere whether we are at home, at work, in our car, and nearly everywhere These radio signals control such devices as; 1. cellphones 2. walkie-talkies 3. Bluetooth devices, 4. garage door openers, 5. flight information signals,
- [Bluetooth Hacking](https://hackers-arise.com/getting-started/bluetooth-hacking/) - Bluetooth Hacking Bluetooth Hacking focuses on discovering and exploiting security flaws in Bluetooth and BLE devices. This category on Hackers-Arise provides concise, hands-on guides for reconnaissance, device control, and exploiting known vulnerabilities like BlueBorne. Ideal for penetration testers and ethical hackers, these tutorials cover tools such as Bettercap and BlueDucky to enhance your wireless attack
- [Automobile Hacking](https://hackers-arise.com/getting-started/automobile-hacking/) - As automobiles have become increasingly sophisticated, the opportunities to hack them have increased commensurately. Electronic starting systems, remotes, Wi-Fi, GPS, alarms, and lots of software each provide vectors to hack automobiles.In this section, I will be showing you some hacks that will work against various automobiles. Keep in mind that like computer systems, not all
- [Mr Robot](https://hackers-arise.com/getting-started/mr-robot/) - As most of you know, Mr. Robot is my favorite TV show. I love it for many reasons, well-written, great acting and most of all, realistic hacking. I had previously shown you through several tutorials how Elliot did his hacks. With the final season coming this fall, I will continue to demonstrate the techniques of Elliot
- [Database Hacking](https://hackers-arise.com/getting-started/database-hacking/) - Database hacking is among the most important arts of the hacker. Usually, the hacker is seeking access to data and obviously, the database is usually where it resides. This makes the database the “Golden Fleece” of the hacker.​Most often, databases are hacked using SQL injection and as such, this section will focus on SQL Injection
- [Ransomware](https://hackers-arise.com/getting-started/ransomware/) - Ransomware has become the scourge of our digital lives!​In this section, we will learn how ransomware works, the evolution of ransomware, and build our ransomware. SCADA/ICS Hacking SCADA Hacking: Snake, a New Variant of Ransomware Targets SCADA/ICS Read More » Cybersecurity Tools Mr. Robot Hacks: How f/society Ransomed Evil Corp for $5.9 million Read More
- [Digital Forensics](https://hackers-arise.com/getting-started/digital-forensics/) - Digital forensics is the discipline of determining the who, what, where, how, and when of what took place on a digital system. Now that so much of our lives is spent online, so much information can be deciphered by digital forensics. ​This section is designed to both assist the hacker to understand what evidence they leave
- [Android Hacking](https://hackers-arise.com/getting-started/android-hacking/) - Bug Bounty Android Hacking, Part 04: A Compendium of Android Remote Administration Trojans (RATS) Read More » Hacking Metasploit Basics, Part 13: Exploiting Android Mobile Devices (Updated) Read More » Cyberwarrior Android Hacking, Part 03: How to Embed a Backdoor into an Android APK Read More » Hacking Android Hacking, Part 01: Android Basics Read
- [SCADA/ICS Hacking and Security](https://hackers-arise.com/getting-started/scada-ics-hacking-and-security/) - SCADA/ICS systems are among the greatest concerns for cyber warfare/cyber defense organizations. These systems are particularly vulnerable for several reasons, including– but not limited to–the fact that so many SCADA/ICS organizations have relied upon security through obscurity for so many years. These industrial control systems are critical to any nation’s infrastructure and, thereby, their economy.
- [Snort IDS for Hackers](https://hackers-arise.com/getting-started/snort-ids-for-hackers/) - Snort for Hackers Snort is the world’s most popular Intrusion Detection System/ Intrusion Prevention System (IDS/IPS). Originally developed by Marty Roesch as an open-source project, Snort and its parent, Sourcefire, were acquired by the networking behemoth, Cisco, in 2014.Every hacker and network engineer should be familiar with Snort. As a hacker, you will need to
- [Password Cracking](https://hackers-arise.com/getting-started/password-cracking/) - Password cracking is a fundamental hacking and digital forensics skill. Nearly every system is authenticated by the traditional username and password and even if two-factor authentication is used, one is usually a password.​Cracking passwords can take many forms. See my article on password-cracking strategies before you embark upon password cracking. It will likely save you significant
- [Linux Firewalls](https://hackers-arise.com/getting-started/linux-firewalls/) - Linux Firewalls This section explores building, configuring, and optimizing firewall solutions on Linux. Whether you’re new to Linux security or a seasoned professional, this section delivers actionable tutorials, real-world examples, and deep dives into tools like iptables, nftables, ufw, and more. Allowing you to stay up to date with the latest strategies in network defense,
- [Web App Hacking](https://hackers-arise.com/getting-started/web-app-hacking/) - Web App Hacking Web applications or web apps are the interface of a website to the Internet. Many of them are so poorly designed that it is relatively easy to take control or deface these sites. Many of Content Management Systems (CMS) such as WordPress, Drupal, and Joomla are bug-riddled. Even when these are patched,
- [Metasploit Basics for Hackers](https://hackers-arise.com/getting-started/metasploit-basics-for-hackers/) - Metasploit is one of the world’s most powerful exploitation frameworks. Begun as an open-source project by HD Moore, it is now owned by the information security company Rapid7. Every hacker/pentester MUST be proficient in the use of Metasploit. In this section, I will try to provide you with all the skills you need to become a
- [Wireless Hacking](https://hackers-arise.com/getting-started/wireless-hacking/) - Wireless Hacking There are many, many ways to hack wireless (Wi-Fi or 802.11) Internet AP’s. This section will be dedicated to the many ways. Initially, you need to know what type of security the wireless access point uses (WEP, WPS, WPA2-PSK, WPA2-Enterprise) and an aircrack-ng compatible wireless adapter. If you have questions whether your adapter is
- [Reconnaissance](https://hackers-arise.com/getting-started/reconnaissance/) - Reconnaissance Although every hacker is looking forward to pwning the system, reconnaissance may be the most important part of the hacking process. In many cases, reconnaissance can consume 70-80% of the time of the hacking process. Without good reconnaissance, your hacking attempts are likely to be for naught.​Exploits are very specific to the technology being
- [OSINT](https://hackers-arise.com/getting-started/osint/) - OSINT (Open Source Intelligence) The Internet has become the largest repository of data in the history of humankind! If one knows how to find, identify, and use this data, it can be invaluable to forensic investigations, the reconnaissance phase of hacking, and predicting critical events. In this section, we will explore several techniques and tools for
- [Mobile or Cellular Hacking](https://hackers-arise.com/getting-started/mobile-or-cellular-hacking/) - Mobile or Cellular Hacking Learn the fundamentals of analyzing and exploiting vulnerabilities in mobile devices and cellular networks. This category offers tutorials on Android hacking fundamentals, setting up testing environments, and understanding mobile security threats. Android Hacking, Part 01: Android Basics Welcome back, my rookie hackers! Before we delve into this much anticipated section on
- [Hacking Fundamentals](https://hackers-arise.com/getting-started/hacking-fundamentals/) - Hacking Fundamentals: Core Skills, Tools, and Mindset for Ethical Hackers This section is dedicated to the foundational skills and knowledge every aspiring hacker needs. These articles cover the essential techniques of a professional hacker, must-have tools for reconnaissance and exploitation, and the mindset required to think critically and creatively like an attacker. Build a strong
- [Linux For Hackers](https://hackers-arise.com/getting-started/linux-for-hackers/) - Linux Basics for Hackers To become a professional hacker, you MUST know Linux. Although a few hacker tools are available for Windows, well over 95% are Linux-based. This area covers essential commands, file system navigation, user and permission management, scripting, service enumeration, and practical techniques for offensive security. Learn how to control Linux like a
- [Network Basics for Hackers](https://hackers-arise.com/getting-started/network-basics-for-hackers/) - Network Basics for Hackers Every hacker needs to know networking fundamentals. This category covers IP addressing, subnets, ports, protocols (TCP, UDP, ICMP), DNS, routing, packet analysis, and the OSI model—all from a hacker’s perspective. Understand how data flows through networks and how attackers intercept, manipulate, and exploit it. you may want to review this material
- [Scripting for Hackers](https://hackers-arise.com/getting-started/scripting-for-hackers/) - Scripting for Hackers Although there are many tools available to the aspiring hacker/pentester, to ascend to the upper echelons of the master hacker one must be able to develop their tools. This requires scripting skills.​In this section, we will look to develop your scripting skills in several different scripting languages including Perl, BASH, Python, PowerShell,
- [Python Basics for Hackers](https://hackers-arise.com/getting-started/python-basics-for-hackers/) - Python Basics for Hackers This beginner-friendly series teaches aspiring hackers how to harness Python for cybersecurity tasks. Starting with core programming concepts, the tutorials guide you through building practical tools for reconnaissance, banner grabbing, and automation. Whether you’re new to coding or looking to enhance your hacking toolkit, these lessons provide a solid foundation in
- [Newsletter](https://hackers-arise.com/newsletter-2/) - [newsletter]
- [DFIR](https://hackers-arise.com/digital-forensics-and-incident-response-2/) - Digital Forensics and Incident Response Designed for cybersecurity students with foundational knowledge, our DFIR program prepares you to enter the lucrative field of corporate network protection. This three year training program offers recorded classes available on-demand through our online training center, allowing you to learn at your own convenience. While this package does not include
- [Newsletter](https://hackers-arise.com/newsletter/) - [newsletter]
- [Exploit Database](https://hackers-arise.com/poc-list/) - Edit TitleTypePlatform reNgine 2.2.0 - Command Injection (Authenticated)WebAppsMultiple NoteMark < 0.13.0 - Stored XSSWebAppsMultiple Gitea 1.22.0 - Stored XSSWebAppsMultiple 101 News 1.0 - Multiple-SQLiWebAppsMultiple Adobe ColdFusion versions 2018_15 (and earlier) and 2021_5 and earlier - Arbitrary File ReadWebAppsMultiple Atlassian Confluence < 8.5.3 - Remote Code ExecutionWebAppsMultiple Atlassian Confluence Data Center and Server - Authentication Bypass
- [HoneyPot](https://hackers-arise.com/honeypot/) - Cybersecurity Tools Building a Honeypot to Capture Zero-Day Exploits, Part 01 Read More » Cybersecurity Tools Building a Honeypot to Capture Zero-day Malware, Part 02 Read More »
- [Mobile Hacking](https://hackers-arise.com/mobile-hacking/) - With the proliferation of mobile devices, mobile hacking and security may be the most critical element to your company’s information security plan. This course examines the many ways that mobile devices can be hacked and what we can do to secure them.​Mobile Hacking and SecurityOutline1. The Mobile Risk Ecosystem2. Hacking the Cellular Network3. IOS4. Android5.
- [Metasploit Basics for Hackers](https://hackers-arise.com/metasploit-basics-for-hackers-2/) - Course OverviewThis course is designed to provide a comprehensive introduction to the Metasploit framework, a powerful open-source tool used by security professionals. You will learn how to set up a Metasploit-based testing environment, understand the core components of the framework, and perform various penetration testing tasks using Metasploit. By the end of this course, you
- [Privilege Escalation](https://hackers-arise.com/privilege-escalation/) - Course Overview This course is designed to provide a comprehensive understanding of privilege escalation techniques in Linux environments. You’ll explore various privilege escalation methods and gain hands-on experience with essential tools. By the end of this course, you’ll have the skills to identify and exploit common privilege escalation vulnerabilities in Linux systems.Course OutlineIntroduction to Privilege
- [Radio Basics for Hackers](https://hackers-arise.com/radio-basics-for-hackers/) - Course OverviewThe purpose of this training is to provide you with a foundational understanding of radio technology, equipping you with the knowledge to explore and experiment with radio systems. You’ll learn key concepts in radio communication and gain practical insights into radio operation and manipulation.Course OutlineWhat is Radio?Introduction to electromagnetic waves Basic components of a
- [Getting Started Becoming a Master Hacker](https://hackers-arise.com/getting-started-becoming-a-master-hacker/) - Course Overview These videos guide you through each chapter, demonstrating the hacks outlined in the book. A must-have for readers who enjoyed the book! Upon completing these videos, you’ll be well on your way to mastering hacking! Course Outline Getting Started Introduction Career paths in cybersecurity History of hacking Essential Skills and Tools Intangible skills
- [Web App Hacking](https://hackers-arise.com/web-app-hacking-2/) - Course Overview This course is designed to provide a comprehensive understanding of web application hacking. You’ll learn about various attack vectors and industry-standard methodologies. By the end of this course, you’ll have the skills to identify and exploit common web application vulnerabilities. Course Outline Introduction and Overview Recent hacks Web app architecture Reconnaissance & Mapping
- [Wi-Fi Hacking](https://hackers-arise.com/wi-fi-hacking/) - Course OverviewThis course is designed to provide a comprehensive understanding of Wi-Fi security, including both theoretical concepts and practical hacking techniques. You’ll learn about Wi-Fi fundamentals, explore various attack methods, and gain hands-on experience with popular tools used in Wi-Fi hacking.Course OutlineIntroductionRecommended Wi-Fi adapter TerminologyWi-Fi BasicsWi-Fi standards and protocols (802.11) Wi-Fi channels and frequencies Wi-Fi
- [Hacking API's](https://hackers-arise.com/hacking-apis/) - Course OverviewThis course is designed to provide a comprehensive understanding of API security testing. You’ll learn the fundamentals of how APIs work, explore their anatomy, set up a testing environment, and dive into various techniques for reconnaissance and attacking APIs. By the end of this course, you’ll have the skills to identify and exploit common
- [CASP+ Training](https://hackers-arise.com/casp-training/) - Course Overview This comprehensive course is designed to prepare IT professionals for the CompTIA Advanced Security Practitioner (CASP+) certification exam. You will gain in-depth knowledge of advanced cybersecurity concepts, tools, and practices necessary for senior-level security roles. Course Outline Risk Management and Business Continuity Advanced risk analysis techniques Developing enterprise-wide risk mitigation strategies Business continuity
- [Bug Bounty Training](https://hackers-arise.com/bug-bounty-training/) - Course OverviewThis course is designed to introduce you to the world of bug bounty hunting. You’ll learn the fundamentals of identifying and reporting security vulnerabilities, gain hands-on experience with essential tools, and develop the skills needed to start your journey as a bug bounty hunter.Course OutlineWhat is Bug Bounty Hunting?Definition and history of bug bounties
- [Linux Firewalls](https://hackers-arise.com/linux-firewalls-2/) - Course OverviewThe purpose of this training is to equip you with the knowledge and skills to build and manage your own firewall. You’ll learn about various Linux firewall technologies and gain hands-on experience in configuring and maintaining firewall systems.Course OutlineIntroductionFirewall concepts and terminologyTypes of firewallsLinux firewall architectureTCP/IP RefresherNetwork layers and protocolsIP addressing and subnettingCommon network
- [Security + Bootcamp](https://hackers-arise.com/security-bootcamp/) - Course OverviewThis intensive bootcamp is designed to prepare you for the CompTIA Security+ certification exam. The course thoroughly walks you through each of the five domains of the Security+ exam, providing a comprehensive understanding of core security concepts, tools, and practices. In addition, OTW takes you through 3 practice exams to prepare you to pass
- [Network Basics for Hackers](https://hackers-arise.com/network-basics-for-hackers-2/) - Course Overview In this 3-day course, OTW addresses the basics of networking and how they are manipulated by hackers. Based upon Occupytheweb’s new book. You will learn about network infrastructure, common protocols, and potential vulnerabilities, gaining both theoretical knowledge and practical skills using various networking tools. Course Outline Key terminology in networking Network topologies (bus,
- [Cryptography Basics for Hackers](https://hackers-arise.com/cryptography-basics-for-hackers/) - Course OverviewThis course provides a comprehensive introduction to the principles and practices of cryptography. You will explore the historical development of cryptographic methods, understand key modern techniques, and gain hands-on experience with cryptographic tools and analysis.What you will learn:History of CryptographyEarly ciphers and codes Key concepts in classical cryptography The Enigma machine and its impact
- [Mr. Robot Hacks](https://hackers-arise.com/mr-robot-hacks/) - Course OverviewFollow the hacks of Elliot and f/society in this intriguing and unique class. Master OTW teaches you the realistic hacks of Evil Corp, the prison, the FBI, and others by the team at f/society. This is a very fun course with lots of serious hacking.What you will learn:Advanced Network ExploitationTor network: structure, strengths, and
- [Nmap for Hackers](https://hackers-arise.com/nmap-for-hackers/) - Course OverviewThis course is designed to introduce aspiring cybersecurity professionals and network administrators to Nmap (Network Mapper), an essential tool for network exploration, security auditing, and penetration testing. Students will learn how to effectively use Nmap for various network tasks while understanding the underlying principles of network scanning.Course OutlineIntroduction to NmapWhat is Nmap and its
- [Linux Basics Second Edition](https://hackers-arise.com/linux-basics-second-edition/) - Course Overview This comprehensive course is designed to take you from a Linux novice to a confident user. You’ll learn essential Linux concepts, commands, and best practices. Join Master OTW, the author of ‘Linux Basics for Hackers’, as he guides you through the book, providing a deeper understanding of how hackers utilize Linux as an
- [Remaining Anonymous V2](https://hackers-arise.com/remaining-anonymous-v2/) - Course OverviewExplore the complexities of online privacy and anonymity in the modern digital landscape. Learn about various tools, techniques, and strategies used to enhance privacy and understand their implications for cybersecurity. Master OTW has successfully remained anonymous on the Internet for over 20 years and now you can learn how he does it!What you will
- [How to Find Any Website's Vulnerabilities with Nikto](https://hackers-arise.com/how-to-find-any-websites-vulnerabilities-with-nikto/)
- [Email Scraping and Maltego](https://hackers-arise.com/email-scraping-and-maltego/) - For more on the email scraping tool, the Harvester, click here.​ As a pentester/hacker, gathering email addresses from potential victims can have multiple uses. When we have the email addresses of key personnel, we can launch attacks by email to get people to click on a malicious link or direct them to our malicious website
- [Automobile Hacking](https://hackers-arise.com/automobile-hacking-2/) - As automobiles have become increasingly sophisticated, the opportunities to hack them have increased commensurately. Electronic starting systems, remotes, Wi-Fi, GPS, alarms, and lots of software each provide vectors to hack automobiles.In this section, I will be showing you some hacks that will work against various automobiles. Keep in mind that like computer systems, not all
- [Anti-Forensics](https://hackers-arise.com/anti-forensic-2/) - Anti-Forensics is the study of how to counter forensic methods. A skilled forensic investigator can learn the who, what, where, and how of a hack with adequate knowledge, time, and resources. Anti-forensics focuses on how to make the forensic investigator’s job more difficult or impossible.​ Cyberwar Network Espionage – Using Russian Cameras as Proxies, Part
- [Digital Forensics](https://hackers-arise.com/digital-forensics-3/) - Digital forensics is the discipline of determining the who, what, where, how, and when of what took place on a digital system. Now that so much of our lives is spent online, so much information can be deciphered by digital forensics. ​This section is designed to both assist the hacker to understand what evidence they leave
- [Hack to Spy](https://hackers-arise.com/hack-to-spy/) - This section of Hackers-Arise is dedicated to ways to use hacking to spy on others’ activities. These might be useful in cyber warfare, cyber espionage, law enforcement, private investigations, or tracking the behavior of underage dependents. We will look at a variety of techniques, including;​(1) remote exploitation(2) physical access(3) digital forensics(4) android devices(5) Raspberry Pi​ Cybersecurity
- [Continuous DoSing a Wireless AP](https://hackers-arise.com/continuous-dosing-a-wireless-ap/) - In previous tutorials for my Wi-Fi Hacking series, I have shown you how to crack WEP and WPA2 passwords, break a WPS PIN, and create Evil Twin and Rogue access points. In this continuation of the series, let’s look at slightly different approach to attacking wireless. (If you are new to hacking Wi-Fi, make sure
- [Career Paths](https://hackers-arise.com/career-paths/)
- [Why Every Hacker Should Know and Use Linux](https://hackers-arise.com/why-every-hacker-should-know-and-use-linux/) - In many of my tutorials, I have emphasized that a real hacker must know and use Linux, but I thought it might be time to emphasize and enumerate the reasons why I think so. So, for those of you are stuck in kiddie-ware (Windows), here is why you should make the transition to Linux.Linux Is
- [Course Registration](https://hackers-arise.com/course-registration/) - To Register for one of our upcoming live courses, fill out the form below and hit submit.All courses are live and recorded to be viewed at your leisure.Please note, you must be a Hackers-Arise Subscriber or Subscriber PRO to register for classes. If you are a Subscriber or Subscriber PRO and simply want to view the
- [My account](https://hackers-arise.com/my-account/) - [woocommerce_my_account]
- [Blog](https://hackers-arise.com/blog/) - Hacking Articles
- [Online Store](https://hackers-arise.com/training/) - Overview of our Training Center We use Thinkific as our Training Platform, where you will find recorded classes from our LIVE courses. You can watch them at your own pace, and you will receive a digital certificate upon completing each course to verify your participation. There, you will also find downloadable resources such as scripts,
- [Books](https://hackers-arise.com/books/) - Books on Hacking With a knack for turning complex concepts into accessible insights, Master OTW has empowered countless readers to navigate the dynamic and ever-evolving digital landscape. More than just guides; these books are transformative tools for those passionate about understanding and mastering the art of ethical hacking and information security. You can find all
- [Contact](https://hackers-arise.com/contact/)
- [Home](https://hackers-arise.com/home-2/) - HACKERS ARISE Explore our Courses Expert-led training in cybersecurity tools and techniques, designed for IT specialists, ethical hackers, security engineers, and students. We operate on two parallel websites Hackers-Arise.com & Hackers-Arise.net​ Live and immersive approach to training ethical hackers Our instructors are experienced pentesters, forensic investigators, and former college professors. They have trained hackers globally across the multiple

## My Templates

- [Page Header](https://hackers-arise.com/?elementor_library=page-header) - Content area
- [New Years Starter Bundle](https://hackers-arise.com/?elementor_library=50-off-careers-copy) - Content area
- [Calendar Schedule Loop](https://hackers-arise.com/?elementor_library=elementor-loop-item-17) - –
- [Author Archive](https://hackers-arise.com/?elementor_library=articles) - OTW Master OTW is a renowned cybersecurity expert, ethical hacker, and digital forensics consultant with over two decades of experience. A former computer science professor, he has trained hackers for all branches of the U.S. military, including the NSA, CIA, and U.S. Cyber Command. As the author of the influential books, Linux Basics for Hackers,
- [Author Archive Loop Grid](https://hackers-arise.com/?elementor_library=elementor-loop-item-14) - Author Archive Loop Grid January 8, 2026 Alita Read Article →
- [breadcrumbs](https://hackers-arise.com/?elementor_library=breadcrumbs) - Home / Template / breadcrumbs
- [Text Testimonial](https://hackers-arise.com/?elementor_library=text-testimonial) - "OTW is hands down the best teacher I’ve come across." @kaizenxmasteryStudent "So much value for such a small fee. I took a calculated risk, became a subscriber, and have zero regrets." @calm_egressStudent "I don’t see anyone else teaching this kind of content. Amazing." @Code4_CyberSecStudent "I have an interview with the VP of engineering of a
- [Elementor Search Results #224504](https://hackers-arise.com/?elementor_library=elementor-search-results-224504) - Elementor Search Results #224504 Search Search BROWSE TOPICS Anti-Forensics & OpSec ARM Artificial Intelligence Bitcoin & Cryptocurrency Bluetooth Hacking Bug Bounty Career Cellphones Command and Control (C2) Cryptography & Encryption CUDA Cyber Threat Intelligence Cybersecurity Tools Cyberwar Cyberwarrior Data Analytics Data Dumps Database Hacking Defensive Security Denial of Service (DoS) Digital Forensics DoS & DDoS
- [Upcoming Classes](https://hackers-arise.com/?elementor_library=upcoming-classes) - LIVE CLASS –
- [New Footer](https://hackers-arise.com/?elementor_library=new-footer) - Content area
- [Monthly Pricing Card](https://hackers-arise.com/?elementor_library=elementor-loop-item-16) - Add Your Heading Text Here [thinkific_price product_id=”143371″] /month Description List Item #1 List Item #1 List Item #1 List Item #1 Learn More
- [Secondary Button](https://hackers-arise.com/?elementor_library=secondary-button) - Click here
- [Default Kit](https://hackers-arise.com/?elementor_library=default-kit)
- [search bar](https://hackers-arise.com/?elementor_library=search-bar) - Search Search
- [Elementor Archive #224514](https://hackers-arise.com/?elementor_library=elementor-archive-224514) - LIVE CLASS Smart Home Hacking 20260113 – 20260115 4PM UTC Subscriber PRO LIVE CLASS Python Basics for Hackers 20260210 – 20260212 4PM UTC Subscriber or Subscriber Pro LIVE CLASS Advanced Linux 20260217 – 20260219 4PM UTC Subscriber PRO LIVE CLASS PowerShell for Hackers 20260310 – 20260312 3PM UTC Subscriber or Subscriber Pro LIVE CLASS Metasploit
- [Elementor Single Post #224488](https://hackers-arise.com/?elementor_library=elementor-single-post-224488) - Elementor Single Post #224488 Alita January 13, 2026 12:10 am
- [Elementor Archive #211399](https://hackers-arise.com/?elementor_library=elementor-archive-211399) - ARTICLES Cybersecurity insights and technical write-ups from the Hackers Arise team Search Search BROWSE TOPICSBROWSE TOPICS Select Category Anti-Forensics & OpSec ARM Artificial Intelligence Bitcoin & Cryptocurrency Bluetooth Hacking Bug Bounty Career Cellphones Command and Control (C2) Cryptography & Encryption CUDA Cyber Threat Intelligence Cybersecurity Tools Cyberwar Cyberwarrior Data Analytics Data Dumps Database Hacking Defensive
- [Elementor Loop Item #224412](https://hackers-arise.com/?elementor_library=elementor-loop-item-15)
- [Cat-Side-Menu](https://hackers-arise.com/?elementor_library=cat-side-menu) - “” Anti-Forensics & OpSec ARM Artificial Intelligence Bitcoin & Cryptocurrency Bluetooth Hacking Bug Bounty Career Cellphones Command and Control (C2) Cryptography & Encryption CUDA Cyber Threat Intelligence Cybersecurity Tools Cyberwar Cyberwarrior Data Analytics Data Dumps Database Hacking Defensive Security Denial of Service (DoS) Digital Forensics DoS & DDoS Attacks Email Dumps Evading Anti-Virus Exploit Development
- [50% Off Careers](https://hackers-arise.com/?elementor_library=christmas-starter-bundle-copy) - Content area
- [BLACK FRIDAY 2025](https://hackers-arise.com/?elementor_library=cyberweek-2025-copy) - Content area
- [Starter Bundle Sept 2025](https://hackers-arise.com/?elementor_library=2025-6-4-cs-bundle-149-copy) - Content area
- [Starter Bundle Sept 2025 - Copy](https://hackers-arise.com/?elementor_library=starter-bundle-sept-2025-copy) - Content area
- [Member Gold 40% October 2025](https://hackers-arise.com/?elementor_library=member-gold-40-october-2025) - Content area
- [Starter Bundle Nov 2025](https://hackers-arise.com/?elementor_library=starter-bundle-sept-2025-copy-2) - Content area
- [Mega menu Training](https://hackers-arise.com/?elementor_library=mega-menu-training-2) - Memberships Member Gold Monthly subscription to beginner and intermediate courses Member 1-year access to intro courses and 50% off all courses Training Packages Subscriber 3-year access to beginner to intermediate courses Subscriber PRO 3-year access to all courses, beginner to specialized View All Courses Career Training Digital Forensics & Incident Response Career Training 3-year access
- [Mega menu About](https://hackers-arise.com/?elementor_library=mega-menu-about-3) - Company Info About Hackers Arise Who we are, what we do, and why it matters. Fequently Asked Questions 1-year access to intro courses and 50% off all courses View All Courses Core Team Meet Our Team Get to know our instructors and contributors Master OTW on YouTube 3-year access to SDR Career Training Courses Compare
- [Mega Menu Services](https://hackers-arise.com/?elementor_library=mega-menu-services) - For Individuals Hacker for Hire Hire an expert for any information security related task Digital Forensics Investigator for Hire On-demand digital forensics and incident response services. For Organizations Incident Response Team Rapid-response digital forensics and IR services Digital Forensics Investigator for Hire Expert support for organizations when cyber incidents strike. [security_awareness_price] Security Awareness Training Train
- [MegaMenu Articles](https://hackers-arise.com/?elementor_library=megamenu-articles) - Popular Categories IP Camera Hacking Bluetooth Hacking Wi-Fi Hacking Mobile Hacking Cybersecurity Tools Network Exploitation Database Hacking Anti-Forensics & OpSec Bug Bounty Mr. Robot Hacks Metasploit Web Application Exploitation Vulnerability Scanning Hacking Fundamentals Bitcoin & Cryptocurrency Hacking Malware Analysis Linux See All Articles Popular Articles OSINT & Reconnaissance Open Source Intelligence: Free Satellite Services for
- [mega menu about](https://hackers-arise.com/?elementor_library=mega-menu-about) - Company Info About Hackers Arise Who we are, what we do, and why it matters. Fequently Asked Questions Quick answers to the most common questions. Core Team Meet Our Team Get to know our instructors and contributors Master OTW on YouTube Cybersecurity intros and insights from Master OTW Designed for Beginners [thinkific_price name_prefix="Cybersecurity Starter Bundle"]
- [Training drop down](https://hackers-arise.com/?elementor_library=training-drop-down) - Memberships Member Gold Monthly subscription to beginner and intermediate courses Member 1-year access to intro courses and 50% off all courses Training Packages Subscriber 3-year access to beginner to intermediate courses Subscriber PRO 3-year access to all courses, beginner to specialized View All Courses Career Training Digital Forensics & Incident Response Career Training 3-year access
- [Elementor Loop Item #18664](https://hackers-arise.com/?elementor_library=elementor-loop-item-13) - Elementor Loop Item #18664 October 9, 2025 Read more
- [Post Loop](https://hackers-arise.com/?elementor_library=elementor-loop-item-12) - Post Loop
- [Back to School Sale 2025](https://hackers-arise.com/?elementor_library=2025-6-4-cs-bundle-149) - Content area
- [Training](https://hackers-arise.com/?elementor_library=training) - Memberships Member Gold Monthly subscription to beginner and intermediate courses Member 1-year access to intro courses and 50% off all courses Training Packages Subscriber 3-year access to beginner to intermediate courses Subscriber PRO 3-year access to all courses, beginner to specialized Career Training Digital Forensics & Incident Response Career Training 3-year access to DFIR Career
- [Products](https://hackers-arise.com/?elementor_library=products) - Bundles [thinkific_bundles_byname] Training Packages Career Training Digital Forensics & Incident Response Career Training 3-year access to DFIR Career Training Courses Software-Defined Radio (Signals Intelligence) Career Training 3-year access to SDR Career Training Courses For Organizations Subscriber PRO Corporate 3-year access to all courses for businesses Security Awareness Training Train your team to detect cyber threats
- [Resources](https://hackers-arise.com/?elementor_library=resources) - Getting Started Foundational Skills Master the Basics on Linux, Networks, Python, Scripting, Hacking Fundamentals Intermediate Skills Dive deeper with tutorials OSINT, Recon, Password Cracking, Firewalls, Metasploit, Snort, Wireless and Web App Hacking Advanced Skills Specilize with tutorials on SCADA, Ransomware, DRIF, SDR, Reverse Engineering Malware, Exploit Development, Database Hacking, and more. Hacking Articles and Tutorials
- [Mega Menu with Ad](https://hackers-arise.com/?elementor_library=mega-menu-with-ad) - Company Info About Hackers Arise Who we are, what we do, and why it matters. Fequently Asked Questions Quick answers to the most common questions about our site, training, and resources. Core Team Meet Our Team Get to know our instructors and contributors Master OTW on YouTube Cybersecurity intros and insights from Master OTW Designed
- [Book Ad](https://hackers-arise.com/?elementor_library=book-ad) - Purchase Books by Master OTW 386 ratings Buy on Amazon 611 ratings Buy on Amazon 2,845 ratings Buy on Amazon ‹ ›
- [Menu](https://hackers-arise.com/?elementor_library=menu-2) - Memberships Member Gold Monthly subscription to beginner and intermediate courses Member Annual subscription to into courses and discounts on Benches & Ottomans Dining Tables Coffee & Cocktail Tables Consoles & Desks Career Training Cabinets & Bookcases Screens Outdoor Furniture Floor Samples For Organizations Side Tables Beside Tables Sideboards & Drawers Lounge Chairs Highlight
- [menu](https://hackers-arise.com/?elementor_library=menu) - Memberships Member Gold Member Training Packages Subscriber Subscriber Pro Cyberwarrior Career Training Digital Forensics & Incident Response (DFIR) Software-Defined Radio For Organizations Subscriber Pro Corporate Security Awareness Training Training Paths Training Paths Compare Packages
- [posts](https://hackers-arise.com/?elementor_library=posts) - Hacking Automobile Hacking, Part 02: The can-utils or SocketCAN Read More » Hacking Automobile Hacking: ICS Simulator, Part 03. Reverse Engineering the CAN Signals Read More » Hacking Automobile Hacking, Part 04: How to Hack the Keyless Entry System Read More » Hacking Automobile Hacking: The ICS Simulator, Part 02 Read More » Vehicle &
- [Network Basics 2025 Class](https://hackers-arise.com/?elementor_library=network-basics-2025-class) - Content area
- [Elementor Loop Item #16818](https://hackers-arise.com/?elementor_library=elementor-loop-item-11) - Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
- [Linux Basics for Hackers 50% off](https://hackers-arise.com/?elementor_library=starter-bundle-sdr-simple-short-copy) - Content area
- [Starter Bundle SDR - Simple & Short](https://hackers-arise.com/?elementor_library=starter-bundle-sdr-simple-short) - Content area
- [Elementor Loop Item #15485](https://hackers-arise.com/?elementor_library=elementor-loop-item-10) - Elementor Loop Item #15485
- [Elementor Loop Item #15470](https://hackers-arise.com/?elementor_library=elementor-loop-item-9) - Elementor Loop Item #15470
- [10% off Exit Popup](https://hackers-arise.com/?elementor_library=elementor-popup-15180) - Content area
- [Elementor Search Results #14867](https://hackers-arise.com/?elementor_library=elementor-search-results-14867) - Search Template: Elementor Search Results #14867 Cybersecurity Through the Eyes of the Adversary – Free Webinar February 13, 2026 They do not begin with malware. They begin with you. Before a single exploit is launched, before a payload is dropped, adversaries are already inside your environment in a different way. They are mapping identity. They
- [Linux 2nd Ed Starter Bundle](https://hackers-arise.com/?elementor_library=elementor-popup-14349) - Content area
- [Image Testimonial](https://hackers-arise.com/?elementor_library=image-testimonial)
- [Elementor Loop Item #14821](https://hackers-arise.com/?elementor_library=elementor-loop-item-8)
- [9th Birthday](https://hackers-arise.com/?elementor_library=9th-birthday) - Content area
- [Post page](https://hackers-arise.com/?elementor_library=post-page) - Reverse Engineering Malware, Part 01: Getting Started In my introductory article in this new series, I attempted to lay out the merits of why you should study Reverse Engineering Malware. I’m hoping that you found that argument compelling enough that you have come back and are ready to dedicate yourself to this exciting discipline. I’m
- [Training Package Template](https://hackers-arise.com/?elementor_library=training-package-template) - Subscriber PRO: Comprehensive and In-Depth Cybersecurity Training Transform yourself into an advanced cybersecurity professional with the Subscriber PRO training package. This comprehensive three-year training program grants full access to all our courses from beginner to advanced, empowering you to specialize and elevate your cybersecurity career. Whether your interests lay in OSINT, Industrial Control Systems (SCADA), Digital
- [Linux Basics Playlist](https://hackers-arise.com/?elementor_library=linux-basics-playlist) - Playlist 6 Videos Linux for Hackers Episode 1: Tutorial (And Free Courses) 1:11:50 Linux for Hackers Episode 2: Tutorial with OTW! (Episode 2) 47:21 Linux for Hackers Episode 3: Linux Networking that you need to know (Episode 3) 54:06 Linux for Hackers Episode 4: Python pip, Git, Apt NEW Tools Install with OTW! (Episode 4)
- [Testimonial](https://hackers-arise.com/?elementor_library=testimonial)
- [Starter Bundle Forensics and Anti-Forensics](https://hackers-arise.com/?elementor_library=starter-bundle-forensics-and-anti-forensics) - Content area
- [Military Discount](https://hackers-arise.com/?elementor_library=military-discount) - Content area
- [50% Student Discount](https://hackers-arise.com/?elementor_library=50-student-discount) - Content area
- [Elementor Loop Item #11836](https://hackers-arise.com/?elementor_library=elementor-loop-item-7)
- [Starter Bundle](https://hackers-arise.com/?elementor_library=starter-bundle-3) - Content area
- [February Gold 2025](https://hackers-arise.com/?elementor_library=cybersecurity-starter-bundle-ii) - Content area
- [Starter Bundle w/ SDR](https://hackers-arise.com/?elementor_library=starter-bundle-2) - Content area
- [Starter Bundle](https://hackers-arise.com/?elementor_library=starter-bundle) - Content area
- [Sec+ Course](https://hackers-arise.com/?elementor_library=countdown-template) - Content area
- [Elementor Loop Item #11037](https://hackers-arise.com/?elementor_library=elementor-loop-item-6)
- [Elementor Loop Item #10706](https://hackers-arise.com/?elementor_library=elementor-loop-item-5) - Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
- [Elementor Loop Item #10483](https://hackers-arise.com/?elementor_library=elementor-loop-item-4)
- [Basic Template](https://hackers-arise.com/?elementor_library=basic-template) - Content area
- [Elementor Loop Item #10321](https://hackers-arise.com/?elementor_library=elementor-loop-item-3) - They do not begin with malware. They begin with you. Before a single exploit is launched, before a payload is dropped, adversaries are already inside your environment in a different way. They are mapping identity. They are tracing privilege. They are studying how trust flows between users, service accounts, cloud roles, and operational systems. Identity
- [Elementor Header #10220](https://hackers-arise.com/?elementor_library=elementor-header-10220) - Content area
- [Python Basics Popup](https://hackers-arise.com/?elementor_library=black-yellow-white-text) - Content area
- [Elementor Loop Item #10041](https://hackers-arise.com/?elementor_library=elementor-loop-item-2)
- [Elementor Loop Item #10034](https://hackers-arise.com/?elementor_library=elementor-loop-item)
- [Dutch hacker jailed for extortion, selling stolen data on RaidForums](https://hackers-arise.com/?elementor_library=dutch-hacker-jailed-for-extortion-selling-stolen-data-on-raidforums) - A former Dutch cybersecurity professional was sentenced to four years in prison after being found guilty of hacking and blackmailing more than a dozen companies in the Netherlands and worldwide. [...]
- [American Airlines pilot union hit by ransomware attack](https://hackers-arise.com/?elementor_library=american-airlines-pilot-union-hit-by-ransomware-attack) - Allied Pilots Association (APA), a labor union representing 15,000 American Airlines pilots, disclosed a ransomware attack that hit its systems on Monday. [...]
- [Google Play adds security audit badges for Android VPN apps](https://hackers-arise.com/?elementor_library=google-play-adds-security-audit-badges-for-android-vpn-apps) - Google Play, Android's official app store, is now tagging VPN apps with an 'independent security reviews' badge if they conducted an independent security audit of their software and platform. [...]
- [New Microsoft Exchange zero-days allow RCE, data theft attacks](https://hackers-arise.com/?elementor_library=new-microsoft-exchange-zero-days-allow-rce-data-theft-attacks) - Microsoft Exchange is impacted by four zero-day vulnerabilities that attackers can exploit remotely to execute arbitrary code or disclose sensitive information on affected installations. [...]
- [Okta breach: 134 customers exposed in October support system hack](https://hackers-arise.com/?elementor_library=okta-breach-134-customers-exposed-in-october-support-system-hack) - Okta says attackers who breached its customer support system last month gained access to files belonging to 134 customers, five of them later being targeted in session hijacking attacks with the help of stolen session tokens. [...]
- [Advantage | Homepage](https://hackers-arise.com/?elementor_library=advantage-homepage) - What does your company offer? Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Aenean commodo ligula eget dolor. Aenean massa. Cum sociis natoque penatibus et magnis dis parturient montes Call To Action Lorem ipsum dolor sit amet Cum sociis natoque penatibus et Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Aenean commodo ligula eget dolor.
- [Magazine Template](https://hackers-arise.com/?elementor_library=magazine-template)
- [Default Kit](https://hackers-arise.com/?elementor_library=default-kit-2)
- [Default Kit](https://hackers-arise.com/?elementor_library=default-kit-2-2)
- [Feb Gold](https://hackers-arise.com/?elementor_library=feb-gold) - Content area
- [Forensics and Anti Starter Bundle](https://hackers-arise.com/?elementor_library=forensics-and-anti-starter-bundle) - Content area

## ElementsKit items

- [dynamic-content-widget-ad991fb-99](https://hackers-arise.com/elementskit-content/dynamic-content-widget-ad991fb-99/) - “” Anti-Forensics & OpSec ARM Artificial Intelligence Bitcoin & Cryptocurrency Bluetooth Hacking Bug Bounty Career Cellphones Command and Control (C2) Cryptography & Encryption CUDA Cyber Threat Intelligence Cybersecurity Tools Cyberwar Cyberwarrior Data Analytics Data Dumps Database Hacking Defensive Security Denial of Service (DoS) Digital Forensics DoS & DDoS Attacks Email Dumps Evading Anti-Virus Exploit Development
- [dynamic-content-megamenu-menuitem18272](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem18272/) - For Individuals Hacker for Hire Hire an expert for any information security related task Digital Forensics Investigator for Hire On-demand digital forensics and incident response services. For Organizations Incident Response Team Rapid-response digital forensics and IR services Digital Forensics Investigator for Hire Expert support for organizations when cyber incidents strike. [security_awareness_price] Security Awareness Training Train
- [dynamic-content-megamenu-menuitem18306](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem18306/) - Popular Categories IP Camera Hacking Bluetooth Hacking Wi-Fi Hacking Mobile Hacking Cybersecurity Tools Network Exploitation Database Hacking Anti-Forensics & OpSec Bug Bounty Mr. Robot Hacks Metasploit Web Application Exploitation Vulnerability Scanning Hacking Fundamentals Bitcoin & Cryptocurrency Hacking Malware Analysis Linux See All Articles Popular Articles OSINT & Reconnaissance Open Source Intelligence: Free Satellite Services for
- [dynamic-content-megamenu-menuitem18267](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem18267/) - Company Info About Hackers Arise Who we are, what we do, and why it matters. Fequently Asked Questions Quick answers to the most common questions. Core Team Meet Our Team Get to know our instructors and contributors Master OTW on YouTube Cybersecurity intros and insights from Master OTW Designed for Beginners [thinkific_price name_prefix="Cybersecurity Starter Bundle"]
- [dynamic-content-megamenu-menuitem18271](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem18271/) - Memberships Member Gold Monthly subscription to beginner and intermediate courses Member 1-year access to intro courses and 50% off all courses Training Packages Subscriber 3-year access to beginner to intermediate courses Subscriber PRO 3-year access to all courses, beginner to specialized View All Courses Career Training Digital Forensics & Incident Response Career Training 3-year access
- [dynamic-content-megamenu-menuitem18270](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem18270/)
- [dynamic-content-megamenu-menuitem18268](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem18268/) - Getting Started Foundational Skills - Linux Basics - Network Basics - Hacking Fundamentals - Python Basics - Scripting Basics Intermediate Skills - OSINT - Reconnaissance - Wireless Hacks - Metasploit for Hackers - Web App Hacking - Linux Firewalls - Mobile Hacking - Password Cracking - Snort Advanced Skills - SCADA/ICS - Android Hacking -
- [dynamic-content-megamenu-menuitem18269](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem18269/)
- [dynamic-content-megamenu-menuitem17557](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem17557/) - Getting Started Foundational Skills Master the Basics on Linux, Networks, Python, Scripting, Hacking Fundamentals Intermediate Skills Dive deeper with tutorials OSINT, Recon, Password Cracking, Firewalls, Metasploit, Snort, Wireless and Web App Hacking Advanced Skills Specilize with tutorials on SCADA, Ransomware, DRIF, SDR, Reverse Engineering Malware, Exploit Development, Database Hacking, and more. Hacking Articles and Tutorials
- [dynamic-content-megamenu-menuitem17559](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem17559/) - Memberships Member Gold Monthly subscription to beginner and intermediate courses Member 1-year access to intro courses and 50% off all courses Training Packages Subscriber 3-year access to beginner to intermediate courses Subscriber PRO 3-year access to all courses, beginner to specialized Career Training Digital Forensics & Incident Response Career Training 3-year access to DFIR Career
- [dynamic-content-megamenu-menuitem17560](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem17560/)
- [dynamic-content-megamenu-menuitem18073](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem18073/) - Bundles [thinkific_bundles_byname] Bundles If you've looking a great deal on foundational learning or specialized training we have a bundle that can meet your needs. Training Packages Subscriber PRO 3-year access to all courses, beginner to specialized Career Training Digital Forensics & Incident Response Career Training 3-year access to DFIR Career Training Courses Software-Defined Radio (Signals
- [dynamic-content-megamenu-menuitem16932](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem16932/) - Company Info About Hackers Arise Who we are, what we do, and why it matters. Fequently Asked Questions Quick answers to the most common questions about our site, training, and resources. Core Team Meet Our Team Get to know our instructors and contributors Master OTW on YouTube Cybersecurity intros and insights from Master OTW Designed
- [dynamic-content-megamenu-menuitem15009](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem15009/)
- [dynamic-content-megamenu-menuitem15010](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem15010/) - For Individuals Hire a Digital Forensics Investigator Hire a Hacker For Organizations Hire a Digital Forensics Investigator Hire an Incidence Response Team
- [dynamic-content-megamenu-menuitem15013](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem15013/)
- [dynamic-content-megamenu-menuitem15035](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem15035/) - Memberships Member Gold Member Training Packages Subscriber Subscriber Pro Cyberwarrior Career Training Digital Forensics & Incident Response (DFIR) Software-Defined Radio For Organizations Subscriber Pro Corporate Security Awareness Training Training Paths Training Paths Compare Packages
- [dynamic-content-megamenu-menuitem15019](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem15019/)
- [dynamic-content-megamenu-menuitem16936](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem16936/) - furniture Dining Chairs Counter & Bar Stools Occasional Chairs Daybeds & Chaises lightings Benches & Ottomans Dining Tables Coffee & Cocktail Tables Consoles & Desks accessories Cabinets & Bookcases Screens Outdoor Furniture Floor Samples Texture lab Side Tables Beside Tables Sideboards & Drawers Lounge Chairs what’s new Benches & Ottomans Cocktail Tables Dining Tables Consoles
- [dynamic-content-megamenu-menuitem15011](https://hackers-arise.com/elementskit-content/dynamic-content-megamenu-menuitem15011/) - furniture Dining Chairs Counter & Bar Stools Occasional Chairs Daybeds & Chaises lightings Benches & Ottomans Dining Tables Coffee & Cocktail Tables Consoles & Desks accessories Cabinets & Bookcases Screens Outdoor Furniture Floor Samples Texture lab Side Tables Beside Tables Sideboards & Drawers Lounge Chairs what’s new Benches & Ottomans Cocktail Tables Dining Tables Consoles

## Templates

- [Header](https://hackers-arise.com/?elementskit_template=header)

## Training Schedule

- [Python Basics for Hackers February 10-12](https://hackers-arise.com/training_schedule/python-basics-for-hackers-february-10-12/)
- [PowerShell for Hackers	March 10-12](https://hackers-arise.com/training_schedule/powershell-for-hackersmarch-10-12/)
- [Metasploit Basics for Hackers	April 7-9](https://hackers-arise.com/training_schedule/metasploit-basics-for-hackersapril-7-9/)
- [Digital Forensics May 19-21](https://hackers-arise.com/training_schedule/digital-forensics-may-19-21/)
- [Investigating a Cyber Attack	July 14-16](https://hackers-arise.com/training_schedule/investigating-a-cyber-attackjuly-14-16/)
- [Remaining Anonymous v3 August 4-6](https://hackers-arise.com/training_schedule/remaining-anonymous-v3-august-4-6/)
- [Golang Basics for Hackers	October 13-15](https://hackers-arise.com/training_schedule/golang-basics-for-hackersoctober-13-15/)
- [Drone Hacking November 10-12](https://hackers-arise.com/training_schedule/drone-hacking-november-10-12/)
- [Bitcoin and Cryptocurrency Forensics	Sept 15-17](https://hackers-arise.com/training_schedule/bitcoin-and-cryptocurrency-forensicssept-15-17/)
- [Advanced Linux	February 17-19](https://hackers-arise.com/training_schedule/advanced-linuxfebruary-17-19/)
- [SCADA/ICS Forensics October 27-29](https://hackers-arise.com/training_schedule/scada-ics-forensics-october-27-29/)
- [Build Your Own Private Cellular Network	June 9-11](https://hackers-arise.com/training_schedule/build-your-own-private-cellular-networkjune-9-11/)
- [Satellite Hacking v2	May 12-14](https://hackers-arise.com/training_schedule/satellite-hacking-v2may-12-14/)
- [OSINT v3	April 21-23](https://hackers-arise.com/training_schedule/osint-v3april-21-23/)
- [Smart Home Hacking January 13-15](https://hackers-arise.com/training_schedule/smart-home-hacking-january-13-15/)

## Categories

- [Uncategorized](https://hackers-arise.com/category/uncategorized/)
- [Anti-Forensics & OpSec](https://hackers-arise.com/category/anti-forensics/) - Uncover the methods used to disrupt, deceive, or destroy digital forensic investigations. This category explores data obfuscation, metadata manipulation, secure deletion, timestomping, artifact wiping, and counter-forensic tools used to evade detection. Learn how hackers erase their tracks and how forensic analysts fight back.
- [Cybersecurity Tools](https://hackers-arise.com/category/cybersecurity/)
- [Cyberwarrior](https://hackers-arise.com/category/cyberwarrior/)
- [Data Analytics](https://hackers-arise.com/category/cybersecurity/data-analytics/) - Data Analytics in cybersecurity involves the systematic examination of vast and complex datasets to uncover patterns, detect anomalies, and enhance threat detection and response strategies. By leveraging tools like the R programming language, professionals can perform statistical analyses, visualize data trends, and develop predictive models to anticipate and mitigate potential security threats.
- [Defensive Security](https://hackers-arise.com/category/defensive-security/)
- [Digital Forensics](https://hackers-arise.com/category/digital-forensics/) - Explore the tools, techniques, and methodologies used to investigate cyber incidents and recover digital evidence. This category covers forensic imaging, memory analysis, file system recovery, log correlation, artifact extraction, and incident response strategies. Learn how professionals trace intrusions, reconstruct events, and support legal action with technical precision.
- [DoS & DDoS Attacks](https://hackers-arise.com/category/network-exploitation/dos/) - Understand how attackers disrupt services by overwhelming systems with malicious traffic or resource exhaustion. This category explores Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks, amplification techniques, botnet operations, protocol abuse, and real-world takedowns. Learn how these attacks are executed and how networks can detect, absorb, or block them.
- [Email Dumps](https://hackers-arise.com/category/email-dumps/)
- [Exploit Development](https://hackers-arise.com/category/vulnerabilities-exploits/exploit-development/) - Dive into the art and science of creating custom exploits for real-world vulnerabilities. This category covers buffer overflows, ROP chains, shellcode crafting, format string attacks, memory corruption, and advanced debugging techniques. Learn how exploits are written, weaponized, and used in penetration testing and red team operations.
- [InfoSec](https://hackers-arise.com/category/cybersecurity/infosec/) - Stay informed on the principles, practices, and emerging threats shaping the world of information security. This category covers risk management, data protection, access controls, compliance standards, threat modeling, and the intersection of physical and digital security. Learn how professionals safeguard systems, users, and organizations.
- [IoT Hacking](https://hackers-arise.com/category/iot/) - Security flaws in the ever-expanding world of Internet of Things devices. This category explores firmware analysis, default credentials, insecure APIs, wireless protocol attacks (like Zigbee and Bluetooth), and hardware exploitation.
- [Linux](https://hackers-arise.com/category/cybersecurity/linux/) - This category offers comprehensive tutorials on Linux command-line proficiency, system administration, and security configurations. Learn to navigate and manipulate the Linux environment, understand file systems, manage permissions, and utilize powerful tools like Netcat and Docker. Whether you’re a beginner or advancing your skills, these resources provide the knowledge to leverage Linux effectively in penetration testing and cybersecurity operations.
- [Malware Analysis](https://hackers-arise.com/category/defensive-security/malware/) - Explore the inner workings of malicious software used to compromise, control, or cripple systems. This category covers viruses, worms, trojans, rootkits, spyware, fileless malware, and advanced persistent threats (APTs). Learn how malware is created, deployed, and analyzed; along with strategies for detection, reverse engineering, and mitigation.
- [Offensive Security](https://hackers-arise.com/category/offensive-security/)
- [OSINT & Reconnaissance](https://hackers-arise.com/category/osint/) - Master the art of gathering intelligence from publicly available sources. This category explores techniques for tracking digital footprints, harvesting metadata, mapping social networks, geolocating images, and using specialized OSINT tools. Learn how hackers, investigators, and analysts uncover valuable data without ever breaching a system.
- [Pentesting](https://hackers-arise.com/category/pentesting/)
- [Physical Security](https://hackers-arise.com/category/physical-security/) - Learn how hackers breach buildings, not just networks. Delve into the real world of locks, access controls, and human vulnerabilities. This category covers lockpicking, RFID/NFC cloning, badge spoofing, bypass tools, alarm evasion, and social engineering tactics used in physical penetration tests.
- [Python](https://hackers-arise.com/category/python/) - This category offers a hands-on tutorials for Python, focusing on its applications in cybersecurity and hacking. Learn to automate tasks, analyze data, and develop custom tools that enhance penetration testing and security assessments. From understanding Python syntax and data structures to building scripts for network scanning, web scraping, and cryptographic functions, these tutorials provide the foundational skills necessary to leverage Python effectively in the cybersecurity domain.
- [Ransomware](https://hackers-arise.com/category/ransomware/) - Delve into the intricate world of ransomware—a dominant threat in today’s cybersecurity landscape. This category offers comprehensive insights into both offensive and defensive strategies surrounding ransomware. Explore the mechanics of ransomware development, including payload creation and encryption techniques, as well as methods for deploying ransomware in simulated environments. On the defensive front, learn about detection mechanisms, response protocols, and recovery strategies to mitigate ransomware attacks. Stay informed about the latest ransomware variants, threat actor profiles, and real-world case studies to enhance your understanding and preparedness against this pervasive cyber threat.
- [Satellite Hacking](https://hackers-arise.com/category/satellite-hacking/) - Explore the specialized world of exploiting satellite communication systems and infrastructure. This category covers SDR-based signal interception, satellite uplink/downlink manipulation, GPS spoofing, SATCOM vulnerabilities, and space-based reconnaissance tactics. Learn how hackers access, disrupt, or decode satellite system and how to defend the final frontier.
- [SCADA/ICS Hacking](https://hackers-arise.com/category/scada-hacking/) - Explore the vulnerabilities and attack vectors targeting Supervisory Control and Data Acquisition (SCADA) systems that power critical infrastructure. This category covers protocol exploits (Modbus, DNP3, OPC), HMI manipulation, insecure network architectures, firmware reverse engineering, and real-world ICS breach simulations.
- [Scanner](https://hackers-arise.com/category/scanner/)
- [Scapy](https://hackers-arise.com/category/cybersecurity/scapy/)
- [Scripting for Hackers](https://hackers-arise.com/category/getting-started/scripting-for-hackers/) - Although there are many tools available to the aspiring hacker/pentester, to ascend to the upper echelons of the master hacker one must be able to develop their tools. This requires scripting skills.​ In this section, we will look to develop your scripting skills in several different scripting languages including Perl, BASH, Python, PowerShell, and Remote CMD. To start developing and refining your scripting skills, take a look at these tutorials.
- [SDR/Signals Intelligence](https://hackers-arise.com/category/sdr/) - Unlock the power of Software-Defined Radio (SDR) to intercept, analyze, and exploit wireless communications. This category covers radio protocol reverse engineering, signal decoding, replay attacks, GSM interception, satellite signal analysis, and real-world SDR hacking tools like RTL-SDR, HackRF, and GNU Radio. Learn how hackers use radio waves to uncover vulnerabilities invisible to traditional networks.
- [Stingray](https://hackers-arise.com/category/sdr/stingray/)
- [Vulnerabilities & Exploits](https://hackers-arise.com/category/vulnerabilities-exploits/) - This category combines exploit development with practical vulnerability research, guiding you through buffer overflows, memory corruption, privilege escalation, and remote code execution. Learn how to dissect real-world CVEs, write your own exploits in Python, and leverage tools like Metasploit and Exploit-DB. Whether you’re simulating attacks in a lab or preparing for red team engagements, these tutorials offer the technical foundation to exploit weaknesses across operating systems, applications, and embedded systems.
- [White Hat](https://hackers-arise.com/category/white-hat/)
- [Windows](https://hackers-arise.com/category/cybersecurity/windows/) - Dive into the flaws and attack techniques targeting Microsoft Windows systems. This category covers local and remote code execution, privilege escalation, zero-days, kernel exploits, misconfigurations, and abused Windows features like WMI, PowerShell, and Active Directory. Learn how hackers compromise Windows environments and how defenders detect and patch critical vulnerabilities before they’re weaponized.
- [Artificial Intelligence](https://hackers-arise.com/category/cybersecurity/ai/) - Discover how artificial intelligence is reshaping the landscape of offensive and defensive cybersecurity. This category explores AI-driven malware, automated vulnerability discovery, intelligent phishing campaigns, adversarial machine learning, and the use of large language models in red teaming and exploit development. Understand both the risks and the capabilities as AI merges with modern hacking.
- [Bitcoin & Cryptocurrency](https://hackers-arise.com/category/bitcoin-crypto/) - Explore the intersection of digital currencies and cybersecurity in our Bitcoin & Cryptocurrency category. This section delves into the security challenges and threats associated with cryptocurrencies, including theft, fraud, and hacking incidents. Gain insights into how cybercriminals exploit vulnerabilities in blockchain technology, and learn about defensive strategies to protect digital assets. Stay informed about the latest trends, threats, and best practices in securing cryptocurrency transactions and wallets.
- [Bluetooth Hacking](https://hackers-arise.com/category/bluetooth/)
- [Bug Bounty](https://hackers-arise.com/category/bug-bounty/) - Embark on a journey into the world of bug bounty hunting, where ethical hackers identify and report security vulnerabilities to organizations in exchange for rewards. This category provides comprehensive resources, including tutorials on web application testing, reconnaissance techniques, and exploitation methods. Learn how to navigate popular platforms like HackerOne and Bugcrowd, craft effective vulnerability reports, and utilize tools such as Burp Suite and ParamSpider. Whether you’re a novice seeking to understand the basics or an experienced hacker aiming to refine your skills, our content equips you with the knowledge to participate in bug bounty programs confidently and responsibly.
- [Cellphones](https://hackers-arise.com/category/sdr/cellphones/)
- [Cryptography & Encryption](https://hackers-arise.com/category/getting-started/cryptography/) - Dive into the principles, algorithms, and attack vectors behind modern encryption and secure communication. This category covers symmetric and asymmetric cryptography, hashing, digital signatures, key exchange protocols, and real-world cryptographic failures. Learn how cryptography protects data—and how skilled attackers can break or bypass it.
- [Cyber Threat Intelligence](https://hackers-arise.com/category/cyber-threat-intelligence/)
- [Cyberwar](https://hackers-arise.com/category/cyberwar/)
- [Data Dumps](https://hackers-arise.com/category/data-dumps/)
- [FemtoCell](https://hackers-arise.com/category/sdr/femtocell/)
- [GPS](https://hackers-arise.com/category/sdr/gps/)
- [Hacking](https://hackers-arise.com/category/hacking/)
- [Metasploit](https://hackers-arise.com/category/cybersecurity/metasploit/)
- [Network Basics for Hackers](https://hackers-arise.com/category/getting-started/network-basics/) - Learn the networking fundamentals every hacker needs to know. This category covers IP addressing, subnets, ports, protocols (TCP, UDP, ICMP), DNS, routing, packet analysis, and the OSI model—all from a hacker’s perspective. Understand how data flows through networks and how attackers intercept, manipulate, and exploit it.
- [Ukraine](https://hackers-arise.com/category/ukraine/) - Track the evolving digital battlefield between Ukraine and Russia, where cyberattacks play a central role in modern warfare. This category covers DDoS campaigns, critical infrastructure attacks, disinformation operations, hacktivist movements, and Russian APT activity. Analyze real-world incidents, tools, and tactics shaping one of the most high-profile cyber conflicts in history.
- [VPN](https://hackers-arise.com/category/vpn/) - VPNs were marketed as impenetrable fortresses, a clean tunnel shielding your traffic from prying eyes. The reality? Those tunnels leak, crack, and sometimes collapse altogether. This category exposes the soft underbelly of Virtual Private Networks.
- [Database Hacking](https://hackers-arise.com/category/database-hacking/) - Delve into the techniques and tools used to exploit databases and extract sensitive information. This category covers SQL injection, privilege escalation, misconfigured database servers, data exfiltration, credential dumping, and post-exploitation tactics across platforms like MySQL, MSSQL, Oracle, and MongoDB. Understand how attackers breach data and how to lock it down.
- [Evading Anti-Virus](https://hackers-arise.com/category/anti-virus/) - Explore the tactics and techniques used to bypass antivirus and endpoint protection systems. This category covers payload obfuscation, packers, crypters, process injection, signature evasion, and living-off-the-land binaries (LOLBins). Learn how hackers avoid detection and how red teamers simulate real-world AV evasion to test defenses.
- [Vulnerability Scanning](https://hackers-arise.com/category/vulnerability-scanning/) - Learn how to identify and assess security weaknesses across systems, networks, and applications. This category covers automated scanning tools, manual verification techniques, CVE analysis, misconfiguration discovery, and reporting best practices. Understand how professionals scan for vulnerabilities
- [IP Camera Hacking](https://hackers-arise.com/category/ip-camera-hacking/) - Explore the techniques used to exploit, access, and manipulate security cameras, webcams, and IP-based video systems. This category covers default credential exploits, RTSP stream hijacking, firmware vulnerabilities, Wi-Fi camera attacks, and surveillance evasion tactics. Learn how hackers compromise camera systems and how to defend against them.
- [Mr. Robot Hacks](https://hackers-arise.com/category/mr-robot/) - Break down the real hacking techniques featured in Mr. Robot, the most technically accurate cyber-thriller ever aired. This category analyzes Elliot’s use of tools like Kali Linux, Metasploit, Social Engineering Toolkit, RFID cloning, and Python scripting. Learn how the show’s hacks mirror real-world exploits used by pentesters and hackers alike.
- [Getting Started](https://hackers-arise.com/category/getting-started/) - Begin your journey into hacking and cybersecurity with core knowledge and essential skills. This category brings together foundational topics like hacking fundamentals, Linux basics, networking concepts, must-have tools, critical techniques, and the hacker mindset. Whether you’re a complete beginner or building your base, start here to learn how hackers think, operate, and grow.
- [Linux Basics for Hackers](https://hackers-arise.com/category/getting-started/linux-basics/) - Build a strong foundation in Linux; the core operating system used in hacking, penetration testing, and cybersecurity. This category covers essential commands, file system navigation, user and permission management, scripting, service enumeration, and practical techniques for offensive security. Learn how to control Linux like a hacker.
- [Python Basics for Hackers](https://hackers-arise.com/category/getting-started/python-basics/) - Learn how to use Python as a powerful hacking tool. This category covers essential Python concepts including variables, loops, functions, file handling, and libraries; all tailored specifically for cybersecurity applications. Explore how hackers use Python to automate tasks, write exploits, build scanners, and analyze data. No prior coding experience required, just a hacker’s mindset.
- [Metasploit Basics for Hackers](https://hackers-arise.com/category/getting-started/metasploit-basics/) - Get hands-on with Metasploit, the most widely used exploitation framework in ethical hacking. This category covers core Metasploit concepts including modules, payloads, exploits, auxiliary tools, and post-exploitation techniques. Learn how to scan targets, launch attacks, gain access, and maintain control within a structured, beginner-friendly environment built for hackers.
- [Network Forensics](https://hackers-arise.com/category/defensive-security/network-forensics/) - Explore the tools, techniques, and methodologies used to investigate and analyze network-based evidence in cybersecurity incidents. This category covers packet capture, log analysis, session reconstruction, intrusion tracing, protocol decoding, and forensic traffic analysis using tools like Wireshark, Zeek, and tcpdump. Learn how professionals detect breaches, trace attackers, and uncover what really happened across the network.
- [Hacking Fundamentals](https://hackers-arise.com/category/getting-started/hacking-fundamentals/) - Start your cybersecurity journey with the core knowledge every hacker needs. This category covers the essential skills of a professional hacker, must-have tools for reconnaissance and exploitation, and the mindset required to think like a hacker. Build a strong foundation in hacking theory, methodology, and practical readiness for real-world scenarios.
- [Mobile Hacking](https://hackers-arise.com/category/mobile-hacking/) - Welcome to the world of cell phone hacking, where cybersecurity meets mobile technology. This section covers tools, techniques, and tactics used by hackers to exploit, secure, and analyze smartphones. Learn how to bypass mobile security features, deploy backdoors, and uncover vulnerabilities in modern mobile operating systems. Whether you’re testing mobile apps, analyzing wireless signals, or crafting payloads, these tutorials provide the technical foundation to understand and hack mobile platforms.
- [Vehicle & Automotive Hacking](https://hackers-arise.com/category/vehicle-hacking/) - Unlock the secrets of modern automotive systems with these in-depth tutorials on vehicle and automotive hacking. This category explores real-world techniques used by hackers to analyze, reverse-engineer, and exploit the digital systems inside today’s cars. Learn how to work with CAN bus protocols using tools like SocketCAN and can-utils, reverse-engineer signal patterns, and test vulnerabilities in keyless entry systems. Whether you’re targeting infotainment systems, electronic control units (ECUs), or wireless attack surfaces, these articles provide hands-on guidance on automotive cybersecurity, penetration testing, and embedded systems security.
- [Network Exploitation](https://hackers-arise.com/category/network-exploitation/)
- [Wi-Fi Hacking](https://hackers-arise.com/category/network-exploitation/wi-fi-hacking/)
- [Man-in-the-Middle Attacks](https://hackers-arise.com/category/network-exploitation/mitm/)
- [Web Application Exploitation](https://hackers-arise.com/category/offensive-security/web-app/)
- [Hardware Hacking](https://hackers-arise.com/category/hardware-hacking/)
- [Linux Firewalls](https://hackers-arise.com/category/cybersecurity/linux/linux-firewalls/)
- [Snort](https://hackers-arise.com/category/cybersecurity/snort/)
- [Vulnerabilities](https://hackers-arise.com/category/vulnerabilities/)
- [Scripting](https://hackers-arise.com/category/scripting/)
- [logic](https://hackers-arise.com/category/logic/)
- [Password Cracking](https://hackers-arise.com/category/password-cracking/)
- [Mobile Forensics](https://hackers-arise.com/category/mobile-forensics/)
- [Command and Control (C2)](https://hackers-arise.com/category/command-and-control-c2/)
- [Powershell](https://hackers-arise.com/category/powershell/)
- [Supply Chain Attacks](https://hackers-arise.com/category/supply-chain-attacks/)
- [Denial of Service (DoS)](https://hackers-arise.com/category/denial-of-service-dos/)
- [ARM](https://hackers-arise.com/category/arm/)
- [Raspberry Pi](https://hackers-arise.com/category/raspberry-pi/)
- [Career](https://hackers-arise.com/category/career/)
- [CUDA](https://hackers-arise.com/category/cuda/)
- [Smart Home](https://hackers-arise.com/category/smart-home/)
- [Off-Grid Communications](https://hackers-arise.com/category/off-grid-communications/)

## Tags

- [CyberSecurity](https://hackers-arise.com/tag/cybersecurity/)
- [OSINT](https://hackers-arise.com/tag/osint/)
- [cyberwarrior](https://hackers-arise.com/tag/cyberwarrior/)
- [infosec](https://hackers-arise.com/tag/infosec/)
- [cyberwar](https://hackers-arise.com/tag/cyberwar/)
- [bug bounty](https://hackers-arise.com/tag/bug-bounty/)
- [HACKING](https://hackers-arise.com/tag/hacking/)
- [CISSP](https://hackers-arise.com/tag/cissp/)
- [BOOTCAMP](https://hackers-arise.com/tag/bootcamp/)
- [linux](https://hackers-arise.com/tag/linux/)
- [bash](https://hackers-arise.com/tag/bash/)
- [reconnaissance](https://hackers-arise.com/tag/reconnaissance/)
- [LLM](https://hackers-arise.com/tag/llm/)
- [AI](https://hackers-arise.com/tag/ai/)
- [hack](https://hackers-arise.com/tag/hack/)
- [hacking AI](https://hackers-arise.com/tag/hacking-ai/)
- [ukraine](https://hackers-arise.com/tag/ukraine/)
- [impacket](https://hackers-arise.com/tag/impacket/)
- [PowerShell for Hackers](https://hackers-arise.com/tag/powershell-for-hackers/)
- [PowerShell AD enumeration](https://hackers-arise.com/tag/powershell-ad-enumeration/)
- [Windows domain enumeration](https://hackers-arise.com/tag/windows-domain-enumeration/)
- [Sliver framework](https://hackers-arise.com/tag/sliver-framework/)
- [Sliver C2](https://hackers-arise.com/tag/sliver-c2/)
- [command-and-control](https://hackers-arise.com/tag/command-and-control/)
- [DACL manipulation](https://hackers-arise.com/tag/dacl-manipulation/)
- [DACL abuse](https://hackers-arise.com/tag/dacl-abuse/)
- [C2](https://hackers-arise.com/tag/c2/)
- [Active Directory](https://hackers-arise.com/tag/active-directory/)
- [AD abuse](https://hackers-arise.com/tag/ad-abuse/)
- [Kerberoasting](https://hackers-arise.com/tag/kerberoasting/)
- [Kerberos attacks](https://hackers-arise.com/tag/kerberos-attacks/)
- [post-exploitation](https://hackers-arise.com/tag/post-exploitation/)
- [lateral movement](https://hackers-arise.com/tag/lateral-movement/)
- [red team tools](https://hackers-arise.com/tag/red-team-tools/)
- [cyberwarfare](https://hackers-arise.com/tag/cyberwarfare/)
- [offensive cyber](https://hackers-arise.com/tag/offensive-cyber/)
- [nation-state operations](https://hackers-arise.com/tag/nation-state-operations/)
- [Ukraine-Russia conflict](https://hackers-arise.com/tag/ukraine-russia-conflict/)
- [cyber defense](https://hackers-arise.com/tag/cyber-defense/)
- [incident response](https://hackers-arise.com/tag/incident-response/)
- [threat intelligence](https://hackers-arise.com/tag/threat-intelligence/)
- [malware analysis](https://hackers-arise.com/tag/malware-analysis/)
- [privilege escalation](https://hackers-arise.com/tag/privilege-escalation/)
- [persistence](https://hackers-arise.com/tag/persistence/)
- [access control](https://hackers-arise.com/tag/access-control/)
- [security operations](https://hackers-arise.com/tag/security-operations/)
- [blue team](https://hackers-arise.com/tag/blue-team/)
- [attribution](https://hackers-arise.com/tag/attribution/)
- [threat actor](https://hackers-arise.com/tag/threat-actor/)
- [operational security](https://hackers-arise.com/tag/operational-security/)
- [information warfare](https://hackers-arise.com/tag/information-warfare/)
- [data-exfiltration](https://hackers-arise.com/tag/data-exfiltration/)
- [incident-response](https://hackers-arise.com/tag/incident-response-2/)
- [offensive-security](https://hackers-arise.com/tag/offensive-security/)
- [GitLab scanning](https://hackers-arise.com/tag/gitlab-scanning/)
- [DevSecOps](https://hackers-arise.com/tag/devsecops/)
- [regex scanning](https://hackers-arise.com/tag/regex-scanning/)
- [GitHub scanning](https://hackers-arise.com/tag/github-scanning/)
- [passwords](https://hackers-arise.com/tag/passwords/)
- [verified-secrets](https://hackers-arise.com/tag/verified-secrets/)
- [credential leakage](https://hackers-arise.com/tag/credential-leakage/)
- [API keys](https://hackers-arise.com/tag/api-keys/)
- [tokens](https://hackers-arise.com/tag/tokens/)
- [.git exposure](https://hackers-arise.com/tag/git-exposure/)
- [git-dumper](https://hackers-arise.com/tag/git-dumper/)
- [secret scanning](https://hackers-arise.com/tag/secret-scanning/)
- [git secrets](https://hackers-arise.com/tag/git-secrets/)
- [TruffleHog](https://hackers-arise.com/tag/trufflehog/)
- [git history](https://hackers-arise.com/tag/git-history/)
- [municipal cyberattack](https://hackers-arise.com/tag/municipal-cyberattack/)
- [Dispatch Service](https://hackers-arise.com/tag/dispatch-service/)
- [wiper attack](https://hackers-arise.com/tag/wiper-attack/)
- [city infrastructure](https://hackers-arise.com/tag/city-infrastructure/)
- [SharpHound](https://hackers-arise.com/tag/sharphound/)
- [service-disruption](https://hackers-arise.com/tag/service-disruption/)
- [ticketing-system destruction](https://hackers-arise.com/tag/ticketing-system-destruction/)
- [MikroTik compromise](https://hackers-arise.com/tag/mikrotik-compromise/)
- [emergency-services outage](https://hackers-arise.com/tag/emergency-services-outage/)
- [BloodHound](https://hackers-arise.com/tag/bloodhound/)
- [telephony outage](https://hackers-arise.com/tag/telephony-outage/)
- [supply-chain impact](https://hackers-arise.com/tag/supply-chain-impact/)
- [civic systems](https://hackers-arise.com/tag/civic-systems/)
- [critical-infrastructure](https://hackers-arise.com/tag/critical-infrastructure/)
- [linux persistence](https://hackers-arise.com/tag/linux-persistence/)
- [persistence techniques](https://hackers-arise.com/tag/persistence-techniques/)
- [basic linux persistence](https://hackers-arise.com/tag/basic-linux-persistence/)
- [linux hacking](https://hackers-arise.com/tag/linux-hacking/)
- [cronjob persistence](https://hackers-arise.com/tag/cronjob-persistence/)
- [post exploitation linux](https://hackers-arise.com/tag/post-exploitation-linux/)
- [cyber security persistence](https://hackers-arise.com/tag/cyber-security-persistence/)
- [bashrc persistence](https://hackers-arise.com/tag/bashrc-persistence/)
- [maintaining access linux](https://hackers-arise.com/tag/maintaining-access-linux/)
- [linux red team](https://hackers-arise.com/tag/linux-red-team/)
- [linux persistence methods](https://hackers-arise.com/tag/linux-persistence-methods/)
- [linux penetration testing](https://hackers-arise.com/tag/linux-penetration-testing/)
- [systemd persistence](https://hackers-arise.com/tag/systemd-persistence/)
- [linux persistence techniques](https://hackers-arise.com/tag/linux-persistence-techniques/)
- [cyber war](https://hackers-arise.com/tag/cyber-war/)
- [linux privilege escalation persistence](https://hackers-arise.com/tag/linux-privilege-escalation-persistence/)
- [linux security blog](https://hackers-arise.com/tag/linux-security-blog/)
- [linux reverse shell persistence](https://hackers-arise.com/tag/linux-reverse-shell-persistence/)
- [linux persistence guide](https://hackers-arise.com/tag/linux-persistence-guide/)
- [linux hacking tutorial](https://hackers-arise.com/tag/linux-hacking-tutorial/)
- [advanced linux persistence](https://hackers-arise.com/tag/advanced-linux-persistence/)
- [in-memory persistence](https://hackers-arise.com/tag/in-memory-persistence/)
- [linux persistence advanced](https://hackers-arise.com/tag/linux-persistence-advanced/)
- [configuration persistence](https://hackers-arise.com/tag/configuration-persistence/)
- [rc.local persistence](https://hackers-arise.com/tag/rc-local-persistence/)
- [gsocket tunneling](https://hackers-arise.com/tag/gsocket-tunneling/)
- [LD_PRELOAD techniques](https://hackers-arise.com/tag/ld_preload-techniques/)
- [stealthy backdoors](https://hackers-arise.com/tag/stealthy-backdoors/)
- [covert linux access](https://hackers-arise.com/tag/covert-linux-access/)
- [linux post-exploitation](https://hackers-arise.com/tag/linux-post-exploitation/)
- [post-exploitation techniques](https://hackers-arise.com/tag/post-exploitation-techniques/)
- [persistence and evasion](https://hackers-arise.com/tag/persistence-and-evasion/)
- [persistence guide linux](https://hackers-arise.com/tag/persistence-guide-linux/)
- [memory-only payloads](https://hackers-arise.com/tag/memory-only-payloads/)
- [os-configuration abuse](https://hackers-arise.com/tag/os-configuration-abuse/)
- [tunneling for persistence](https://hackers-arise.com/tag/tunneling-for-persistence/)
- [stealth persistence methods](https://hackers-arise.com/tag/stealth-persistence-methods/)
- [long-term access linux](https://hackers-arise.com/tag/long-term-access-linux/)
- [Windows persistence](https://hackers-arise.com/tag/windows-persistence/)
- [survival strategies](https://hackers-arise.com/tag/survival-strategies/)
- [reverse shell loops](https://hackers-arise.com/tag/reverse-shell-loops/)
- [autostart persistence](https://hackers-arise.com/tag/autostart-persistence/)
- [registry Run keys](https://hackers-arise.com/tag/registry-run-keys/)
- [scheduled tasks](https://hackers-arise.com/tag/scheduled-tasks/)
- [Windows services](https://hackers-arise.com/tag/windows-services/)
- [foothold maintenance](https://hackers-arise.com/tag/foothold-maintenance/)
- [command execution](https://hackers-arise.com/tag/command-execution/)
- [red team tactics](https://hackers-arise.com/tag/red-team-tactics/)
- [cyber conflict](https://hackers-arise.com/tag/cyber-conflict/)
- [persistence mechanisms](https://hackers-arise.com/tag/persistence-mechanisms/)
- [offensive security](https://hackers-arise.com/tag/offensive-security-2/)
- [system backdoors](https://hackers-arise.com/tag/system-backdoors/)
- [operational tradecraft](https://hackers-arise.com/tag/operational-tradecraft/)
- [malware techniques](https://hackers-arise.com/tag/malware-techniques/)
- [long-term access](https://hackers-arise.com/tag/long-term-access/)
- [stealth persistence](https://hackers-arise.com/tag/stealth-persistence/)
- [adversary tactics](https://hackers-arise.com/tag/adversary-tactics/)
- [configuration backdoors](https://hackers-arise.com/tag/configuration-backdoors/)
- [registry hijacking](https://hackers-arise.com/tag/registry-hijacking/)
- [hidden accounts](https://hackers-arise.com/tag/hidden-accounts/)
- [IFEO abuse](https://hackers-arise.com/tag/ifeo-abuse/)
- [GFlags persistence](https://hackers-arise.com/tag/gflags-persistence/)
- [SilentProcessExit](https://hackers-arise.com/tag/silentprocessexit/)
- [RDP backdoor](https://hackers-arise.com/tag/rdp-backdoor/)
- [WMI event subscriptions](https://hackers-arise.com/tag/wmi-event-subscriptions/)
- [stealth access](https://hackers-arise.com/tag/stealth-access/)
- [advanced persistence](https://hackers-arise.com/tag/advanced-persistence/)
- [system manipulation](https://hackers-arise.com/tag/system-manipulation/)
- [admin abuse](https://hackers-arise.com/tag/admin-abuse/)
- [LSASS persistence](https://hackers-arise.com/tag/lsass-persistence/)
- [AppInit DLL injection](https://hackers-arise.com/tag/appinit-dll-injection/)
- [registry persistence](https://hackers-arise.com/tag/registry-persistence/)
- [Winlogon hijack](https://hackers-arise.com/tag/winlogon-hijack/)
- [Office registry keys](https://hackers-arise.com/tag/office-registry-keys/)
- [reboot survival](https://hackers-arise.com/tag/reboot-survival/)
- [HKCU persistence](https://hackers-arise.com/tag/hkcu-persistence/)
- [privilege abuse](https://hackers-arise.com/tag/privilege-abuse/)
- [stealth backdoors](https://hackers-arise.com/tag/stealth-backdoors/)
- [PowerShell](https://hackers-arise.com/tag/powershell/)
- [Cyber Warfare](https://hackers-arise.com/tag/cyber-warfare/)
- [Windows Exploitation](https://hackers-arise.com/tag/windows-exploitation/)
- [Resource Exhaustion](https://hackers-arise.com/tag/resource-exhaustion/)
- [Blue Screen](https://hackers-arise.com/tag/blue-screen/)
- [MBR Corruption](https://hackers-arise.com/tag/mbr-corruption/)
- [Sabotage](https://hackers-arise.com/tag/sabotage/)
- [Red Team](https://hackers-arise.com/tag/red-team/)
- [Wipers](https://hackers-arise.com/tag/wipers/)
- [Cyber Mayhem](https://hackers-arise.com/tag/cyber-mayhem/)
- [SSH](https://hackers-arise.com/tag/ssh/)
- [PAM](https://hackers-arise.com/tag/pam/)
- [Credential Harvesting](https://hackers-arise.com/tag/credential-harvesting/)
- [Digital Forensics](https://hackers-arise.com/tag/digital-forensics/)
- [Cybercrime](https://hackers-arise.com/tag/cybercrime/)
- [Evidence Collection](https://hackers-arise.com/tag/evidence-collection/)
- [Forensic Imaging](https://hackers-arise.com/tag/forensic-imaging/)
- [Memory Forensics](https://hackers-arise.com/tag/memory-forensics/)
- [Timeline Analysis](https://hackers-arise.com/tag/timeline-analysis/)
- [Network Forensics](https://hackers-arise.com/tag/network-forensics/)
- [Investigation Tools](https://hackers-arise.com/tag/investigation-tools/)
- [brute-force](https://hackers-arise.com/tag/brute-force/)
- [Obfuscation](https://hackers-arise.com/tag/obfuscation/)
- [Detection Evasion](https://hackers-arise.com/tag/detection-evasion/)
- [SIEM Bypass](https://hackers-arise.com/tag/siem-bypass/)
- [psobf](https://hackers-arise.com/tag/psobf/)
- [Script Obfuscator](https://hackers-arise.com/tag/script-obfuscator/)
- [Argfuscator](https://hackers-arise.com/tag/argfuscator/)
- [Reverse Shells](https://hackers-arise.com/tag/reverse-shells/)
- [Command Hiding](https://hackers-arise.com/tag/command-hiding/)
- [autorun](https://hackers-arise.com/tag/autorun/)
- [Malicious USB](https://hackers-arise.com/tag/malicious-usb/)
- [PDF malware](https://hackers-arise.com/tag/pdf-malware/)
- [USB analysis](https://hackers-arise.com/tag/usb-analysis/)
- [AnyRun](https://hackers-arise.com/tag/anyrun/)
- [Hybrid Analysis](https://hackers-arise.com/tag/hybrid-analysis/)
- [JavaScript payloads](https://hackers-arise.com/tag/javascript-payloads/)
- [dynamic analysis](https://hackers-arise.com/tag/dynamic-analysis/)
- [droppers](https://hackers-arise.com/tag/droppers/)
- [malware sandboxing](https://hackers-arise.com/tag/malware-sandboxing/)
- [static analysis](https://hackers-arise.com/tag/static-analysis/)
- [threat hunting](https://hackers-arise.com/tag/threat-hunting/)
- [indicators of compromise](https://hackers-arise.com/tag/indicators-of-compromise/)
- [forensic tools](https://hackers-arise.com/tag/forensic-tools/)
- [USB forensics](https://hackers-arise.com/tag/usb-forensics/)
- [user-behaviour exploitation](https://hackers-arise.com/tag/user-behaviour-exploitation/)
- [Quantum Cryptography](https://hackers-arise.com/tag/quantum-cryptography/)
- [survival](https://hackers-arise.com/tag/survival/)
- [stealth](https://hackers-arise.com/tag/stealth/)
- [Windows recon](https://hackers-arise.com/tag/windows-recon/)
- [host discovery](https://hackers-arise.com/tag/host-discovery/)
- [systeminfo](https://hackers-arise.com/tag/systeminfo/)
- [network enumeration](https://hackers-arise.com/tag/network-enumeration/)
- [net commands](https://hackers-arise.com/tag/net-commands/)
- [ARP](https://hackers-arise.com/tag/arp/)
- [known_hosts](https://hackers-arise.com/tag/known_hosts/)
- [firewall-audit](https://hackers-arise.com/tag/firewall-audit/)
- [SIEM-awareness](https://hackers-arise.com/tag/siem-awareness/)
- [antivirus-detection](https://hackers-arise.com/tag/antivirus-detection/)
- [lateral-movement](https://hackers-arise.com/tag/lateral-movement-2/)
- [credential-harvesting](https://hackers-arise.com/tag/credential-harvesting-2/)
- [red-team](https://hackers-arise.com/tag/red-team-2/)
- [OPSEC](https://hackers-arise.com/tag/opsec/)
- [watchman](https://hackers-arise.com/tag/watchman/)
- [user-activity-detection](https://hackers-arise.com/tag/user-activity-detection/)
- [play-sound](https://hackers-arise.com/tag/play-sound/)
- [wallpaper-change](https://hackers-arise.com/tag/wallpaper-change/)
- [base64-encoding](https://hackers-arise.com/tag/base64-encoding/)
- [ps2bat](https://hackers-arise.com/tag/ps2bat/)
- [autostart](https://hackers-arise.com/tag/autostart/)
- [file-conversion](https://hackers-arise.com/tag/file-conversion/)
- [enumerator](https://hackers-arise.com/tag/enumerator/)
- [in-memory-execution](https://hackers-arise.com/tag/in-memory-execution/)
- [command-disguise](https://hackers-arise.com/tag/command-disguise/)
- [scripting-tools](https://hackers-arise.com/tag/scripting-tools/)
- [software-defined-radio](https://hackers-arise.com/tag/software-defined-radio/)
- [SDR](https://hackers-arise.com/tag/sdr/)
- [ADS-B](https://hackers-arise.com/tag/ads-b/)
- [Mode-S](https://hackers-arise.com/tag/mode-s/)
- [aviation-transponder](https://hackers-arise.com/tag/aviation-transponder/)
- [BladeRF](https://hackers-arise.com/tag/bladerf/)
- [dump1090](https://hackers-arise.com/tag/dump1090/)
- [RTL-SDR](https://hackers-arise.com/tag/rtl-sdr/)
- [antenna-design](https://hackers-arise.com/tag/antenna-design/)
- [1090MHz](https://hackers-arise.com/tag/1090mhz/)
- [air-traffic-monitoring](https://hackers-arise.com/tag/air-traffic-monitoring/)
- [signal-decoding](https://hackers-arise.com/tag/signal-decoding/)
- [PPM](https://hackers-arise.com/tag/ppm/)
- [flight-tracking](https://hackers-arise.com/tag/flight-tracking/)
- [CPR](https://hackers-arise.com/tag/cpr/)
- [compressed-position-reporting](https://hackers-arise.com/tag/compressed-position-reporting/)
- [radio-signals](https://hackers-arise.com/tag/radio-signals/)
- [gqrx](https://hackers-arise.com/tag/gqrx/)
- [spectrum-analysis](https://hackers-arise.com/tag/spectrum-analysis/)
- [Flightradar24](https://hackers-arise.com/tag/flightradar24/)
- [SDRsharp](https://hackers-arise.com/tag/sdrsharp/)
- [wireless-hacking](https://hackers-arise.com/tag/wireless-hacking/)
- [aviation-security](https://hackers-arise.com/tag/aviation-security/)
- [passive-surveillance](https://hackers-arise.com/tag/passive-surveillance/)
- [open-source-tools](https://hackers-arise.com/tag/open-source-tools/)
- [Get-ADUser](https://hackers-arise.com/tag/get-aduser/)
- [AD recon](https://hackers-arise.com/tag/ad-recon/)
- [stealthy-recon](https://hackers-arise.com/tag/stealthy-recon/)
- [dsquery](https://hackers-arise.com/tag/dsquery/)
- [admin-workstation](https://hackers-arise.com/tag/admin-workstation/)
- [password-not-required](https://hackers-arise.com/tag/password-not-required/)
- [remote-execution](https://hackers-arise.com/tag/remote-execution/)
- [module-based-recon](https://hackers-arise.com/tag/module-based-recon/)
- [domain-controllers](https://hackers-arise.com/tag/domain-controllers/)
- [domain-enumeration](https://hackers-arise.com/tag/domain-enumeration/)
- [Invoke-Command](https://hackers-arise.com/tag/invoke-command/)
- [Get-Help](https://hackers-arise.com/tag/get-help/)
- [LDAP queries](https://hackers-arise.com/tag/ldap-queries/)
- [Mimikatz](https://hackers-arise.com/tag/mimikatz/)
- [AMSI bypass](https://hackers-arise.com/tag/amsi-bypass/)
- [PowerUp](https://hackers-arise.com/tag/powerup/)
- [credential dumping](https://hackers-arise.com/tag/credential-dumping/)
- [NTDS](https://hackers-arise.com/tag/ntds/)
- [SAM](https://hackers-arise.com/tag/sam/)
- [Evil-WinRM](https://hackers-arise.com/tag/evil-winrm/)
- [domain takeover](https://hackers-arise.com/tag/domain-takeover/)
- [unquoted-service-path](https://hackers-arise.com/tag/unquoted-service-path/)
- [automation](https://hackers-arise.com/tag/automation/)
- [Ransomware](https://hackers-arise.com/tag/ransomware/)
- [RAM analysis](https://hackers-arise.com/tag/ram-analysis/)
- [Volatility3](https://hackers-arise.com/tag/volatility3/)
- [process forensics](https://hackers-arise.com/tag/process-forensics/)
- [malfind](https://hackers-arise.com/tag/malfind/)
- [netscan](https://hackers-arise.com/tag/netscan/)
- [process-tree](https://hackers-arise.com/tag/process-tree/)
- [handles](https://hackers-arise.com/tag/handles/)
- [command-line forensics](https://hackers-arise.com/tag/command-line-forensics/)
- [malware hashing](https://hackers-arise.com/tag/malware-hashing/)
- [IOCs](https://hackers-arise.com/tag/iocs/)
- [in-memory extraction](https://hackers-arise.com/tag/in-memory-extraction/)
- [chain-of-custody](https://hackers-arise.com/tag/chain-of-custody/)
- [sandboxing](https://hackers-arise.com/tag/sandboxing/)
- [volatile-data](https://hackers-arise.com/tag/volatile-data/)
- [WannaCry](https://hackers-arise.com/tag/wannacry/)
- [artifact preservation](https://hackers-arise.com/tag/artifact-preservation/)
- [Volatility](https://hackers-arise.com/tag/volatility/)
- [memory analysis](https://hackers-arise.com/tag/memory-analysis/)
- [RAM forensics](https://hackers-arise.com/tag/ram-forensics/)
- [pstree](https://hackers-arise.com/tag/pstree/)
- [psxview](https://hackers-arise.com/tag/psxview/)
- [pslist](https://hackers-arise.com/tag/pslist/)
- [dumpfiles](https://hackers-arise.com/tag/dumpfiles/)
- [YARA rules](https://hackers-arise.com/tag/yara-rules/)
- [memmap](https://hackers-arise.com/tag/memmap/)
- [Volatility2](https://hackers-arise.com/tag/volatility2/)
- [DLL analysis](https://hackers-arise.com/tag/dll-analysis/)
- [svcscan](https://hackers-arise.com/tag/svcscan/)
- [forensic-tools](https://hackers-arise.com/tag/forensic-tools-2/)
- [evidence-preservation](https://hackers-arise.com/tag/evidence-preservation/)
- [IOC extraction](https://hackers-arise.com/tag/ioc-extraction/)
- [shell-migration](https://hackers-arise.com/tag/shell-migration/)
- [cmdlets](https://hackers-arise.com/tag/cmdlets/)
- [Get-ChildItem](https://hackers-arise.com/tag/get-childitem/)
- [piping](https://hackers-arise.com/tag/piping/)
- [aliases](https://hackers-arise.com/tag/aliases/)
- [scripting](https://hackers-arise.com/tag/scripting/)
- [Test-Connection](https://hackers-arise.com/tag/test-connection/)
- [file-ops](https://hackers-arise.com/tag/file-ops/)
- [Select-String](https://hackers-arise.com/tag/select-string/)
- [text-processing](https://hackers-arise.com/tag/text-processing/)
- [Windows](https://hackers-arise.com/tag/windows/)
- [profile](https://hackers-arise.com/tag/profile/)
- [shell-one-liners](https://hackers-arise.com/tag/shell-one-liners/)
- [execution-policy](https://hackers-arise.com/tag/execution-policy/)
- [shell-tooling](https://hackers-arise.com/tag/shell-tooling/)
- [SCADA](https://hackers-arise.com/tag/scada/)
- [forensics](https://hackers-arise.com/tag/forensics/)
- [ICS](https://hackers-arise.com/tag/ics/)
- [PLC](https://hackers-arise.com/tag/plc/)
- [RTU](https://hackers-arise.com/tag/rtu/)
- [industrial-networks](https://hackers-arise.com/tag/industrial-networks/)
- [HMI](https://hackers-arise.com/tag/hmi/)
- [Modbus](https://hackers-arise.com/tag/modbus/)
- [OT-security](https://hackers-arise.com/tag/ot-security/)
- [DNP3](https://hackers-arise.com/tag/dnp3/)
- [malware-analysis](https://hackers-arise.com/tag/malware-analysis-2/)
- [device-forensics](https://hackers-arise.com/tag/device-forensics/)
- [network-forensics](https://hackers-arise.com/tag/network-forensics-2/)
- [cyberattacks](https://hackers-arise.com/tag/cyberattacks/)
- [live-acquisition](https://hackers-arise.com/tag/live-acquisition/)
- [packet-capture](https://hackers-arise.com/tag/packet-capture/)
- [segmentation](https://hackers-arise.com/tag/segmentation/)
- [forensic-tooling](https://hackers-arise.com/tag/forensic-tooling/)
- [remote-code-execution](https://hackers-arise.com/tag/remote-code-execution/)
- [rce_api_extension](https://hackers-arise.com/tag/rce_api_extension/)
- [timeline](https://hackers-arise.com/tag/timeline/)
- [SSH authorized_keys](https://hackers-arise.com/tag/ssh-authorized_keys/)
- [PCAP analysis](https://hackers-arise.com/tag/pcap-analysis/)
- [log-correlation](https://hackers-arise.com/tag/log-correlation/)
- [HTTP stream analysis](https://hackers-arise.com/tag/http-stream-analysis/)
- [credential-stuffing](https://hackers-arise.com/tag/credential-stuffing/)
- [Wireshark](https://hackers-arise.com/tag/wireshark/)
- [Nmap](https://hackers-arise.com/tag/nmap/)
- [CVE-2022-25237](https://hackers-arise.com/tag/cve-2022-25237/)
- [Bonitasoft](https://hackers-arise.com/tag/bonitasoft/)
- [IDS/IPS](https://hackers-arise.com/tag/ids-ips/)
- [threat-hunting](https://hackers-arise.com/tag/threat-hunting-2/)
- [detection](https://hackers-arise.com/tag/detection/)
- [evasion](https://hackers-arise.com/tag/evasion/)
- [ScriptBlockLogging](https://hackers-arise.com/tag/scriptblocklogging/)
- [Event ID 4104](https://hackers-arise.com/tag/event-id-4104/)
- [Windows Event IDs](https://hackers-arise.com/tag/windows-event-ids/)
- [AMSI](https://hackers-arise.com/tag/amsi/)
- [process-monitoring](https://hackers-arise.com/tag/process-monitoring/)
- [Event ID 400](https://hackers-arise.com/tag/event-id-400/)
- [Sysmon](https://hackers-arise.com/tag/sysmon/)
- [command-monitoring](https://hackers-arise.com/tag/command-monitoring/)
- [EDR](https://hackers-arise.com/tag/edr/)
- [encodedcommand](https://hackers-arise.com/tag/encodedcommand/)
- [network-monitoring](https://hackers-arise.com/tag/network-monitoring/)
- [living-off-the-land](https://hackers-arise.com/tag/living-off-the-land/)
- [log-tampering](https://hackers-arise.com/tag/log-tampering/)
- [net1](https://hackers-arise.com/tag/net1/)
- [blue-team](https://hackers-arise.com/tag/blue-team-2/)
- [LivingOffTheLand](https://hackers-arise.com/tag/livingofftheland/)
- [rundll32](https://hackers-arise.com/tag/rundll32/)
- [LOLBAS](https://hackers-arise.com/tag/lolbas/)
- [DLL-injection](https://hackers-arise.com/tag/dll-injection/)
- [mavinject](https://hackers-arise.com/tag/mavinject/)
- [regsvr32](https://hackers-arise.com/tag/regsvr32/)
- [odbcconf](https://hackers-arise.com/tag/odbcconf/)
- [installutil](https://hackers-arise.com/tag/installutil/)
- [cscript](https://hackers-arise.com/tag/cscript/)
- [wscript](https://hackers-arise.com/tag/wscript/)
- [mshta](https://hackers-arise.com/tag/mshta/)
- [CMD](https://hackers-arise.com/tag/cmd/)
- [industrial-security](https://hackers-arise.com/tag/industrial-security/)
- [EtherNet/IP](https://hackers-arise.com/tag/ethernet-ip/)
- [IEC-104](https://hackers-arise.com/tag/iec-104/)
- [EtherCAT](https://hackers-arise.com/tag/ethercat/)
- [S7comm](https://hackers-arise.com/tag/s7comm/)
- [POWERLINK](https://hackers-arise.com/tag/powerlink/)
- [HART-IP](https://hackers-arise.com/tag/hart-ip/)
- [BACnet](https://hackers-arise.com/tag/bacnet/)
- [protocol-analysis](https://hackers-arise.com/tag/protocol-analysis/)
- [scada protocols](https://hackers-arise.com/tag/scada-protocols/)
- [$USNJRNL](https://hackers-arise.com/tag/usnjrnl/)
- [digital-forensics](https://hackers-arise.com/tag/digital-forensics-2/)
- [MBR](https://hackers-arise.com/tag/mbr/)
- [NTFS](https://hackers-arise.com/tag/ntfs/)
- [$MFT](https://hackers-arise.com/tag/mft/)
- [file-recovery](https://hackers-arise.com/tag/file-recovery/)
- [disk-recovery](https://hackers-arise.com/tag/disk-recovery/)
- [FTK-Imager](https://hackers-arise.com/tag/ftk-imager/)
- [timeline-analysis](https://hackers-arise.com/tag/timeline-analysis-2/)
- [hex-editing](https://hackers-arise.com/tag/hex-editing/)
- [MFTECmd](https://hackers-arise.com/tag/mftecmd/)
- [insider-exfiltration](https://hackers-arise.com/tag/insider-exfiltration/)
- [autopsy](https://hackers-arise.com/tag/autopsy/)
- [registry-analysis](https://hackers-arise.com/tag/registry-analysis/)
- [E01](https://hackers-arise.com/tag/e01/)
- [evidence-verification](https://hackers-arise.com/tag/evidence-verification/)
- [prefetch](https://hackers-arise.com/tag/prefetch/)
- [NTUSER.DAT](https://hackers-arise.com/tag/ntuser-dat/)
- [credential-dumping](https://hackers-arise.com/tag/credential-dumping-2/)
- [Zerologon](https://hackers-arise.com/tag/zerologon/)
- [windows-defender](https://hackers-arise.com/tag/windows-defender/)
- [network-correlation](https://hackers-arise.com/tag/network-correlation/)
- [artifact-extraction](https://hackers-arise.com/tag/artifact-extraction/)
- [psmapexec](https://hackers-arise.com/tag/psmapexec/)
- [sam-dump](https://hackers-arise.com/tag/sam-dump/)
- [lsass](https://hackers-arise.com/tag/lsass/)
- [kerberos](https://hackers-arise.com/tag/kerberos/)
- [timeroasting](https://hackers-arise.com/tag/timeroasting/)
- [ekeys](https://hackers-arise.com/tag/ekeys/)
- [acl-persistence](https://hackers-arise.com/tag/acl-persistence/)
- [dcsync](https://hackers-arise.com/tag/dcsync/)
- [conti](https://hackers-arise.com/tag/conti/)
- [splunk](https://hackers-arise.com/tag/splunk/)
- [threat-analysis](https://hackers-arise.com/tag/threat-analysis/)
- [proxyShell](https://hackers-arise.com/tag/proxyshell/)
- [exchange-compromise](https://hackers-arise.com/tag/exchange-compromise/)
- [wmi-abuse](https://hackers-arise.com/tag/wmi-abuse/)
- [malware-investigation](https://hackers-arise.com/tag/malware-investigation/)
- [domain-compromise](https://hackers-arise.com/tag/domain-compromise/)
- [Android](https://hackers-arise.com/tag/android/)
- [mobile forensics](https://hackers-arise.com/tag/mobile-forensics/)
- [ALEAPP](https://hackers-arise.com/tag/aleapp/)
- [Cellebrite](https://hackers-arise.com/tag/cellebrite/)
- [app analysis](https://hackers-arise.com/tag/app-analysis/)
- [location forensics](https://hackers-arise.com/tag/location-forensics/)
- [evidence handling](https://hackers-arise.com/tag/evidence-handling-2/)
- [chain of custody](https://hackers-arise.com/tag/chain-of-custody-2/)
- [OlympTrade](https://hackers-arise.com/tag/olymptrade/)
- [travel analysis](https://hackers-arise.com/tag/travel-analysis/)
- [SMS analysis](https://hackers-arise.com/tag/sms-analysis/)
- [artifact parsing](https://hackers-arise.com/tag/artifact-parsing/)
- [forensic workflow](https://hackers-arise.com/tag/forensic-workflow-2/)
- [Wi-Fi events](https://hackers-arise.com/tag/wi-fi-events/)
- [timeline reconstruction](https://hackers-arise.com/tag/timeline-reconstruction/)
- [Discord](https://hackers-arise.com/tag/discord/)
- [contact resolution](https://hackers-arise.com/tag/contact-resolution/)
- [murder investigation](https://hackers-arise.com/tag/murder-investigation/)
- [cloud backups](https://hackers-arise.com/tag/cloud-backups/)
- [investigation](https://hackers-arise.com/tag/investigation/)
- [windows forensics](https://hackers-arise.com/tag/windows-forensics/)
- [netstat](https://hackers-arise.com/tag/netstat/)
- [registry forensics](https://hackers-arise.com/tag/registry-forensics/)
- [hivelist](https://hackers-arise.com/tag/hivelist/)
- [printkey](https://hackers-arise.com/tag/printkey/)
- [filescan](https://hackers-arise.com/tag/filescan/)
- [yarascan](https://hackers-arise.com/tag/yarascan/)
- [yara](https://hackers-arise.com/tag/yara/)
- [ram imaging](https://hackers-arise.com/tag/ram-imaging/)
- [strings](https://hackers-arise.com/tag/strings/)
- [linux forensics](https://hackers-arise.com/tag/linux-forensics/)
- [dfir](https://hackers-arise.com/tag/dfir/)
- [linux investigation](https://hackers-arise.com/tag/linux-investigation/)
- [bash forensics](https://hackers-arise.com/tag/bash-forensics/)
- [syslog analysis](https://hackers-arise.com/tag/syslog-analysis/)
- [persistence analysis](https://hackers-arise.com/tag/persistence-analysis/)
- [auth logs](https://hackers-arise.com/tag/auth-logs/)
- [cron forensics](https://hackers-arise.com/tag/cron-forensics/)
- [process analysis](https://hackers-arise.com/tag/process-analysis/)
- [systemd forensics](https://hackers-arise.com/tag/systemd-forensics/)
- [malware investigation](https://hackers-arise.com/tag/malware-investigation-2/)
- [user enumeration](https://hackers-arise.com/tag/user-enumeration/)
- [whatsapp forensics](https://hackers-arise.com/tag/whatsapp-forensics/)
- [android forensics](https://hackers-arise.com/tag/android-forensics/)
- [ios forensics](https://hackers-arise.com/tag/ios-forensics/)
- [digital evidence](https://hackers-arise.com/tag/digital-evidence/)
- [sqlite analysis](https://hackers-arise.com/tag/sqlite-analysis/)
- [encrypted backups](https://hackers-arise.com/tag/encrypted-backups/)
- [mobile investigations](https://hackers-arise.com/tag/mobile-investigations/)
- [cybercrime forensics](https://hackers-arise.com/tag/cybercrime-forensics/)
- [smartphone analysis](https://hackers-arise.com/tag/smartphone-analysis/)
- [registry analysis](https://hackers-arise.com/tag/registry-analysis-2/)
- [registry hives](https://hackers-arise.com/tag/registry-hives/)
- [forensic acquisition](https://hackers-arise.com/tag/forensic-acquisition/)
- [beginner forensics](https://hackers-arise.com/tag/beginner-forensics/)
- [stealer malware](https://hackers-arise.com/tag/stealer-malware/)
- [SOCKS proxy](https://hackers-arise.com/tag/socks-proxy/)
- [C2 traffic](https://hackers-arise.com/tag/c2-traffic/)
- [vpn](https://hackers-arise.com/tag/vpn/)
- [BlackEnergy](https://hackers-arise.com/tag/blackenergy/)
- [rootkit analysis](https://hackers-arise.com/tag/rootkit-analysis/)
- [code injection](https://hackers-arise.com/tag/code-injection/)
- [svchost abuse](https://hackers-arise.com/tag/svchost-abuse/)
- [critical infrastructure attacks](https://hackers-arise.com/tag/critical-infrastructure-attacks/)
- [windows malware](https://hackers-arise.com/tag/windows-malware/)
- [signal forensics](https://hackers-arise.com/tag/signal-forensics/)
- [telegram forensics](https://hackers-arise.com/tag/telegram-forensics/)
- [mobile evidence collection](https://hackers-arise.com/tag/mobile-evidence-collection/)
- [message extraction](https://hackers-arise.com/tag/message-extraction/)
- [belkasoft x](https://hackers-arise.com/tag/belkasoft-x/)
- [digital investigations](https://hackers-arise.com/tag/digital-investigations/)
- [iot](https://hackers-arise.com/tag/iot/)
- [meshtastic](https://hackers-arise.com/tag/meshtastic/)
- [drone forensics](https://hackers-arise.com/tag/drone-forensics/)
- [dji drone analysis](https://hackers-arise.com/tag/dji-drone-analysis/)
- [flight log analysis](https://hackers-arise.com/tag/flight-log-analysis/)
- [drone investigations](https://hackers-arise.com/tag/drone-investigations/)
- [battlefield forensics](https://hackers-arise.com/tag/battlefield-forensics/)
- [criminal drone use](https://hackers-arise.com/tag/criminal-drone-use/)
- [telemetry analysis](https://hackers-arise.com/tag/telemetry-analysis/)
- [digital forensics tools](https://hackers-arise.com/tag/digital-forensics-tools/)
- [drone telemetry](https://hackers-arise.com/tag/drone-telemetry/)
- [military forensics](https://hackers-arise.com/tag/military-forensics/)
- [data exfiltration](https://hackers-arise.com/tag/data-exfiltration-2/)
- [insider threat](https://hackers-arise.com/tag/insider-threat/)
- [linux log analysis](https://hackers-arise.com/tag/linux-log-analysis/)
- [digital forensics investigation](https://hackers-arise.com/tag/digital-forensics-investigation/)
- [bash history analysis](https://hackers-arise.com/tag/bash-history-analysis/)
- [ssh forensics](https://hackers-arise.com/tag/ssh-forensics/)
- [cronjob abuse](https://hackers-arise.com/tag/cronjob-abuse/)
- [password cracking](https://hackers-arise.com/tag/password-cracking/)
- [network traffic analysis](https://hackers-arise.com/tag/network-traffic-analysis/)
- [email protocol security](https://hackers-arise.com/tag/email-protocol-security/)
- [kerberos hashes](https://hackers-arise.com/tag/kerberos-hashes/)
- [snmp security](https://hackers-arise.com/tag/snmp-security/)
- [ntlm hashes](https://hackers-arise.com/tag/ntlm-hashes/)
- [red team operations](https://hackers-arise.com/tag/red-team-operations/)
- [http authentication](https://hackers-arise.com/tag/http-authentication/)
- [hashcat workflows](https://hackers-arise.com/tag/hashcat-workflows/)
- [online tracking](https://hackers-arise.com/tag/online-tracking/)
- [privacy risks](https://hackers-arise.com/tag/privacy-risks/)
- [webgl fingerprinting](https://hackers-arise.com/tag/webgl-fingerprinting/)
- [tor limitations](https://hackers-arise.com/tag/tor-limitations/)
- [canvas fingerprinting](https://hackers-arise.com/tag/canvas-fingerprinting/)
- [browser fingerprinting](https://hackers-arise.com/tag/browser-fingerprinting/)
- [anonymity](https://hackers-arise.com/tag/anonymity/)
- [device identification](https://hackers-arise.com/tag/device-identification/)
- [investigative techniques](https://hackers-arise.com/tag/investigative-techniques/)
- [hackshell](https://hackers-arise.com/tag/hackshell/)
- [penetration testing](https://hackers-arise.com/tag/penetration-testing/)
- [stealth techniques](https://hackers-arise.com/tag/stealth-techniques/)
- [credential hunting](https://hackers-arise.com/tag/credential-hunting/)
- [siem detection](https://hackers-arise.com/tag/siem-detection/)
- [post requests](https://hackers-arise.com/tag/post-requests/)
- [apache logs](https://hackers-arise.com/tag/apache-logs/)
- [directory fuzzing](https://hackers-arise.com/tag/directory-fuzzing/)
- [file upload vulnerability](https://hackers-arise.com/tag/file-upload-vulnerability/)
- [reverse shell](https://hackers-arise.com/tag/reverse-shell/)
- [webshell](https://hackers-arise.com/tag/webshell/)
- [cron jobs](https://hackers-arise.com/tag/cron-jobs/)
- [systemd services](https://hackers-arise.com/tag/systemd-services/)
- [ssh keys](https://hackers-arise.com/tag/ssh-keys/)
- [eap attacks](https://hackers-arise.com/tag/eap-attacks/)
- [mousejack](https://hackers-arise.com/tag/mousejack/)
- [betaflight](https://hackers-arise.com/tag/betaflight/)
- [4g drone control](https://hackers-arise.com/tag/4g-drone-control/)
- [cyber operations](https://hackers-arise.com/tag/cyber-operations/)
- [russia ukraine conflict](https://hackers-arise.com/tag/russia-ukraine-conflict/)
- [fpv drones](https://hackers-arise.com/tag/fpv-drones/)
- [drone hacking](https://hackers-arise.com/tag/drone-hacking/)
- [network intrusion](https://hackers-arise.com/tag/network-intrusion/)
- [ukrainian cyberwar](https://hackers-arise.com/tag/ukrainian-cyberwar/)
- [wireless attacks](https://hackers-arise.com/tag/wireless-attacks/)
- [arduplane](https://hackers-arise.com/tag/arduplane/)
- [payload delivery](https://hackers-arise.com/tag/payload-delivery/)
- [remote access](https://hackers-arise.com/tag/remote-access/)
- [drone reconnaissance](https://hackers-arise.com/tag/drone-reconnaissance/)
- [kismet](https://hackers-arise.com/tag/kismet/)
- [targeted timeroasting](https://hackers-arise.com/tag/targeted-timeroasting/)
- [hash extraction](https://hackers-arise.com/tag/hash-extraction/)
- [domain admin abuse](https://hackers-arise.com/tag/domain-admin-abuse/)
- [ms sntp](https://hackers-arise.com/tag/ms-sntp/)
- [hashcat](https://hackers-arise.com/tag/hashcat/)
- [windows internals](https://hackers-arise.com/tag/windows-internals/)
- [purple team](https://hackers-arise.com/tag/purple-team/)
- [identity attacks](https://hackers-arise.com/tag/identity-attacks/)
- [enterprise hacking](https://hackers-arise.com/tag/enterprise-hacking/)
- [4g control](https://hackers-arise.com/tag/4g-control/)
- [uart](https://hackers-arise.com/tag/uart/)
- [mobile networks](https://hackers-arise.com/tag/mobile-networks/)
- [ardupilot](https://hackers-arise.com/tag/ardupilot/)
- [remote command and control](https://hackers-arise.com/tag/remote-command-and-control/)
- [hardware hacking](https://hackers-arise.com/tag/hardware-hacking/)
- [drone warfare](https://hackers-arise.com/tag/drone-warfare/)
- [red team research](https://hackers-arise.com/tag/red-team-research/)
- [counter drone](https://hackers-arise.com/tag/counter-drone/)
- [remote access tools](https://hackers-arise.com/tag/remote-access-tools/)
- [AnyDesk](https://hackers-arise.com/tag/anydesk/)
- [windows artifacts](https://hackers-arise.com/tag/windows-artifacts/)
- [siem analysis](https://hackers-arise.com/tag/siem-analysis/)
- [endpoint forensics](https://hackers-arise.com/tag/endpoint-forensics/)
- [apt groups](https://hackers-arise.com/tag/apt-groups/)
- [ransomware investigations](https://hackers-arise.com/tag/ransomware-investigations/)
- [post compromise activity](https://hackers-arise.com/tag/post-compromise-activity/)
- [privacy analysis](https://hackers-arise.com/tag/privacy-analysis/)
- [favicon tracking](https://hackers-arise.com/tag/favicon-tracking/)
- [web audio api](https://hackers-arise.com/tag/web-audio-api/)
- [anonymity risks](https://hackers-arise.com/tag/anonymity-risks/)
- [cache based tracking](https://hackers-arise.com/tag/cache-based-tracking/)
- [online tracking methods](https://hackers-arise.com/tag/online-tracking-methods/)
- [audio fingerprinting](https://hackers-arise.com/tag/audio-fingerprinting/)
- [defensive browsing](https://hackers-arise.com/tag/defensive-browsing/)
- [powershell for defenders](https://hackers-arise.com/tag/powershell-for-defenders/)
- [deepbluecli](https://hackers-arise.com/tag/deepbluecli/)
- [wela](https://hackers-arise.com/tag/wela/)
- [log analysis](https://hackers-arise.com/tag/log-analysis/)
- [blue team tooling](https://hackers-arise.com/tag/blue-team-tooling/)
- [windows event logs](https://hackers-arise.com/tag/windows-event-logs/)
- [system hardening](https://hackers-arise.com/tag/system-hardening/)
- [security auditing](https://hackers-arise.com/tag/security-auditing/)
- [scada security](https://hackers-arise.com/tag/scada-security/)
- [ics hacking](https://hackers-arise.com/tag/ics-hacking/)
- [industrial control systems](https://hackers-arise.com/tag/industrial-control-systems/)
- [teleperm xs](https://hackers-arise.com/tag/teleperm-xs/)
- [cyber-physical attacks](https://hackers-arise.com/tag/cyber-physical-attacks/)
- [nuclear power plant cybersecurity](https://hackers-arise.com/tag/nuclear-power-plant-cybersecurity/)
- [nuclear reactor safety](https://hackers-arise.com/tag/nuclear-reactor-safety/)
- [critical infrastructure protection](https://hackers-arise.com/tag/critical-infrastructure-protection/)
- [apt threat modeling](https://hackers-arise.com/tag/apt-threat-modeling/)
- [digital forensics basics](https://hackers-arise.com/tag/digital-forensics-basics/)
- [windows registry](https://hackers-arise.com/tag/windows-registry/)
- [blue team fundamentals](https://hackers-arise.com/tag/blue-team-fundamentals/)
- [system triage](https://hackers-arise.com/tag/system-triage/)
- [forensic artifacts](https://hackers-arise.com/tag/forensic-artifacts/)
- [malware persistence](https://hackers-arise.com/tag/malware-persistence/)
- [raspberry pi hacking](https://hackers-arise.com/tag/raspberry-pi-hacking/)
- [cyberwarfare tools](https://hackers-arise.com/tag/cyberwarfare-tools/)
- [wifi exploitation](https://hackers-arise.com/tag/wifi-exploitation/)
- [evil twin attacks](https://hackers-arise.com/tag/evil-twin-attacks/)
- [MCP](https://hackers-arise.com/tag/mcp/)
- [MQTT](https://hackers-arise.com/tag/mqtt/)
- [lolapps](https://hackers-arise.com/tag/lolapps/)
- [lnk abuse](https://hackers-arise.com/tag/lnk-abuse/)
- [command and control](https://hackers-arise.com/tag/command-and-control-2/)
- [hta malware](https://hackers-arise.com/tag/hta-malware/)
- [endpoint investigation](https://hackers-arise.com/tag/endpoint-investigation/)
- [directed energy](https://hackers-arise.com/tag/directed-energy/)
- [crowd control technology](https://hackers-arise.com/tag/crowd-control-technology/)
- [applied acoustics](https://hackers-arise.com/tag/applied-acoustics/)
- [beamforming](https://hackers-arise.com/tag/beamforming/)
- [lrad](https://hackers-arise.com/tag/lrad/)
- [non-lethal weapons](https://hackers-arise.com/tag/non-lethal-weapons/)
- [acoustic weapons](https://hackers-arise.com/tag/acoustic-weapons/)
- [military technology](https://hackers-arise.com/tag/military-technology/)
- [security studies](https://hackers-arise.com/tag/security-studies/)
- [linux reconnaissance](https://hackers-arise.com/tag/linux-reconnaissance/)
- [command-line tools](https://hackers-arise.com/tag/command-line-tools/)
- [awk](https://hackers-arise.com/tag/awk/)
- [sed](https://hackers-arise.com/tag/sed/)
- [grep](https://hackers-arise.com/tag/grep/)
- [pentesting workflows](https://hackers-arise.com/tag/pentesting-workflows/)
- [ldap analysis](https://hackers-arise.com/tag/ldap-analysis/)
- [red team techniques](https://hackers-arise.com/tag/red-team-techniques/)
- [linux for hackers](https://hackers-arise.com/tag/linux-for-hackers/)
- [pmkid capture](https://hackers-arise.com/tag/pmkid-capture/)
- [wireless reconnaissance](https://hackers-arise.com/tag/wireless-reconnaissance/)
- [wpa enterprise](https://hackers-arise.com/tag/wpa-enterprise/)
- [pineapple](https://hackers-arise.com/tag/pineapple/)
- [military tactics](https://hackers-arise.com/tag/military-tactics/)
- [physiological effects](https://hackers-arise.com/tag/physiological-effects/)
- [crowd control](https://hackers-arise.com/tag/crowd-control/)
- [countermeasures](https://hackers-arise.com/tag/countermeasures/)
- [process hiding](https://hackers-arise.com/tag/process-hiding/)
- [ELF auxiliary vector](https://hackers-arise.com/tag/elf-auxiliary-vector/)
- [Linux malware](https://hackers-arise.com/tag/linux-malware/)
- [Zapper](https://hackers-arise.com/tag/zapper/)
- [red team tradecraft](https://hackers-arise.com/tag/red-team-tradecraft/)
- [ptrace](https://hackers-arise.com/tag/ptrace/)
- [process evasion](https://hackers-arise.com/tag/process-evasion/)
- [OpenClaw](https://hackers-arise.com/tag/openclaw/)
- [IAM](https://hackers-arise.com/tag/iam/)