Skip to content
ITSTCK | Cybersecurity & GRC
Payload Delivery
Initializing search
it-stck/web/projects/cyb
Home
Blue Team & Cyberdefense
Governance, Risk & Compliance
IoT & Hardware Security
Red Team & Pentesting
Zero Trust & Identity
ITSTCK | Cybersecurity & GRC
it-stck/web/projects/cyb
Home
Blue Team & Cyberdefense
Blue Team & Cyberdefense
Overview
Courses
Courses
Digital Forensics & Memory Analysis
Incident Response & Threat Hunting
Malware Reverse Engineering (Ghidra)
Malware Reverse Engineering (Ghidra)
Ghidra Installation
Reverse Engineering Basics
Navigating Ghidra UI
x86 Instruction Set
x64 Architecture
Function Mapping
Static Disassembly
Decompilation & Control Flow
Obfuscation & Packing
Symbolic Execution
Path Exploration
Dynamic Analysis Tools
Unpacking Techniques
Resolving API Calls
System APIs Analysis
Guides
Guides
Purple Team Operations (Atomic Red Team)
Purple Team Operations (Atomic Red Team)
Overview
Environment Setup
Core Concepts
Mapping MITRE ATT&CK
Customizing Techniques
Case Studies
Execution Frameworks
Automating Execution
CI/CD Integration
Validating Detection Rules
Evasion Countermeasures
Validation Tools
Telemetry Coverage
Telemetry Gaps
Remediating Gaps
SIEM Rule Writing (Elastic & Splunk)
SOC Incident Handling Playbooks
References
References
EDR Architecture
Threat Hunting with KQL (Sentinel)
Threat Hunting with KQL (Sentinel)
KQL Introduction
Query Syntax
Summarizing Logs
Event Correlation
Pattern Recognition
Time-Series Analysis
Target Hunting Queries
Query Optimization
Query Validation
Workbooks in Sentinel
Dashboards Design
Automation Integration
Governance, Risk & Compliance
Governance, Risk & Compliance
Overview
Courses
Courses
ISO 27001 ISMS Implementation
ISO 27001 ISMS Implementation
Risk Assessment
Assessment Process
Documenting Findings
Statement of Applicability
Selecting Controls
Documenting SoA
Annex A Controls
Control Practices
Tailoring Controls
Internal Audits
Conducting Audits
Reporting & Follow-up
Management Review
Review Meetings
Continuous Improvement
PCI DSS v4 Infrastructure Design
PCI DSS v4 Infrastructure Design
CDE Principles
Tokenization
Scope Minimization
Tailoring Requirements
CDE Segmentation
Guides
Guides
GDPR Technical Compliance & Privacy
GDPR Technical Compliance & Privacy
Compliance Overview
Data Principles
Legal Basis
Data Minimization
Minimization Practice
Minimization Challenges
Pseudonymization Concepts
Pseudonymization Frameworks
Pipelines Pseudonymization
Right to be Forgotten
Erasure Mechanisms
Auditing Erasure
Privacy by Design
Impact Assessments
PETs Technologies
DPIA Overview
Technical DPIA Workflow
DPIA Documentation
NIST CSF 2.0 Implementation
NIST CSF 2.0 Implementation
CSF 2.0 Overview
Principles & Alignment
Implementation Roadmap
Function IDENTIFY
IDENTIFY Steps
Integration
Function PROTECT
PROTECT Steps
PCI & SOC2 Alignment
Function DETECT
DETECT Steps
DETECT Integration
Function RESPOND
RESPOND Steps
GDPR & SOC2 Alignment
Function RECOVER
RECOVER Steps
RECOVER Integration
Function GOVERN
GOVERN Steps
ISO 27001 Alignment
Profiles Creation
Profiles Mapping
Tier Assessments
Conducting Tiers
Action Plans
Plan Monitoring
IoT & Hardware Security
IoT & Hardware Security
Overview
Courses
Courses
Embedded Linux with Yocto
Firmware Analysis & Reverse Engineering
Firmware Analysis & Reverse Engineering
Firmware Structure
Methodologies
Analysis Workflow
Binwalk Setup
Extraction Techniques
Analyzing Files
SquashFS Structure
Extracting SquashFS
Inspecting SquashFS
Ghidra Setup
Reversing Binaries
Code Vulnerabilities
QEMU Setup
Debugging in QEMU
Emulation Techniques
Hardcoded Credentials
Credential Scanners
Mitigation Strategies
Guides
Guides
Hardware Hacking (JTAG & UART)
Hardware Hacking (JTAG & UART)
UART Pinout
Bus Pirate
OpenOCD Config
JTAG Debugging
Memory Extraction
MQTT & CoAP Protocol Security
MQTT & CoAP Protocol Security
MQTT TLS
Broker Auth
Topic ACLs
CoAP DTLS
Payload Encryption
Cross-Protocol Security
Securing Hybrid Systems
References
References
Side-Channel Attacks & Fault Injection
Side-Channel Attacks & Fault Injection
Side-Channel Principles
SPA Analysis
DPA Analysis
Clock Glitching
Voltage Glitching
Simple Fault Injection
Countermeasure Design
Fault Resilience
Secure System Design
Red Team & Pentesting
Red Team & Pentesting
Overview
Courses
Courses
Active Directory Exploitation & Kerberos
Active Directory Exploitation & Kerberos
AD Architecture
Kerberos Protocol
Domain Controllers
Kerberoasting
AS-REP Roasting
Attack Tools
Golden Tickets
Silver Tickets
Ticket Mitigation
BloodHound Analysis
BQL Queries
MITRE Integration
DCSync Attacks
Unconstrained Delegation
Delegation Mitigation
AD CS Overview
Certipy Attacks
Certificate PrivEsc
Command & Control (C2) Design
Command & Control (C2) Design
C2 Architecture
Communication Protocols
Redirector Mechanics
Redirector Setup
Advanced Redirectors
Domain Fronting
Fronting Setup
Dynamic Config
Profile Encoding
Sliver C2 Architecture
Sliver C2 Integration
Traffic Obfuscation
Anti-Analysis Tactics
Environment Evasion
Web Application Pentesting
Web Application Pentesting
Reconnaissance
App Mapping
Recon Case Study
SQLi Fundamentals
SQLi Exploitation
Database Enumeration
XSS Attack Vectors
Payload Delivery
Mitigation Bypass
CSRF Mechanics
SSRF Vectors
Defensive Countermeasures
Session Fixation
OAuth Exploitation
Credential Stuffing
API Testing
Rate Limiting
Data Validation
Deserialization Attacks
Exploitation with RCE
Deserialization Mitigation
Burp Scanner Rules
Intruder Payloads
Recon with Burp
Guides
Guides
macOS Red Teaming & Persistence
macOS Red Teaming & Persistence
TCC & Sandboxing
Privilege Separation
TCC Database Manipulation
Exploiting TCC
launchd Architecture
launchd Persistence
plist Structure
Stealthy plist Persistence
dylib Injection
Evading ASLR
Mach-O Format
Code Signing Bypasses
Privilege Escalation (Windows & Linux)
Privilege Escalation (Windows & Linux)
PrivEsc Concepts
Windows vs Linux Mechanics
Misconfigured Services
Unquoted Service Paths (Win)
Unquoted Service Paths (Linux)
Sudo Abuse
SUID Binaries
Token Manipulation (Linux)
Token Impersonation (Win)
Windows Kernel Exploits
Potato Attacks
Cross-Platform Kernel Exploits
Mitigating Escalation
Wireless Network Hacking & Defense
Wireless Network Hacking & Defense
Wireless Protocols
Security Concepts
Analysis Tools
WPA2/WPA3 Protocols
Capturing Handshakes
Cracking WPA2/WPA3
Rogue AP Detection
Evil Twin Attacks
EAPHammer Enterprise
Deauth Attacks
WiFi Assessment Framework
Enterprise WiFi Hardening
References
References
OSINT & Social Engineering Frameworks
OSINT & Social Engineering Frameworks
Domain Footprinting
Corporate Reconnaissance
Shodan & Censys
Maltego Framework
Phishing Campaigns
Digital Metadata
Credential Dumping
Zero Trust & Identity
Zero Trust & Identity
Overview
Courses
Courses
HashiCorp Vault Production Security
Zero Trust Architecture Implementation
Zero Trust Architecture Implementation
Never Trust Always Verify
Least Privilege Access
Data Protection in ZT
Microsegmentation Overview
Policy Segmentation
Integration
Identity Perimeter
Keycloak IAM
OAuth2/OIDC Federated
Device Auth
PKI Integration
HashiCorp Vault Secrets
Real-time Risk Assessment
Automated Threat Detection
Automated Incident Response
Guides
Guides
Enterprise PKI & Internal CA
Enterprise PKI & Internal CA
Root & Sub CA Architecture
Multi-CA Design
CRLs Revocation
OCSP Stapling
Mutual TLS Auth
mTLS Use Cases
Auto-Renewal Tools
Renewal in CI/CD
Keycloak IAM Setup
References
References
OAuth2 & OpenID Connect Deep Dive
OAuth2 & OpenID Connect Deep Dive
Authorization Code Flow
Security Considerations
IdP Integration
PKCE Flow Mechanics
Replay Attacks Mitigation
PKCE Implementation
JWT Structure & Claims
Validation & Trust Chains
JWT Debugging Tools
Introspection Endpoint
Use Cases & Implications
Vault & Keycloak Integration
Scopes in OAuth2/OIDC
Custom Claims
Scope & Claim Best Practices
Home
Red Team & Pentesting
Courses
Web Application Pentesting
Exploitation and Payload Delivery
¶
Back to top