https://classroom.anir0y.in/ Recent content on Classroom Hugo en Fri, 09 Oct 2026 20:47:00 +0530 https://classroom.anir0y.in/post/thm-room-threatmodelingforpentesters/ Fri, 09 Oct 2026 20:47:00 +0530 https://classroom.anir0y.in/post/thm-room-threatmodelingforpentesters/ Walkthrough of TryHackMe Threat Modeling for Pentesters: STRIDE threat categories, DREAD scoring, PASTA stages, MITRE ATT&CK mapping, and Stratford capstone flag. https://classroom.anir0y.in/post/thm-room-pythonpentestingscripts/ Thu, 08 Oct 2026 20:02:00 +0530 https://classroom.anir0y.in/post/thm-room-pythonpentestingscripts/ Walkthrough of TryHackMe Python Pentesting Scripts: web directory enumeration, Scapy ARP and socket port scanning, hashlib cracking, and Paramiko SSH brute-forcing. https://classroom.anir0y.in/post/thm-room-pythonbuildingscripts/ Wed, 07 Oct 2026 20:39:00 +0530 https://classroom.anir0y.in/post/thm-room-pythonbuildingscripts/ Walkthrough of TryHackMe Python Building Scripts: functions with return and defaults, try except error handling, file I/O, pip libraries, and a password checker. https://classroom.anir0y.in/post/thm-room-pythoncoreconcepts/ Tue, 06 Oct 2026 19:17:00 +0530 https://classroom.anir0y.in/post/thm-room-pythoncoreconcepts/ Walkthrough of TryHackMe Python Core Concepts: data types, strings, lists and dictionaries, operators, and for and while loops, answer masks decoded. https://classroom.anir0y.in/post/thm-room-devsecopsbasics/ Tue, 06 Oct 2026 14:16:00 +0530 https://classroom.anir0y.in/post/thm-room-devsecopsbasics/ Walkthrough of TryHackMe DevSecOps Basics: the story from Waterfall to Agile to DevOps, shifting security left, DevSecOps culture, and the Fuel Trouble flag. https://classroom.anir0y.in/post/thm-room-blueteamperspective/ Tue, 06 Oct 2026 08:35:00 +0530 https://classroom.anir0y.in/post/thm-room-blueteamperspective/ Walkthrough of TryHackMe The Blue Team Perspective: triage the Wayne Corp breach in Splunk over the BOTSv1 dataset, mapped to NIST, MITRE, and the Pyramid of Pain. https://classroom.anir0y.in/post/thm-room-llmpentesting/ Mon, 05 Oct 2026 15:09:00 +0530 https://classroom.anir0y.in/post/thm-room-llmpentesting/ Walkthrough of the TryHackMe LLM Pentesting room: fingerprint Ollama, extract the system prompt, and exploit the AIDEN assistant to recover the flag. https://classroom.anir0y.in/post/thm-room-cloudsecurityfundamentals/ Mon, 05 Oct 2026 11:38:00 +0530 https://classroom.anir0y.in/post/thm-room-cloudsecurityfundamentals/ TryHackMe Cloud Security Fundamentals walkthrough: a guided chain from port scan to public bucket, SSRF to the IMDS, stolen creds and a wildcard IAM policy. https://classroom.anir0y.in/post/thm-room-mobilesecurity/ Sat, 03 Oct 2026 22:27:00 +0530 https://classroom.anir0y.in/post/thm-room-mobilesecurity/ Walkthrough of TryHackMe Mobile Application Security: MobSF static analysis of the Leaky Package APK and IPA, mapped to the OWASP Mobile Top 10. https://classroom.anir0y.in/post/thm-room-forwardchallenge/ Wed, 30 Sep 2026 12:52:00 +0530 https://classroom.anir0y.in/post/thm-room-forwardchallenge/ TryHackMe Forward walkthrough: a Kerberoastable red herring, a KeePass credential reused across accounts, and resource-based constrained delegation to Administrator. https://classroom.anir0y.in/post/thm-room-proxychallenge/ Wed, 30 Sep 2026 10:16:00 +0530 https://classroom.anir0y.in/post/thm-room-proxychallenge/ TryHackMe Proxy walkthrough: a writable SMB share that executes PowerShell, a coerced NetNTLMv2 hash, and Kerberos constrained delegation to Administrator on the DC. https://classroom.anir0y.in/post/thm-room-introductiontoadlateralmovement/ Tue, 29 Sep 2026 21:16:00 +0530 https://classroom.anir0y.in/post/thm-room-introductiontoadlateralmovement/ TryHackMe Intro to AD Lateral Movement walkthrough: PsExec and Evil-WinRM remote execution, Pass-the-Hash credential reuse, and an SSH SOCKS pivot onto the DC. https://classroom.anir0y.in/post/thm-room-introtocredentialharvesting/ Tue, 29 Sep 2026 19:11:00 +0530 https://classroom.anir0y.in/post/thm-room-introtocredentialharvesting/ TryHackMe Intro to Credential Harvesting walkthrough: SAM and LSA dumps with secretsdump, DPAPI vault looting, DCC2 cracking, DCSync and Pass-the-Hash to the DC. https://classroom.anir0y.in/post/thm-room-adauthenticatedenumeration/ Tue, 29 Sep 2026 16:04:00 +0530 https://classroom.anir0y.in/post/thm-room-adauthenticatedenumeration/ TryHackMe AD Authenticated Enumeration walkthrough: AS-REP roasting with GetNPUsers and hashcat, net user enumeration, and BloodHound CE plus PowerView graphs. https://classroom.anir0y.in/post/thm-room-adbasicenumeration/ Tue, 29 Sep 2026 13:40:00 +0530 https://classroom.anir0y.in/post/thm-room-adbasicenumeration/ TryHackMe AD Basic Enumeration walkthrough: fping and nmap host discovery, anonymous SMB shares, LDAP and RPC null sessions, and CrackMapExec password spraying. https://classroom.anir0y.in/post/thm-room-introductiontoactivedirectorybreaching/ Mon, 28 Sep 2026 22:10:00 +0530 https://classroom.anir0y.in/post/thm-room-introductiontoactivedirectorybreaching/ TryHackMe Intro to AD Breaching walkthrough: Kerbrute enumeration, Git and Jenkins credential leaks, NetExec spraying, LDAP passback and NTLMv2 coercion. https://classroom.anir0y.in/post/thm-room-introtoactivedirectoryauthentication/ Sun, 27 Sep 2026 22:15:00 +0530 https://classroom.anir0y.in/post/thm-room-introtoactivedirectoryauthentication/ TryHackMe Intro to AD Authentication walkthrough: NetNTLM challenge response, Kerberos tickets, NTLM cracking, Pass-the-Hash, Kerberoasting and a Golden Ticket. https://classroom.anir0y.in/post/thm-room-winadbasicsrevamp/ Fri, 25 Sep 2026 14:40:00 +0530 https://classroom.anir0y.in/post/thm-room-winadbasicsrevamp/ TryHackMe Active Directory Basics walkthrough: promote a child domain controller, join a server, push a Restricted Groups GPO, and build a two-way forest trust. https://classroom.anir0y.in/post/thm-room-windowsjump/ Thu, 24 Sep 2026 22:08:00 +0530 https://classroom.anir0y.in/post/thm-room-windowsjump/ TryHackMe Windows Jump walkthrough: guest SMB share creds, an AutoLogon registry password, a weak service binary, and a writable SYSTEM task chain guest to SYSTEM. https://classroom.anir0y.in/post/thm-room-jump/ Tue, 22 Sep 2026 20:55:00 +0530 https://classroom.anir0y.in/post/thm-room-jump/ TryHackMe Jump walkthrough: anonymous FTP uploads run as recon_user, group writes reach dev_user, a PATH hijack on ps lands monitor_user, and sudo less gives root. https://classroom.anir0y.in/post/thm-room-linprivauto/ Mon, 21 Sep 2026 23:50:00 +0530 https://classroom.anir0y.in/post/thm-room-linprivauto/ TryHackMe Linux Privilege Escalation Automation walkthrough: LES, exploiting CVE-2025-32463 sudo-chwoot, pspy, and a sudo LD_PRELOAD root chain. https://classroom.anir0y.in/post/thm-room-linprivbasics/ Sun, 20 Sep 2026 15:18:00 +0530 https://classroom.anir0y.in/post/thm-room-linprivbasics/ TryHackMe Linux Privilege Escalation Basics walkthrough: exploiting sudo, SUID, PATH hijacking, capabilities, cron and NFS across six target machines. https://classroom.anir0y.in/post/thm-room-linprivenum/ Sun, 20 Sep 2026 13:15:00 +0530 https://classroom.anir0y.in/post/thm-room-linprivenum/ TryHackMe Linux Privilege Escalation Enumeration walkthrough: manual OS, user, network and file enumeration on Ubuntu 24.04, answers explained. https://classroom.anir0y.in/post/thm-room-thecleanexit/ Sun, 20 Sep 2026 08:32:00 +0530 https://classroom.anir0y.in/post/thm-room-thecleanexit/ Walkthrough of TryHackMe The Clean Exit: using KAPE and Eric Zimmerman's tools to trace an insider's USB exfiltration and anti-forensic cleanup. https://classroom.anir0y.in/post/thm-room-hostserverconfigurationreviews/ Sat, 19 Sep 2026 05:12:00 +0530 https://classroom.anir0y.in/post/thm-room-hostserverconfigurationreviews/ Walk through TryHackMe Host-Server Configuration Reviews: CIS Benchmarks, DISA STIGs, and a SUID privilege escalation chain from a CIS audit report. https://classroom.anir0y.in/post/thm-room-metasploitpayloadgeneration/ Sat, 19 Sep 2026 01:23:00 +0530 https://classroom.anir0y.in/post/thm-room-metasploitpayloadgeneration/ Walkthrough of TryHackMe Metasploit Payload Generation: msfvenom, multi/handler, and a capstone chaining an SMB upload to a Meterpreter flag. https://classroom.anir0y.in/post/thm-room-shellgenerationdelivery/ Fri, 18 Sep 2026 23:01:00 +0530 https://classroom.anir0y.in/post/thm-room-shellgenerationdelivery/ Walkthrough of TryHackMe Shell Payload Generation and Delivery: msfvenom staged and stageless payloads, multi/handler, and PHP webshell RCE. https://classroom.anir0y.in/post/thm-room-bankgpt/ Fri, 18 Sep 2026 21:10:00 +0530 https://classroom.anir0y.in/post/thm-room-bankgpt/ Walkthrough of TryHackMe BankGPT: prompt-leaking a bank support chatbot's system prompt to extract its hardcoded secret API key. https://classroom.anir0y.in/post/thm-room-shellsfundamentals/ Fri, 18 Sep 2026 19:30:00 +0530 https://classroom.anir0y.in/post/thm-room-shellsfundamentals/ TryHackMe Shells & Listeners Fundamentals: catching netcat and socat reverse or bind shells, stabilising a full TTY, and wrapping shells in TLS with OpenSSL. https://classroom.anir0y.in/post/thm-room-thegreatdisappearingact/ Wed, 16 Sep 2026 14:56:00 +0530 https://classroom.anir0y.in/post/thm-room-thegreatdisappearingact/ TryHackMe The Great Disappearing Act walkthrough: Fakebook OSINT, HTTP parameter pollution on a JWT tier check, and a Docker SUID privesc chain to root. https://classroom.anir0y.in/post/thm-room-exploitationandweaponisation/ Wed, 16 Sep 2026 12:41:00 +0530 https://classroom.anir0y.in/post/thm-room-exploitationandweaponisation/ TryHackMe Exploitation and Weaponisation walkthrough: controlled exploitation, chaining vulnerabilities, and proving real business impact. https://classroom.anir0y.in/post/thm-room-metasploitpostexploitation/ Tue, 15 Sep 2026 22:23:00 +0530 https://classroom.anir0y.in/post/thm-room-metasploitpostexploitation/ TryHackMe Metasploit: Post-Exploitation walkthrough: psexec foothold, Meterpreter commands, a SAM hashdump for jchambers, hashcat cracking, and the room flags. https://classroom.anir0y.in/post/thm-room-metasploitthebasics/ Tue, 15 Sep 2026 15:01:00 +0530 https://classroom.anir0y.in/post/thm-room-metasploitthebasics/ TryHackMe Metasploit: The Basics walkthrough: exploits and payloads, msfconsole search, set and setg, running modules, sessions, and the EternalBlue example. https://classroom.anir0y.in/post/thm-room-checkmate/ Tue, 15 Sep 2026 13:23:00 +0530 https://classroom.anir0y.in/post/thm-room-checkmate/ TryHackMe Checkmate walkthrough: default creds, a company keyword, CUPP to crack Marco's social password, a SHA256 filename, and a pattern-based SSH brute-force. https://classroom.anir0y.in/post/thm-room-passwordcracking/ Mon, 14 Sep 2026 23:30:00 +0530 https://classroom.anir0y.in/post/thm-room-passwordcracking/ TryHackMe Password Cracking walkthrough: identify MD5, SHA-256, NTLM, and bcrypt hashes, then crack all four with Hashcat, John, and rockyou.txt. https://classroom.anir0y.in/post/thm-room-introductiontowordlists/ Mon, 14 Sep 2026 20:39:00 +0530 https://classroom.anir0y.in/post/thm-room-introductiontowordlists/ TryHackMe Introduction to Wordlists walkthrough: scrape with CeWL, build usernames, crunch passwords, then find helios/ with ffuf and crack the login with Hydra. https://classroom.anir0y.in/post/thm-room-phishingbasics/ Mon, 14 Sep 2026 18:15:00 +0530 https://classroom.anir0y.in/post/thm-room-phishingbasics/ Walkthrough of the TryHackMe Phishing Basics room: social engineering psychology, email spoofing defences, and SET credential harvesting to phish Bob. https://classroom.anir0y.in/post/thm-room-cve202642945/ Mon, 14 Sep 2026 15:47:00 +0530 https://classroom.anir0y.in/post/thm-room-cve202642945/ Walkthrough of the TryHackMe CVE-2026-42945 Nginx Rift room: the is_args two-pass state mismatch that turns a rewrite/set heap overflow into unauthenticated RCE. https://classroom.anir0y.in/post/thm-room-cve202646300/ Sat, 12 Sep 2026 22:19:00 +0530 https://classroom.anir0y.in/post/thm-room-cve202646300/ Walkthrough of TryHackMe Fragnesia, CVE-2026-46300. A Linux page-cache write LPE created by the Dirty Frag patch, taken from user karen to root via a corrupted su. https://classroom.anir0y.in/post/thm-room-adbadsuccessor/ Fri, 11 Sep 2026 19:13:00 +0530 https://classroom.anir0y.in/post/thm-room-adbadsuccessor/ Walkthrough of TryHackMe AD BadSuccessor: finding OU write rights, forging a dMSA with SharpSuccessor and Rubeus, and reading the Domain Admin flag off the DC. https://classroom.anir0y.in/post/thm-room-n8ncve202568613/ Fri, 11 Sep 2026 10:33:00 +0530 https://classroom.anir0y.in/post/thm-room-n8ncve202568613/ Walkthrough of the TryHackMe n8n CVE-2025-68613 room: an authenticated expression injection in n8n workflow evaluation escalates to RCE through child_process. https://classroom.anir0y.in/post/thm-room-noscoperce/ Thu, 10 Sep 2026 23:02:00 +0530 https://classroom.anir0y.in/post/thm-room-noscoperce/ Walkthrough of TryHackMe NoScope: Finding RCE. Exploit the Alf.io returnClass Rhino sandbox escape (CVE-2026-35482) and read the flag by RCE on the box. https://classroom.anir0y.in/post/thm-room-basicvulnerabilityidentificationtechniques/ Wed, 09 Sep 2026 18:48:00 +0530 https://classroom.anir0y.in/post/thm-room-basicvulnerabilityidentificationtechniques/ Walkthrough of the TryHackMe Basic Vulnerability Identification Techniques room: nmap enumeration, IDOR, anonymous FTP and SMB, then triaging findings by impact. https://classroom.anir0y.in/post/thm-room-trustedbydefault/ Tue, 08 Sep 2026 16:20:00 +0530 https://classroom.anir0y.in/post/thm-room-trustedbydefault/ Walkthrough of the TryHackMe Trusted By Default room: correlating IIS, Windows and Zeek logs in Splunk to trace service-account abuse from a web request to RDP. https://classroom.anir0y.in/post/thm-room-vulnerabilityscanningtools/ Tue, 08 Sep 2026 11:31:00 +0530 https://classroom.anir0y.in/post/thm-room-vulnerabilityscanningtools/ Walkthrough of the TryHackMe Vulnerability Scanning Tools room: Nmap service scans, a Nikto web check and an OpenVAS report that maps CVEs and the target OS. https://classroom.anir0y.in/post/thm-room-support/ Sun, 06 Sep 2026 19:00:00 +0530 https://classroom.anir0y.in/post/thm-room-support/ Walkthrough of the TryHackMe Support challenge: a weak login, an md5 cookie flip, IDOR, readfile traversal for source disclosure and command injection to RCE. https://classroom.anir0y.in/post/thm-room-apitesting/ Sun, 06 Sep 2026 13:20:00 +0530 https://classroom.anir0y.in/post/thm-room-apitesting/ Walkthrough of the TryHackMe API Pentesting room: JWT decoding, BOLA object id swapping, an unrated login endpoint and mass assignment to admin. https://classroom.anir0y.in/post/thm-room-brokenauthentication/ Wed, 02 Sep 2026 18:02:00 +0530 https://classroom.anir0y.in/post/thm-room-brokenauthentication/ Walkthrough of the TryHackMe Broken Authentication room: ffuf username enumeration, login brute force, a reset parameter pollution flaw and cookie tampering. https://classroom.anir0y.in/post/thm-room-recruitwebchallenge/ Tue, 01 Sep 2026 17:05:00 +0530 https://classroom.anir0y.in/post/thm-room-recruitwebchallenge/ Walkthrough of the TryHackMe Recruit web challenge: a scoped file read leaks the HR password, then SQLi in the dashboard search escalates to admin. https://classroom.anir0y.in/post/thm-room-xssintroduction/ Tue, 01 Sep 2026 16:30:00 +0530 https://classroom.anir0y.in/post/thm-room-xssintroduction/ Walkthrough of the TryHackMe XSS Introduction room: reflected, stored and DOM sinks, a blind XSS exfil over netcat, and six payload contexts to escape. https://classroom.anir0y.in/post/thm-room-csrfintroduction/ Tue, 01 Sep 2026 14:52:00 +0530 https://classroom.anir0y.in/post/thm-room-csrfintroduction/ Walkthrough of the TryHackMe CSRF Introduction room: forging a POST form against StaffHub and reversing a weak base64 CSRF token to change a user role. https://classroom.anir0y.in/post/thm-room-sqlinjectionintroduction/ Tue, 01 Sep 2026 14:25:00 +0530 https://classroom.anir0y.in/post/thm-room-sqlinjectionintroduction/ Walkthrough of the TryHackMe SQL Injection Introduction room: four lab levels covering UNION extraction, login bypass, boolean-blind and time-based blind SQLi. https://classroom.anir0y.in/post/thm-room-webserverattacks2/ Mon, 31 Aug 2026 22:10:00 +0530 https://classroom.anir0y.in/post/thm-room-webserverattacks2/ TryHackMe Web Server Attacks II walkthrough: IIS fingerprinting, 8.3 tilde short name enumeration, WebDAV NTLM upload and ASP.NET misconfigurations. https://classroom.anir0y.in/post/thm-room-webserverattacks/ Mon, 31 Aug 2026 21:37:00 +0530 https://classroom.anir0y.in/post/thm-room-webserverattacks/ TryHackMe Web Server Attacks I walkthrough: fingerprint Apache, Nginx, Node.js and Python http.server on one host, then loot every misconfiguration. https://classroom.anir0y.in/post/thm-room-modernwebstacks/ Mon, 31 Aug 2026 20:32:00 +0530 https://classroom.anir0y.in/post/thm-room-modernwebstacks/ TryHackMe Modern Web Stacks walkthrough: fingerprint four stacks, then exploit prototype pollution, CVE-2025-29927, CVE-2021-35042 and CVE-2021-41773. https://classroom.anir0y.in/post/thm-room-contentdiscoveryx/ Mon, 31 Aug 2026 19:36:00 +0530 https://classroom.anir0y.in/post/thm-room-contentdiscoveryx/ TryHackMe Content Discovery walkthrough: robots.txt, sitemap.xml, HTTP headers, framework docs and Gobuster dir, dns and vhost enumeration. https://classroom.anir0y.in/post/thm-room-walkinganapp/ Mon, 31 Aug 2026 13:39:00 +0530 https://classroom.anir0y.in/post/thm-room-walkinganapp/ TryHackMe Walking An Application walkthrough: finding every flag with only the browser developer tools, view source, inspector, debugger, network and storage. https://classroom.anir0y.in/post/thm-room-penetrationtestingframeworks/ Mon, 31 Aug 2026 10:53:00 +0530 https://classroom.anir0y.in/post/thm-room-penetrationtestingframeworks/ TryHackMe Penetration Testing Frameworks walkthrough: OSSTMM, WSTG, NIST 800-115, PTES, ISSAF and MITRE ATT&CK, which to pick, and the flag from the static site. https://classroom.anir0y.in/post/thm-room-cyberkillchain/ Mon, 31 Aug 2026 10:14:00 +0530 https://classroom.anir0y.in/post/thm-room-cyberkillchain/ TryHackMe Cyber Kill Chain walkthrough: the Lockheed Martin seven phases from reconnaissance to actions on objectives, plus reading the flag from the JS bundle. https://classroom.anir0y.in/post/thm-room-diveintopentesting/ Mon, 31 Aug 2026 09:30:00 +0530 https://classroom.anir0y.in/post/thm-room-diveintopentesting/ TryHackMe Dive Into Pentesting walkthrough: the concepts, ethics, and mindset of a professional pentest, plus lifting the flag from the activity JS bundle. https://classroom.anir0y.in/post/thm-room-guidedpentestinfrastructure/ Sun, 30 Aug 2026 19:46:00 +0530 https://classroom.anir0y.in/post/thm-room-guidedpentestinfrastructure/ TryHackMe Guided Pentest Infrastructure walkthrough: fingerprint UnrealIRCd 3.2.8.1, trigger the AB backdoor for a shell, escalate with looted root creds. https://classroom.anir0y.in/post/thm-room-guidedpentestweb/ Sun, 30 Aug 2026 17:44:00 +0530 https://classroom.anir0y.in/post/thm-room-guidedpentestweb/ TryHackMe Guided Pentest Web walkthrough: an IDOR user dump, a reset token printed in the response, an admin panel, and a .phtml upload bypass chained into RCE. https://classroom.anir0y.in/post/thm-room-battery/ Sun, 30 Aug 2026 17:00:00 +0530 https://classroom.anir0y.in/post/thm-room-battery/ TryHackMe battery walkthrough: an ELF user oracle, a null-byte registration bypass, XXE source disclosure, and a swappable root-owned sudo script. https://classroom.anir0y.in/post/thm-room-conti/ Sun, 30 Aug 2026 15:59:00 +0530 https://classroom.anir0y.in/post/thm-room-conti/ TryHackMe Conti walkthrough: tracing a ProxyShell Exchange compromise to ransomware in Splunk, from an attrib.exe web shell to process migration and 18 ransom notes. https://classroom.anir0y.in/post/thm-room-mondaymonitor/ Sun, 30 Aug 2026 15:29:00 +0530 https://classroom.anir0y.in/post/thm-room-mondaymonitor/ TryHackMe Monday Monitor walkthrough: tracing an Atomic Red Team chain through Sysmon in Wazuh, from a renamed .xlsm download to mimikatz disguised as memotech.exe. https://classroom.anir0y.in/post/thm-room-buildingwazuhrules/ Sun, 30 Aug 2026 14:12:00 +0530 https://classroom.anir0y.in/post/thm-room-buildingwazuhrules/ TryHackMe Building Wazuh Rules walkthrough: writing decoders and rules, matching a CDB threat-intel list, and reading frequency alerts against live Wazuh data. https://classroom.anir0y.in/post/thm-room-servidae/ Sat, 29 Aug 2026 23:42:00 +0530 https://classroom.anir0y.in/post/thm-room-servidae/ TryHackMe Servidae walkthrough: tracing a compromised workstation through Elastic, from a PDF lure to AlwaysInstallElevated, a curl brute force and CSV exfiltration. https://classroom.anir0y.in/post/thm-room-malbuster/ Sat, 29 Aug 2026 21:50:00 +0530 https://classroom.anir0y.in/post/thm-room-malbuster/ TryHackMe MalBuster walkthrough: triaging four unknown PE binaries on REMnux with pefile, capa and hash OSINT, and two version-dependent answers. https://classroom.anir0y.in/post/thm-room-maldoc/ Sat, 29 Aug 2026 20:04:00 +0530 https://classroom.anir0y.in/post/thm-room-maldoc/ TryHackMe MalDoc Static Analysis walkthrough: hex-encoded PDF JavaScript, a macro split across 15 concatenations, and a OneNote payload staged through the registry. https://classroom.anir0y.in/post/thm-room-scriptstaticanalysis/ Sat, 29 Aug 2026 18:39:00 +0530 https://classroom.anir0y.in/post/thm-room-scriptstaticanalysis/ TryHackMe Script Static Analysis walkthrough: a Node.js dropper among 253 decoys, shellcode gzipped before the XOR, a MachineGuid-keyed payload, and GlassWorm. https://classroom.anir0y.in/post/thm-room-threathuntingwithyara/ Sat, 29 Aug 2026 13:05:00 +0530 https://classroom.anir0y.in/post/thm-room-threathuntingwithyara/ Walkthrough of TryHackMe Threat Hunting With YARA: hunting ROOTSAW and WINELOADER with Mandiant's own rules, the wide/base64/xor string modifiers that decide whether a rule fires at all, and the rule file that matches itself. https://classroom.anir0y.in/post/thm-room-staticanalysis1/ Fri, 28 Aug 2026 17:01:00 +0530 https://classroom.anir0y.in/post/thm-room-staticanalysis1/ Walkthrough of TryHackMe Basic Static Analysis: FLOSS recovering a Dbgview.exe stackstring that strings.exe cannot see, imphash and ssdeep tying two samples together, capa mapping anti-VM and Run-key persistence to MBC B0012.001, and PEstudio flagging RPCRT4.dll for a single UuidCreate import. https://classroom.anir0y.in/post/thm-room-trafficanalysispitfalls/ Mon, 24 Aug 2026 07:38:00 +0530 https://classroom.anir0y.in/post/thm-room-trafficanalysispitfalls/ Walkthrough of TryHackMe Traffic Analysis Pitfalls: ASN enrichment over CDN traffic, finding 6,946 QUIC sessions a TCP rule never sees, spotting a DoH switch from a silent UDP/53 host, and attributing a 847 MB exfil to EXCEL.EXE via Sysmon. https://classroom.anir0y.in/post/thm-room-responseandrecovery/ Sat, 22 Aug 2026 16:50:00 +0530 https://classroom.anir0y.in/post/thm-room-responseandrecovery/ Walkthrough of TryHackMe Response and Recovery: scoping attacker post-compromise activity in the Nexus Financial M365 tenant through Unified Audit Logs, two alert-suppressing inbox rules, five SharePoint downloads, an anonymous sharing link to protonmail, and a riskLevel of none that explains the whole incident. https://classroom.anir0y.in/post/thm-room-volttyphoon/ Sat, 22 Aug 2026 15:05:00 +0530 https://classroom.anir0y.in/post/thm-room-volttyphoon/ Walkthrough of TryHackMe Volt Typhoon: reconstructing a full living-off-the-land intrusion in Splunk from ADSelfService Plus, wmic and PowerShell logs, the password reset at 11:10:22, the voltyp-admin account, an ntdsutil AD database dump renamed to cl64.gif, a certutil-decoded ASPX web shell and four event logs cleared. https://classroom.anir0y.in/post/thm-room-operationsilenttransfer/ Sat, 22 Aug 2026 13:31:00 +0530 https://classroom.anir0y.in/post/thm-room-operationsilenttransfer/ Walkthrough of TryHackMe The Silent Transfer: the Advanced Traffic Analysis capstone, pivoting from a single Snort Cobalt Strike alert through Zeek logs to the dropper domain, JA4 fingerprint, SMB sweep, RDP hop and a 312 MB archive exfiltrated to an external endpoint. https://classroom.anir0y.in/post/thm-room-advancedpacketanalysis/ Sat, 22 Aug 2026 12:44:00 +0530 https://classroom.anir0y.in/post/thm-room-advancedpacketanalysis/ Walkthrough of TryHackMe Advanced Packet Analysis: triaging a SYN scan with TShark, decoding base64 C2 tasking, pulling cleartext FTP credentials, exporting and hashing malware from a PCAP, and reading JA4 fingerprints. https://classroom.anir0y.in/post/thm-room-networkmonitoringwithzeek/ Fri, 21 Aug 2026 22:46:00 +0530 https://classroom.anir0y.in/post/thm-room-networkmonitoringwithzeek/ Walkthrough of TryHackMe Network Monitoring with Zeek: reading conn.log, dns.log, http.log, ssl.log and files.log with zeek-cut to find a Cobalt Strike beacon, DNS tunnel and 5 MB exfil POST, then tuning a Notice script from 23 alerts down to 10. https://classroom.anir0y.in/post/thm-room-postincidentactivity/ Fri, 21 Aug 2026 22:03:00 +0530 https://classroom.anir0y.in/post/thm-room-postincidentactivity/ Walkthrough of TryHackMe Post-Incident Activity: reconstructing the full Nexus Financial attack timeline across three M365 sourcetypes in Splunk, calculating dwell time, and converting the IOC tracker into correlated detection rules. https://classroom.anir0y.in/post/thm-room-detectionandanalysis/ Fri, 21 Aug 2026 14:22:00 +0530 https://classroom.anir0y.in/post/thm-room-detectionandanalysis/ Walkthrough of TryHackMe Detection and Analysis: validating an L1 escalation in Splunk, tracing an M365 account compromise from phishing email to inbox rule, and scoping a second victim the alert never mentioned. https://classroom.anir0y.in/post/thm-room-detectmare/ Fri, 21 Aug 2026 00:52:00 +0530 https://classroom.anir0y.in/post/thm-room-detectmare/ Walkthrough of TryHackMe DetectMare: tuning five Sigma detections through a Detection-as-Code pipeline whose red-team check actively bypasses your exclusions, across an APT21 chain from a .docm lure to LSASS dumping, pass-the-hash and a password-protected rar. https://classroom.anir0y.in/post/thm-room-sigmalanguage/ Thu, 20 Aug 2026 20:29:00 +0530 https://classroom.anir0y.in/post/thm-room-sigmalanguage/ Walkthrough of TryHackMe Sigma Language: rule anatomy on a real SigmaHQ rule, writing a recon detection from scratch, converting it to SPL, KQL and EQL with sigma-cli, and fixing six syntax bugs across three broken rules. https://classroom.anir0y.in/post/thm-room-aiautomationdetectioneng/ Thu, 20 Aug 2026 13:56:00 +0530 https://classroom.anir0y.in/post/thm-room-aiautomationdetectioneng/ Walkthrough of TryHackMe AI & Automation in Detection Engineering: a full Detection-as-Code pull request review in TryGitMe, the three bugs that kept a print.exe rule at TP 0/6, and an AI copilot that writes a flawless DCSync rule for someone else's environment. https://classroom.anir0y.in/post/thm-room-introtodetectioneng/ Tue, 18 Aug 2026 15:33:00 +0530 https://classroom.anir0y.in/post/thm-room-introtodetectioneng/ Walkthrough of TryHackMe Intro to Detection Engineering: the DE life cycle, precision vs recall, detection library decay, and all eight flags from the Senna assessment. https://classroom.anir0y.in/post/thm-room-monitoringawsworkloads/ Tue, 18 Aug 2026 14:33:00 +0530 https://classroom.anir0y.in/post/thm-room-monitoringawsworkloads/ Walkthrough of TryHackMe Monitoring AWS Workloads: Falco syscall telemetry on EC2 and inside containers, a command injection to reverse shell, and a Lambda function repurposed into a cryptomining launcher via SSM. https://classroom.anir0y.in/post/thm-room-monitoringawsservices/ Tue, 18 Aug 2026 11:45:00 +0530 https://classroom.anir0y.in/post/thm-room-monitoringawsservices/ Walkthrough of TryHackMe Monitoring AWS Services: a public S3 bucket policy and the filename brute force that followed, SSH open to the world on EC2, an Internet-exposed RDS instance that needed two changes, IAM discovery, and Denial of Wallet. https://classroom.anir0y.in/post/thm-room-monitoringawslogins/ Tue, 18 Aug 2026 11:01:00 +0530 https://classroom.anir0y.in/post/thm-room-monitoringawslogins/ Walkthrough of TryHackMe Monitoring AWS Logins: console logins and MFAUsed, AKIA vs ASIA access keys, an S3 data-extortion attack, AssumeRole session names, and a Splunk integration authenticating as root. https://classroom.anir0y.in/post/thm-room-investigatingwithsplunk/ Tue, 18 Aug 2026 10:24:00 +0530 https://classroom.anir0y.in/post/thm-room-investigatingwithsplunk/ Walkthrough of TryHackMe Investigating with Splunk: a homoglyph backdoor account, WMIC lateral movement, Sysmon registry artefacts, and decoding an Empire PowerShell stager to recover its C2 URL. https://classroom.anir0y.in/post/thm-room-awssecuritylogging/ Tue, 18 Aug 2026 09:25:00 +0530 https://classroom.anir0y.in/post/thm-room-awssecuritylogging/ Walkthrough of TryHackMe AWS Security Logging: CloudTrail console logins and bucket creation, three GuardDuty findings ending in an XMRig miner, CloudFront access logs, and the S3 data event that ties the intrusion together. https://classroom.anir0y.in/post/thm-room-cloudsecuritypitfalls/ Tue, 18 Aug 2026 08:38:00 +0530 https://classroom.anir0y.in/post/thm-room-cloudsecuritypitfalls/ Walkthrough of TryHackMe Cloud Security Pitfalls: IaaS/PaaS/SaaS, the Shared Responsibility Model, why cloud logging is the real obstacle to SIEM coverage, and both challenge flags. https://classroom.anir0y.in/post/thm-room-msintunemonitoring/ Mon, 17 Aug 2026 19:54:00 +0530 https://classroom.anir0y.in/post/thm-room-msintunemonitoring/ Walkthrough of TryHackMe Microsoft Intune Monitoring: tracing a remote device wipe through the Intune audit log, PowerShell scripts running as SYSTEM via the Management Extension, and why one laptop has three different GUIDs. https://classroom.anir0y.in/post/thm-room-sharepointonlinemonitoring/ Mon, 17 Aug 2026 18:47:00 +0530 https://classroom.anir0y.in/post/thm-room-sharepointonlinemonitoring/ Walkthrough of TryHackMe SharePoint Online Monitoring: external sharing links, FileDownloaded exfiltration, OneNote phishing and a full SharePoint compromise investigation. https://classroom.anir0y.in/post/thm-room-exchangeonlinemonitoring/ Mon, 17 Aug 2026 18:14:00 +0530 https://classroom.anir0y.in/post/thm-room-exchangeonlinemonitoring/ Walkthrough of TryHackMe Exchange Online Monitoring: malicious inbox rules, mailbox forwarding to external addresses, message trace analysis, and a full internal phishing investigation. https://classroom.anir0y.in/post/thm-room-entraidmonitoring/ Mon, 17 Aug 2026 17:22:00 +0530 https://classroom.anir0y.in/post/thm-room-entraidmonitoring/ Walkthrough of TryHackMe Entra ID Monitoring: password spraying vs throttled brute force, Identity Protection risk detections, Conditional Access blocks, MFA fatigue, and OAuth consent persistence. https://classroom.anir0y.in/post/thm-room-m365monitoringbasics/ Mon, 17 Aug 2026 16:36:00 +0530 https://classroom.anir0y.in/post/thm-room-m365monitoringbasics/ Walkthrough of TryHackMe M365 Monitoring Basics: Entra ID sign-in and audit logs, M365 unified audit logs, and one account takeover traced from password spray to business email compromise. https://classroom.anir0y.in/post/thm-room-ledger/ Mon, 17 Aug 2026 15:47:00 +0530 https://classroom.anir0y.in/post/thm-room-ledger/ Walkthrough of TryHackMe Ledger: anonymous LDAP enumeration, a password left in a description field, and ESC1 on an AD CS certificate template for Domain Admin. https://classroom.anir0y.in/post/thm-room-detectingadpostexploitation/ Mon, 17 Aug 2026 00:52:00 +0530 https://classroom.anir0y.in/post/thm-room-detectingadpostexploitation/ Walkthrough of TryHackMe Detecting AD Post-Exploitation: rogue Domain Admin persistence, VSS shadow copy and event log deletion, WMIC ransomware fan-out, and wiper research questions. https://classroom.anir0y.in/post/thm-room-detectingadlateralmovement/ Mon, 17 Aug 2026 00:20:00 +0530 https://classroom.anir0y.in/post/thm-room-detectingadlateralmovement/ Walkthrough of TryHackMe Detecting AD Lateral Movement: SMB and ADMIN$ access, PsExec service installation, RDP hop chains, and the Task 7 investigation challenge in Splunk. https://classroom.anir0y.in/post/thm-room-detectingadcredentialattacks/ Sun, 16 Aug 2026 23:55:00 +0530 https://classroom.anir0y.in/post/thm-room-detectingadcredentialattacks/ Walkthrough of TryHackMe Detecting AD Credential Attacks: Kerberoasting via RC4 service tickets, AS-REP roasting, LSASS dumping with procdump, DCSync via Event 4662, and NTDS.dit extraction. https://classroom.anir0y.in/post/thm-room-detectingadinitialaccess/ Sun, 16 Aug 2026 23:25:00 +0530 https://classroom.anir0y.in/post/thm-room-detectingadinitialaccess/ Walkthrough of TryHackMe Detecting AD Initial Access: IIS web shell hunting via w3wp.exe process chains, OWA brute-force correlation, NPS VPN credential attacks, and the Task 8 investigation challenge. https://classroom.anir0y.in/post/thm-room-monitoringactivedirectory/ Sun, 16 Aug 2026 22:50:00 +0530 https://classroom.anir0y.in/post/thm-room-monitoringactivedirectory/ Walkthrough of TryHackMe Monitoring Active Directory: AD event IDs, stack counting for baselines, audit policy, and the new-employee onboarding investigation in Splunk. https://classroom.anir0y.in/post/thm-room-elasticdefend/ Fri, 14 Aug 2026 18:40:00 +0530 https://classroom.anir0y.in/post/thm-room-elasticdefend/ Walkthrough of TryHackMe Elastic: Using Elastic Defend: configure the integration, explore endpoint telemetry, and triage EDR alerts via the Elasticsearch API. https://classroom.anir0y.in/post/thm-room-elasticlab/ Fri, 14 Aug 2026 12:20:00 +0530 https://classroom.anir0y.in/post/thm-room-elasticlab/ Walkthrough of TryHackMe Elastic: Setting up a SOC Lab with Elasticsearch, Kibana and Fleet, ingesting Apache and custom VPN logs to answer the data questions. https://classroom.anir0y.in/post/thm-room-defensivesecuritytrends/ Fri, 14 Aug 2026 11:45:00 +0530 https://classroom.anir0y.in/post/thm-room-defensivesecuritytrends/ Walkthrough of TryHackMe Defensive Security Trends: faster and complex attacks, valid accounts, supply chain, AI impact, and the Verizon DBIR research challenge. https://classroom.anir0y.in/post/thm-room-python-for-pentesters/ Fri, 14 Aug 2026 00:22:00 +0530 https://classroom.anir0y.in/post/thm-room-python-for-pentesters/ Walkthrough of TryHackMe Python for Pentesters: directory enumeration, port scanning, MD5/SHA256 hash cracking, and SSH brute-force against the live target. https://classroom.anir0y.in/post/thm-room-report-writing-soc-l2/ Thu, 13 Aug 2026 21:36:00 +0530 https://classroom.anir0y.in/post/thm-room-report-writing-soc-l2/ Walkthrough of TryHackMe Report Writing for SOC L2: writing for C-level, MSSP customers, and DFIR teams, plus the two report-correction simulations and their flags. https://classroom.anir0y.in/post/thm-room-soc-l2-alert-triage/ Thu, 13 Aug 2026 21:06:00 +0530 https://classroom.anir0y.in/post/thm-room-soc-l2-alert-triage/ Walkthrough of TryHackMe SOC L2 Alert Triage: the L1 vs L2 workflow, log analysis and the threat hunting loop, threat response, and the triage flag. https://classroom.anir0y.in/post/thm-room-senior-security-analyst-intro/ Thu, 13 Aug 2026 20:14:00 +0530 https://classroom.anir0y.in/post/thm-room-senior-security-analyst-intro/ Walkthrough of TryHackMe Senior Security Analyst Intro: what a SOC Level 2 analyst actually does, the L1 to L2 mindset shift, and the SIEM timeline challenge flag. https://classroom.anir0y.in/post/thm-room-threat-intel-and-containment/ Thu, 13 Aug 2026 16:34:23 +0530 https://classroom.anir0y.in/post/thm-room-threat-intel-and-containment/ Walkthrough of TryHackMe Threat Intel & Containment: pre-containment IOCs, controlled vs entire isolation, building threat intelligence, and a pcap practical. https://classroom.anir0y.in/post/thm-room-identification-and-scoping/ Thu, 13 Aug 2026 13:58:00 +0530 https://classroom.anir0y.in/post/thm-room-identification-and-scoping/ Walkthrough of TryHackMe Identification & Scoping: triaging phishing tickets, using the Asset Inventory and Spreadsheet of Doom, and pivoting through IoCs. https://classroom.anir0y.in/post/thm-room-preparation/ Thu, 13 Aug 2026 12:52:00 +0530 https://classroom.anir0y.in/post/thm-room-preparation/ Walkthrough of TryHackMe Preparation: the IR lifecycle, building a CSIRT, chain of custody and jump bags, and configuring Sysmon, SRP and audit-logging visibility. https://classroom.anir0y.in/post/thm-room-atomic-bird-goes-purple-2/ Thu, 13 Aug 2026 10:31:00 +0530 https://classroom.anir0y.in/post/thm-room-atomic-bird-goes-purple-2/ Walkthrough of TryHackMe Atomic Bird Goes Purple #2: credential search, decoy accounts, rogue services, defacement, and registry-planted reverse shells. https://classroom.anir0y.in/post/thm-room-atomic-bird-goes-purple-1/ Wed, 12 Aug 2026 14:40:00 +0530 https://classroom.anir0y.in/post/thm-room-atomic-bird-goes-purple-1/ Walkthrough of TryHackMe Atomic Bird Goes Purple #1: running custom atomic tests and investigating the Sysmon and Aurora EDR artefacts they leave behind. https://classroom.anir0y.in/post/thm-room-atomic-red-team/ Wed, 12 Aug 2026 13:35:00 +0530 https://classroom.anir0y.in/post/thm-room-atomic-red-team/ Walkthrough of TryHackMe Atomic Red Team: driving Invoke-AtomicRedTeam, reading atomic YAMLs, and turning ATT&CK tests into Sysmon and Aurora EDR detections. https://classroom.anir0y.in/post/thm-room-intro-threat-emulation/ Wed, 12 Aug 2026 00:00:00 +0530 https://classroom.anir0y.in/post/thm-room-intro-threat-emulation/ Walkthrough of TryHackMe Intro to Threat Emulation: emulation vs simulation, TIBER-EU and Atomic Red Team, the five-step process, and emulating FIN7 and APT37. https://classroom.anir0y.in/post/thm-room-typo-squatters/ Tue, 11 Aug 2026 16:20:00 +0530 https://classroom.anir0y.in/post/thm-room-typo-squatters/ Walkthrough of TryHackMe Hunt Me II Typo Squatters: tracing a typosquatted 7-Zip MSI through LSASS dumping, DCSync, and ransomware in one Sysmon index. https://classroom.anir0y.in/post/thm-room-payment-collectors/ Tue, 11 Aug 2026 15:20:00 +0530 https://classroom.anir0y.in/post/thm-room-payment-collectors/ Walkthrough of TryHackMe Hunt Me I Payment Collectors: tracing a phish from an LNK lure through a powercat shell, PowerView recon, and DNS exfiltration. https://classroom.anir0y.in/post/thm-room-threat-hunting-endgame/ Tue, 11 Aug 2026 14:10:00 +0530 https://classroom.anir0y.in/post/thm-room-threat-hunting-endgame/ Walkthrough of TryHackMe Threat Hunting Endgame: hunting collection, ICMP exfiltration, and shadow-copy impact across custom case indices in Elastic. https://classroom.anir0y.in/post/thm-room-threat-hunting-pivoting/ Tue, 11 Aug 2026 13:20:00 +0530 https://classroom.anir0y.in/post/thm-room-threat-hunting-pivoting/ Walkthrough of TryHackMe Threat Hunting Pivoting: hunting discovery, service-based privilege escalation, DCSync, and Pass-the-Hash lateral movement in Elastic. https://classroom.anir0y.in/post/thm-room-threat-hunting-foothold/ Tue, 11 Aug 2026 12:20:00 +0530 https://classroom.anir0y.in/post/thm-room-threat-hunting-foothold/ Walkthrough of TryHackMe Threat Hunting Foothold: reconstructing an intrusion across filebeat, winlogbeat, and packetbeat in the Elastic Stack with KQL. https://classroom.anir0y.in/post/thm-room-threat-hunting-introduction/ Tue, 11 Aug 2026 10:15:00 +0530 https://classroom.anir0y.in/post/thm-room-threat-hunting-introduction/ Walkthrough of TryHackMe Threat Hunting Introduction: dwell time, the three hunting approaches and targets, the four hunting methods, and a proactive hunt against APT-Serpent in the practical. https://classroom.anir0y.in/post/thm-room-introduction-to-soar/ Tue, 11 Aug 2026 00:40:00 +0530 https://classroom.anir0y.in/post/thm-room-introduction-to-soar/ Walkthrough of TryHackMe Introduction to SOAR: the SOC challenges it solves, its orchestration and automation, and building playbooks to speed investigations. https://classroom.anir0y.in/post/thm-room-aurora-edr/ Tue, 11 Aug 2026 00:30:00 +0530 https://classroom.anir0y.in/post/thm-room-aurora-edr/ Walkthrough of TryHackMe Aurora EDR: how the Sigma-based agent uses ETW, its presets and response actions, and reading its detections in the Windows Event Log. https://classroom.anir0y.in/post/thm-room-sighunt/ Tue, 11 Aug 2026 00:20:00 +0530 https://classroom.anir0y.in/post/thm-room-sighunt/ Walkthrough of TryHackMe SigHunt: tune nine Sigma detection rules in the Sigma Validator to catch each stage of a ransomware attack chain and grab the flags. https://classroom.anir0y.in/post/thm-room-sigma/ Mon, 10 Aug 2026 23:58:00 +0530 https://classroom.anir0y.in/post/thm-room-sigma/ Walkthrough of TryHackMe Sigma: write Sigma rules, convert them with sigmac, and hunt an AnyDesk install, a rogue scheduled task, and ransomware in Kibana. https://classroom.anir0y.in/post/thm-room-threat-intelligence-for-soc/ Mon, 10 Aug 2026 23:55:00 +0530 https://classroom.anir0y.in/post/thm-room-threat-intelligence-for-soc/ Walkthrough of TryHackMe Threat Intelligence for SOC: hunt an IOC list in Kibana to find a compromised host, sinkhole domains, and build ElastAlert rules. https://classroom.anir0y.in/post/thm-room-tactical-detection/ Mon, 10 Aug 2026 23:45:00 +0530 https://classroom.anir0y.in/post/thm-room-tactical-detection/ Walkthrough of TryHackMe Tactical Detection: turn unique and public IOCs into Sigma rules, translate them with Uncoder, and set Windows file tripwires. https://classroom.anir0y.in/post/thm-room-slingshot/ Mon, 10 Aug 2026 19:10:00 +0530 https://classroom.anir0y.in/post/thm-room-slingshot/ Walkthrough of TryHackMe Slingshot: use Kibana and KQL to rebuild a web-server kill chain from Apache and ModSecurity logs, with every answer and flag. https://classroom.anir0y.in/post/thm-room-become-a-defender/ Mon, 10 Aug 2026 03:15:00 +0530 https://classroom.anir0y.in/post/thm-room-become-a-defender/ Walkthrough of TryHackMe Become a Defender: map a client's infrastructure, prioritize critical systems, and defend in depth, with every answer and flag. https://classroom.anir0y.in/post/thm-room-become-a-hacker/ Mon, 10 Aug 2026 02:30:00 +0530 https://classroom.anir0y.in/post/thm-room-become-a-hacker/ Walkthrough of TryHackMe Become a Hacker: enumerate a web app to find a hidden login, then chain it with a Hydra dictionary attack to log in and grab the flag. https://classroom.anir0y.in/post/thm-room-cryptography-concepts/ Mon, 10 Aug 2026 01:20:00 +0530 https://classroom.anir0y.in/post/thm-room-cryptography-concepts/ Walkthrough of TryHackMe Cryptography Concepts: plaintext vs ciphertext, the Caesar cipher game, symmetric vs asymmetric encryption, and how HTTPS uses both. https://classroom.anir0y.in/post/thm-room-the-cia-triad/ Mon, 10 Aug 2026 00:20:00 +0530 https://classroom.anir0y.in/post/thm-room-the-cia-triad/ Walkthrough of TryHackMe The CIA Triad: what Confidentiality, Integrity, and Availability protect, every task answer, and the drag-and-drop flag exercise. https://classroom.anir0y.in/post/thm-management-wants-a-word/ Sun, 09 Aug 2026 23:40:00 +0530 https://classroom.anir0y.in/post/thm-management-wants-a-word/ DFIR walkthrough of TryHackMe Management Wants a Word: peeling back DPAPI, a Chrome v10 password, a VeraCrypt volume, and a rasterised PDF to reach the flag. https://classroom.anir0y.in/post/thm-room-new-hire-old-artifacts/ Sun, 09 Aug 2026 14:40:00 +0530 https://classroom.anir0y.in/post/thm-room-new-hire-old-artifacts/ Walkthrough of TryHackMe New Hire Old Artifacts: a Splunk threat hunt over Sysmon logs, with the SPL for every answer and the full attack chain. https://classroom.anir0y.in/post/thm-room-database-sql-basics/ Sun, 09 Aug 2026 02:45:00 +0530 https://classroom.anir0y.in/post/thm-room-database-sql-basics/ Walkthrough of TryHackMe Database SQL Basics: databases, tables/rows/columns, and the SELECT, FROM, WHERE, ORDER BY clauses, with every Cafe SQL answer. https://classroom.anir0y.in/post/thm-room-javascript-simple-demo/ Sun, 09 Aug 2026 02:10:00 +0530 https://classroom.anir0y.in/post/thm-room-javascript-simple-demo/ Walkthrough of TryHackMe JavaScript Simple Demo: rebuilding Guess the Number in Node.js with let/const, console.log, parseInt, if/else if, and while. https://classroom.anir0y.in/post/thm-room-python-simple-demo/ Sun, 09 Aug 2026 00:55:00 +0530 https://classroom.anir0y.in/post/thm-room-python-simple-demo/ Walkthrough of TryHackMe Python Simple Demo: building a Guess the Number game with variables, print/int/input, if/elif/else conditionals, and a while loop. https://classroom.anir0y.in/post/thm-room-data-encoding/ Sun, 09 Aug 2026 00:20:00 +0530 https://classroom.anir0y.in/post/thm-room-data-encoding/ Walkthrough of TryHackMe Data Encoding: ASCII and TryHackMe as bytes, Unicode code points, UTF-8/16/32, and every ASCII and Unicode task answer explained. https://classroom.anir0y.in/post/thm-room-guestbook/ Sat, 08 Aug 2026 23:50:00 +0530 https://classroom.anir0y.in/post/thm-room-guestbook/ Walkthrough of TryHackMe The Guestbook: the two-hour rabbit hole I fell into, then the real bug, VERA's cross-entry prompt injection to RCE and a Base64 flag. https://classroom.anir0y.in/post/thm-room-windows-basics/ Sat, 08 Aug 2026 17:10:00 +0530 https://classroom.anir0y.in/post/thm-room-windows-basics/ Walkthrough of TryHackMe Windows Basics: Server 2019 system specs, File Explorer, Settings, Task Manager, and recovering a quarantined EICAR file name. https://classroom.anir0y.in/post/thm-room-os-intro/ Sat, 08 Aug 2026 15:50:00 +0530 https://classroom.anir0y.in/post/thm-room-os-intro/ Walkthrough of TryHackMe Operating Systems Introduction: kernel vs user space, reading a MATE desktop's specs and filesystems, and a flag in a user's note. https://classroom.anir0y.in/post/thm-room-prompt-injection/ Sat, 08 Aug 2026 14:45:00 +0530 https://classroom.anir0y.in/post/thm-room-prompt-injection/ Walkthrough of TryHackMe Prompt Injection: direct injection to buy a $1 supercar and indirect injection that leaks a CEO email through a calendar event. https://classroom.anir0y.in/post/thm-room-after-hours/ Sat, 08 Aug 2026 10:00:00 +0530 https://classroom.anir0y.in/post/thm-room-after-hours/ TryHackMe After Hours walkthrough: WMI fileless persistence in the CIM repository, a PowerShell loader, and a .NET payload inflated from a WMI property. https://classroom.anir0y.in/post/thm-room-infinity-pool/ Fri, 07 Aug 2026 20:50:00 +0530 https://classroom.anir0y.in/post/thm-room-infinity-pool/ Walkthrough of TryHackMe Infinity Pool: command injection to a web foothold, FreePBX UCP (CVE-2026-46376) to read an automation key from a voicemail, then root. https://classroom.anir0y.in/post/thm-room-hollow-shell/ Thu, 06 Aug 2026 13:00:00 +0530 https://classroom.anir0y.in/post/thm-room-hollow-shell/ TryHackMe The Hollow Shell, Zip Slip arbitrary file write to RCE by bombing the gunicorn worker to bust Jinja's cached template. https://classroom.anir0y.in/post/thm-ai-system-reconnaissance/ Wed, 05 Aug 2026 15:30:00 +0530 https://classroom.anir0y.in/post/thm-ai-system-reconnaissance/ Walkthrough of TryHackMe AI System Reconnaissance — scanning AI-specific ports, fingerprinting Triton and MLflow, and looting a Jupyter notebook. https://classroom.anir0y.in/post/thm-room-do-not-disturb/ Wed, 05 Aug 2026 13:00:00 +0530 https://classroom.anir0y.in/post/thm-room-do-not-disturb/ Walkthrough of the TryHackMe room Do Not Disturb, NoSQL login bypass to EJS SSTI to RCE, a Node inspector for lateral movement, and the disk group for root. https://classroom.anir0y.in/post/thm-room-cryptocabana/ Wed, 05 Aug 2026 12:00:00 +0530 https://classroom.anir0y.in/post/thm-room-cryptocabana/ Walkthrough of TryHackMe CryptoCabana, an over-scoped Azure SAS token in client-side JS, a hidden container, and a Key Vault secret that outlived rotation. https://classroom.anir0y.in/post/thm-room-towel-on-the-sunbed/ Wed, 05 Aug 2026 10:30:00 +0530 https://classroom.anir0y.in/post/thm-room-towel-on-the-sunbed/ Walkthrough of the TryHackMe room Towel on the Sunbed, beating a once-per-24h staking reward with a TOCTOU race, and why naive threading loses it. https://classroom.anir0y.in/post/thm-room-overheard-at-breakfast/ Tue, 04 Aug 2026 22:15:00 +0530 https://classroom.anir0y.in/post/thm-room-overheard-at-breakfast/ Walkthrough of the TryHackMe room Overheard at Breakfast, turning an email dropped in casual chat into a forgotten Gravatar profile, and the flag in its bio. https://classroom.anir0y.in/post/thm-room-beach-bar/ Tue, 04 Aug 2026 20:30:00 +0530 https://classroom.anir0y.in/post/thm-room-beach-bar/ Walkthrough of the TryHackMe room Beach Bar, a demo DJ login, an unsafe PyYAML loader that turns a playlist into RCE, and root's password leaking via ps. https://classroom.anir0y.in/post/thm-room-ai-threat-modelling/ Fri, 31 Jul 2026 21:15:00 +0530 https://classroom.anir0y.in/post/thm-room-ai-threat-modelling/ Walkthrough of the TryHackMe AI Threat Modelling room, adapting STRIDE for AI, enriching with MITRE ATLAS, and mapping OWASP LLM Top 10 risks to components. https://classroom.anir0y.in/post/thm-room-complimentary/ Fri, 31 Jul 2026 18:00:00 +0530 https://classroom.anir0y.in/post/thm-room-complimentary/ Walkthrough of the TryHackMe room Complimentary, abusing a Cognito unauthenticated identity pool to get AWS keys and scan every guest record out of DynamoDB. https://classroom.anir0y.in/post/thm-room-404/ Fri, 31 Jul 2026 14:30:00 +0530 https://classroom.anir0y.in/post/thm-room-404/ Walkthrough of the TryHackMe room Room 404, finding an exposed .git directory on a staging server, mirroring it, and rebuilding the source to recover the flag. https://classroom.anir0y.in/post/thm-room-concierge-knows-too-much/ Fri, 31 Jul 2026 00:30:00 +0530 https://classroom.anir0y.in/post/thm-room-concierge-knows-too-much/ Walkthrough of the TryHackMe room The Concierge Knows Too Much, impersonating a trusted guest to make an AI hotel concierge leak its own system prompt. https://classroom.anir0y.in/post/thm-room-packed-light/ Thu, 30 Jul 2026 22:45:00 +0530 https://classroom.anir0y.in/post/thm-room-packed-light/ Walkthrough of the TryHackMe Packed Light room, spotting a beaconing keylogger in a pcap and decoding its stolen keystrokes out of HTTP Cookie headers. https://classroom.anir0y.in/post/thm-room-pentesting-fundamentals/ Tue, 23 Jun 2026 23:00:00 +0530 https://classroom.anir0y.in/post/thm-room-pentesting-fundamentals/ A beginner walkthrough of the TryHackMe Pentesting Fundamentals room, what a pentest is, hacker ethics, methodologies (OSSTMM/OWASP/NIST), and box types. https://classroom.anir0y.in/post/thm-room-cloud-computing-fundamentals/ Tue, 23 Jun 2026 12:00:00 +0530 https://classroom.anir0y.in/post/thm-room-cloud-computing-fundamentals/ A beginner walkthrough of the TryHackMe Cloud Computing Fundamentals room, what the cloud is, deployment types, and service models (IaaS, PaaS, SaaS). https://classroom.anir0y.in/post/technique-20-portswigger-labs-one-session/ Mon, 06 Apr 2026 12:00:00 +0530 https://classroom.anir0y.in/post/technique-20-portswigger-labs-one-session/ Speed-running 20 PortSwigger labs across 8 vuln classes — SSTI, SQLi, NoSQLi, path traversal, OS command injection, XXE, SSRF, and access control bypass. https://classroom.anir0y.in/post/portswigger-session2-30-labs/ Thu, 02 Apr 2026 12:00:00 +0530 https://classroom.anir0y.in/post/portswigger-session2-30-labs/ Session 2: 30 PortSwigger labs covering 5 JWT attacks, 16 XSS evasion techniques, 6 CSRF bypasses, NoSQL injection, GraphQL, and more. https://classroom.anir0y.in/post/portswigger-30-labs-marathon/ Thu, 02 Apr 2026 04:00:00 +0530 https://classroom.anir0y.in/post/portswigger-30-labs-marathon/ 30 PortSwigger Web Security Academy labs solved in one session — SSRF, SQLi, SSTI, XXE, IDOR, CSRF, CORS, deserialization, and XSS, with key payloads. https://classroom.anir0y.in/post/portswigger-practitioner-labs-7-techniques/ Thu, 02 Apr 2026 02:00:00 +0530 https://classroom.anir0y.in/post/portswigger-practitioner-labs-7-techniques/ 7 PortSwigger Practitioner labs solved — blind SQLi, SSTI, access control bypass, file upload traversal, NoSQLi, CSRF bypass, and web cache deception. https://classroom.anir0y.in/post/tryhackme-webapp-pentesting-injection-clientside/ Thu, 02 Apr 2026 01:00:00 +0530 https://classroom.anir0y.in/post/tryhackme-webapp-pentesting-injection-clientside/ TryHackMe Web Application Pentesting notes — advanced SQL injection, XSS evasion, CSRF SameSite bypass, and SSRF, with bug bounty applicability for each. https://classroom.anir0y.in/post/tryhackme-hammer/ Wed, 01 Apr 2026 23:30:00 +0530 https://classroom.anir0y.in/post/tryhackme-hammer/ TryHackMe Hammer walkthrough — chaining 5 bugs to RCE: directory fuzzing, email discovery in logs, OTP brute force via session rotation, and JWT kid abuse. https://classroom.anir0y.in/post/tryhackme-mfa-attacks/ Wed, 01 Apr 2026 23:00:00 +0530 https://classroom.anir0y.in/post/tryhackme-mfa-attacks/ A practical walkthrough of exploiting Multi-Factor Authentication weaknesses — OTP leakage, MFA bypass via logic flaws, and brute-forcing with logout evasion. https://classroom.anir0y.in/post/tryhackme-serversidetemplateinjection/ Tue, 31 Mar 2026 19:00:00 +0530 https://classroom.anir0y.in/post/tryhackme-serversidetemplateinjection/ TryHackMe SSTI room walkthrough — detecting template engines and exploiting Smarty, Pug, Jinja2, and Twig, plus mitigation strategies. https://classroom.anir0y.in/post/tryhackme-multifactorauthentication/ Tue, 31 Mar 2026 17:30:00 +0530 https://classroom.anir0y.in/post/tryhackme-multifactorauthentication/ TryHackMe Multi-Factor Authentication room walkthrough — understanding MFA, common vulnerabilities, OTP leakage, and bypassing auto-logout features. https://classroom.anir0y.in/post/burp-academy-server-side-vulns-apprentice/ Tue, 31 Mar 2026 15:30:00 +0530 https://classroom.anir0y.in/post/burp-academy-server-side-vulns-apprentice/ Walkthrough of 12 PortSwigger Apprentice server-side labs across 7 classes — path traversal, SQLi, SSRF, command injection, file upload, access control. https://classroom.anir0y.in/post/tryhackme-webapppentesting-path/ Tue, 31 Mar 2026 13:00:00 +0530 https://classroom.anir0y.in/post/tryhackme-webapppentesting-path/ TryHackMe Web Application Pentesting path notes — injection attacks, server-side and client-side attacks, and HTTP request smuggling, condensed. https://classroom.anir0y.in/post/burp-academy-practitioner-labs/ Tue, 31 Mar 2026 00:00:00 +0000 https://classroom.anir0y.in/post/burp-academy-practitioner-labs/ Complete walkthrough of 39 PortSwigger Web Security Academy labs covering SQLi, XSS, SSRF, API Testing, Race Conditions, and more. https://classroom.anir0y.in/post/blog-dissecting-rto-echallan-banking-trojan/ Thu, 19 Feb 2026 21:00:00 +0530 https://classroom.anir0y.in/post/blog-dissecting-rto-echallan-banking-trojan/ Analysis of an Android banking trojan posing as an Indian RTO eChallan app — two-stage dropper, NP Protect packer, Firebase C2, SMS/USSD abuse, and UPI theft. https://classroom.anir0y.in/post/traverse/ Sun, 04 Jan 2026 20:58:51 +0530 https://classroom.anir0y.in/post/traverse/ TryHackMe Traverse walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Traverse challenge room. https://classroom.anir0y.in/post/benign/ Tue, 16 Dec 2025 13:23:02 +0530 https://classroom.anir0y.in/post/benign/ TryHackMe Benign walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Benign challenge room. https://classroom.anir0y.in/post/itsybitsy/ Tue, 16 Dec 2025 12:01:28 +0530 https://classroom.anir0y.in/post/itsybitsy/ TryHackMe ItsyBitsy walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the ItsyBitsy challenge room. https://classroom.anir0y.in/post/log-analysis-with-siem/ Mon, 15 Dec 2025 19:16:54 +0530 https://classroom.anir0y.in/post/log-analysis-with-siem/ TryHackMe Log Analysis With SIEM walkthrough — practice Security Information and Event Management log analysis and threat detection. https://classroom.anir0y.in/post/network-discovery-detection/ Fri, 12 Dec 2025 13:20:33 +0530 https://classroom.anir0y.in/post/network-discovery-detection/ TryHackMe Network Discovery Detection walkthrough — practice network security fundamentals including scanning, enumeration, and protocol analysis. https://classroom.anir0y.in/post/healthgpt/ Sun, 30 Nov 2025 19:57:58 +0530 https://classroom.anir0y.in/post/healthgpt/ TryHackMe Healthgpt walkthrough — A safety-compliant AI assistant that has strict rules against revealing sensitive internal data. https://classroom.anir0y.in/post/input-manipulation--prompt-injection/ Wed, 12 Nov 2025 12:21:07 +0530 https://classroom.anir0y.in/post/input-manipulation--prompt-injection/ Try Hack Me Room Input Manipulation & Prompt Injection solved by Animesh Roy. this is a walkthrough. read more... https://classroom.anir0y.in/post/thm-man-in-the-middle-detection/ Mon, 13 Oct 2025 10:46:19 +0530 https://classroom.anir0y.in/post/thm-man-in-the-middle-detection/ TryHackMe Man in the Middle Detection walkthrough — This is a walkthrough; https://classroom.anir0y.in/post/owasp-e-jagriti-bug-report/ Mon, 14 Jul 2025 02:24:47 +0530 https://classroom.anir0y.in/post/owasp-e-jagriti-bug-report/ Exposing a User Enumeration Vulnerability in e-Jagriti's findUser Endpoint — OWASP bug bounty report by Animesh Roy. https://classroom.anir0y.in/post/blog-subnet-p1/ Sat, 01 Feb 2025 13:36:24 +0530 https://classroom.anir0y.in/post/blog-subnet-p1/ An in-depth guide to subnetting — learn the fundamentals, work through practical examples, and apply your skills with hands-on lab exercises to master it. https://classroom.anir0y.in/post/blog-automating-apache-guacamole-installation-with-docker-on-ubuntu/ Tue, 13 Aug 2024 11:11:42 +0530 https://classroom.anir0y.in/post/blog-automating-apache-guacamole-installation-with-docker-on-ubuntu/ Automate Apache Guacamole setup on Ubuntu with a Docker bash script — clientless VNC/RDP/SSH remote desktop, install checks, and easy credential access. https://classroom.anir0y.in/post/blog-how-to-enable-folder-share-in-kali-vm-and-windows-host/ Thu, 30 May 2024 13:12:02 +0530 https://classroom.anir0y.in/post/blog-how-to-enable-folder-share-in-kali-vm-and-windows-host/ A step-by-step guide to mounting a Windows folder in a Kali Linux VM using VMware and open-vm-tools, with troubleshooting tips for a smoother workflow. https://classroom.anir0y.in/post/blog-addressing-alligation/ Fri, 15 Mar 2024 12:50:55 +0530 https://classroom.anir0y.in/post/blog-addressing-alligation/ Addressing recent allegations against anir0y.in — a transparent response clarifying misconceptions about darknet links and phishing claims. https://classroom.anir0y.in/post/blog-hax0r-stories-001/ Mon, 11 Mar 2024 19:13:04 +0530 https://classroom.anir0y.in/post/blog-hax0r-stories-001/ The rise and fall of Haxor, an enigmatic hacker — Animesh Roy's story of the mysterious figure who captured the attention of the cybersecurity world. https://classroom.anir0y.in/post/blog-tor-darknet-links/ Mon, 02 Oct 2023 14:34:21 +0530 https://classroom.anir0y.in/post/blog-tor-darknet-links/ Curated list of verified Tor darknet links and onion services. Updated with safety warnings and phishing link removal notices. https://classroom.anir0y.in/post/blog-how-to-trust-imported-gpg-keys/ Tue, 30 May 2023 11:59:25 +0530 https://classroom.anir0y.in/post/blog-how-to-trust-imported-gpg-keys/ Learn how to trust imported GPG keys using the web of trust, keyserver, or manually. GPG, trust, imported keys, web of trust, keyserver, manual trust https://classroom.anir0y.in/post/blog-autohackos/ Tue, 09 May 2023 20:42:03 +0530 https://classroom.anir0y.in/post/blog-autohackos/ AutoHackOS — a Linux-based OS for automobile pentesting with CAN bus analysis, wireless hacking, and vehicle vulnerability scanning tools. https://classroom.anir0y.in/post/soc-splunk101/ Mon, 10 Apr 2023 19:27:17 +0530 https://classroom.anir0y.in/post/soc-splunk101/ Explore 80+ practical Splunk use cases for SOC analysts. Learn to detect audit log tampering, large web uploads, and more with ready-to-use SPL queries. https://classroom.anir0y.in/post/blog-optimizing-web-application-performance-and-security-with-azure-front-door-and-application-gateway/ Thu, 16 Mar 2023 22:06:19 +0530 https://classroom.anir0y.in/post/blog-optimizing-web-application-performance-and-security-with-azure-front-door-and-application-gateway/ Optimize web app performance and security with Azure Front Door and Application Gateway — load balancing, WAF protection, and SSL, with configuration tips. https://classroom.anir0y.in/post/blog-watering-hole-attacks-scanbox-keylogger/ Sun, 12 Mar 2023 19:25:10 +0530 https://classroom.anir0y.in/post/blog-watering-hole-attacks-scanbox-keylogger/ How watering hole attacks use infected websites to compromise devices — a look at the Scanbox keylogger, who it targets, and how to defend against it. https://classroom.anir0y.in/post/blog-types-of-phishing/ Wed, 22 Feb 2023 18:50:22 +0530 https://classroom.anir0y.in/post/blog-types-of-phishing/ Phishing explained — the four types (email, spear phishing, smishing, vishing), how each attack works, and practical tips to protect yourself and your org. https://classroom.anir0y.in/post/smshingintro/ Thu, 26 Jan 2023 00:03:57 +0530 https://classroom.anir0y.in/post/smshingintro/ What smishing is, how SMS-based phishing works, common tactics used to steal your data, and the best ways to spot and protect yourself from these attacks. https://classroom.anir0y.in/post/bitly_url_shortner/ Tue, 29 Nov 2022 15:32:55 +0530 https://classroom.anir0y.in/post/bitly_url_shortner/ using BITLY URL API create your own URL shortner Script using Python. https://classroom.anir0y.in/post/tinyurl/ Sun, 13 Nov 2022 18:47:39 +0530 https://classroom.anir0y.in/post/tinyurl/ using TINY URL API create your own URL shortner Script using Python https://classroom.anir0y.in/post/tryhackme-osquerythebasics/ Sat, 12 Nov 2022 18:18:23 +0530 https://classroom.anir0y.in/post/tryhackme-osquerythebasics/ TryHackMe writeup | Osquery The Basics walkthrough — learn endpoint monitoring with osquery SQL-based queries for process, network, and file system analysis. https://classroom.anir0y.in/post/tryhackme-printnightmareagain/ Mon, 31 Oct 2022 14:14:20 +0530 https://classroom.anir0y.in/post/tryhackme-printnightmareagain/ Try Hack Me Room rintNightmare, again solved by Animesh Roy. this is a walkthrough. read more... https://classroom.anir0y.in/post/tryhackme-surfer/ Sat, 22 Oct 2022 17:00:08 +0530 https://classroom.anir0y.in/post/tryhackme-surfer/ TryHackMe Surfer walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Surfer challenge room. https://classroom.anir0y.in/post/android-malwareanalysis/ Tue, 11 Oct 2022 19:04:38 +0530 https://classroom.anir0y.in/post/android-malwareanalysis/ A curated list of Android malware analysis tools for static and dynamic analysis: ClassyShark, StaCoAn, SmaliSCA, maldrolyzer, Argus-SAF, DroidRA, and more. https://classroom.anir0y.in/post/blog-vwa/ Fri, 30 Sep 2022 18:50:22 +0530 https://classroom.anir0y.in/post/blog-vwa/ Vulnerable Web Application is now available! https://classroom.anir0y.in/post/thm-intermediatenmap/ Fri, 23 Sep 2022 15:28:41 +0530 https://classroom.anir0y.in/post/thm-intermediatenmap/ TryHackMe Intermediate Nmap walkthrough — master Nmap network scanning techniques including service detection, scripting engine, and firewall evasion. https://classroom.anir0y.in/post/tryhackme-phishingemails4/ Tue, 16 Aug 2022 15:24:03 +0530 https://classroom.anir0y.in/post/tryhackme-phishingemails4/ TryHackMe Phishing Emails 4 walkthrough — analyze phishing emails, identify social engineering techniques, and examine malicious headers and payloads. https://classroom.anir0y.in/post/tryhackme-redteamthreatintel/ Fri, 12 Aug 2022 13:05:49 +0530 https://classroom.anir0y.in/post/tryhackme-redteamthreatintel/ TryHackMe Red Team Threat Intel walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained. https://classroom.anir0y.in/post/what_is_ransomware/ Mon, 20 Jun 2022 16:58:42 +0530 https://classroom.anir0y.in/post/what_is_ransomware/ All About the Ransomware and how it works! https://classroom.anir0y.in/post/osint_resources-i/ Mon, 30 May 2022 03:36:44 +0530 https://classroom.anir0y.in/post/osint_resources-i/ OSINT Tools for gathering information and actions forensic https://classroom.anir0y.in/post/stegnography/ Thu, 26 May 2022 21:42:28 +0530 https://classroom.anir0y.in/post/stegnography/ Steghide Is an open-source, command-line software that can encode and decode data into image files https://classroom.anir0y.in/post/tryhackme-operatingsystemsecurity/ Mon, 16 May 2022 12:02:51 +0530 https://classroom.anir0y.in/post/tryhackme-operatingsystemsecurity/ TryHackMe Operating System Security walkthrough — understand operating system security fundamentals including hardening, access controls, and common weaknesses. https://classroom.anir0y.in/post/tryhackme-oh-my-webserver/ Wed, 09 Mar 2022 10:50:11 +0530 https://classroom.anir0y.in/post/tryhackme-oh-my-webserver/ TryHackMe Oh My Webserver walkthrough — exploit web application vulnerabilities and practice common web attack techniques. https://classroom.anir0y.in/post/dvwa-docker-setup/ Sat, 05 Mar 2022 21:05:05 +0530 https://classroom.anir0y.in/post/dvwa-docker-setup/ Set up DVWA (Damn Vulnerable Web Application) with Docker — quick install guide for practicing web application security testing. https://classroom.anir0y.in/post/notes-domainenum/ Sat, 26 Feb 2022 20:55:07 +0530 https://classroom.anir0y.in/post/notes-domainenum/ Active Directory domain enumeration cheat sheet — PowerShell commands for users, groups, GPOs, ACLs, and trust mapping. https://classroom.anir0y.in/post/tryhackme-jr-security-analyst-intro/ Sat, 26 Feb 2022 11:57:17 +0530 https://classroom.anir0y.in/post/tryhackme-jr-security-analyst-intro/ TryHackMe Jr Security Analyst Intro walkthrough — introduction to SOC analyst responsibilities, alert triage, and incident response fundamentals. https://classroom.anir0y.in/post/tryhackme-phishingemails-2/ Wed, 26 Jan 2022 13:16:10 +0530 https://classroom.anir0y.in/post/tryhackme-phishingemails-2/ TryHackMe Phishing Emails 2 walkthrough — analyze phishing emails, identify social engineering techniques, and examine malicious headers and payloads. https://classroom.anir0y.in/post/phishingemails1tryoe/ Mon, 24 Jan 2022 17:33:15 +0530 https://classroom.anir0y.in/post/phishingemails1tryoe/ TryHackMe Phishing Emails 1 walkthrough — analyze phishing emails, identify social engineering techniques, and examine malicious headers and payloads. https://classroom.anir0y.in/post/tryhackme-androidmalwareanalysis/ Sun, 23 Jan 2022 11:38:33 +0530 https://classroom.anir0y.in/post/tryhackme-androidmalwareanalysis/ TryHackMe Android Malware Analysis walkthrough — Android malware analysis with Pithus (static and hunting) https://classroom.anir0y.in/post/classroom-nfs/ Wed, 19 Jan 2022 13:47:54 +0530 https://classroom.anir0y.in/post/classroom-nfs/ installation of NFS & Enumeation using Various tools. https://classroom.anir0y.in/post/tryhackme-road/ Tue, 30 Nov 2021 15:39:49 +0530 https://classroom.anir0y.in/post/tryhackme-road/ TryHackMe Road walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Road challenge room. https://classroom.anir0y.in/post/tryhackme-cybercrafted/ Wed, 24 Nov 2021 15:54:45 +0530 https://classroom.anir0y.in/post/tryhackme-cybercrafted/ TryHackMe CyberCrafted walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the CyberCrafted challenge room. https://classroom.anir0y.in/post/tryhackme-revilcorp/ Tue, 23 Nov 2021 13:51:46 +0530 https://classroom.anir0y.in/post/tryhackme-revilcorp/ TryHackMe REvil Corp walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the REvil Corp challenge room. https://classroom.anir0y.in/post/tryhackme-phishingyl/ Tue, 16 Nov 2021 18:51:09 +0530 https://classroom.anir0y.in/post/tryhackme-phishingyl/ TryHackMe Phishing walkthrough — analyze phishing emails, identify social engineering techniques, and examine malicious headers and payloads. https://classroom.anir0y.in/post/tryhackme-vulnerabilitycapstone/ Fri, 29 Oct 2021 12:13:26 +0530 https://classroom.anir0y.in/post/tryhackme-vulnerabilitycapstone/ TryHackMe Vulnerability Capstone walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained. https://classroom.anir0y.in/post/tryhackme-netsecchallenge/ Mon, 18 Oct 2021 13:50:55 +0530 https://classroom.anir0y.in/post/tryhackme-netsecchallenge/ TryHackMe Net Sec Challenge walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained. https://classroom.anir0y.in/post/ref-do/ Sun, 03 Oct 2021 21:58:41 +0530 https://classroom.anir0y.in/post/ref-do/ Deploy faster & scale easier with an application server that saves your team time & money https://classroom.anir0y.in/post/tryhackme-meterpreter/ Thu, 30 Sep 2021 13:21:37 +0530 https://classroom.anir0y.in/post/tryhackme-meterpreter/ A deep dive into Meterpreter and how in-memory payloads enable post-exploitation — the TryHackMe Metasploit Meterpreter room, solved by Animesh Roy. https://classroom.anir0y.in/post/tryhackme-exploitingavulnerabilityv2.md/ Sun, 26 Sep 2021 08:29:10 +0530 https://classroom.anir0y.in/post/tryhackme-exploitingavulnerabilityv2.md/ TryHackMe Exploit Vulnerabilities walkthrough — identify and exploit vulnerabilities in target systems to gain unauthorized access. https://classroom.anir0y.in/post/tryhackme-vulnerabilities101/ Tue, 21 Sep 2021 14:21:54 +0530 https://classroom.anir0y.in/post/tryhackme-vulnerabilities101/ TryHackMe Vulnerabilities 101 walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained. https://classroom.anir0y.in/post/tryhackme-empline/ Sun, 19 Sep 2021 13:14:49 +0530 https://classroom.anir0y.in/post/tryhackme-empline/ TryHackMe Empline walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Empline challenge room. https://classroom.anir0y.in/post/howto-install-openvas/ Mon, 13 Sep 2021 23:16:16 +0530 https://classroom.anir0y.in/post/howto-install-openvas/ Step-by-step OpenVAS installation guide — set up the open-source vulnerability scanner for network security assessments. https://classroom.anir0y.in/post/tryhackme-thecodcaper/ Mon, 13 Sep 2021 12:40:13 +0530 https://classroom.anir0y.in/post/tryhackme-thecodcaper/ TryHackMe The Cod Caper walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the The Cod Caper challenge room. https://classroom.anir0y.in/post/tryhackme-django/ Sat, 11 Sep 2021 18:40:31 +0530 https://classroom.anir0y.in/post/tryhackme-django/ TryHackMe Introduction to Django walkthrough — learn Django web framework fundamentals including models, views, templates, and common security pitfalls. https://classroom.anir0y.in/post/tryhackme-principlesofsecurity/ Thu, 09 Sep 2021 14:23:47 +0530 https://classroom.anir0y.in/post/tryhackme-principlesofsecurity/ TryHackMe Principles of Security walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained. https://classroom.anir0y.in/post/tryhackme-wordpresscve202129447/ Sun, 29 Aug 2021 14:35:45 +0530 https://classroom.anir0y.in/post/tryhackme-wordpresscve202129447/ TryHackMe WordPress CVE-2021-29447 walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained. https://classroom.anir0y.in/post/tryhackme-intro2winold/ Tue, 24 Aug 2021 15:17:46 +0530 https://classroom.anir0y.in/post/tryhackme-intro2winold/ TryHackMe Intro to Windows walkthrough — explore Windows operating system fundamentals, security features, and common attack surfaces. https://classroom.anir0y.in/post/tryhackme-cowboyhacker/ Fri, 20 Aug 2021 23:29:16 +0530 https://classroom.anir0y.in/post/tryhackme-cowboyhacker/ TryHackMe Bounty Hacker walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Bounty Hacker challenge room. https://classroom.anir0y.in/post/tryhackme-powershell/ Tue, 17 Aug 2021 14:58:29 +0530 https://classroom.anir0y.in/post/tryhackme-powershell/ TryHackMe Hacking with PowerShell walkthrough — step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained. https://classroom.anir0y.in/post/tryhackme-superspamr/ Fri, 13 Aug 2021 09:04:14 +0530 https://classroom.anir0y.in/post/tryhackme-superspamr/ TryHackMe Super-Spam walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Super-Spam challenge room. https://classroom.anir0y.in/post/tryhackme-internal/ Tue, 10 Aug 2021 11:44:25 +0530 https://classroom.anir0y.in/post/tryhackme-internal/ TryHackMe Internal walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Internal challenge room. https://classroom.anir0y.in/post/tryhackme-mma/ Thu, 05 Aug 2021 12:08:59 +0530 https://classroom.anir0y.in/post/tryhackme-mma/ TryHackMe Mobile Malware Analysis walkthrough — analyze malware samples using static and dynamic analysis techniques to understand malicious behavior. https://classroom.anir0y.in/post/tryhackme-relevant/ Wed, 04 Aug 2021 08:35:47 +0530 https://classroom.anir0y.in/post/tryhackme-relevant/ TryHackMe Relevant walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Relevant challenge room. https://classroom.anir0y.in/post/tryhackme-linuxstrengthtraining/ Tue, 03 Aug 2021 07:41:10 +0530 https://classroom.anir0y.in/post/tryhackme-linuxstrengthtraining/ TryHackMe Linux Strength Training walkthrough — Guided room for beginners to learn/reinforce linux command line skills... https://classroom.anir0y.in/post/tryhackme-sweettoothinc/ Wed, 28 Jul 2021 12:16:24 +0530 https://classroom.anir0y.in/post/tryhackme-sweettoothinc/ TryHackMe Sweettooth Inc. walkthrough — Sweettooth Inc. needs your help to find out how secure their system is! https://classroom.anir0y.in/post/giveaway-1/ Mon, 26 Jul 2021 01:44:28 +0530 https://classroom.anir0y.in/post/giveaway-1/ Win a free 1-month TryHackMe subscription! July 2021 giveaway with 3 premium subscriptions up for grabs. https://classroom.anir0y.in/post/tryhackme-agentsudoctf/ Sat, 24 Jul 2021 16:50:32 +0530 https://classroom.anir0y.in/post/tryhackme-agentsudoctf/ TryHackMe Room Agent Sudo, You found a secret server located under the deep sea. Your task is to hack inside the server and reveal the truth. https://classroom.anir0y.in/post/tryhackme-overpass2hacked/ Fri, 23 Jul 2021 01:16:55 +0530 https://classroom.anir0y.in/post/tryhackme-overpass2hacked/ TryHackMe Overpass 2 - Hacked walkthrough — investigate a compromised server, analyze attacker artifacts, and trace the intrusion timeline. https://classroom.anir0y.in/post/tryhackme-sudovulnssamedit/ Fri, 23 Jul 2021 00:56:23 +0530 https://classroom.anir0y.in/post/tryhackme-sudovulnssamedit/ TryHackMe Baron Samedit walkthrough — A tutorial room exploring CVE-2021-3156 in the Unix Sudo Program. https://classroom.anir0y.in/post/tryhackme-metamorphosis/ Wed, 21 Jul 2021 03:31:08 +0530 https://classroom.anir0y.in/post/tryhackme-metamorphosis/ TryHackMe Metamorphosis walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Metamorphosis challenge room. https://classroom.anir0y.in/post/tryhackme-crackthehash/ Tue, 20 Jul 2021 21:54:07 +0530 https://classroom.anir0y.in/post/tryhackme-crackthehash/ TryHackMe Crack the hash walkthrough — Cracking hashes challenges. https://classroom.anir0y.in/post/tryhackme-easyctf/ Mon, 19 Jul 2021 22:32:49 +0530 https://classroom.anir0y.in/post/tryhackme-easyctf/ TryHackMe Simple CTF walkthrough — solve CTF challenges covering enumeration, exploitation, and privilege escalation on a vulnerable target. https://classroom.anir0y.in/post/tryhackme-raz0rblack/ Sun, 18 Jul 2021 19:31:05 +0530 https://classroom.anir0y.in/post/tryhackme-raz0rblack/ TryHackMe RazorBlack walkthrough — These guys call themselves hackers. Can you show them who's the boss ?? https://classroom.anir0y.in/post/tryhackme-linuxfunctionhooking/ Sun, 18 Jul 2021 02:30:10 +0530 https://classroom.anir0y.in/post/tryhackme-linuxfunctionhooking/ TryHackMe Linux Function Hooking walkthrough — Learn about function hooking in Linux and have fun hooking functions https://classroom.anir0y.in/post/tryhackme-ffuf/ Sat, 17 Jul 2021 02:49:02 +0530 https://classroom.anir0y.in/post/tryhackme-ffuf/ TryHackMe Ffuf walkthrough — Ffuf stands for Fuzz Faster U Fool. It's a tool used for web enumeration, fuzzing, and directory brute forcing... https://classroom.anir0y.in/post/tryhackme-rpwebscanning/ Wed, 14 Jul 2021 14:00:45 +0530 https://classroom.anir0y.in/post/tryhackme-rpwebscanning/ TryHackMe Web Scanning walkthrough — exploit web application vulnerabilities and practice common web attack techniques. https://classroom.anir0y.in/post/post-awesome-red-teaming/ Tue, 13 Jul 2021 14:37:01 +0530 https://classroom.anir0y.in/post/post-awesome-red-teaming/ Curated red teaming resources — MITRE ATT&CK-mapped tools and techniques for initial access, persistence, lateral movement, and evasion. https://classroom.anir0y.in/post/tryhackme-thefindcommand/ Mon, 12 Jul 2021 23:17:35 +0530 https://classroom.anir0y.in/post/tryhackme-thefindcommand/ TryHackMe The find command walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the The find command challenge room. https://classroom.anir0y.in/post/tryhackme-rptmux/ Sun, 11 Jul 2021 13:50:48 +0530 https://classroom.anir0y.in/post/tryhackme-rptmux/ TryHackMe Tmux walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Tmux challenge room. https://classroom.anir0y.in/post/tryhackme-crisis/ Sat, 10 Jul 2021 15:18:30 +0530 https://classroom.anir0y.in/post/tryhackme-crisis/ TryHackMe Crisis walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the Crisis challenge room. https://classroom.anir0y.in/post/tryhackme-couch/ Fri, 09 Jul 2021 19:22:00 +0530 https://classroom.anir0y.in/post/tryhackme-couch/ TryHackMe Couch walkthrough — hack into a vulnerable database server that stores data in JSON-based document formats, in this semi-guided challenge. https://classroom.anir0y.in/post/tryhackme-inclusion/ Thu, 08 Jul 2021 14:19:01 +0530 https://classroom.anir0y.in/post/tryhackme-inclusion/ TryHackMe Room inclusion, A beginner level LFI challenge. solved by Animesh Roy. this is a walkthrough. read more... https://classroom.anir0y.in/post/tryhackme-rrootme/ Tue, 06 Jul 2021 13:36:08 +0530 https://classroom.anir0y.in/post/tryhackme-rrootme/ TryHackMe RootMe walkthrough with step-by-step solutions — enumeration, exploitation, and privilege escalation on the RootMe challenge room. https://classroom.anir0y.in/post/tryhackme-gitandcrumpets/ Sun, 04 Jul 2021 23:04:02 +0530 https://classroom.anir0y.in/post/tryhackme-gitandcrumpets/ TryHackMe Gitandcrumpets walkthrough — exploit exposed Git repositories to extract secrets, credentials, and sensitive source code. https://classroom.anir0y.in/post/tryhackme-postexploit/ Sun, 04 Jul 2021 14:36:48 +0530 https://classroom.anir0y.in/post/tryhackme-postexploit/ TryHackMe Postexploit walkthrough — identify and exploit vulnerabilities in target systems to gain unauthorized access. https://classroom.anir0y.in/post/tryhackme-hydra/ Sat, 03 Jul 2021 20:14:32 +0530 https://classroom.anir0y.in/post/tryhackme-hydra/ TryHackMe Hydra walkthrough — learn brute-force password attacks using Hydra against SSH, FTP, and web login forms. https://classroom.anir0y.in/post/pip2-install/ Sat, 03 Jul 2021 01:30:12 +0530 https://classroom.anir0y.in/post/pip2-install/ How to install pip2 for Python 2.7 on Kali Linux — quick installation script and usage guide for legacy Python modules. https://classroom.anir0y.in/post/thm-room-ice/ Tue, 29 Jun 2021 14:11:50 +0530 https://classroom.anir0y.in/post/thm-room-ice/ TryHackMe Room Ice walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Ice challenge room. https://classroom.anir0y.in/post/thm-room-hackpark/ Sat, 19 Jun 2021 19:38:27 +0530 https://classroom.anir0y.in/post/thm-room-hackpark/ TryHackMe Room Hackpark walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Hackpark challenge room. https://classroom.anir0y.in/post/thm-room-kenobi/ Thu, 10 Jun 2021 21:22:32 +0530 https://classroom.anir0y.in/post/thm-room-kenobi/ TryHackMe Room Kenobi walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Kenobi challenge room. https://classroom.anir0y.in/post/thm-room-vulnversity/ Wed, 09 Jun 2021 20:10:48 +0530 https://classroom.anir0y.in/post/thm-room-vulnversity/ TryHackMe Room Vulnversity walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Vulnversity challenge room. https://classroom.anir0y.in/post/thm-room-webfundamentals/ Tue, 08 Jun 2021 11:04:18 +0530 https://classroom.anir0y.in/post/thm-room-webfundamentals/ TryHackMe Thm Room Web Fundamentals walkthrough, exploit web application vulnerabilities and practice common web attack techniques. https://classroom.anir0y.in/post/cs-hijackputty-msfvenom/ Mon, 07 Jun 2021 20:20:16 +0530 https://classroom.anir0y.in/post/cs-hijackputty-msfvenom/ Learn to backdoor EXE files with MSFVenom — embed Metasploit payloads into PuTTY and other executables for penetration testing. https://classroom.anir0y.in/post/thm-room-malremnuxv2/ Tue, 01 Jun 2021 09:49:05 +0530 https://classroom.anir0y.in/post/thm-room-malremnuxv2/ TryHackMe REMnux: The Redux walkthrough, step-by-step enumeration, exploitation, and privilege escalation, with every task answer explained. https://classroom.anir0y.in/post/thm-room-basicmalwarere/ Mon, 31 May 2021 08:20:27 +0530 https://classroom.anir0y.in/post/thm-room-basicmalwarere/ TryHackMe BasicMalwareRE walkthrough, analyze malware samples using static and dynamic analysis techniques to understand malicious behavior. https://classroom.anir0y.in/post/thm-room-malstrings/ Mon, 31 May 2021 00:21:19 +0530 https://classroom.anir0y.in/post/thm-room-malstrings/ TryHackMe Room Malstrings walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Malstrings challenge room. https://classroom.anir0y.in/post/thm-room-malmalintroductory/ Sat, 29 May 2021 00:08:19 +0530 https://classroom.anir0y.in/post/thm-room-malmalintroductory/ TryHackMe Room Malware Introductory walkthrough, analyze malware samples using static and dynamic analysis techniques to understand malicious behavior. https://classroom.anir0y.in/post/thm-room-historyofmalware/ Fri, 28 May 2021 00:43:47 +0530 https://classroom.anir0y.in/post/thm-room-historyofmalware/ TryHackMe Room History of Malware walkthrough, analyze malware samples using static and dynamic analysis techniques to understand malicious behavior. https://classroom.anir0y.in/post/thm-room-btautopsye0/ Thu, 27 May 2021 00:31:13 +0530 https://classroom.anir0y.in/post/thm-room-btautopsye0/ TryHackMe Thm Room Autopsy walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Thm Room Autopsy challenge room. https://classroom.anir0y.in/post/investigatingwindows/ Tue, 25 May 2021 20:09:18 +0530 https://classroom.anir0y.in/post/investigatingwindows/ TryHackMe Investigating Windows walkthrough — explore Windows operating system fundamentals, security features, and common attack surfaces. https://classroom.anir0y.in/post/thm-room-bpvolatility/ Sun, 23 May 2021 23:09:45 +0530 https://classroom.anir0y.in/post/thm-room-bpvolatility/ TryHackMe Room Volatility walkthrough with step-by-step solutions, enumeration, exploitation, and privilege escalation on the Room Volatility challenge room. https://classroom.anir0y.in/post/scripts-dominos/ Sat, 22 May 2021 19:56:16 +0530 https://classroom.anir0y.in/post/scripts-dominos/ Domino’s India Data Leak Of 18 Cr Orders Resurfaces; Customer Location, Mobile Numbers Exposed https://classroom.anir0y.in/post/thm-room-attackingkerberos/ Thu, 20 May 2021 23:25:07 +0530 https://classroom.anir0y.in/post/thm-room-attackingkerberos/ TryHackMe Room Attacking Kerberos walkthrough, Learn how to abuse the Kerberos Ticket Granting Service inside of a Windows Domain Controller. https://classroom.anir0y.in/post/thm-room-attacktivedirectory/ Tue, 18 May 2021 23:58:19 +0530 https://classroom.anir0y.in/post/thm-room-attacktivedirectory/ TryHackMe Attacktive Directory walkthrough, step-by-step Active Directory enumeration, exploitation, and privilege escalation, with task answers. https://classroom.anir0y.in/post/thm-room-osquery/ Sun, 16 May 2021 23:54:39 +0530 https://classroom.anir0y.in/post/thm-room-osquery/ TryHackMe Room Osquery walkthrough, learn endpoint monitoring with osquery SQL-based queries for process, network, and file system analysis. https://classroom.anir0y.in/post/thm-room-openvas/ Mon, 10 May 2021 01:36:51 +0530 https://classroom.anir0y.in/post/thm-room-openvas/ Try Hack ME Room OpenVas walkthrough https://classroom.anir0y.in/post/thm-room-zerologon/ Mon, 10 May 2021 01:22:37 +0530 https://classroom.anir0y.in/post/thm-room-zerologon/ Try Hack ME Room Zerologon walkthrough https://classroom.anir0y.in/post/cyber-security-interview-questions-with-answers/ Fri, 07 May 2021 19:38:21 +0530 https://classroom.anir0y.in/post/cyber-security-interview-questions-with-answers/ 50 cybersecurity interview questions with answers — cryptography, CIA triad, firewalls, IDS vs IPS, and more for job prep. https://classroom.anir0y.in/post/active-directory-exploitation-cheat-sheet/ Fri, 07 May 2021 14:00:36 +0530 https://classroom.anir0y.in/post/active-directory-exploitation-cheat-sheet/ Active Directory exploitation cheat sheet covering common attack techniques, enumeration, privilege escalation, and lateral movement in AD environments. https://classroom.anir0y.in/post/notes-osimodel-explained/ Sun, 25 Apr 2021 20:20:59 +0530 https://classroom.anir0y.in/post/notes-osimodel-explained/ OSI Model explained with Wireshark — understand all 7 layers through real packet analysis, from physical frames to application data. https://classroom.anir0y.in/post/notes-osimodel/ Wed, 21 Apr 2021 20:01:52 +0530 https://classroom.anir0y.in/post/notes-osimodel/ OSI Model overview — learn all 7 layers of the networking model, from physical to application, with clear explanations and examples. https://classroom.anir0y.in/post/notes-stego/ Wed, 21 Apr 2021 17:47:23 +0530 https://classroom.anir0y.in/post/notes-stego/ Steganography tools and techniques — Steghide, Foremost, binwalk, zsteg, and more for CTF challenges and hidden data extraction. https://classroom.anir0y.in/post/ref-forensic/ Tue, 13 Apr 2021 21:15:35 +0530 https://classroom.anir0y.in/post/ref-forensic/ Curated reference list of digital forensic tools for disk analysis, memory forensics, network capture, and incident response investigations. https://classroom.anir0y.in/post/notes-gnupg/ Tue, 13 Apr 2021 16:57:30 +0530 https://classroom.anir0y.in/post/notes-gnupg/ GPG encryption guide — generate keys, encrypt and sign messages, verify signatures, and manage keyrings with GNU Privacy Guard. https://classroom.anir0y.in/post/msf-runscript/ Wed, 07 Apr 2021 15:25:21 +0530 https://classroom.anir0y.in/post/msf-runscript/ Guide to writing custom Meterpreter scripts — create resource files, automate post-exploitation tasks, and build reverse shells. https://classroom.anir0y.in/post/intro-bash/ Sat, 03 Apr 2021 18:54:43 +0530 https://classroom.anir0y.in/post/intro-bash/ Bash scripting quick reference — variables, string operations, conditionals, loops, functions, and arrays for beginners. https://classroom.anir0y.in/post/powershell-empire-install/ Fri, 02 Apr 2021 18:47:08 +0530 https://classroom.anir0y.in/post/powershell-empire-install/ Installation guide for PowerShell Empire post-exploitation framework — setup, configuration, and generating your first HTTP listener. https://classroom.anir0y.in/post/msfvenom-psh/ Thu, 01 Apr 2021 16:14:32 +0530 https://classroom.anir0y.in/post/msfvenom-psh/ Create a Meterpreter reverse shell with PowerShell using MSFVenom — payload generation, listener setup, and session interaction. https://classroom.anir0y.in/post/msfvenom-cheatsheet/ Thu, 01 Apr 2021 16:11:01 +0530 https://classroom.anir0y.in/post/msfvenom-cheatsheet/ A complete MSFVenom cheatsheet with one-liner payloads for Windows, Linux, macOS, and web shells. Includes examples for various formats and reverse shells. https://classroom.anir0y.in/post/excelr-basic-linux/ Fri, 26 Mar 2021 20:24:44 +0530 https://classroom.anir0y.in/post/excelr-basic-linux/ Basic Linux bash scripting exercises — hello world, age check, and practical shell scripting examples for beginners. https://classroom.anir0y.in/post/ps-enc/ Thu, 25 Mar 2021 20:01:50 +0530 https://classroom.anir0y.in/post/ps-enc/ Understanding PowerShell encoding techniques — Base64 encoding, obfuscation methods, and decoding strategies for security analysis. https://classroom.anir0y.in/post/intro-vapt/ Sun, 21 Mar 2021 21:23:22 +0530 https://classroom.anir0y.in/post/intro-vapt/ Introduction to VAPT — understand vulnerability assessment vs penetration testing, methodologies, deliverables, and testing types. https://classroom.anir0y.in/post/blog2/ Sun, 21 Mar 2021 21:23:22 +0530 https://classroom.anir0y.in/post/blog2/ Learn how phishing attacks work — types, techniques, real-world examples, and tools used in social engineering credential theft. https://classroom.anir0y.in/post/blog1/ Sun, 21 Mar 2021 21:23:22 +0530 https://classroom.anir0y.in/post/blog1/ Curated list of vulnerable apps, servers, and websites for practicing cybersecurity skills — VulnHub, HackTheBox, TryHackMe, and more. https://classroom.anir0y.in/about/me/ Sun, 21 Mar 2021 20:59:00 +0530 https://classroom.anir0y.in/about/me/ https://classroom.anir0y.in/post/vol2-installation/ Wed, 17 Mar 2021 01:00:08 +0530 https://classroom.anir0y.in/post/vol2-installation/ Step-by-step guide to installing Volatility 2 on Linux for memory forensics, including dependencies, Python setup, and verification. https://classroom.anir0y.in/post/splunk-sysmon/ Thu, 11 Mar 2021 01:45:35 +0530 https://classroom.anir0y.in/post/splunk-sysmon/ Guide to configuring Sysmon with Splunk for enhanced endpoint visibility, log collection, and threat detection in Windows environments. https://classroom.anir0y.in/post/learnings-mobileapppt/ Tue, 09 Mar 2021 21:23:59 +0530 https://classroom.anir0y.in/post/learnings-mobileapppt/ Mobile app penetration testing cheat sheet — Android and iOS security tools, reverse engineering, SSL pinning bypass, and OWASP Top 10. https://classroom.anir0y.in/post/learnings/ Tue, 09 Mar 2021 21:05:41 +0530 https://classroom.anir0y.in/post/learnings/ Pentester learning roadmap — OS fundamentals, networking, Active Directory, web apps, recommended labs, and certifications like OSCP. https://classroom.anir0y.in/post/blog4/ Sun, 21 Feb 2021 21:23:22 +0530 https://classroom.anir0y.in/post/blog4/ Curated list of free cybersecurity and IT certifications — Google Cloud, Azure, CompTIA, Kubernetes, and more with direct links. https://classroom.anir0y.in/post/metasploit-cheat-sheet/ Sun, 21 Feb 2021 21:23:22 +0530 https://classroom.anir0y.in/post/metasploit-cheat-sheet/ Metasploit Framework cheat sheet — essential commands for exploits, payloads, sessions, meterpreter, and post-exploitation modules. https://classroom.anir0y.in/post/ref-powershell/ Thu, 18 Feb 2021 21:23:22 +0530 https://classroom.anir0y.in/post/ref-powershell/ Comprehensive PowerShell cheat sheet with essential commands, scripting techniques, and security-focused one-liners for penetration testing. https://classroom.anir0y.in/post/2020-08-07-smartknowner-sep/ Sat, 12 Sep 2020 21:23:22 +0530 https://classroom.anir0y.in/post/2020-08-07-smartknowner-sep/ SmartKnower September batch cybersecurity internship covering OS basics, InfoSec fundamentals, and risk management training. https://classroom.anir0y.in/post/2020-08-07-smartknowner-aug/ Wed, 12 Aug 2020 21:23:22 +0530 https://classroom.anir0y.in/post/2020-08-07-smartknowner-aug/ SmartKnower August batch cybersecurity internship classroom with VM setup, Kali Linux labs, and hands-on learning resources. https://classroom.anir0y.in/post/2020-08-07-verzeo-aug/ Wed, 12 Aug 2020 21:23:22 +0530 https://classroom.anir0y.in/post/2020-08-07-verzeo-aug/ Verzeo August batch cybersecurity internship classroom with VM setup, Kali Linux, networking labs, and project resources. https://classroom.anir0y.in/post/2020-08-07-smartknowner-july/ Sun, 12 Jul 2020 21:23:22 +0530 https://classroom.anir0y.in/post/2020-08-07-smartknowner-july/ SmartKnower July batch cybersecurity internship classroom with VM installation, Kali Linux setup, and networking labs. https://classroom.anir0y.in/post/2020-07-07-verzeo-july/ Tue, 07 Jul 2020 21:23:22 +0530 https://classroom.anir0y.in/post/2020-07-07-verzeo-july/ Verzeo July batch cybersecurity internship classroom resources, VM setup guides, networking labs, and project links. https://classroom.anir0y.in/post/blog3/ Wed, 01 Jan 2020 21:23:22 +0530 https://classroom.anir0y.in/post/blog3/ Prerequisites for cybersecurity training — system requirements, VM setup with VirtualBox, Kali Linux, and course overview.