Start here. In this course, we go through important basics that enable in-depth learning of increasingly complex topics in information security. The course is intended for students who are new to information technology.

The purpose of the course is to go through important topics in information technology so that it would be easier to internalize new information in other courses. The purpose of the course is to support learning and enable a quick transition to other material offered by Hakateam. We have done our best to condense the course into what we believe are the most critical areas, but we still recommend seeking additional information and trying out new things in the field of information technology. Continuous learning is a part of every enthusiast's as well as IT professional's life.

Fundamentals

BurpSuite is the leading web application security tool that facilitates identification and exploitation of vulnerabilities in web applications using various tools.

BurpSuite is a leading web application security tool that facilitates the identification and exploitation of vulnerabilities in web applications through various attack tools.

BurpSuite - Fundamentals

Let's learn the basics of programming with Python. Aimed at complete beginners.

Welcome to the Python programming course! This course is intended for anyone who wants to learn to program in the Python language but has no previous programming experience. Python is a very popular programming language used in various applications, such as web development, data processing, artificial intelligence, and data analytics.

The aim of the course is to provide you with basic knowledge of Python programming and help you develop your skills step by step. We will go through basic concepts such as variables, conditional statements, and loops, and you will learn how to use Python for data processing.

The course consists of various learning materials, such as videos, written materials, and exercises, that allow you to apply what you have learned in practice. As the course progresses, you will learn more complex programming concepts and techniques and achieve a solid foundation in Python programming.

It is highly recommended to take this course immediately after the basic course, as understanding vulnerabilities is much easier if you understand code. Besides, coding is fun!

Are you ready to start your journey in the world of Python programming? Join this exciting course and start learning today!

Python Programming

This course is an introduction to web development and focuses on the basics of HTML, CSS, JavaScript and backend systems. The aim of the course is to provide students with the necessary skills and knowledge to design, develop and understand simple web applications.

This course is an introduction to web development and focuses on the basics of building websites, namely HTML, CSS, JavaScript, and fundamentals of backend systems. The goal of the course is to provide you with the necessary skills and knowledge to design and develop simple full-stack web applications, as well as understand web applications made by others.

In the first part, HTML is studied, which is a markup language used in building websites.


The second part covers the basics of CSS, such as the use of style sheets, rules, selectors, and formatting. It also covers advanced features of CSS, such as animations and responsive design.

In the third part, we will study JavaScript, which is currently an incredibly important tool in both frontend and backend development, and thus also in cybersecurity and ethical hacking.

In the final part, we will learn how to build back-end systems using the Python Flask framework. You will learn the basics of back-end systems, such as using databases, authentication, session management, and access control.

You can do the course exercises on your own computer if you want, but each code example has a button that allows you to directly run the code in the browser and see what the page looks like or what the script prints. So you do not need to install anything, but you can if you want.

It is recommended but optional to create an account on replit.com service. In that case, you can just click "Fork" on the code examples to make a copy for yourself to play with

Basics of web development

SQL injection is probably the cause of the majority of serious data breaches, mainly because vulnerability is very likely in a large application if the technology choices are bad, and the result is usually leaking the entire database to the attacker.

SQL injection is likely the cause of the majority of serious data breaches, mainly because vulnerability is very likely in a large application if the technology choices are poor, and the consequence is usually the leakage of the entire database to the attacker.

SQL Injection

Passwords are terribly insecure for an awful lot of reasons, but still necessary. A dangerous combination!

Passwords are unbelievably insecure for a number of horrifying reasons, but still necessary. A dangerous combination!

Password attacks

One of the scariest places an injection vulnerability can hit is operating system commands. The penalty is almost always a complete takeover of the server by the attacker. However, these vulnerabilities are found quite often when the application uses, for example, command line tools behind the scenes.

One of the scariest places where an injection vulnerability can hit is operating system commands. The consequence is almost always the complete takeover of the server by the attacker. However, these vulnerabilities are quite often found when an application uses command-line tools behind the scenes.

Command injections

Learn how to find and exploit a vulnerability that is one of the most common vulnerabilities, easy to find, and yet very dangerous. Hackerone ranked XSS the #1 bug bounty vulnerability of 2021.

XSS (Cross-Site Scripting) vulnerabilities are both common and serious. For example, HackerOne has listed XSS as the number one vulnerability on their top 10 vulnerabilities list.

Vulnerability management is therefore extremely important, whether you are a penetration tester, a security consultant, a developer, or a bounty hunter!

XSS (Cross-Site Scripting)

There are JWT tokens almost everywhere you look these days. However, the choice or configuration of the JWT library often goes wrong, which can lead to token forgery, which in turn typically leads to a total breach of the application's security.

JWT tokens are almost everywhere nowadays. However, the selection or configuration of the JWT library often goes wrong, which can lead to token forgery, which typically results in a total breach of application security.

JWT Attacks

XML is superficially a simple protocol, tags and attributes. However, XML has hidden capabilities that unfortunately are often not disabled by default in XML handlers...

XML is a relatively simple protocol, consisting of tags and attributes. However, XML has hidden abilities that unfortunately are often not disabled by default in XML processors...

XXE (XML External Entity) Attacks

A vulnerability that has historically plagued PHP applications in particular and can still be found in the wild, especially in old web applications.

A vulnerability that has historically plagued PHP applications, which can still be found in the wild, especially in old web applications.

LFI / RFI

Development is developing and thanks to modern application frameworks, traditional injection vulnerabilities or authentication problems are constantly being seen less and less. However, there is one thing that seems to always remain as difficult to implement safely, and that is the access control of a complex application.

Development is evolving and thanks to modern application frameworks, traditional injection vulnerabilities or authentication problems are seen less and less frequently. However, one thing that always seems to remain equally difficult to implement securely is complex application access control.

Access control vulnerabilities

Injections can sometimes be found in surprising places, and building URLs is a common place where developers forget to consider the danger.

Injects can sometimes be found in even unexpected places and constructing URL addresses is a common place where developers forget to consider the danger.

URL injection

HTML is typically built with templates precisely to avoid injection vulnerabilities, but sometimes it happens so miserably that the injection hits the template itself, and in that case the consequences are serious.

Typically, HTML is built with templates in order to avoid injection vulnerabilities, but sometimes it happens unfortunately that the injection hits the template itself, and in this case the consequences are serious.

Template Injection Vulnerabilities

Serialization is an extremely easy and convenient way to get complex states saved on disk or transferred over the network. However, ease brings with it a dark side, dismantling a serialized object can be compared to dismantling a bomb. It has to be done just right or the consequences can be catastrophic.

Serialization is an extremely easy and convenient way to store complex states on disk or transfer them over the network. However, ease of use brings a downside, as unpacking a serialized object is comparable to defusing a bomb. It must be done exactly right, or the consequences can be catastrophic.

Deserialization Attacks

The browser is a versatile environment, with code from completely different parties running in different tabs and windows, and these web applications are still able to communicate with each other. Such an environment has its risks!

The browser is a versatile environment where code from different sources is running in different tabs and windows, and these web applications are able to communicate with each other. There are risks in such an environment!

Let's go through browser-side attacks and, above all, defense mechanisms in the course.

Browser security

Windows and Active Directory attacks and defense

Windows is widely used in the IT environments of numerous companies and educational institutions, and Windows networks are typically managed through an Active Directory domain.

In this course, we will explore the security of the Windows operating system and Active Directory from the perspectives of both attackers and defenders. Some of the tasks involve attacks, while others are hardening tasks.

The scope of the course (Windows, attack and defense) is quite broad. If one were to study it purely in theory, the course would be dull. On the other hand, without any theory, there would be no hacking because both attack and defense rely on understanding what is happening.

We chose, for these reasons, to implement the course using a scenario-based approach, where each section of the course deals with one "scenario" that may include a few attacks, a few tools, and a few hardenings to protect against the attacks.

The theory is covered in small pieces in practical context, always when necessary. Things are tried to be understood at the bit level in order to avoid the unfortunate phenomenon typical of such courses where the student knows how to try the psexec attack after obtaining the NTLM hash, but does not understand at all what the attack does and how it works (spoiler: psexec is based on the Service Control Manager RPC interface, which launches the desired command as a Windows service on the target server). Let's peek under the hood with Wireshark and dig into the source code of modules, for example, Metasploit.

This way, a comprehensive and theoretical topic will hopefully become fun and easily approachable step by step.

Are you ready to break into EvilCorp's corporate network?

The course does not require knowledge of Windows environments, but otherwise basic things like Linux, computer networks, nmap, etc. would be good to have. Welcome to the course!

This course is still under construction, more scenarios will be added.

This course is in BETA mode, please let us know if you come across any misaligned bits.

Windows - Attack and Defense

Nmap is one of the most well-known tools that you can use to perform versatile network scans. Every information security professional should know how to use this tool.

Nmap is one of the most well-known network scanning tools, often used by cybersecurity experts. In this course, we will learn how to use this tool and explore its capabilities. Additionally, we will examine the traffic generated by the tool and analyze the pros and cons of different scanning methods. It is beneficial to have an understanding of how networks operate in this course.

Warning! - Conducting network scans without permission may cause system malfunctions and/or crashes. Please refrain from attempting to scan any address/system without certainty that said system is in your possession or that you have permission to do so.

Nmap

In this course, we go through the basics related to managing Windows systems and maintaining information security.

In this course, we will go through the basics of Windows system administration and cybersecurity maintenance.

We familiarize ourselves with Windows virus protection, firewall, and automatic updates. We learn to use remote desktop connections, registry editor, PowerShell, server manager, and group policies.

The course does not go into great depth on Windows domains, attacks on them, or hardening. These more advanced topics are covered in the "Windows - Attack and Defense" course.

Windows information security basics

In this course, we go through topics related to managing and hardening Linux systems

This course covers topics related to managing and hardening Linux systems.

Linux management and hardening

Automatic type conversion of a programming language can lead to unexpected results that can be exploited by an attacker

Automatic type conversion in programming languages can lead to unexpected results that an attacker can exploit. In this course, we will explore type-juggling vulnerabilities.

Type-juggling vulnerabilities

PDF file generators are common and for good reason. However, dangerous vulnerabilities have been found in these in recent years.

In this course, we will explore various PDF file generators and the dangerous vulnerabilities hidden within them, as well as how to avoid them.

PDF export injection

Wireshark is a tool used to capture and analyze data traffic. The tool is suitable for learning different network protocols and you often need it in CTF competitions as well.

Wireshark is a tool used for capturing and analyzing network traffic. It enables the examination and analysis of network traffic in real-time or from saved PCAP files.

Wireshark is able to dissect various network protocols and display detailed information about each network packet. Security experts can use it to detect suspicious or malicious network traffic, such as the spread of malware, attacks, or phishing. It is often needed in CTF competitions as well.

Especially Wireshark is suitable for learning network protocols. You can, for example, start Wireshark, open a browser, go to Hakatemian's page, and then see the whole transaction in Wireshark.

In this course, we will learn the basics of Wireshark, such as capturing traffic, using the search field, and understanding the statistics in the Wireshark program.

Wireshark

In this course, we go through the concepts related to the organization's information security control.

In this course, we will go through issues related to organizational cybersecurity monitoring.

Basics and concepts of information security monitoring

From the history of cryptography to current use, the basics of encryption, technologies, applications and their impact on security.

Welcome to Hakatemia's cryptography course!

In this course, we will go through the basics of cryptography, the most important encryption algorithms, and their modern applications. The course is beginner-friendly and practical.

The goal is that after the course you will know what cryptography is, what it is used for, and how to choose the right encryption techniques and settings for different purposes.

Cryptography

Metasploit is a popular attack framework that helps professionals identify and exploit security holes. In this course, you will go through the use of Metasploit and learn how it can be used to carry out attacks and find security holes.

Metasploit, the Swiss Army Knife of Penetration Testing

Welcome to the wonderful world of Metasploit! Metasploit is a penetration testing framework used by cybersecurity professionals throughout the world.

In this context, a framework refers to a codebase. More specifically, it refers to a stack of reusable Ruby code that makes it convenient to create more Ruby code that does cyber stuff. Particularly, the framework is designed for penetration testing.

You don't need to know how to code in Ruby to use Metasploit. In the course, we will also explore customization and building our own modules, but Metasploit already has thousands of these modules ready for you to get started. Besides, Metasploit now also supports Python extensions.

Module is a Ruby file in the Metasploit directory that serves a specific purpose.

There are different types of modules for different purposes. For example, the 

 modules (located in the exploits directory) are attacks that exploit a vulnerability and typically open a command channel to the compromised device, such as a server.

Modules are not used directly from files, but with tools of the Metasploit framework such as 

The flagship command-line tool of Metasploit is 

. With the tool, it is easy to search for and use Metasploit modules.

In the course, you progress step by step and practice using various techniques using Metasploit in the Hakatemian lab environment. After that, you will move on to exercises where you will no longer receive assistance, you only know the target's IP address, and you have access to Nmap and Metasploit, as well as the goal of breaking into the server by applying the skills you have learned in the course.

Studying Metasploit is not only useful but also super fun. Let's get started!

Metasploit

The course delves into advanced development with Burp Suite and teaches effective use of its extension API. We will build several practical extensions to address common challenges encountered during testing

The course delves into advanced development with Burp Suite and teaches effective use of its extension API. We will build several practical extensions to address common challenges encountered during testing.

Building BurpSuite Extensions

Let's get to know computer networks and network protocols in a little more depth than the basic course. A prerequisite for getting by, for example, with Nmap and Wireshark courses.

Let's delve a little deeper into computer networks and network protocols, beyond the basics of the introductory course. A prerequisite for this is, for example, proficiency in Nmap and Wireshark courses.

Computer Networks

Nessus is a widely used security assessment tool designed to identify vulnerabilities and weaknesses in computer systems, networks and applications.

Nessus is a widely used cybersecurity assessment tool designed to identify vulnerabilities and weaknesses in computer systems, networks, and applications.