# CyberLab Archive - Complete Course Catalog Index This document provides a comprehensive machine-readable index of all 585 courses across 31 categories for AI search engines, citation generation, and language models. ### 1. FOR509: Enterprise Cloud Forensics and Incident Response - URL: https://cyberlabarchive.com/courses/enterprise-cloud-forensics-incident-response - Category: Security Education - Downloadable Files: 5 (12.3 GB) - Formats: PDF, ZIP, ISO - Description: FOR572 is an advanced course designed for cybersecurity professionals seeking to master network forensics, threat hunting, and incident response. The course focuses on deep packet analysis, intrusion detection, and uncovering adversary activity within large-scale enterprise environments. Participants will learn how to analyze network traffic, identify anomalies, and reconstruct cyber attacks using tools such as Zeek (Bro), Suricata, Wireshark, and Security Information and Event Management (SIEM) solutions. - Syllabus Topics: * Microsoft 365 and Graph API * Microsoft Azure * Amazon (AWS) * Google Workspace * Google Cloud * Multi-Cloud Intrusion Challenge --- ### 2. AI Red Team Analyst [AI-RTA] - URL: https://cyberlabarchive.com/courses/ai-red-team-analyst-ai-rta - Category: Cyberwarfare - Downloadable Files: 1 (748 MB) - Formats: ZIP - Description: Master the offensive security techniques used to assess modern AI and LLM-powered applications. This hands-on course covers AI attack surfaces, prompt injection, jailbreaks, malicious MCP servers, tool abuse, RAG poisoning, data poisoning, model evasion, backdoors, and multi-agent security risks. - Syllabus Topics: * AI Red Teaming Fundamentals * AI & LLM Foundations * LLM & Agent Security * RAG & Model Security * Hands-on Labs & Case Studies --- ### 3. Enterprise Lateral Movement Specialist [CELMS] - URL: https://cyberlabarchive.com/courses/enterprise-lateral-movement-specialist-celms - Category: Cyberwarfare - Downloadable Files: 1 (8.9 GB) - Formats: ZIP - Description: Master the techniques attackers use to move through compromised enterprise environments. This hands-on course covers credential abuse, remote services, SMB, WMI, RPC, SSH, Active Directory, Kerberos, and other lateral movement techniques used during real-world post-compromise operations. - Syllabus Topics: * External Lateral Movement * Internal Lateral Movement --- ### 4. Pearson – PowerShell AI: Building AI Applications with PowerShell - URL: https://cyberlabarchive.com/courses/pearson-building-ai-applications-with-powershell - Category: Other Institutions - Downloadable Files: 1 (21.4 GB) - Formats: ZIP - Description: Are you ready to take your PowerShell skills to the next level by leveraging the power of artificial intelligence? In this course, learn how to harness the capabilities of AI tools like ChatGPT and Ollama to build innovative applications that automate tasks, provide insights, and drive business value. Start by exploring the fundamentals of AI in PowerShell, including why AI is a game-changer for automation and how to get started with the ChatGPT REST API. From there, dive into advanced topics like prompt engineering, structuring AI responses, and managing multi-turn conversations. - Syllabus Topics: * Introduction * Preparing for this Course * Accessing OpenAI Through PowerShell * OpenAI Use Cases * Ollama and Local AI Models * Using AI for System Performance Monitoring * Using Ollama for Data Analytics * Building a PowerShell Automation Tool * Using Ollama as a Document Reference Tool * Text-to-Speech and Text-to-Image Generation * Capstone Project: A Full Ollama Chatbot * Summary --- ### 5. Pearson – Hands-on Introduction to AWS - URL: https://cyberlabarchive.com/courses/pearson-hands-on-introduction-to-aws - Category: Other Institutions - Downloadable Files: 1 (7 GB) - Formats: ZIP - Description: This immersive video course from AWS expert Chad Smith takes you from foundational AWS cloud concepts to advanced services through a practical, hands-on learning experience. Youll start with cloud fundamentals to understand what makes cloud-native architectures different, then build a strong infrastructure foundation by exploring AWS networking, compute, storage, and database services. From there, youll strengthen your operational readiness by learning how AWS security works in practice, including identity and permissions management and managed security services that help protect workloads at scale. Next, youll connect build and run by covering developer services plus both standard and event monitoring so you can deploy confidently, detect issues faster, and maintain performance in dynamic environments. Chad will also cover AWS AI/ML services to understand where intelligent capabilities fit into modern solutions. Finally, youll round out your skills with cost and billing services, helping you map technical decisions to business requirements, control spend, and design solutions that are both effective and economically sustainable. Gain the skills and direction you need to start using AWS with confidence! - Syllabus Topics: * Introduction * AWS Introduction * Cloud Basics * AWS Core Infrastructure Services * AWS Network Services * AWS Compute Services * AWS Storage Services * AWS Database Services * AWS Security Services * AWS Identity and Permissions Management * AWS Managed Security Services * AWS Development and Monitoring Services * AWS Developer Services * AWS Standard Monitoring Services * AWS Event Monitoring Services * AWS AI and ML * AWS AI and ML Services * AWS Cost and Billing * AWS Cost and Billing Services * Summary --- ### 6. Pearson – Becoming an AI-Ready Security Leader: How CISOs Balance Innovation, Risk, and Resilience in the AI era - URL: https://cyberlabarchive.com/courses/becoming-an-ai-ready-security-leader - Category: Other Institutions - Downloadable Files: 1 (8.9 GB) - Formats: ZIP - Description: AI is rapidly reshaping both the threat landscape and the tools defenders use to counter it—and today’s security leaders are expected to guide their organizations safely through this massive paradigm shift. In this comprehensive video course, cybersecurity and AI specialist Avinash Naduvath provides a practical playbook for Chief Information Security Officers (CISOs) and security professionals to confidently lead AI adoption. You will learn how to proactively assess AI-driven threats, harden your organization’s defenses using artificial intelligence, and govern the complex risks that AI introduces across compliance, vendor ecosystems, and the AI supply chain. - Syllabus Topics: * Introduction * The New Security Leader Imperative * Framing the AI Cybersecurity Landscape * Why Should Leadership Care? * Strategic Mindshift * Multi-faceted AI Security * Why Do Leaders Need to Care? * Weaponizing AI – AI as a Puppet * Partners in Crime – AI as a Tool * AI-driven Defenses – Protecting with AI * A Strategic AI Security Framework for Security Leaders * The AI Threat Landscape * A Holistic AI Security Framework * The Zero Trust Imperative – A Risk Lens * The Compliance Imperative – A Governance Lens * Vendor Supply-Chain Risk * Enhancing Security Operations with AI * Insertion of AI into Security Operations * Agentic Threat Hunting * Agentic SOC * Building an AI-ready Workforce * A Strategic Framework * AI Skills to Invest In * Workforce Enabled Strategies * The Future of the Workforce * The Future of AI Security Leadership * Navigating Geopolitical Impact of AI Systems * Budgeting Considerations * The Polymorphic CISO * The AI-ready CISO * Summary --- ### 7. Maltrak – The IT Fundamentals: Intro To Networking With Wireshark - URL: https://cyberlabarchive.com/courses/maltrak-intro-to-networking - Category: Maltrak - Downloadable Files: 1 (1 GB) - Formats: ZIP - Description: A strong foundation in networking is the cornerstone of any successful cybersecurity career. MalTrak’s Intro to Networking course is designed to demystify how computers communicate, providing you with the essential knowledge needed to secure networks, analyze traffic, and understand how attacks are executed across the wire. - Syllabus Topics: * Networking Basics * Network Forensics * Network Criminology Continued * Real Attack Scenario --- ### 8. Maltrak – In-Depth Investigation & Threat Hunting - URL: https://cyberlabarchive.com/courses/maltrak-in-depth-investigation-threat-hunting - Category: Maltrak - Downloadable Files: 1 (5.7 GB) - Formats: ZIP - Description: Take your security operations to the next level with MalTrak’s In-Depth Investigation & Threat Hunting training. This immersive, multi-day course is engineered for cybersecurity professionals who want to master the art of uncovering and investigating advanced cyber threats. Through a blend of deep-dive instruction and hands-on labs, you will learn how to proactively hunt for malicious activity, analyze complex network traffic, and investigate sophisticated system-level attacks. - Syllabus Topics: * Day 01: Building The Lab * Day 02: Log Analysis & Network Forensics * Day 03: Zeek Logs & Network Investigation * Day 04: Privilege Escalation & PowerShell Automation --- ### 9. Maltrak – Hands-on Log Analysis & Network Forensics Cheatsheets - URL: https://cyberlabarchive.com/courses/maltrak-cybersecurity-cheatsheets - Category: Maltrak - Downloadable Files: 1 (3 GB) - Formats: ZIP - Description: Build the fundamental skills and get the roadmap you need for a successful career in cybersecurity with MalTrak’s Hands-on Log Analysis & Network Forensics Cheatsheets course. This highly practical training focuses on mastering some of the industry’s most essential tools—Wireshark, Elasticsearch, and Splunk—through real-world scenarios and comprehensive cheat sheets designed to help you work like a seasoned professional. - Syllabus Topics: * Wireshark: Analyze Network PCAP Files * Elasticsearch: Analyze Windows Sysmon Log Files * Splunk: Log Analysis (Network & Active Directory) --- ### 10. Maltrak – Hands-on Identity & Cloud Attacks - URL: https://cyberlabarchive.com/courses/maltrak-hands-on-identity-cloud-attacks - Category: Maltrak - Downloadable Files: 1 (1.3 GB) - Formats: ZIP - Description: Elevate your offensive security skills with MalTrak’s Hands-on Identity & Cloud Attacks course. As organizations increasingly migrate their infrastructure to the cloud, identity and access management (IAM) has become the new perimeter—and a prime target for adversaries. This practical, lab-intensive course is designed to teach cybersecurity professionals how to exploit, assess, and defend modern cloud environments and identity providers. - Syllabus Topics: * On-Premise AD Identity Attacks * Cloud & Azure AD Identity Attacks --- ### 11. Maltrak – Detecting and Hunting for Malware Activities - URL: https://cyberlabarchive.com/courses/maltrak-detecting-hunting-malware-activities - Category: Maltrak - Downloadable Files: 1 (922 MB) - Formats: ZIP - Description: Dive deep into the world of proactive cyber defense with MalTrak’s Detecting and Hunting for Malware Activities workshop. Designed for cybersecurity professionals, threat hunters, and SOC analysts, this intensive 1-day workshop provides the practical knowledge and hands-on techniques required to identify, track, and neutralize malicious activities within an enterprise network. - Syllabus Topics: * Detecting & Hunting For Malware Activities --- ### 12. Arcanum Sec – TBHM Expansion: From Zero to [BAC] Hero - URL: https://cyberlabarchive.com/courses/tbhm-expansion-from-zero-to-bac-hero - Category: Other Institutions - Downloadable Files: 1 (2.5 GB) - Formats: ZIP - Description: From Zero to [BAC] Hero is a new The Bug Hunter’s Methodology expansion by Zwink aka the iDorminator, the #1 US-based hacker on Bugcrowd and Top 10 globally for critical impact bugs. He takes you from the absolute basics to real-world bug bounty hunting, with a spotlight on his favorite vuln class: Broken Access Control (BAC). - Syllabus Topics: * Course Foundations & Mental Model * Browser, Burp, and the Real Web * HTTP Status Codes, Cookies, and Headers * Subdomain Recon, Liveliness Testing & GAU * Authenticated Reconnaissance on Real Targets * Intercepting and Analyzing Auth Flows * Broken Access Control (BAC) and IDOR Testing * Logging and Repeating Bug Payloads * Exploring LIVE Targets * Advanced Observations --- ### 13. Udemy – The Ultimate AI/LLM/ML Penetration Testing Training Course - URL: https://cyberlabarchive.com/courses/the-ultimate-ai-llm-penetration-testing-training-course - Category: Other Institutions - Downloadable Files: 1 (12.1 GB) - Formats: ZIP - Description: This course has a both theory and practical lab sections with a focus on finding and exploiting vulnerabilities in AI and LLM systems and applications. The training is aligned with the OWASP Top 10 LLM as well as the OWASP Top 10 Agentic vulnerability classes. The videos are easy to follow along and replicate. - Syllabus Topics: * Introduction * Prompt Injection * Sensitive Information Disclosure * Supply Chain Vulnerabilities * Model and Training Data Poisoning * Improper Output Handling * Excessive Agency * Prompt Leakage * Vector and Embedding Weaknesses * Misinformation and Overreliance * Unbounded Consumption and DoS * OWASP PwnzzAI Shop * OWASP Finbot * OWASP Top 10 for Agentic Applications * Portswigger – Agentic AI Labs * Certified AI/LLM Penetration Tester * Prompt Airlines AI/ML CTF Challenge * SecOps Group AI/ML Mock Exams Walkthrough * OWASP Finbot CTF * Selara Jailbreak Game CTF * Gandalf Agent Breaker CTF * Hack The Agent CTF * AI Prompt Attack and Defense Game Tensortrust * Crowdstrike AI Unlocked Challenge * Game Arena Challenges * PromptTrace Prompt Injection Labs * PromptInjects CTF * 8ksec CTF * AIPWN CTF * Other CTFs * Jailbreaking * AI Browsers Attacks * AI Coding Agents Attacks * MCP Attacks * Multimodal Attacks (Images, Audio and Video) * Tooling --- ### 14. Udemy – AWS Certified DevOps Engineer Professional 2026 – DOP-C02 - URL: https://cyberlabarchive.com/courses/aws-certified-devops-engineer-professional-hands-on - Category: Other Institutions - Downloadable Files: 1 (6.7 GB) - Formats: ZIP - Description: Prepare for the AWS Certified DevOps Engineer – Professional (DOP-C02) exam with this advanced, hands-on course by Stéphane Maarek. The training combines exam-focused instruction with practical AWS experience, helping you develop the automation, deployment, monitoring, security, and operational skills required of a professional DevOps engineer. - Syllabus Topics: * Course Overview – AWS Certified DevOps Engineer Professional * Code & Slides Download * Domain 1: SDLC Automation * Domain 2: Configuration Management & IaC * Domain 3: Resilient Cloud Solutions * Domain 4: Monitoring and Logging * Domain 5: Incident and Event Response * Domain 6: Security and Compliance * Other Services * Course Wrap-up --- ### 15. HackSys – Windows Kernel Exploitation Foundation - URL: https://cyberlabarchive.com/courses/hacksys-windows-kernel-exploitation-foundation - Category: Other Institutions - Downloadable Files: 1 (1.1 GB) - Formats: ZIP - Description: This is a beginner-friendly course that aims to teach you the fundamentals of kernel exploitation, including how to find and exploit common bugs in Windows kernel mode drivers. This course starts with the basics of Windows & driver internals, different memory corruption classes and exploitation techniques. This course focuses on the fundamentals required to get started with the subject. - Syllabus Topics: * Day 1Windows InternalsMemory ManagementDriver InternalsFuzzing Windows Drivers * Day 2Revision – day 1Fuzzing Windows Drivers (continued)Fuzzing Windows Drivers (continued)ExploitationEscalation of Privilege PayloadKernel State RecoveryMiscellaneous --- ### 16. SimplerHacking – Evilginx Phishlet Developer Masterclass - URL: https://cyberlabarchive.com/courses/evilginx-phishlet-developer-masterclass - Category: Other Institutions - Downloadable Files: 1 (3.1 GB) - Formats: ZIP - Description: Learn a systematic process of creating, debugging, and programming Evilginx phishlets from scratch. Learn to analyze authentication flows, bypass MFA protections, troubleshoot errors, and deploy advanced reverse-proxy phishing techniques. - Syllabus Topics: * Introduction to Modern Phishing: Attack Methodologies & Understanding Evilginx, EvilProxy & V3B Kit Demos * Evilginx Phishlets Documentation Review * Basics of Programming in YAML: (YAML Ain’t Markup Language™) * Infrastructure & Tools Setup * Application Network Traffic Analysis 101: Beginner to Expert w/ Developer Tools * User Authentication: Understanding Cookies, Auth Tokens, Session Management, Token Architecture, and Implementation Methods * Web Authentication & Reverse Engineering: Methodologies, Tools and Traffic Inspection Techniques with Hussain * What We’ve Learned So Far! * Building a Custom Phishlet #1 – Hands-On Tutorial for Building and Deploying a Custom Phishlet * Comparing Authentication System Security: Ranking Complexity from Standard Web Logins to Enterprise-Grade Defenses (L1–L4) * Phishlet Lab #2 (Part A): Network Traffic Interception, Session Token Extraction, and Phishlet Architecture Development * Phishlet Lab #2 (Part B): Configuring Subfilter Logic, Authentication Flow Validation, and Deployment Optimization * Debugging and Troubleshoot Phishlets * Phishing Domain Mastery for Email Deliverability: Advanced Selection, Filtering, and Inbox Optimization * Defending Against Modern Reverse-Proxy Phishing – Mitigation Strategies for Modern Attacks * Evilginx Pro: CAPTCHAs, Puppeteer, EvilPuppet, Advanced Features, Access Guidelines, and Other Considerations * TMUX Tutorial: What It Is, How to Install and Use It with Evilginx * (Requested) Anonymous Infrastructure & VPN Integration: Secure Deployment and Off-Shore Hosting * Bonus Resources – Custom Phishlets, Tool Kits, Email Templates, Course Files, Materials, Streams & Webinars * Conclusion --- ### 17. Altered Securitty – Global Central Bank (CRTM) - URL: https://cyberlabarchive.com/courses/global-central-bank-crtm - Category: Altered Security - Downloadable Files: 1 (1.1 GB) - Formats: ZIP - Description: Global Central Bank (GCB) is a one of a kind Enterprise Windows and Active Directory Cyber Range. It helps enterprises test capabilities of both their Red and Blue teams in an Enterprise Windows network. GCB is a true multi-forest environment that mimics a financial institution’s network. - Syllabus Topics: * Abuse defence mechanisms, exploit modern Windows features, extract secrets * Hunt for privileges, replay credentials, pivot across forest trusts * Enumerate permissions, exploit delegation, abuse enterprise application, utilize network sniffers, abuse user simulation * Bypass logon restrictions, lateral movement across forest trust, play with Kerberos tickets * Bypass AV, tackle Kerberos double-hop, abuse delegation, extract credentials from DC in the other forest, escalate from child to forest root in the other forests * Enumerate across forest, access documents and emails to collect information, abuse remoting endpoints, modify ACLs, exploit delegation * Abuse user simulation, craft payloads, bypass AV, bypass privilege restrictions, impersonate users, abuse exchange permissions, modify ACLs, escalate privileges to domain admin * Retrieve credentials from process memory dump and replay them, Bypass Windows Defender Application Guard, ASR and CLM to extract credentials, escalate privileges on domain * Abuse forest trust to hop to a third forest, enumerate privileges from the first hop forest and pivot to the second hop, avoid Kerberos double hop issue, extract secrets * Collect information from various compromised forests, escalate to DA, escalate to forest root * Abuse built-in Windows mechanisms, craft payloads, compromise air-gapped/not-reachable servers * Abuse virtual servers, extract credentials from offline domain controllers and extract secrets to initiate the fund transfer --- ### 18. Udemy – Cracking Microsoft Office files Passwords | Ethical Hacking - URL: https://cyberlabarchive.com/courses/udemy-office-password-cracking - Category: Other Institutions - Downloadable Files: 1 (539 MB) - Formats: ZIP - Description: This course is highly focused on practical password cracking. You will be able to crack office passwords with CPU and GPU-based attacks from Kali Linux as well as Windows Machine. you’ll learn everything by example and practical guides,  so we’ll never have any dry boring theoretical lectures. - Syllabus Topics: * Introduction * Preparing Lab Environment * Office Files Password cracking * Bonus Section --- ### 19. [Offensive Cyber Operations with AI [OCO-AI - URL: https://cyberlabarchive.com/courses/offensive-cyber-operations-with-ai-oco-ai - Category: Cyberwarfare - Downloadable Files: 1 (2.8 GB) - Formats: ZIP - Description: Offensive Cyber Operations with AI (OCO-AI) is a hands-on, practitioner-focused course that teaches you how to integrate large language models, autonomous agents, and workflow automation into the full cyber kill chain. Designed for offensive security professionals, it shows how AI can accelerate reconnaissance, attack-surface discovery, binary analysis, Active Directory pathfinding, phishing preparation, and post-exploitation planning in realistic red team scenarios. - Syllabus Topics: * Attack Simulation * AI Infrastructure & Agentic Tooling * Autonomous Reconnaissance & Initial Access * Binary Analysis & Exploitation * Red Team Operations & Post-Exploitation --- ### 20. [Active Directory Red Team Specialist [AD-RTS - URL: https://cyberlabarchive.com/courses/active-directory-red-team-specialist-ad-rts - Category: Cyberwarfare - Downloadable Files: 1 (1.3 GB) - Formats: ZIP - Description: The Active Directory Red Team Specialist (AD-RTS) is a comprehensive, 100% practical course designed to teach offensive security professionals how to identify, exploit, and chain vulnerabilities across Active Directory environments and integrated infrastructure. This course bridges the gap between theory and real-world attack execution through simulated telecom sector scenarios. - Syllabus Topics: * Active Directory Security * Certificate Services Security * Abusing Exchange Server Roles * Attack Surface of ESXi integrated with AD * AD-RTS Cyber Range Lab Part 1 * AD-RTS Cyber Range Lab – Part 2 --- ### 21. RedTeam360 – Ethical Hacker Junior - URL: https://cyberlabarchive.com/courses/redteam360-ethical-hacker-junior - Category: Other Institutions - Downloadable Files: 1 (4.5 GB) - Formats: ZIP - Description: Ethical Hacker Jr Course Is well designed for Hacking Enthusiasts Between 13 And 18 Years Of Age Who Believe In Hacking With A Right Ethical Conscience. Our Trainers are Industry certified with extensive experience and have a gifted talent for the art of teaching. Cyber crimes are increasing day by day. The world needs more superheroes. - Syllabus Topics: * Introduction to Cybersecurity * Understanding Cyber Attacks * Understanding Dark Side of Social Media --- ### 22. Applied Network Defense – Investigation Theory - URL: https://cyberlabarchive.com/courses/investigationtheory - Category: Applied Network Defense - Downloadable Files: 1 (1.4 GB) - Formats: ZIP - Description: Investigation Theory is a comprehensive cybersecurity course designed for security analysts, incident responders, threat hunters, and digital forensics professionals who want to master the investigative process behind effective security operations. Rather than focusing on a specific SIEM, EDR, or forensic platform, this course teaches the mental models, analytical frameworks, and decision-making techniques used by experienced investigators to uncover, understand, and respond to security incidents. - Syllabus Topics: * The Investigation Process: Diagnostic Inquiry * Evidence: Knowing Where to Look When You Hear Hoofbeats * Questions: A Question Well Stated is a Problem Half-Solved * Decisions: Making Meaning from Data * Transforming Data: Finding Answers in Evidence * Investigation Playbooks: How to Use Inductive Reasoning to Predict Questions and Gain Efficiency * Threat and Open Source Intel: Understanding the Unknown * The Curious Hunter: Finding Investigation Leads without Alerts * Your Own Worst Enemy: Recognizing and Limiting Bias * Reporting: Effective Communication of Breaches and False Alarms --- ### 23. BlackHat – Python Hacker Bootcamp - URL: https://cyberlabarchive.com/courses/bh-python-hacker-bootcamp - Category: BlackHat - Downloadable Files: 1 (285 MB) - Formats: ZIP - Description: This course was designed to follow a hacker’s methodology of programming. Instead of learning formal programming practices that you’ll never use, this course focuses on core concepts taught using information security-centric projects. The hands-on labs, which accompany each lecture, focus on solving commonplace, and real-world security challenges. The labs have been designed so that they apply to both attackers and defenders. Join us for a fun and fast-paced bootcamp to take you from zero to hero! - Syllabus Topics: * Introduction to Python and setting up the environment * Python syntax, variables, and data types * Flow control using if statements and loops * Functions, error handling, and Python’s import system * An overview of Object-Oriented Programming * Reading and writing text and CSV files * Creating network sockets in Python * Extending Python with 3rd-party libraries * Automating port scans with Nmap * Interacting REST services * Web scraping * Advanced searching and manipulation with Regex * Handling JSON data * Capstone Lab Project --- ### 24. BlackHat – Secure Coding in C - URL: https://cyberlabarchive.com/courses/bh-secure-coding-in-c - Category: BlackHat - Downloadable Files: 1 (7 GB) - Formats: ZIP - Description: Secure Coding Training in C and C++ is a four-day course that provides a detailed explanation of common programming errors in C and C++ and describes how these errors can lead to code that is vulnerable to exploitation. This course concentrates on security issues intrinsic to the C and C++ programming languages and associated libraries. - Syllabus Topics: * Buffer overflows * Integer overflow * Dangerous compiler optimizations * Race conditions * Memory management errors * Logical errors * Invalid assumptions --- ### 25. VCL – Certified Cyber Criminologist - URL: https://cyberlabarchive.com/courses/vcl-certified-cyber-criminologist - Category: Other Institutions - Downloadable Files: 1 (20.6 GB) - Formats: ZIP - Description: Certified Cyber Criminologist is a live training program of Cyber Crime Investigation for those who want to begin their career as an Investigator with Law Enforcement Agencies, Cyber cells, Police Departments, or as consultants. Due to the nature of the curriculum and premium modules, this training has exclusive access and is not open to all. We handpick our students by checking their eligibility to pursue this program. - Syllabus Topics: * Introduction to Cyber Criminology * Crime Scene Investigation Evidences * Evidence and Information Gathering * Investigation Techniques of Police and LEAs * Indian Cyber Crime Laws * Intelligence for Data Analysis * Advanced Intelligence and Evidence Mapping * Social-Media and Web Intelligence Techniques * Dark Net and Deep web Investigation * Cryptocurrency Crime Investigations * Social Engineering Crimes and Attacks * Social Media Crime Analysis * Accessing unlisted Calls, Emails and IP Record * ATM, Debit, Credit Card Crime Investigation * Bank Wallets, QR Codes Crime Investigation * Jobs, Survey and SIM Cloning Frauds Analysis * Privacy Issues and Private Content * Adult content related Crime Investigation * Surveillance and CCTV Investigations * GPS, Cell IDs and IMSI Information * Advanced Intelligence for Investigation * Digital Forensics Part 1 * Digital Forensics Part 2 * Starting Career as Cyber Crime Investigator --- ### 26. VCL – Certified Enterprise Security Officer V2 - URL: https://cyberlabarchive.com/courses/vcl-certified-enterprise-security-officer-v2 - Category: Other Institutions - Downloadable Files: 1 (17.5 GB) - Formats: ZIP - Description: Certified Enterprise Security Officer is an advanced 90% practical course that covers what the companies are looking for, in any potential candidate. A course with over 21 different highly demanded technical modules. It is a journey from scratch to an advanced level of blue and purple teaming domains of cybersecurity. It gives you a detailed overview of the most widely used applications and infrastructure in corporate security. It teaches you what the world needs today and also what the world will be needing in the future. - Syllabus Topics: * Cybersecurity In Enterprise * Cyber Threats and Attack Vectors * Email Security and Setup * Web Application Security * DevSecOps AWS and CSPM * Mitre Att&ck Framework * Threat Intelligence and Honeypots * Adversary Simulation * Effective Purple Teaming * SIEM Solutions and tools * Splunk Analyst & Administration * WAZUH SIEM and Use Cases * ELK Stack * Fundamentals of SOAR * Windows Endpoint Hardening * IBM Qradar Complete * Azure Senital * DFIR Journey * KIOSK Setups * Windows PrivEsc Exploitations * Blockchain and Security --- ### 27. Learning Path (CJCA) HTB Academy – Junior Cybersecurity Analyst - URL: https://cyberlabarchive.com/courses/htb-junior-cybersecurity-analyst - Category: Other Institutions - Downloadable Files: 1 (5 MB) - Formats: ZIP - Description: The Junior Cybersecurity Analyst Job Role Path is the first step to enter and gain practical, hands-on experience in the cybersecurity field. This path covers essential cybersecurity concepts and builds a foundational understanding of operating systems, offensive and defensive tools, attack tactics, log analysis, and methodologies employed by penetration testers and security operations centers. Students will explore key principles while gaining practical experience in both offensive and defensive cybersecurity assessments, including the basics of penetration testing and security analysis. This job role path equips you with the skills and mindset needed to launch a career in cybersecurity, offering a well-rounded foundation in both offensive and defensive techniques that reflects the evolving demands of real-world cybersecurity operations. - Syllabus Topics: * Introduction to Information Security * Network Foundations * Introduction to Networking * Linux Fundamentals * Introduction to Bash Scripting * Windows Fundamentals * Introduction to Windows Command Line * Web Requests * Introduction to Web Applications * Introduction to Penetration Testing * Pentest in a Nutshell * Network Enumeration with Nmap * Footprinting * Hacking WordPress * Intro to Network Traffic Analysis * Using the Metasploit Framework * Incident Handling Process * Windows Event Logs & Finding Evil * Security Monitoring & SIEM Fundamentals * Introduction to Threat Hunting & Hunting With Elastic --- ### 28. Red Team – CredOps Infiltrator [CRT-COI] - URL: https://cyberlabarchive.com/courses/certified-red-team-credops-infiltrator-crt-coi - Category: Cyberwarfare - Downloadable Files: 1 (2.1 GB) - Formats: ZIP - Description: Certified Red Team – CredOps Infiltrator [CRT-COI] is a practical mini-course focused on Windows credential storage internals and credential access concepts for offensive security teams. Learners explore DPAPI, WDigest, LSASS, WiFi credentials, browser secrets, the Registry, and Credential Manager through on-demand videos, PDF materials, and hands-on exercises. Designed for beginner to intermediate learners, this course is ideal for red teamers, penetration testers, system administrators, students, and cybersecurity enthusiasts looking to strengthen their understanding of credential operations in Windows environments. - Syllabus Topics: * Explore Windows Credential Storage Internals * Explore DPAPI, WDigest, LSASS, WiFi, Browser, Registry, Credential Manager * Learn to Develop Fully Undetectable Implant * Manual Dumping Exercises --- ### 29. OffSec – AI-300: Advanced AI Red Teaming - URL: https://cyberlabarchive.com/courses/offsec-ai-300 - Category: OffSec - Downloadable Files: 2 (556 MB) - Formats: ZIP - Description: Advanced AI Red Teaming (AI-300) is OffSec’s advanced AI cybersecurity training course designed to help security professionals assess and exploit vulnerabilities in modern AI systems. As organizations increasingly adopt generative AI, machine learning models, and autonomous AI applications, the attack surface for cyber threats is rapidly expanding, increasing the need for stronger threat intelligence, risk management, and modern cyber defense strategies. Traditional penetration testing approaches were not designed for AI-enabled environments, where models, data pipelines, agents, and orchestration frameworks introduce entirely new security risks. As organizations deploy generative AI across production environments, the AI attack surface continues to expand, requiring new approaches to AI security testing and offensive assessment. - Syllabus Topics: * Introduction to Red Teaming AI Systems * Reconnaissance for AI Targets * Attacking AI Agents * Attacking Multi-Agent Systems and A2A Protocols * Exploiting RAG Pipelines * Attacking Embeddings * Attacking Model Context Protocol and Tool Surfaces * Supply Chain Attacks on AI/ML Systems * AI Infrastructure and Deployment Exploits * Threat Modeling for AI-Enabled Targets * Assembling The Pieces – Capstone Red Team Engagement --- ### 30. Packt Publishing – Reverse Engineering Masterclass: IDA, Ghidra, Linux & x86_64 - URL: https://cyberlabarchive.com/courses/packt-reverse-engineering-masterclass-ida-ghidra-linux-x86-64 - Category: Other Institutions - Downloadable Files: 1 (6.4 GB) - Formats: ZIP - Description: In this course, you’ll explore the core aspects of reverse engineering and low-level computing. The journey starts with an introduction to the fundamental tools like Ghidra and IDA, providing you with the skills to analyze code at the binary level. You’ll be guided through disassembly techniques, memory manipulation, and debugging, empowering you to understand and manipulate machine code. As you progress, you’ll delve deeper into malware analysis, learning how to reverse-engineer malicious software and identify vulnerabilities. You’ll gain hands-on experience by working through real-world scenarios, setting up a virtualized environment, and using built-in tools to analyze systems. Whether it’s dissecting x86_64 binaries or learning the intricacies of assembly language, the course ensures you have the skills to tackle modern cybersecurity challenges. By the end of the course, you’ll have a solid grasp of reverse engineering techniques and the confidence to apply them in your security practice. You’ll be ready to handle disassembly, malware analysis, and low-level debugging using industry-standard tools and techniques. - Syllabus Topics: * Introduction to Computer Engineering & Science * Computer Arithmetic for Beginners * Boolean Algebra * Electronics * Combinational Logic Circuits * Introduction to Ghidra * Introduction to Low-Level Computing * Introduction to Reverse Engineering * Assembly Language * Creating Lab * Writing Our First 64-Bit Assembly Program * Disassembly and Disassembler * Understanding Data Types * Starting with Ghidra * Debugging x86-64 * Malware Analysis and Reverse Engineering with Ghidra * Binary Analysis * Writing Our Second 64-Bit Assembly Program * Symbols, Stripped and Not Stripped Binaries * Linux – ELF Format * Windows – PE Format * OR XOR AND * IDA Pro / IDA Freeware * Data Display Debugger – DDD * Jump and Loop * Assembly Project Using Jump and Loop * Memory Manipulation * Calculator with Assembly * Stack * Functions * Stack Frame and External Functions * FuncArg and Preserving Registers * Bits Everywhere!!! * Macros * Console IO and File IO * File IO --- ### 31. FOR589: Cybercrime Investigations - URL: https://cyberlabarchive.com/courses/cybercrime-investigations - Category: Security Education - Downloadable Files: 3 (22.3 GB) - Formats: PDF, ZIP - Description: FOR589 is a five-day intermediate-level course that takes professionals deep into the world of cybercriminal ecosystems. Participants learn how to apply structured investigative thinking to cyber threats — from profiling threat actors and navigating dark web communities to tracing illicit cryptocurrency transactions across blockchain networks. The course covers undercover operational techniques, including persona management and HUMINT collection, giving analysts the tools to safely infiltrate and monitor underground forums and marketplaces. With over 20 hands-on labs and a final capstone exercise, students gain practical experience turning fragmented intelligence into actionable, evidence-based findings. The course is designed for cyber threat intelligence analysts, digital forensics professionals, and incident responders who want to bridge the gap between traditional investigation methods and the modern cybercrime landscape. - Syllabus Topics: * Cybercriminal Intelligence * Cryptocurrency Investigations * Cybercrime Underground * Undercover Operations * Capstone Exercise --- ### 32. Udemy – IoT Security: Hacking & Hardening Connected Devices - URL: https://cyberlabarchive.com/courses/iot-security-hacking-hardening-connected-devices - Category: Other Institutions - Downloadable Files: 1 (4.1 GB) - Formats: ZIP - Description: This is a large, hands-on IoT security course that takes you across the entire connected-device stack and then teaches you how to defend it. It mirrors its title: a hacking half that goes on the offensive across hardware, firmware, networks, radio, mobile apps, and the cloud, followed by a hardening half that maps a concrete defense back to every attack you learn. - Syllabus Topics: * IoT Security Foundations and Your Hacking Lab * Reconnaissance and Attack Surface Mapping * Hardware Hacking * Firmware Analysis and Exploitation * Network and Protocol Attacks * Radio and Wireless Attacks * Hardening the Hardware and Boot Chain * Securing Firmware and Updates * Securing Communications, Apps, and Cloud * Defending IoT on the Network * Secure-by-Design and the Development Lifecycle * Compliance, Labeling, and Capstone --- ### 33. HackSmarter – Hands on Phishing - URL: https://cyberlabarchive.com/courses/hacksmarter-hands-on-phishing - Category: Other Institutions - Downloadable Files: 1 (1.6 GB) - Formats: ZIP - Description: Tired of theoretical phishing courses? This is the definitive, hands-on training for penetration testers and red team operators who need to move beyond theory and execute realistic, effective phishing campaigns against modern, hardened targets. In this course, you won’t just learn about phishing—you’ll build, launch, and manage full-scale campaigns using industry-standard tools like GoPhish and the powerful Evilginx framework, learning to bypass Multi-Factor Authentication (MFA) and common email defenses. - Syllabus Topics: * Welcome to the Course * Configuring the Lab Environment * Preparing for a Successful Phishing Trip * GoPhish Setup and Initial Configuration * Launching a Phishing Campaign with GoPhish * Phishing with Evilginx * Bypassing Common Defenses * Combining Pretext Calling with Phishing * Course Conclusion --- ### 34. HackSmarter – Intro to AWS Pentesting - URL: https://cyberlabarchive.com/courses/hacksmarter-intro-to-aws-pentesting - Category: Other Institutions - Downloadable Files: 1 (1.9 GB) - Formats: ZIP - Description: The cloud is the new network. Modern enterprises are running on Amazon Web Services (AWS), and security professionals need to master the unique attack surface it presents. If you’re a pentester, bug bounty hunter, or security engineer ready to conquer the cloud, this course is for you. This course is a comprehensive, hands-on journey into the world of AWS penetration testing. You’ll move past theory to build, configure, and exploit real-world cloud vulnerabilities in a safe, controlled lab environment using industry-standard tools like Pacu and CloudGoat. - Syllabus Topics: * Welcome to the Course * Configuring the Lab Environment * IAM The Admin Now (Understanding IAM in AWS) * Your Bucket Is Leaking… (Attacking S3 Buckets) * Dysfunctional Functions (Attacking Lambda Functions) * My Other Computer Is Your EC2 (Attacking EC2 Instances) * AWS Privilege Escalation * Capstone Challenge #1: Beanstalk Secrets * Capstone Challenge #2: SNS Secrets * Course Conclusion --- ### 35. HackSmarter – Sliver C2: Pentesting and Evasion - URL: https://cyberlabarchive.com/courses/hacksmarter-sliver-c2-pentesting-and-evasion - Category: Other Institutions - Downloadable Files: 1 (1.8 GB) - Formats: ZIP - Description: A professional, lab-driven training program that moves you from fundamentals to full-scale C2 operations — with hosted labs, instructor demos, real-world workflows, quizzes, and a capstone that proves you can execute the entire attack lifecycle. This course is geared towards beginners who are interested in working with their first C2. If you already have experience with Sliver C2, you likely will not find this course beneficial. - Syllabus Topics: * Welcome to the Course * Introduction to C2 Frameworks * Sliver Architecture * Listener and Implant Creation * Session Management & Post-Exploitation * Pivoting & Persistence * Detection & Evasion * Capstone Project --- ### 36. JustHacking – InsiderPhD API Hacking - URL: https://cyberlabarchive.com/courses/justhacking-insiderphd-api-hacking - Category: Other Institutions - Downloadable Files: 1 (3.6 GB) - Formats: ZIP - Description: API hacking expert, Dr. Katie Paxton-Fear AKA InsiderPhD, takes you far beyond her Free Upskill Challenges on the basics of APIs to be your personal guide on learning the hands-on skills needed in today’s competitive job market. This fully interactive course is the ultimate guide to hacking APIs! From discovering API endpoints to using Burp and Postman, Katie covers the entire OWASP API Top 10 from entry point to exploit. - Syllabus Topics: * API Fundamentals * The Hacker’s Toolkit * Finding Your Target * A-to-Z Vulnerabilities * A Proven Methodology * Hands-On Hacking --- ### 37. Altered Security – Linux Active Directory - URL: https://cyberlabarchive.com/courses/altered-security-linuxad - Category: Altered Security - Downloadable Files: 1 (589 MB) - Formats: ZIP - Description: Attacking Active Directory with Linux (LinuxAD) is a training environment and playground. Students get access to a dedicated lab setup (not shared with other students). The lab contains a Linux-based machine to execute attacks and a target AD setup. The target AD is a fully patched AD environment with all Server 2019 machines. - Syllabus Topics: * Introduction to Active Directory * Attack Methodology * Port Scanning and Enumeration * Domain Enumeration * Extracting Credentials * Credential Spraying * Application Whitelisting * SQL Server attacks * Domain Privilege Escalation * Domain Domination and Persistence --- ### 38. Udemy – Hacking 101 Bootcamp - URL: https://cyberlabarchive.com/courses/udemy-hacking-101-bootcamp - Category: Other Institutions - Downloadable Files: 1 (14.7 GB) - Formats: ZIP - Description: The Hacking 101 Course by Redfox Cybersecurity Academy is carefully designed to give you a complete and practical introduction to this exciting and fast-growing domain. This course blends core theory with hands-on practice, allowing you to develop real-world ethical hacking skills while building a strong technical foundation. Whether your goal is career advancement, skill development, or simply understanding how cybersecurity works behind the scenes, this course sets you up for long-term success. - Syllabus Topics: * Introduction * General Fundamental Concepts * Networking Fundamental Concepts * How the Internet talks: A Deep Dive * Art of Getting Initial Access * Understanding Web Application Pentesting * Web Exploitation * Linux Privilege Escalation * Tools * Windows Privilege Escalation --- ### 39. RedSiege – Kerberos Workshop - URL: https://cyberlabarchive.com/courses/redsiege-kerberos-workshop - Category: Other Institutions - Downloadable Files: 1 (3.5 GB) - Formats: ZIP - Description: Learn Kerberos from Tim Medin – the creator of Kerberoasting, and get hands-on with the real-world attacks, tools, and defenses every modern penetration tester needs to know. you’ll go beyond surface-level explanations and dive deep into how Kerberos truly works. You’ll break down the structure of tickets, how they’re encrypted and signed, and why each piece matters for both defense and attack scenarios. More importantly, you’ll learn these concepts from Tim Medin, the creator of the Kerberoasting and one of the foremost experts in enterprise penetration testing. - Syllabus Topics: * Offense for Defense * Penetration Testing: Beyond the Basics --- ### 40. Just Hacking – Constructing Defense - URL: https://cyberlabarchive.com/courses/constructing-defense - Category: Other Institutions - Downloadable Files: 1 (8.3 GB) - Formats: ZIP - Description: Constructing Defense is a deeply technical, lab-focused cybersecurity training course designed to give you real-world defensive skills through extensive hands-on practice. Built from years of security research and experimentation in complex lab environments, this course teaches you how to attack and defend within a realistic enterprise network. making it ideal for aspiring SOC analysts, incident responders, detection engineers, and security practitioners at all levels. - Syllabus Topics: * Welcome & Introduction * Lab Overview * Lab Construction * Lab Construction – AWS Version * [Splunk] – Lab Construction & Provisioning – Ludus Version * Lab Construction & Provisioning – Ludus Version * Lab Provisioning * Telemetry Setup & Miscellaneous Lab Configuration * Lab Executions * Lab Executions – Splunk * Outro --- ### 41. Cyber Defenders – CCD Blue Team Certification - URL: https://cyberlabarchive.com/courses/cyber-defenders-ccd-blue-team-certification - Category: Other Institutions - Downloadable Files: 1 (946 MB) - Formats: ZIP - Description: The Certified CyberDefender (CCD) is a comprehensive, hands-on blue team cybersecurity training and certification designed to develop elite defensive skills for Security Operations Center (SOC) analysts, threat hunters, incident responders, and DFIR professionals. This self-paced program emphasizes real-world readiness through practical investigations and realistic scenarios that mirror on-the-job challenges in modern SOC environments. - Syllabus Topics: * SecOps Fundamentals * Incident Response * Email Security * Evidence Collection * Disk DFIR * Memory DFIR * Threat Hunting * Malware Analysis --- ### 42. All Hacker Arise courses - URL: https://cyberlabarchive.com/courses/hacker-arise-rip - Category: Other Institutions - Downloadable Files: 1 (0 MB) - Formats: LINK - Description: Complete collection of Hackers Arise courses, covering Ethical Hacking, Cybersecurity Fundamentals, Linux for Hackers, Penetration Testing, Privilege Escalation, Metasploit, Digital Forensics, Incident Response, OSINT, Network Security, Malware Analysis, and advanced offensive and defensive security techniques. --- ### 43. CBTNuggets – Network Penetration Testing Essentials (PEN-100) - URL: https://cyberlabarchive.com/courses/cbtnuggets-pen100 - Category: Other Institutions - Downloadable Files: 1 (19.3 GB) - Formats: ZIP - Description: PEN-100: Network Penetration Testing Essentials is foundational OffSec training for aspiring ethical hackers. Learn Linux and Windows command line, network protocols, scripting with Bash and Python, and explore essential security tools like Nmap, Kali Linux, and Metasploit. Build a strong ethical hacking mindset with hands-on practice in reconnaissance, exploitation, and post-exploitation techniques. Perfect for beginners looking to start a cybersecurity career. - Syllabus Topics: * Introduction to PEN-100 * Installing and Configuring Kali * Linux Basics * Installing and Configuring Windows * Windows Basics * Linux Networking * Windows Networking * Networking Basics * PowerShell Scripting * Wireless Networking Basics * Python Scripting * Bash Scripting * Monitoring with Kali * Metasploit Framework * Cryptography * Web Application Understanding * Introduction to Active Directory --- ### 44. CBTNuggets – Network Penetration Testing Essentials (PEN-200) - URL: https://cyberlabarchive.com/courses/cbtnuggets-pen200 - Category: Other Institutions - Downloadable Files: 1 (38.7 GB) - Formats: ZIP - Description: This professional-level OSCP certification training​ prepares penetration testers, cybersecurity professionals, and red team operators to pass the PEN-200 exam and earn their OSCP certification. Get hands-on practice penetration testing with virtual labs designed by experienced infosec pro Erik Choron. Gain deep experience in areas like enumeration, privilege escalation, and Active Directory exploitation as you apply tools like Metasploit, Kali Linux, and tunneling frameworks in real-world scenarios. After taking this OSCP training, you’ll be ready to pass the PEN-200 exam with confidence. - Syllabus Topics: * Beginning Pen-200 * Pen Testing Lifecycle with Reconnaissance * Exploit resources * Metasploit fundamentals * Matasploit Payloads * Scanning with nMap * Scanning with Nessus (Active) * Detailed Active Scanning with Nessus * OpenVAS * Passive Scanning for Vulnerabilities * Deeper into Passive Scanning * Web Application Assessment * Web Application Assessment Tools * Burpsuite * Cross-Site Scripting XSS * Directory Traversal * File Inclusion Attack * Command Injection * SQL Theory and Exploration * Exploiting Microsoft Office * Windows Library Files * Abusing Windows Library Files * Advanced DLL Injection * Post-Exploitation with Metasploit * Password Attacks – Understanding * Password Attacks – Methodology * Password Attacks – Physical Attack * Password Attacks – Tools * Windows Enumeration * Leveraging Windows Services * Linux Enumeration * Linux Insecurity * Linux File Insecurity * Port Forwarding and Tunneling * Deep Packet Inspection * Other Tunneling Tools * Antivirus Evasion * Automating Metasploit * Memory Corruption Exploits * Fixing Web Exploits * Understanding Active Directory Authentication * Active Directory Manual Enumeration * Active Directory Automated Enumeration * Attacks on Active Directory Authentication * Active Directory Persistence * Lateral Movements and Post-cleanup --- ### 45. All courses of David Bombal - URL: https://cyberlabarchive.com/courses/david-bombal-rip - Category: Other Institutions - Downloadable Files: 1 (0 MB) - Formats: LINK - Description: Complete collection of David Bombal’s courses, covering Networking, CCNA/CCNP, Network Automation with Python and Ansible, GNS3, SDN/OpenFlow, Wireshark, Cybersecurity, Ethical Hacking, and Bug Bounty tools. --- ### 46. (Altered Security – Certified Azure Red Team Professional (CARTP - URL: https://cyberlabarchive.com/courses/certified-azure-red-team-professional-cartp - Category: Altered Security - Downloadable Files: 1 (4.2 GB) - Formats: ZIP - Description: More than 95 percent of Fortune 500 use Azure today! A huge number of organizations use Azure AD (Entra ID) as an Identity and Access Management platform. This makes it imperative to understand the risks associated with Azure as it contains an enterprises infrastructure, apps, identities and a lot more! In addition to cloud-only identity, the ability to connect on-prem Active Directory, applications and infrastructure to Azure AD brings some very interesting opportunities and risks too. Often complex to understand, this setup of components, infrastructure and identity is a security challenge. - Syllabus Topics: * Introduction * Recon & Discovery * Initial Access * Enumeration * Privilege Escalation * Lateral Movement * Persistence * Data Mining * Defenses * Defenses Bypass --- ### 47. TCM Security – AI Hacking 101 - URL: https://cyberlabarchive.com/courses/tcm-ai-hacking-101 - Category: TCM Security - Downloadable Files: 1 (1.4 GB) - Formats: ZIP - Description: AI Hacking 101 teaches students the fundamentals of penetration testing for AI/LLM-based applications through self-paced video instruction and guided hands-on labs. Students will learn to detect and exploit common AI vulnerabilities, with practical exercises using a custom-built lab environment featuring a vulnerable chatbot that uses Retrieval-Augmented Generation (RAG) and integrates with a company knowledge base. - Syllabus Topics: * Intro * AI Threats * Recon and Fingerprinting * Prompt Injection and Jailbreaking * Testing for Harmful/Wasteful Output * Testing Role-Based Access Controls * Retrieval Augmented Generation (RAG) * Excessive Agency * Outro --- ### 48. TCM Security – AI 100: Fundamentals - URL: https://cyberlabarchive.com/courses/tcm-ai-100-fundamentals - Category: TCM Security - Downloadable Files: 1 (869 MB) - Formats: ZIP - Description: This course is designed to introduce students to the fundamentals of AI including neural networks and transformer large language models (LLMs). Beginning with the math behind neural networks and how they are trained, students will learn how these networks are used for natural language processing and the architecture of modern transform LLMs, providing a full picture of how neural networks and LLMs actually work. This course does not focus on how to use AI tools. - Syllabus Topics: * Intro * Intro to Neural Networks * Intro to Natural Language Processing * Introduction to Large Language Models * Self-Hosting LLMs * Outro --- ### 49. Udemy – Windbg : A complete guide for Advanced Windows Debugging - URL: https://cyberlabarchive.com/courses/udemy-windbg-a-complete-guide - Category: Other Institutions - Downloadable Files: 1 (18.4 GB) - Formats: ZIP - Description: Have you ever felt your windows operating system is hung or becoming slow or having a BSOD? Or an application crash or application hang or slow on windows? Have you had to press the restart button of your PC or the windows server to get rid of the problem and had no clue when that issue will happen again? Or you’re asked to analyse a memory dump of a compromised system for isolating a malware?. If that bothers you, this training is all about root causing and solving such complicated issues once and for all, among many other topics it covers. Windbg is the single most powerful, debugging and reverse engineering tool in windows platform. Windbg is like an x-ray plus mri plus ct scan for programs running on windows operating system, including the operating system itself. It helps us to root cause complicated problems like we discussed in windows ( OS ) and programs running inside the operating system. - Syllabus Topics: * Windbg Basics * User and Kernel mode Debugging * Debugging Real Production Issues --- ### 50. Belkasoft – Windows Forensics with Belkasoft - URL: https://cyberlabarchive.com/courses/windows-forensics-with-belkasoft - Category: Other Institutions - Downloadable Files: 1 (11.6 GB) - Formats: ZIP - Description: This course is designed for digital forensics investigators who deal with Windows computers in their work. It offers an opportunity to enhance your knowledge and gain hands-on experience in discovering and analyzing Windows artifacts. - Syllabus Topics: * Getting started * Windows file systems * Reviewing artifacts in Belkasoft X * Web and email related artifacts * Media analysis * Document forensics * System artifacts and looking for traces * How to get more data * Practical case * FINAL TEST --- ### 51. Udemy – Cryptocurrency Forensics 2025: Full Guide - URL: https://cyberlabarchive.com/courses/udemy-cryptocurrency-forensics-2025-full-guide - Category: Other Institutions - Downloadable Files: 1 (668 MB) - Formats: ZIP - Description: Learn how to trace Bitcoin, Ethereum, and Monero transactions using real-world blockchain forensics and crypto investigation techniques. This course is designed for cybersecurity professionals, law enforcement, compliance officers, and blockchain analysts who want to follow the money across crypto networks. - Syllabus Topics: * Introduction to Cryptocurrency Forensics * Wallets, Keys, and Address Structures * Blockchain Transaction Models * Bitcoin Forensics * Ethereum Forensics * Privacy Coins and Obfuscation Tactics * Public Resources & Commercial Tools * Real-World Case Studies * Alternative Blockchain Analysis * Investigative Techniques and Countermeasures --- ### 52. Udemy – Beyond Flipper Zero Unlock the Power of T-Embed - URL: https://cyberlabarchive.com/courses/udemy-t-embed-course - Category: Other Institutions - Downloadable Files: 1 (3.3 GB) - Formats: ZIP - Description: T-Embed is an advanced, all-in-one wireless security and IoT innovation device that integrates Wi-Fi, Bluetooth, RFID, HID, Infrared, RF, GPS, and more into a compact and portable platform. Unlike traditional single-purpose tools, T-Embed empowers you to work across multiple communication protocols simultaneously, making it a versatile companion for both cybersecurity professionals and IoT enthusiasts. In this course, you’ll explore how to unlock the full potential of T-Embed for wireless penetration testing, security simulations, and real-world ethical hacking scenarios. You will gain practical experience with firmware installation, custom payloads, and the configuration of advanced features designed for both offensive and defensive applications. From simulating HID vectors to experimenting with RFID cloning, Wi-Fi monitoring, and Bluetooth exploration, you’ll see how T-Embed can function as a complete wireless security lab in your pocket. - Syllabus Topics: * Introduction * T-Embed Essentials * Wi-Fi Security Assessments * Exploring Bluetooth * Exploring Infrared Technologies * Radio Frequency * HID Payloads & Vectors * NFC-RFID Capabilities of T-Embed * Connecting GPS Module with T-Embed * NRF24L01 * T-Embed Modification * Additional Materials --- ### 53. SpecterOps – Adversary Perspectives: Azure - URL: https://cyberlabarchive.com/courses/adversary-perspectives-azure - Category: SpecterOps - Downloadable Files: 1 (6.7 GB) - Formats: ZIP - Description: Adversary Perspectives: Azure is the first installment in the SpecterOps Adversary Perspectives series. Known for our Adversary Tactics courses, we realized that there is often a gap of understanding that needs to be bridged before a practitioner is ready to start taking offensive or defensive actions in a particular environment. While other courses aim to simply build basic knowledge from a general user standpoint, this Adversary Perspectives class looks to teach security professionals from the viewpoint of an attacker. Don’t just look at your security posture in Azure, actually understand the abuse mechanisms and holistic security of your deployment. Participants will build on this knowledge through an understanding of how Azure architectures, like solely cloud-based environments or hybridized on-premises and Azure environments, can affect the overall security of an environment. Throughout the course, participants will reinforce what they learn through hands-on labs and instruction given by SpecterOps practitioners. - Syllabus Topics: * Day 1Class IntroductionAzure BasicsAccounts and IdentitiesRolesGroups * Day 2Function AppsMicrosoft 365Virtual MachinesMS Graph * Day 3OAuthAuthentication MechanismsCredential and Identity Syncing Mechanisms * Day 4Conditional Access PoliciesExternal Information GatheringCredential CollectionAttack Lifecycle --- ### 54. TCM Security – Security Operations (SOC) 201 - URL: https://cyberlabarchive.com/courses/tcm-security-operations-soc-201 - Category: TCM Security - Downloadable Files: 1 (5.2 GB) - Formats: ZIP - Description: Security Operations (SOC) 201 is an intermediate security operations course designed to enhance your skills in detecting, investigating, and responding to complex cyber threats at scale. After establishing fundamental security operations knowledge and practical skills in SOC 101, the next logical step is to progress your career by applying advanced investigation methodologies and grasping the responsibilities of an Incident Responder and Threat Hunter. The SOC 201 curriculum teaches analysts how to identify, hunt, and respond to real-world adversary tactics and techniques. With a practical, hands-on focus, the curriculum provides realistic scenarios where students investigate sophisticated threats across multiple systems, learning to detect and respond effectively in enterprise-scale environments. The course also integrates proactive threat hunting as part of a continuous detection and response cycle, giving analysts the mental models to identify active threats, uncover gaps, and feed insights back into investigative processes to improve future detection and response efforts. - Syllabus Topics: * Introduction * Lab Setup * Introduction to Incident Response * Introduction to Threat Hunting * Data Transformation * Understanding Anomalies * Dissecting Threat Reports * Threat Hunting Lab * Collection at Scale * PowerShell 101 * PowerShell for Incident Response * Conclusion --- ### 55. Altered Security – Certified Evasion Techniques Professional (CETP) - URL: https://cyberlabarchive.com/courses/cetp-evasionlab - Category: Altered Security - Downloadable Files: 3 (43.9 GB) - Formats: ZIP - Description: The Evasion lab (Certified Evasion Techniques Professional) is designed to equip information security professionals with the expertise needed to bypass defenses in modern enterprise environments. This course delves deep into the techniques and methodologies used to bypass endpoint countermeasures like EDRs. You will gain a comprehensive understanding of Windows internals, including the distinction between user-mode and kernel-mode components, also you will gain a comprehensive understanding of EDRs internals, and how telemetries are collected. ​Throughout the course, you will learn about Windows Internals, reversing EDRs, bypassing  Microsoft Defender for Endpoint (MDE), Elastic EDR, Sysmon weaponizing kernel exploits for defense evasion and bypassing security controls like Protected Processes (PP), Process Protection Light (PPL), Digital Signature Enforcement (DSE), Attack Surface Reduction (ASR) rules and incapacitating Event Tracing for Windows (ETW) telemetry and a lot more . - Syllabus Topics: * Windows Internals * EDR Internals * Static Detection Bypass * Initial Access Techniques * Introduction to Windows Kernel Programming * Road to Kernel * EDR Killing * Attack on EDR’s Kernel Callbacks * Attack on ETW * PP & PPL Bypass * Extra Offensive Rootkit Techniques * C2 Traffic Tunneling * Block EDR’s Traffic * ASR rules Bypass * Attack on Sysmon * UAC Bypass * Anti-Analysis --- ### 56. David Bambol – Cumulus Linux Fundamentals, plus Ansible automation - URL: https://cyberlabarchive.com/courses/cumulus-linux-fundamentals-plus-ansible-automation - Category: Other Institutions - Downloadable Files: 1 (1.8 GB) - Formats: ZIP - Description: The course includes hands on demonstrations using both Cumulus VX and physical switches. The best part is you can practice using GNS3 and Cumulus VX locally on your laptop. Cumulus Linux combines the power of Open Networking with a network operating system that runs on top of industry standard networking hardware from vendors such as Dell, HP, Quanta and others. Founded by veteran networking engineers from Cisco and VMware, Cumulus Networks makes the first Linux operating system for networking hardware and fills a critical gap in realizing the true promise of the software-defined data center. Just as Linux completely transformed the economics and innovation on the server side of the data center, Cumulus Linux is doing the same for the network. It is radically reducing the costs and complexities of operating modern data center networks for service providers and businesses of all sizes. - Syllabus Topics: * Cumulus Linux Introduction * Cumulus Linux Architecture * Cumulus VX and GNS3 * Initial Setup * Layer 2 Features * Troubleshooting * Automation using DevOps Tools (Ansible) * Image Management * All Lab Demos --- ### 57. Rana Khalil – Web Security Academy Series - URL: https://cyberlabarchive.com/courses/rana-khalil-web-security-academy-series - Category: Other Institutions - Downloadable Files: 1 (12.2 GB) - Formats: ZIP - Description: Learn how to hack web applications, automate your exploits in python and defend web applications against real world attacks! For each vulnerability type, we dive into the technical details and then gain hands-on experience by solving labs that model real-world vulnerabilities. - Syllabus Topics: * Introduction * Getting Help * Lab Environment Setup * SQL Injection * Authentication Vulnerabilities * Directory Traversal * OS Command Injection * Business Logic Vulnerabilities * Information Disclosure * Access Control Vulnerabilities * File Upload Vulnerabilities * Server-Side Request Forgery (SSRF) * XXE Injection * Cross-Site Scripting (XSS) * Cross-Site Request Forgery (CSRF) * Cross-origin Resource Sharing (CORS) * Clickjacking * DOM-based Vulnerabilities * WebSockets Vulnerabilities * JWT Attacks * HTTP Host Header Attacks * OAuth 2.0 Vulnerabilities --- ### 58. Oreilly – RHCSA (RHEL 9) Complete Course with Exam Labs - URL: https://cyberlabarchive.com/courses/oreilly-rhcsa-rhel9-complete-course-with-exam-labs - Category: Other Institutions - Downloadable Files: 1 (28.4 GB) - Formats: ZIP - Description: Red Hat Certified System Administrator (RHCSA) RHEL 9 Complete Video Course is your complete study toolkit to get exam ready for the RHCSA RHEL 9 exam. This course is also a great resource for anyone who wants to enhance their Linux skills to grow their career. Expert trainer and author Sander van Vugt provides topic-focused coverage of all objectives in the exam, drilling down on important concepts like Bash Shell, storage, containers, and advanced system administration tasks. You will also get real-world labs in each lesson so you can practice your skills; along with video solutions so you can assess your progress as you move through the course. The course ends with a practice exam so you can fully prepare for the test day. - Syllabus Topics: * Getting Started with Red Hat * Getting Started with Basic Tasks * Performing Basic System Management Tasks * Performing Daily Administration Tasks * Managing Storage * Performing Advanced System Administration Tasks * Managing and Securing Network Services * RHCSA Exam Information * RHCSA Exam Tasks * RHCSA Practice Exam --- ### 59. Grzegorz Tworek – Mastering Windows Forensics - URL: https://cyberlabarchive.com/courses/grzegorz-tworek-mastering-windows-forensics - Category: Other Institutions - Downloadable Files: 1 (1.1 GB) - Formats: ZIP - Description: Mastering Windows Forensics empowers cybersecurity professionals and digital investigators to uncover compelling evidence on Windows systems. Curated by Grzegorz Tworek, this course delivers targeted instruction on interpreting attack vectors, enhancing forensic analysis, and strengthening endpoint defenses—making it ideal for learners eager to go beyond surface-level insights and take their forensic skills to the next level. - Syllabus Topics: * Windows Search Artifacts * NTFS Structures * Disk Imaging * Memory Dumps * Windows Prefetch * Hardware-Related Artifacts * The Recycle Bin * Log Analysis * Windows Logging * Internet Browser Artifacts * SRUM Database * Identifying Suspicious Files and Settings * Active Directory and Its Database * Windows Registry Analysis * User Profile Analysis * Managing Digital Forensics & Incident Response * Online vs Offline Analysis * Case Studies and Real-world Scenarios --- ### 60. Udemy – Solo Purple Teaming - URL: https://cyberlabarchive.com/courses/udemy-solo-purple-teaming - Category: Other Institutions - Downloadable Files: 1 (14.5 GB) - Formats: ZIP - Description: In cybersecurity, most training only scratches the surface—teaching which buttons to press, but not why , when , or how to adapt when the situation changes. This leaves a critical gap between basic tool familiarity and the deep operational mastery required for real-world engagements. Solo Purple Teaming closes that gap. It trains you to think and operate as both an attacker and a defender, where your limits aren’t dictated by step-by-step lab manuals, but by your creativity, problem-solving skills, and willingness to push beyond your comfort zone and explore new tactics. - Syllabus Topics: * Introduction * Red Team Layout For Level 0 * Lab Setup For Level 0 * Red Team Engage For Level 0 * Lab Setup For Blue Team Activities * Detection Engineering 101 * Blue Team Explore For Level 0 * Blue Team Trace For Level 0 * Red Team Re-Engage For Level 0 * Red Team Layout For Level One – Bypassing New Level 0 Detections * Attack Path Level 1 Lab Setup * Red Team Engage For Level 1 * Blue Team Explore For Level 1 – Analyze Detection Bypasses * Blue Team Trace For Level 1 – Build Detections for Bypasses * Final Thoughts --- ### 61. Udemy – Learn SIP through Kamailio - URL: https://cyberlabarchive.com/courses/learn-sip-through-kamailio - Category: Other Institutions - Downloadable Files: 1 (5.7 GB) - Formats: ZIP - Description: Throughout this hands-on learning experience, you’ll delve into the core principles of SIP, building a robust foundation for SIP and VoIP development. Kamailio, renowned for its versatility as a SIP proxy, will be our guiding tool as we navigate through the intricacies of SIP traffic management. From configuring Kamailio to seamlessly handle SIP requests to integrating RTP Engine for optimal media stream handling, you’ll acquire practical skills essential for modern VoIP infrastructure. - Syllabus Topics: * Introduction * Kamailio * SIP Foundations * Setup and Installation * Exploring Kamailio * First Refactor * Reviewing Buisness Requirements * Building the Proxy * SIP Knowledge – Record route and VIA headers * RTP Engine Configuration * Call Detail Records (CDRs) * Setting up TLS * Topology Hiding * Registrations * Limiting Codecs * Protecting your environment with the Pike module * Using Kamailio as a SIP Load Balancer * Using SRTP to Secure Media * Routing calls with ENUM --- ### 62. Udemy – The Complete Hands-On Cybersecurity Analyst Course - URL: https://cyberlabarchive.com/courses/udemy-the-complete-hands-on-cybersecurity-analyst-course - Category: Other Institutions - Downloadable Files: 1 (65.2 GB) - Formats: ZIP - Description: Are you ready to level up and gain hands on experience in cybersecurity?  Introducing The Complete Cybersecurity Analyst Course — your one-stop solution for mastering the skills and gain hands on experience you need to excel in the cybersecurity field. - Syllabus Topics: * Welcome * Networking 101 * Introduction to Home Virtual Labs * Quick Start Lab Option * Basic Lab Option V2 * Basics Refresher * Intermediate Lab Option Version 2 * Advanced Lab Option * Bonus Lab Content * Apple Silicon Lab Options * Installing pfSense on VMWare Workststation * Ultimate Cyber Security Primer * Password Cracking * Email and Phishing Analysis * Introduction to Windows Forensics * SIEMs * Bad USB Attacks * Incident Response Exercises * Honey Pots * Threat Hunting * Reverse Engineering * Web Application Pentesting * Vulnerability Scanning * C2 Frameworks * Mr. Robot Exercise * WiFi Pentesting * Cyber Threat Intelligence * Security Fundamentals (CompTIA Security+ Objectives) * Network Traffic Analysis * Malware Analysis for SOC Analysts * Purple Teaming * Archived Basic Lab Option * Archived Intermediate Lab Option v1 --- ### 63. Sektor7 – RED TEAM Operator: Malware Development Advanced – Vol.2 - URL: https://cyberlabarchive.com/courses/red-team-operator-malware-development-advanced-vol-2 - Category: Sektor7 - Downloadable Files: 1 (19.1 GB) - Formats: ZIP - Description: The RED TEAM Operator: Malware Development Advanced – Vol. 2 is an in-depth, hands-on course focused on advanced Windows kernel malware development techniques, expanding on the concepts from Vol. 1. Over 42 video lessons, learners explore topics such as direct kernel object manipulation (DKOM), privilege escalation via token manipulation, kernel-level process protection, ETW tampering, and removing kernel callbacks, as well as identifying and bypassing vulnerable driver blocklists. The program includes a ready-to-use VM image, complete source code templates, transcripts, and supplementary materials, all accessible for 365 days. Designed for skilled C/C++ programmers with solid Windows and OS architecture knowledge, this course is ideal for ethical hackers, red and blue team professionals, and security researchers aiming to master advanced offensive techniques at the kernel level. - Syllabus Topics: * Intro and Setup * Entering Kernel * Kernel Objects * Kernel Telemetry * Physical Memory * Operationalization * Assignments * Summary --- ### 64. EC Council – Computer Hacking Forensic Investigator (CHFI v11) - URL: https://cyberlabarchive.com/courses/certified-hacking-forensic-investigator-chfi-v11 - Category: EC-Council - Downloadable Files: 2 (29.8 GB) - Formats: ZIP - Description: EC-Council’s CHFI program prepares cybersecurity professionals with the knowledge and skills to perform effective digital forensics investigations and bring their organization into a state of forensic readiness. This includes establishing the forensics process, lab and evidence handling procedures, as well as the investigation procedures required to validate/triage incidents and point the incident response teams in the right direction. Forensic readiness is crucial as it can differentiate between a minor incident and a major cyber-attack that brings a company to its knees. This intense hands-on digital forensics program immerses students in over 68 forensic labs, enabling them to work on crafted evidence files and utilize the tools employed by the world’s top digital forensics professionals. Students will go beyond traditional hardware and memory forensics and learn current topics such as cloud forensics, mobile and IoT, investigating web application attacks, and malware forensics. C|HFI presents a methodological approach to computer forensics, including searching and seizing, chain-of-custody, acquisition, preservation, analysis, and reporting of digital evidence. - Syllabus Topics: * Computer Forensics in Today’s World * Computer Forensics Investigation Process * Understanding Hard Disks and File Systems * Data Acquisition and Duplication * Defeating Anti-Forensics Techniques * Windows Forensics * Linux and Mac Forensics * Network Forensics * Malware Forensics * Investigating Web Attacks * Dark Web Forensics * Cloud Forensics * Email and Social Media Forensics * Mobile Forensics * IoT Forensics --- ### 65. Maltrak – Malware Analysis Training – Real Scenarios - URL: https://cyberlabarchive.com/courses/maltrak-malware-analysis-training-real-scenarios - Category: Maltrak - Downloadable Files: 1 (669 MB) - Formats: ZIP - Description: This is an intensive live training designed for cybersecurity professionals to master malware analysis, memory forensics, and enterprise-scale incident response. The curriculum uses real-world attack samples, including ransomware and APT toolkits, within risk‑free environments. - Syllabus Topics: * Emotet * Wannacry * NotPetya --- ### 66. Maltrak – IT Fundamentals: Linux Fundamentals - URL: https://cyberlabarchive.com/courses/maltrak-it-fundamentals-linux-fundamentals - Category: Maltrak - Downloadable Files: 1 (558 MB) - Formats: ZIP - Description: This course is an on‑demand, self‑paced training offering foundational skills in Linux system navigation and administration. Tailored for aspiring IT professionals and cybersecurity learners, it equips you with essential command-line proficiency and system management capabilities. - Syllabus Topics: * Introduction and Setting up Your Linux Virtual Machine * Linux Basic Commands * Package Managers and Extracting Archives * Basic Networking: Downloading Using Curl and Wget * Services: Listing, Starting, Stopping, Restarting, Getting Status of Services --- ### 67. MalTrak – Basic Digital Forensics - URL: https://cyberlabarchive.com/courses/maltrak-digital-forensics-basics - Category: Maltrak - Downloadable Files: 1 (1.5 GB) - Formats: ZIP - Description: A foundational training program focused on the core principles and practical skills of digital forensics – geared toward those entering the field or strengthening basic investigative capabilities. - Syllabus Topics: * Basic Digital Forensics Part 1 * Basic Digital Forensics Part 2 --- ### 68. Cybr – The Practical Guide to sqlmap for SQL Injection - URL: https://cyberlabarchive.com/courses/cybr-the-practical-guide-to-sqlmap-for-sql-injection - Category: Cybr - Downloadable Files: 1 (2.6 GB) - Formats: ZIP - Description: Learn how to use sqlmap in-depth for professional engagements like pentests or bug bounties. sqlmap is the most powerful and widely used SQL injection tool, and for good reason. It packs an impressive array of features and options specifically crafted to fingerprint, enumerate, and takeover databases as well as underlying systems. In this course, we take a look at all of that. We start by looking at the sqlmap project, including how the source code repository is structured, where to find important files such as configuration and payload files, and how to set up a home lab environment to safely and legally practice what we’re learning. Then, we explore every single option that sqlmap offers with examples and explanations of how and when to use the option(s). We learn tips & tricks to see what sqlmap is doing under the hood and to troubleshoot when we come across issues. Once we’ve covered sqlmap’s options and features, we tie it all together by running through scenarios. This is when we get to see how those options can be used together or on their own to achieve our pentest or bug bounty objectives. The course also includes sections dedicated to specific topics such as bypassing WAFs and evading security controls, and how to run sqlmap as an API. - Syllabus Topics: * About the Course * Setting up our lab environment * sqlmap Overview * sqlmap Options Deep Dive * Main Options * Requests Options * Optimizations Options * Injections Options * Detection Options * Techniques Options * Fingerprinting Options * Enumeration Options * Brute Force Options * UDF Options * File, OS, and Windows registry access * General & Miscellaneous * sqlmap in action * Bypassing WAFs * Running sqlmap as an API * Conclusion --- ### 69. Cybr – Terraform on AWS: From Zero to Cloud Infrastructure - URL: https://cyberlabarchive.com/courses/cybr-terraform-on-aws-from-zero-to-cloud-infrastructure - Category: Cybr - Downloadable Files: 1 (2.1 GB) - Formats: ZIP - Description: In this hands-on course, you’ll learn how to use Terraform to securely deploy resources on AWS using Infrastructure as Code (IaC). Guided by instructors with experience running Terraform in production, we’ll take you step-by-step from zero prior Terraform knowledge to confidently writing infrastructure as code and deploying production-ready AWS resources securely. - Syllabus Topics: * Introduction * Getting Started * Infrastructure as Code (IaC) * Project – Building a Network and Deploying AWS Systems Manager (SSM) * IaC Security Best Practices * Conclusion --- ### 70. Cybr – Securing Amazon S3 Data - URL: https://cyberlabarchive.com/courses/cybr-securing-amazon-s3-data - Category: Cybr - Downloadable Files: 1 (1.1 GB) - Formats: ZIP - Description: Learn what Amazon S3 is, how it works, and how to protect your data. This course will show you how to create and configure buckets, upload and access objects, avoid common security misconfigurations (some of which have resulted in massive breaches), and how to run regular automated scans with open source tools to discover issues. You’ll also learn to think like an attacker to find weaknesses that could potentially be exploited. The course was designed to provide a heavy dose of hands-on, practical learning with a mixture of taking action through the console, CLI, and roles. - Syllabus Topics: * Introduction to Amazon S3 * Amazon S3 Basics * S3 Security Scenarios * S3 Security Assessments * S3 Pentesting & Red Teaming Activities * S3 Infrastructure as Code (IaC) * S3 Automated Remediation --- ### 71. Cybr – Practical Guide to AWS IAM Roles - URL: https://cyberlabarchive.com/courses/cybr-practical-guide-to-aws-iam-roles - Category: Cybr - Downloadable Files: 1 (851 MB) - Formats: ZIP - Description: Learn how to use IAM Roles like the pros. This course answers questions like: What are IAM roles and how are they different from users? When should you use roles, and how? What are differences between trust policies, managed policies, and inline policies? What’s an effective way to assume roles? How does role chaining work? How does cross-account access work? What is IAM Roles Anywhere and how does it work? What are service-linked roles, and how are they different from service roles? What are security implications of using roles? - Syllabus Topics: * Getting started * What are IAM Roles? * Creating and using IAM Roles * Practical role uses * Wrapping up --- ### 72. Cybr – Pentesting AWS Environments with Pacu, CloudGoat, and ChatGPT - URL: https://cyberlabarchive.com/courses/cybr-pentesting-aws-environments-with-pacu-cloudgoat-and-chatgpt - Category: Cybr - Downloadable Files: 1 (1.3 GB) - Formats: ZIP - Description: Learn hands-on how to exploit AWS cloud misconfigurations and build practical skills with step-by-step walkthroughs, labs, and CTFs. CloudGoat enables you to deploy vulnerable-by-design AWS scenarios in your own environments, although we will be providing a couple of those scenarios as 1-click deploy Cybr Hands-On Labs if you would rather not use your own environments. Not all of the scenarios will be available with our labs due to how vulnerable they are. - Syllabus Topics: * Introduction * Setting up our lab environment * Getting started with Pacu * IAM Privilege Escalation by Misconfiguration (Small / Easy) * Vulnerable Lambda (Small / Easy) * IAM Privilege Escalation by Rollback (Small / Easy) * Cloud Breach via S3 (Small / Moderate) * IMDSv2 Compromise (SMALL / MODERATE) * ECS Takeover (Medium / Moderate) * Wrap-up and Key Takeaways --- ### 73. Cybr – Getting Started with Microsoft Defender for Cloud - URL: https://cyberlabarchive.com/courses/cybr-getting-started-with-microsoft-defender-for-cloud - Category: Cybr - Downloadable Files: 1 (400 MB) - Formats: ZIP - Description: This course covers Microsoft Defender for Cloud, a cloud-native application protection platform (CNAPP) that provides security posture management and workload protection for Azure, AWS, GCP, and on-premises environments. You’ll learn to configure security policies, implement compliance frameworks like NIST 800-53, protect various workloads including VMs, containers, and storage accounts, and automate incident response using Logic Apps and workflow automation. - Syllabus Topics: * Introduction * Setup and Configuration * Identity and Access Management * Securing Core Services * Threat Detection and Response * Next Steps --- ### 74. Cybr – DevSecOps Fundamentals - URL: https://cyberlabarchive.com/courses/cybr-devsecops-fundamentals - Category: Cybr - Downloadable Files: 1 (4 MB) - Formats: PDF - Description: Learn the fundamentals of DevSecOps to understand what it means, why it matters, and how to implement it within your organization. With DevSecOps, one size doesn’t fit all, and it’s not just a matter of implementing a handful of tools or concepts. It’s about understanding what makes sense for your use case and requirements, and what approaches are most relevant. It’s also about understanding how to go from zero to the first few steps of implementation, and how to track progress along the way. Regardless of whether you’re starting from scratch with a brand new application, or whether you’re dealing with a mature product and organization, that’s what this course focuses on helping you achieve. - Syllabus Topics: * Introduction * Planning * Code * Build * Test * Release & Deliver * Deploy * Operate & Monitor * Final Steps --- ### 75. Cybr – Networking Fundamentals - URL: https://cyberlabarchive.com/courses/cybr-networking-fundamentals - Category: Cybr - Downloadable Files: 1 (563 MB) - Formats: ZIP - Description: Networking is easily one of the most commonly recommended topics to learn for anyone interested in being in an IT career, and so it’s arguably one of the most important skills to build when starting out. Regardless of what job you end up choosing, having at least a foundational understanding of how data travels all around us is very beneficial. So in this course, we’re going to learn just that starting with how data travels using physical connections. But physical connections alone aren’t enough to make the internet work. - Syllabus Topics: * Introduction * Let’s talk OSI and TCP/IP * Layer 1 – Physical Layer * Layer 2 – Data Link Layer * Layer 3 – Network Layer * Layer 4 – Transport Layer * Layers 5, 6, and 7 * Conclusion --- ### 76. Cybr – Introduction to AWS Security - URL: https://cyberlabarchive.com/courses/cybr-introduction-to-aws-security - Category: Cybr - Downloadable Files: 1 (9.6 GB) - Formats: ZIP - Description: Learn how to secure your cloud infrastructure with one of our best-selling courses: Introduction to AWS Security. Designed for AWS security beginners (but not complete beginners to AWS), this training course provides you with the essential knowledge and skills to protect your AWS environments and resources from all sorts of threats. - Syllabus Topics: * Introduction * Infrastructure Security * Identity and Access Management (IAM) * Data Protection * Amazon S3 Bucket Protection * Logging, Monitoring, and Incident Response * Multi-Account Security * Infrastructure as Code (IaC) * Wrap-up and Key Takeaways --- ### 77. Cybr – Incident Response with CloudTrail and Athena - URL: https://cyberlabarchive.com/courses/cybr-incident-response-with-cloudtrail-and-athena - Category: Cybr - Downloadable Files: 1 (2.3 GB) - Formats: ZIP - Description: Learn how to effectively respond to incidents in your AWS accounts regardless of whether you are running a single or multi-account setup using CloudTrail Lake and Athena — two native AWS services. This Incident Response (IR) course simulates attacks against your AWS environments that have been seen in the real-world. After simulating attacks, you’ll put on your security analyst hat to respond to the incident. - Syllabus Topics: * Introduction * Preparing your AWS account * Incident Response with CloudTrail Lake * Incident Response with Athena * Incident Response for multi-account * Conclusion --- ### 78. Cybr – Container Security with Kubernetes & GitLab CI/CD - URL: https://cyberlabarchive.com/courses/cybr-container-security-with-kubernetes-gitlab-ci-cd - Category: Cybr - Downloadable Files: 1 (1.9 GB) - Formats: ZIP - Description: In this hands-on course, learn how to use Kubernetes with GitLab CI/CD, and learn key concepts of container security. - Syllabus Topics: * Introduction * Container Security Overview * Kubernetes Fundamentals * GitLab + Kubernetes Security * Securing Container Images * Securing Kubernetes Microservices * Monitoring and Logging for Security * Compliance and Governance * Supply Chain Security --- ### 79. Cybr – Cross-Site Scripting (XSS): The Practical Guide - URL: https://cyberlabarchive.com/courses/cybr-cross-site-scripting-xss-the-practical-guide - Category: Cybr - Downloadable Files: 1 (1.6 GB) - Formats: ZIP - Description: In this course, you will develop the skills you need to successfully perform and combat Cross-Site Scripting (XSS) attacks. XSS is one of the top 10 most dangerous and common web application attacks according to both OWASP and CWE. I’ve spent months creating and collecting the best resources on XSS to put them in this course so that you can learn Cross-Site Scripting in a fun, efficient, and practical manner. - Syllabus Topics: * Getting Started * What is Cross-Site Scripting (XSS)? * Creating our lab environment * Reflected XSS * Stored (Persistent) XSS * DOM-based XSS * postMessage XSS * Blind XSS * Using BeEF * Attacking a web application (OWASP Juice Shop) * Defending against XSS * Conclusion and additional resources --- ### 80. Study Notes and Theory – CISSP - URL: https://cyberlabarchive.com/courses/study-notes-and-theory-cissp - Category: Other Institutions - Downloadable Files: 1 (10.7 GB) - Formats: ZIP - Description: This course is designed to help students pass the CISSP exam by focusing on understanding concepts—not memorization. Taught by Luke Ahmed, a seasoned CISSP and cybersecurity professional, the course goes deep into all 8 CISSP domains with real-world examples, scenario-based explanations, and over 60 hours of engaging video content. - Syllabus Topics: * Security and Risk Management * Asset Security * Security Architecture and Engineering * Communication and Network Security * Identity and Access Management (IAM) * Security Assessment and Testing * Security Operations * Software Development Security --- ### 81. The Cyber Institute – CaseFile - URL: https://cyberlabarchive.com/courses/the-cyber-institute-casefile - Category: Other Institutions - Downloadable Files: 1 (239 MB) - Formats: ZIP - Description: We often see in police movies, detectives glaring at a pin or white board with pictures of suspects, crime scenes, evidence,  attempting to link various pieces of information together, give them relevance, context for the purpose of analysis. This is a short course for using the Maltego’s free CaseFile tool to analyse information and evidence for investigation, intelligence or research purposes. --- ### 82. The Cyber Institute – Las Vegas Challenge - URL: https://cyberlabarchive.com/courses/the-cyber-institute-las-vegas-challenge - Category: Other Institutions - Downloadable Files: 1 (1 GB) - Formats: 7Z - Description: The Las Vegas challenge is not a game nor is it a training course.  Its purpose is to provide the serious OSINT practitioner or online investigator, the opportunity to benchmark their skills against real world scenarios. Your investigation and/or intelligence skills should ideally be at an intermediate to advanced level.  Even if you are still starting out, give it a go anyway as this could well prepare you for what is to come and provide you a guide as to future skill development. The challenge will take you through the streets of Las Vegas and it will be required to geolocate items ranging from images to social media posts, identify people, trace email addresses and telephone numbers, locate vehicles, find cameras and much more. --- ### 83. Thinkfic – (Security Operation Centre) SOC Essentials - URL: https://cyberlabarchive.com/courses/thinkfic-soc-essentials - Category: Other Institutions - Downloadable Files: 1 (146 MB) - Formats: ZIP - Description: This course is a non‑technical foundational aimed at individuals interested in starting a cybersecurity career, especially in a Security Operations Center (SOC). It’s designed for people without IT or computer science backgrounds, breaking down key SOC concepts into simple, understandable modules. - Syllabus Topics: * SOC Essentials --- ### 84. SimpleCyber – GRC Jumpstart: GRC Foundations in Modern Cybersecurity - URL: https://cyberlabarchive.com/courses/simplecyber-grc-foundations-in-modern-cybersecurity - Category: Other Institutions - Downloadable Files: 1 (1 GB) - Formats: ZIP - Description: Discover if GRC is your career path forward. This mini-course demystifies Governance, Risk, and Compliance fundamentals through 5 concise modules. Learn core concepts, essential skills, and career opportunities. Perfect for IT professionals exploring cybersecurity’s business side. Take this course to decide if GRC is right for you. - Syllabus Topics: * GRC Foundations in Modern Cybersecurity --- ### 85. TCM Security – Advanced Web Hacking - URL: https://cyberlabarchive.com/courses/tcm-security-advanced-web-hacking - Category: TCM Security - Downloadable Files: 1 (2.7 GB) - Formats: ZIP - Description: Advanced Web Hacking is designed to take your web penetration testing skills to the next level. This course dives deep into advanced topics, exploring edge-case vulnerabilities, sophisticated attacks, and complex scenarios faced in modern web applications. Each module will offer in-depth exploration through code review, debugging, and hands-on labs. - Syllabus Topics: * Prototype Pollution * Attacking GraphQL * Out-of-Band Attacks * Getting Started with Code Review * Frontend JavaScript Analysis * Understand and Attack OAuth 2.0 * Web Cache Poisoning --- ### 86. SimpleCyber – The Definitive GRC Analyst Master Class - URL: https://cyberlabarchive.com/courses/the-definitive-grc-analyst-program - Category: Other Institutions - Downloadable Files: 1 (3.5 GB) - Formats: ZIP - Description: Become a top-tier GRC Analyst candidate with practical skills from an industry expert. This master class covers compliance, risk assessment, governance policies, and job hunting strategies with hands-on labs and resume bullets. Addresses the major training gap in GRC skills that employers desperately need. - Syllabus Topics: * A Cybersecurity Primer * Compliance and Audit Work * Security Awareness Work * Cybersecurity Risk Work * Information Security Governance Work * Getting a GRC Analyst Job * Course Conclusion --- ### 87. EC-Council – Certified DevSecOps Engineer (ECDE) - URL: https://cyberlabarchive.com/courses/certified-devsecops-engineer-ecde - Category: EC-Council - Downloadable Files: 1 (1.2 GB) - Formats: ZIP - Description: Certified DevSecOps Engineer (ECDE) provides a security-first approach to software development, covering every phase of the lifecycle. It serves as a gateway to acquiring essential skills for building secure and resilient applications from the ground up. - Syllabus Topics: * Understanding DevOps Culture * Introduction to DevSecOps * DevSecOps Pipeline – Plan Stage * DevSecOps Pipeline – Code Stage * DevSecOps Pipeline – Build and Test Stage * DevSecOps Pipeline – Release and Deploy Stage * DevSecOps Pipeline – Operate and Monitor Stage --- ### 88. Book Blu Raven Academy | Hands-On KQL for Security Analysts - URL: https://cyberlabarchive.com/courses/bluraven-hands-on-kql-for-security-analysts - Category: Books - Downloadable Files: 1 (135 MB) - Formats: PDF - Description: Elevate your security analysis skills with the Kusto Query Language (KQL) training course, offering hands-on experience in a hyper-realistic lab environment! Whether you’re a security analyst or incident responder utilizing Microsoft Sentinel, Defender for Endpoint, or Microsoft 365 Defender XDR, or simply aspiring to master the KQL for security analysis, this course is for you! - Syllabus Topics: * Introduction to Databases and Logging * KQL Fundamentals and Exploring Data * Searching and Filtering Data * Creating and Manipulating Fields * Combining Data Sets * Joining Datasets * Using External Threat Intel Feeds * Time Traveling within the Logs * Aggregating Data * Visualizing Data * Time Series Analysis * Rapid Triage and Investigation Using KQL * Capstone: Incident Response and Threat Hunting * Course Wrap-Up --- ### 89. Destination Certification – CISSP - URL: https://cyberlabarchive.com/courses/destination-certification-cissp - Category: Other Institutions - Downloadable Files: 2 (45.3 GB) - Formats: ZIP - Description: The CISSP MasterClass is a dynamic, self-paced certification program designed to adapt to you . Whether you’re just starting or sharpening your expertise, the course intelligently focuses on your knowledge gaps, helping you study smarter—not harder. Developed by industry experts Rob and John, this course blends deep technical insight with strategic learning tools, guiding you toward CISSP mastery with clarity and confidence. - Syllabus Topics: * Security and Risk Management * Asset Security * Security Architecture and Engineering * Communication and Network Security * Identity and Access Management (IAM) * Security Assessment and Testing * Security Operations * Software Development Security * Exam Strategy & Practice Test --- ### 90. Certified Exploit Development Professional [CEDP] - URL: https://cyberlabarchive.com/courses/certified-exploit-development-professional-cedp - Category: Cyberwarfare - Downloadable Files: 1 (15.1 GB) - Formats: ZIP - Description: The Certified Exploit Development Professional (CEDP) course provides a comprehensive introduction to the world of exploit development. It’s designed to build a strong foundation from the ground up, focusing on stack-based vulnerabilities in both Linux and Windows environments. The course combines theoretical knowledge with practical, hands-on labs to ensure you can find and exploit vulnerabilities effectively. - Syllabus Topics: * Linux Exploit Development * Win32 Exploit Development --- ### 91. Udemy – Malware Development in Go: Bypassing Windows Defender - URL: https://cyberlabarchive.com/courses/udemy-malware-development-in-go-bypassing-windows-defender - Category: Other Institutions - Downloadable Files: 1 (1.1 GB) - Formats: ZIP - Description: This course is designed to provide a comprehensive foundation for anyone interested in learning malware development. The primary objective is clear yet impactful: bypassing Windows Defender by creating a fully functional shellcode loader using the Go programming language. By the end of this course, you will have the essential knowledge and skills to build on, setting the stage for further exploration into offensive security and advanced malware techniques. We begin by exploring the Windows API, a critical toolkit for low-level interaction with the Windows operating system. You’ll learn how to use these APIs to execute shellcode, allocate memory, and create loaders. Each step is broken down into practical, hands-on lessons that demonstrate how simple Go code can evolve into a powerful executable capable of manipulating and navigating the Windows environment. - Syllabus Topics: * Introduction * The Windows API * Introduction to Loaders and Shellcode * Preparing the shellcode * Allocating Memory * Copying Shellcode to Allocated Memory * Triggering the thread * Putting the Pieces together * Conclusion --- ### 92. Fuzzing Labs – Rust Security Audit & Fuzzing - URL: https://cyberlabarchive.com/courses/fuzzing-labs-rust-security-training - Category: Other Institutions - Downloadable Files: 1 (7.3 GB) - Formats: ZIP - Description: hands-on training covers advanced Rust security techniques, including auditing, fuzzing, and crash triaging. Master tools like cargo-fuzz and AFL to secure Rust applications and stay ahead in vulnerability research. --- ### 93. Udemy – OWASP Top 10 for LLM Applications (2025) - URL: https://cyberlabarchive.com/courses/udemy-owasp-top-10-for-llm-applications-2025 - Category: Other Institutions - Downloadable Files: 1 (3.9 GB) - Formats: ZIP - Description: Large Language Models (LLMs) like GPT-4, Claude, Mistral, and open-source alternatives are transforming the way we build applications. They’re powering chatbots, copilots, retrieval systems, autonomous agents, and enterprise search — quickly becoming central to everything from productivity tools to customer-facing platforms. But with that innovation comes a new generation of risks — subtle, high-impact vulnerabilities that don’t exist in traditional software architectures. We’re entering a world where inputs look like language, exploits hide inside documents, and attackers don’t need code access to compromise your system. - Syllabus Topics: * Introduction to LLM Application Security * Prompt Injection * Sensitive Information Disclosure * Supply Chain * Data and Model Poisoning * Improper Output Handling * Excessive Agency * System Prompt Leakage * Vector and Embedding Weaknesses * Misinformation * Unbounded Consumption * Best Practices and Future Trends in LLM Security --- ### 94. Trainsec – SOC Analyst Professional – Foundations - URL: https://cyberlabarchive.com/courses/trainsec-soc-analyst-professional-level-1 - Category: Other Institutions - Downloadable Files: 1 (1.4 GB) - Formats: ZIP - Description: TrainSec’s SOC Analyst Foundations course provides a hands-on introduction to cybersecurity fundamentals. Students learn computer hardware basics, networking protocols, Linux essentials, packet sniffing, virtualization setup, Windows server deployment, and Active Directory management—developing the technical skills required for effective cybersecurity operations and incident response. - Syllabus Topics: * Computer Fundamentals * Networking Fundamentals * Packet Sniffing & Analysis * Introduction to Virtualization * Windows & Active Directory * Linux Essentials --- ### 95. Udemy – Advance Live Bug Bounty And Ethical Hacking (2025) - URL: https://cyberlabarchive.com/courses/udemy-advance-live-bug-bounty-and-ethical-hacking-2025 - Category: Other Institutions - Downloadable Files: 1 (6.5 GB) - Formats: ZIP - Description: Advance Live Bug Bounty And Ethical Hacking (2025) is your ultimate destination to master real-world ethical hacking and live bug bounty skills. Designed for beginners, intermediates, and experienced hackers, this course offers live hacking sessions, real-world simulations, and step-by-step techniques used by top security researchers in 2025. - Syllabus Topics: * Find and hunt the target * Finding Issue Across the target * Reporting issues and digging more deeper * How targets should not behave * try and test * Highly secure target * Found BAC issues * Very difficult bounty target and early recon * The ultimate hunt begins * Got 3 bugs * Final Showdown --- ### 96. Udemy – Malware Development for Ethical Hackers & Pentesters - URL: https://cyberlabarchive.com/courses/udemy-malware-development-for-ethical-hackers-pentesters - Category: Other Institutions - Downloadable Files: 1 (24 GB) - Formats: ZIP - Description: Malware Development for Ethical Hackers & Pentesters is designed for cybersecurity professionals aiming to deepen their understanding of malware creation and analysis within ethical boundaries. It provides hands-on experience in developing and dissecting malware to enhance penetration testing and red teaming skills. - Syllabus Topics: * Introduction * Lab setup * Building the foundation * Windows API programming basics – Handles in Windows * Windows API programming basics: Creating, Manipulating Processes in windows * Thread basics in windows API programming * Malware injection attacks in windows operating system * Malware persistence * Privilege escalations – Token stealing in Windows * Privilege escalation – Password stealing from lsass process in windows * Privilege Escalation – UAC bypass in windows * Malware Evasion- Detecting Debuggers * Malware Evasion – Detecting debuggers breakpoints * Malware Evasion – Detecting debuggers using PEB structure in memory * Malware Evasion – Detecting debuggers using NTDLL function * Malware Evasion – Detecting Virtual Machines using files based checking * Malware Evasion – Detecting Virtual Machine by checking hardware info in windows * Malware Antivirus Bypassing Techniques in Windows --- ### 97. Udemy – Offensive API Exploitation - URL: https://cyberlabarchive.com/courses/udemy-offensive-api-exploitation - Category: Other Institutions - Downloadable Files: 1 (4.3 GB) - Formats: ZIP - Description: Offensive API Exploitation course by Vikash Chaudhary is an advanced, hands-on training program designed for cybersecurity professionals aiming to master the art of attacking and securing APIs. Master API Hacking with Real-World Exploits: BOLA, SSRF, Auth Bypass & API Bug Bounty Techniques - Syllabus Topics: * Course Introduction * Lab Setup & Postman Document Sharing * Using Postman tool for API Security Testing * Preparing for API Pentest * OWASP API TOP 10 * SQL Injection * Command Injection * Offensive XXE Exploitation * Server Side Request Forgery * Cross Site Scripting * Transport Layer Security Issues * Mass Assignment Attack * Broken Object Level Authorization issues * File Path Traversal * User Enumeration * Information Disclosure * JSON Web Token * Unauthorized Password Change * Excessive Data Exposure * Lack of Resource & Rate Limiting * Regular Expression DOS Attack * BFLA Issues * Billion Laugh Attack * Hidden API Functionality Exposure * RCE Via Deserialization in API --- ### 98. Udemy – Generative AI for Cybersecurity Experts - URL: https://cyberlabarchive.com/courses/generative-ai-for-cybersecurity-experts - Category: Other Institutions - Downloadable Files: 1 (874 MB) - Formats: ZIP - Description: Generative AI for Cybersecurity Experts is tailored for cybersecurity professionals aiming to integrate generative AI technologies into their security practices. It offers a comprehensive overview of how tools like large language models (LLMs) and diffusion models can be applied to enhance threat detection, prevention, and response strategies. - Syllabus Topics: * Introduction to Generative AI for Cybersecurity * Threat Intelligence Generation Using GenAI * Prompt Engineering for Cybersecurity Tasks * GenAI-Powered Threat Detection & SOC Automation * Generative AI for Red Teaming and Penetration Testing * Automating Security Documentation with GenAI * Using GenAI for Cyber Risk Assessment * Secure Deployment of GenAI in Cybersecurity Operations * Security Risks of Using GenAI * Building a GenAI-Supported SOC Environment * Real-World Case Studies * 1000+ Prompts- Generative AI for Cybersecurity Experts --- ### 99. Altered Security – Cloud Red Team : Attacking and Defending Azure (CARTE) - URL: https://cyberlabarchive.com/courses/attacking-and-defending-azure-carte - Category: Altered Security - Downloadable Files: 1 (3.2 GB) - Formats: ZIP - Description: Cloud Red Team : Attacking and Defending Azure is designed to help security professionals in understand, analyze and practice attacks in an enterprise-like live Azure environment that has effective security controls in place. You will be able to practice and sharpen popular tactics, techniques and procedures (TTPs) for Azure environments. In addition, you will learn how to bypass security controls like Advanced Conditional Access Policies, Multiple ways to bypass MFA that is enforced using different methods, Privileged Identity Management (PIM) and Microsoft Defender for Cloud. CARTE also focuses on abuse of JWT signing, Family of Client IDs (FOCI), Attribute Based Access Control (ABAC), Temporary Access Password (TAP), Custom Claims, Cross Tenant Access, Azure Lighthouse, Azure ARC, Multi-Cloud Access, Tokens form Office Applications and traffic and Abuse of Kerberos in Entra ID. - Syllabus Topics: * Introduction to the Attack Methodology * Understanding APIs, Endpoints and Versions * Understanding OAuth, Microsoft Identity Platform and Authorization Flows * ​Deep dive into Tokens and Claims * Initial Access Attacks * Enumeration of Azure AD (Entra ID) and Azure * Abusing MS Graph API * Privilege Escalation * Lateral Movement * Persistence techniques * Bypassing Defences * Detecting and Stopping the attacks --- ### 100. TCM Security – Assembly 101 - URL: https://cyberlabarchive.com/courses/tcm-assembly-101 - Category: TCM Security - Downloadable Files: 1 (2.3 GB) - Formats: ZIP - Description: Assembly 101 will teach you how computers work down to the lowest level and how to write and read the human readable version of the 1s and 0s they speak in – Assembly. The course starts with an introduction on how computers perform computations using transistors, logic gates and machine code (1s and 0s), then moves on to writing your own assembly programs. Students will start writing x86-16 assembly in a beginner-friendly 8086 emulator to learn the fundamentals and then move on to writing modern x86-64 assembly. - Syllabus Topics: * Intro to Computer Engineering * 8086 Development Setup * Registers, MOV and Interrupts * Interacting With Memory * Arithmetic Operations * Accepting User Input * Conditional Statements * Loops * Functions * x86-16 Capstone Challenge * Intro to x86-64 * x86-64 Functions * The Cyber Mentor Coding Challenge – x86-64 Assembly Version * Memory Safety --- ### 101. SEC670: Red Teaming Tools – Developing Windows Implants, Shellcode, Command and Control - URL: https://cyberlabarchive.com/courses/red-team-operations-developing-custom-tools-windows - Category: Security Education - Downloadable Files: 2 (759 MB) - Formats: PDF, ZIP - Description: SEC670 dives deep into the art of Red Team operations, focusing on the development of custom tools for Windows environments. Participants will learn how to craft stealthy, highly effective tools to bypass modern defenses, evade detection, and simulate real-world adversary techniques. Through hands-on labs and expert-led instruction, students will explore low-level programming, process injection, API hooking, and more. Ideal for penetration testers, Red Teamers, and security researchers, this course equips professionals with the skills to create undetectable attack frameworks, ensuring they stay ahead in the evolving cybersecurity landscape. - Syllabus Topics: * Windows Tool Development * Getting to Know your Target * Operational Actions * Persistence: Die Another Day * Enhancing Your Implant: Shellcode, Evasion, and C2 * Capture the Flag --- ### 102. Zero Point Security – DevOps for Pentesters - URL: https://cyberlabarchive.com/courses/zero-point-security-devops-for-pentesters - Category: Zero Point Security - Downloadable Files: 1 (125 MB) - Formats: ZIP - Description: DevOps has revolutionised the traditional software delivery lifecycle resulting in faster product delivery, faster issue resolution, greater scalability, and more automation. Throughout this course, you will learn how DevOps practices can bring similar benefits to your penetration testing and red team operations. - Syllabus Topics: * Introduction * GitLab * TeamCity --- ### 103. Learning Path HTB Academy – AI Red Teamer - URL: https://cyberlabarchive.com/courses/htb-ai-red-teamer-path - Category: Other Institutions - Downloadable Files: 1 (404 MB) - Formats: ZIP - Description: The AI Red Teamer Job Role Path, in collaboration with Google, trains cybersecurity professionals to assess, exploit, and secure AI systems. Covering prompt injection, model privacy attacks, adversarial AI, supply chain risks, and deployment threats, it combines theory with hands-on exercises. Aligned with Google’s Secure AI Framework (SAIF), it ensures relevance to real-world AI security challenges. Learners will gain skills to manipulate model behaviors, develop AI-specific red teaming strategies, and perform offensive security testing against AI-driven applications. The path will be gradually expanded with related modules until its completion. --- ### 104. MalTrak – Threat Hunting In Microsoft Sentinel and Defender - URL: https://cyberlabarchive.com/courses/maltreak-threat-hunting-in-microsoft-sentinel - Category: Maltrak - Downloadable Files: 1 (523 MB) - Formats: ZIP - Description: Threat Hunting in Microsoft Sentinel and Defender course by MalTrak is designed to equip cybersecurity professionals with the skills to detect and respond to advanced threats using Microsoft’s security tools. This training emphasizes practical, hands-on experience in leveraging Microsoft Sentinel and Defender for effective threat hunting and incident response. - Syllabus Topics: * Introduction to Threat Hunting in Microsoft Sentinel and Defender * Configure Your Sentinel and Defender Environment * Using Cyber Threat Intelligence to Form a Hypothesis * Threat Hunting Using KQL * Advanced Hunting in Defender and Sentinel --- ### 105. Mandiant – Essentials of Malware Analysis - URL: https://cyberlabarchive.com/courses/mandiant-essentials-of-malware-analysis - Category: Other Institutions - Downloadable Files: 1 (29.1 GB) - Formats: ZIP - Description: This course provides a beginner-level introduction to the tools and methodologies used to perform malware analysis on executables found in Windows systems using a practical, virtual hands-on approach. The course introduces students to Disassembly, including subtopics on x86 Architecture, The Stack, C Code Constructs, and an introduction to IDA Pro. The content is developed and taught by FLARE malware analysts who are experienced in analyzing a diverse set of malware. - Syllabus Topics: * Introduction to Malware Analysis * Basic Static Analysis * Basic Dynamic Analysis * Microsoft .NET Framework * Windows Management Instrumentation – Malware Triage Powershell * Introduction to Ghidra * Application Programmer Interface (API) Analysis * File Analysis * Registry Analysis * Network Analysis --- ### 106. 13Cubed – Investigating Linux Devices - URL: https://cyberlabarchive.com/courses/13cubed-investigating-linux-devices - Category: 13Cubed - Downloadable Files: 1 (4.9 GB) - Formats: ZIP - Description: Starting with fundamental principles, Investigating Linux Devices rapidly progresses to encompass log analysis, file systems, persistence mechanisms, memory forensics, live response, and more! This course offers extensive hands-on practice and a capstone involving the analysis of a compromised system. Tailored for both beginners and seasoned professionals, it serves as an ideal resource for mastering Linux forensics! - Syllabus Topics: * Introduction to Linux * Linux Logs * Linux File Systems * Persistence Mechanisms * Evidence Collection * Timelining * Linux Memory Forensics * Live Response * Analyzing a Compromised System --- ### 107. Altered Security – Windows Red Team Lab (CRTE) - URL: https://cyberlabarchive.com/courses/altered-security-windows-red-team-lab-crte - Category: Altered Security - Downloadable Files: 1 (6.9 GB) - Formats: ZIP - Description: Most enterprise networks today are managed using Active Directory and it is imperative for a security professional to understand the threats to the Windows infrastructure. Certified Red Team Expert (CRTE) course and lab is designed to provide a platform for security professionals to understand, analyze and practice threats and attacks against a modern Windows network infrastructure. - Syllabus Topics: * Active Directory Enumeration * Local Privilege Escalation * Offensive .NET and PowerShell Tradecraft * Domain Privilege Escalation * Lateral Movement * Domain Dominance & Persistence * Cross Domain Attacks * Cross Forest Attacks – Executing usual attacks across Forest Trusts * Cross Forest Attacks – The lesser-known ones * Defenses and bypass – MDE EDR * Defenses and bypass – MDI * Defenses * Detection & Detection Bypasses * Deception --- ### 108. Altered Security – Azure Application Security Lab (CAWASP) - URL: https://cyberlabarchive.com/courses/azure-application-security-lab-cawasp - Category: Altered Security - Downloadable Files: 1 (7.1 GB) - Formats: ZIP - Description: Applications are vital components of an enterprise. Hence application security also becomes an integral part of the enterprise network that helps prevent security vulnerabilities against various threats. Currently, most enterprises are leveraging Cloud services to deploy/host their applications. So, it is equally important to secure those applications. The attack surface for the applications deployed/hosted in the cloud changes drastically and varies between cloud service providers. Azure is a cloud service provider that offers multiple cloud services that are very popular in enterprise environments. In this course, we will explore and learn about various enterprise application services offered by Azure like App Service, Function Apps, Enterprise Applications, API Management, Cosmos DB, SQL Server etc. This hands-on class covers abusing application flaws/misconfiguration, features, and interoperability to compromise an enterprise-like live lab environment. Each student gets a dedicated lab! As a bonus, there is a shared lab to practice with fellow students. The class also covers security controls useful in defending against the discussed attacks. - Syllabus Topics: * Introduction * Applications (App Services, APIs) * Authentication & Authorization * Azure WAF * App Registrations, Enterprise Apps & Conditional Access Policy * Function Apps * Key Vaults * Storage Accounts * Databases * Application Proxy & Azure API Management * Microsoft Defender for Cloud & Microsoft Defender for Cloud Apps * Defense --- ### 109. Altered Security – Certified Red Team Professional (CRTP) - URL: https://cyberlabarchive.com/courses/certified-red-team-professional-crtp - Category: Altered Security - Downloadable Files: 1 (5.7 GB) - Formats: ZIP - Description: The Certified Red Team Professional (CRTP) is a beginner-friendly, hands-on certification offered by Altered Security. It focuses on teaching security professionals how to assess and enhance the security of Enterprise Active Directory environments. The course covers topics such as Active Directory enumeration, trust mapping, domain privilege escalation, Kerberos-based attacks, SQL server trusts, and defense bypass techniques. Participants can choose between an on-demand course with flexible self-paced learning or an instructor-led bootcamp spanning four weeks. Both options provide access to a lab environment featuring updated Server 2022 machines, comprehensive video courses, lab manuals, and a certification exam attempt. The CRTP certification is valid for three years, with a free renewal process available to keep up with evolving technologies and skills. - Syllabus Topics: * Active Directory Enumeration and Local Privilege Escalation * Lateral Movement, Domain Privilege Escalation, and Persistence * Domain Persistence, Dominance, and Escalation to Enterprise Admins * Defenses, Monitoring, and Bypassing Defenses --- ### 110. EC Council – Certified Cloud Security Engineer (CCSE) - URL: https://cyberlabarchive.com/courses/certified-cloud-security-engineer-course-ccse - Category: EC-Council - Downloadable Files: 1 (947 MB) - Formats: ZIP - Description: EC-Council Certified Cloud Security Engineer (CCSE) course is curated by cloud security professionals in association with renowned subject matter experts to deliver a mix of vendor-neutral and vendor-specific cloud security concepts. The vendor-neutral concepts focus on cloud security practices, technologies, frameworks, and principles. In contrast, the vendor-specific materials deliver the practical skills that are needed to configure specific platforms, such as Amazon Web Services (AWS), Azure, and Google Cloud Platform (GCP). This offers candidates a well-balanced mix of theoretical and practical skills. In addition, advanced topics also cover modules on securing the cloud infrastructure by implementing regulations and standards to maintain security. EC-Council’s cloud security course is mapped to the real-time job roles and responsibilities of cloud security professionals and is ideal for beginners as well as experienced cybersecurity professionals. - Syllabus Topics: * Introduction to Cloud Security * Platform and Infrastructure Security in the Cloud * Application Security in the Cloud * Data Security in the Cloud * Operation Security in the Cloud * Penetration Testing in the Cloud * Incident Detection and Response in the Cloud * Forensics Investigation in the Cloud * Business Continuity and Disaster Recovery in the Cloud * Governance, Risk Management, and Compliance in the Cloud * Standards, Policies, and Legal Issues in the Cloud --- ### 111. INE – Azure Solutions Architect Expert (AZ-303 & AZ-304) - URL: https://cyberlabarchive.com/courses/ine-azure-solutions-architect-expert-az-303-az-304 - Category: iNE - Downloadable Files: 1 (19.5 GB) - Formats: ZIP - Description: As a leading cloud provider, Azure is a critical component of the IT portfolio for many companies, governments, and organizations. Architecting solutions that run optimally in Azure requires a deep working knowledge of a wide range of resources and services. The Microsoft Certified Azure Solution Architect Expert is Microsoft’s premier certificate validating your proficiency in designing solutions that run in Azure. This learning path is designed to help you develop expertise in a wide range of skills including infrastructure design and implementation; diagnostics monitoring and auditing, identity, authentication, and security; application services; data services; and business continuity. Successfully completing this learning path will get you ready for the Azure Architect certification exams, but more importantly, it will give you the information you need to effectively design solutions in Azure. - Syllabus Topics: * PrerequisitesAzure Administration: Identity Management and GovernanceAzure Administration: Resource Monitoring and ProtectionAzure Administration: Compute ManagementAzure Administration: Virtual Network Management * ImplementationAzure Architect: Infrastructure Management and MonitoringAzure Architect: Management and Security SolutionsAzure Architect: Application SolutionsAzure Architect: Data Platforms * DesignAzure Architect: Design Business ContinuityAzure Architect: Design InfrastructureAzure Architect: Design MonitoringAzure Architect: Design Identity and SecurityAzure Architect: Design Data Storage --- ### 112. Expliot Academy – Practical Hardware Hacking - URL: https://cyberlabarchive.com/courses/expliot-academy-practical-hardware-hacking - Category: Other Institutions - Downloadable Files: 1 (1.3 GB) - Formats: ZIP - Description: Practical Hardware Hacking course offered by EXPLIoT Academy is a comprehensive 6-week program designed to equip participants with essential skills in hardware security and penetration testing. The course provides on-demand content, digital assets, hands-on labs, community learning opportunities, and a certificate upon completion. - Syllabus Topics: * Introduction to Hardware * Introduction To Embedded Systems * Soldering And Desoldering * Hardware Reckon * Attacking Hardware --- ### 113. Altered Security – AD CS Attacks for Red and Blue Teams - URL: https://cyberlabarchive.com/courses/alteredsecurity-adcs - Category: Altered Security - Downloadable Files: 1 (6.6 GB) - Formats: ZIP - Description: Identity plays a crucial role in security of an enterprise environment. Certainly, Identity is the new security perimeter. In an enterprise environment, Identity is usually managed by Active Directory or by Azure AD in case of a Hybrid Identity. An often-overlooked part of enterprise infrastructure is Active Directory Certificate Services (AD CS). AD CS is a Windows Server Role that implements Public Key Infrastructure and can be used for user authentication, machine authentication, document signing, email signing, file encryption and so much more. This makes AD CS a crucial part of Identity Management. - Syllabus Topics: * AD CS Enumeration * AD CS Local Privilege Escalation * AD CS Domain Privilege Escalation * AD CS Pivoting and Lateral Movement * AD CS Theft and Collection * AD CS Local and Domain Persistence * Abusing Cross Forest and External Trusted CAs * Abusing Azure CBA for Lateral Movement and Persistence on Cloud * Evasion and Bypasses * AD CS Defence – Prevention and Detection --- ### 114. ICS612: ICS Cybersecurity In-Depth - URL: https://cyberlabarchive.com/courses/ics-cyber-security-in-depth - Category: Security Education - Downloadable Files: 3 (26 GB) - Formats: ZIP - Description: ICS612 equips you with the skills to secure Industrial Control Systems (ICS) against evolving cyber threats. Learn to assess vulnerabilities, implement defense strategies, and respond to incidents using real-world scenarios and industry best practices. Gain expertise in ICS network security, threat detection, and compliance with standards like NIST and IEC 62443. Perfect for IT and OT professionals looking to enhance critical infrastructure protection. - Syllabus Topics: * The Local Process * System of Systems * ICS Network Infrastructure * ICS System Management * Covfefe Down! --- ### 115. PhonLab – Smartphone Tech - URL: https://cyberlabarchive.com/courses/phonlab-smartphone-tech - Category: Other Institutions - Downloadable Files: 1 (29 GB) - Formats: ZIP - Description: Phonlab Smartphone Tech course is a comprehensive online training program designed to equip individuals with professional skills in mobile phone software and security. The course comprises over 400 lessons totaling 60 hours, structured to facilitate swift training and certification. It employs a progressive learning model, requiring 90% video watch time and a perfect score on quizzes to advance through sections. The curriculum is regularly updated to reflect the latest technological advancements. - Syllabus Topics: * Basic PC Setup & Course Navigation * Troubleshooting Mobile Devices * Samsung Firmware Flashing & Recovery * Apple iPhone Software & Troubleshooting * Pixel Firmware & Bootloader Unlocking * Motorola Firmware & Hard Brick Fixes * FRP (Factory Reset Protection) Removal * Unlock Boxes & Tool Setup * iPhone Jailbreak Techniques * Android Root & Recovery Methods * iCloud Security & Removal * Data Recovery Techniques * MediaTek Chipset Repairs * Remote Unlocking & Support * Huawei Firmware & Unlocking * Mobile Device Management (MDM) * LG, Sony, and Amazon Firmware Repairs --- ### 116. OffSec – TH-200: Foundational Threat Hunting - URL: https://cyberlabarchive.com/courses/offsec-th200-foundational-threat-hunting - Category: OffSec - Downloadable Files: 1 (72 MB) - Formats: ZIP - Description: Foundational Threat Hunting (TH-200) equips cybersecurity professionals with the practical skills and knowledge needed to effectively detect and respond to threats. This course covers core threat hunting concepts, exploring the methodologies used by enterprises to track and mitigate adversaries. Key areas include understanding the threat actor landscape, with a focus on ransomware and Advanced Persistent Threats (APTs), and utilizing both network and endpoint Indicators of Compromise (IoCs) for proactive threat detection. - Syllabus Topics: * Threat Hunting Concepts and Practices * Threat Actor Landscape Overview * Communication and Reporting for Threat Hunters * Hunting with Network Data * Hunting on Endpoints * Threat Hunting without IoCs --- ### 117. OffSec – IR-200: Foundational Incident Response - URL: https://cyberlabarchive.com/courses/offsec-ir200-foundational-incident-response - Category: OffSec - Downloadable Files: 1 (121 MB) - Formats: ZIP - Description: Incident Response Essentials (IR-200) course provides cybersecurity professionals with practical training to prepare for, identify, and handle security incidents effectively. The course focuses on core incident response concepts and explores how organizations manage and mitigate cyber threats in real-world situations. Participants will learn to understand the incident response lifecycle, develop comprehensive incident response plans, and utilize tools and techniques for efficient detection and analysis of security events. - Syllabus Topics: * Incident Response Overview * Fundamentals of Incident Response * Phases of Incident Response * Incident Response Communication Plans * Common Attack Techniques * Incident Detection and Identification * Initial Impact Assessment * Digital Forensics for Incident Responders * Incident Response Case Management * Active Incident Containment --- ### 118. Udemy – Web Security & Bug Bounty: Learn Penetration Testing - URL: https://cyberlabarchive.com/courses/ztm-web-security-and-bug-bounty-learn-penetration-testing - Category: Other Institutions - Downloadable Files: 1 (7.6 GB) - Formats: ZIP - Description: This course is focused on learning by doing. We are going to teach you how penetration testing works, by actually practicing the techniques and methods used by bug bounty hunters today. We will start off by creating our virtual hacking lab to make sure we keep your computers safe throughout the course, as well as doing things legally, and having our computers set up for penetrations testing. - Syllabus Topics: * Introduction To Bug Bounty * Our Virtual Lab Setup * Website Enumeration & Information Gathering * Introduction To Burpsuite * HTML Injection * Command Injection/Execution * Broken Authentication * Bruteforce Attacks * Sensitive Data Exposure * Broken Access Control * Security Misconfiguration * Cross Site Scripting – XSS * SQL Injection * XML, XPath Injection, XXE * Components With Known Vulnerabilities * Insufficient Logging And Monitoring * Monetizing Bug Hunting * Extra – Web Developer Fundamentals * Extra – Linux Terminal * Extra – Networking --- ### 119. INE – Azure Security Engineer Associate (AZ-500) - URL: https://cyberlabarchive.com/courses/ine-azure-security-engineer-associate-az-500 - Category: iNE - Downloadable Files: 1 (8.8 GB) - Formats: ZIP - Description: IT environments require rock-solid security solutions. This is true whether they are on-premises, in the cloud, a combination of both. Azure, as a leading cloud platform, has a thorough portfolio of security features and solutions. The Microsoft Certified: Azure Security Engineer Associate verifies practitioners’ ability to implement security in Azure. This learning path prepares you for the AZ-500 exam and provides the information required to effectively implement secure workloads in Azure. The learning path covers a wide spectrum of Azure security topics including identity management, platform protection, security operations, data security, and application security. - Syllabus Topics: * Preparing for the AZ-500: Azure Security Engineer Associate Exam * Azure AdministrationIdentity Management and GovernanceResource Monitoring and ProtectionCompute ManagementVirtual Network Management * Azure SecurityManaging Identity and AccessProtecting the PlatformManaging Security OperationsSecuring Data and Applications --- ### 120. PhonLab – Unleashing the Power of ChatGPT AI - URL: https://cyberlabarchive.com/courses/phonlab-unleashing-the-power-of-chatgpt-ai - Category: Other Institutions - Downloadable Files: 1 (2 MB) - Formats: 7Z - Description: PhonLab offers a ChatGPT Mini Course titled “Unleash the Power of AI Chatbots,” designed to introduce learners to the world of Artificial Intelligence (AI) and chatbots. - Syllabus Topics: * Understanding the AI Landscape * Mastering ChatGPT * Practical Application * Community and Support --- ### 121. PhonLab – Batch Scripts - URL: https://cyberlabarchive.com/courses/phonlab-batch-scripts - Category: Other Institutions - Downloadable Files: 1 (308 MB) - Formats: 7Z - Description: Batch Scripts course teaches you how to write automation scripts for Android devices, focusing on the Windows platform. It covers essential batch and cmd scripting techniques, using tools like ADB and Fastboot, and guides you through editing, creating, and advancing batch scripts. The course includes practical lessons on error logging and menu-based scripts. It is designed for those interested in automating tasks related to Android. - Syllabus Topics: * Legal & Security Considerations * Introduction to BAT/CMD Scripts * Understanding ADB & Fastboot * Common Android Batch Commands * Notepad++ for Script Editing * Creating Your Own Scripts * Advanced Scripting with Menus * Error Logging in Scripts --- ### 122. Udemy – The Ultimate Dark Web, Anonymity, Privacy & Security Course - URL: https://cyberlabarchive.com/courses/the-ultimate-dark-web-anonymity-privacy-security-course - Category: Other Institutions - Downloadable Files: 1 (5.9 GB) - Formats: ZIP - Description: This course provides an in-depth exploration of the dark web, online anonymity, and privacy protection techniques. Participants will learn how to navigate the dark web safely using tools like Tor, VPNs, and secure operating systems. The course also covers advanced security practices, including encrypted communication, cryptocurrency transactions, and counter-surveillance strategies to protect personal and organizational data from cyber threats. With hands-on demonstrations and real-world applications, this course equips learners with the skills to maintain privacy, enhance security, and understand the risks associated with the hidden corners of the internet. - Syllabus Topics: * Introduction to the Dark Web * Fundamentals of Online Anonymity * Essential Anonymity Tools * Secure Operating Systems and Environments * Dark Web Access and Navigation * Secure Communication and Messaging * Cryptocurrency and Financial Privacy * Counter-Surveillance and Operational Security (OpSec) * Advanced Privacy Techniques * Case Studies and Real-World Applications --- ### 123. ITProTV – LPIC-2 Linux Engineer (202-450) - URL: https://cyberlabarchive.com/courses/lpic2-linux-engineer-202450 - Category: Other Institutions - Downloadable Files: 1 (10.1 GB) - Formats: ZIP - Description: The LPIC-2 Linux Engineer (202-450) course is designed for IT Professionals who are seeking the LPIC-2 certification. The course covers skills required of any intermediate to advanced systems administrator who is tasked with supporting Linux in a production environment. Topics covered configuring Linux to act as a web server, name server, email server, file server, or VPN server. This course is accompanied by the 201-450 course which combine to cover the LPIC-2 exam. - Syllabus Topics: * Domain Name Server * Web Services * File Sharing * Network Client Management * E-Mail Services * System Security --- ### 124. ITProTV – LPIC-2 Linux Engineer (201-450) - URL: https://cyberlabarchive.com/courses/lpic2-linux-engineer-201450 - Category: Other Institutions - Downloadable Files: 1 (7.8 GB) - Formats: ZIP - Description: The LPIC-2 Linux Engineer (201-450) course is designed for IT Professionals who are seeking the LPIC-2 certification. The course covers skills required of any intermediate to advanced systems administrator who is tasked with supporting Linux in a production environment. Topics covered include: capacity planning, kernel maintenance, startup and recovery methods, advanced storage configurations, network connectivity, and systems maintenance. This course is accompanied by the 202-450 course which combine to cover the LPIC-2 exam. - Syllabus Topics: * Capacity Planning * Linux Kernel * System Startup * Filesystem and Devices * Advanced Device Administration * Network Configuration * System Maintenance --- ### 125. ITProTV – LPIC-1 Linux Administrator (102-500) - URL: https://cyberlabarchive.com/courses/lpic-1-linux-administrator-102-500 - Category: Other Institutions - Downloadable Files: 1 (3.4 GB) - Formats: ZIP - Description: The LPIC-1 Linux Administrator certification demonstrates a basic proficiency with the Linux operating system and the ability to perform real-world maintenance and administrative tasks. The 102-500 exam expands upon the topics covered in 101-500 with more detailed usage of many commands, scripting, troubleshooting and security. - Syllabus Topics: * Shells and Shell Scripting * User Interfaces and Desktops * Administrative Tasks * Essential System Services * Networking Fundamentals * Security --- ### 126. ITProTV – LPIC-1 Linux Administrator (101-500) - URL: https://cyberlabarchive.com/courses/lpic1-linux-administrator-101500 - Category: Other Institutions - Downloadable Files: 1 (4.1 GB) - Formats: ZIP - Description: The LPIC-1 Linux Administrator certification demonstrates a basic proficiency with the Linux operating system and the ability to perform real-world maintenance and administrative tasks. The 101-500 exam focuses on understanding the Linux system architecture, managing software, basic GNU commands, and the Linux file system hierarchy. - Syllabus Topics: * Installing Linux * Executing Programs * Working with Text Files * The Linux Command Line * Locating Data * File Permissions * Managing Software * Managing Services * Managing Storage --- ### 127. Hacktify – Bug Bounty V2 - URL: https://cyberlabarchive.com/courses/hacktify-bug-bounty-v2 - Category: Other Institutions - Downloadable Files: 1 (2.1 GB) - Formats: ZIP - Description: Building on the foundation of Bug Bounty V1, this course dives deeper into advanced vulnerability exploitation. It focuses on specific threats such as SQL Injection, HTML Injection, Clickjacking, and Server-Side Request Forgery (SSRF). Participants will engage in hands-on simulations and become proficient with specialized tools for these vulnerabilities. - Syllabus Topics: * Introduction * OWASP Top 10 * Burp Suite and Lab Setup * Authentication Bypass * No Rate-Limit Attacks * Cross Site Scripting (XSS) * Cross Site Request Forgery (CSRF) * Cross Origin Resource Sharing (CORS) * How to Start with Bug Bounty Platforms and Reporting * Bug Bounty Reporting Templates * Exploitation of CVE 2020-5902 Remote Code Execution * Exploitation of CVE 2020-3452 File Read * Exploitation of CVE 2020-3187 File Delete * Snapshot * OWASP 2021 --- ### 128. Hacktify – Bug Bounty V1 - URL: https://cyberlabarchive.com/courses/hacktify-bug-bounty-v1 - Category: Other Institutions - Downloadable Files: 1 (2.7 GB) - Formats: ZIP - Description: Bug Bounty V1 course offers a comprehensive introduction to identifying and responsibly exploiting application vulnerabilities. It covers Web Application Architecture fundamentals and the critical OWASP Top 10. Participants will learn to distinguish Bug Bounty Hunting from Penetration Testing, engage in hands-on simulations, and master essential tools like Burp Suite. - Syllabus Topics: * Introduction * OWASP Top 10 * Burp Suite and Lab Setup * Authentication Bypass * No Rate-Limit Attacks * Cross Site Scripting (XSS) * Cross Site Request Forgery (CSRF) * Cross Origin Resource Sharing (CORS) * How to Start with Bug Bounty Platforms and Reporting * Bug Bounty Reporting Templates * Exploitation of CVE 2020-5902 Remote Code Execution * Exploitation of CVE 2020-3452 File Read * Exploitation of CVE 2020-3187 File Delete * Snapshot * OWASP 2021 --- ### 129. Hacktify – CVE’s for Bug Bounties & Penetration Testing - URL: https://cyberlabarchive.com/courses/cves-for-bug-bounties-penetration-testing - Category: Other Institutions - Downloadable Files: 1 (1.8 GB) - Formats: ZIP - Description: Participants will learn how to exploit Common Vulnerabilities and Exposures (CVEs) in web applications to earn bug bounties. The course provides practical insights into identifying and leveraging CVEs in bug bounty programs. - Syllabus Topics: * Introduction * All about CVE’s * Bugcrowd VRT * Shodan * Censys * Google Dork * Certificate Transparency * Setting up Environment * Microweber CVE’s * Jira CVE’s * Icewarp CVE * BigIP CVE * Cisco CVE’s * How to start with Bug Bounty Platforms and Reporting * Awesome Resources * Maracms CVE * SAP CVE * Bug Bounty VPS * Visual Recon * Automation Alerts from Bug Bounty VPS * Kubernetes CVE – Apple Hall of Fame * Citrix CVE * Apache CVE * Snapshot --- ### 130. Hacktify – Recon for Bug Bounties - URL: https://cyberlabarchive.com/courses/hacktify-recon-for-bug-bounties - Category: Other Institutions - Downloadable Files: 1 (3.1 GB) - Formats: ZIP - Description: Recon for Bug Bounties course covers the reconnaissance phase of bug bounty hunting and penetration testing, teaching participants how to gather crucial information about a target to identify vulnerabilities and attack vectors. - Syllabus Topics: * Introduction * Note Keeping * Bug Bounty Recon Introduction * Shodan for Bug Bounties * Certificate Transparency for Subdomain Enumeration * Scope Expansion * Diving in Depth of Archives for Bug Bounties * DNS Enumeration for Bug Bounties * CMS Identification * Fuzzing * Content Discovery * WAF Identification * Google Dorks * Bug Bounty Platforms * Mindmaps for Recon & Bug Bounties * Next Steps * Snapshot --- ### 131. Hacktify – Top 5 Tools & Techniques for Penetration Testing - URL: https://cyberlabarchive.com/courses/top-5-tools-techniques-for-penetration-testing - Category: Other Institutions - Downloadable Files: 1 (891 MB) - Formats: ZIP - Description: Top 5 Tools & Techniques for Penetration Testing course introduces the top five tools for penetration testing and bug bounties, providing practical knowledge for the information security industry. Participants will learn how to effectively use these tools in real-world scenarios. - Syllabus Topics: * Nmap – The Network Mapper * Burpsuite * Google Hacking Database * Content Discovery Tools * Github Recon * Linux * Shodan * Anatomy of HTTP Request * Snapshot --- ### 132. Book Blitzscaling security: Diary of a security engineer - URL: https://cyberlabarchive.com/courses/blitzscaling-security-diary-engineer - Category: Other Institutions - Downloadable Files: 1 (6.5 MB) - Formats: PDF - Description: Blitzscaling Security: Diary of a Security Engineer by Sparc Flow chronicles the journey of Alex, the inaugural security engineer at a rapidly growing startup. The narrative delves into Alex’s experiences, from the interview process to the initial months of establishing security protocols. It highlights interactions with various teams, communication challenges, vulnerability prioritization, and the tension between conventional security wisdom and practical application. The book emphasizes pragmatism and first principles, aiming to debunk prevalent myths in the security field that may be counterproductive. --- ### 133. Book IntelTechniques – Extreme Privacy - URL: https://cyberlabarchive.com/courses/inteltechniques-extreme-privacy - Category: Books - Downloadable Files: 1 (11 MB) - Formats: PDF - Description: Michael Bazzell has helped hundreds of celebrities, billionaires, and everyday citizens disappear completely from public view. He is now known in Hollywood as the guy who “fixes” things. Many of his previous books about privacy were mostly REACTIVE and he focused on ways to hide information, clean up an online presence, and sanitize public records to avoid unwanted exposure. This textbook is PROACTIVE. It is about starting over. It is the complete guide that he would give to any new client in an extreme situation. It leaves nothing out and provides explicit details of every step he takes to make someone completely disappear, including legal documents and a chronological order of tasks. For many, this is the only manual needed to secure a new private life. - Syllabus Topics: * Introduction * Linux Computers * macOS Computers * GrapheneOS Mobile Devices * iOS Mobile Devices * Mobile Device Strategies * Secure Communications * Web Browsers * Passwords & Two-Factor Authentication (2FA) * Secure Email, Calendars & Contacts * VoIP Telephone Numbers * VPNs & DNS * Firewalls & Wi-Fi * Self-Hosted Data * Virtual Machines (VMs) * Alias Names * Mailing Addresses * Private Payments * Estate Planning * Employment * Private Lodging * Private Homes * Private Vehicles * Privacy Lifestyle * Nomad Lifestyle * Data Requests * Data Freezes * Disinformation * Disaster Preparation * Death Preparation * My Successes & Failures * Conclusion --- ### 134. Book IntelTechniques – OSINT Techniques - URL: https://cyberlabarchive.com/courses/inteltechniques-osint-techniques - Category: Books - Downloadable Files: 1 (27 MB) - Formats: PDF - Description: It is time to look at OSINT in a different way. For many years, and within previous editions of this book, we have relied on external resources to supply our search tools, virtual environments, and investigation techniques. We have seen this protocol fail us when services shut down, websites disappear, and custom resources are dismantled due to outside pressures. This book aims to correct our dilemma. We will take control of our investigative resources and become self-reliant. There will be no more need for online search tools; we will make and host our own locally. We will no longer seek pre-built virtual machines; we will create and configure our own. The new OSINT professional must be self-sustaining and possess their own tools and resources. You will become a more proficient subject matter expert who will be armed with the knowledge and readiness to articulate the sources of your findings. This new 11th edition contains hundreds of pages which have been updated to keep your OSINT investigative methods fresh. It also includes new online and offline search tools and a new Debian Linux OSINT virtual machine. Brand-new search methods for Facebook, Instagram, TikTok, LinkedIn, YouTube, and others ensure you have the latest techniques within your online investigation arsenal. An entire section is devoted to Methodology, Workflow, Documentation, and Ethics which provides a clear game plan for your next active investigation. All digital files are included via download. Today, we start over. - Syllabus Topics: * OSINT Virtual Machines * OSINT Resources & Techniques * Leaks, Breaches, Logs, & Ransomware * OSINT Methodology --- ### 135. Learning Path (CAPE) HTB Academy – Active Directory Penetration Tester - URL: https://cyberlabarchive.com/courses/htb-active-directory-penetration-tester-path - Category: Other Institutions - Downloadable Files: 1 (358 MB) - Formats: ZIP - Description: The Active Directory Penetration Tester Job Role Path is designed for individuals who aim to develop skills in pentesting large Active Directory (AD) networks and the components commonly found in such environments. This path equips students with the skills needed to evaluate the security of AD environments, navigate complex Windows networks, and identify elusive attack paths. This path includes advanced hands-on labs where participants will practice techniques such as Kerberos attacks, NTLM relay attacks, and the abuse of services like AD Certificate Services (ADCS), Exchange, WSUS, and MSSQL. Students will also learn how to exploit misconfigurations in Active Directory DACLs and Domain Trusts, perform evasion tactics in Windows environments, and leverage Command and Control (C2) frameworks for post-exploitation activities. By combining theoretical foundations with practical exercises and a structured methodology for identifying AD vulnerabilities, this path enables students to conduct professional security assessments on complex AD infrastructures and effectively report security weaknesses discovered by chaining multiple vulnerabilities. --- ### 136. Learning Path (CDSA) HTB Academy – SOC Analyst - URL: https://cyberlabarchive.com/courses/htb-soc-analyst-path - Category: Other Institutions - Downloadable Files: 1 (137 MB) - Formats: ZIP - Description: The SOC Analyst Job Role Path is for newcomers to information security who aspire to become professional SOC analysts. This path covers core security monitoring and security analysis concepts and provides a deep understanding of the specialized tools, attack tactics, and methodology used by adversaries. Armed with the necessary theoretical background and multiple practical exercises, students will go through all security analysis stages, from traffic analysis and SIEM monitoring to DFIR activities and reporting. Upon completing this job role path, you will have obtained the practical skills and mindset necessary to monitor enterprise-level infrastructure and detect intrusions at an intermediate level. The SOC Analyst Prerequisites skill path can be considered prerequisite knowledge to be successful while working through this job role path. --- ### 137. EC Council – Certified Application Security Engineer (CASE) – Java Edition - URL: https://cyberlabarchive.com/courses/certified-application-security-engineer-case-java - Category: EC-Council - Downloadable Files: 1 (12.8 GB) - Formats: ZIP - Description: The Certified Application Security Engineer (CASE) Java course from EC-Council is tailored for software developers and security professionals focused on secure Java application development. It provides essential skills in identifying security requirements, implementing secure coding practices, and managing application vulnerabilities throughout the software development lifecycle. The training includes real-world scenarios, practical labs, and hands-on exercises that cover topics like secure Java coding, security design, and risk management. By completing the CASE Java certification, participants gain valuable expertise in protecting applications from security threats. - Syllabus Topics: * Understanding Application Security, Threats, and Attacks * Security Requirements Gathering * Secure Application Design and Architecture * Secure Coding Practices for Input Validation * Secure Coding Practices for Authentication and Authorization * Secure Coding Practices for Cryptography * Secure Coding Practices for Session Management * Secure Coding Practices for Error Handling * Static and Dynamic Application Security Testing (SAST & DAST) * Secure Deployment and Maintenance --- ### 138. Learning Path (CWEE) HTB Academy – Senior Web Penetration Tester - URL: https://cyberlabarchive.com/courses/htb-senior-web-penetration-tester-path - Category: Other Institutions - Downloadable Files: 1 (0 MB) - Formats: ZIP - Description: The Senior Web Penetration Tester Job Role Path is designed for individuals who aim to develop skills in identifying advanced and hard-to-find web vulnerabilities using both black box and white box techniques. This path encompasses advanced-level training in web security, web penetration testing, and secure coding concepts. It also provides a deep understanding of the application debugging, source code review, and custom exploit development aspects of web security. Equipped with the necessary theoretical background, multiple practical exercises, and a proven methodology for web vulnerability identification, students will eventually be capable of performing professional security assessments against modern and highly secure web applications, as well as effectively reporting vulnerabilities found in code or arising from logical errors. --- ### 139. Learning Path (CWES) HTB Academy – Web Penetration Tester - URL: https://cyberlabarchive.com/courses/htb-web-penetration-tester - Category: Other Institutions - Downloadable Files: 1 (57 MB) - Formats: ZIP - Description: The Bug Bounty Hunter Job Role Path is for individuals who want to enter the world of Bug Bounty Hunting with little to no prior experience. This path covers core web application security assessment and bug bounty hunting concepts and provides a deep understanding of the attack tactics used during bug bounty hunting. Armed with the necessary theoretical background, multiple practical exercises, and a proven bug bounty hunting methodology, students will go through all bug bounty hunting stages, from reconnaissance and bug identification to exploitation, documentation, and communication to vendors/programs. Upon completing this job role path, you will have become proficient in the most common bug bounty hunting and attack techniques against web applications and be in the position of professionally reporting bugs to a vendor. - Syllabus Topics: * Web Requests * Introduction to Web Applications * Using Web Proxies * Information Gathering – Web Edition * Attacking Web Applications with Ffuf * JavaScript Deobfuscation * Cross-Site Scripting (XSS) * SQL Injection Fundamentals * SQLMap Essentials * Command Injections * File Upload Attacks * Server-side Attacks * Login Brute Forcing * Broken Authentication * Web Attacks * File Inclusion * Session Security * Web Service & API Attacks * Hacking WordPress * Bug Bounty Hunting Process --- ### 140. Learning Path (CPTS) HTB Academy – Penetration Tester - URL: https://cyberlabarchive.com/courses/htb-penetration-tester-path - Category: Other Institutions - Downloadable Files: 1 (107 MB) - Formats: ZIP - Description: The Penetration Tester Job Role Path is for newcomers to information security who aspire to become professional penetration testers. This path covers core security assessment concepts and provides a deep understanding of the specialized tools, attack tactics, and methodology used during penetration testing. Armed with the necessary theoretical background and multiple practical exercises, students will go through all penetration testing stages, from reconnaissance and enumeration to documentation and reporting. Upon completing this job role path, you will have obtained the practical skills and mindset necessary to perform professional security assessments against enterprise-level infrastructure at an intermediate level. The Information Security Foundations skill path can be considered prerequisite knowledge to be successful while working through this job role path. --- ### 141. Windows Server 2022 Administration - URL: https://cyberlabarchive.com/courses/ps-windows-server-2022-administration - Category: PluralSight - Downloadable Files: 1 (4 GB) - Formats: ZIP - Description: Windows Server has constantly been evolving as a product. You can still fulfill your needs for on premises technology while also have the possibility to invest in hybrid infrastructure. This path teaches you all you need to know about Windows Server 2022 administration for both Hybrid and On-premises situations. - Syllabus Topics: * OS Installation and Deployment * Deploy and Manage Active Directory Domain Services * Manage Workloads in Hybrid Environments * Manage Virtual Machines and Containers * Implement and Manage On-premises and Hybrid Networking Infrastructure * Manage Storage and File Services * Secure On-premises and Hybrid Infrastructure * Implement and Manage Windows Server High Availability * Implement Disaster Recovery * Migrate Servers and * Monitor and Troubleshoot * Implement Active Directory Certificate Services * Security Management * Implementing Microsoft Windows Always On VPN * Windows Server Administration Fundamentals Using PowerShell --- ### 142. EC Council – Certified Threat Intelligence Analyst (CTIA) - URL: https://cyberlabarchive.com/courses/certified-threat-intelligence-analyst-ctia - Category: EC-Council - Downloadable Files: 4 (29.6 GB) - Formats: PDF, ZIP - Description: EC-Council’s Certified Threat Intelligence Analyst (CTIA) certification is a comprehensive specialist-level professional program focused on the ever-evolving domain of threat intelligence. The program is designed for individuals involved in collecting, analyzing, and disseminating threat intelligence information. CTIA covers a wide range of topics, including the fundamentals of threat intelligence, the use of threat intelligence tools and techniques, and the development of a threat intelligence program. The cyber threat intelligence course focuses on refining data and information into actionable intelligence that can be used to prevent, detect, and monitor cyber-attacks. The program addresses all the stages involved in the threat intelligence lifecycle, and this attention toward a realistic and futuristic approach makes CTIA one of the most comprehensive threat intelligence certifications in the market today. - Syllabus Topics: * Introduction to Threat Intelligence * Cyber Threats and Attack Frameworks * Requirements, Planning, Direction, and Review * Data Collection and Processing * Data Analysis * Intelligence Reporting and Dissemination * Threat Hunting and Detection * Threat Intelligence in SOC Operations, Incident Response, and Risk Management --- ### 143. 7ASecurity – Hacking Modern Web apps - URL: https://cyberlabarchive.com/courses/7asecurity-hacking-modern-web-apps - Category: Other Institutions - Downloadable Files: 1 (9 GB) - Formats: ZIP - Description: Hacking Modern Web apps by 7ASecurity is a 100% hands-on deep dive into the OWASP Security Testing Guide and relevant items of the OWASP Application Security Verification Standard (ASVS), so this course covers and goes beyond the OWASP Top Ten. Modern Web apps share traditional attack vectors and also introduce new opportunities to threat actors. This course will teach you how to review modern web apps, showcasing Node.js but using techniques that will also work against any other web Apps platform. Ideal for Penetration Testers, Web Apps Developers as well as everybody interested in JavaScript/Node.js and Modern app stack security. - Syllabus Topics: * Hacking Modern Web apps by ExampleModern Web Apps Security Crash CourseStatic Analysis, Modern Web Apps frameworks and ToolsFinding and fixing Modern Web Apps vulnerabilitiesTest your Skills * Advanced Modern Web Apps attacksAdvanced Attacks on Modern Web AppsAdvanced Modern Web Apps CTF --- ### 144. Tactical OSINT for Pentesters - URL: https://cyberlabarchive.com/courses/tactical-osint-for-pentesters - Category: BlackHat - Downloadable Files: 1 (10.1 GB) - Formats: ZIP - Description: This BlackHat training will cover topics like Mapping the Attack Surface, Enriching Collected Data, Tech Stack Enumeration, Cloud Recon, Employee Profiling, Identifying Hidden Injection Points, Credential Spraying, Compromising Federation Server, Exploiting Domain Trust, Social Engineering, and much more. Participants will perform real-life attack scenarios in our lab having a Forest Environment expanding over segregated Domains to compromise various services. Also, using Social Engineering and Human aspect of OSINT, students will be guided to compromise the segregated domain environment which otherwise is unreachable through previously compromised domain. The training will not only cover these topics but will also go in-depth on how OSINT techniques can be chained together and even a small piece of information can lead to the catastrophic damage to an organization. --- ### 145. Defensive Security – Linux Attack, Detection and Live Forensics - URL: https://cyberlabarchive.com/courses/defensive-security-linux-attack-live-forensics-at-scale - Category: Other Institutions - Downloadable Files: 1 (116 MB) - Formats: PDF - Description: This course helps create and understand low-level Linux attack paths, improve your Linux detection coverage, see in action many Open Source DFIR/defensive projects, and understand the need for Linux telemetry, especially including Kubernetes clusters where Runtime Security solutions are a must these days. The techniques and attack paths covered in this training include many different implementations of eBPF, XDP, Ftrace, Kprobe, Uprobe, Netfilter, Systemtap, PAM, SSHD, HTTPD/Nginx, LD_PRELOAD-based code samples, and PoCs. Detection and forensics layers include LKRG, bpftool, Velociraptor IR, OSQuery, CLI-based /proc/ and /sys/ analysis, memory forensics with Volatility  2/3 Framework with the semi-automated RAM acquisition, Sysmon4Linux, Falco, Tracee, Sysdig, Tetragon, Sandfly Security, Zeek IDS, Suricata IDS, Moloch/Arkime FPC, Yara rules and more. - Syllabus Topics: * PurpleFlows Rapid Track * PurpleLabs Cyber Range Navigation * Introduction to the course * Blue/DFIR Components: SIEM * Blue/DFIR Components: HOST * Blue/DFIR Components: NETWORK * Establishing baseline vs Attack Vectors * Linux Memory Forensics * Linux Shells / C2 Implants * Tunnels / pivots / redirectors * Incident Response * Default Targets Exploitation & Detection * Linux Rootkits for Red and Blue Teams * Active Security Research --- ### 146. Dark Web Academy – The Dark Web: Ultimate Guide - URL: https://cyberlabarchive.com/courses/dwa-the-dark-web-ultimate-guide - Category: Other Institutions - Downloadable Files: 1 (996 MB) - Formats: ZIP - Description: Dark Web: Ultimate Guide (retired in 2019) is a comprehensive course that aimed to teach users how to navigate and make purchases on the dark web safely. It included lessons on Tails, Tor, Bitcoin, PGP encryption, and operational security. - Syllabus Topics: * Course Introduction * Intro to the Dark Web * Tor * Bitcoin * PGP Encryption * Purchasing Products * Wrap Up --- ### 147. Dark Web Academy – Tor Mastery - URL: https://cyberlabarchive.com/courses/dwa-tor-masterclass - Category: Other Institutions - Downloadable Files: 1 (497 MB) - Formats: ZIP - Description: Tor Mastery: The Ultimate Guide to Unlocking the Dark Web course is an in-depth guide designed to help users safely navigate and utilize Tor for privacy and security on the dark web. Covering everything from basic Tor setup to advanced features like running a Tor node, integrating Tor with code, and using Tor for anonymous communication. - Syllabus Topics: * Introduction and Ethics * The Foundations * Deep Dive into Onion Services * Installation and Setup * Enhanced Privacy & Security Measures * Setting up and Running a Tor Node * Advanced Tor Usage & Integrations * Communication & OS Optimization * Review and Further Exploration --- ### 148. Dark Web Academy – Dark Web Security Guide - URL: https://cyberlabarchive.com/courses/dwa-dark-web-security-guide - Category: Other Institutions - Downloadable Files: 1 (428 MB) - Formats: ZIP - Description: Dark Web Security Guide course from Dark Web Academy teaches crucial security techniques for dark web users. It covers topics like using Tails, Tor, encryption, file shredding, cryptography, and more. Through 36 lessons and 2.5 hours of video content, you’ll learn how to protect your anonymity and avoid common pitfalls. The course also explores vulnerabilities, proper use of VPNs, anonymous communication, and operational security practices to safeguard against law enforcement risks. - Syllabus Topics: * Overview Of Security * Tor, Tails and Encryption * Additional Security Information * Course Wrap Up --- ### 149. Dark Web Academy – Dark Web Foundations - URL: https://cyberlabarchive.com/courses/dwa-dark-web-foundations - Category: Other Institutions - Downloadable Files: 1 (253 MB) - Formats: ZIP - Description: Dark Web Foundations course from Dark Web Academy is designed to introduce beginners to the dark web and provide essential knowledge for navigating it. The course covers distinctions between the deep web, dark web, and surface web, along with key tools like Tor, PGP, Bitcoin, and Tails. Additionally, it includes practical lessons on setting up Tor, security nuances, and exploring dark web markets. - Syllabus Topics: * Intro to the Dark Web * Using the Dark Web --- ### 150. The Cyber Institute – OSINT Workshop - URL: https://cyberlabarchive.com/courses/thecyberinst-osintworkshop - Category: Other Institutions - Downloadable Files: 1 (925 MB) - Formats: ZIP - Description: Welcome to the OSINT Workshop – your stepping stone to becoming a proficient OSINT practitioner. This free online course is designed for beginners, providing essential skills and tools to navigate the vast sea of information on the internet effectively. Say goodbye to uncertainty and hello to actionable insights as you unlock the power of OSINT. - Syllabus Topics: * Introduction * Reverse Image Research * Advanced Search Engine Techniques * Sources of information * Creating intelligence from raw information * Username Research * Operational Security * Social Media Networks * Evaluation, Preserving Collection and Reports --- ### 151. Belkasoft – Mastering Advanced Digital Forensics Techniques - URL: https://cyberlabarchive.com/courses/belkasoft-mastering-advanced-digital-forensics-techniques - Category: Other Institutions - Downloadable Files: 1 (7.5 GB) - Formats: ZIP - Description: This advanced course is designed for digital forensics professionals looking to enhance their expertise beyond foundational skills. It delves into sophisticated forensic methods, including advanced file system analysis, memory forensics, network traffic analysis, and reverse engineering. Participants will learn cutting-edge techniques for identifying, preserving, and analyzing digital evidence in complex cybercrime investigations. Through hands-on labs and real-world case studies, students will develop a deeper understanding of forensic tools and methodologies, empowering them to solve intricate incidents, conduct in-depth investigations, and provide expert testimony in legal settings. - Syllabus Topics: * Installation and New Case Creation * 2. Internet Artifacts and Link Analysis * Windows Artifact and Countering Anti-forensic measures * Carving and Memory Analysis * Narrow your search Timeline and Hashset analysis --- ### 152. StationX – The Complete Cyber Security Course! – Volumes 1, 2, 3 & 4 - URL: https://cyberlabarchive.com/courses/stationx-the-complete-cyber-security-course - Category: StationX - Downloadable Files: 1 (12.9 GB) - Formats: 7Z - Description: The Complete Cyber Security Course by StationX is a comprehensive program designed to take learners from beginner to expert in cybersecurity. It covers key topics such as defeating hackers, preventing tracking, network security, anonymous browsing, and endpoint protection. With over 50 hours of on-demand content, the course focuses on practical skills for online threat mitigation, anonymity, encryption, and malware defense. Suitable for beginners, aspiring professionals, or anyone interested in safeguarding their online presence, it covers all major platforms including Windows, MacOS, Linux, iOS, and Android​ --- ### 153. arcX – Cyber Threat Intelligence Practitioner - URL: https://cyberlabarchive.com/courses/arcx-cyber-threat-intelligence-practitioner - Category: Other Institutions - Downloadable Files: 1 (6.9 GB) - Formats: ZIP - Description: The arcX Cyber Threat Intelligence Practitioner course is the perfect course for someone looking to enter the field of cyber threat intelligence (CTI) and prepare for the CPTIA examination. Suitable for beginners and those who have a basic knowledge of CTI, this course seeks to demystify the role of a CTI analyst and provide the knowledge and skills required for you to operate within a Threat Intelligence team. Among other things, you will learn fundamental skills such as how to gather intelligence requirements, formulate a collection plan, analyse information and produce actionable intelligence. - Syllabus Topics: * Introduction to Threat Intelligence * Direction * Collection * Analysis * Dissemination * Law and Ethics --- ### 154. CryptoKet – Web3 NFT Marketplace Web Application - URL: https://cyberlabarchive.com/courses/cryptoket-nft-marketplace - Category: Other Institutions - Downloadable Files: 1 (2.5 GB) - Formats: 7Z - Description: NFT Marketplace harnesses the very latest and greatest software technologies to advance students through hands-on, project-driven training. Leveraging the immense power of Solidity and Next.js, this course combines futuristic elements of Web3 blockchain development and the popular culture wave of non-fungible tokens (NFT). - Syllabus Topics: * Welcome to the Course * Bonuses * Business Masterclass * Project Initialization & Setup * Smart Contract Development * Back to Next.js * Searching, Buying, Listing the NFTs and more! --- ### 155. Forescout – Certified Associate: OT/ICS - URL: https://cyberlabarchive.com/courses/forescout-certified-associate-ot-ics - Category: Other Institutions - Downloadable Files: 1 (1.3 GB) - Formats: ZIP - Description: Forescout Certified Associate: OT/ICS training is a three-day course. Students learn how to configure the eyeInspect Command Center and associated Sensors using all of our available tools. Students will identify assets in a network environment and observe how the Forescout eyeInspect platform monitors and detects vulnerabilities in operational technology (OT)/production networks. - Syllabus Topics: * Introduction to Industrial Control Systems * Introduction to eyeInspect * eyeInspect Initial Configuration and Concepts * Visual Analytics –Flow Information * Asset Inventory * ICS Patrol Sensor * Alerts & Cases * Network Logs * Built-In Detection Modules * LAN Communication Profiler * Industrial Threat Library & eyeInspect Scripts * CVEs and IoCs * Forwarding * Housekeeping * eyeInspect in the Forescout Platform --- ### 156. Forescout – Accredited Engineer (FSAE) - URL: https://cyberlabarchive.com/courses/forescout-accredited-engineer-fsae - Category: Other Institutions - Downloadable Files: 1 (901 MB) - Formats: ZIP - Description: The Forescout Accredited Engineers curriculum is aimed at Security professionals that focus on presales activities, solution selling and security solution design. The content arms them with the knowledge, skills, and tools to identify and qualify opportunities. It also helps to incorporate Forescout into a wider security solution offering and explains how to leverage the Forescout Technology Partner Ecosystem to complement existing security tools and frameworks within their customer base. - Syllabus Topics: * 1. Security Landscape * Platform Overview * Visibility * Network Access Control * Compliance and Control * Network Segmentation * Zero Trust Architecture * Incident Response and Security Orchestration --- ### 157. Forescout – Certified Expert (FSCE) - URL: https://cyberlabarchive.com/courses/forescout-certified-expert-fsce - Category: Other Institutions - Downloadable Files: 1 (1.7 GB) - Formats: ZIP - Description: ForeScout Certified Expert Training (FSCE) is a five-day boot camp combining lectures on best practices and advanced policy configurations with extensive hands-on lab exercises. Students will be able to do deployments using Forescout Professional Services best practices and policies. - Syllabus Topics: * Introduction and Discussion on Policy Configuration Best Practices * Deployment Considerations * Architectural/Design Considerations * Policy Configuration Review * Discuss Enterprise Manager and Centralized Configurations and Orchestration using Splunk® --- ### 158. Forescout – Certified Professional (FSCP) - URL: https://cyberlabarchive.com/courses/forescout-certified-professional-fscp - Category: Other Institutions - Downloadable Files: 1 (1.9 GB) - Formats: ZIP - Description: FSCP Training is a four-day course. Students learn advanced Forescout administration concepts including best practices for policy and advanced troubleshooting techniques. - Syllabus Topics: * General Review of FSCA Topics * Policy Best Practices * Policy Functionality * Advanced Product Topics – Licenses, Extended Modules and Redundancy * Advanced Product Topics – Certificates and Identity Tracking * Notifications * Plugin Tuning – HPS * Plugin Tuning – User Directory * Plugin Tuning – Switch * Advanced Troubleshooting * Customized Policy Examples --- ### 159. Forescout – Certified Associate (FSCA) - URL: https://cyberlabarchive.com/courses/forescout-certified-associate-fsca - Category: Other Institutions - Downloadable Files: 1 (3.7 GB) - Formats: ZIP - Description: Forescout Certified Associate training is a four-day course featuring instruction as well as hands-on labs in a simulated IT environment. Students learn how to establish security policies using all of our available tools. Students will classify and control assets in a network environment and observe how the Forescout platform monitors and protects an enterprise network. - Syllabus Topics: * Introduction * Terms and Architecture * Forescout Platform Installation * Console Overview * Platform Configuration * Platform Deployment * Policy Overview * Classification * Clarification * Compliance * Control * Forescout Platform Host Management * Forescout Platform Administration * Inventory, Assets, Reporting, Dashboard * Troubleshooting --- ### 160. My Network Training – MikroTik Bundle - URL: https://cyberlabarchive.com/courses/my-network-training-mikrotik-bundle - Category: Other Institutions - Downloadable Files: 1 (59.4 GB) - Formats: 7Z - Description: The MikroTik Bundle from My Network Training offers comprehensive access to all current and future MikroTik courses. Taught by Maher Haddad, a Certified MikroTik Trainer, the bundle includes over 50 courses covering topics such as routing, wireless networking, VPNs, security, and network automation, with hands-on labs for practical experience. The bundle is available via monthly or yearly subscriptions, providing continuous learning opportunities to help professionals prepare for MikroTik certification exams and enhance their networking skills. --- ### 161. Bolt IoT – Internet of Things and Machine Learning - URL: https://cyberlabarchive.com/courses/boltiot-internet-of-things-and-machine-learning - Category: Other Institutions - Downloadable Files: 1 (1.1 GB) - Formats: 7Z - Description: Online Training on Internet of Things and Machine Learning by Bolt IoT is a comprehensive course designed for beginners interested in IoT and ML. It covers a wide range of topics, including IoT fundamentals, cloud computing, web development, Python programming, and machine learning concepts like prediction and anomaly detection. The course includes hands-on projects, interactive lessons, and a kit with essential hardware. It is self-paced with lifetime access, making it suitable for students and professionals alike. A certificate is awarded upon completion. - Syllabus Topics: * Introduction * Introduction to the IoT platform * Getting Started with the IoT Cloud * Project 1: Building Your First IoT Sensor Project * HTML Programming Language and Web Development * Javascript Programming Language * Data Visualization and Analytics * Visualization with Google Library * APIs * Home Automation * VPS (Virtual Private Server) * Introduction to Linux OS * Python Programming Language * Bolt Python Library * Interfacing Sensor Over VPS * Project 11: Social Media of Things * Machine Learning * Prediction * Anomaly Detection * Certification Test --- ### 162. BlackPerl – Security Mastery with QRadar SIEM - URL: https://cyberlabarchive.com/courses/blackperl-qradar-pro - Category: Other Institutions - Downloadable Files: 1 (1.2 GB) - Formats: 7Z - Description: Master the art of security with QRadar SIEM: Become a security expert with QRadar SIEM: Master threat detection, response strategies, and data protection. Your journey to security excellence! In the “Security Mastery with QRadar SIEM” course, we provide you with an in-depth journey into the world of Security Information and Event Management (SIEM) with a focus on IBM QRadar. QRadar is a powerful tool for safeguarding your organization’s digital assets. Our course takes you through the intricacies of this robust SIEM solution, ensuring you have the skills and knowledge needed to protect your systems effectively. Unlock the full potential of IBM QRadar SIEM with our comprehensive course. In this deep dive, you’ll learn the ins and outs of threat detection, incident response, and data protection. Explore advanced analytics, real-time monitoring, and custom rule creation. Gain hands-on experience to detect and mitigate cybersecurity threats effectively. Equip yourself with the skills and knowledge needed to safeguard your organization. Dive into log management, network security, and compliance reporting. Elevate your security expertise to the next level with Security Mastery with QRadar SIEM! - Syllabus Topics: * Introduction * Setting up Your Lab * QRadar Architecture Discussion * Capture QRadar Snapshot * Prepare your Log Ingestion Pipeline * Build Your Detections * MITRE mapping and Usecase Management * Managing QRadar and Admin * Attack-Defend with QRadar * QRadar on AWS * QRadar Admin Master Quick Setup * QRadar Usecase Samples * Assessment --- ### 163. BlackPerl – Memory Forensics Masterclass for Incident Responders - URL: https://cyberlabarchive.com/courses/blackperl-mem-for-ir - Category: Other Institutions - Downloadable Files: 1 (8.3 GB) - Formats: 7Z - Description: Memory Forensics is an interesting topic and now a days a very crucial skill that Incident Responder should have to climb above the food chain. This course has been developed from absolute basics and with hands on practice for everyone. Memory forensics is an integral part of successful incident response investigations. Over the last year, incident response procedures have grown from investigating single computer images at time to investigating hundreds of thousand machines all at once. In the beginning of every investigation, the attacker is way ahead. Incident responders need to find ways to get ahead of the attackers quickly and kick them out of our networks. While there has been a lot of light shed on scaling hard drive artifact-based investigations to large numbers of endpoints, the memory forensics part has been the neglected part of classical forensics for a while. - Syllabus Topics: * Introduction * Memory Fundamentals * Windows Acquisition Tools * Windows Memory Leak * Linux Acquisition Tools * MacOS Acquisition Tools * Introduction to Analysis Tools * Introduction to Memory Management * Windows Memory Analysis * Linux Memory Analysis * Memory Injection Techniques * Hunting Malware in Memory * Case Studies * Docker Memory Forensics * Assessment --- ### 164. BlackPerl – Yara for Incident Responders - URL: https://cyberlabarchive.com/courses/blackperldfir-yara-for-ir - Category: Other Institutions - Downloadable Files: 1 (222 MB) - Formats: ZIP - Description: YARA rules are used to classify and identify malware samples by creating descriptions of malware families based on textual or binary patterns. YARA rules are malware detection patterns that are fully customizable to identify targeted attacks and security threats specific to your environment. There are many detection tools, EDR, IR application uses this awesome tool to increase their capability in DFIR. While we work on incident response, it’s a must for us that we increase our learning scope and level up the game of technical aspect. Learning Yara will help you to level up your incident response skills. - Syllabus Topics: * Introduction * Basics about Yara * Writing Yara Rule * Strings in Yara * Regular Expression Basics * Yara in Incident Response * Retro Threat-Hunt using Yara * Yara in Memory Forensics * Course Evaluation --- ### 165. StationX – The Complete Python for Hacking and Cyber Security Bundle - URL: https://cyberlabarchive.com/courses/stationx-the-complete-python-for-hacking-and-cyber-security-bundle - Category: StationX - Downloadable Files: 1 (18.9 GB) - Formats: ZIP - Description: Welcome to this great course bundle where you’ll learn python programming, ethical hacking and cyber security at the same time. The course bundle assumes you have NO prior knowledge in any of these topics, and by the end of it, you’ll be at a high intermediate level being able to combine each of these skills and write python programs to hack into computer systems exactly the same way that black hat hackers do. Not only that but you’ll be able to use the programming skills you learn here to write any program even if it has nothing to do with hacking. Moreover, you’ll know how to write secure code. --- ### 166. StationX – The Complete Ethical Hacking Course Bundle - URL: https://cyberlabarchive.com/courses/stationx-the-complete-ethical-hacking-course-bundle - Category: StationX - Downloadable Files: 1 (35.3 GB) - Formats: ZIP - Description: The Complete Ethical Hacking Course Bundle offered by StationX is a comprehensive training program designed for those looking to dive deep into the world of cybersecurity and ethical hacking. This bundle includes multiple courses that cover a broad range of topics essential for anyone aspiring to become a skilled ethical hacker or cybersecurity professional. The courses in this bundle teach you the fundamental concepts of cybersecurity, such as network security, penetration testing, Wi-Fi hacking, social engineering, and web application hacking. Each module is crafted by industry experts and provides hands-on experience through practical labs and real-world scenarios, helping you understand how to think like a hacker and protect against cyber threats effectively. --- ### 167. StationX – The CISSP and CISM Certification Bundle - URL: https://cyberlabarchive.com/courses/stationx-cissp-cism-bundle - Category: StationX - Downloadable Files: 1 (14 GB) - Formats: ZIP - Description: CISM is designed for information security managers, the certification emphasizes the relationship between information security and the business. It focused more on management and strategy, and only covers technical topics in a limited way. CISSP certification, is suitable for a variety of positions, from security managers to consultants. The certification focuses on the operations side of information security and threat response, the tactical aspects of security operations and goes much deeper into those areas. - Syllabus Topics: * Introduction to CISM certification. * 18 hours of training covering all 4 CISSP Domains. * 500 pages of downloadable slides for all 4 domains. * 400 links to free CISM resources * 150 CISM practice questions from all 4 Domains. * Prepare for the 2017 version of the Certified Information Security Manager (CISM) Certification Exam, which is what you will be tested on until the next planned CISM curriculum update by ISACA in 2022. * Introduction to CISSP certification. * 17.5 hours of training covering all 8 CISSP Domains. * 578 pages of downloadable slides for all 8 domains. * Downloadable CISSP study plan, CISSP CAT exam info-graphic. * Links to 1,000’s of free CPE’s, to keep your CISSP certification active. * 1000 CISSP practice questions from all 8 Domains. * Prepare for the 2018 version of the Certified Information Systems Security Professional (CISSP) Certification Exam, which is what you will be tested on until the next CISSP curriculum update in 2021. --- ### 168. Ringzer0 – Advanced Browser Exploitation - URL: https://cyberlabarchive.com/courses/ringzer0-advanced-browser-exploitation - Category: Other Institutions - Downloadable Files: 1 (11 MB) - Formats: ZIP - Description: Web browsers are among the most utilized consumer facing software products on the planet. As the ubiquitous gateway to the internet, browsers introduce significant risk to the integrity of personal computing devices. In the race to protect users while advancing web technology, premiere browsers have become increasingly complex targets to compromise. Over the course of this training, students will receive a thorough introduction to vulnerability research as it pertains to modern web browsers. This includes identifying, evaluating, and weaponizing the latest vulnerability patterns via the exploitation of several recently patched vulnerabilities. Through this, students will experience the end to end process of developing memory corruption based exploits against these high value targets. This course will focus specifically on Google Chrome and Apple Safari. - Syllabus Topics: * Browser Architecture (General, Chrome, Safari/Webkit) * JavaScript Internals in Exploitation (General, V8, JSC) * JavaScript JIT Compilers (General, V8) * JavaScript Exploit Engineering (General, V8, JSC) --- ### 169. TCM Security – Academy Live Workshops - URL: https://cyberlabarchive.com/courses/tcm-academy-live-workshops - Category: TCM Security - Downloadable Files: 1 (1.3 GB) - Formats: ZIP - Description: Go beyond the course materials with bi-monthly livestreamed workshops taught by your favorite Academy instructors. These interactive sessions will be hosted on the Academy platform and will not be available on our public social media channels. Topics for the workshops will rotate, please check the curriculum below for the upcoming schedule. - Syllabus Topics: * OSINT 101 – Part 2 * OSINT 101 – Part 1 * IoT Hacking 101 – Part 2: Reverse Engineering Firmware to Hunt for Vulnerabilities * IoT Hacking 101 – Part 1: Setting up Raspberry Pi and Identifying Hardware Communication Pins --- ### 170. TCM Security – GRC Analyst Master Class - URL: https://cyberlabarchive.com/courses/tcm-grc - Category: TCM Security - Downloadable Files: 1 (3.1 GB) - Formats: ZIP - Description: Welcome to the Governance, Risk, and Compliance (GRC) Analyst Master Class. This class assumes no prior background knowledge and is setup to give you a full scope understanding and the practical skills needed to be an effective GRC Analyst. Cybersecurity workforce development is focused on red team and blue team skills, but GRC is terribly underserved for training. This course fills that gap by offering practical application of risk, audit, policy development, and security awareness skills needed for modern GRC analysts. - Syllabus Topics: * Getting Started * A Cybersecurity Primer * Compliance and Audit Work * Security Awareness Work * Cybersecurity Risk Work * Information Security Governance Work * Getting a GRC Analyst Job * Course Conclusions --- ### 171. TCM Security – Detection Engineering for Beginners - URL: https://cyberlabarchive.com/courses/tcm-detection-engineering-for-beginners - Category: TCM Security - Downloadable Files: 1 (2 GB) - Formats: ZIP - Description: Detection Engineering for Beginners teaches core concepts and skills to start thinking and working as a Detection Engineer! This course will first teach the theory behind security operations and detection engineering. We’ll then start building out our home lab using VirtualBox and Elastic’s security offering. Then we’ll run through three different attack scenarios, each more complex than the one prior. We’ll make detections off of our attacks, and learn how to document our detections. Next we’ll dive more into coding and Python by writing validation scripts and learning out to interact with Elastic through their API. Wrapping everything up, we’ll host all our detections on GitHub and sync with Elastic through our own GitHub Action automations. As a cherry on top, we’ll have a final section on how to write scripts to gather important metrics and visualizations. - Syllabus Topics: * Introduction * Theory * Lab Setup * Elastic Setup * Attack Scenario 1 * Attack Scenario 2 * Attack Scenario 3 * Atomic Red Team * TOML * Elastic API * GitHub * Metrics * Conclusion --- ### 172. TCM Security – Practical Windows Forensics - URL: https://cyberlabarchive.com/courses/tcm-practical-windows-forensics - Category: TCM Security - Downloadable Files: 1 (2.8 GB) - Formats: ZIP - Description: The objective of this course is to show students how to perform a full digital forensic investigation of a Windows system in a complete DIY setup. The course covers a full digital forensic investigation of a Windows system. It begins with the simple preparation of our lab, which consists of setting up a “victim” VM and a forensic workstation. We’ll then run an attack simulation script on the victim VM that simulates attack patterns as commonly observed by threat actors in the industry to create a realistic setting for our investigation. From there, we’ll kick off the forensic process, beginning with the data collection, examination and extraction before diving deeper into the analysis of the information at hand. - Syllabus Topics: * Welcome to Practical Windows Forensics (PWF) * Lab Requirements * Setting up your forensic workstation * Prepare your target system * Data collection process * Examination of the forensic data * Disk analysis introduction * Windows registry analysis * User behavior analysis * Overview of disk structures, partitions and file systems * Analysis of the Master File Table (MFT) * Finding evidence of deleted files with USN Journal analysis * Analyzing evidence of program execution on Windows systems * Finding evidence of persistence mechanisms * Uncover malicious activity with Windows event log analysis * Windows memory forensic analysis * Kitchen-Sink analysis with Super Timelines * Reporting * Final --- ### 173. TCM Security – Practical Phishing Campaigns - URL: https://cyberlabarchive.com/courses/tcm-practical-phishing-campaigns - Category: TCM Security - Downloadable Files: 1 (488 MB) - Formats: ZIP - Description: This specialized and comprehensive course is designed to provide an in-depth understanding of cybersecurity practices, with a focus on ethical hacking techniques to safeguard digital infrastructure. Through a series of detailed modules, participants will delve into modern security architectures, learn how to set up and manage phishing simulations using tools like GoPhish, bypass multi-factor authentication with Evilginx, and explore advanced phishing and vishing strategies. The curriculum also covers essential setup procedures for domain and email registration, configurations for AWS EC2 instances, and the use of SMS phishing (smishing) for security testing. Furthermore, the course emphasizes the importance of reporting, documentation, and ethical considerations in cybersecurity operations. - Syllabus Topics: * The Perimeter – A Cat and Mouse Game * Domain Registration * Email Registration * Gophish – Basic Phishing * Gophish – Hardening and Advanced Techniques * Evilginx – MFA Bypass * Evilgophish – SMS Phishing * Vishing Strategies * Reporting, Documentation, and Cleaning Up * Thank You! --- ### 174. TCM Security – Practical Web Hacking - URL: https://cyberlabarchive.com/courses/tcm-practical-web-hacking - Category: TCM Security - Downloadable Files: 1 (1.8 GB) - Formats: ZIP - Description: Welcome to this course on Practical Web Hacking. This course follows on from the Practical Bug Bounty course and will take you deeper into the world of finding and exploiting vulnerabilities in web applications. It’s recommended that you have completed the Practical Bug Bounty course or at least one year’s worth of experience in hacking web applications before you take this course. In this course, you will develop a deeper understanding of how web attacks work, learn to craft custom payloads and build a methodology for finding and exploiting more complex vulnerabilities. - Syllabus Topics: * Introduction * Authentication * Access Control * SSRF (Server-Side Request Forgery) * SQL Injection * File Inclusion * XXE (XML External Entity Injection) * XSS / JavaScript Injection * JWTs (JSON Web Tokens) * Mass Assignment * WebSockets * Open Redirects * Race Conditions * Capstone Challenge --- ### 175. TCM Security – Practical Web Application Security & Testing - URL: https://cyberlabarchive.com/courses/tcm-practical-web-application-security-and-testing - Category: TCM Security - Downloadable Files: 1 (2.7 GB) - Formats: ZIP - Description: Practical Web Application Security and Testing is an entry-level course on web application technologies, security considerations for web application development, and the web application penetration testing process. We begin with the basics of HTTP, servers, and clients, before moving through the OWASP Top 10 on our way to a full demonstration penetration test. We also cover the reporting process for web application assessments, so you’re prepared not only to conduct security assessments on web applications but also clearly and effectively communicate your findings. - Syllabus Topics: * Prologue * Setup * Web Application Concepts * Server-Side Webapps * The OWASP Top 10 * Client-Side Webapps * Webapp Pentesting Methodology * Juice Shop Pentest * Reporting * Final Thoughts --- ### 176. TCM Security – Practical Bug Bounty - URL: https://cyberlabarchive.com/courses/tcm-practical-bug-bounty - Category: TCM Security - Downloadable Files: 1 (2.5 GB) - Formats: ZIP - Description: Welcome to the Practical Bug Bounty course crafted by TCM Security and Intigriti. This comprehensive course dives into identifying and responsibly exploiting application vulnerabilities, laying a solid foundation in Web Application Architecture and delving into the crucial OWASP Top 10. Participants will distinguish Bug Bounty Hunting from Penetration Testing, engage in hands-on simulations, and master key tools like Burp Suite. - Syllabus Topics: * Introduction * Web Application Security * Before We Attack * Lab Build * Web Application Technologies * Reconnaissance and Information Gathering * Authentication and Authorization Attacks * Injection Attacks * Automated Tools * Other Common Vulnerabilities * Reporting * Evasion Techniques * Wrapping up --- ### 177. TCM Security – Practical API Hacking - URL: https://cyberlabarchive.com/courses/tcm-hacking-apis - Category: TCM Security - Downloadable Files: 1 (2.8 GB) - Formats: ZIP - Description: Practical API Hacking provides you with everything you need to start hacking APIs. This course was designed for beginners and those familiar with web application hacking but want to expand their skill set. The course covers industry-standard tools such as Burp Suite and Postman, and how to find and exploit vulnerabilities common to applications powered by APIs. Throughout the course there are demonstration labs to help you understand the theory, and challenges to make sure you get hands-on experience too. - Syllabus Topics: * Welcome to the Course! * Introduction * Lab Setup * Enumerating APIs * Attacking Authorization * Attacking Authentication * Injection * Mid-course Capstone * Mass Assignment * Excessive Data Exposure * SSRF – Server-side Request Forgery * Chaining Vulnerabilities * Final Capstone --- ### 178. TCM Security – Mobile Application Penetration Testing - URL: https://cyberlabarchive.com/courses/tcm-mobile-application-penetration-testing - Category: TCM Security - Downloadable Files: 1 (2.8 GB) - Formats: ZIP - Description: This course focuses on Android and iOS Mobile Application Penetration testing. The course will demonstrate common techniques to extract sensitive data from Android and iOS Application such as API Keys, stored secrets, and firebase databases, and provide a solid foundation for continuing a career as a Mobile Application Penetration Tester. This course will cover the common methodologies and practices you can utilize to start Bug Bounty hunting mobile applications. - Syllabus Topics: * Introduction and Course Resources * Penetration Testing Process * Android Intro and Security Architecture * Android Lab Setup * Android Static Analysis * Android Dynamic Analysis * Android Bug Bounty Hunt * BONUS – Android Red Teaming * iOS Introduction and Architecture * iOS Lab Setup * iOS Static Analysis * iOS Dynamic Analysis/Jailbreaking * iOS Bug Bounty Hunt --- ### 179. TCM Security – Linux Privilege Escalation for Beginners - URL: https://cyberlabarchive.com/courses/tcm-linux-privilege-escalation - Category: TCM Security - Downloadable Files: 1 (1.4 GB) - Formats: ZIP - Description: This course focuses on Linux Privilege Escalation tactics and techniques designed to help you improve your privilege escalation game. Students should take this course if they are interested in: Gaining a better understanding of privilege escalation techniques Improving Capture the Flag skillset Preparing for certifications such as the PNPT, OSCP, eCPPT, CEH, etc. - Syllabus Topics: * Introduction * Lab Overview & Initial Access * Initial Enumeration * Exploring Automated Tools * Escalation Path: Kernel Exploits * Escalation Path: Passwords & File Permissions * Escalation Path: Sudo * Escalation Path: SUID * Escalation Path: Other SUID Escalation * Escalation Path: Capabilities * Escalation Path: Scheduled Tasks * Escalation Path: NFS Root Squashing * Escalation Path: Docker * Capstone Challenge * Wrapping Up --- ### 180. TCM Security – Windows Privilege Escalation for Beginners - URL: https://cyberlabarchive.com/courses/tcm-windows-privilege-escalation-for-beginners - Category: TCM Security - Downloadable Files: 1 (1.4 GB) - Formats: ZIP - Description: This course focuses on Windows Privilege Escalation tactics and techniques designed to help you improve your privilege escalation game. Students should take this course if they are interested in: Gaining a better understanding of privilege escalation techniques Improving Capture the Flag skillset Preparing for certifications such as the PNPT, OSCP, eCPPT, CEH, etc. - Syllabus Topics: * Introduction * Gaining a Foothold * Initial Enumeration * Exploring Automated Tools * Escalation Path: Kernel Exploits * Escalation Path: Passwords and Port Forwarding * Escalation Path: Windows Subsystem for Linux * Impersonation and Potato Attacks * Escalation Path: getsystem * Escalation Path: RunAs * Additional Labs * Escalation Path: Registry * Escalation Path: Executable Files * Escalation Path: Startup Applications * Escalation Path: DLL Hijacking * Escalation Path: Service Permissions (Paths) * Escalation Path: CVE-2019-1388 * Capstone Challenge * Conclusion --- ### 181. TCM Security – Programming with AI - URL: https://cyberlabarchive.com/courses/tcm-programming-with-ai - Category: TCM Security - Downloadable Files: 1 (336 MB) - Formats: ZIP - Description: This course is designed to introduce beginner-level programmers to the fundamentals of writing clean, efficient code with the help of AI-based programming assistants. It covers best practices in coding, prompt engineering for AI tools, and techniques to accelerate the development process. --- ### 182. TCM Security – Soft Skills for the Job Market - URL: https://cyberlabarchive.com/courses/soft-skills-for-the-job-market - Category: TCM Security - Downloadable Files: 1 (4.8 GB) - Formats: ZIP - Description: This comprehensive course is meticulously designed to equip job seekers with essential soft skills, communication techniques, and job application strategies required to excel in today’s competitive job market. Through a series of engaging modules, participants will learn effective communication, professional etiquette, resume writing, job hunting tactics, interview preparation, and unique skills to stand out to potential employers. Additionally, the course offers practical guidance on creating a personal website and leveraging social networking for professional growth. - Syllabus Topics: * Introduction * Communication * Resume Writing * Applying for Jobs * Interviewing * Stand-out Skills * Building a Website --- ### 183. TCM Security – Open-Source Intelligence (OSINT) Fundamentals - URL: https://cyberlabarchive.com/courses/tcm-osint-fundamentals - Category: TCM Security - Downloadable Files: 1 (2.2 GB) - Formats: ZIP - Description: This course focuses on Open Source Intelligence (OSINT) tactics and techniques designed to help you improve your investigative game. Students should take this course if they are interested in: Gaining a better understanding of OSINT techniques Improving investigative skillset Improving overall research methodology Improving Personal OPSEC - Syllabus Topics: * Introduction * OSINT Overview * Note Keeping * Sock Puppets * Search Engine OSINT * Image OSINT * Email OSINT * Password OSINT * Username OSINT * People OSINT * Social Media OSINT * Website OSINT * Business OSINT * Wireless OSINT * Building an OSINT Lab * Working with OSINT Tools * OSINT Automation Foundations * Course Challenge * Case Studies * OSINT Report Writing * Conclusion & Additional Resources --- ### 184. TCM Security – The External Pentest Playbook - URL: https://cyberlabarchive.com/courses/tcm-external-pentest-playbook - Category: TCM Security - Downloadable Files: 1 (695 MB) - Formats: ZIP - Description: This course focuses on external penetration testing tactics and techniques designed to help you improve your pentest game. Students should take this course if they are interested in: Gaining a better understanding of the external pentest attack methodology and mindset Improving overall pentest skillset and client relations Crushing their next pentest job interview - Syllabus Topics: * Introduction * Before We Start * Kicking Off * Information Gathering / OSINT * Attacking Login Portals * Escalating Access * Report Writing * Common Pentest Findings * Wrapping Up * Conclusion --- ### 185. TCM Security – C# 101 for Hackers - URL: https://cyberlabarchive.com/courses/tcm-c-sharp-101-for-hackers - Category: TCM Security - Downloadable Files: 1 (730 MB) - Formats: ZIP - Description: Welcome to C# 101 for Hackers. This course introduces students to C# and the .NET framework. Students will learn to install and configure C# and .NET for development and concentrate on learning the language by writing C# console applications. Topics covered include the basic structure and syntax of C#, an introduction to the many core and fundamental statements and practices within C#, and leverage what’s discussed with examples that students can implement, re-use, and learn from further. - Syllabus Topics: * Welcome * Introduction * Polyglot Notebooks & Project Downloads * Environment Setup * C# Basics * Working with Data * Programming Logic * Data Handling: File I/O, Collections, and Web Interactions * Asynchronous & Parallel Programming Concepts * Capstone Project – Brute-Force Password Cracker * Wrap Up --- ### 186. TCM Security – Beginner’s Guide to IoT and Hardware Hacking - URL: https://cyberlabarchive.com/courses/tcm-beginner-s-guide-to-iot-and-hardware-hacking - Category: TCM Security - Downloadable Files: 1 (5.7 GB) - Formats: ZIP - Description: The Beginner’s Guide to IoT and Hardware Hacking course teaches foundational skills and techniques required to get started performing security research and testing on IoT devices and hardware. This course focuses mainly on the hardware aspects of IoT hacking and how to use the underlying access to physical hardware to aid in and amplify the ability to hunt for vulnerabilities. While this course is a “beginners” level for IoT and Hardware Hacking the difficulty level as an overall cybersecurity course is intermediate. This course is open to everyone but has been specifically created for students who are familiar with software-based penetration testing (such as network, web and mobile) and want to learn how to bridge those skills over to IoT and Hardware testing. - Syllabus Topics: * Course Introduction * Electrical Engineering For Hackers 101 * Hands on with PCBs and Multimeters * Electrical Engineering for Hackers 201 * Hands on with Logic Analyzers and UART * Initial Recon and OSINT * UART Shell and Live Enumeration * SPI and Firmware Extraction/Analysis * Reverse Engineering Firmware * End of Course Challenge and Course Wrap-Up --- ### 187. TCM Security – Practical Malware Analysis & Triage - URL: https://cyberlabarchive.com/courses/tcm-practical-malware-analysis-triage - Category: TCM Security - Downloadable Files: 1 (4.6 GB) - Formats: ZIP - Description: Arm yourself with knowledge and bring the fight to the bad guys! Practical Malware Analysis & Triage (PMAT) brings the state of the art of malware analysis to you in engaging instructional videos and custom-made, practical labs. Welcome to Practical Malware Analysis & Triage. I’m Matt, aka HuskyHacks, and I’m excited to be your instructor for this course. I had a blast putting it together and I hope that you will come along with me and learn the art of splicing, slicing, inspecting, and dissecting malware samples. --- ### 188. TCM Security – Security Operations (SOC) 101 - URL: https://cyberlabarchive.com/courses/tcm-security-operations-soc-101 - Category: TCM Security - Downloadable Files: 1 (5.1 GB) - Formats: ZIP - Description: This course aims to equip students with all of the fundamental security operations knowledge and practical skills needed in order to achieve and excel in a T1 or T2 SOC Analyst position. By covering topics such as phishing analysis, incident response procedures, threat detection techniques, log analysis, SIEM management, and security tool utilization, students will gain the essential competencies required to effectively monitor, analyze, and respond to security incidents within a SOC environment. Students will be able to actively engage with the course material through bite-sized video demonstrations, written materials and references, quizzes to assess comprehension, and practical exercises that simulate real-world scenarios. - Syllabus Topics: * Introduction * Lab Setup * Security Operations Fundamentals * Phishing Analysis * Network Security * Endpoint Security * Security Information and Event Management (SIEM) * Threat Intelligence * Digital Forensics * Incident Response * Conclusion --- ### 189. TCM Security – Rust 101 - URL: https://cyberlabarchive.com/courses/tcm-rust-101 - Category: TCM Security - Downloadable Files: 1 (776 MB) - Formats: ZIP - Description: Rust 101 provides you with everything you need to start learning the Rust programming language. This course was designed for complete beginners and those familiar with coding but want to expand their skill set. The course covers core Rust topics, such as primitives, variables, functions, error handling, memory management, ownership, and so much more. - Syllabus Topics: * Introduction * Installing Rust * Creating Our First Project * Hello World * Primitives (Scalar Types) * Variables * Challenge A * Primitives (Compound Types) * Strings * User Input * Math * Dependencies * Challenge B * Control Flow * Functions * Challenge C * Other Items * Memory Management * File Input & Output * Error Handling * Tying It All Together * Conclusion --- ### 190. TCM Security – Linux 101 - URL: https://cyberlabarchive.com/courses/tcm-linux-101 - Category: TCM Security - Downloadable Files: 1 (1 GB) - Formats: ZIP - Description: Linux 101 provides you with everything you need to know to start using Linux. This course was designed for those having no experience using Linux, but wanting to learn how to use it. The course is packed with all the content usually taught in an introductory university course, but without all the filler content of a university course. It contains essential, practical information gained from over 20 years of experience using Linux and Unix systems for daily work. - Syllabus Topics: * Introduction * Getting Started * Files and the Filesystem * Users and Groups * Installing Software * Shells * More Utilities * Text Editors * Process Management * Regular Expressions * Scripting * Conclusion --- ### 191. TCM Security – Practical Ethical Hacking - URL: https://cyberlabarchive.com/courses/tcm-practical-ethical-hacking-the-complete-course - Category: TCM Security - Downloadable Files: 1 (67.1 GB) - Formats: RAR - Description: Welcome to this course on Practical Ethical Hacking . To enjoy this course, you need nothing but a positive attitude and a desire to learn. No prior hacking knowledge is required. In this course, you will learn the practical side of ethical hacking. Too many courses teach students tools and concepts that are never used in the real world. In this course, we will focus only on tools and topics that will make you successful as an ethical hacker. The course is incredibly hands on and will cover many foundational topics. --- ### 192. TCM Security – Movement, Pivoting, and Persistence - URL: https://cyberlabarchive.com/courses/tcm-movement-pivoting-and-persistence-for-pentesters-and-ethical-hackers - Category: TCM Security - Downloadable Files: 1 (16.1 GB) - Formats: RAR - Description: Movement, Pivoting, and Persistence for Pentesters and Ethical Hackers is the next step in YOUR penetration testing and ethical hacking journey. Most engagements are conducted remotely, meaning that the tester must have the ability to move about freely from outside of the network into it. We do this using various techniques. Some of the simplest can be utilizing a compromised password to access a desktop environment via remote desktop and attempting to access other machines with those credentials. More complicated techniques include utilizing compromised endpoints to act as a proxy for us, forwarding traffic from internal targets back to our own. - Syllabus Topics: * Username and Password List Generation * Password Spraying * Email Phishing * Command and Control (C2) * Credential Harvesting and Passing * Routing, Port Forwarding, SOCKS Proxies, and Bind Usage * Offensive PowerShell * How the Misconfigurations We See in Real Pentests Happen * Common Remediation Strategies You Can Use to Report to Clients --- ### 193. TCM Security – Python 201 For Hackers - URL: https://cyberlabarchive.com/courses/tcm-python-201-for-hackers - Category: TCM Security - Downloadable Files: 1 (1.6 GB) - Formats: ZIP - Description: The Python 201 for Hackers course builds upon the Python 101 for Hackers course by moving beyond the basics. You will learn more advanced programming concepts and techniques, with a focus on how to use and apply Python as a Windows hacking tool. Prior Python programming knowledge is required to be successful in this course. The Python 201 for Hackers course content will not cover or explain introductory Python concepts or techniques. --- ### 194. TCM Security – Python 101 For Hackers - URL: https://cyberlabarchive.com/courses/tcm-python-101-for-hackers - Category: TCM Security - Downloadable Files: 1 (1 GB) - Formats: ZIP - Description: The Python 101 for Hackers course teaches an introduction to Python programming and concepts, with a focus on techniques, modules and examples which are useful for a hacker. No prior Python programming knowledge is required to be successful in this introductory course. - Syllabus Topics: * Introduction * Setup * Python 101 * Extending Python * Automating with Python * Closing --- ### 195. HackTricks – AWS Red Team Expert (ARTE) - URL: https://cyberlabarchive.com/courses/hacktricks-aws-red-team-expert-arte - Category: Other Institutions - Downloadable Files: 1 (15.5 GB) - Formats: ZIP - Description: Starting from the very basics deepen your expertise in AWS security with a comprehensive exploration of advanced concepts, including in-depth identity and access management strategies, encryption methods, sophisticated networking defenses and learn how to spot and exploit misconfigurations in more than 20 common AWS services. Master the application of specialized Red Team and Whitebox tactics in AWS contexts, enabling the detection and exploitation of complex security flaws. This certification begins at the basics and progresses to expert level, eliminating the need for prior completion of the ARTA certification. Energize your cloud security career by obtaining the prestigious HackTricks ARTE (AWS Red Team Expert) certification. This highly sought-after credential validates your expertise in AWS security and red teaming, standing out in the field and opening up new career opportunities. - Syllabus Topics: * Intro to AWS * Exploitation of AWS Services * Methodologies * Common Detection Mechanisms --- ### 196. OpSecX – Web Security Bundle - URL: https://cyberlabarchive.com/courses/opsecx-web-security-bundle - Category: Other Institutions - Downloadable Files: 1 (2.1 GB) - Formats: ZIP - Description: The Web Security Bundle course offered by OpsecX is a comprehensive training package designed for individuals aiming to master the intricacies of web security. This course bundle covers a broad range of topics, from the basics of web application security to advanced concepts and practical techniques used in real-world scenarios. Participants will gain hands-on experience in identifying, exploiting, and mitigating various web vulnerabilities, including SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), and more. The course also delves into the OWASP Top Ten security risks, offering in-depth analysis and defensive strategies. The training is suitable for security professionals, developers, and anyone interested in building a strong foundation in web security. By the end of the course, learners will be equipped with the knowledge and skills necessary to secure web applications effectively and protect them from a wide array of cyber threats. --- ### 197. Australian OSINT Symposium - URL: https://cyberlabarchive.com/courses/australian-osint-symposium - Category: Other Institutions - Downloadable Files: 1 (1.2 GB) - Formats: ZIP - Description: The Australian OSINT Symposium is a premier annual event dedicated to open-source intelligence (OSINT). This event bring together practitioners, investigators, and OSINT enthusiasts to share experiences, collaborate on best practices, and enhance intelligence outcomes. - Syllabus Topics: * Geo locating from imagery * Investigating information campaigns * Geo spatial analysis & satellite imagery * Developing OSINT capability for organisations * Pivoting in an all-source enviroment & case work * Corporate intelligence & complex due-diligence * Online safety & personal exposure * Illegal wildlife trade, AML & OSINT investigations * Building disinformation systems for Twitter --- ### 198. Belkasoft – iOS Forensics with Belkasoft - URL: https://cyberlabarchive.com/courses/ios-forensics-with-belkasoft - Category: Other Institutions - Downloadable Files: 1 (5.3 GB) - Formats: ZIP - Description: This course is designed for digital forensics investigators who need to deal with iOS devices in their work and want to enhance their knowledge and gain hands-on experience in iOS acquisition and analysis. --- ### 199. Belkasoft – Android Forensics with Belkasoft - URL: https://cyberlabarchive.com/courses/android-forensics-with-belkasoft - Category: Other Institutions - Downloadable Files: 1 (1.4 GB) - Formats: ZIP - Description: This course is designed for digital forensics investigators who need to deal with Android devices in their work and want to enhance their knowledge and gain hands-on experience in Android acquisition and analysis. --- ### 200. EC Council: Disaster Recovery Professional (EDRP) - URL: https://cyberlabarchive.com/courses/disaster-recovery-professional-edrp - Category: EC-Council - Downloadable Files: 2 (19.2 GB) - Formats: ZIP - Description: EC Council Disaster Recovery Professional (EDRP) is a compressive professional course that teaches students how to develop enterprise-wide business continuity and disaster recovery plans. It teaches professionals various methods of identifying vulnerabilities and taking countermeasures against the said vulnerabilities. The professionals will learn how to secure their data by putting policies and procedures in place, and how to recover and restore their organization’s critical data in the aftermath of a disaster. - Syllabus Topics: * Introduction to Disaster Recovery and Business Continuity * Business Continuity Management * Risk Assessment * Business Impact Analysis * Business Continuity Plan * Data Backup * Data Recovery Strategies * Virtualization Bases Disaster Recovery * System Recovery * Centralized and Decentralized Computing * Disaster Recovery Planning Process * BCP Testing, Maintenance, and Training --- ### 201. EC Council: Certified Chief Information Security Officer (CCISO) - URL: https://cyberlabarchive.com/courses/certified-chief-information-security-officer-cciso - Category: EC-Council - Downloadable Files: 4 (23.3 GB) - Formats: ZIP - Description: Certified Chief Information Security Officer (C|CISO) is executive-focused, designed specifically to train and certify leaders who are responsible for developing and leading an organization’s cybersecurity strategy. The C|CISO program ensures participants gain not only a deep understanding of cybersecurity but also the leadership, financial, and strategic planning skills necessary to succeed in an executive role. - Syllabus Topics: * Information Security Governance and Strategy * Risk Management, Compliance and GRC * AI, Automation & Emerging Technologies * Leadership, Ethics, and Executive Presence * Financial Management and Vendor Governance * Security Operations, SOC, and Incident Management * Technical & Architecture Foundations * Privacy, Awareness and Security Culture --- ### 202. Udemy – The complete iOS Pentesting & Bug Bounty Course - URL: https://cyberlabarchive.com/courses/udemy-the-complete-ios-pentesting-bug-bounty-course - Category: Other Institutions - Downloadable Files: 1 (3.2 GB) - Formats: ZIP - Description: This course covers about how security works in iOS devices and how vulnerabilities can be found in iOS applications. The course starts with the basics of how you can set up your hacking environment and then gradually moves on to how security works in iOS Applications. The course also shows you the different types of Jailbreak and how you can Jailbreak your iOS Device. The course also covers OWASP Mobile Top 10 and would cover all the categories of OWASP Mobile Top 10 with practical examples. The course also includes a detailed overview of iOS Security such as Keychain, Device Management, Data Protection etc. The major section of iOS Pentesting is the Static and the Dynamic Analysis where most of the vulnerabilities would be covered with practical approaches. These approaches can also be used to find vulnerabilities in bug bounty programs. At the end of the course, you would be exposed to certain Tips and Tricks that will make your upgrade iOS Pentesting skills. These tips will help you to differentiate yourself from others. This course also includes the Breakdown of some Hackerone Reports which are found and submitted by other hackers for better understanding. - Syllabus Topics: * Beginners who want to learn about iOS Penetration Testing * Mobile Application Developers * Security Researchers * Beginners who want to hunt vulnerabilities & security bugs in iOS Applications --- ### 203. Pentester Academy – Windows System Programming: Fundamentals - URL: https://cyberlabarchive.com/courses/pa-windows-system-programming-fundamentals - Category: Pentester Academy - Downloadable Files: 1 (438 MB) - Formats: 7Z - Description: Windows System Programming: Fundamentals course will take you through the basics of getting started with system programming on Windows. --- ### 204. Pentester Academy – Windows Process Injection for Red-Blue Teams - URL: https://cyberlabarchive.com/courses/pa-windows-process-injection-for-red-blue-teams - Category: Pentester Academy - Downloadable Files: 1 (640 MB) - Formats: ZIP - Description: In this course, we will understand the basics of Windows processes, virtual memory and different techniques to enumerate processes. Then we will look at the fundamentals of process injection and try out techniques like remote Thread Injection, APC, Thread Hijacking and Process Hollowing. This course is very practical with code examples to illustrate each technique! --- ### 205. Pentester Academy – Reverse Engineering for ARM Platforms - URL: https://cyberlabarchive.com/courses/pa-reverse-engineering-for-arm-platforms - Category: Pentester Academy - Downloadable Files: 1 (486 MB) - Formats: 7Z - Description: This course will familiarize students with all aspects of writing Assembly code on the ARM platforms. By the end of this course students will be able to understand and write Assembly programs on the ARM platform. This includes being able to understand programs that were created by a high level language compiler. This course is fundamental for  anyone wishing to do reverse engineering on the ARM platforms. The BeagleBone family of boards is used in this course. --- ### 206. Pentester Academy – DevSecOps: Insecure Docker Registry - URL: https://cyberlabarchive.com/courses/pa-devsecops-insecure-docker-registry - Category: Pentester Academy - Downloadable Files: 1 (70 MB) - Formats: ZIP - Description: Many organizations deploy private registry servers in their internal/external application development/deployment environment. Unfortunately, most often, these servers are not securely deployed. In this entirely lab based course, we will look at various configurational vulnerabilities in docker registry servers. In these labs we have used common deployment architectures of a registry server and shown how an attacker can get valuable information out of images stored on the server. --- ### 207. Pentester Academy – ARM Assembly - URL: https://cyberlabarchive.com/courses/pa-arm-assembly - Category: Pentester Academy - Downloadable Files: 1 (843 MB) - Formats: ZIP - Description: ARM processors now power billions of mobile and IoT devices today! Understanding the basics of ARM assembly provides the foundation for diving deep into ARM exploitation and reverse engineering. This course focuses on teaching you the basics of ARM assembly! --- ### 208. Pentester Academy – Memcache Reconnaissance for Red-Blue Teams - URL: https://cyberlabarchive.com/courses/memcache-reconnaissance-for-red-blue-teams - Category: Pentester Academy - Downloadable Files: 1 (328 MB) - Formats: 7Z - Description: Reconnaissance the first and probably most important step of pentesting and red-blue teaming exercises. A well done recon can help prioritize which systems to go behind first and to dedicate more time and resources. In recent times, there has been a lot of technological progress in fields in web development, cloud tech, machine learning etc. which has led to a fundamental change in how networks are created and run. There has also been an introduction of a ton of new network and application components because of this. The focus of this course to help attendees understand these new technologies and components better. --- ### 209. Pentester Academy – VoIP Traffic Analysis - URL: https://cyberlabarchive.com/courses/pa-voip-traffic-analysis - Category: Pentester Academy - Downloadable Files: 1 (1.7 GB) - Formats: ZIP - Description: Today, all enterprises, large and small depend on VoIP to provide voice communication both internally and externally to the company. Most organizations even have dedicated Voice VLANs and/or physical ports to carry VoIP traffic. Hence, it is important to understand VoIP traffic, security concerns and its encryption/decryption for network forensics and Red-Blue teaming purposes. This course does exactly that! --- ### 210. Pentester Academy – Traffic Analysis: TSHARK Unleashed - URL: https://cyberlabarchive.com/courses/pa-traffic-analysis-tshark-unleashed - Category: Pentester Academy - Downloadable Files: 1 (813 MB) - Formats: ZIP - Description: Most of us have used Wireshark either academically or professionally for traffic analysis. Its a great tool for microscopic analysis of what is happening in the network. However, its greatest strength is also its greatest weakness i.e. it is extremely difficult to do macroscopic analysis, create custom reports, extract only certain fields from packets for offline analysis etc. This is where Tshark comes in! Tshark is a command line tool created by the Wireshark team and shares the same powerful parsing engine as Wireshark. It is capable of doing most things we’ve come to love Wireshark for, but with the “from command line” advantage. This makes it ideal for batch analysis, offline processing and routine automation of traffic analysis tasks. In this course, we will explore many of these capabilities. It is assumed you have a basic working knowledge of Wireshark and traffic analysis. --- ### 211. Pentester Academy – Reverse Engineering Win32 Applications - URL: https://cyberlabarchive.com/courses/pa-reverse-engineering-win32-applications - Category: Pentester Academy - Downloadable Files: 1 (2.9 GB) - Formats: ZIP - Description: This course will familiarize students with all aspects of reverse engineering (reversing) Windows 32-bit applications for the purposes of locating flaws and developing exploits. By the end of this course students will be able to understand, locate, and exploit all of the common flows in 32-bit Windows software. These flaws include, but are not limited to, buffer overflow, heap overflows, format string flaws, section overflows, and kernel flaws. Along the way students will gain a better understanding of how Windows 32-bit applications work and will be exposed to a number of common reversing tools such as specialized debuggers (IDA Pro) and fuzzers. As always, you will also learn how to leverage Python and other scripting tools in order to automate the discovery and exploitation of software flaws. --- ### 212. Pentester Academy – Reverse Engineering Linux 32-bit Applications - URL: https://cyberlabarchive.com/courses/pa-reverse-engineering-linux-32-bit-applications - Category: Pentester Academy - Downloadable Files: 1 (2.7 GB) - Formats: ZIP - Description: This course will familiarize students with all aspects of reverse engineering (reversing) Linux 32-bit applications for the purposes of locating flaws and developing exploits. By the end of this course students will be able to understand, locate, and exploit all of the common flows in 32-bit Linux software. These flaws include, but are not limited to, buffer overflow, heap overflows, format string flaws, section overflows, and kernel flaws. Along the way students will gain a better understanding of how Linux 32-bit applications work and will be exposed to a number of common reversing tools such as specialized debuggers (IDA Pro) and fuzzers.  As always, you will also learn how to leverage Python and other scripting tools in order to automate the discovery and exploitation of software flaws. --- ### 213. Pentester Academy – Linux Rootkits for Red-Blue Teams - URL: https://cyberlabarchive.com/courses/pa-linux-rootkits-for-red-blue-teams - Category: Pentester Academy - Downloadable Files: 1 (1.2 GB) - Formats: ZIP - Description: Linux dominates the Server, Embedded and now the Internet of Things (IoT) device market. In recent times, embedded systems and IoT devices in particular have been the weapons of choice in online attacks: botnets like Mirai and Reaper to name a few. Soon the simple attack vectors that these botnets and malware use get patched, it is obvouis that the attacker will move and hide his tools in Kernel mode. This course will teach Red-Blue teams how kernel mode attack kits work and what to go about protecting their systems against it. We will use examples on x86_64, ARM and MIPS based architectures. This entire course will be run on the latest Linux Kernel 4.15.x . This course is completely hands-on and everything will be taught with practical examples in the form of Kernel Modules written in C. You can however follow this course with a basic knowledge of Linux as we discuss everything from the very basics. --- ### 214. Pentester Academy – Embedded/IoT Linux for Red-Blue Teams - URL: https://cyberlabarchive.com/courses/pa-embedded-iot-linux-for-red-blue-teams - Category: Pentester Academy - Downloadable Files: 1 (1.7 GB) - Formats: ZIP - Description: This course is a deep dive into Embedded/IoT firmware where we will start from the very basics – understand the multistage boot process, the kernel and root filesystem, how to build them with a custom toolchain and how they can be compromized with user and kernel mode backdoors/rootkits. We will be using the latest 4.15.x kernel for this course on an ARM architecture board. --- ### 215. Pentester Academy – Hacker Project: SMS Controlled Pentest Bot - URL: https://cyberlabarchive.com/courses/pa-hacker-project-sms-controlled-pentest-bot - Category: Pentester Academy - Downloadable Files: 1 (793 MB) - Formats: ZIP - Description: In this Hacker Project we will learn how to create an SMS controlled Pentesting Bot! This bot will be able to run nmap scans on your command from anywhere in the world - Syllabus Topics: * Raspberry Pi 3 and Raspbian installation Basics * Working with the Raspberry Pi in headless mode * Using Hologram.io’s Nova device with their IoT SIM * Sending and receiving SMS from/to the device over cellular networks * Running custom automation tasks based on the remote controller --- ### 216. Pentester Academy – Abusing SQL Server Trusts in a Windows Domain - URL: https://cyberlabarchive.com/courses/pa-abusing-sql-server-trusts-in-a-windows-domain - Category: Pentester Academy - Downloadable Files: 1 (2 GB) - Formats: ZIP - Description: MS SQL Server is widely used in enterprise networks. Due to its use by third party applications, support for legacy applications and use as a database, SQL Server is a treasure trove for attackers. It gets integrated with in an active directory environment very well, which makes it an attractive target for abuse of features and privileges. In this training, we will see that how to attack a SQL Server not only as an individual service but as a part of the enterprise network. We will discuss the mutual trust which SQL Server has with domain, users and how linked SQL Servers can be abused. We will perform enumeration and scanning, privilege escalation and post exploitation tasks like Domain Privilege Escalation, identifying juicy information, Command Execution, retrieving system secrets, lateral movement, persistence and more. - Syllabus Topics: * SQL Server in Windows Domain * SQL Server Roles and Privileges * Introduction to PowerShell * Discovery, Enumeration and Scanning * Brute Force Attacks * Privilege Escalation * OS Command Execution * Retrieving System Secrets * Mapping and abusing domain trust * Lateral Movement * Database Links * Persistence * Identifying Juicy Information * Defenses --- ### 217. Pentester Academy – WMI Attacks and Defense - URL: https://cyberlabarchive.com/courses/wmi-attacks-and-defense - Category: Pentester Academy - Downloadable Files: 1 (1.9 GB) - Formats: ZIP - Description: Windows Management Instrumentation (WMI) has been used by Windows administrators for various system management operations since Windows NT. As WMI is often used to automate administrative tasks, it is of equal use for attackers as it is for defenders. It is very helpful to understand WMI and its working to be able to fully utilize its power both for Red and Blue teams. In this training through demonstrations and hands-on, we will discuss how WMI and CIM can be utilized for offensive as well as defensive security. Different utilities like PowerShell built-in cmdlets, PowerShell scripts, native windows tools and Linux tools will be discussed. Various attacks like enumeration and information gathering, lateral movement, persistence, backdoors, modifying security descriptors etc. will be executed by utilizing WMI. We will also discuss how WMI can be used for agentless monitoring, detection of above mentioned attacks and more. --- ### 218. Pentester Academy – Wi-Fi Monitoring for Red-Blue Teams - URL: https://cyberlabarchive.com/courses/pa-wi-fi-monitoring-for-red-blue-teams - Category: Pentester Academy - Downloadable Files: 1 (1 GB) - Formats: ZIP - Description: This course focuses on the tools, techniques and procedures to monitor 802.11ac/n networks. We will be learning about both USB and Access Point hardware, pros and cons, and scalable architectures. We will be looking at different hardware for monitoring ranging in price from $40 to $350 and above, both USB and Access Point solutions. --- ### 219. دانلود Pentester Academy – Windows API Exploitation Recipes: Processes, Tokens and Memory RW - URL: https://cyberlabarchive.com/courses/pa-windows-api-exploitation-recipes-processes-tokens-and-memory-rw - Category: Pentester Academy - Downloadable Files: 1 (2.1 GB) - Formats: ZIP - Description: In today’s secured environments, it is almost impossible for Red-Blue Teams to emulate modern adversarial tactics, techniques and procedures using publicly available 3rd party pentesting products. Powerful adversaries typically develop custom code to ensure stealth and undetectability for as long as possible. This course uses a recipe approach to teach Red-Blue teams to do exactly this. In this module, we will specifically look at different techniques to query Process Listing using a variety of Windows APIs. We will also go in-depth into Windows Tokens, different fields and how to get this programmatically. Finally, we will understand how to read-write process memory. --- ### 220. دانلود Pentester Academy – Data Science and Machine Learning for Infosec - URL: https://cyberlabarchive.com/courses/pa-data-science-and-machine-learning-for-infosec - Category: Pentester Academy - Downloadable Files: 1 (19.1 GB) - Formats: ZIP - Description: The age of intelligent machines is here! We are now seeing Machine Learning disrupting every technological field including computer security. As more and more security products use Machine Learning, it is important as Pentesters and Security Researchers to understand how to make and break this technology! --- ### 221. Download Pentester Academy – OSINT: Fun with Open Source Intelligence - URL: https://cyberlabarchive.com/courses/osint-fun-with-open-source-intelligence - Category: Pentester Academy - Downloadable Files: 1 (2.8 GB) - Formats: ZIP - Description: A good primer on OSINT, this course explains what Open Source Intelligence is and also covers types of OSINT sources, ethics and grey areas, useful tools available for OSINT information gathering including Google custom searches. The course will also cover cases and scenarios allowing the student to see how intelligence they have gathered can be used/ seen in different contexts. Students will also be exposed to tools like Maltego, FOCA and cree.py and work on labs where they will build their own fake/ puppet LinkedIn profile for intelligence gathering purposes, build a Google Custom Search Engine and gather intelligence on a large organization. Students will take away an appreciation for OSINT, why it needs to be a part of their toolbox, an intelligence gathering recipe and exposure to tools and techniques they can start using right away. --- ### 222. دانلود Pentester Academy – Pandas for Pentesters - URL: https://cyberlabarchive.com/courses/pandas-for-pentesters - Category: Pentester Academy - Downloadable Files: 1 (1.1 GB) - Formats: ZIP - Description: We are now living in a Big Data world – billions of devices communicating over millions of networks and generating petabytes of data, both at rest and in transit! Security professionals now encounter Big Data in the form of large log files, network traffic captures, forensics of large images and exports from security tools and products. In this course, we will look at how to analyze, mangle, transform and visualize data to derive interesting insights and intelligence from it. Pandas is a Python library which is part of SciPy scientific computing ecosystem. In simple terms, Pandas provides powerful data structures to perform data analysis. As dry as this might initially sound, due to the high level of abstraction provided by its powerful API, Pandas allows us to do really complicated analysis with just a few lines of Python code. In this course, we will go through the basics of Numpy, a deep dive into Pandas Series and Dataframes and how to analyze data with it. The case study used is analysis of Wi-Fi networks using Airodump-NG’s output file for a relatively large network with hundreds of devices. --- ### 223. دانلود Pentester Academy – Windows Forensics - URL: https://cyberlabarchive.com/courses/pa-windows-forensics - Category: Pentester Academy - Downloadable Files: 2 (2.9 GB) - Formats: 001, 002 - Description: This course will familiarize students with all aspects of Windows forensics.By the end of this course students will be able to perform live analysis, capture volatile data, make images of media, analyze filesystems, analyze network traffic, analyze files, perform memory analysis, and analyze malware for a Windows subject on a Linux system with readily available free and open source tools.  Students will also gain an in-depth understanding of how Windows works under the covers. --- ### 224. دانلود Pentester Academy – Powershell for Pentesters - URL: https://cyberlabarchive.com/courses/pa-powershell-for-pentesters - Category: Pentester Academy - Downloadable Files: 1 (1.8 GB) - Formats: ZIP - Description: The PowerShell For Penetration Testers (PFPT) is an online course designed for teaching PowerShell to penetration testers, system administrators and other security professionals. You will be able to use and write tools in PowerShell which is installed by default of all modern Windows operating systems. The course will be of interest for anyone who wants to know more about using PowerShell for security research, penetration testing and red teaming. The course covers various phases of a penetration testing and PowerShell is used to enhance techniques in the each phase. - Syllabus Topics: * Introduction to PowerShell * Basics of PowerShell * Scripting * Advanced Scripting Concepts * Modules * Jobs * PowerShell with .Net * Using Windows API with PowerShell * PowerShell and WMI * Working with COM objects * Interacting with the Registry * Recon and Scanning * ExploitationBrute ForcingClient Side AttacksUsing existing exploitation techniquesPorting exploits to PowerShell – When and howHuman Interface Device * PowerShell and MetasploitRunning PowerShell scriptsUsing PowerShell in Metasploit exploits * Post ExploitationInformation Gathering and ExfiltrationBackdoorsPrivilege EscalationGetting system secrets * Post ExploitationPassing the hashes/credentialsPowerShell RemotingWMI and WSMAN for remote command executionWeb ShellsAchieving Persistence * Using PowerShell with other security tools * Defense against PowerShell attacks --- ### 225. دانلود Pentester Academy – Linux Forensics - URL: https://cyberlabarchive.com/courses/pa-linux-forensics - Category: Pentester Academy - Downloadable Files: 1 (6.4 GB) - Formats: ZIP - Description: This course will familiarize students with all aspects of Linux forensics. By the end of this course students will be able to perform live analysis, capture volatile data, make images of media, analyze filesystems, analyze network traffic, analyze files, perform memory analysis, and analyze malware all on a Linux system with readily available free and open source tools. Students will also gain an in-depth understanding of how Linux works under the covers. --- ### 226. دانلود Pentester Academy – WinDbg: User and Kernel Mode Debugging - URL: https://cyberlabarchive.com/courses/pa-windbg-user-and-kernel-mode-debugging - Category: Pentester Academy - Downloadable Files: 1 (84 MB) - Formats: 7Z - Description: WinDbg is the most popular Debugger for Windows. In this course, we will look at how WinDbg can be used for both User and Kernel mode debugging. We will learn how processes and threads work on Windows, and how we can examine memory, modify registers & data, disassemble code etc. among other things. We will also learn a bit of Windows internals, kernel data strucutres and how to analyze rootkits and other malicious code in the form of device drivers. --- ### 227. دانلود Pentester Academy – Airodump-NG Scan Visualizer - URL: https://cyberlabarchive.com/courses/pa-airodump-ng-scan-visualizer - Category: Pentester Academy - Downloadable Files: 1 (105 MB) - Formats: ZIP - Description: Airodump-NG Scan Visualizer allows you to filter, sort and visualize Airodump-NG scan data. The tool currently uses the CSV file generated by Airodump-NG with the -w option and can work locally or as a hosted service. --- ### 228. دانلود Pentester Academy – PCAP to XML and SQLITE - URL: https://cyberlabarchive.com/courses/pa-pcap-to-xml-and-sqlite - Category: Pentester Academy - Downloadable Files: 1 (65 MB) - Formats: 7Z - Description: PCAP2XML is a tool suite which takes 802.11 PCAP trace files as input and can convert them into XML or SQLITE representations. This allows a pentester to run arbitrary queries on the packet header fields. --- ### 229. Download Pentester Academy – USB Forensics and Pentesting - URL: https://cyberlabarchive.com/courses/pa-usb-forensics-and-pentesting - Category: Pentester Academy - Downloadable Files: 1 (769 MB) - Formats: ZIP - Description: This course will cover USB in detail with an emphasis on understanding USB Mass Storage devices (also known as flash drives or thumb drives).By the end of this course students will know how to sniff USB traffic using open source tools, be able to write-block USB mass storage devices using software and microcontroller-based hardware, be able to impersonate other USB devices, and understand how to make forensic duplicates of USB mass storage devices.  Along the way students will also learn how to use microcontrollers and Udev rules. --- ### 230. Download Pentester Academy – Make your own Hacker Gadget - URL: https://cyberlabarchive.com/courses/pa-make-your-own-hacker-gadget - Category: Pentester Academy - Downloadable Files: 1 (1.7 GB) - Formats: ZIP - Description: All of us have heard about or used Hacker Gadgets like the WiFi Pineapple, Minipwner, Pwn Plug, R00tabaga etc. They are fantastic to use for demos, in social engineering tasks, explaining security implications in a fun way to non security professionals and in actual pentest task automation! but what does it take to build one? In this course, we will teach you how to build a Hacker Gadget (or Pentest Gadget if you prefer for less than $50 from scratch. How much technical expertise do you need to follow this course? – if you’ve installed Linux and ever configured an Access Point, you will feel right at home! --- ### 231. Download Pentester Academy – Scripting Wi-Fi Pentesting Tools in Python - URL: https://cyberlabarchive.com/courses/pa-scripting-wi-fi-pentesting-tools-in-python - Category: Pentester Academy - Downloadable Files: 1 (1.7 GB) - Formats: ZIP - Description: In this course we will learn how to create Wi-Fi Pentesting tools – sniffer and packet injectors using Python. We will look at both using libraries like scapy and working with raw sockets. This course is ideal for students who are aware of the basics of Wi-Fi Security and Python Scripting. You do not need to be a master of either but should have a basic working knowledge of both. --- ### 232. Download Pentester Academy – Exploiting Simple Buffer Overflows on Win32 - URL: https://cyberlabarchive.com/courses/pa-exploiting-simple-buffer-overflows-on-win32 - Category: Pentester Academy - Downloadable Files: 1 (3.9 GB) - Formats: ZIP - Description: In this course, we will look at how to exploit Simple Buffer Overflows on Win32 systems. This is an introductory course and starts from the very basics of exploitation and is beginner friendly. We will be taking over 10+ real world and staged application examples to illustrate the concepts. It is important to note that this introductory course will be looking at exploitation of buffer overflows in the absence of exploit mitigation techniques such as DEP and ASLR. We will be creating separate courses for these once we finish the basic courses. --- ### 233. Download Pentester Academy – Pentesting Challenges - URL: https://cyberlabarchive.com/courses/pa-pentesting-challenges - Category: Pentester Academy - Downloadable Files: 1 (6.1 GB) - Formats: ZIP - Description: In this section we will be posting Pentesting Challenges from multiple topics such as Web App, Network, Shellcoding, Metasploit, Mobile Apps, Reversing and Exploit Development. --- ### 234. Download Pentester Academy – Javascript for Pentesters - URL: https://cyberlabarchive.com/courses/pa-javascript-for-pentesters - Category: Pentester Academy - Downloadable Files: 1 (1.5 GB) - Formats: ZIP - Description: In this course, we will be learning how to use Javascript for Pentesting. --- ### 235. Download Pentester Academy – x86_64 Assembly Language and Shellcoding on Linux - URL: https://cyberlabarchive.com/courses/pa-x86_64-assembly-language-and-shellcoding-on-linux - Category: Pentester Academy - Downloadable Files: 1 (4.8 GB) - Formats: ZIP - Description: This course focuses on teaching the basics of 64-bit assembly language for the x86_64 family of processors on the Linux platform and applying it to Infosec. Once we are through with the basics, we will look at writing shellcode, encoders, decoders, crypters and other advanced low level applications. The course outline follows the exact same outline of our 32-bit course but all the topics will be taught with x86_64 64-bit assembly. - Syllabus Topics: * Computer Architecture Basics * x86/x86_64 Family * Compilers, Assemblers and Linkers * CPU Modes and Memory Addressing * Tools of the trade * x86_64 Assembly Language * Shellcoding on Linux * Encoders, Decoders and Crypters on Linux * Polymorphism --- ### 236. Download Pentester Academy – Pentesting with Metasploit - URL: https://cyberlabarchive.com/courses/pa-pentesting-with-metasploit - Category: Pentester Academy - Downloadable Files: 1 (1.5 GB) - Formats: ZIP - Description: This course is ideal for penetration testers, security enthusiasts and network administrators. A non-exhaustive list of topics to be taught includes: --- ### 237. Download Pentester Academy – Wi-Fi Security and Pentesting - URL: https://cyberlabarchive.com/courses/pa-wi-fi-security-and-pentesting - Category: Pentester Academy - Downloadable Files: 2 (2.3 GB) - Formats: 001, 002 - Description: This course is ideal for penetration testers, security enthusiasts and network administrators. A non-exhaustive list of topics to be taught includes: --- ### 238. دانلود Pentester Academy – WAP Challenges - URL: https://cyberlabarchive.com/courses/pa-wap-challenges - Category: Pentester Academy - Downloadable Files: 1 (4.2 GB) - Formats: ZIP - Description: We will be hosting interesting web application security challenges in this section for our students to try out. Challenges will be categorized into Beginner, Intermediate and Advanced Levels. We will either allow you to download Virtual Machines or point you to hosted sites which we have put up. In case you are new to web application security, please note that we have already started posting the videos of our Web Application Security Course . However, this section is independent of that course. --- ### 239. Learning Path INE – Python Data Scientist - URL: https://cyberlabarchive.com/courses/ine-python-data-scientist - Category: iNE - Downloadable Files: 1 (16.2 GB) - Formats: ZIP - Description: The Python Data Scientist course offered by INE provides a comprehensive, hands-on learning experience tailored for individuals aiming to excel in data science using Python. This course covers a wide range of essential topics, tools, and techniques, equipping students with the skills necessary to tackle real-world data challenges effectively. --- ### 240. Learning Path INE – First steps in Data Science with Python - URL: https://cyberlabarchive.com/courses/ine-first-steps-in-data-science-with-python - Category: iNE - Downloadable Files: 1 (547 MB) - Formats: ZIP - Description: Data Science is one of the fastest growing disciplines in IT. It’s a unique speciality that combines Programming, Mathematics (statistics, algebra, calculus), Data Analysis and management (SQL, storytelling) and Machine Learning. As the fastest growing IT area, the demand for qualified experts is skyrocketing, with sites like Glassdoor, LinkedIn and Indeed listing it as one of the Most Wanted / Most Needed specializations for recruiters. INE’s Data Science approach is unique: our curriculum includes a combination of advanced videos with a hands-on approach using online coding exercises, hosted Jupyter Notebooks and Capstone projects. This first initial Learning Path is a quick overview of what Data Science is, and what you can expect to know by the end of your journey. --- ### 241. EC Council: Dark Web Forensics - URL: https://cyberlabarchive.com/courses/dark-web-forensics-dwf - Category: EC-Council - Downloadable Files: 1 (1.3 GB) - Formats: ZIP - Description: Dark Web Forensics Deep Dive For Ethical Hackers, In this workshop you will be given a tour of the dark web and walked through the technical details of how it works. You will get hands-on experience conducting dark web investigations. This includes how to identify relevant information and how to investigate it. This training is useful for any forensic investigator but is particularly interesting to those trying to trace data leaks, financial crimes, and cyber-related crimes. This workshop includes hands-on labs. - Syllabus Topics: * Technical background * Tour of markets * Investigative techniques --- ### 242. RedTeam360 – Certified Mobile Application Penetration Tester (Android) - URL: https://cyberlabarchive.com/courses/redteam360-certified-android-penetration-tester - Category: Other Institutions - Downloadable Files: 1 (1.8 GB) - Formats: ZIP - Description: The Certified Mobile Application Penetration Tester (Android) course by RedTeam360 offers a thorough education in securing Android applications. It covers the Android architecture, security models, and essential tools for penetration testing. The curriculum includes setting up a testing environment, performing static and dynamic analysis, and exploring OWASP Top 10 vulnerabilities. This course is perfect for those aiming to specialize in mobile app security and gain practical skills in identifying and mitigating security issues in Android applications. - Syllabus Topics: * Introduction of Course * Introduction of Android * Environment Setup * Useful Tools and Configuration * Static Analysis * OWASP TOP-10 --- ### 243. RedTeam360 – Certified Penetration Tester - URL: https://cyberlabarchive.com/courses/redteam360-certified-penetration-tester - Category: Other Institutions - Downloadable Files: 1 (9 GB) - Formats: ZIP - Description: The Certified Penetration Tester course by RedTeam360 is designed to equip participants with essential skills in cybersecurity, focusing on penetration testing techniques. The course covers network and cybersecurity fundamentals, Linux for hackers, and concepts of anonymity and privacy. It includes 164 lessons that delve into networking, OSI model, protocols, Active Directory, installing and exploring Kali Linux, and much more. This comprehensive course is ideal for aspiring penetration testers looking to enhance their expertise. - Syllabus Topics: * Pentest --- ### 244. RedTeam360 – Burp Suite A to Z - URL: https://cyberlabarchive.com/courses/redteam360-burp-suite-a-to-z - Category: Other Institutions - Downloadable Files: 1 (1.9 GB) - Formats: ZIP - Description: The Burp Suite A to Z course by RedTeam360 is an extensive training program designed to master the Burp Suite, a popular web vulnerability scanner. This course covers the basics of Burp Suite setup, functions, and features, including modules on the Burp Suite Dashboard, Proxy, Intruder, Repeater, and Scanner. Participants will learn to install and configure Burp Suite, explore its various tools, and utilize extensions for enhanced functionality. Ideal for cybersecurity professionals aiming to advance their web application testing skills. - Syllabus Topics: * Pentest --- ### 245. EC Council: Certified Secure Computer User - URL: https://cyberlabarchive.com/courses/certified-secure-computer-user-cscu - Category: EC-Council - Downloadable Files: 1 (305 MB) - Formats: ZIP - Description: The C|SCU curriculum is designed to educate computer users on the more practical aspects of networking and security, allowing them to expand their computer skills. Students will develop a foundational understanding of a variety of computer and network security concerns, including identity theft, credit card fraud, online banking phishing scams, malware, loss of sensitive information, and social engineering. This certification is an excellent complement to educational offerings in the domain of security and networking. --- ### 246. Learning Path INE – Reverse Engineering Professional - URL: https://cyberlabarchive.com/courses/ine-reverse-engineering-professional - Category: iNE - Downloadable Files: 1 (1.3 GB) - Formats: ZIP - Description: Are you looking to gain the theoretical and practical knowledge required to perform advanced reverse engineering of third-party software and malware on the assembly language level? The Reverse Engineering Professional Learning Path will teach you several methods to identify, isolate, and finally, analyze portions of code which are of high interest, as well as the most common Windows APIs utilized for file, memory, and registry manipulation by either software protections (such as packers) or malware. During the learning process, you will also get insights into the most common anti-reversing tricks, including different code obfuscation methods, and how to bypass them. - Syllabus Topics: * Start from the basics up to highly technical chapters * Learn about IA-32 CPU Architecture * Learn about functions, stack frames, heaps, exceptions, important Ring3 Windows internal structures, PE file format * Master ImmunityDBG * Learn about important Ring3 Windows Internal Structures * Learn different methods to locate the important algorithms * Understand and bypass Anti-Reversing techniques * Perform full manual unpacking on packed executables * Practice-based course with dozens of guided exercises * Challenge your mind with hardcore technical topics --- ### 247. Learning Path INE – Web Defense Professional - URL: https://cyberlabarchive.com/courses/ine-web-defense-professional - Category: iNE - Downloadable Files: 1 (3.6 GB) - Formats: ZIP - Description: Have you ever wondered about how web applications are attacked in the real world and what you can do to mitigate every attack? The Web Defense Professional Learning Path will illustrate exactly how each attack works, what the impact of each attack is, how to fix it, and how the exploit no longer works after the fix. This learning path will also give you in-depth, practical advice about how to simplify your defense and how to implement attack mitigations that actually work (regardless of you having access to the source code or not). - Syllabus Topics: * Close the gap between Web application attack and defense * Mitigation advice for multiple platforms and languages * The most comprehensive and practical coverage of the OWASP Testing Guide * Comprehensively aligned to OWASP methodologies, tools, and tests * Covers and goes beyond OWASP TOP 10 * Detailed techniques and methodology to simplify the defense of web applications * No boring theory: practice-oriented curriculum * Over 20 different lab scenarios to practice with * Advanced usage of OWASP ZAP, OWASP OWTF, ModSecurity… * Coverage of OWASP Cheat Sheets, OWASP OpenSAMM, OWASP ModSecurity Core Rule Set --- ### 248. Learning Path INE – Malware Analysis Professional - URL: https://cyberlabarchive.com/courses/ine-malware-analysis-professional - Category: iNE - Downloadable Files: 1 (382 MB) - Formats: ZIP - Description: Are you interested in dissecting malicious software in order to understand its mechanics and purpose? The Malware Analysis Professional Learning Path provides a holistic approach to reverse engineering and analyzing all aspects of malware. During the learning process, you will come across realistic and even real-world malware such as ransomware, botnets, and rats, against which you will perform reverse engineering, static analysis, and dynamic analysis activities. - Syllabus Topics: * Learn about IA-32 CPU Architecture * Entire module dedicated to x64 bit assembly * Practical display and dive into the TLS method * Understand how malware uses Windows APIs to achieve their malicious activity * Understand and bypass Anti-Reversing techniques * Perform full manual unpacking on packed executables * Debug samples using different debuggers * Learn different methods to locate the important algorithms --- ### 249. Learning Path INE – Digital Forensics Professional - URL: https://cyberlabarchive.com/courses/ine-digital-forensics-professional - Category: iNE - Downloadable Files: 1 (2.3 GB) - Formats: ZIP - Description: Have you ever wanted to learn how to perform digital forensics activities after an intrusion? The Digital Forensics Professional Learning Path will teach you how to identify and gather digital evidence as well as retrieve and analyze data from both the wire and endpoints. The Digital Forensics Professional Learning Path also prepares you for the eCDFP exam and certification. This course is part of the Digital Forensics Professional Learning path which prepares you for the eCDFP exam and certification - Syllabus Topics: * Learn how to acquire volatile and non-volatile data, using various techniques * Dive into the structure of files and then, analyze file headers, malicious documents, and file metadata * Become familiar with walking through partitions, recovering corrupted disks, and locating hidden data * Learn how to analyze both FAT & NTFS file systems * Get familiar with file carving and creating your own custom carving signatures * Learn how to analyze the Windows registry, LNK files, prefetch files, and previously mounted USB devices * Learn how to perform thorough investigations, against Skype, explorer’s shellbags, and Windows recycle bin * Become proficient in forensically investigating network attacks --- ### 250. Learning Path (!New) INE – Threat Hunting Professional - URL: https://cyberlabarchive.com/courses/ine-threat-hunting-professional-new - Category: iNE - Downloadable Files: 2 (3.3 GB) - Formats: ZIP - Description: The Threat Hunting Professional Learning Path is an in-depth collection of courses designed for cybersecurity practitioners seeking to develop proactive defense strategies. You’ll start by building a strong core foundation with the fundamentals, then advance through intelligence integration and hunting strategies. You’ll explore both network and endpoint threats, which will give you the practical skills needed to identify threats across a diverse array of environments. You’ll also learn how to effectively document and report findings in a timely and organized manner for post-investigation evidence gathering. By the end of this learning path, you’ll be equipped to carry out threat hunts quickly, efficiently, and in a way that improves and enhances organizational security posture. - Syllabus Topics: * Introduction to Threat Hunting * Intelligence in Threat Hunting * Threat Hunting Strategies * Network Threat Hunting * Endpoint Threat Hunting * Threat Hunting Communications & Reporting --- ### 251. Learning Path INE – Incident Handling & Response Professional (New!) - URL: https://cyberlabarchive.com/courses/ine-incident-handling-response-professional-new - Category: iNE - Downloadable Files: 2 (21.8 GB) - Formats: ZIP - Description: Are you interested in learning how to professionally detect, analyze, and respond to real-world security incidents across modern enterprise environments? The Incident Handling & Response Professional Learning Path is designed to introduce you to the full incident response lifecycle and the daily operations of an incident responder, combining practical skills with real-world scenarios and tooling. This learning path will teach you how to prepare for incidents through planning and readiness, detect and triage threats using SIEM and endpoint data, and apply threat intelligence and threat hunting techniques to uncover stealthy attacks. You will also learn how to perform digital forensics to support investigations and response actions. The Incident Handling & Response Professional Learning Path also prepares you for the eCIR exam and certification. - Syllabus Topics: * Introduction to Security Operations Center (SOC) * Incident Response: Preparation * Incident Response: Detection * Incident Response: Analysis * Incident Response: CTI & Threat Hunting * Incident Response: Digital Forensics --- ### 252. Learning Path INE – Advanced Penetration Testing - URL: https://cyberlabarchive.com/courses/ine-advanced-penetration-testing - Category: iNE - Downloadable Files: 1 (859 MB) - Formats: ZIP - Description: The Advanced Penetration Testing Learning Path provides all the advanced skills required to carry out a thorough and professional penetration test against modern networks and infrastructure, such as the ability to execute state-sponsored-like operations and advanced adversary simulations. You must be familiar with PowerShell scripting, Active Directory administration and Windows internals knowledge, basic reverse engineering skills, and possess a good working knowledge of network protocols, as the content dives into all stages of a red-teaming engagement. - Syllabus Topics: * Implementation details on numerous undocumented attacks * Obscure ways of exploitation and backdooring * Advanced client-side exploitation techniques * Custom attack vector and payload creation * Custom payload creation techniques * In-depth analysis of Active Directory exploitation * Stealthy lateral movement and evasion against modern defenses * In-depth analysis of critical domain infrastructure exploitation * In-depth details of common misconfigurations and weaknesses * Details for covert operations and stealthy persistence --- ### 253. Learning Path INE – Mobile Application Penetration Testing Professional (New!) - URL: https://cyberlabarchive.com/courses/ine-mobile-application-penetration-testing-professional-new - Category: iNE - Downloadable Files: 1 (5.7 GB) - Formats: ZIP - Description: This immersive and comprehensive learning path is designed for penetration testers and IT security professionals aiming to master mobile security. It covers a wide spectrum of topics, including Android and iOS platforms, application security, static and dynamic analysis, and the OWASP Mobile Top 10. You’ll gain hands-on experience with advanced tools like Frida, IDA Pro, and Ghidra, while exploring real-world attack vectors such as reverse engineering, obfuscation bypass, and malware analysis. With advanced modules on hybrid apps and secure mobile app development, you’ll be fully prepared for the eMAPT exam and certification, ensuring your expertise stays current in the rapidly evolving mobile threat landscape. - Syllabus Topics: * Introduction to Mobile Application Security * Mobile Application Penetration Testing Techniques * Mastering Mobile Security & Malware Analysis --- ### 254. Learning Path INE – Advanced Web Application Penetration Testing (New!) - URL: https://cyberlabarchive.com/courses/advanced-web-application-penetration-testing-new - Category: iNE - Downloadable Files: 1 (19.7 GB) - Formats: ZIP - Description: Embark on the Advanced Web Application Penetration Testing learning path, crafted for professionals seeking to master cutting-edge techniques in web security testing. You’ll begin with essential skills in reconnaissance, mapping, and automation, followed by rigorous training in authentication and session management testing. Dive into advanced injection attacks and API penetration testing, explore sophisticated filter evasion and WAF bypass methods, and gain expertise in server-side attack strategies. This comprehensive learning path provides the advanced skills needed to effectively assess and protect modern web applications against evolving threats. - Syllabus Topics: * Intro to Advanced Web Application Penetration Testing * Authentication & Session Management Testing * Advanced Injection Attacks * API Penetration Testing * Filter Evasion & WAF Bypass Techniques * Server-Side Attacks --- ### 255. Learning Path INE – Exploit Development Student - URL: https://cyberlabarchive.com/courses/ine-exploit-development-student - Category: iNE - Downloadable Files: 1 (789 MB) - Formats: ZIP - Description: If you are looking for the most practical way into the exploit development and software security world look no further. The Exploit Development Student Learning Path provides not only the fundamentals of Windows and Linux exploit development but also covers advanced Windows and Linux exploit development techniques, as well as anti-exploit mechanism bypasses. - Syllabus Topics: * Based on techniques professional exploit developers use * Thoroughly covers fundamental as well as advanced exploitation techniques * Software debugging * Shellcoding * Covers both Windows and Linux exploit development * Methodology on how to identify and fully exploit 0-day vulnerabilities * Covers bypassing modern anti-exploit mechanisms * Learn how to use tools like Immunity Debugger, x32dbg, Mona, Pwntools, GDB, Ropper, etc. --- ### 256. Learning Path INE – Penetration Testing Student - URL: https://cyberlabarchive.com/courses/ine-penetration-testing-student - Category: iNE - Downloadable Files: 1 (20.8 GB) - Formats: ZIP - Description: The hardest thing you will ever do in cybersecurity is to land your first job. There are HR gateways, industry jargon, and companies unwilling to hire new talent. To help combat these challenges, we have built a hands-on training path focused on the necessary skills to start your career. The Penetration Testing Student Learning Path covers prerequisite topics introducing you to pentesting, information security, and programming. The learning path prepares you for an entry-level position within a red team, exposes you to bug bounty basics, and provides the skills and practice necessary for the eJPT certification exam. The eLearnSecurity Jr. Penetration Tester exam (eJPT) validates that the individual has the knowledge and skills required to fulfill a role as an entry-level penetration tester. This certification covers Assessment Methodologies and Enterprise Auditing with Host, Network, and Web Application Penetration Testing. This exam is designed to be the first milestone certification for someone with little to no experience in cybersecurity, simulating the skills utilized during a real-world engagement. This exam truly shows yourself and your employer that you have what it takes to be part of a winning penetration testing team. --- ### 257. Learning Path INE – Enterprise Defense Administrator - URL: https://cyberlabarchive.com/courses/ine-enterprise-defense-administrator - Category: iNE - Downloadable Files: 1 (18.8 GB) - Formats: ZIP - Description: Designed for professionals that are just starting their defensive cybersecurity or security engineering journey, this learning path will introduce you to all of the concepts and skills you’ll need to succeed as a Defensive Security Engineer. Starting with an introduction to security engineering, and moving into more in-depth topics covering practical defensive engineering techniques and practices, this path will teach you the skills you need for a successful cybersecurity career. In addition, you will learn basic server and network hardening techniques, risk management strategies, how to properly design a secure architecture, and much more. With hands-on labs throughout, you’re not just reading slides and studying – you get your hands dirty working with real-world scenarios. This path will prepare learners for the eEDA certification releasing in 2023! --- ### 258. Learning Path INE – Web Application Penetration Testing Professional - URL: https://cyberlabarchive.com/courses/ine-web-application-penetration-testing-professional - Category: iNE - Downloadable Files: 1 (22.4 GB) - Formats: ZIP - Description: Interested in learning how to assess and mitigate real-world web application vulnerabilities an organization could potentially be exposed to? The Web Application Penetration Testing Learning Path is a comprehensive and structured journey designed to equip aspiring penetration testers, Web App Security Professionals, Bug Bounty Hunters, and web developers with the essential skills and knowledge required to plan and perform a thorough and professional web application penetration test and how to effectively identify, exploit, and mitigate vulnerabilities in modern web applications. The Web Application Penetration Tester Professional Learning Path provides you with all the advanced skills required to carry out a thorough and professional penetration test against modern web applications, as well as prepares you for the eWPTv2 exam and certification. --- ### 259. Learning Path +INE – CompTIA Security - URL: https://cyberlabarchive.com/courses/ine-comptia-security-plus - Category: iNE - Downloadable Files: 1 (12.6 GB) - Formats: ZIP - Description: CompTIA’s Security+ certification is a widely recognized, industry-standard certification aimed at entry-level Cyber Security practitioners. This certification and learning path starts by introducing general Cyber Security topics and terms to get you familiar with fundamental security concepts. From there, we go into various types of threats and vulnerabilities that security administrators are responsible for analyzing and mitigating. In addition, you’ll learn how to properly architect a typical security infrastructure, including options for different security controls to better protect an organization’s systems, infrastructure, and data. Alongside that knowledge, you’ll also learn how to manage security controls, detect and manage vulnerabilities, and how to respond to an incident once it occurs. To wrap everything up, we’ll take a look at risk management and compliance topics, including third-party assessments and audits. The Security+ learning path is broken down according to the published Domains and Objectives from CompTIA. After completing this learning path, you’ll be armed with the knowledge to not only get started as a security administrator but also to successfully pass the Security+ exam. --- ### 260. Learning Path INE – CISSP: Certified Information Systems Security Professional - URL: https://cyberlabarchive.com/courses/ine-cissp-certified-information-systems-security-professional - Category: iNE - Downloadable Files: 1 (6.8 GB) - Formats: ZIP - Description: Certified Information System Security Professional (CISSP) is the most globally recognized certification in the information security market. In fact, many consider CISSP the gold standard for industry cyber and information security professionals to obtain because it certifies they have the breadth of knowledge, skills, and experience required to build, manage, and deliver the protections organizations require today. This course provides a review of the security concepts and industry best practices included in the CISSP Common Body of Knowledge across the following domains: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security, Identity and Access Management (IAM), Security Assessment Testing, Security Operations, and Software Development Security. Once you successfully pass the certification exam, career advancement and higher earnings likely follow. Most importantly, becoming a CISSP professional guarantees to colleagues, peers, employers, and potential employers that you have the commitment and cyber competence to deliver architecture, design, management, and security controls that protect business environments. --- ### 261. Learning Path INE – Penetration Testing Professional (NEW – 2024) - URL: https://cyberlabarchive.com/courses/penetration-testing-professional-new-2024 - Category: iNE - Downloadable Files: 1 (22.2 GB) - Formats: ZIP - Description: Dive into the realm of cybersecurity with our updated Penetration Testing Professional learning path, tailored for those aspiring to master the art of ethical hacking and secure IT systems. This immersive path equips you with the expertise to uncover and mitigate vulnerabilities across various platforms, from web applications to wireless networks, and cloud environments. Through a blend of theoretical knowledge and hands-on exercises, you’ll navigate the complexities of system exploitation, privilege escalation, and active directory attacks, culminating in the skills necessary for the eCPPT certification. Whether you’re advancing your career or stepping into the world of IT security, this learning path lays the foundation for becoming a proficient penetration tester in today’s digital landscape. --- ### 262. Learning Path INE – CyberOps Associate - URL: https://cyberlabarchive.com/courses/ine-cyberops-associate - Category: iNE - Downloadable Files: 1 (13.4 GB) - Formats: ZIP - Description: The “Cisco CyberOps Associate” Learning Path offered by INE is meticulously crafted to prepare learners for the Cisco CyberOps Associate certification exam. The Learning Path is based on the detailed topics and domains outlined by Cisco, ensuring comprehensive coverage of essential cybersecurity concepts. These domains include Security Concepts, Security Monitoring, Host-based Analysis, Network Intrusion Analysis, and Security Policies and Procedures. Each of these domains is systematically broken down into specific subtopics, such as the CIA triad, threat intelligence, access control models, and incident response, among others. The Learning Path consists of a series of video-based courses complemented by online quizzes designed to reinforce the learner’s understanding and retention of the material. By aligning the course content with the official exam objectives, INE ensures that learners gain the knowledge and skills necessary to detect, analyze, and respond to cybersecurity incidents effectively. Whether you are starting your cybersecurity journey or looking to validate your skills with a recognized certification, the “Cisco CyberOps Associate” Learning Path provides the foundation and practice needed to succeed in the certification exam and advance in the field of cybersecurity. --- ### 263. Learning Path INE – CCIE Service Provider - URL: https://cyberlabarchive.com/courses/ine-ccie-service-provider - Category: iNE - Downloadable Files: 1 (45 GB) - Formats: ZIP - Description: INE offers a wide variety of courses and materials to help you pass your CCIE SP v5 Lab Certification Exams. This Learning Path is designed to help you logically navigate through our offerings so that you can most efficiently make use of your studying opportunities to achieve the CCNP or CCIE SP Certification. This Learning Path consolidates all INE’s CCIE SP v5 video courses into a single trackable path you can follow to your success! The series focuses on all basic and advanced v5 blueprint technologies, as well as discuses other topics you’ll need to know to pass the exam, such as hardware platforms, software features and more. This series is intended for Enterprise and Service Provider Professionals and anyone looking to obtain their CCIE SP certification. It covers a broad spectrum of topics and technologies included in the current CCIE SP v5 exam blueprints. --- ### 264. Learning Path INE – CCNA 200-301 - URL: https://cyberlabarchive.com/courses/ine-ccna-200-301 - Category: iNE - Downloadable Files: 1 (36.8 GB) - Formats: ZIP - Description: INE offers a wide variety of courses and materials to help you pass your Cisco 200-301 CCNA Certification Exam. This Learning Path is designed to help you logically navigate through our offerings so that you can most efficiently make use of your studying opportunities. --- ### 265. Learning Path INE – CCIE Enterprise Infrastructure - URL: https://cyberlabarchive.com/courses/ine-ccie-enterprise-infrastructure - Category: iNE - Downloadable Files: 1 (50 GB) - Formats: ZIP - Description: The most complete solution available anywhere, INE’s CCIE Enterprise Infrastructure Learning Path has every resource you need to prepare for Cisco’s CCIE Enterprise Infrastructure v1.1 certification. From building a topology for lab practice, passing the CCIE Written Qualification Exam, to preparing for the Lab, this Learning Path consolidates all resources into a single trackable path you can follow to your success! --- ### 266. Learning Path INE – CCIE Security - URL: https://cyberlabarchive.com/courses/ine-ccie-security - Category: iNE - Downloadable Files: 1 (43.6 GB) - Formats: ZIP - Description: This learning path consolidates all INE’s CCIE Security v6.1 exam content into a single trackable path you can follow to your success! This series explains how to plan, design, deploy, operate, and optimize network security solutions on Cisco’s flagship security products and appliances. It covers all fundamental and advanced concepts that are important for every Cisco Certified Internetwork Expert (CCIE) Security student. Join Piotr Kaluzny, for an in-depth look at every technical aspect of this track, including fundamental topics, to Cisco-platform-specific features and command-line usage. This training also provides the opportunity to gain hands-on practice with several Cisco products (CLI/GUI) --- ### 267. Learning Path INE – CCIE Collaboration - URL: https://cyberlabarchive.com/courses/ine-ccie-collaboration - Category: iNE - Downloadable Files: 1 (27.1 GB) - Formats: ZIP - Description: This Learning Path consolidates all INE’s CCIE Collaboration v3.1 content into a single trackable path you can follow to your success! The series focuses on all basic and advanced v3.1 blueprint technologies as well as discusses other topics you’ll need to know to pass the exam, such as hardware platforms, software features, and more. Join Rohit Pardasani, CCIEx5 #21282, for an in-depth look at every technical aspect of the new CCIE Collaboration track, including Expressway, CMS, API Calls, conferencing between Jabber and IP phone endpoints, multi-cluster call routing, SIP URI dialing from IP phones and Jabber, IM and Presence, globalized dial plans and SIP normalization with both CUBE and native Lua scripting in CUCM, and much more. --- ### 268. Learning Path INE – CCIE Data Center - URL: https://cyberlabarchive.com/courses/ine-ccie-data-center - Category: iNE - Downloadable Files: 1 (33.5 GB) - Formats: ZIP - Description: This Learning Path covers topics outlined in Cisco’s CCIE Data Center v3.0 certification blueprint, and will assist candidates in learning to plan, design, deploy, operate, and optimize complex Cisco-based Data Center networks. Topics covered include Layer 2 Switching on NX-OS, Nexus Virtual Port-Channels (vPC), Layer 3 Routing with EIGRP, OSPF, IS-IS, and BGP on NX-OS, Layer 3 Multicast Routing on NX-OS, VXLAN and BGP EVPN on NX-OS, Application Centric Infrastructure (ACI), the Cisco Unified Computing System (UCS), Storage Networking (SAN), Data Center Security, Data Center Quality of Service (QoS), and Data Center Automation, just to name a few. This series’ primary instructor is industry-renowned Brian McGahan, CCIEx4 #8593 (Routing & Switching, Data Center, Security, Service Provider), CCDE #2013::13 (Design). --- ### 269. Learning Path INE – Palo Alto Networks Firewall - URL: https://cyberlabarchive.com/courses/palo-alto-networks-firewall - Category: iNE - Downloadable Files: 1 (2.6 GB) - Formats: ZIP - Description: This path will provide learners with the knowledge and tools required to successfully build and maintain Palo Alto Next-Generation Firewall solutions. This will include coverage of the Palo Alto platform architecture, firewall administration and maintenance, configuration of policies, related technologies, and more. This Learning Path also consolidates all INE’s video courses related to Palo Alto Networks technical certifications into a single trackable path you can follow to your success! --- ### 270. Learning Path INE – Service Provider CORE Exam: 350-501 SPCOR - URL: https://cyberlabarchive.com/courses/service-provider-core-exam-350-501-spcor - Category: iNE - Downloadable Files: 1 (25.1 GB) - Formats: ZIP - Description: This learning path consolidates all INE’s CCNP Service Provider content into a single trackable path you can follow to your success! The series focuses on all basic and advanced blueprint technologies as per the new curriculum. The series has all the ingredients required for you to pass the CCNP Service Provider exam. Join Rohit Pardasani, CCIEx5 # 21282, for an in-depth look at every technical aspect of the new CCNP Service Provider track. --- ### 271. Learning Path INE – Getting Started in Networking - URL: https://cyberlabarchive.com/courses/ine-getting-started-in-networking - Category: iNE - Downloadable Files: 1 (14.3 GB) - Formats: ZIP - Description: Networking is the core lifeblood of all business’s IT and has been our focus here at INE for over 15 years. The sample playlist below is a cross-section of our Networking content and our Expert Networking Instructors, so you can see firsthand how these videos can help you become an Expert in Networking as well. --- ### 272. Learning Path INE – Juniper JNCIA-Junos - URL: https://cyberlabarchive.com/courses/ine-juniper-jncia-junos - Category: iNE - Downloadable Files: 1 (17.1 GB) - Formats: ZIP - Description: This learning path consolidates all INE’s Juniper JNCIA-Junos content into a single trackable path you can follow to your success! The series focuses on all JNCIA-Junos blueprint technologies as per Juniper’s requirements. The series has all the ingredients required for you to pass the Juniper JUNCIA-Junos JNO-104 exam. Join Keith Bogart, for an in-depth look at every technical aspect of the new JNCIA-Junos track, including core network topics to Juniper-specific features and command-line usage. This course also provides the opportunity to gain hands-on practice with the Junos CLI and Juniper features utilizing INE’s Lab Task platform. --- ### 273. Learning Path INE – Juniper JNCIA-SEC - URL: https://cyberlabarchive.com/courses/ine-juniper-jncia-sec - Category: iNE - Downloadable Files: 1 (2.7 GB) - Formats: ZIP - Description: This learning path consolidates all INE’s Juniper JNCIA-SEC content into a single trackable path you can follow to your success! The series focuses on almost every JNCIA-SEC blueprint technology as per Juniper’s requirements. The series has all the ingredients required for you to pass the Juniper JNCIA-SEC JN0-231 exam. Join Piotr Kaluzny, for an in-depth look at every technical aspect of the new JNCIA-SEC track, including core topics to SRX-specific features and command-line usage. This course also provides the opportunity to gain hands-on practice with the Junos OS CLI and Juniper SRX features utilizing INE’s Lab Task platform. --- ### 274. Learning Path INE – Juniper JNCIS-ENT & JNCIP-ENT - URL: https://cyberlabarchive.com/courses/juniper-jncis-ent-jncip-ent - Category: iNE - Downloadable Files: 1 (16 GB) - Formats: ZIP - Description: This learning path consolidates all INE’s Juniper JNCIS-ENT and JNCIP-ENT content into a single trackable path you can follow to your success! The series focuses on all JNCIS-ENT and JNCIP-ENT blueprint technologies as per Juniper’s requirements. The series has all the ingredients required for you to pass the Juniper JNCIS-ENT JN0-349 exam and to pass the Juniper JNCIS-ENT JN0-648 exam. Join Rohit Pardasani, for an in-depth look at every technical aspect of the new JNCIS-ENT and JNCIP-ENT track. This course also provides the opportunity to gain hands-on practice with the Junos CLI and Juniper features utilizing INE’s Lab Task platform. --- ### 275. Learning Path INE – FortiGate Network Security Engineer - URL: https://cyberlabarchive.com/courses/fortigate-network-security-engineer - Category: iNE - Downloadable Files: 1 (4 GB) - Formats: ZIP - Description: This learning path consolidates all INE’s FortiGate content into a single trackable path you can follow to your success! The series focuses on security technologies and solutions supported by Fortinet’s flagship next-generation firewall system – FortiGate. It covers fundamental and advanced concepts important for every FortiGate Administrator, System/Support Engineer, and Fortinet Network Security Expert (NSE) student – including those studying for the NSE 4 & 5 certifications. Join Piotr Kaluzny, for an in-depth look at every technical aspect of the new FortiGate Network Security Engineer track, including core topics to FortiGate-specific features and command-line usage. This course also provides the opportunity to gain hands-on practice with FortiGate’s CLI/GUI and its features utilizing the INE’s Lab Task platform. --- ### 276. Learning Path INE – Check Point Certified Security Administrator (CCSA) - URL: https://cyberlabarchive.com/courses/check-point-certified-security-administrator-ccsa - Category: iNE - Downloadable Files: 1 (1.9 GB) - Formats: ZIP - Description: This learning path consolidates all INE’s Check Point Certified Security Administrator (CCSA) content into a single trackable path you can follow to your success!The series focuses on security technologies and solutions supported by the Check Point’s flagship next-generation firewall system. It covers all essential and fundamental concepts that are important for every Check Point Firewall Administrator, System/Support Engineer or Check Point Certified Security Administrator (CCSA) student. Join Piotr Kaluzny, for an in-depth look at every technical aspect of this track, including core topics, to Check-Point-Firewall-specific features and command-line usage. This training also provides the opportunity to gain hands-on practice with the Check Point’s CLI/GUI and its features utilizing the INE’s Lab Task platform. --- ### 277. Learning Path INE – CCNP Enterprise Concentration Exams - URL: https://cyberlabarchive.com/courses/ccnp-enterprise-concentration-exams - Category: iNE - Downloadable Files: 4 (85.7 GB) - Formats: 001, 002, 003, 004 - Description: In order to obtain a Cisco CCNP Enterprise certification, one needs to pass two exams, a “Core” exam (known as the “Enterprise Core” or “ENCOR” exam) and a “Concentration” exam. There is only one Core exam, but several Concentration exams exist to choose from. This Learning Path is designed to help you learn all of the material you’ll need to know to pass either the “Cisco Enterprise Advanced Routing & Services (ENARSI)” Concentration exam or the “Designing Cisco Enterprise Networks (ENSLD)” Concentration exam. After selecting the exam you wish to pursue, simply go through all of the videos, quizzes, and labs associated with that exam in our Learning Path, and you’ll be on the road to success! --- ### 278. Learning Path INE – Data Center CORE Exam: 350-601 DCCOR - URL: https://cyberlabarchive.com/courses/data-center-core-exam-350-601-dccor - Category: iNE - Downloadable Files: 1 (16.7 GB) - Formats: ZIP - Description: This series is for Cisco Data Center Professionals and CCNP Data Center candidates alike, focusing on the design, implementation, verification, and troubleshooting of technologies such as Nexus NX-OS Ethernet Switching, Application Centric Infrastructure (ACI), Unified Computing System (UCS), and Storage Networking. This series will help you prepare for the newest DCCOR exam which is part of the CCNP Data Center certification track. --- ### 279. Learning Path INE – CCNP Data Center Concentration Exams - URL: https://cyberlabarchive.com/courses/cnp-data-center-concentration-exams - Category: iNE - Downloadable Files: 1 (6.4 GB) - Formats: ZIP - Description: This series is for Cisco Data Center Professionals and CCNP Data Center candidates alike, focusing on the design, implementation, verification, and troubleshooting of technologies such as Nexus NX-OS Ethernet Switching, Application Centric Infrastructure (ACI), Unified Computing System (UCS), and Storage Networking. This series will help you prepare for the newest DCID, and DCACI exams which are part of the CCNP Data Center certification track. --- ### 280. Learning Path INE – CCNP Security Concentration Exams - URL: https://cyberlabarchive.com/courses/ccnp-security-concentration-exams - Category: iNE - Downloadable Files: 1 (35.1 GB) - Formats: ZIP - Description: This learning path consolidates all INE’s CCNP Security Concentration exams content into a single trackable path you can follow to your success! This series explains how to implement and operate Cisco’s flagship security products and appliances including Cisco Secure Firewall, Cisco Identity Services Engine, Cisco Secure Email Gateway, Cisco Secure Web Appliance, Cisco VPN solutions, Cisco Security Automation and Programmability and Secure Cloud Access for Users and Endpoints. It covers all essential and fundamental concepts that are important for every Cisco Certified Network Professional (CCNP) Security student. Join Piotr Kaluzny, for an in-depth look at every technical aspect of this track, including fundamental topics, to Cisco-platform-specific features and command-line usage. This training also provides the opportunity to gain hands-on practice with several Cisco products (CLI/GUI) and their features utilizing the INE’s Lab Task platform. --- ### 281. Signal Labs – Offensive Tool Development - URL: https://cyberlabarchive.com/courses/signal-labs-offensive-tool-development - Category: Other Institutions - Downloadable Files: 1 (5.4 GB) - Formats: ZIP - Description: This course covers custom tool development for offensive security campaigns at the user, kernel and hypervisor levels. Write your own custom code in Rust from scratch, covering both the high-level design of our code to complete guided walkthroughs of our custom code development process, including our own Rust-based COFF loaders, anti-EDR modules, C2 server and agents, kernel rootkits, hypervisor implants and more. At completion of the training, you will be competent in programming your own framework for red team exercises, including custom C2 & implant development leveraging secure communications & extensibility via modules. You will also have experience developing custom post-exploitation modules to dump memory and perform common post-exploitation tasks while bypassing/evading EDRs and securely exfiltrating data over encrypted comms to prevent privacy or security risks during offensive operations. You will also have experience with certain advanced techniques used by the particularly skilled APT groups (e.g. blue-pill hypervisors, finding & exploiting quick 0-days for privilege escalation). - Syllabus Topics: * Core C2 Framework InternalsC2 & Implant RelationshipOperational ConcernsMethods of CommunicationImplant FunctionalityExtensibility via ModulesExamining Public C2s * Creating our C2 (Design & Dev)RustCore Functionality DevelopmentAdding ExtensibilitySystem Profiling & StealthRuntime Module Loading * Module DevelopmentProcess MigrationPersistence & Lateral MovementAdvanced EDR EvasionReversing / Analysis EvasionLoading Kernel Rootkits * Kernel & Hypervisor TechniquesAdvanced Rootkit TechniquesHypervisor TheoryCreating a Blue-Pill Hypervisor in Rust --- ### 282. Learning Path INE – Security CORE Exam: 350-701 SCOR - URL: https://cyberlabarchive.com/courses/ine-security-core-exam-350-701-scor - Category: iNE - Downloadable Files: 1 (15.1 GB) - Formats: ZIP - Description: This learning path consolidates all INE’s CCNP Security Core exam content into a single trackable path you can follow to your success! This series explains how to implement and operate core security technologies including network security, cloud security, content security, endpoint protection and detection, secure network access and visibility and enforcement on Cisco’s flagship security products and appliances. It covers all essential and fundamental concepts that are important for every Cisco Certified Network Professional (CCNP) Security student. Join Piotr Kaluzny, for an in-depth look at every technical aspect of this track, including fundamental topics, to Cisco-platform-specific features and command-line usage. This training also provides the opportunity to gain hands-on practice with several Cisco products (CLI/GUI) and their features utilizing the INE’s Lab Task platform. --- ### 283. Learning Path INE – Network Programmability & Automation - URL: https://cyberlabarchive.com/courses/network-programmability-automation - Category: iNE - Downloadable Files: 1 (20.6 GB) - Formats: ZIP - Description: Network Automation has steadily become one of the most crucial components in managing increasingly complex network environments. As businesses adopt more IoT devices, move more services to the cloud, and expand their operations, the demand for scalable, automated solutions has greatly intensified, making it a critical component of any modern IT infrastructure. This Learning Path is designed to equip learners with the practical skills needed to meet the demands of today’s and tomorrow’s growing network automation solutions. Starting with an introduction to network programmability and automation, this path progresses through the fundamentals and advanced techniques of using Python for network automation, maintaining configuration consistency with Ansible, and exploring automation techniques for Cisco Enterprise, Security, and Data Center network solutions. The Network Programmability and Automation Learning Path will help you skill up for your career and ensure that you remain relevant in the ever-evolving field of Network Automation. --- ### 284. Learning Path INE – Enterprise CORE Exam: 350-401 ENCOR - URL: https://cyberlabarchive.com/courses/enterprise-core-exam-350-401-encor - Category: iNE - Downloadable Files: 1 (63.8 GB) - Formats: ZIP - Description: INE offers a wide variety of courses and materials to help you pass your Cisco 350-401 ENCOR exam. This Learning Path is designed to help you logically navigate through our offerings so that you can most efficiently make use of your studying opportunities to achieve the CCNP Enterprise Certification. - Syllabus Topics: * Welcome * Network Infrastructure Features & Protocols (350-401 ENCOR v1.1) * Security (350-401 ENCOR v1.1) * Exploring Virtualization (350-401 ENCOR v1.1) * Monitoring & Troubleshooting Technologies (350-401 ENCOR v1.1) * Understand Network Architectures (350-401 ENCOR v1.1) * Network Automation & Programmability (350-401 ENCOR v1.1) * ENCOR Practice Labs (350-401 ENCOR v1.1) * Final Preparations * Goodbye --- ### 285. Learning Path INE – Check Point Certified Security Expert (CCSE) - URL: https://cyberlabarchive.com/courses/check-point-certified-security-expert-ccse - Category: iNE - Downloadable Files: 1 (1.3 GB) - Formats: ZIP - Description: This learning path consolidates all INE’s Check Point Certified Security Expert (CCSE) content into a single trackable path you can follow to your success! The series focuses on security technologies and solutions supported by the Check Point’s flagship next-generation firewall system. It covers all essential and fundamental concepts that are important for every Check Point Firewall Administrator, System/Support Engineer or Check Point Certified Security Expert (CCSE) student. Join Piotr Kaluzny, for an in-depth look at every technical aspect of this track, including core topics, to Check-Point-Firewall-specific features and command-line usage. This training also provides the opportunity to gain hands-on practice with the Check Point’s CLI/GUI and its features utilizing the INE’s Lab Task platform. --- ### 286. Learning Path INE – Collaboration CORE Exam: 350-801 CLCOR - URL: https://cyberlabarchive.com/courses/collaboration-core-exam-350-801-clcor - Category: iNE - Downloadable Files: 1 (11.2 GB) - Formats: ZIP - Description: Embark on a comprehensive learning journey to master the skills required for the Cisco Certified Network Professional (CCNP) Collaboration Core (CLCOR) exam with our thoughtfully curated learning path. The CCNP CLCOR exam is a key certification for professionals aspiring to demonstrate their expertise in advanced collaboration technologies, ensuring they can design, deploy, configure, and troubleshoot complex collaboration solutions. By following this learning path, you will acquire the knowledge needed to pass the CCNP CLCOR exam and gain practical skills that are directly applicable to real-world collaboration scenarios. Whether you are an experienced professional or just starting your journey in collaboration technologies, this learning path provides a structured and comprehensive approach to achieving CCNP Collaboration certification. --- ### 287. Learning Path INE – Wireless Enterprise Networking - URL: https://cyberlabarchive.com/courses/wireless-enterprise-networking - Category: iNE - Downloadable Files: 1 (7.4 GB) - Formats: ZIP - Description: Unlock the potential of wireless enterprise networking with our comprehensive learning path. Designed for IT professionals and networking enthusiasts alike, this curated collection of on-demand video courses provides a deep dive into the intricacies of building, securing, and optimizing enterprise Wi-Fi networks. Delve into fundamental principles of Wi-Fi architecture, gain insights into enterprise-grade concepts and implementation strategies, and explore the nuances of traffic control and quality of service management. Whether you’re a seasoned network administrator or just starting out, this learning path offers invaluable knowledge and practical skills to navigate the complexities of modern enterprise Wi-Fi environments. Elevate your expertise and stay ahead in the dynamic world of wireless networking. --- ### 288. Learning Path INE – DevNet Associate (DEVASC 200-901) - URL: https://cyberlabarchive.com/courses/devnet-associate-devasc-200-901 - Category: iNE - Downloadable Files: 1 (7.2 GB) - Formats: ZIP - Description: This comprehensive collection of courses is designed to prepare IT professionals for the Cisco DevNet Associate Exam v1.1 (DEVASC 200-901), and to guide them through the nuances of automating and optimizing network and security infrastructures, deploying applications with best practices in security, and leveraging Cisco’s specialized tools for enhanced operational efficiency. --- ### 289. Jason Haddix – The Bug Hunter’s Methodology - URL: https://cyberlabarchive.com/courses/bug-hunters-methodology-live-course - Category: Other Institutions - Downloadable Files: 1 (4.8 GB) - Formats: ZIP - Description: The Bug Hunter’s Methodology (TBHM) is a two-day, paid, virtual training that aims to equip you with the latest tools, techniques, and strategies, plus provide a data-driven methodology on how and where to search for vulnerabilities that are currently common in the wild. Unlike other courses, TBHM Live is not an A-Z or beginner-oriented course. True to the spirit of my public TBHM talks, my emphasis is on expert tips, time-saving tricks, practical Q&As, automation strategies, vetted resources, and engagement via the dedicated community on Discord. - Syllabus Topics: * Day 1Recon Part 1: Recon ConceptsRecon Part 2: Acquisitions and DomainsRecon Part 3: Subdomain EnumerationRecon Part 4: Server & App Level AnalysisRecon Part 5: Profiling People for Social EngineeringRecon Part 6: Recon Adjacent Vulnerability AnalysisRecon Part 7: Recon Frameworks and Helpers * Day 2Application Analysis Part 1: Analysis ConceptsApplication Analysis Part 2: Vulnerability AutomationApplication Analysis Part 3: Content DiscoveryApplication Analysis Part 4: The Big QuestionsApplication Analysis Part 5: Application Heat MappingApplication Analysis Part 6: Web Fuzzing & Analyzing Fuzzing ResultsApplication Analysis Part 7: Introduction to Vulnerability TypesApplication Analysis Part 8: XSS Tips and TricksApplication Analysis Part 9: IDOR Tips and TricksApplication Analysis Part 10: SSRF Tips and TricksApplication Analysis Part 11: XXEApplication Analysis Part 12: File Upload Vulnerabilities Tips and TricksApplication Analysis Part 13: SQL Injection Tips and TricksApplication Analysis Part 14: Command Injection Tips and TricksApplication Analysis Part 15: COTS and Framework ScanningApplication Analysis Part 16: Bypass of security controls --- ### 290. SpecterOps – Adversary Tactics: Vulnerability Research for Operators - URL: https://cyberlabarchive.com/courses/adversary-tactics-vulnerability-research-for-operators - Category: SpecterOps - Downloadable Files: 2 (3 GB) - Formats: PDF, ZIP - Description: In Adversary Tactics: Vulnerability Research for Operators, you will learn an operator-focused approach to find the vulnerabilities needed to escalate privileges, execute arbitrary code, or facilitate lateral movement in Windows environments. We will give you the methodology and identify tools to find these weaknesses during active operations, when costly lead time and dedicated lab environments are unavailable. This course covers the vulnerability classes that SpecterOps routinely finds on engagements and dives into their root causes, identification techniques, and exploitation methods. --- ### 291. Mandiat – Hunt Mission Workshop - URL: https://cyberlabarchive.com/courses/hunt-mission-workshop - Category: Other Institutions - Downloadable Files: 1 (3 MB) - Formats: ZIP - Description: The Mandiant – Hunt Mission Workshop, also known as the Practical Threat Hunting course, is a comprehensive three-day training program designed to equip threat hunters and incident responders with the core concepts of developing and executing threat hunts. - Syllabus Topics: * Apply cyber threat intelligence concepts to hunt for adversary activity in their environment. * Establish a repeatable hunt methodology and develop hunt use cases. * Leverage endpoint data to hunt. * Establish measures of effectiveness for a hunt program. --- ### 292. Mandiant – Creative Red Teaming - URL: https://cyberlabarchive.com/courses/mandiant-creative-red-teaming - Category: Other Institutions - Downloadable Files: 1 (503 MB) - Formats: ZIP - Description: Mandiant red teams have conducted hundreds of covert red team operations. This course draws on that knowledge to help learners improve their ability to prevent, detect, and respond to threats in an enterprise network. Learners will better understand advanced threat actor behavior that Mandiant experts have observed through incident response investigations. Learners will also see how Mandiant red teams refine advanced attacker tactics, techniques and procedures (TTPs) for use by red teams in their attempts to emulate advanced threat actors. Learners will develop the ability to think like an attacker and creatively use these TTPs to accomplish response goals while avoiding detection. Mandiant red team leads conduct this fast-paced technical course with presentations and scenario-based labs based on frontline expertise and intelligence-based security research. Learners receive hands-on experience conducting covert cyber attack simulations that mimic real-world threat actors. They will learn how to bypass advanced network segmentation, multi-factor authentication and application whitelisting, abuse web applications, escalate privileges and steal data while circumventing detection methods. - Syllabus Topics: * Identify, fingerprint and compromise a target with custom-crafted payloads while bypassing antivirus (AV) detection * Deploy creative tactics—from older techniques to newer ones— to maintain access to any compromised machine * Understand the tools and methods attackers use to exploit the lowest-level user privileges to gain higher, administrative privileges and move laterally throughout a network while avoiding security alerts * Avoid and bypass various challenges such as application whitelisting, encryption, multi-factor authentication, sandboxes and more * Exfiltrate data from “secure” networks undetected, without triggering firewalls or generating alerts * Identify the goals and challenges of managing a red team operation, including risk measurement and reporting --- ### 293. Bitscout – Remote Forensic Toolkit - URL: https://cyberlabarchive.com/courses/bitscout-remote-forensic-toolkit - Category: Kaspersky - Downloadable Files: 1 (3.4 GB) - Formats: ZIP - Description: Incident response to live cyberattacks requires silent navigation through compromised assets, sometimes in large distributed networks. The popular approach relies on EDR or other live agent-based solutions. However, the activation of security agents and obvious activities on live compromised systems may trigger alerts of advanced threat actors. Once alerted, a cleanup operation and destruction of evidence can happen. Moreover, offline system analysis may not be easy due to the physical distance to the compromised system or scale of the network. This is where remote stealthy threat discovery with “scoutware”, software for threat hunting and instant system analysis, becomes incredibly useful. In our training you will be introduced to the free, open-source scoutware tool Bitscout developed by Vitaly Kamluk from Kaspersky GReAT in collaboration with INTERPOL, that has been successfully used by Kaspersky researchers for years. The cases demonstrated in the training were developed by Vitaly Kamluk and Nicolas Collery, Executive Director at DBS Bank, primary incident responder. During the training you will create your own remote analysis tool and practice it right away in the provided virtual lab! - Syllabus Topics: * Day 1: Static AnalysisIntroduction and theoryCrafting and customising your own scoutwareExercises * Day 2: Dynamic Analysis*Introduction to remote Dynamic AnalysisBypassing Windows authenticationStripping off full disk encryptionDiscovering various malware, including kernel mode rootkitReconstructing malware startup chainRunning custom LiveCD on top of Bitscout --- ### 294. Dark Vortex: Offensive Tool Development - URL: https://cyberlabarchive.com/courses/offensive-tool-development - Category: Dark Vortex - Downloadable Files: 1 (2 GB) - Formats: ZIP - Description: The Offensive Tool Development is the first course which is dedicated to Windows API exploitation to build your own tools for Red Team Engagements. If you have completed the Malware On Steroids course, then you can merge the capabilities you build during this course with the Command & Control built during the MOS course. This helps you to build your own CnC modules, all of which can be run in memory for detection evasion. There are a lot of courses which focus on exploitation, reversing and other offensive stuff, but none of them focus on writing your own tools and brining your own toolkit during an engagement. This course is highly technical in nature, involving a lot of coding and all the tools will be written in either C or C++, sometimes PowerShell (maybe 5%) to make sure the user has capabilitiy to load every tool in memory and evade memory artefacts or detections. During the course, you will build your own reflective tools and shellcode for Host Enumeration, Lateral Movement, Domain Enumeration and Domain Privilege Escalation. You will learn to build different types of remote access tools running over different protocols including RPC, SMB, and HTTP and use exploit Windows Security Tokens for lateral movement within a Domain Environment. --- ### 295. Corelan Win32 Exploit Development Bootcamp - URL: https://cyberlabarchive.com/courses/corelan-win32-exploit-development - Category: Other Institutions - Downloadable Files: 1 (284 MB) - Formats: ZIP - Description: The Corelan Bootcamp is a truly unique opportunity to learn both basic & advanced techniques from an experienced exploit developer, at a conference. During this (typically 3 ‘long’ day) course, students will be able to learn all ins and outs about writing reliable exploits for the Windows platform.  The trainer will share his “notes from the field” and various tips & tricks to become more effective at writing exploits. We believe it is important to start the course by explaining the basics of stack buffer overflows and exploit writing, but this is most certainly not “your average” entry level course. In fact, this is a true bootcamp and one of the finest and most advanced courses you will find on Win32 stack based exploit development. This hardcore hands-on course will provide students with solid understanding of current x86 (stack based) exploitation techniques and memory protection bypass techniques.  We make sure the course material is kept updated with current techniques, includes previously undocumented tricks and techniques, and details about research we performed ourselves.  Combined with the way the course is built up, this will turn this class into a truly unique experience. - Syllabus Topics: * The x86 environment * The exploitdevelopment labenvironment * Stack Buffer Overflows * Egg hunters * Reliability++ & Reusability++ * Metasploit framework Exploit Modules * ASLR * DEP * Intro to x64 exploitation --- ### 296. Android UserLand Fuzzing and Exploitation - URL: https://cyberlabarchive.com/courses/android-userland-kernel-fuzzing-and-exploitation - Category: BlackHat - Downloadable Files: 1 (21.3 GB) - Formats: ZIP - Description: Android Userland & Kernel Fuzzing and Exploitation Step into the realm of comprehensive Android security with our integrated “Android Userland and Kernel Fuzzing and Exploitation” course. Designed for both novices and seasoned professionals, this course offers an extensive curriculum that covers the spectrum of Android vulnerabilities and their exploitation. Starting with the Userland component, learners will grasp how to detect bugs in Android Userland Applications and exploit memory corruptions. The course provides a deep understanding of ARM assembly, reverse engineering, and the development of robust exploits, bypassing exploit mitigations like NX and ASLR. With 43 labs across 9 modules, students will employ advanced fuzzing techniques to pinpoint exploitable vulnerabilities. The journey continues as we pivot to the Android kernel on the second day, where the intricacies of kernel internals, such as memory allocators and driver programming, are unraveled. Students will learn to discover bugs using kernel fuzzing techniques, including the use of sanitizers and Syzkaller. The course will guide attendees through the construction of kernel exploits crucial for sandbox escape, examining real-world vulnerabilities and the art of kernel debugging. --- ### 297. OffSec – Get Good at Python - URL: https://cyberlabarchive.com/courses/offsec-get-good-at-python - Category: OffSec - Downloadable Files: 1 (30 MB) - Formats: ZIP - Description: Let’s delve into the “Get Good at Python” learning path offered by OffSec . This curated cybersecurity path aims to enhance your Python skills and empower you with practical knowledge. Here’s what you can expect from this learning journey --- ### 298. EC Council: Certified Ethical Hacker Elite - URL: https://cyberlabarchive.com/courses/certified-ethical-hacker-elite - Category: EC-Council - Downloadable Files: 1 (11.6 GB) - Formats: ZIP - Description: In Certified Ethical Hacker Elite Course You will understand how to use open-source intelligence to your advantage. Further, you will discover how to analyze and interpret network protocols and leverage Wireshark. Moving ahead, you will learn how to perform ethical hacking using Nmap. You will also learn how to perform information gathering and enumeration of Windows-specific services with Nmap and OpenVAS. You will then understand how hackers use session hijacking to attack an organization and the techniques to prevent it. - Syllabus Topics: * Open Source Intelligence * Wireshark for Ethical Hackers * Ethical Hacking with Nmap * Windows Penetration Testing Essentials * Session Hijacking and Prevention Techniques * Power of Next Generation Firewalls * OWASP Top 10 Security Fundamentals * Burp Suite: Web Application Penetration Testing * Deep Dive into Network Assessments * Applied Secure Smart City --- ### 299. Pentester Academy – Network Pentesting - URL: https://cyberlabarchive.com/courses/pentester-academy-network-pentesting - Category: Pentester Academy - Downloadable Files: 1 (5.8 GB) - Formats: ZIP - Description: A non-exhaustive set of topics covered in Network Pentesting is include - Syllabus Topics: * Pentesting Routers * Attacking SSH with Metasploit, Nmap, Medusa, Hydra, Ncrack * SNMP attacks * Bypassing Firewalls * Payloads and Shells * HTTP/HTTPS tunneling * Port Forwaring, Pivoting, Reverse Connects * Privilege Escalation and UAC bypass * Hash Dumping and Mimikatz * Windows Sessions, Stations and Desktops * Impersonation attacks * WMIC post exploitation * Hidden bind shells * Bitsadmin * Browser Password Recovery * PAC Attacks * DNS Poisoning * Veil Framework and AV Evasion * Metasploit Loader 32/64-bit * DLL Hijacking basics * DLL Hijacking and Meterpreter * Privilege Escalation via DLL Hijacking * DLL Injection using Appinit_DLLs * Stripping Manifest Files for DLL Hijacking * Attacking with DLL Forwarding * Anti-Forensics techniques * Memory Dumping and Analysis * … ton of other interesting topics --- ### 300. Pentester Academy – Web Application Pentesting - URL: https://cyberlabarchive.com/courses/pentester-academy-web-application-pentestin - Category: Pentester Academy - Downloadable Files: 1 (5 GB) - Formats: ZIP - Description: A beginner friendly introduction to Web Application Security with starts from the very basics of the HTTP protocol and then takes on more advanced topics. --- ### 301. Pentester Academy – GNU Debugger Megaprimer - URL: https://cyberlabarchive.com/courses/gnu-debugger-megaprimer - Category: Pentester Academy - Downloadable Files: 1 (1.1 GB) - Formats: ZIP - Description: This course will cover the basics of using GDB on Linux – x86, x86_64 and ARM based platforms. - Syllabus Topics: * Pentest * Security --- ### 302. Download Pentester Academy – x86 Assembly Language and Shellcoding on Linux - URL: https://cyberlabarchive.com/courses/x86-assembly-language-and-shellcoding-on-linux - Category: Pentester Academy - Downloadable Files: 1 (5.5 GB) - Formats: ZIP - Description: This course focuses on teaching the basics of 32-bit assembly language for the Intel Architecture (IA-32) family of processors on the Linux platform and applying it to Infosec. Once we are through with the basics, we will look at writing shellcode, encoders, decoders, crypters and other advanced low level applications. --- ### 303. Pentester Academy – Pentesting iOS Applications - URL: https://cyberlabarchive.com/courses/pentesting-ios-applications - Category: Pentester Academy - Downloadable Files: 1 (4.5 GB) - Formats: ZIP - Description: This course focuses on the iOS platform and application security and is ideal for pentesters, researchers and the casual iOS enthusiast who would like to dive deep and understand how to analyze and systematically audit applications on this platform using a variety of bleeding edge tools and techniques. A non-exhaustive list of topics to be taught includes: --- ### 304. Download Pentester Academy – Python for Pentesters - URL: https://cyberlabarchive.com/courses/python-for-pentesters - Category: Pentester Academy - Downloadable Files: 1 (3.8 GB) - Formats: ZIP - Description: This course will teach you Python scripting and its application to problems in computer and network security. This course is ideal for penetration testers, security enthusiasts and network administrators who want to learn to automate tasks or go beyond just using ready made tools. We will be covering topics in system security, network security, attacking web applications and services, exploitation techniques, malware and binary analysis and task automation. A non-exhaustive list of topics to be taught includes: --- ### 305. x33fcon – From zero to first 0-day - URL: https://cyberlabarchive.com/courses/from-zero-to-first-0-day - Category: Other Institutions - Downloadable Files: 1 (647 MB) - Formats: ZIP - Description: The workshop is designed to introduce participants to the arcana of the best methods and tools for automatic detection of vulnerabilities and bug analysis in software in a practical way. In the beginning, we will focus on understanding techniques: binary analysis, searching for various types of vulnerabilities and debugging. We “bite” into practical fuzzing and mistakes that keep programmers awake at night using their non-deterministic occurrence. Participants will learn techniques for analyzing application weaknesses, writing grammars, and obtaining test corpora guaranteeing exciting results. After understanding the aspects of bughunting, the time will come to automate vulnerability analysis and debugging methods to ensure that defective code elements are quickly found. The training focuses on x86 / x64 architecture, and attacking projects processing data in various formats (text, binary), network fuzzing on Windows and Linux platforms. - Syllabus Topics: * Why should you look for security vulnerabilities? * Why is it worth doing with fuzzers and automated methods? * The most common security problems in software and mitigation mechanismsVulnerability classesProtection mechanisms * Vulnerability research workflowEight fuzzing laws * Fuzzers under the hood and many a fuzzer’s namesGuided fuzzingDumb fuzzingSmart fuzzingMutation based fuzzingGeneration based fuzzingHypervisors specializing in fuzzingFuzzing = Unit Tests with DeepState?Antifuzzing * Introduction to fuzzing on GNU / LinuxHow to find a promising component to attack?Evolution and testing of code coverageWhitebox attackingGreybox attackingBlackbox attackingfuzzing on Windows and LinuxOther dimensions of fuzzingLarge scale fuzzing * Static code analysis * Make vulnerability reporting great again! --- ### 306. Multi-Cloud Red Team Analyst [MCRTA] - URL: https://cyberlabarchive.com/courses/multi-cloud-red-team-analyst-mcrta - Category: Cyberwarfare - Downloadable Files: 1 (866 MB) - Formats: ZIP - Description: Multi-Cloud Red Team Analyst (MCRTA) is designed for cybersecurity enthusiasts who want to embark on their Cloud Red Team journey. In this comprehensive program, you’ll dive deep into the fundamentals of AWS, Azure, and GCP Cloud Security. The focus is on practical skills, ensuring that you gain hands-on experience in Multi-Cloud Red Teaming. - Syllabus Topics: * Introduction to Multi-Cloud Red Team * Red Teaming in AWS Cloud * Red Teaming in Azure Cloud * Red Teaming in Google Cloud --- ### 307. EC Council: The Complete Ethical Hacker’s Toolkit - URL: https://cyberlabarchive.com/courses/the-complete-ethical-hackers-toolki - Category: EC-Council - Downloadable Files: 1 (25 GB) - Formats: ZIP - Description: The Complete Ethical Hacker’s Toolkit is a comprehensive learning path offered by EC-Council Learning. This skill path consists of 15 micro courses designed to help you either start or transition into a career in ethical hacking and penetration testing. - Syllabus Topics: * Practical Linux for Pentesting & Bug Bounties * Deep Web and Cybersecurity * A Guide to Hands On Network Pentesting * Hands-on Penetration Testing with Netcat * Session Hijacking and Prevention Techniques * Web Hacker’s Toolbox: Tools Used by Successful Hackers * Nmap for Ethical Hacking, Network Security, & Bug Bounties * Foundations of Hacking and Pentesting Android Apps * Hands-on Linux for DevOps & Cloud Engineers * Communication with IoT * Troubleshooting Slow Network with Wireshark * Web Application Security Testing with Google Hacking * Beginners Cryptography Demystified * Jupyter Notebook for Everyone * Mastering Nuclei with Automation for Pentesting & Bug Bounty --- ### 308. Ptrace Security – Advanced Software Exploitation - URL: https://cyberlabarchive.com/courses/ptrace-security-advanced-software-exploitation - Category: Other Institutions - Downloadable Files: 1 (11 MB) - Formats: ZIP - Description: The Advanced Software Exploitation (ASE) course offers security professionals an opportunity to test and develop their skills like never before. During this course, students will learn to identify common vulnerabilities and then use them to develop exploits for a wide range of software applications, including popular Windows applications, interpreted languages, and Web browsers. In the first half of the course, attendees will use fuzzing, reverse engineering, and source code auditing, to attack a wide variety of applications (e.g. iTunes, Firefox, Vulnserver, etc.) and then use proven exploitation techniques to develop an exploit for one of the VMs (Windows 7, Windows 8.1 and Windows 10). Then, in the second half of the course, the focus will shift from classic vulnerabilities to more advanced ones. In this section, students will learn how to escape Java sandbox using a type confusion vulnerability, how to circumvent the ASLR without pointer leaks, and how to use precise heap spraying, just to name a few. By the end of this course, students will know how to find software vulnerabilities using fuzzing, reverse engineering, and source code auditing, and then how to write their own exploits in Python, JavaScript, or Java. - Syllabus Topics: * Fundamentals: Intro * Fundamentals: Stack Buffer Overflow * Fundamentals: Structured Exception Handler Overwrite * File Format Fuzzing: Intro * File Format Fuzzing: The Peach Fuzzer * Network Protocol Fuzzing: Vulnerability Discovery * Network Protocol Fuzzing: Exploitation * Attacking Web Browsers: Vulnerability Discovery * Attacking Web Browsers: Exploitation * Practical Patch Diffing * Exploiting vulnerabilities in the Oracle JVM: Vulnerability Discovery * Exploiting vulnerabilities in the Oracle JVM: Exploitation * Advanced Windows exploitation * Conclusion --- ### 309. EC Council: Certified Cybersecurity Technician (CCT) - URL: https://cyberlabarchive.com/courses/certified-cybersecurity-technician - Category: EC-Council - Downloadable Files: 3 (30.9 GB) - Formats: ZIP - Description: The Certified Cybersecurity Technician (CICT) is an entry-level cybersecurity program created by EC-Council, the creator of the Certified Ethical Hacker (CIEH) certification, to address the global demand for a qualified cybersecurity workforce. EC-Council developed the CICT to provide individuals starting their careers in IT and cybersecurity with a certification that validates their hands-on technical skills. - Syllabus Topics: * Information Security Threats and Vulnerabilities * Information Security Attacks * Network Security Fundamentals * Identification, Authentication, and Authorization * Network Security Controls – Administrative Controls * Network Security Controls – Physical Controls * Network Security Controls – Technical Controls * Network Security Assessment Techniques and Tools * Application Security * Virtualization and Cloud Computing * Wireless Network Security * Mobile Device Security * IoT and OT Security * Cryptography * Data Security * Network Troubleshooting * Network Traffic Monitoring * Network Logs Monitoring and Analysis * Incident Response * Computer Forensics * Business Continuity and Disaster Recovery * Risk Management * Wrap Up --- ### 310. Social Engineering: Phishing Mastery - URL: https://cyberlabarchive.com/courses/social-engineering-phishing-mastery - Category: CQURE - Downloadable Files: 1 (1.2 GB) - Formats: ZIP - Description: With all the cybersecurity systems we have developed, we still aren’t immune enough from one of the biggest cybersecurity threats. Users are easier to hack than computers and only one human mistake can ruin even the most advanced cybersecurity system. That’s why we created the course “Social Engineering & Phishing Mastery” which uncovers tactics and techniques known as social engineering. You’ll learn how attackers gather information on their targets and what information available online is useful for them . You’ll find out how to secure Red Team infrastructure, prepare an efficient payload, and bypass security solutions . All of that working with publicly available tools deployed by scammers every day. Outthinking attackers is just one part of this course. You’ll also cover best practices for reporting and discover how to use what you’ve learned on this course to protect the cybersecurity infrastructure of your company or organization. - Syllabus Topics: * Preparing phishing campaigns * Open Source Intelligence (OSINT) * Google hacking and search engines * Targeted phishing and social media --- ### 311. Infrastructure Pentesting: Hackers Perspective or Notes from the Field - URL: https://cyberlabarchive.com/courses/infrastructure-pentesting-hackers-perspective-or-notes-from-the-field - Category: CQURE - Downloadable Files: 1 (455 MB) - Formats: ZIP - Description: After investing in cybersecurity to protect their systems and data from the possibility of a cyberattack, many companies want to make sure their security countermeasures are effective by conducting a penetration test. But who can they trust to evaluate the effectiveness of security countermeasures? Considering the oft-quoted statistic that around 80% of all cyberattacks are the result of human error, it’s not surprising many people believe that the success of a penetration test lies largely in the skill and experience of the testers. Now, you have the opportunity to prove that you have the skills and experience they need when you complete our advanced cybersecurity training: “Infrastructure Pentesting: Hackers Perspective or Notes From the Field.” This advanced training, which requires a foundational understanding of Powercat and Inveigh tools, is a recorded training extracted from our AWSC 2020 edition. In less than three hours, this training based on real-world scenarios will equip you with the skills and know-how to conduct effective pentest and vulnerability management. We highly recommend this advanced training to penetration testers and any cybersecurity expert eager to develop their skill set and advance their career. - Syllabus Topics: * Pentesting methodology * DNS * OSINT framework * Shellcode examples * Masking techniques * Service enumeration * Password attacks * Spoofing / MITM examples * Example persistency methods --- ### 312. Deep Dive into Penetration Testing on Azure and Other Cloud Technologies - URL: https://cyberlabarchive.com/courses/deep-dive-into-penetration-testing-on-azure-and-other-cloud-technologies - Category: CQURE - Downloadable Files: 1 (535 MB) - Formats: ZIP - Description: In a world where identity theft is rampant and data breaches occur constantly, protecting identity has become the new security perimeter for Azure and other cloud technologies. Effective pentesting needs to identify all types of possible attacks so any weak links in the infrastructure can be rectified or eliminated. Most large companies have already migrated or are planning to migrate to the cloud, and it is highly likely many small and medium companies will follow suit. These companies will need effective pentesting to ensure their cloud or hybrid IT infrastructure is secure without exposed points of entry as easy targets for cyberattackers. You can be in high demand for your penetration testing skills when you complete our advanced cybersecurity training: “Deep Dive into Penetration Testing on Azure and Other Cloud Technologies.” This short and intensive training is a recorded training extracted from our AWSC 2020 edition. In just a little over two hours, you’ll learn advanced pentesting techniques through real-world case studies, demos, and examples. You don’t need to worry about spending long time on learning new skills — this advanced training is compressed to the size of the byte and intensive. You are guaranteed to walk away with actionable insights you can implement right away to boost your career. We highly recommend this advanced training to Penetration Testers, Security Administrators, Security Consultant and any cybersecurity expert eager to develop their skill set and advance their career. - Syllabus Topics: * Cloud Cyber Kill Chain * Recon: Examples * Intrusion / exploitation : Typical Points of Entry, Metadata endpoint * SSRF demo * Persistence: Examples * Privilege escalation: Co-location attacks, Examples, Azure shell --- ### 313. Cheating on Windows, Fuzzing and Buffer Overflow: Attack Scenarios and Protection Methods - URL: https://cyberlabarchive.com/courses/cheating-on-windows-fuzzing-and-buffer-overflow-attack-scenarios-and-protection-methods - Category: CQURE - Downloadable Files: 1 (558 MB) - Formats: ZIP - Description: Cybercriminals are constantly developing more sophisticated ways to hack into systems. According to an April 2021 report, between the third and fourth quarters of 2020 : Microsoft Office malware increased by 199%. Account hijackings are targeted at Office 365 accounts. Exploits targeting new vulnerabilities meanwhile shot up 100% in Q4. Targeted attacks increased 43%. To protect organisations and people from cybercrime, we have a duty to continuously level up our skills. That’s why we created this advanced cybersecurity training: “Cheating on Windows, Fuzzing and Buffer Overflow: Attack Scenarios and Protection Methods.” This advanced training is a recorded lesson extracted from our AWSC 2020 edition. In just 2 hours, you’ll learn how to identify buffer-overflow vulnerabilities in Windows applications, exploit remote code execution vulnerability, and use various modern mitigations for vulnerabilities. In short, you will learn how to apply additional mitigations against software attacks in a short time. We highly recommend this advanced training to cybersecurity specialists, penetration testers, offensive security specialists, and any cybersecurity expert wanting to add to their repertoire of skills and boost their career. - Syllabus Topics: * What is exploit * Buffer Overflow * Fuzzing * Debuggers * Vulnserv * Exploitation demo * Exploitation prevention * Exploit guard --- ### 314. Advanced Attacks Against Active Directory - URL: https://cyberlabarchive.com/courses/advanced-attacks-against-active-directory - Category: CQURE - Downloadable Files: 1 (540 MB) - Formats: ZIP - Description: The use of Microsoft’s Active Directory (AD) remains very popular. It is the core of nearly every organisation’s network environment. While AD provides many benefits to organizations, one of the major drawbacks is the potential for abuse by malicious parties.  Cybercriminals have long targeted Active Directory (AD) as a valuable prize in their quest to gain full control over a network. The consequences of this can be dire. That’s why businesses worldwide are willing to pay top dollar for cybersecurity experts who can detect and mitigate these types of advanced attacks. You can be in high-demand for these skills when you complete our advanced cybersecurity training: “Advanced Attacks Against Active Directory.” This advanced course is a recorded training extracted from our AWSC 2019 edition. In just 2 hours, you’ll learn how to implement a defense strategy to protect an Active Directory. We highly recommend this advanced training to cybersecurity specialists, penetration testers, system administrators, infrastructure administrators, and any cybersecurity expert eager to develop their skill set and advance their career. - Syllabus Topics: * Privilege abuse and misconfigurations in AD * Advanced attacks against PAM and Identity solutions * Kerberoasting * Golden and silver ticket attacks * Pass-the-Hash Technique * Reconnaissance Demo --- ### 315. Windows Internals Red Team Operator [CWI-RTO] - URL: https://cyberlabarchive.com/courses/windows-internals-red-team-operator - Category: Cyberwarfare - Downloadable Files: 1 (7.1 GB) - Formats: ZIP - Description: The Windows Internals Red Team Operator [CWI-RTO] lab offered by cyberwarfare.live is a comprehensive, hands-on learning environment designed to provide real-world experience in Microsoft Windows Internals. In this lab, you will unveil common Win32/NT APIs used by malwares and understand how malwares abuse internals from a user-mode perspective. You will perform various challenges/exercises to learn Windows Internals. You will also learn different kernel data structures (EPROCES, ETHREAD, KPCR etc.) through Windbg. - Syllabus Topics: * Learn about Interrupts and Exception * Object Security (Token, SID, etc) * Object and handles * Simulate Red Team Cycle in Endpoint * Process and thread internals * Portable Executable Basics * System Calls * Develop Malwares & Simulate Adversaries --- ### 316. Stealth Cyber Operator [CSCO] - URL: https://cyberlabarchive.com/courses/stealth-cyber-operator - Category: Cyberwarfare - Downloadable Files: 1 (2.9 GB) - Formats: ZIP - Description: The Stealth Cyber Operator [CSCO] lab offered by cyberwarfare.live is a comprehensive, hands-on learning environment designed to provide real-world experience in stealth cyber operations. In this lab, you will learn how to develop trade-craft for offensive operations and abuse improperly placed and mis-configured security controls in infrastructure. You will also learn resource abuse using Windows APIs, C, C++ & Csharp. The lab focuses on utilizing trade-craft for Red Teaming in a hardened environment and leveraging endpoint security controls (AV, EDR) and much more. - Syllabus Topics: * Red Team Resource Development * Trade-craft Development for Offensive Operations * Utilizing Trade-craft for Red Teaming in Hardened Environment * Blinding Endpoint Defenses [Explicit Edition] --- ### 317. Red Team Specialist [CRTS V1] - URL: https://cyberlabarchive.com/courses/red-team-specialist - Category: Cyberwarfare - Downloadable Files: 1 (16 MB) - Formats: ZIP - Description: The Red Team Specialist [CRTS V1] lab offered by cyberwarfare.live is a comprehensive, hands-on learning environment designed to provide real-world experience in performing adversary simulations. In this lab, you will perform adversary simulations in an Electric PowerGrid Facility You will exploit AD Domain & Certificate Services, Exchange, SSO, MFA & VDI. The lab allows you to follow the Red Team Cycle in multi-segregated networks. Two unique paths are mapped with MITRE ATT&CK for Enterprise. The covered TTPs can be as-is implemented during a realistic engagement. - Syllabus Topics: * Perform Cyber Kill Chain * Abuse Active Directory Environment * Lateral Movement and Network Pivoting * Abuse Enterprise Grade Software * Escape Containerized Environment --- ### 318. SpecterOps – Adversary Tactics: PowerShell - URL: https://cyberlabarchive.com/courses/adversary-tactics-powershell - Category: SpecterOps - Downloadable Files: 1 (87 MB) - Formats: RAR - Description: Automation is necessary to be efficient and successful in security for both offensive and defensive teams. Furthermore, with the rapid pace of migration to cloud infrastructure, the need to interact with infrastructure through automation is more important than ever. PowerShell is the language and shell that drives automation across the Windows and Azure ecosystem. Sitting on top of the massive .NET class library, there is very little that can not be done in PowerShell. Today, PowerShell is relied upon by red teams, threat hunters, incident responders, penetration testers, criminals, and nation-state adversaries alike. Before robust detection capabilities were widely deployed, PowerShell was also the tool of choice for attackers to evade detection. Between the modern security features offered and the fact that most AV/EDR solutions have a PowerShell prevention/detection component, it is imperative that both red teamers and blue teamers understand the defensive landscape when building and using tools within the language. --- ### 319. SpecterOps – Adversary Tactics: Red Team Operations - URL: https://cyberlabarchive.com/courses/red-team-operations - Category: SpecterOps - Downloadable Files: 1 (778 MB) - Formats: ZIP - Description: Upgrade your red team tradecraft with cutting-edge Tactics, Techniques, and Procedures (TTPs) used by attackers in real-world breaches. This course will teach participants how to infiltrate networks, gather intelligence, and covertly persist to simulate advanced adversaries. Participants will use the skillsets taught in this course to go up against incident response in a complex lab environment designed to mimic an enterprise network. You’ll learn to adapt and overcome active response operations through collaborative feedback as the course progresses. - Syllabus Topics: * Day 1Introduction & Course OverviewLab and course range infrastructureRed Team OperationsAttack InfrastructureHost Situational AwarenessPowerShell WeaponizationPrivilege Escalation * Day 2An Introduction to HuntingCredential AbuseAD Situational AwarenessPayload MethodologyPivoting and Lateral MovementSQL Abuse * Day 3OPSEC ConsiderationsDomain TrustsKerberosGolden TicketsSilver Tickets and Forged Ticket Detection * Day 4Visualizing Attack Paths with BloodHoundDPAPIKerberos Delegation AbuseCTF and capstone conclusionLab DebriefDefensive Debrief --- ### 320. SpecterOps – Adversary Tactics: Tradecraft Analysis - URL: https://cyberlabarchive.com/courses/tradecraft-analysis - Category: SpecterOps - Downloadable Files: 1 (15 MB) - Formats: ZIP - Description: In Adversary Tactics: Tradecraft Analysis, we present and apply a general tradecraft analysis methodology for offensive TTPs, focused on Windows components. We discuss Windows attack techniques and learn to deconstruct how they work underneath the hood. For various techniques, we identify the layers of telemetry sources and learn to understand potential detection choke points. Finally, the course culminates with participants creating their own technique evasion and detection strategy. You will be able to use the knowledge gained to both use your telemetry to create robust detection coverage across your organization, and truly assess the efficacy of that coverage. - Syllabus Topics: * Day 1Understanding AbstractionAttack and Detection StrategiesNaive PSExec OverviewTradecraft Analysis ProcessCapability IdentificationCapability DeconstructionIPC Mechanisms * Day 2Understanding TelemetrySecurable ObjectsIdentifying Choke PointsTelemetry Source IdentificationHow EDR Tools WorkOrganic LoggingSACLsFunction HookingKernel Callback FunctionsETW * Day 3Operationalizing Detection and Evasion ConceptsOperationalizing TelemetryUnderstanding Attacker Controlled FieldsOperationalizing Detection ResearchOperationalizing Evasion ResearchUnderstanding the Triage, Investigation, and Remediation ProcessEvading the Response ProcessDocumentation and Evaluation MetricsDetection DocumentationEvasion Documentation * Day 4CapstoneDefensive CapstoneOffensive Capstone --- ### 321. SpecterOps – Adversary Tactics: Mac Tradecraft - URL: https://cyberlabarchive.com/courses/adversary-tactics-mac-tradecraft - Category: SpecterOps - Downloadable Files: 1 (27 MB) - Formats: ZIP - Description: The Adversary Tactics: Mac Tradecraft course, hosted by SpecterOps , immerses participants in a modern macOS hybrid environment, closely resembling real-world red team exercises. This course is designed for experienced red team operators who want to enhance their skills in operating against macOS endpoints. --- ### 322. Red Team Infra Dev [CRT-ID] - URL: https://cyberlabarchive.com/courses/red-team-infra-dev - Category: Cyberwarfare - Downloadable Files: 1 (1.4 GB) - Formats: ZIP - Description: The Red Team Infra Dev [CRT-ID] lab offered by cyberwarfare.live is a practical, hands-on learning environment designed to provide real-world experience in developing OPSEC safe Red Team Infrastructure. In this lab, you will learn how to utilize legitimate cloud and on-premise services for both internal and external operations. You will also create your own re-director and payload server. The lab features a professional Red Team attack case study, providing you with the opportunity to apply the skills you’ve learned in a realistic scenario. - Syllabus Topics: * OPSEC Safe Infra * Full-Fledged Initial Access Operations * Capture Credentials & Bypass Multi-Factor Authentication (MFA) via Adversary in the Middle Attack (AiTM) * Utilise Cloud & On-Premise Resources for Traffic Redirection --- ### 323. Purple Team Analyst [CPTA V1] - URL: https://cyberlabarchive.com/courses/purple-team-analyst - Category: Cyberwarfare - Downloadable Files: 1 (313 MB) - Formats: ZIP - Description: The Purple Team Analyst (CPTA V1) course offered by CyberWarFare Labs is an advanced cyber attack and detection learning platform. The course is designed to provide an in-depth understanding of various Web, Network, Host, and Active Directory-based attacks by various defensive solutions. - Syllabus Topics: * About Red Teaming * About Blue Teaming * About Purple Teaming --- ### 324. Process Injection Analyst [CPIA] - URL: https://cyberlabarchive.com/courses/process-injection-analyst - Category: Cyberwarfare - Downloadable Files: 1 (2.3 GB) - Formats: ZIP - Description: The Process Injection Analyst (CPIA) course offered by CyberWarFare Labs is an advanced learning platform that focuses on cyber attack and detection. The course is designed to develop a mindset to perform process injection in the MS Windows Environment and analyze the events that are generated by different process injection techniques. - Syllabus Topics: * Understand Various Advance Process Techniques * Identify Telemetry Generated from Techniques * Event Analysis of Collected Footprints * Lower your Footprints during Post Exploitation Operations --- ### 325. Hybrid Multi-Cloud Red Team Specialist [CHMRTS] - URL: https://cyberlabarchive.com/courses/hybrid-multi-cloud-red-team-specialist - Category: Cyberwarfare - Downloadable Files: 1 (2 GB) - Formats: ZIP - Description: The Hybrid Multi-Cloud Red Team Specialist (CHMRTS) course offered by CyberWarFare Labs is an advanced cyber attack and detection learning platform. The course is designed to provide an in-depth understanding of Hybrid Multi-Cloud core services, identification of misconfigurations, and methods to stealthily exploit them in an Enterprise Hybrid Multi-Cloud Environment. - Syllabus Topics: * Enumerating & Designing Attack Surface of AWS Cloud Services * Exploit Lambda Function for Persistence & Privilege Escalation * Pivoting & Lateral Movement using AWS VPC Service * Post-Exploitation by abusing mis-configured AWS Services * Data Exfiltration from S3, RDS, STS & Secret Manager etc --- ### 326. SEC301: Introduction to Cyber Security - URL: https://cyberlabarchive.com/courses/introduction-cyber-security - Category: Security Education - Downloadable Files: 1 (40 MB) - Formats: ZIP - Description: SEC301, often referred to as an introductory cybersecurity course, focuses on building foundational knowledge and skills essential for anyone beginning their journey in cybersecurity. It is ideal for individuals with limited or no prior experience in the field and serves as a stepping stone toward more advanced cybersecurity concepts. - Syllabus Topics: * Cyber Security Foundation * Introduction to Cryptography * Authentication, Authorization, & Networking * Wireless Security, Network Attacks, & Malware * Cyber Security Technologies & Web Security --- ### 327. Google Cloud Red Team Specialist [CGRTS] - URL: https://cyberlabarchive.com/courses/google-cloud-red-team-specialist - Category: Cyberwarfare - Downloadable Files: 1 (1.4 GB) - Formats: ZIP - Description: The AWS Cloud Red Team Specialist (CARTS) course offered by CyberWarFare Labs is an advanced cyber attack and detection learning platform. The course is designed to provide an in-depth understanding of AWS core services, identification of misconfigurations, and methods to stealthily exploit them in an Enterprise AWS Cloud Environment. - Syllabus Topics: * Hierarchy * Service Account * Identity & Access Management --- ### 328. AWS Cloud Red Team Specialist [CARTS] - URL: https://cyberlabarchive.com/courses/aws-cloud-red-team-specialist - Category: Cyberwarfare - Downloadable Files: 1 (2.4 GB) - Formats: ZIP - Description: The AWS Cloud Red Team Specialist (CARTS) course offered by CyberWarFare Labs is an advanced cyber attack and detection learning platform. The course is designed to provide an in-depth understanding of AWS core services, identification of misconfigurations, and methods to stealthily exploit them in an Enterprise AWS Cloud Environment.  The course is delivered in a combination of On-Demand & Instructor-Led mode, including online lectures, practical hands-on exercises, and a practical examination 1 . The duration of the course may vary based on individual learning pace, but it typically takes around 1-3 months to complete. - Syllabus Topics: * AWS Cloud Overview * Classification of AWS Cloud Bases of Service Models * Classification of AWS Cloud bases of Service Uses| --- ### 329. Mandiant – Windows Enterprise Incident Response - URL: https://cyberlabarchive.com/courses/mandiant-windows-enterprise-incident-response - Category: Other Institutions - Downloadable Files: 1 (2.5 GB) - Formats: ZIP - Description: This intensive three-day course is designed to teach the fundamental investigative techniques needed to respond to today’s cyber threats. The fast-paced course is built upon a series of hands-on labs that highlight the phases of a targeted attack, sources of evidence and principles of analysis. Examples of skills taught include how to conduct rapid triage on a system to determine whether it is compromised, uncover evidence of initial attack vectors, recognize persistence mechanisms and investigate an incident throughout an enterprise. Although the course is focused on analyzing Windows-based systems and servers, the techniques and investigative processes are applicable to all systems and applications. The course includes detailed discussions of common forms of endpoint, network and file-based forensic evidence collection and their limitations as well as how attackers move around in a compromised Windows environment. The course also explores information management that enriches the investigative process and bolsters an enterprise security program. Discussion topics include the containment and remediation of a security incident, and the connection of short-term actions to longer-term strategies that improve organizational resiliency. - Syllabus Topics: * Describe the incident response process, including the threat landscape, targeted attack life cycle, initial attack vectors used by different threat actors, and phases of an effective incident response process * Conduct system triage to answer key questions about what transpired across the enterprise during an incident * Apply lessons learned to proactively investigate an entire environment (including metadata, registry, event logs, services, persistence mechanisms and artifacts of execution) at scale for signs of compromise * Manage and effectively record information related to ongoing investigations and incidents * Understand the role of the remediation phase in an enterprise investigation * Understand how to hunt for threats using threat intelligence, anomaly detection and known threat actor techniques, tactics and procedures (TTPs) --- ### 330. Mandiant – Network Traffic Analysis - URL: https://cyberlabarchive.com/courses/mandiant-network-traffic-analysis - Category: Other Institutions - Downloadable Files: 1 (10.1 GB) - Formats: ZIP - Description: Sophisticated attackers frequently go undetected in a victim’s network for an extended period. Attackers can blend their traffic with legitimate traffic that only skilled network analysts know how to detect. This course shows learners how to identify malicious network activity. The course provides an overview of network protocols, network architecture, intrusion detection systems, network traffic capture and traffic analysis. Learners review the types of network monitoring and the tools commonly used to analyze captured network traffic. The course also explores the best techniques for investigating botnets and how to use honeypots in network monitoring. The course includes lectures and hands-on lab sessions to reinforce technical concepts. - Syllabus Topics: * Understand the network monitoring and incident response processes * Discuss the pros and cons of statistical, connection, full content and event monitoring and tools * Perform event-based monitoring using Snort * Minimize network traffic with the Snort rule structure and custom rule creation * Review Snort alerts using the Sguil front end --- ### 331. BREAKDEV – Evilginx Mastery - URL: https://cyberlabarchive.com/courses/evilginx-mastery - Category: Other Institutions - Downloadable Files: 1 (1.7 GB) - Formats: ZIP - Description: Learn everything about the latest methods of phishing, using reverse proxying to bypass Multi-Factor Authentication. Learn to think like an attacker, during your red team engagements, and become the master of phishing with Evilginx. - Syllabus Topics: * Introduction * Setup * Getting Started * Advanced Phishing * Security Hardening * Remote Deployment * Deep Sea Phishing --- ### 332. دانلود Mr.Un1k0d3r – Red Team Training - URL: https://cyberlabarchive.com/courses/mr-un1k0d3r-redteam-training - Category: Other Institutions - Downloadable Files: 1 (2.2 GB) - Formats: ZIP - Description: The training is divided in five sections: Initial foothold, Gaining access, Offensive Coding, internal reconnaissance and lateral movement. The training will cover each section in depth by providing technical evidence of how each technique works. Red team exercises are performed to assess responsiveness and detection capability. As a red teamer, it is important to understand what each tool and commands we use is doing behind the curtain to be able to provide proper guidance. The training will help you understand the tool and technique being used during a red team, develop your own toolset, adapt existing tools when needed, provide guidance on where to look for new techniques or potential evasion tricks and finally an overview of the popular technique used to perform red team exercise. Expect to perform code review, network analysis, code behavior analysis and write code to improve your red team capabilities. - Syllabus Topics: * Initial foothold * Payload Crafting * Gaining access * Internal reconnaissance * Lateral Movement --- ### 333. Mr.Un1k0d3r – Offensive Coding - URL: https://cyberlabarchive.com/courses/mr-un1k0d3r-offensive-coding - Category: Other Institutions - Downloadable Files: 1 (44.8 GB) - Formats: ZIP - Description: The Mr.Un1k0d3r – Offensive Coding is a comprehensive program designed for those interested in the field of cybersecurity, particularly in offensive security and penetration testing. The course is led by Mr.Un1k0d3r, who is known for developing Red Team tools. One of the key aspects of this course is its focus on AV/EDR Evasion: Packer Style. This involves learning about various techniques to evade antivirus and endpoint detection and response systems, which are crucial skills for any offensive security professional. The course also includes a detailed walkthrough of the Prelude Operator 1.5 platform. This platform is used extensively in the course to demonstrate and practice various offensive coding techniques. --- ### 334. SentinelOne – Singularity Administration - URL: https://cyberlabarchive.com/courses/sentinelone-singularity-administration - Category: SentinelOne - Downloadable Files: 1 (896 MB) - Formats: ZIP - Description: The SentinelOne Singularity Administration course provides comprehensive training for cybersecurity professionals. Whether you’re a seasoned system administrator or a novice threat hunter, this course caters to various roles and experience levels. - Syllabus Topics: * Singularity Platform & Policy Administration * Incident Response * Ranger for Network Discovery & Attack Surface Management * Threat Hunting --- ### 335. SentinelOne – Singularity Foundations - URL: https://cyberlabarchive.com/courses/sentinelone-singularity-foundations - Category: SentinelOne - Downloadable Files: 1 (274 MB) - Formats: ZIP - Description: The SentinelOne University Singularity Foundations course is designed to empower cybersecurity professionals with essential knowledge and skills related to the SentinelOne Singularity platform . Whether you’re a system administrator, an IT operations specialist, or a security analyst, this course provides a solid foundation for understanding and effectively utilizing SentinelOne’s cutting-edge security technology. --- ### 336. SentinelOne – Incident Response - URL: https://cyberlabarchive.com/courses/sentinelone-incident-response - Category: SentinelOne - Downloadable Files: 1 (808 MB) - Formats: ZIP - Description: The SentinelOne University Incident Response course provides participants with the knowledge and skills necessary to effectively use the SentinelOne platform for identifying and responding to incidents. Whether you’re a seasoned incident responder or just starting out, this course equips you with actionable insights and practical techniques. --- ### 337. SentinelOne – Threat Hunting - URL: https://cyberlabarchive.com/courses/sentinelone-threat-hunting - Category: SentinelOne - Downloadable Files: 1 (1 GB) - Formats: ZIP - Description: SentinelOne University offers cybersecurity training programs, including a comprehensive Threat Hunting course. Whether you’re a system administrator seeking to enhance your skills or a seasoned threat hunter looking to expand your toolkit, this course has actionable and insightful content for every role and experience level. Here are the key highlights of the SentinelOne University Threat Hunting course: The course focuses on repeatable and documentable cyber threat hunting methodologies. Participants will learn about various tools that enhance the effectiveness of threat hunting. Whether you’re diving into threat hunting for the first time or refining your expertise, SentinelOne University provides the resources you need to stay ahead in the ever-evolving cybersecurity landscape. --- ### 338. ZeroDayEngineering – Cybersecurity vs. Zero Day Engineering - URL: https://cyberlabarchive.com/courses/zerodayengineering-cybersecurity-vs-zero-day-engineering - Category: Other Institutions - Downloadable Files: 1 (66 MB) - Formats: ZIP - Description: This course covers key aspects of cybersecurity, including understanding threats, vulnerabilities, and the necessary countermeasures. It may also delve into specialized areas such as zero-day vulnerability research. --- ### 339. ZeroDayEngineering – Advanced Exploitation of Simple Bugs - URL: https://cyberlabarchive.com/courses/zerodayengineering-advanced-exploitation-of-simple-bugs - Category: Other Institutions - Downloadable Files: 1 (170 MB) - Formats: ZIP - Description: At Pwn2Own Vancouver 2021 I have demonstrated an 0day VM escape exploit for Parallels Desktop hypervisor. The exploit chain that I developed was based on logic issues. In this deep technical presentation I will share the technical details of the exploit, as well as various preliminary and contextual knowledge related to it. Logic security vulnerabilities (i.e. those that can be exploited without any memory corruptions) are becoming increasingly important in offensive security research right now, as Rust and other memory-safe programming languages are rapidly taking over popular code bases. When evaluating the attack surface of Parallels Desktop, as an expert in both hypervisors and memory corruption bugs, I saw many opportunities for classical buffer overflows, but chose to try and find a logic bug instead. As hypervisors are ultra-complex low level software, exploitable logic bugs in them are extremely rare. I was lucky to find such a “one of a kind” bug. Despite the bug was quite simple, the exploit turned out to be not so easy. Exploitation of the bug required me to develop a kernel module for the guest OS from which I was escaping, reverse-engineer some internal RPC protocol of the hypervisor, and emulate it in the exploit code. Eventually the exploit was reliable 100% by design, and executed arbitrary code on the host Mac. During the Pwn2Own competitions it came as a surprize that my exploit did not meet any collisions with other competition entries. Because the bug itself was quite easy, I expected that at least one participant would find and utilize it independently in their own Pwn2Own exploit. But it didn’t happen. That made me aware of the fact that a bug that looks easy does not necessarily imply an easy discovery or an easy exploitation process, an estimation which is very important for strategic aspects of offensive security research. - Syllabus Topics: * Relevant TheoryHypervisor Threat ModelGuest ServicesProtocols & Tech * Parallels DesktopArchitecture & InternalsParallels Toolgate REGuest Additions * The Bug * The Exploit --- ### 340. Windows Kernel Exploitation by hacksys - URL: https://cyberlabarchive.com/courses/windows-kernel-exploitation-by-hacksys - Category: Other Institutions - Downloadable Files: 1 (1.1 GB) - Formats: ZIP - Description: We will look into how we can bypass kASLR, kLFH, and do hands-on exploitation using data-only attack, which effectively bypasses SMEP and other exploit mitigations. Upon completion of this training, participants will be able to learn: Exploit development process in kernel mode Mitigation bypasses Pool internals & Feng-Shui Arbitrary Read/Write primitive - Syllabus Topics: * Exploit Mitigations * Exploitation * Revision: Day 1 Concepts * Exploitation * Grooming target pool and achieving arbitrary read/write primitive (data-only attack) * Gaining local privilege escalation * Capture The Flag * Miscellaneous --- ### 341. Download Agarri.fr – Mastering Burp Suite Pro - URL: https://cyberlabarchive.com/courses/agarri-fr-mastering-burp-suite-pro - Category: Other Institutions - Downloadable Files: 1 (14.2 GB) - Formats: ZIP - Description: Burp Suite Pro is the leading tool for auditing Web applications at large, but also a complex beast where new features get added every few weeks. Mastering Burp Suite Pro, including its newest features, allows testers to get the most out of the tool, optimizing time spent auditing and testing. Work will be faster (hotkeys!) and much more efficient (more tools, more possibilities!). Attendees will also learn to measure and assess the quality of their attacks, a crucial skill in real-life engagements that can make the difference between a false-negative and a critical finding. --- ### 342. Signal Labs – Vulnerability Research & Fuzzing - URL: https://cyberlabarchive.com/courses/vulnerability-research-fuzzing - Category: Other Institutions - Downloadable Files: 1 (3.9 GB) - Formats: ZIP - Description: A complete introduction to 0-day discovery for Windows targets, focusing on closed-source real-world software, including kernel modules and user code. Who should take this course? Anyone looking to get into Windows vulnerability research and fuzzing, although many of the concepts and approaches taught can be used for fuzzing on other platforms (MacOS/Linux, etc), all the exercises will focus on Windows. Also useful for red-teamers looking to add zero-days to their arsenal (with a dedicated section on finding quick 0-days on time-limited engagements). Most topics are beginner friendly and assume limited or no prior experience with modern fuzzing approaches and Windows vulnerability research, with advanced topics (hypervisors & emulators, for example) presented in an easy-to-understand manner. - Syllabus Topics: * Core Windows Internals (Key Knowledge) * Debugging & Crash Analysis (Bug Analysis) * Fuzzing (Bug Discovery) * Fast 0-days & Logic Bugs (Bug Discovery) --- ### 343. Source Incite – Full Stack Web Attack - URL: https://cyberlabarchive.com/courses/srcincite-full-stack-web-attack - Category: Other Institutions - Downloadable Files: 3 (17.3 GB) - Formats: 7Z, ZIP - Description: Full Stack Web Attack is not an entry-level course. It’s designed to push you beyond what you thought was possible and set you on the path to develop your own workflow for offensive zero-day web research. This course is developed for web penetration testers, bug hunters and developers that want to make a switch to server-side web security research or see how serious adversaries will attack their web based code. Students are expected to know how to use Burp Suite and have a basic understanding of common web attacks as well as perform basic scripting using common languages such as python, PHP and JavaScript. Each of the vulnerabilities presented have either been mirrored from real zero-day or are n-day bugs that have been discovered by the author with a focus on not just exploitation, but also on the discovery. So if you want to learn how to exploit web technologies without client interaction for maximum impact, that is, remote code execution then this is the course for you. --- ### 344. Assessing and Exploiting Control System and IoT (2020) - URL: https://cyberlabarchive.com/courses/assessing-and-exploiting-control-system-and-iot - Category: BlackHat - Downloadable Files: 1 (15.2 GB) - Formats: ZIP - Description: This is not your traditional SCADA/ICS/IIoT security course! How many courses send you home with a $500 kit including your own PLC and a set of hardware/RF hacking tools?!? This course teaches hands-on penetration testing techniques used to test individual components of a control system, including embedded electronic field devices, network protocols, RF communications, Human Machine Interfaces (HMIs), and various forms of master servers and their ICS applications. Skills you will learn in this course will apply directly to systems such as the Smart Grid, PLCs, RTUs, smart meters, building management, manufacturing, Home Area Networks (HAN), smart appliances, SCADA, substation automation, synchrophasors, and even IoT. This course is structured around the formal penetration testing methodology created by UtiliSec for the United States Department of Energy. Using this methodology and Control Things Pentest Platform (previously SamuraiSTFU), an open source Linux distribution for pentesting energy sector systems and other critical infrastructure, we will perform hands-on penetration testing tasks on user interfaces (on master servers and field device maintenance interfaces), control system protocols (modbus, DNP3, IEC 60870-5-104), RF communications (433MHz, 869MHz, 915MHz), and embedded circuit attacks (memory dumping, bus snooping, JTAG, and firmware analysis). We will tie these techniques and exercises back to control system devices that can be tested using these techniques. The course exercises will be performed on a mixture of real world and simulated devices to give students the most realistic experience as possible in a portable classroom setting. Advances in modern control systems such as the energy sector’s Smart Grid has brought great benefits for asset owners/operators and customers alike, however these benefits have often come at a cost from a security perspective. With increased functionality and addition inter-system communication, modern control systems bring a greater risk of compromise that vendors, asset owners/operators, and society in general must accept to realize the desired benefits. To minimize this risk, penetration testing in conjunction with other security assessment types must be performed to minimize vulnerabilities before attackers can exploit critical infrastructures that exist in all countries around the world. Ultimately, this is the goal of this course, to help you know how, when, and where this can be done safely in your control systems. - Syllabus Topics: * Day 1 Outline – Assessing and Exploiting Controllers * Understanding basic control system concepts, systems, and devices * Understanding controller logic * Architecture Reviews of major ICS and smart grid systems * Introduction to Control Things Platform * Introduction to the NESCOR methodology for penetration testing * Types of ICS user interfaces * Pentesting maintenance interfaces on ICS field and floor devices * Day 2 Outline – Assessing and Exploiting ICS Communication Protocols * Performing traditional network pentests on control systems * Pentesting Different Communication Layers * Serial communications * Pentesting TCP/IP based ICS protocols * Day 3 Outline – Assessing and Exploiting ICS RF Communications * Pentesting RF communications between master servers and field devices * Capturing RF Signals * Analyzing the captured signal * Data Extraction * RF Transmission * Day 4 Outline – Assessing and Exploiting ICS Embedded Electronics * Analysis of embedded electronics in ICS field and floor devices * Dumping data at rest on embedded circuits * Overview of SPI serial protocol * Overview of bus snooping * Analyzing field and floor device firmware --- ### 345. Adversary Emulation & Purple Teaming (2022) - URL: https://cyberlabarchive.com/courses/adversary-emulation-purple-teaming - Category: BlackHat - Downloadable Files: 1 (3.8 GB) - Formats: ZIP - Description: In this four-day course, the attendees will walk through the Purple Team Exercise Framework, learning each role that plays a part in purple team engagements. Students will learn to collect Cyber Threat Intelligence (CTI), develop and conduct Adversary Emulation plans based on gathered intelligence, then dive into detection engineering to identify and resolve missed detection opportunities. Each day is a dive into one of the roles, and the course will conclude with a capstone that puts it all together in a purple team engagement. This intermediate-level course aims to broaden the students’ understanding of purple team engagements’ different roles and responsibilities and is geared towards red teamers, blue teamers, intelligence analysts, and managers looking to expand their purple team capabilities. - Syllabus Topics: * Pentest --- ### 346. Hacking And Securing Cloud Infrastructure (4 DAY) (2022) - URL: https://cyberlabarchive.com/courses/hacking-and-securing-cloud-infrastructure - Category: BlackHat - Downloadable Files: 1 (6.8 GB) - Formats: ZIP - Description: This 4-day course cuts through the mystery of Cloud Services (including AWS, Azure, and G-Cloud) to uncover the vulnerabilities that lie beneath. We will cover a number of popular services and delve into both what makes them different, and what makes them the same, as compared to hacking and securing traditional network infrastructure. Whether you are an Architect, Developer, Pentester, Security or DevOps Engineer, or anyone with a need to understand and manage vulnerabilities in a Cloud environment, understanding relevant hacking techniques, and knowing how to protect yourself from them is critical. This course covers both the theory as well as a number of modern techniques that may be used to compromise various Cloud services and infrastructure. Prior pentest/security experience is not a strict requirement, however, some knowledge of Cloud Services and familiarity with common Unix command-line syntax will be beneficial. - Syllabus Topics: * Cloud * Pentest * Security --- ### 347. Offensive Mobile Reversing And Exploitation (2021) - URL: https://cyberlabarchive.com/courses/offensive-mobile-reversing-and-exploitation - Category: BlackHat - Downloadable Files: 2 (38.2 GB) - Formats: ZIP - Description: After a sold-out course last year at Blackhat, we are back with an updated version of our course with additional coverage of ARM64, mobile browser security, and more in-depth coverage of Mobile apps and operating system security. The class starts with a basic introduction to the ARM instruction set and calling conventions followed by some reverse engineering exercises.  We then learn how to write simple exploits for the ARM64 environment. Next, we move to Mobile browser security, understand some of the browser mitigations followed by writing some simple exploits for the mobile browser. We then cover iOS and Android internals in further detail. We then discuss some of the exploitation techniques using real-world vulnerabilities (e.g., voucher_swap, checkm8, etc) followed by a walkthrough of how jailbreaks are written. We also discuss some of the common vulnerability types (Heap Overflows, Use-after-free, Uninitialized Stack variable, Race conditions). We will also look at how to build the Android kernel, customize it using Kernel tunables and then use a 1-day vulnerability to gain kernel r/w access. The training then moves on to application security based on exploiting the Damn Vulnerable iOS app, Android-lnsecureBankv2, and lnsecurePass application written by the authors of this course in addition to a broad range of other real-world applications. We then cover a variety of mitigations deployed in real-world apps and discuss how to bypass them. Slides, videos and detailed documentation on the labs will be provided to the students for practice after the class. Corellium access will be provided to students during the duration of the training course. - Syllabus Topics: * Introduction to ARM64 and Mobile Browser Security [2 modules] * iOS Exploitation * Android Exploitation --- ### 348. A Beginner’s Guide To Reversing With GHIDRA (2021) - URL: https://cyberlabarchive.com/courses/bheu21-reverse-engineering-with-ghidra - Category: BlackHat - Downloadable Files: 1 (1.8 GB) - Formats: ZIP - Description: The NSA spent years developing Ghidra as its own internal reverse engineering suite. Now, thanks to the Technology Transfer Program, these powerful capabilities are readily available to the world. With support for dozens of architectures, Ghidra is rapidly gaining popularity as a tool of choice for analyzing compiled code. Ghidra’s extensibility through Java and Python scripting make it ideal for malware analysis and vulnerability research tasks. This class is a hands-on, example-driven introduction to reverse engineering with Ghidra. Attendees will learn the basics of using Ghidra to analyze executables before diving into examples of progressively more sophisticated reverse engineering countermeasures. As topics are introduced, students will reinforce what they’ve learned by solving reverse engineering challenges. Students may work independently or in groups to solve any of the introduced Capture the Flag style challenges. On the first day of this course, students will get familiar with Ghidra and how to create projects and import files. Students will learn how to analyze a program, follow its execution flow, and start customizing the disassembly and associated pseudocode. New for 2022, students will also get hands on time using the Ghidra’s debugger integration as well as newly updated support for binary patching. As we analyze more complicated examples, students will learn about basic tricks malware developers use to obscure functionality. We’ll look at how to identify strings being crafted within code, as well as dealing with code hidden in data sections to escape analysis. These examples will help illustrate how different options and built-in tools are used to improve analysis results. The second day brings more complicated challenges, including layered obfuscation and encryption. The lessons on this day will review in greater detail how to use the Python interpreter in Ghidra. Students will ultimately design and use custom Python scripts to analyze real malware. --- ### 349. Advanced Infrastructure Hacking (4 Day) (2021) - URL: https://cyberlabarchive.com/courses/advanced-infrastructure-hacking - Category: BlackHat - Downloadable Files: 1 (11.9 GB) - Formats: ZIP - Description: Whether you are penetration testing, Red Teaming or trying to get a better understanding of managing vulnerabilities in your environment, understanding advanced hacking techniques is critical. This course covers a wide variety of neat, new and ridiculous techniques to compromise modern Operating Systems and networking devices. This lab also provides a view of logging and monitoring setup in a classic organization giving a birds eye view of how defenders see the attack. While prior pentest experience is not a strict requirement, familiarity with both Linux and Windows command line syntax will be greatly beneficial. - Syllabus Topics: * IPv4/IPv6 Basics * IPv6 service discovery & enumeration * Exploiting systems/services over IPv6 * Host Discovery & Enumeration * Advanced OSINT & Asset Discovery * Exploiting DVCS and CI-CD Server * cking Databases * PostgreSQL/MySQL * Oracle * NoSQL --- ### 350. Attacking and Securing APIS (2021) - URL: https://cyberlabarchive.com/courses/attacking-and-securing-apis - Category: BlackHat - Downloadable Files: 1 (10.9 GB) - Formats: ZIP - Description: This is a hand-on practical concentrated course on securing and attacking web and cloud APIs. APIs are everywhere nowadays: In web apps, embedded systems, enterprise apps, cloud environments and even IoT, and it is becoming increasingly necessary to learn how to defend, secure and attack API implementation and infrastructure. This training aims to engage you in creating secure modern APIs, while showing you both new and old attack vectors. - Syllabus Topics: * Defending and attacking Web APIs (REST, GraphQL..etc) * Attacking and securing AWS APIs and infrastructure. * Launching and mitigating modern Injection attacks (SSTI, RCE, SQLi, NoSQLi, Deserialization & object injection) * Deploying practical cryptography. * Securing passwords and secrets in APIs. * API authentication and authorization. * Targeting and defending API architectures (Serverless, web services, web APIs) * Securing development environments. --- ### 351. CodeMachine: Windows Kernel Rootkits - URL: https://cyberlabarchive.com/courses/windows-kernel-rootkits - Category: Other Institutions - Downloadable Files: 1 (10.7 GB) - Formats: 7Z - Description: To achieve maximum stealth and obtain unabated access to the system, rootkits execute in kernel mode. This course focuses on the kernel interfaces (APIs), data structures and mechanisms that are exploited by rootkits to achieve their goals at every stage of their execution. Kernel security enhancements that have been progressively added from Windows 7 to the latest version of Windows are discussed along with some circumvention techniques. This advanced course provides a comprehensive end-to-end view of the modus-operandi of rootkits by taking an in-depth look at behind the scenes working of the Windows kernel and how these mechanisms are exploited by malware through hands-on labs and real-world case studies. Kernel security enhancements that have been progressively added to Windows are discussed along with some circumvention techniques. Attendees will study key techniques used by rootkits to understand the real-world applicability of these concepts for offensive and defensive purposes. This training is beneficial to anyone responsible for developing, detecting, analyzing, and defending against rootkits and other Windows kernel post-exploitation techniques including EPP/EDR software developers, anti-malware engineers, security researchers, red/blue/purple teamers. A special version of this training is also available for malware, rootkit forensics analysts where the focus is not on implementing rootkit functionality but rather on investigating rootkits using tools such as WinDBG and Volatility. This analyst version does not require attendees to have a programming background and contains topics related to rootkit detection and case studies. - Syllabus Topics: * Kernel attack workflow * Types of vulnerabilities * Environment detection * Exploiting drivers * Direct kernel object manipulation (DKOM) * Privilege escalation * Kernel execution vectors --- ### 352. CodeMachine: Windows Malware Techniques - URL: https://cyberlabarchive.com/courses/codemachine-windows-malware-techniques - Category: Other Institutions - Downloadable Files: 1 (11.3 GB) - Formats: ZIP - Description: User mode malware on Windows is ubiquitous and custom user mode implants are used regularly in red-team engagements. Knowledge of the latest malware techniques helps red teamers improve their custom tooling, malware analysts in taking apart malware, and anti-malware solution developers in designing behavioral solutions to detect malicious activity. The common theme amongst all Windows malware and implants is that they abuse the facilities provided by the Windows platform to achieve their objectives. Knowledge of the rich set of Windows APIs, understanding their usage in various stages of an implant, and leveraging them to detect and bypass various defenses in the system is essential for red and blue teamers. This training course takes attendees through a practical journey with a hands-on approach to teach them about the post-exploitation techniques used by PE file-based implants at every stage of their execution. Beneficial to both the offensive and the defensive side of the camp, the knowledge and hands-on experience gained in this training will help attendees with real-world red teaming engagements and in defending against both custom advanced persistent threat (APT) tooling and common-off-the-shelf (COTS) malware. Attendees will learn about how malware and implants interact with the latest version of Windows and how the different stages of malware abuse and exploit various components of Windows OS to achieve their goals and evade defenses. - Syllabus Topics: * Offense and defense * Platform mitigations * Attack execution stages * Initial access methods * Staging payloads * System logging * Ecosystem review --- ### 353. Attacking Injection Flaws Masterclass – Edition 2022 - URL: https://cyberlabarchive.com/courses/attacking-injection-flaws-masterclass - Category: BlackHat - Downloadable Files: 1 (4.1 GB) - Formats: ZIP - Description: Injection flaws have dominated web application vulnerability lists since time immemorial. And despite OWASP reducing their ranking from 1 to 3, they are still one of the most devastating web application vulnerabilities. Efforts have been made for years to secure applications against related attacks, from new frameworks to new defensive techniques. A lot has been done, but is it enough? This course enables you to walk through dozens of hacklabs and learn how – despite defensive efforts – injection flaws persist, with drastic effects on application security. Get into the attacker mindset for 2 days and deploy over 30 fresh and novel injection attacks via our state-of-the-art hacklabs. This practical course is packed with information and delivered by professional penetration testers, well-versed in web hacking from their years of experience in the wild. By the time you leave, you’ll understand how to deploy attacks using complex injection flaws. This course will be delivered virtually. - Syllabus Topics: * Introduction to Burp Features --- ### 354. Next-level Bug Hunting – Code Edition (2021) - URL: https://cyberlabarchive.com/courses/next-level-bug-hunting-code-edition - Category: BlackHat - Downloadable Files: 1 (1.5 GB) - Formats: ZIP - Description: Ready to take bug hunting to a deeper level? Been tasked with reviewing source for SQL Injection, XSS, Access Control and other security flaws? Does the idea of reviewing this code leave you with heartburn? This course introduces a proven methodology and framework for performing a secure code review, as well as addressing common challenges in modern secure code review. Short circuit developing individual secure code review techniques by gleaning from Seth & Ken’s past adventures in performing hundreds of code reviews and the lessons we’ve learned along the way. We will share a proven methodology to perform security analysis of any source code repository and suss out security flaws, no matter the size of the code base, or the framework, or the language. Next-level Bug Hunting – Code Edition (2021) --- ### 355. Digital Forensics And Incident Response – Tactical Edition (2021) - URL: https://cyberlabarchive.com/courses/digital-forensics-and-incident-response - Category: BlackHat - Downloadable Files: 1 (10.6 GB) - Formats: ZIP - Description: Digital forensics and incident response are two of the most critical fields in all of information security. The staggering number of reported breaches in the last several years has shown that the ability to rapidly respond to attacks is a vital capability for all organizations. Unfortunately, the standard IT staff member is simply unable to effectively respond to security incidents. Successful handling of these situations requires specific training in a number of deeply technical areas including file systems, operating system design, and knowledge of possible network and host attack vectors.  During this training, students will learn how to approach digital investigations in a manner that allows for immediate forensic exploitation of relevant data both in-memory and on-disk. Significant hands-on experience during labs will train students to analyze the same types of evidence and situations that they will encounter in real-world investigations. This class is structured so that a specific analysis technique is discussed and then the students immediately analyze staged evidence using their newly gained knowledge. Not only does this approach reinforce the material learned, but it also gives students a number of new skills as the course proceeds. Upon completion of the training, students will be able to effectively analyze a large number of digital evidence sources, including both on-disk and in-memory data, using the latest and most effective forensics tools and techniques. These skills will be immediately usable in a number of investigative scenarios and will greatly enhance even experienced investigators’ skillset. Students will also leave with media that contains all the tools and resources used throughout the training. --- ### 356. Exploit Development For MIPS (2022) - URL: https://cyberlabarchive.com/courses/exploit-development-for-mips - Category: BlackHat - Downloadable Files: 1 (9.6 GB) - Formats: ZIP - Description: The course introduces students to exploit development in MIPS processor architecture. Exploit development on MIPS processor hasn’t seen the attention that other architectures such as x86 and ARM got. With the growing IoT devices, we have been seeing many embedded devices with MIPS architecture alongside ARM. Exploit development is getting harder and harder with exploit mitigation techniques in place. But, the good news is that it is not impossible to write working exploits as exploit mitigation techniques do not fix the underlying problem in the vulnerable source code. This practical training starts with the basics of MIPS Architecture and slowly moves towards writing own shell code and creating working exploits using Return Oriented Programming for a given target binary. To give a sense of real exploitation, real world examples will be discussed with proof of concept exploits. By the end of this training, students will be able to write Memory corruption exploits for MIPS architecture, understand how Return Oriented Programming can be used in MIPS for modern day exploit development and bypass some of the most common exploit mitigation techniques such as ASLR. - Syllabus Topics: * Introduction to MIPS Architecture * An overview of QEMU MIPS setup * MIPS compared to x86 and ARM * Basics of GDB * Basics of MIPS assembly language * Debugging MIPS Binaries * Introduction to Memory corruption attacks * Writing MIPS shellcode * Avoiding Bad characters * Stack based Buffer Overflows in MIPS * Ret2Libc in MIPS * Dealing with MIPS cache incoherence * Exploit Mitigation techniques * Return Oriented Programming * Bypassing ASLR * Introduction to Heap overflows in MIPS --- ### 357. Astute AWS/Azure/GCP Cloud Red Team: It’s Raining Shells – 2021 - URL: https://cyberlabarchive.com/courses/astute-aws-azure-gcp-cloud-red-team-its-raining-shells - Category: BlackHat - Downloadable Files: 1 (19.6 GB) - Formats: ZIP - Description: Stay frosty within AWS, Azure, & GCP environments with this fast-paced and hands-on course which teaches each participant the Tactics, Techniques, and Procedures (TTPs) needed to infiltrate and expand access within cloud platforms. In this course you will: Exploit serverless (e.g. Lambda, Azure Functions) applications for initial access into targets. Pivot between data and control planes to expand access (e.g. secrets, snapshots) Evade and disrupt cloud logging platforms (e.g. CloudTrail) to remain undetected. Breach and backdoor boundaries (e.g. VPCs) to access hard to reach systems. Expanding access within Kubernetes (K8s) envs (e.g. GCP bypass of metadata protections) Compete throughout the course in our hands-on Capture the Flag (CTF) tournament! --- ### 358. A Complete Practical Approach To Malware Analysis And Memory Forensics – 2022 - URL: https://cyberlabarchive.com/courses/a-complete-practical-approach-to-malware-analysis-and-memory-forensics - Category: BlackHat - Downloadable Files: 1 (17 GB) - Formats: ZIP - Description: Malware analysis and memory forensics are powerful analysis and investigative techniques used in reverse engineering, digital forensics, and incident response. With adversaries getting sophisticated and carrying out advanced malware attacks on critical infrastructures, Data Centers, private and public organizations, it is essential for cyber-security professionals to have the necessary skills to detect, respond and investigate such intrusions. Malware analysis and memory Forensics have become a must-have skill for fighting advanced malwares, targeted attacks, and security breaches. This hands-on training teaches the concepts, tools, and techniques to analyze, investigate, and hunt malwares by combining two powerful techniques malware analysis and memory forensics. After taking this course, attendees will be better equipped with the skills to analyze, investigate, and respond to malware-related incidents. - Syllabus Topics: * Introduction to Malware Analysis * Static Analysis * Automating Malware Analysis(sandbox) * Malware Persistence Methods * Code Analysis * Dynamic Analysis/Behavioural analysis * Introduction to Memory Forensics * Volatility Overview * Investigating Process * Investigating Process handles & Registry * Investigating Network Activities * Investigation Process Memory * Investigating User-Mode Rootkits & Fileless Malware * Memory Forensics in Sandbox technology * Investigating Kernel-Mode Rootkits * Memory Forensic Case Studies --- ### 359. Invicti Tool - Web Application Security For Enterprise - URL: https://cyberlabarchive.com/courses/invicti-enterprise - Category: Tools - Downloadable Files: 1 (3.2 GB) - Formats: ZIP - Description: Invicti is a web application security platform that helps organizations find and fix vulnerabilities in their websites and APIs. Invicti combines dynamic, interactive, and software composition analysis (DAST, IAST, and SCA) to provide comprehensive and accurate testing results. Invicti also integrates with the tools and workflows of developers, enabling them to produce more secure code and prevent vulnerabilities from reaching production. Invicti is trusted by more than 3,100 customers worldwide, including Fortune 500 companies, government agencies, and leading e-commerce platforms. --- ### 360. Acunetix Tool – Web Security Scanner - URL: https://cyberlabarchive.com/courses/web-application-security-tool - Category: Tools - Downloadable Files: 1 (455 MB) - Formats: ZIP - Description: Acunetix is a web application security scanner that helps you find and fix vulnerabilities in your web applications, web services, and APIs. It can scan any website or web application that uses HTTP or HTTPS protocol and supports various frameworks, languages, and technologies. Acunetix can detect over 7,000 types of vulnerabilities, including OWASP Top 10, SQL injection, XSS, misconfigurations, exposed databases, and more. It also provides vulnerability assessment and management features, such as severity ratings, remediation guidance, false positive reduction, and integration with development tools. Acunetix is available as an on-premise or cloud solution and can be used by businesses of all sizes to automate web application security testing and ensure long-term protection. --- ### 361. Nessus Professional tool - URL: https://cyberlabarchive.com/courses/nessus-pro - Category: Tools - Downloadable Files: 1 (5.2 GB) - Formats: ZIP - Description: Tenable Nessus is a powerful vulnerability scanner that helps you identify and fix security issues in your network, web applications, cloud infrastructure, and more. With Nessus, you can --- ### 362. LEG523: Law of Data Security and Investigations - URL: https://cyberlabarchive.com/courses/leg523-law-of-data-security-and-investigations - Category: Security Education - Downloadable Files: 2 (2.8 GB) - Formats: PDF, ZIP - Description: LEG523 is a specialized course designed to provide participants with a comprehensive understanding of the legal frameworks and regulatory environments that govern cybersecurity and data privacy. This course is ideal for legal professionals, compliance officers, and cybersecurity practitioners who need to navigate the complex intersection of technology and law. - Syllabus Topics: * Fundamentals of Data Security Law and Policy * E-Records, E-Discovery and Business Law * Contracting for Data Security and Other Technology * The Law of Data Compliance: How to Conduct Investigations * Applying Law to Emerging Dangers: Cyber Defense --- ### 363. Digital Forensics: Implementation - URL: https://cyberlabarchive.com/courses/ps-digital-forensics-implementation - Category: PluralSight - Downloadable Files: 1 (450 MB) - Formats: ZIP - Description: Digital Forensics is defined as the process of preservation, identification, extraction, and documentation of computer evidence which can be used by the court of law. It is a science of finding evidence from digital media like a computer, mobile phone, server, or network. A digital forensic analyst exploits digital evidence and investigates computer security incidents to derive useful information in support of system/network vulnerability mitigation. - Syllabus Topics: * Setting up a Forensic Workstation * Enumerating the Network Infrastructure as a Forensics Analyst --- ### 364. Digital Forensics Foundations - URL: https://cyberlabarchive.com/courses/ps-digital-forensics-getting-started - Category: PluralSight - Downloadable Files: 1 (777 MB) - Formats: ZIP - Description: Digital forensics is now back in focus with the rapid increase in cybercrimes. In this course, Digital Forensics: Getting Started, you’ll learn the skills required to conduct a digital forensics investigation from acquisition to the analysis phase. First, you’ll discover the process of hypothesis testing by applying forensic science techniques to digital forensics. Next, you’ll explore how to overcome the challenges of digital evidence by using evidence integrity methods such as write blockers and verifying hashes. Finally, you’ll learn how to examine the Windows Registry files and create a timeline of events for your case. When you’re finished with this course, you’ll have a foundational understanding of the digital forensics domain that will help you conduct successful cybercrime investigations. - Syllabus Topics: * Course Overview * Current State of Digital Forensics * Applying Forensic Science to Digital Forensics * Understanding the Role of Digital Evidence * Investigating a Cybercrime * Case Study: Digital Forensics Investigation --- ### 365. Web App Pen Testing - URL: https://cyberlabarchive.com/courses/ps-web-app-pen-testing - Category: PluralSight - Downloadable Files: 1 (1.7 GB) - Formats: RAR - Description: This path will cover the essential tasks of web application pen testing, walking through each phase of the methodology as if you are shadowing a live application pen test. The scenario will cover testing through an application, discovering and exploiting vulnerabilities found. In addition, there are many vulnerabilities that a web app pen tester should be able to identify and test for. Don’t miss the specialized courses covering a deep-dive into each of these types of vulnerabilities. - Syllabus Topics: * Web App Pen Testing: Reconnaissance * Specialized Testing: Sessions and Tokens * Web App Pen Testing: MappingSpecialized Testing: XSS * Specialized Testing: SQL InjectionSpecialized Testing: CSRF * Specialized Testing: DeserializationSpecialized Testing: API Testing * Specialized Testing: Command Injection --- ### 366. Ethical Hacking Fundamentals - URL: https://cyberlabarchive.com/courses/ethical-hacking-fundamentals - Category: PluralSight - Downloadable Files: 4 (10.8 GB) - Formats: ZIP, Z01, Z02, Z03 - Description: This series provides the foundational knowledge needed to ethically and effectively discover and exploit vulnerabilities in systems by assuming both the mindset and toolset of an attacker. Through learning how systems are attacked you will gain an understanding of how best to protect systems and improve your organization’s security - Syllabus Topics: * Understanding Ethical Hacking * Reconnaissance/Footprinting * Scanning Networks * Enumeration * Vulnerability Analysis * System Hacking * Malware Threats * Sniffing * Social Engineering * Denial of Service * Session Hijacking * Evading IDS, Firewalls, and Honeypots * Hacking Web Servers * Hacking Web Applications * SQL Injection * Hacking Wireless Networks * Hacking Mobile Platforms * Hacking the Internet of Things (IoT) * Cloud Computing * Cryptography * Penetration Testing --- ### 367. Applied Purple Teaming w/ Kent Ickler and Jordan Drysdale - URL: https://cyberlabarchive.com/courses/applied-purple-teaming-kent-ickler-and-jordan-drysdale - Category: Antisyphon - Downloadable Files: 1 (4.4 GB) - Formats: ZIP - Description: You’ve heard this story before. Bad actor walks into a network and pillages the place in swift action. CIO asks: “Where did we go wrong?” SysAdmin replies “our password, remote access, workstation restriction, and lack of application safelisting policies. Oh, and our SIEM didn’t notify us. We just weren’t ready for that attack.” In a significant change from the original course, students will be introduced to Microsoft Azure and Sentinel. Each student will be responsible for deploying a cloud lab that includes an Active Directory domain, a C2 server, and integration with AZ Sentinel’s detection platform. All of this will be taught through a proven framework for purple team operations that results in better business outcomes. - Syllabus Topics: * Organizational reconnaissance * Bloodhound, Sharphound and Neo4j * Plumhound * Group policy preferences * Command and control operations * Canary accounts for detecting password sprays and Kerberoasting * File share poisoning via URL and LNK files * Pass the hash attacks * DCSync operations * Password cracking with John the Ripper * Kerberoasting attacks * Atomic Red Team --- ### 368. MGT514: Security Strategic Planning, Policy, and Leadership - URL: https://cyberlabarchive.com/courses/strategic-security-planning-policy-leadership - Category: Security Education - Downloadable Files: 1 (55 MB) - Formats: PDF - Description: MGT514 is a professional training course designed to help cybersecurity and IT leaders develop the skills and strategies necessary for managing and leading security programs. The course focuses on aligning security initiatives with business objectives, building a strong governance framework, and driving organizational resilience against modern threats. - Syllabus Topics: * Strategic Planning Foundations * Strategic Roadmap Development * Security Policy Development and Assessment * Leadership and Management Competencies * Strategic Planning Workshop --- ### 369. Fundamentals of DevSecOps - URL: https://cyberlabarchive.com/courses/fundamentals-of-devsecops - Category: PluralSight - Downloadable Files: 1 (873 MB) - Formats: 7Z - Description: DevOps is taking the world by storm, but the often overlooked part is that keeping applications secure is increasingly important. So how do you keep your entire development chain secure and within compliance? This path answers that question by showing you the fundamentals of DevSecOps and keeping your CI/CD pipelines safe while incorporating security best practices into your DevOps lifecycle. - Syllabus Topics: * DevSecOps: The Big Picture * Approaching Automated Security Testing in DevSecOps * Performing DevSecOps Automated Security Testing * Integrating Automated Security Testing Tools * Integrating Incident Response into DevSecOps * Enabling Security Governance and Compliance in DevSecOps --- ### 370. Security for Hackers and Developers - URL: https://cyberlabarchive.com/courses/ps-security-for-hackers-developers - Category: PluralSight - Downloadable Files: 1 (1.4 GB) - Formats: 7Z - Description: In this course, you will learn to reverse engineer. That will allow you to protect intellectual property, find vulnerabilities, and pull apart malware. Join me in making the world a little safer. In the prior courses we learned there are 4 main techniques to secure code: design review, static analysis, manual audit, and dynamic (fuzz) testing. But, once the code is fielded, hackers will begin researching exploits against it. In this course, learn how and why compiled binaries are examined and scoured for weaknesses, and why reversing is also a required malware analysis skill and is sometimes needed for low-level developers working with undocumented APIs. After watching this course you’ll be familiar all of the above and with the popular IDA pro tool and how to use it. Download the IDA pro demo to complete the labs. - Syllabus Topics: * Using IDA Pro to Reverse Code * Learning x86 and Calling Conventions * Understanding C-to-Assembly and Compiled Structures * Patching a Compiled Binary * Reversing C++ * Extending IDA with Scripts --- ### 371. Splunk Enterprise Security Administration - URL: https://cyberlabarchive.com/courses/ps-splunk-enterprise-security-administration - Category: PluralSight - Downloadable Files: 1 (1.4 GB) - Formats: 7Z - Description: A Splunk Enterprise Security (ES) Admin manages a Splunk Enterprise Security environment, including ES event processing and normalization, deployment requirements, technology add-ons, settings, risk analysis settings, threat intelligence and protocol intelligence configuration, and customization’s. This skill demonstrates an individual’s ability to install, configure, and manage a Splunk Enterprise Security deployment. - Syllabus Topics: * Splunk Enterprise Security: Big Picture * Planning, Deploying, and Configuring Splunk Enterprise Security * Managing Splunk Enterprise Security Data and Dashboards * Designing and Creating Add-ons for Splunk Enterprise Security * Tuning and Creating Correlation Searches in Splunk Enterprise Security * Configuring Threat Intelligence in Splunk Enterprise Security --- ### 372. Threat Modeling - URL: https://cyberlabarchive.com/courses/ps-threat-modeling - Category: PluralSight - Downloadable Files: 1 (1 GB) - Formats: ZIP - Description: Threat Modeling aims to improve security through the practice of identifying threats, attacks vulnerabilities for the purpose of defining countermeasures to prevent or mitigate loss, damage or destruction of an application, system or data. - Syllabus Topics: * Threat Modeling Fundamentals * Performing Threat Modeling with the Microsoft Threat Modeling Methodology * Performing Threat Modeling with the OCTAVE Methodology * Performing Threat Modeling with the PASTA Methodology * Threat Modeling with the Microsoft Threat Modeling Tool * Building and Leading an Effective Threat Modeling Program --- ### 373. Web Application Security - URL: https://cyberlabarchive.com/courses/ps-php-web-application-security - Category: PluralSight - Downloadable Files: 3 (4.9 GB) - Formats: 001, 002, 003 - Description: PHP is one of the most widely-used web programming languages in the world. In this course, you’ll learn to write more secure PHP code. Web applications are under attack every day. PHP, being one of the most widely-used programming languages on the web, is one of the main targets. Some oddities, especially those of older versions, facilitate some of the attacks. This course, PHP Web Application Security, helps developers to understand security risks, how vulnerabilities can be exploited, and how to avoid those attacks. First you’ll learn about how to defend against cross-site scripting, including new approaches such as content security policy. Next, you’ll learn about how cross-site request forgery works, why it works so well, and how you can implement protection using PHP. Finally, the course will wrap up by teaching you how to protect against SQL injection attacks, covering not only MySQL, but also other relevant databases PHP supports. By the end of this course, you’ll have the knowledge to anticipate and defend against the major threats against web applications today. - Syllabus Topics: * PHP Web Application Security * Input Validation * Cross-site Scripting (XSS) * SQL Injection * State Management * Cross-site Request Forgery (CSRF) * Storing Passwords * Error Handling * Conclusion --- ### 374. Zero Trust Architecture (ZTA) - URL: https://cyberlabarchive.com/courses/ps-zero-trust-architecture-zta - Category: PluralSight - Downloadable Files: 1 (190 MB) - Formats: RAR - Description: This skill will teach you a basic understanding and applicability of Zero Trust Architecture (ZTA). The intention of this skill is to help you understand the foundational concepts of Zero Trust Architecture (ZTA), when and how to employ it, as well as understanding the resource implications and related decisions that need to be made. We also cover determining the deployment scenarios and use cases for ZTA, as well as migrating to and maturing associated programs. - Syllabus Topics: * Getting Started * Strategize and Establish * Use Case Identification and Implementation * Migration, Review and Maturation --- ### 375. Malware Analysis - URL: https://cyberlabarchive.com/courses/ps-malware-analysis - Category: PluralSight - Downloadable Files: 2 (4.4 GB) - Formats: ZIP, Z01 - Description: In today’s threat landscape, sophisticated adversaries have routinely demonstrated the ability to compromise enterprise networks and remain hidden for extended periods of time. To achieve this, malware authors employ a wide variety of obfuscation and anti-analysis techniques at each phase of an attack. Developing the skills necessary as a malware analyst to properly detect, triage and reverse engineer advanced attacker intrusion tactics and techniques requires experience and a diverse set of tools and skills. In this path you will develop the skills and knowledge necessary to analyze malicious office documents, dig deep into native and interpreted code through disassembly and decompilation, identify and defeat prevalent obfuscation techniques. The courses in this path with take you from malware analysis basics to advanced topics so that you can generate valuable threat intelligence to aid in your efforts to defend your organization, respond more effectively to an incident or gain deeper understanding of the latest malware threats. This skills path may assist in attaining the knowledge and skills outlined in the NICE Cybersecurity Workforce Framework in the following areas: K0259 & K0479 Knowledge of malware analysis concepts and methodologies. S0131 Skill in analyzing malware. - Syllabus Topics: * Malware Analysis Fundamentals * Malware Analysis: Initial Access Techniques * Malware Analysis: Malicious Activity Detection * Malware Analysis: Initial File Triage * Getting Started Analyzing Malware Infections * Getting Started with Reverse Engineering --- ### 376. Fundamentals of Virtualization - URL: https://cyberlabarchive.com/courses/ps-fundamentals-of-virtualization - Category: PluralSight - Downloadable Files: 1 (678 MB) - Formats: 7Z - Description: Virtualization is used by IT professionals in the datacenter, on the desktop, and in the cloud to gain tremendous efficiency. In this path, you’ll learn everything you need to know about server, desktop, storage, and network virtualization to get you started in today’s virtualization-dependent world. - Syllabus Topics: * Virtualization: The Big Picture * Fundamentals of Server Virtualization * Fundamentals of Storage Virtualization * Fundamentals of Network Virtualization * Virtualization in the Real World --- ### 377. Information Security Testing and Auditing with Nmap - URL: https://cyberlabarchive.com/courses/ps-information-security-testing-and-auditing-with-nmap - Category: PluralSight - Downloadable Files: 1 (517 MB) - Formats: 7Z - Description: Testing network security controls and discovering vulnerabilities are important parts of any organizations security plan. Nmap (“Network Mapper”) is a free and open source utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It was designed to rapidly scan large networks, but works fine against single hosts. Nmap runs on all major computer operating systems, and official binary packages are available for Linux, Windows, and Mac OS X. - Syllabus Topics: * Getting Started with Nmap 7 * Testing Security Controls and Detecting Vulnerabilities with Nmap 7 * Maximizing Nmap 7 for Security Auditing * Scanning for Vulnerabilities with Nmap 7 Scripting Engine (NSE) --- ### 378. Red Team Tools - URL: https://cyberlabarchive.com/courses/ps-red-team-tools - Category: PluralSight - Downloadable Files: 2 (3 GB) - Formats: 001, 002 - Description: MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community. Further details on the MITRE ATT&CK® framework can be found at https://attack.mitre.org/ Our red team operations tooling courses map to the MITRE ATT&CK® matrix tactics, techniques, and procedures. Each course focuses on the use of a specific industry-standard, generally open source, tool to carry out adversary emulation. Knowing what a tool is and how it can perform a specific task, will ultimately lend to your ability as an organization or an individual to detect and defend against specific attack vectors. - Syllabus Topics: * Introduction * ATT&CK – Reconnaissance (TA0043) * ATT&CK – Resource Development (TA0042) * ATT&CK – Initial Access (TA0001) * ATT&CK – Execution (TA0002) * ATT&CK – Persistence (TA0003) * ATT&CK – Privilege Escalation (TA0004) * ATT&CK – Defense Evasion (TA0005) * ATT&CK – Credential Access (TA0006) * ATT&CK – Discovery (TA0007) * ATT&CK – Lateral Movement (TA0008) * ATT&CK – Collection (TA0009) * ATT&CK – Command and Control (TA0011) * ATT&CK – Exfiltration (TA0010) * ATT&CK – Impact (TA0040) --- ### 379. Web Security Testing with Burp Suite - URL: https://cyberlabarchive.com/courses/ps-web-security-testing-with-burp-suite - Category: PluralSight - Downloadable Files: 1 (1 GB) - Formats: RAR - Description: What is the use of Burp Suite? Burp Suite is an integrated platform/graphical tool for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities. Burp Suite is installed by default in Kali Linux. The tool is written in Java and developed by PortSwigger Web Security. The tool has three editions: a Community Edition that can be downloaded free of charge, a Professional Edition and an Enterprise Edition that can be purchased after a trial period. The Community edition has significantly reduced functionality. It intends to provide a comprehensive solution for web application security checks. In addition to basic functionality, such as proxy server, scanner and intruder, the tool also contains more advanced options such as a spider, a repeater, a decoder, a comparer, an extender and a sequencer. - Syllabus Topics: * Web Application Penetration Testing with Burp Suite * Advanced Web Application Penetration Testing with Burp Suite * Writing Burp Suite Macros and Plugins --- ### 380. Shell Scripting with Bash and Z Shell - URL: https://cyberlabarchive.com/courses/ps-shell-scripting-with-bash-and-z-shell - Category: PluralSight - Downloadable Files: 1 (551 MB) - Formats: 7Z - Description: This skill focuses on creating shell scripts using Bash and/or Z Shell to automate just about any task on a UNIX system. With the skills here, you’ll maximize your productivity by using shell scripts to automate tasks and make your life easier. - Syllabus Topics: * Getting Started with Shell Scripting for Bash and Z Shell * Mastering Bash and Z Shell Scripting Syntax * Operationalizing Bash and Z Shell Scripts --- ### 381. Enterprise Security Monitoring with Open Source Network IDS & IPS - URL: https://cyberlabarchive.com/courses/ps-enterprise-security-monitoring-with-open-source-network-ids-ips - Category: PluralSight - Downloadable Files: 1 (1.5 GB) - Formats: 7Z - Description: NIST defines an Intrusion Detection System (IDS) as software that looks for suspicious activity and alerts administrators. In the NIST Special Publication 800-62 it goes on to say that it is a security service that monitors and analyzes network or system events for the purpose of finding, and providing real-time or near real-time warning of, attempts to access system resources in an unauthorized manner. NIST Special Publication 800-161 states that an Intrusion Prevention System (IPS) is software that has all the capabilities of an intrusion detection system and can also attempt to stop possible incidents. Such systems are key in enterprise network security monitoring. This skills path is designed for anyone looking to learn and utilize the most popular open source IDS/IPS tools; Snort, Suricata and Zeek (formally Bro). The learner can study the tool that best fits their needs and environment or review all three. For each tool you will gain an understanding of the fundamentals of each tool in the getting started courses. You’ll then discover scripting and rule sets, before looking at extensions, frameworks and integrations. The final course will be utilizing the tools in an enterprise environment or for distributed operations. - Syllabus Topics: * Enterprise Security Monitoring with Snort * Enterprise Security Monitoring with Suricata * Enterprise Security Monitoring with Zeek (formerly Bro) --- ### 382. Antisyphon: Breaching the Cloud w/ Beau Bullock - URL: https://cyberlabarchive.com/courses/breaching-the-cloud - Category: Antisyphon - Downloadable Files: 1 (1.7 GB) - Formats: ZIP - Description: Do you want to level up your cloud penetration testing skills? The attack surface of many organizations has changed to include third-party hosted services such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform. In this training course, hacking concepts will be introduced for each of those services. This training walks through a complete penetration testing methodology of cloud-based infrastructure. Starting with no information other than the company name you will learn to discover what cloud-specific assets your target is using. Following the enumeration of cloud services, you will learn how to discover misconfigurations that commonly expose sensitive data as well as a thorough understanding of how to get an initial foothold into a cloud-based organization. --- ### 383. Antisyphon: Getting Started in Packet Decoding w/ Chris Brenton - URL: https://cyberlabarchive.com/courses/getting-started-in-packet-decoding - Category: Antisyphon - Downloadable Files: 1 (6.9 GB) - Formats: ZIP - Description: One of the core disciplines of security is understanding how systems communicate over the Internet. This skill set is crucial to spotting abnormal behavior and attack patterns. In this class, we will go beyond the fundamentals of how IP communicates and dive into the subtle nuances. This will help the student identify anomalous patterns when they occur. Much of this class is spent focusing on the IP, ICMP, UDP, and TCP headers. We will step through each of the fields within each header to ensure that the student understands how the data within that field plays a role in communications. This knowledge is deepened by observing the behavior in packet decodes, some of which are normal traffic while some are common attacks. --- ### 384. Antisyphon: HackerOps w/ Ralph May - URL: https://cyberlabarchive.com/courses/hackerops - Category: Antisyphon - Downloadable Files: 1 (5.4 GB) - Formats: ZIP - Description: To conduct an advanced attack, you need more than just a collection of simple scripts. In addition to talent, you need a large amount of managed and unmanaged code. The more code and resources that are required to conduct an engagement, the more time we need. Time is something we don’t have a lot of on an engagement. Today, to be an advanced and effective attacker, you need to move fast, and that speed requires a move to a DevOps style of managing infrastructure and code. With cloud resources and APIs to manage these resources, the days of manual setup are long behind us. --- ### 385. Antisyphon: Modern WebApp Pentesting w/ BB King - URL: https://cyberlabarchive.com/courses/modern-webapp-pentesting - Category: Antisyphon - Downloadable Files: 1 (8 GB) - Formats: ZIP - Description: Modern Webapp Pentesting is unique in its approach to testing webapps. Too many courses are built around the assumption that a webapp pentester’s skills should grow along a straight line, starting with something like the OWASP Top Ten and culminating in something like Attacking Web Cryptography. Real webapps don’t follow that same path, and neither should real webapp pentesters. Attacking Web Sockets is not more difficult than attacking HTTP traffic, it’s just different. Web APIs are not something you’re qualified to test only after you’ve put your time in on traditional webapps … they’re just different. This course doesn’t worry about where a student falls on the imaginary scale of beginner to expert but instead focuses on finding and exploiting the kinds of issues found in real webapps today, based on the instructor’s many years of ongoing experience in testing … real webapps today. --- ### 386. Antisyphon: Network Forensics and Incident Response w/ Troy Wojewoda - URL: https://cyberlabarchive.com/courses/network-forensics-and-incident-response - Category: Antisyphon - Downloadable Files: 1 (11.3 GB) - Formats: ZIP - Description: Incident responders are continually faced with the challenge of collecting and analyzing relevant event data—network communications is no exception. This course uses an assortment of network data acquisition tools and techniques with a focus on open-source, vendor-neutral solutions. Students who take this course will learn how to perform network traffic and protocol analysis that ultimately supports cybersecurity incident response efforts. From reconnaissance to data exfiltration, network traffic scales to provide a bird’s-eye view of attacker activity. Leveraging the vantage point of key network traffic chokepoints, this course explores nearly every phase of an attacker’s methodology. Students will learn network traffic analysis concepts and work through hands-on lab exercises that reinforce the course material using real-world attack scenarios. --- ### 387. Antisyphon: Red Team: Getting Access w/ Michael Allen - URL: https://cyberlabarchive.com/courses/antisyphon-red-team-getting-access-w-michael-allen - Category: Antisyphon - Downloadable Files: 1 (13.1 GB) - Formats: ZIP - Description: Getting a foothold is the first step in a successful breach—be it in the form of user credentials, email access, or code execution on a target system. This course will provide students with the fundamental skills and know-how to perform the most common attacks used to get an initial foothold during a red team exercise. Since Microsoft products and services are the most widespread platform in use by organizations, Office 365 and Microsoft Windows will be the primary targets of student exercises. Core concepts will also be discussed so that students can apply the lessons learned to other platforms in the future. --- ### 388. Antisyphon: Regular Expressions, Your New Lifestyle w/ Joff Thyer - URL: https://cyberlabarchive.com/courses/regular-expressions-your-new-lifestyle - Category: Antisyphon - Downloadable Files: 1 (511 MB) - Formats: ZIP - Description: Regular expressions are universally embedded in the world of information technology. They are a part of many programming languages, databases, search engines, and command-line tools. As an information security professional, you are continuously analyzing textual data for indicators of compromise, juicy data morsels to exfiltrate, forensic artifacts, supporting evidence in threat hunting, and so much more. Familiarity with regular expressions is a skill, a very life-enhancing essence if you like, to take your information security analysis capabilities from “just ok” to “wizard level.” They are applicable in so many places that you really cannot afford to not have this knowledge.Join me for a four-hour session that takes you on a journey through regular expression POSIX, BRE, ERE, and PCRE syntax and explores various tools that you probably use daily through the lens of regular expressions. Your life will be forever changed when you can apply the power of regular expressions to your professional duties. --- ### 389. Blue Team Tools - URL: https://cyberlabarchive.com/courses/ps-blue-team-tools - Category: PluralSight - Downloadable Files: 1 (1.1 GB) - Formats: 7Z - Description: MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community. With the addition of MITRE Shield, you now have a 360 degree view of attack scenarios and the data and capabilities needed to stop them. - Syllabus Topics: * Introduction * Network Analysis * OS Analysis * Infrastructure Analysis * File Analysis * Application Analysis * Incident Management * Threat Intelligence --- ### 390. MDSec: Adversary Simulation and Red Team Tactics - URL: https://cyberlabarchive.com/courses/adversary-simulation-and-red-team-tactics - Category: Other Institutions - Downloadable Files: 1 (620 MB) - Formats: ZIP - Description: This intense course covers the skills required to conduct a simulation of a sophisticated adversary, including the latest tradecraft and offensive tactics. During the training you will gain insight in to planning and conducting a red team operation including all the steps required to perform efficient opensource intelligence, design and automate the deployment of operational infrastructure, gain initial access and perform post-exploitation and lateral movement. You will learn how to bypass defensive controls including anti-virus, EDR, AMSI and application whitelisting that will leave you equipped to target even the most mature environments. - Syllabus Topics: * Introduction to red team operations * Active and passive reconnaissance * Infrastructure design concepts * Cobalt Strike and malleable profiles * Initial access techniques * Defensive evasion * Process Injection * Custom Tooling * Host triage * Persistence * Privilege escalation * Pivoting and lateral movement * Exploiting Active Directory * MacOS and Linux --- ### 391. ScorpioSoftware: Advance Windows Kernel Programming - URL: https://cyberlabarchive.com/courses/windows-kernel-programming-master-class - Category: Scorpio Software - Downloadable Files: 1 (8 GB) - Formats: 7Z - Description: The cyber security industry has grown considerably in recent years, with more sophisticated attacks and consequently more defenders. To have a fighting chance against these kinds of attacks, kernel mode drivers must be employed, where nothing (at least nothing from user mode) can escape their eyes. The course provides the foundations for the most common software device drivers that are useful not just in cyber security, but also other scenarios, where monitoring and sometimes prevention of operations is required. Participants will write real device drivers with useful features that can then be modified and adapted to their particular needs.The course includes tips and techniques employed by the instructor in their own projects, based on years of experience. - Syllabus Topics: * Windows Internals quick overview * The I/O System * Device Drivers Basics * The I/O Request Packet * Kernel mechanisms * Programming Techniques * Process and thread monitoring * Object and Registry notifications * File system mini filters * Windows Filtering Platform * Programming Techniques II * Introduction to KMDF --- ### 392. ScorpioSoftware: Windows System Programming - URL: https://cyberlabarchive.com/courses/windows-system-programming - Category: Scorpio Software - Downloadable Files: 1 (5.5 GB) - Formats: ZIP - Description: The Windows system-level APIs provides a rich infrastructure for building Windows applications, whether client, server, and anything in between. This course guides the learner through the intricacies of the Windows API, while getting a deeper understanding of Windows mechanisms. The course deals with the most important parts of the Windows OS, such as processes, threads, memory management, I/O, services, security and more. Lab exercises help put the theoretical material into practical use. - Syllabus Topics: * Foundations * Objects and Handles * Processes * Jobs * Threads * Thread Synchronization * File and Device I/O * Memory Management * Dynamic Link Libraries * Security * Windowing --- ### 393. ScorpioSoftware: Windows Internals - URL: https://cyberlabarchive.com/courses/scorpiosoftware-windows-internals - Category: Scorpio Software - Downloadable Files: 1 (4.8 GB) - Formats: 7Z - Description: The Windows OS exposes many advanced services to system programmers through the Windows API, and to device driver writers through the Kernel API. The .NET framework wraps these services and runs on top of the Windows API and the Kernel. Good knowledge of what’s going on under the hood of the OS, which services are available and how to best utilize them helps in building better and more efficient software for Windows. Those working in the Cyber security space can greatly benefit from the course as it looks at all major Windows mechanisms. Lab exercises are used to reinforce the theoretical material. - Syllabus Topics: * System Architecture * Processes & Jobs * Threads * Memory Management * I/O System * Security --- ### 394. ScorpioSoftware: Windows Kernel Programming - URL: https://cyberlabarchive.com/courses/windows-kernel-programming - Category: Scorpio Software - Downloadable Files: 1 (5 GB) - Formats: ZIP - Description: Here is a brief description of the Windows Kernel Programming Class Recordings course offered by Pavel Yosifovich : The course is designed to provide an in-depth understanding of Windows kernel programming. It covers topics such as Windows Internals Overview, Device Driver Basics, Kernel Mechanisms, and Miscellaneous Techniques. The course is divided into 9 modules and is approximately 32 hours long. The course materials include PDFs, labs, and solutions to the labs. The course recordings are available for purchase at a cost of 490 USD. If you’re interested in purchasing the course, you can send an email to zodiacon@live.com with the title “Kernel Programming class recordings” 1 . Once you’ve paid, you’ll receive a link to the course recordings along with the course materials. You’ll also receive a 10% discount for the Advanced Windows Kernel Programming class in April, be added to a discord server that will host all the Alumni from my public classes, and have a live session with Pavel sometime in early April where you can ask questions about the class. - Syllabus Topics: * Module 0: Introduction * Module 1: Windows Internals Overview * Module 2: The I/O System * Module 3: Device Driver Basics * Module 4: The I/O Request Packet * Module 5: Kernel Mechanisms * Module 6: Process and Thread Monitoring * Module 7: Object and Registry Notifications * Module 8: File System Mini-Filters Fundamentals * Module 9: Miscellaneous Techniques --- ### 395. Sektor7 – RED TEAM Operator: Privilege Escalation in Windows - URL: https://cyberlabarchive.com/courses/red-team-operator-privilege-escalation-in-windows - Category: Sektor7 - Downloadable Files: 5 (12.5 GB) - Formats: ZIP, Z01, Z02, Z03, Z04 - Description: Let’s make it short. You’re interested in Windows security, right? Otherwise you wouldn’t be here. You are either led by natural curiosity of security researcher or doing penetration testing professionally, or both. And maybe you need to get better understanding of how privilege escalation works in Microsoft environments. So here’s what’s in the course. It is indeed about escalating privileges in Windows. But it’s not only about getting SYSTEM, as there are other shades of that tactic. From the course you’ll learn about becoming another user, breaking out from Medium to High Integrity Level, or from High to System, and abusing privileges assigned to your access token to get more powers on the box. You will get access to a complete testing environment with many misconfigurations and vulnerable services plus code templates with full building toolchain. As we usually do in SEKTOR7 it’s a ready-to-use package prepared for any student who’s willing to take some time and experiment and learn new things. So if you’re still interested, get on board, relax and take a great journey through the world of Windows security. - Syllabus Topics: * Intro and Setup * Credentials * Unsecured Objects * Execution Flow Hijacking * Getting SYSTEM * Assigments --- ### 396. Sektor7 – RED TEAM Operator: Windows Persistence - URL: https://cyberlabarchive.com/courses/red-team-operator-windows-persistence - Category: Sektor7 - Downloadable Files: 1 (774 MB) - Formats: ZIP - Description: Real threat actors utilize various Tactics, Techniques and Procedures (aka TTPs). One of the tactic is Persistence – a way to survive a breached machine restart and preserve access to a target environment. There is a lot of focus on what methods adversaries use to exploit a particular vulnerability or how their C2 channels and infrastructure look like. Less often you find discussions about persistence. This course is aiming to change that. You will learn almost 30 different persistence techniques working on Windows 10. Most of them were used by nation-state threat actors, like EquationGroup, Turla, APT29, ProjectSauron or malware, including Flame or Stuxnet. As usual you will get not only full explanation of each technique with examples, but also a working code templates (written in C) and a complete development environment you can experiment with. - Syllabus Topics: * Intro and Setup * Low Privilege Persistence * Admin Level Persistence * Assignments --- ### 397. Sektor7 – RED TEAM Operator: Windows Evasion - URL: https://cyberlabarchive.com/courses/red-team-operator-windows-evasion - Category: Sektor7 - Downloadable Files: 4 (19.8 GB) - Formats: ZIP, Z01, Z02, Z03 - Description: In the modern enterprise Windows  environment we often encounter lots of obstacles, which try to detect and stop our sneaky tools and techniques. Endpoint protection agents (AV, IDS/IPS, EDR, etc.) are getting better and better at this, so this requires an extended effort in finding a way into the system and staying undetected during post-exploitation activities. This course will guide you though modern detection technology and teach how you can try to avoid it. This means understanding how the technology works and developing certain capabilities to stay under the radar. You will receive a virtual machine with complete environment for developing and testing your software, and a set of source code templates which will allow you to focus on understanding the essential mechanisms instead of less important technical aspects of implementation. --- ### 398. Sektor7 – RED TEAM Operator: Malware Development Advanced - URL: https://cyberlabarchive.com/courses/red-team-operator-malware-development-advanced-vol1 - Category: Sektor7 - Downloadable Files: 5 (18.7 GB) - Formats: ZIP, Z01, Z02, Z03 - Description: Advanced offensive security tool (OST) development topics for Windows user land only, including: hidden data storage, rootkit techniques, finding privileged objects in system memory, detecting new process creation, generating and handling exceptions, building COFFs and custom RPC-like instrumentation, and more. - Syllabus Topics: * Intro and Setup * Filesystem corners * Objects Enumeration in Memory * Global Hooks * Userland Rootkit Tech * Process Environment Block Manipulations * No-patch Hooking * Process Memory Hiding * Custom RPC * Common Object File Format * Custom Project --- ### 399. Sektor7 – RED TEAM Operator: Malware Development Intermediate Course - URL: https://cyberlabarchive.com/courses/red-team-operator-malware-development-intermediate-course - Category: Sektor7 - Downloadable Files: 2 (14.2 GB) - Formats: 7Z, OVA - Description: This course builds on what you have learned so far by extending your development capabilities with: playing with Process Environment Blocks and implementing our own function address resolution more advanced code injection techniques understanding how reflective binaries work and building custom reflective DLLs, either with source or binary only in-memory hooking, capturing execution flow to block, monitor or evade functions of interest grasping 32- and 64-bit processing and performing migrations between x86 and x64 processes discussing inter process communication and how to control execution of multiple payloads The course ends with a combined project, where you will create a custom dropper implementing discussed techniques. You will receive a virtual machine with complete environment for developing and testing your software, and a set of source code templates which will allow you to focus on understanding the essential mechanisms instead of less important technical aspects of implementation. - Syllabus Topics: * Intro and Setup * PE madness * Code Injection * Reflective DLLs * x86 vs x64 * Hooking * Payload Control via IPC * Combined Project --- ### 400. Sektor7 – RED TEAM Operator: Malware Development Essentials - URL: https://cyberlabarchive.com/courses/red-team-operator-malware-development-essentials - Category: Sektor7 - Downloadable Files: 4 (9 GB) - Formats: ZIP, Z01, Z02, Z03 - Description: Are you a pen tester having some experience with Metasploit or Empire frameworks? Or maybe you take your first steps as an ethical hacker and you want to know more about how all these offensive tools work? Or you are a blue teamer or threat hunter who needs to better understand the internal workings of malware? This course will provide you the answers you’re looking for. It will teach you how to develop your own custom offensive security tool (OST) for latest Microsoft Windows 10. And by custom OTA we mean building a dropper for any payload you want ( Metasploit meterpreter, Empire or Cobalt Strike beacons , etc.), injecting your shellcodes into remote processes, creating trojan horses (backdooring existing software) and bypassing Windows Defender AV. You will receive a virtual machine with complete environment for developing and testing your software, and a set of source code templates which will allow you to focus on understanding the essential mechanisms instead of less important technical aspects of implementation. - Syllabus Topics: * Intro and Setup * Portable Executable * Droppers * Obfuscation and Hiding * Backdoors and Trojans * Code Injection * Extras * Combined Project --- ### 401. OALABS: Malware Reverse Engineering Training - URL: https://cyberlabarchive.com/courses/oalabs-malware-reverse-engineering-training - Category: Other Institutions - Downloadable Files: 49 (241.3 GB) - Formats: ZIP, 7Z - Description: Through OALABS we want to bring you the kind of reverse engineering tutorials that we wished we had when we were first learning to analyze malware. With Patreon we offer access to a wide variety of tutorials and workshops aimed at all skill levels. Our RE101 level tutorials cover important topics like how to setup a malware analysis lab, as well as reverse engineering fundaments like learning assembly, and how to use a debugger. Our RE201 level tutorials cover malware analysis specific topics like how to bypass anti-analysis checks in malware, and how to resolve dynamic imports. Our RE504 level tutorials cover advanced reverse engineering topics like how to bypass software protectors such as Themida, and VMProtect. Patreon also allows us to maintain a set of free publicly available malware analysis tutorials on YouTube as well as weekly malware analysis streams on Twitch. - Syllabus Topics: * Malware * Reverse Engineering --- ### 402. All Hacking Loops Courses - URL: https://cyberlabarchive.com/courses/hackingloops - Category: Other Institutions - Downloadable Files: 1 (6.8 GB) - Formats: 7Z - Description: You can find a comprehensive list of courses offered by Hackingloops on their website . They offer a wide range of courses on ethical hacking, penetration testing, cyber security, and web penetration testing techniques. You can also download a free guide that will show you step-by-step how to get started and set up your own lab today. - Syllabus Topics: * Ethical Hacking Course * Penetration Testing Course * Cyber Security Course * Web Penetration Testing Course --- ### 403. Enciphers – Android Application Security - URL: https://cyberlabarchive.com/courses/android-application-security - Category: Enciphers - Downloadable Files: 1 (3.3 GB) - Formats: 7Z - Description: If you are an application security enthusiast, we are sure that you must have wondered what it takes to find security issues in android apps. These android apps handles a huge amount of sensitive user data, perform critical functions and are a big part of day to day life. The security of these apps should be of utmost importance. This course is designed to teach the skills required for testing android apps for security issues like insecure data storage, insecure communication, deep link exploitation and a lot more. The training apps are provided in the course to practice the learned skills. All the attendees will also be given access to a private slack channel to discuss about any issues, topics etc. - Syllabus Topics: * Introduction * Training Presentation * Android Security 101 (Revisiting Android Appsec v.2023) * Exploring Mobexler * Understanding Android Apps (Revisiting Android Appsec v.2023) * Reverse Engineering Android Apps (Revisiting Android Appsec v.2023) * Dynamic Analysis (Revisiting Android Appsec v.2023) * Additional Content * Legacy Course Content --- ### 404. Dark Vortex: Red Team & Operational Security - URL: https://cyberlabarchive.com/courses/red-team-operational-security - Category: Dark Vortex - Downloadable Files: 1 (115 MB) - Formats: 7Z - Description: The Red Team & Operational Security course is designed to help the candidates build the capabilities to simulate a modern adversary. This course will take you through the different stages of an Attacker killchain. You will initially learn to build your own Attack Infrastructure Setup in AWS, Azure or GCP using various Open Source and Commercial Command & Control Systems. After configuring the C2, you will learn to hide your C2 with Domain fronting and Redirectors and modifying the C2 Artefacts such as hiding your stage artefacts and identifying Cloud based Sandboxes and learn to build different types of initial access implants in Word, Excel, HTA and MSI using Open Source Tools and building some part of the code in-house in order to avoid EDR and Network-based Detections. After gaining the initial access, you will be given access to Active Directory Domain Enviornment Lab on the cloud where you will first execute your initial access implant and gain access to a host. From thereon, you will perform different types of local and Active Directory enumeration to further escalate your privileges to an Enterprise Administrator. These attacks will use but not limited to understanding the Active Directory environment, Kerberos, domain enumeration with open source tools, Brute Ratel post exploitation toolkit and LDAP Queries, exploiting domain service misconfigurations such as unconstrained and constrainged delegations, certificate abuse and more. --- ### 405. Dark Vortex: Malware on Steroids - URL: https://cyberlabarchive.com/courses/malware-on-steroids - Category: Dark Vortex - Downloadable Files: 1 (2.2 GB) - Formats: ZIP - Description: The Malware On Steroids is the first course which is dedicated to building your own C2 Infrastructure and Payload. There are a lot of courses which focus on exploitation, reversing and other offensive stuff, but none of them focus on how you can build your own Command & Control Infra. This course focuses on a brief introduction towards Windows Internals followed by a full hands-on course on building a Command & Control architecture with different types of Initial Access payloads. During the course, you will learn the core fundamentals of a Malware Lifecycle such as initial access, in-memory evasions, different types of payload injections including but not limited to reflective DLLs, shellcode injection, COFF injections and more. You will learn to build different types of remote access tools running over different protocols which we will later convert to in-memory modules that can be injected to any process. We will also write dropper and stagers in x64 Assembly, C and different LOLbins which will connect back to our CnC to extract the second stage and load it into memory for execution. --- ### 406. Advanced Reconnaissance & Bug Bounty Hacking Methodologies - URL: https://cyberlabarchive.com/courses/advanced-reconnaissance-bug-bounty-hacking-methodologies - Category: Other Institutions - Downloadable Files: 1 (27.6 GB) - Formats: ZIP - Description: The course will purely focus on Web/Server/Mobile offensive hacking using the Bug Bounty Hunter Mentality. - Syllabus Topics: * Pentest --- ### 407. MGT517: Designing and Building a SOC - URL: https://cyberlabarchive.com/courses/designing-and-building-a-soc - Category: Security Education - Downloadable Files: 1 (175 MB) - Formats: ZIP - Description: MGT517 is a specialized course aimed at cybersecurity leaders, architects, and managers seeking to establish or optimize a Security Operations Center. The course provides participants with the knowledge, tools, and frameworks needed to design, build, and manage a SOC that effectively detects, responds to, and mitigates security incidents. --- ### 408. MGT414: Training Program for CISSP® Certification - URL: https://cyberlabarchive.com/courses/training-program-for-cissp-certification - Category: Security Education - Downloadable Files: 3 (5.8 GB) - Formats: ZIP - Description: MGT414 is an intensive, comprehensive course designed to prepare professionals for the Certified Information Systems Security Professional (CISSP) certification exam. This globally recognized certification validates an individual’s expertise in designing, implementing, and managing a top-tier cybersecurity program. The course provides an in-depth exploration of the eight CISSP domains, equipping participants with the knowledge and skills needed to succeed. - Syllabus Topics: * Introduction; Security and Risk Management * Asset Security and Security Engineering (Part 1) * Security Engineering (Part 2): Communication and Network Security * Identity and Access Management * Security Assessment and Testing; Security Operations * Software Development Security --- ### 409. FOR608: Enterprise-Class Incident Response & Threat Hunting - URL: https://cyberlabarchive.com/courses/enterprise-class-incident-response-threat-hunting - Category: Security Education - Downloadable Files: 6 (153.9 GB) - Formats: PDF, ZIP, ISO - Description: FOR608 is an advanced course designed for cybersecurity professionals responsible for detecting, responding to, and mitigating sophisticated cyber threats within enterprise environments. The course emphasizes proactive threat hunting, effective incident response strategies, and the use of cutting-edge tools and techniques to combat advanced persistent threats (APTs) and complex attacks. - Syllabus Topics: * Proactive Detection and Response * Scaling Response and Analysis * Modern Attacks against Windows and Linux DFIR * Analyzing macOS and Docker Containers * Cloud Attacks and Response * Capstone: Enterprise-Class IR Challenge --- ### 410. SEC642: Advanced Web App Penetration Testing, Ethical Hacking, and Exploitation Techniques - URL: https://cyberlabarchive.com/courses/advanced-web-app-penetration-testing-ethical-hacking-and-exploitation-techniques - Category: Security Education - Downloadable Files: 3 (5.4 GB) - Formats: ZIP - Description: SEC642 is an expert-level course tailored for cybersecurity professionals seeking to deepen their skills in identifying, exploiting, and mitigating vulnerabilities in web applications. This course focuses on advanced techniques for penetration testing, ethical hacking, and exploitation, offering hands-on experience in assessing modern, complex web environments. - Syllabus Topics: * Advanced Attacks * Web Cryptography * Alternative Interfaces and XML * Modern Web Frameworks, Part 1 * Modern Web Frameworks, Part II * Capture-the-Flag Challenge --- ### 411. SEC564: Red Team Operations and Threat Emulation - URL: https://cyberlabarchive.com/courses/red-team-operations-and-threat-emulation - Category: Security Education - Downloadable Files: 4 (13.2 GB) - Formats: ZIP, ISO, PDF - Description: SEC564 course is designed to immerse students in the tactics, techniques, and procedures (TTPs) used by modern adversaries. By understanding the mindset and strategies of attackers, participants will learn how to conduct sophisticated penetration tests, simulate real-world attacks, and assess the security posture of organizations from a threat actor’s perspective. This course covers advanced topics in threat emulation, including attack simulations, red team engagements, and developing countermeasures to thwart malicious activities. By the end of the course, students will be adept at identifying vulnerabilities, exploiting weaknesses, and enhancing overall security resilience. - Syllabus Topics: * Introduction and Planning of Red Team Exercises * Red Team Exercise Execution and Closure --- ### 412. SEC460: Enterprise and Cloud | Threat and Vulnerability Assessment - URL: https://cyberlabarchive.com/courses/enterprise-and-cloud-threat-and-vulnerability-assessment - Category: Security Education - Downloadable Files: 2 (649 MB) - Formats: ZIP - Description: SEC460 is a comprehensive course designed to equip information security professionals with the skills necessary to effectively secure large-scale enterprise environments, including cloud infrastructures. The course focuses on building technical vulnerability assessment capabilities and introduces a holistic methodology tailored to address the challenges faced by organizations managing extensive systems. - Syllabus Topics: * Vulnerability Management and Assessment * Network and Cloud Asset Discovery and Classification * Enterprise and Cloud Vulnerability Scanning * Vulnerability Validation, Triage, and Mass Data Management * Remediation and Reporting * Vulnerability Assessment Hands-on Challenge --- ### 413. SEC583: Crafting Packets - URL: https://cyberlabarchive.com/courses/crafting-packets - Category: Security Education - Downloadable Files: 3 (3.1 GB) - Formats: ZIP - Description: SEC583: Crafting Packets is a one-day, lab-intensive course designed to teach security analysts, network engineers, and system administrators the powerful skill of crafting and manipulating packets. This capability is essential for testing firewall policies, IDS/IPS rules, host/server settings, application configurations, and more. - Syllabus Topics: * Crafting packets --- ### 414. SEC579: Virtualization and Software-Defined Security - URL: https://cyberlabarchive.com/courses/virtualization-and-software-defined-security - Category: Security Education - Downloadable Files: 1 (472 MB) - Formats: ZIP - Description: SEC579 is a comprehensive course designed to equip security professionals with the knowledge and skills necessary to secure virtualized and software-defined infrastructures. As organizations increasingly adopt virtualization technologies and software-defined networking (SDN) to enhance efficiency and scalability, they also face new security challenges. This course addresses these challenges by providing in-depth coverage of securing virtual environments and SDN architectures. - Syllabus Topics: * Core Concepts of Virtualization Security * Virtualization and Software-Defined Security Architecture and Design * Virtualization Threats, Vulnerabilities, and Attacks * Defending Virtualization and Software-Defined Technologies * Virtualization Operations, Auditing, and Monitoring --- ### 415. SEC545: Cloud Security Architecture and Operations - URL: https://cyberlabarchive.com/courses/cloud-security-architecture-and-operations - Category: Security Education - Downloadable Files: 3 (26.8 GB) - Formats: ZIP, ISO - Description: SEC545 is a comprehensive course designed to equip security professionals with the knowledge and skills necessary to secure cloud infrastructures effectively. As organizations increasingly migrate to cloud environments, understanding how to design, implement, and manage security measures in these settings becomes crucial. - Syllabus Topics: * Cloud Security Models and Controls * Cloud Security Architecture and Operations I * Cloud Security Architecture and Operations II * Cloud Security Offense + Defense Operations * Cloud Security Automation and Orchestration --- ### 416. Antisyphon: Windows Post Exploitation w/ Kyle Avery - URL: https://cyberlabarchive.com/courses/windows-post-exploitation - Category: Antisyphon - Downloadable Files: 3 (3.7 GB) - Formats: PDF, ZIP - Description: So you popped a shell, now what? Windows Post Exploitation focuses on four major components of any adversary simulation or red team exercise: enumeration, persistence, privilege escalation, and lateral movement. Each of these steps will be covered in detail with hands-on labs in a custom Active Directory environment. In addition, students will learn several modern techniques to minimize opportunities for detection. This course goes beyond teaching popular tactics, techniques, and procedures. Instead, students will learn how to covertly gather and leverage information about a target environment to achieve their objectives efficiently. A review of each post-ex capability will include discussion on the OPSEC implications and publicly documented detection recommendations. Open-source SIEM rules from Sigma and Elastic will be used as a starting point for avoiding alert generation. No technique is undetectable; the key is understanding an environment’s detection capabilities and choosing the best course of action. Antisyphon: Windows Post Exploitation w/ Kyle Avery --- ### 417. Antisyphon: Reporting for Pentesters w/ BB King - URL: https://cyberlabarchive.com/courses/reporting-for-pentesters - Category: Antisyphon - Downloadable Files: 2 (619 MB) - Formats: ZIP, MP4 - Description: This class is a distillation of what I’ve learned in my pentesting career about how to create a report that is both easy to read and hard to misunderstand. I will help you develop habits and support materials that simplify the work of reporting so you can get better results with less effort. Ask anyone who signs the checks which is worth more: a clear and actionable report from a tester with average technical skills, detailing how vulnerabilities were found and exploited, showing the impact of those exploits, and making concrete recommendations for improvement? Or a hastily-assembled list of compromised systems, thrown together by an elite hacker in the last hour of the contract after running a rampage through your networks? If you want to set yourself apart, work on your reporting skills. The hacks are ephemeral. The report lives forever. The hacks are fun – and they require your constant effort to keep current. The reporting is what makes this all a viable career – and once you know how to produce a good one, you can apply that skill endlessly as the computing world changes around you. This course helps you know what makes a good report good. It discusses the reporting mindset, and the foundational principles that always lead to a report you can be proud of, regardless of the tools you use for the test or for writing the report. We will look at some real reports as examples, and work together on ways to improve in the areas that are most important, as well as those that are most commonly neglected. Antisyphon: Reporting for Pentesters w/ BB King --- ### 418. Antisyphon: Ransomware Attack Simulation and Investigation for Blue Teamers - URL: https://cyberlabarchive.com/courses/ransomware-attack-simulation-and-investigation-for-blue-teamers - Category: Antisyphon - Downloadable Files: 2 (3.4 GB) - Formats: ZIP - Description: As a cyber security defender and investigator, we often just get to analyze an environment that suffered a ransomware attack after the ransomware execution, where we are trying to make our way back in time to understand the scope and initial infection vectors of a breach. However, knowing how attackers operate and having an understanding of their tools can help tremendously to conduct a more effective analysis and response and ultimately lower the impact of such attacks. This is why in this workshop we will teach you how to perform the common steps of every phase in a ransomware attack scenario as the attacker, from initial infection to impact. We will set up a basic C2 infrastructure with PowerShell Empire, and execute attack phases such as initial access and reconnaissance, persistence mechanisms, privilege escalation, credential dumping, lateral movement, defense evasion, data exfiltration, and encryption with ransomware. In every step you will also learn about the fundamental concepts that are required to conduct the attack and defend against those including hands-on analysis using Splunk, Velociraptor and forensic tools as needed. In the last part of the workshop, you will learn best practices on how to effectively conduct investigations of the attacked environment using various tools that are part of the lab setup. Upon completion of the workshop, participants will have a better understanding of the steps ransomware threat actors take to achieve their objectives, as well as the best practices for detecting and ultimately preventing ransomware attacks. Antisyphon: Ransomware Attack Simulation and Investigation for Blue Teamers --- ### 419. Antisyphon: Advanced Endpoint Investigations - URL: https://cyberlabarchive.com/courses/advanced-endpoint-investigations - Category: Antisyphon - Downloadable Files: 4 (34.3 GB) - Formats: ZIP - Description: For most security teams, high operational tempo (measured in dumpster fire lumens) incentivizes analysts to stick to well-tailored playbooks that prioritize remediation at the expense of proper incident scoping and root cause analysis. Though modern endpoint security products have significantly improved host visibility, most critical incidents will require the acquisition and analysis of additional endpoint data. This course focuses on four core investigative competencies: endpoint data collection, investigative triage, incident response pivots, and root cause analysis. Antisyphon: Advanced Endpoint Investigations --- ### 420. Antisyphon: Active Defense & Cyber Deception w/ John Strand - URL: https://cyberlabarchive.com/courses/active-defense-cyber-deception - Category: Antisyphon - Downloadable Files: 3 (22.3 GB) - Formats: ZIP, 7Z, HTML - Description: Active Defenses have been capturing a large amount of attention in the media lately. There are those who thirst for vengeance and want to directly attack the attackers. There are those who believe that any sort of active response directed at an attacker is wrong. We believe the answer is somewhere in between. In this class, you will learn how to force an attacker to take more moves to attack your network. These moves may increase your ability to detect them. You will learn how to gain better attribution as to who is attacking you and why. You will also find out how to get access to a bad guy’s system. And most importantly, you will find out how to do the above legally. Active Defense & Cyber Deception w/ John Strand --- ### 421. All OffSec learning paths - URL: https://cyberlabarchive.com/courses/offsec-learning-paths - Category: OffSec - Downloadable Files: 9 (556 MB) - Formats: RAR, ZIP - Description: This is  a collection of Offensive Security’s curated cyber security learning paths These learning paths are designed to provide a comprehensive understanding of various cyber security domains, such as network penetration testing, web application security, wireless security, secure software development, and cloud security . Each learning path is tailored to suit the needs of cyber security enthusiasts, from beginners to advanced learners --- ### 422. SOC-200: Foundational Security Operations and Defensive Analysis - URL: https://cyberlabarchive.com/courses/soc-200-foundational-security-operations-and-defensive-analysis - Category: OffSec - Downloadable Files: 2 (994 MB) - Formats: ZIP - Description: Learn the foundations of cybersecurity defense with Foundational Security Operations and Defensive Analysis (SOC-200), a course designed for job roles such as Security Operations Center (SOC) Analysts and Threat Hunters. Learners gain hands-on experience with a SIEM, identifying and assessing a variety of live, end-to-end attacks against a number of different network architectures. Learners who complete the course and pass the exam earn the OffSec Defense Analyst (OSDA) certification, demonstrating their ability to detect and assess security incidents. - Syllabus Topics: * Attacker Methodology Introduction * Windows Endpoint Introduction * Windows Server Side Attacks * Windows Client-Side Attacks * Windows Privilege Escalation * Windows Persistence * Linux Endpoint Introduction * Linux Server Side Attacks * Network Detections * Antivirus Alerts and Evasion * Network Evasion and Tunneling * Active Directory Enumeration * Windows Lateral Movement * Active Directory Persistence * SIEM Part One: Intro to ELK * SIEM Part Two: Combining the Logs --- ### 423. EXP-312: Advanced macOS Control Bypasses - URL: https://cyberlabarchive.com/courses/exp-312-advanced-macos-control-bypasses - Category: OffSec - Downloadable Files: 1 (725 MB) - Formats: RAR - Description: Advanced macOS Control Bypasses (EXP-312) is our first macOS security course. It’s an offensive logical exploit development course for macOS, focusing on local privilege escalation and bypassing the operating system’s defenses. EXP-312 is an advanced course that teaches the skills necessary to bypass security controls implemented by macOS, and exploit logic vulnerabilities to perform privilege escalation on macOS systems. Learners who complete the course and pass the exam earn the OffSec macOS Researcher (OSMR) certification. - Syllabus Topics: * Introduction to macOS internals * Debugging, Tracing   Hopper * Shellcoding in macOS * Dylib Injection * Mach and Mach injection * Hooking * XPC exploitation * Sandbox escape * Attacking privacy (TCC) * Symlink attacks * Kernel code execution * macOS Pentesting --- ### 424. EXP-301: Windows User Mode Exploit Development - URL: https://cyberlabarchive.com/courses/exp-301-windows-user-mode-exploit-development - Category: OffSec - Downloadable Files: 1 (2.2 GB) - Formats: RAR - Description: Windows User Mode Exploit Development (EXP-301) is a course that teaches learners the basics of modern exploit development. Despite being a fundamental course, it is at the 300 level because it relies on substantial knowledge of assembly and low level programming. It begins with basic buffer overflow attacks and builds into learning the skills needed to crack the critical security mitigations protecting enterprises. Learners who complete the course and pass the exam earn the OffSec Exploit Developer (OSED) certification. The OSED is one of three certifications making up the OSCE³ certification along with the OSEP for advanced penetration testing and OSWE for web application security. - Syllabus Topics: * WinDbg tutorial * Stack buffer overflows * Exploiting SEH overflows * Intro to IDA Pro * Overcoming space restrictions: Egghunters * Shellcode from scratch * Reverse-engineering bugs * Stack overflows and DEP/ASLR bypass * Format string specifier attacks * Custom ROP chains and ROP payload decoders --- ### 425. WEB-300: Advanced Web Attacks and Exploitation - URL: https://cyberlabarchive.com/courses/web-300-advanced-web-attacks-and-exploitation - Category: OffSec - Downloadable Files: 1 (3.7 GB) - Formats: RAR - Description: Advanced Web Attacks and exploitation (WEB-300) is an advanced web application security course that teaches the skills needed to conduct white box web app penetration tests. Learners who complete the course and pass the exam earn the OffSec Web Expert (OSWE) certification and will demonstrate mastery in exploiting front-facing web apps. The OSWE is one of three certifications making up the OSCE³ certification along with the OSEP for advanced pentesting and OSED for exploit development. - Syllabus Topics: * JavaScript Prototype Pollution * Advanced Server-Side Request Forgery (SSRF) * Web security tools and methodologies * Source code analysis * Persistent cross-site scripting * Session hijacking * .NET deserialization * Remote code execution * Blind SQL injection * Data exfiltration * Bypassing file upload restrictions and file extension filters * PHP type juggling with loose comparisons * PostgreSQL Extension and User Defined Functions * Bypassing REGEX restrictions * Magic hashes * Bypassing character restrictions * UDF reverse shells * PostgreSQL large objects * DOM-based cross site scripting (black box) * Server-side template injection * Weak random token generation * XML external entity injection * RCE via database functions * OS command injection via WebSockets (black box) --- ### 426. WEB-200: Foundational Web Application Assessments with Kali Linux - URL: https://cyberlabarchive.com/courses/web-200-foundational-web-application-assessments-with-kali-linux - Category: OffSec - Downloadable Files: 2 (903 MB) - Formats: RAR - Description: Learn the foundations of web application assessments with Foundational Web Application Assessments with Kali Linux (WEB-200). Learners who complete the course and pass the exam will earn the OffSec Web Assessor (OSWA) certification and will demonstrate their ability to leverage web exploitation techniques on modern applications. This course teaches learners how to discover and exploit common web vulnerabilities and how to exfiltrate sensitive data from target web applications. Learners that complete the course will obtain a wide variety of skill sets and competencies for web app assessments. - Syllabus Topics: * Tools for the Web Assessor * Cross-Site Scripting (XSS) Introduction, Discovery, Exploitation and Case Study * Cross-Site Request Forgery (CSRF) * Exploiting CORS Misconfigurations * Database Enumeration * SQL Injection (SQLi) * Directory Traversal * XML External Entity (XXE) Processing * Server-Side Template Injection (SSTI) * Server-Side Request Forgery (SSRF) * Command Injection * Insecure Direct Object Referencing * Assembling the Pieces: Web Application Assessment Breakdown --- ### 427. PEN-300: Advanced Evasion Techniques and Breaching Defenses - URL: https://cyberlabarchive.com/courses/pen-300-advanced-evasion-techniques-and-breaching-defenses - Category: OffSec - Downloadable Files: 4 (2.9 GB) - Formats: ZIP, PDF - Description: Evasion Techniques and Breaching Defenses (PEN-300) is an advanced penetration testing course. Learners who complete the course and pass the exam will earn the OffSec Experienced Pentester (OSEP) certification. This course builds on the knowledge and techniques taught in Penetration Testing with Kali Linux, teaching learners to perform advanced penetration tests against mature organizations with an established security function and focuses on bypassing security mechanisms that are designed to block attacks. The OSEP is one of three certifications making up the OSCE certification along with the OSWE for advanced web attacks and OSED for exploit development. - Syllabus Topics: * Operating System and Programming Theory * Client Side Code Execution With Office * Client Side Code Execution With Jscript * Process Injection and Migration * Introduction to Antivirus Evasion * Advanced Antivirus Evasion * Application Whitelisting * Bypassing Network Filters * Linux Post-Exploitation * Kiosk Breakouts * Windows Credentials * Windows Lateral Movement * Linux Lateral Movement * Microsoft SQL Attacks * Active Directory Exploitation * Combining the Pieces * Trying Harder: The Labs --- ### 428. PEN-210: Foundational Wireless Network Attacks - URL: https://cyberlabarchive.com/courses/pen-210-foundational-wireless-network-attacks - Category: OffSec - Downloadable Files: 1 (377 MB) - Formats: RAR - Description: Wireless Attacks (PEN-210) introduces learners to the skills needed to audit and secure wireless devices and is a foundational course alongside PEN-200 and benefits those who would like to gain more skills in network security. Learners will identify vulnerabilities in 802.11 networks and execute organized techniques and those who complete the course and pass the exam will earn the OffSec Wireless Professional (OSWP) certification. - Syllabus Topics: * IEEE 802.11 * Wireless Networks * Wi-Fi Encryption * Linux Wireless Tools, Drivers, and Stacks * Wireshark Essentials * Frames and Network Interaction * Aircrack-ng Essentials * Cracking Authentication Hashes * Attacking WPS Networks * Rogue Access Points * Attacking WPA Enterprise * Attacking Captive Portals * bettercap Essentials * Kismet Essentials * Determining Chipsets and Drivers * Manual Network Connections --- ### 429. PEN-200: Penetration Testing with Kali Linux - URL: https://cyberlabarchive.com/courses/pen-200-penetration-testing-with-kali-linux - Category: OffSec - Downloadable Files: 2 (3 GB) - Formats: ZIP - Description: The industry-leading Penetration Testing with Kali Linux (PWK/PEN-200) course introduces penetration testing methodologies, tools, and techniques in a hands-on, self-paced environment. Access PEN-200’s first Learning Module for an overview of course structure, learning approach, and what the course covers. Learners who complete the course and pass the exam will earn the OffSec Certified Professional (OSCP) certification which requires holders to successfully attack and penetrate various live machines in a safe lab environment. The OSCP is considered to be more technical than other ethical hacking certifications and is one of the few that requires evidence of practical penetration testing skills. - Syllabus Topics: * General Course Information * Introduction to Cybersecurity * Effective Learning Strategies * Report Writing for Penetration Testers * Information Gathering * Vulnerability Scanning * Introduction to Web Application Attacks * Common Web Application Attacks * SQL Injection Attacks * Client-side Attacks * Locating Public Exploits * Fixing Exploits * Antivirus Evasion * Password Attacks * Windows Privilege Escalation * Linux Privilege Escalation * Port Redirection and SSH Tunneling * Tunneling Through Deep Packet Inspection * The Metasploit Framework * Active Directory Introduction and Enumeration * Attacking Active Directory Authentication * Lateral Movement in Active Directory * Enumerating AWS Cloud Infrastructure * Attacking AWS Cloud Infrastructure * Assembling the Pieces --- ### 430. SEC506: Securing Linux/Unix - URL: https://cyberlabarchive.com/courses/sec506-securing-linux-unix - Category: Security Education - Downloadable Files: 3 (10 GB) - Formats: ZIP - Description: SEC506 is a comprehensive course designed to equip security professionals with the knowledge and skills necessary to secure Linux and Unix systems effectively. As these operating systems are prevalent in enterprise environments, understanding their security intricacies is crucial for protecting organizational assets. - Syllabus Topics: * Hardening Linux/Unix Systems – Part 1 * Hardening Linux/Unix Systems – Part 2 * Hardening Linux/Unix Systems – Part 3 * Application Security – Part 1 * Application Security – Part 2 * Digital Forensics for Linux/Unix --- ### 431. RTFM – Red Team Field Manual - URL: https://cyberlabarchive.com/courses/rtfm-video-library - Category: Other Institutions - Downloadable Files: 6 (10.2 GB) - Formats: 001, 002, 003, 004, 005, 006 - Description: The RTFM Video Library is an invaluable resource for serious Red Team members who find themselves on critical missions. Led by a seasoned Red Team operator, this high-quality video series delves into various aspects of offensive security, providing practical guidance and insights. Syllabus 1: Infrastructure Setup 2: Initial Access 3: Situational Awareness 4: User Level Persistence 5: Escalation 6: Lateral Movement 7: Active Directory Enumeration 8: Domain Fortification 9: Hunting for User Workstations 10: Active Directory Forest Compromise 11: Secret Enclave Compromise 12: Pivoting through Tunnels RTFM – Red Team Field Manual - Syllabus Topics: * Pentest * Red Team --- ### 432. Antisyphon: Enterprise Attack Initial Access w/ Steve Borosh - URL: https://cyberlabarchive.com/courses/enterprise-attack-initial-access-w-steve-borosh - Category: Antisyphon - Downloadable Files: 1 (5.5 GB) - Formats: 7Z - Description: Enterprises have been working tirelessly to improve their security postures through defense-in-depth approaches. Offensive teams have also been putting in long hours of research into bypassing the latest EDR’s and defensive products that keep them on their toes. Long gone “hopefully” are the days of hurdling an HTA file laced with a download cradle at a mature organization with a “Free iPad” ruse and watching your screen fill with incoming agents. An offense-in-depth approach may be applied to offensive practitioner’s looking for success against organizations well-versed in defending a large enterprise. Today’s organizations have assets in multiple geo regions, networks, cloud services, border hosts, and many of them are tied to the internal network in some way. This course aims to help offensive practitioners successfully exercise their client environments from a multi-faceted approach using the latest TTPs blended with esoteric practices to gain the upper hand on your assessments. Antisyphon: Enterprise Attack Initial Access w/ Steve Borosh --- ### 433. SEC455: SIEM Design & Implementation - URL: https://cyberlabarchive.com/courses/sec455-siem-design-implementation - Category: Security Education - Downloadable Files: 1 (2.1 GB) - Formats: ZIP - Description: SEC455 designed to teach professionals how to build a Security Information and Event Management (SIEM) system from the ground up using the Elastic Stack. - Syllabus Topics: * Distributed Search and Visualization * Enriching and Managing Logs --- ### 434. MGT535: Cyber Incident Management - URL: https://cyberlabarchive.com/courses/cyber-incident-management - Category: Security Education - Downloadable Files: 2 (514 MB) - Formats: ZIP - Description: SEC455 designed to teach professionals how to build a Security Information and Event Management (SIEM) system from the ground up using the Elastic Stack. - Syllabus Topics: * Understanding and Communicating About the Incident * Scoping the Damage, Planning the Remediation, and Executing the Plan * Training, Leveraging Cyber Threat Intelligence, Bug Bounties * Cloud Incidents, Business Email Compromise, Credential Theft Attacks and Incident Metrics * AI for Incidents, Attacker Extortion, Ransomware, and Capstone Exercise --- ### 435. MGT512: Security Leadership Essentials for Managers - URL: https://cyberlabarchive.com/courses/security-leadership-essentials-for-managers - Category: Security Education - Downloadable Files: 1 (175 MB) - Formats: ZIP - Description: MGT512: Security Leadership Essentials for Managers designed to equip security leaders with both technical knowledge and leadership skills essential for managing modern security programs. - Syllabus Topics: * Building Your Security Program * Technical Security Architecture * Security Engineering * Security Management & Leadership * Detecting and Responding to Attacks --- ### 436. FOR585: Smartphone Forensic Analysis In-Depth - URL: https://cyberlabarchive.com/courses/smartphone-forensic-analysis-in-depth - Category: Security Education - Downloadable Files: 3 (7.7 GB) - Formats: PDF, ZIP - Description: This course is designed to provide forensic professionals with specialized techniques to analyze and investigate smartphones thoroughly. With mobile devices playing a significant role in daily communications, they often become key evidence sources in criminal, civil, or corporate investigations. - Syllabus Topics: * Smartphone Overview, Fundamentals of Analysis, SQLite Introduction, Android Forensics Overview, and Android Backups * Android Forensics * iOS Device Forensics * iOS Backups, Malware and Spyware Forensics, and Detecting Evidence Destruction * Third-Party Application Analysis * Smartphone Forensic Capstone Exercise --- ### 437. FOR526: Advanced Memory Forensics & Threat Detection - URL: https://cyberlabarchive.com/courses/advanced-memory-forensics-threat-detection - Category: Security Education - Downloadable Files: 3 (41.4 GB) - Formats: ZIP - Description: FOR526 is a specialized course designed to equip digital forensics examiners and incident responders with the skills necessary to perform in-depth memory analysis and effectively detect threats. - Syllabus Topics: * Foundations in Memory Analysis and Acquisition * Unstructured Analysis and Process Exploration * Investigating the User via Memory Artifacts * Internal Memory Structures * Memory Analysis on Platforms Other than Windows * Memory Analysis Challenge --- ### 438. SEC760: Advanced Exploit Development for Penetration Testers - URL: https://cyberlabarchive.com/courses/advanced-exploit-development-for-penetration-testers - Category: Security Education - Downloadable Files: 7 (21.9 GB) - Formats: ZIP, Z01, Z02, Z03, Z04 - Description: SEC760 is an intensive six-day course designed to equip security professionals with the expertise to discover and exploit vulnerabilities in modern operating systems, including Windows 10 and 11, as well as contemporary Linux environments. - Syllabus Topics: * Exploit Mitigations and Reversing with IDA * Advanced Linux Exploitation * Advanced Fuzzing * Patch Diffing, One-Day Exploits, and Windows Kernels * Windows Kernel Debugging and Exploitation * Capture-the-Flag Challenge --- ### 439. SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical Hacking - URL: https://cyberlabarchive.com/courses/advanced-penetration-testing-exploit-writing-and-ethical-hacking - Category: Security Education - Downloadable Files: 5 (21.5 GB) - Formats: PDF, ZIP, ISO - Description: This course is designed for seasoned penetration testers and cybersecurity professionals looking to elevate their skills in offensive security. It focuses on advanced exploitation techniques and complex attack vectors, enabling participants to uncover and exploit vulnerabilities in a wide range of systems and networks. - Syllabus Topics: * Network Attacks for Penetration Testers * Crypto and Post-Exploitation * Product Security Testing, Fuzzing, and Code Coverage * Exploiting Linux for Penetration Testers * Exploiting Windows for Penetration Testers * Capture the Flag Challenge --- ### 440. SEC617: Wireless Penetration Testing and Ethical Hacking - URL: https://cyberlabarchive.com/courses/wireless-penetration-testing-and-ethical-hacking - Category: Security Education - Downloadable Files: 2 (1.9 GB) - Formats: ZIP - Description: SEC617 focuses on teaching ethical hacking techniques specifically related to wireless networks. The course provides in-depth knowledge and practical skills required to perform wireless penetration testing on various types of wireless technologies like Wi-Fi and Bluetooth. - Syllabus Topics: * Wi-Fi Data Collection and Analysis * Wi-Fi Attack and Exploitation Techniques * Enterprise Wi-Fi and Zigbee Attacks * Bluetooth and Software Defined Radio Attacks * RFID, Smart Cards, and NFC Hacking * Capture the Flag Event --- ### 441. SEC588: Cloud Penetration Testing - URL: https://cyberlabarchive.com/courses/cloud-penetration-testing - Category: Security Education - Downloadable Files: 2 (6.3 GB) - Formats: PDF, ZIP - Description: This course provides an in-depth exploration of penetration testing techniques tailored to modern cloud environments. Participants will gain hands-on experience identifying vulnerabilities, exploiting weaknesses, and understanding the unique attack vectors that cloud infrastructures introduce. Covering leading platforms such as AWS, Azure, and Google Cloud, SEC588 emphasizes real-world scenarios, enabling students to assess and secure cloud systems effectively. With a focus on both offensive and defensive strategies, the course equips cybersecurity professionals with the tools to stay ahead in a rapidly evolving threat landscape. - Syllabus Topics: * Architecture, Discovery, and Recon at Scale * Attacking Identity Systems * Attacking and Abusing Cloud Services * Vulnerabilities in Cloud-Native Applications * Infrastructure Attacks and Red Teaming * Capstone Event --- ### 442. SEC580: Metasploit for Enterprise Penetration Testing - URL: https://cyberlabarchive.com/courses/metasploit-for-enterprise-penetration-testing - Category: Security Education - Downloadable Files: 3 (12.3 GB) - Formats: ZIP - Description: This course delves into the powerful capabilities of Metasploit as a comprehensive tool for enterprise-level penetration testing. Designed for security professionals, SEC580 teaches participants how to utilize Metasploit to uncover vulnerabilities, develop custom exploits, and simulate real-world attack scenarios. The course covers advanced features such as pivoting, automation, and integration with other tools, empowering attendees to assess complex network environments effectively. With hands-on labs and practical exercises, SEC580 ensures mastery of Metasploit’s potential, enabling organizations to strengthen their security posture against evolving threats. - Syllabus Topics: * Metasploit for Enterprise Penetration Testing – Section 1 * Metasploit for Enterprise Penetration Testing – Section 2 --- ### 443. SEC573: Automating Information Security with Python - URL: https://cyberlabarchive.com/courses/automating-information-security-with-python - Category: Security Education - Downloadable Files: 2 (12.4 GB) - Formats: PDF, ZIP - Description: This course empowers security professionals to leverage Python for automating complex information security tasks. SEC573 provides a hands-on approach to writing custom scripts for vulnerability scanning, data analysis, log parsing, and intrusion detection. Participants will learn to develop tools that streamline repetitive workflows, enhance threat hunting, and integrate seamlessly into existing security operations. With a focus on practical problem-solving, SEC573 equips attendees with the skills to create scalable, efficient, and adaptable solutions, ensuring organizations stay ahead in a fast-paced security landscape. - Syllabus Topics: * Essentials Workshop with pyWars * Essentials Workshop with MORE pyWars * Defensive Python * Forensics Python * Offensive Python * Capture-the-Flag Challenge --- ### 444. SEC560: Enterprise Penetration Testing - URL: https://cyberlabarchive.com/courses/enterprise-penetration-testing - Category: Security Education - Downloadable Files: 5 (16.7 GB) - Formats: ZIP, PDF, ISO - Description: SEC560 focuses on advanced techniques for conducting thorough penetration tests in large-scale enterprise environments. Participants will learn to assess complex networks, web applications, and systems for vulnerabilities using real-world attack strategies. The course covers both external and internal penetration testing, emphasizing effective exploitation, post-exploitation, and lateral movement techniques. With a strong hands-on approach, students will gain experience in identifying, exploiting, and mitigating risks within enterprise infrastructures. SEC560 prepares professionals to tackle the growing security challenges faced by large organizations and helps them develop comprehensive strategies for improving overall cybersecurity resilience. - Syllabus Topics: * Comprehensive Penetration Test Planning, Scoping, Recon, and Scanning * Initial Access, Payloads, and Situational Awareness * Privilege Escalation, Persistence, and Password Attacks * Lateral Movement and Reporting * Domain Domination and Azure Annihilation * Penetration Test and Capture-the-Flag Exercise --- ### 445. SEC467: Social Engineering for Security Professionals - URL: https://cyberlabarchive.com/courses/social-engineering-for-security-professionals - Category: Security Education - Downloadable Files: 1 (213 MB) - Formats: RAR - Description: SEC467 equips security professionals with the knowledge and skills to recognize, prevent, and respond to social engineering attacks. This course delves into the psychological tactics used by attackers to manipulate individuals into divulging confidential information or compromising security systems. Through real-world scenarios and practical exercises, participants will learn to identify phishing, pretexting, baiting, and tailgating attacks, and develop effective countermeasures. SEC467 also covers ethical considerations and legal implications, providing a comprehensive understanding of social engineering threats in both organizational and personal contexts, helping professionals safeguard against these subtle yet highly effective attack methods. - Syllabus Topics: * Social Engineering Fundamentals, Recon, and Phishing * Media Drops and Payloads, Pretexting, Physical Testing, and Reporting --- ### 446. SEC587: Advanced Open-Source Intelligence (OSINT) Gathering and Analysis - URL: https://cyberlabarchive.com/courses/advanced-open-source-intelligence-osint-gathering-and-analysis - Category: Security Education - Downloadable Files: 3 (10.6 GB) - Formats: PDF, ZIP - Description: SEC587 provides an in-depth exploration of advanced techniques for gathering and analyzing open-source intelligence (OSINT) in cybersecurity. The course teaches participants how to effectively leverage publicly available data—from social media and websites to government databases and deep web sources—to uncover potential security threats and vulnerabilities. Students will learn how to use OSINT tools for real-time threat intelligence, competitor analysis, and threat actor profiling. Emphasizing practical, hands-on exercises, SEC587 enhances the ability to conduct in-depth investigations, identify attack vectors, and anticipate cyber threats, all while adhering to legal and ethical standards. - Syllabus Topics: * Disinformation and Coding for OSINT Efficiency * Intelligence Analysis and Data Analysis with Python * Sensitive Group Investigations and Video and Image Verification * Sock Puppets, OPSEC, Dark Web and Cryptocurrency * Automated Monitoring and Vehicle Tracking * Capstone: Capture (and Present) the Flags --- ### 447. SEC554: Blockchain and Smart Contract Security - URL: https://cyberlabarchive.com/courses/blockchain-and-smart-contract-security - Category: Security Education - Downloadable Files: 1 (10.3 GB) - Formats: ZIP - Description: SEC554 explores the rapidly evolving world of blockchain technology and its security implications, focusing on securing decentralized applications (dApps) and smart contracts. Participants will gain an understanding of blockchain architectures, consensus mechanisms, and cryptographic principles, along with the vulnerabilities that can exist within blockchain networks and smart contracts. Through practical labs, students will learn to identify and mitigate risks such as reentrancy attacks, transaction malleability, and gas limit vulnerabilities. SEC554 prepares professionals to secure blockchain ecosystems, ensuring the integrity of decentralized applications and protecting against emerging threats in blockchain-based environments. - Syllabus Topics: * Blockchain and Smart Contract Fundamentals * Smart Contract Hacking – Solidity * Smart Contract Hacking – Rust * Exploiting DeFi Protocols * Cross-Chain, Defense, and Compliance --- ### 448. SEC530: Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise - URL: https://cyberlabarchive.com/courses/defensible-security-architecture-and-engineering-implementing-zero-trust-for-the-hybrid-enterprise - Category: Security Education - Downloadable Files: 7 (47 GB) - Formats: ZIP, PDF, ISO - Description: SEC530 offers a comprehensive approach to designing and implementing a Zero Trust security model within hybrid enterprise environments. This course emphasizes the importance of security architecture in mitigating modern threats by assuming that every user, device, and application could be compromised. Participants will explore Zero Trust principles, including identity and access management, micro-segmentation, continuous monitoring, and least-privilege access. Through hands-on labs and case studies, students will learn to implement these concepts across hybrid infrastructures, ensuring robust defenses and minimizing the attack surface. SEC530 prepares security professionals to create and maintain resilient, adaptive security architectures aligned with the latest industry standards and best practices. - Syllabus Topics: * Defensible Security Architecture and Engineering: A Journey Towards Zero Trust * Network Security Architecture and Engineering * Network-Centric Application Security Architecture * Data-Centric Application Security Architecture * Zero-Trust Architecture: Addressing the Adversaries Already in Our Networks * Hands-On Secure the Flag Challenge --- ### 449. SEC510: Cloud Security Controls and Mitigations - URL: https://cyberlabarchive.com/courses/sec510-cloud-security-controls-mitigations - Category: Security Education - Downloadable Files: 7 (14.1 GB) - Formats: PDF, ZIP, Z01, Z02, Z03 - Description: SEC510 provides a deep dive into securing public cloud infrastructures, focusing on the top three platforms: Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). The course covers key security challenges unique to the cloud, such as identity and access management (IAM), data protection, network security, and compliance across these environments. Participants will learn to assess and mitigate risks, implement best practices, and leverage native cloud security tools for threat detection and incident response. Through hands-on exercises and real-world case studies, SEC510 equips security professionals with the skills to protect and secure critical cloud-based resources in multi-cloud and hybrid cloud environments. - Syllabus Topics: * Cloud Identity and Access Management * Cloud Virtual Networks * Cloud Data Security * Cloud Application Services and User Security * Multicloud and Cloud Security Posture Management --- ### 450. SEC505: Securing Windows and PowerShell Automation - URL: https://cyberlabarchive.com/courses/securing-windows-and-powershell-automation - Category: Security Education - Downloadable Files: 3 (4.7 GB) - Formats: ZIP - Description: SEC505 teaches security professionals how to secure Windows environments and automate security tasks using PowerShell while maintaining robust protection against internal and external threats. The course explores techniques for hardening Windows systems, securing PowerShell scripts, and detecting malicious automation. Participants will gain practical experience in securing automation workflows, managing administrative privileges, and mitigating common attack vectors like PowerShell-based exploits. With hands-on labs and real-world examples, SEC505 enables attendees to effectively secure Windows environments, automate incident response, and safeguard against advanced threats that target Windows systems and PowerShell automation. - Syllabus Topics: * Learn PowerShell Scripting for Security * You Don’t Know THE POWER! * PowerShell for WMI and Active Directory * PowerShell DevOps and AI-Generated Code * Certificates and Multifactor Authentication * PowerShell Ransomware and Security --- ### 451. SEC501: Advanced Security Essentials – Enterprise Defender - URL: https://cyberlabarchive.com/courses/sec501-advanced-security-essentials-enterprise-defender - Category: Security Education - Downloadable Files: 3 (8.4 GB) - Formats: ZIP, ISO - Description: SEC501 is designed for experienced security professionals who protect enterprise environments from advanced threats. This course provides in-depth training on defending against sophisticated attacks using modern security tools and techniques. Participants will explore topics such as advanced intrusion detection, threat hunting, malware analysis, and effective use of security information and event management (SIEM) systems. The curriculum emphasizes real-world scenarios, including defending against ransomware, lateral movement, and insider threats. Through hands-on labs and exercises, SEC501 equips defenders with the expertise to strengthen an organization’s security posture, respond to incidents effectively, and build a resilient enterprise defense strategy. - Syllabus Topics: * Defensible Network Architecture * Penetration Testing * Security Operations Foundations * Digital Forensics and Incident Response * Malware Analysis * Enterprise Defender Capstone --- ### 452. SEC488: Cloud Security Essentials - URL: https://cyberlabarchive.com/courses/cloud-security-essentials - Category: Security Education - Downloadable Files: 2 (3 GB) - Formats: RAR - Description: SEC488 provides foundational knowledge for securing cloud environments across various platforms, including AWS, Azure, and Google Cloud. This course is designed for security professionals seeking to understand cloud-specific risks, security controls, and compliance requirements. Participants will explore core topics such as identity and access management (IAM), secure configuration, data protection, and monitoring in cloud-native environments. With hands-on labs and practical exercises, students will gain the skills needed to identify vulnerabilities, implement security best practices, and safeguard cloud infrastructure. SEC488 is the ideal starting point for building a strong cloud security strategy and ensuring a secure adoption of cloud technologies. - Syllabus Topics: * Identity and Access Managment (IAM) * Compute and Configuration Management * Data Protection and Automation * Networking and Logging * Compliance, Incident Response, and Penetration Testing * CloudWars --- ### 453. SEC575: iOS and Android Application Security Analysis and Penetration Testing - URL: https://cyberlabarchive.com/courses/ios-and-android-application-security-analysis-and-penetration-testing - Category: Security Education - Downloadable Files: 2 (4.6 GB) - Formats: ZIP - Description: SEC575 provides a comprehensive approach to identifying, analyzing, and exploiting vulnerabilities in mobile applications on iOS and Android platforms. This course equips security professionals with the skills to perform advanced penetration testing and reverse engineering of mobile apps. Topics include secure coding practices, mobile app architecture, API security, and common vulnerabilities such as insecure data storage, improper authentication, and cryptographic flaws. Through hands-on labs and real-world scenarios, participants will learn to evaluate the security of mobile applications, uncover weaknesses, and provide actionable recommendations for remediation. SEC575 prepares attendees to tackle the unique challenges of securing mobile ecosystems effectively. - Syllabus Topics: * Device Architecture and Application Interaction * The Stolen Device Threat and Mobile Malware * Static Application Analysis * Dynamic Mobile Application Analysis and Manipulation * Mobile Penetration Testing * Hands-on Capture-the-Flag Event --- ### 454. Antisyphon: Security Leadership and Management w/ Chris Brenton - URL: https://cyberlabarchive.com/courses/security-leadership-and-management - Category: Antisyphon - Downloadable Files: 1 (6.6 GB) - Formats: 7Z - Description: “Security” is arguably one of the most challenging disciplines to move from being an individual contributor (IC) to being a manager. While security ICs can perform most tasks in isolation, a manager needs to regularly interact with people both inside and outside of the team. Further, “security” has its own language which can be completely foreign to people outside of the discipline. How do you take security concerns and convert them into a language that senior leaders and “C” levels can understand? Honing these skills will be the primary objective of this course. In this course, we will cover all of the steps needed to stand up and lead a security team within an organization. We start with a clean slate so that every aspect gets covered. If you are in an environment that already has a security team, this can help fill in the gaps. This course will have a heavy focus on how to integrate the security team with the rest of the business units. We’ll look at strategies for increasing funding, as well as converting “security risks” into “business risks” so they are better understood by the organization’s leadership. The course includes a lot of collateral like a full set of pre-written security policies. The goal is to help you build an effective security team in as little time as possible. Antisyphon: Security Leadership and Management w/ Chris Brenton --- ### 455. Antisyphon: Security Defense and Detection TTX w/ Amanda Berlin and Jeremy Mio - URL: https://cyberlabarchive.com/courses/security-defense-and-detection-ttx - Category: Antisyphon - Downloadable Files: 1 (2.8 GB) - Formats: 7Z - Description: Security Defense and Detection TTX is a comprehensive four-day tabletop exercise that involves the introduction to completion of security TTXs (tabletop exercises), IR playbooks, and after-action reports. The exercises are paired with video and lab demonstrations that reinforce their purpose. The training as a whole is compatible with the world’s most popular RPG rules. The preparation phase will walk students through the creation of specific IR playbooks that can be utilized in any environment as well as during later parts of the class. The next phase introduces the gamification of the TTXs. The students split up into separate “corporations” with assigned verticals, hit points, armor class, budgets, strengths, and weaknesses. Selection of departments and skills allow the players to further their modifiers. Throughout the exercise, each company will take turns rolling their way through decisions such as large purchases, attack severity, defense capability, and incident response decisions. Antisyphon: Security Defense and Detection TTX w/ Amanda Berlin and Jeremy Mio --- ### 456. Antisyphon: Introduction to PCI (PCI 101) - URL: https://cyberlabarchive.com/courses/introduction-to-pci-101 - Category: Antisyphon - Downloadable Files: 1 (697 MB) - Formats: MP4 - Description: This will be a high level exploration of the Payment Card Industry Security Standards Council. Students will receive a strong understanding of the organization’s history, structure, the standards they maintain, qualified professional certifications, and the lists of validated solutions. This course is a great starting off point for IT or security professionals who reference “PCI” but don’t fully understand everything that entails. Antisyphon: Introduction to PCI (PCI 101) --- ### 457. Antisyphon: Offensive Development w/ Greg Hatcher & John Stigerwalt - URL: https://cyberlabarchive.com/courses/offensive-development - Category: Antisyphon - Downloadable Files: 1 (5 GB) - Formats: 7Z - Description: In the Intro to Offensive Tooling class, you will learn about many of the tools used by attackers to identify vulnerabilities and exploit them. This hands-on course covers a variety of offensive tools, such as Nmap, Recon-ng, Metasploit, Proxychains, Responder, and many more. Through a series of practical labs, you will gain experience in using these tools to assess the security of systems and networks. In addition to learning how to use these tools effectively, you will also explore the ethical considerations surrounding offensive tooling, how to responsibly use these tools to protect sensitive information, and prevent cyber attacks. By the end of this course, you will have a strong foundation in offensive tooling and be well-equipped to apply your knowledge to a wide range of security challenges. Antisyphon: Offensive Development w/ Greg Hatcher & John Stigerwalt --- ### 458. Antisyphon: Linux Forensics w/ Hal Pomeranz - URL: https://cyberlabarchive.com/courses/linux-forensics - Category: Antisyphon - Downloadable Files: 3 (42.4 GB) - Formats: 7Z - Description: Linux is everywhere– running in the cloud, on cell phones, and in embedded devices that make up the “Internet of Things”. Often neglected by their owners, vulnerable Linux systems are low-hanging fruit for attackers wishing to create powerful botnets or mine cryptocurrencies. Ransomware type attacks may target Linux-based database systems and other important infrastructure. As attacks against Linux become more and more common, there is an increasing demand for skilled Linux investigators. But even experienced forensics professionals may lack sufficient background to properly conduct Linux investigations. Linux is its own particular religion and requires dedicated study and practice to become comfortable. Antisyphon: Linux Forensics w/ Hal Pomeranz --- ### 459. Antisyphon: Enterprise Forensics and Response - URL: https://cyberlabarchive.com/courses/enterprise-forensics-and-response - Category: Antisyphon - Downloadable Files: 4 (24 GB) - Formats: ZIP - Description: The Enterprise Forensics and Response course is designed to provide students with both an investigative construct and techniques that allow them to scale incident response activities in an enterprise environment. The focus of the lecture portion of the course work is understanding the incident investigation process, objective oriented analysis and response, intrusion analysis and an exploration of attacker Tactics and Techniques. The technical portion of the course will focus on how to conduct incident investigations at enterprise scale using the remote evidence acquisition and analysis tool Velociraptor along with other free and open-source tools. The focus of the technical portion will be on extracting usable Indicators of Compromise (IOCs) related to specific MITRE ATT&CK tactics. For example, students will be instructed on extracting and analyzing evidence related to the Execution TA0002 of malicious code or LOLBAS. From here, they will be tasked with addressing containment and eradication measures. This course will combine technical elements along with lecture that provides students with both an investigative construct and techniques that allows them to analyze evidence and provide stakeholders with data necessary to limit the damage of modern cyber-attacks. Antisyphon: Enterprise Forensics and Response --- ### 460. Antisyphon: Enterprise Attacker Emulation and C2 Implant Development w/ Joff Thyer - URL: https://cyberlabarchive.com/courses/enterprise-attacker-emulation-and-c2-implant-development - Category: Antisyphon - Downloadable Files: 2 (3.2 GB) - Formats: ZIP - Description: As penetration testers, we all have a need to establish command and control channels in our customer environments. This can be done under the guise of an “assumed compromise” context or in a more adversarial Red Team context. The age of endpoint detection and response (EDR) solutions and application whitelisting has created significant barriers to commodity/well known malware deployment for adversarial exercises. This class focuses on the demonstration of an Open Command Channel framework called “OpenC2RAT”, and then developing, enhancing, and deploying the “OpenC2RAT” command channel software into a target environment. Students will learn about the internal details of a command channel architecture and methods to deploy in an application-whitelisted context. The class will introduce students to blocks of code written in C#, GoLang, and Python to achieve these goals. In addition, the class will introduce some ideas to deploy existing shellcode such as Cobalt Strike Beacon or Meterpreter within a programmed wrapper to enhance success in the age of modern endpoint defense. Many of the techniques introduced in this class can be used to evade modern defensive technologies. Antisyphon: Enterprise Attacker Emulation and C2 Implant Development w/ Joff Thyer --- ### 461. Antisyphon: Defending the Enterprise w/ Kent Ickler and Jordan Drysdale - URL: https://cyberlabarchive.com/courses/defending-the-enterprise - Category: Antisyphon - Downloadable Files: 2 (21.3 GB) - Formats: ZIP - Description: For the luckiest of enterprises, the awareness of an insecure environment is proven not in public discord after a breach but instead by effective security penetration tests. Time and time again Jordan and Kent have witnessed organizations struggle with network management, Active Directory, organizational change, and an increasingly experienced adversary. For new and legacy enterprises alike, Defending the Enterprise explores the configuration practices and opportunities that secure networks, Windows, and Active Directory from the most common and effective adversarial techniques. Have the confidence that your organization is prepared for tomorrow’s security threats by learning how to defend against network poisoning, credential abuse, exploitable vulnerabilities, lateral movement, and privilege escalation. Learn cost-effective mitigations to contemporary adversarial attacks. The best defended networks are those which have matured from countless penetration tests and security incidents. Learn from Kent and Jordan, two seasoned offensive and defensive security experts, to shortcut your organization’s security posture into a well-fortified fortress. Antisyphon: Defending the Enterprise w/ Kent Ickler and Jordan Drysdale --- ### 462. Antisyphon: Attack Emulation Tools: Atomic Red Team, CALDERA and More w/ Carrie Roberts - URL: https://cyberlabarchive.com/courses/attack-emulation-tools-atomic-red-team-caldera - Category: Antisyphon - Downloadable Files: 1 (8.7 GB) - Formats: 7Z - Description: Attack Emulation tools help you measure, monitor, and improve your security controls by executing scripted attacks. Atomic Red Team is a community developed open-source library of these scripted attacks that are mapped directly to the MITRE ATT&CK Framework. There are several frameworks available for executing these scripted attacks including MITRE CALDERA and VECTR. --- ### 463. Antisyphon: Advanced Red Team Operations - URL: https://cyberlabarchive.com/courses/advanced-red-team-operations - Category: Antisyphon - Downloadable Files: 3 (3.4 GB) - Formats: ZIP - Description: This is an advanced course that focuses on setting up secure and resilient C2 infrastructure using Azure/AWS, creating custom Cobalt Strike profiles, hunting for Active Directory Certificate Services misconfigurations in mature enterprise environments. Learn current post-exploitation techniques that White Knight Labs (WKL) has used during real-life engagements to dump credentials, move laterally, escalate to Domain Admin, and capture the client’s crown jewels. We will cover EDR bypass briefly, but AV/EDR bypass will be assumed knowledge for this course. Although this course is designed to be a deep dive into hunting for ADCS misconfigurations and setting up C2 infrastructure, an apex attacker must also know their own indicators of compromise (IOCs) they’re creating and the artifacts they’re leaving behind. On the second day, students will be led through a real-life red team operation. Syllabus Day 1: Red Team Fundamentals Cobalt Strike/Guacamole walkthrough Terraform for infrastructure automation Redirectors and CDNs Custom malleable C2 profile Protecting your C2 server (mod rewrite and proxy pass) Touch and go AV/EDR Bypasses Day 2: Red Team Operation Attack Paths Advanced payload creation Windows lateral movement SOCKS proxies Service controller WMI COM/DCOM Abusing AD misconfigurations via C2 channels (ADCS) Advanced credential dumping techniques SQL misconfigurations for lateral movement and code execution Antisyphon: Advanced Red Team Operations - Syllabus Topics: * Cobalt Strike/Guacamole walkthrough * Terraform for infrastructure automation * Redirectors and CDNs * Custom malleable C2 profile * Protecting your C2 server (mod rewrite and proxy pass) * Touch and go AV/EDR Bypasses --- ### 464. SEC201: Computing & Technology Essentials - URL: https://cyberlabarchive.com/courses/sec201-computing-technology-essentials - Category: Security Education - Downloadable Files: 1 (46 MB) - Formats: RAR - Description: SEC201 is an entry-level course designed to provide a strong foundation in computing and technology concepts essential for cybersecurity professionals. The course covers fundamental topics such as computer hardware, operating systems, networking, and basic programming principles. Participants will also explore key cybersecurity concepts, including threat identification, basic encryption, and safe computing practices. Through practical exercises and real-world examples, SEC201 equips attendees with the essential technical knowledge and skills needed to succeed in more advanced cybersecurity training and roles, making it an ideal starting point for individuals new to the field. - Syllabus Topics: * Computing Fundamentals * Linux Fundamentals * Windows Fundamentals * Programming Fundamentals * Security Fundamentals --- ### 465. Hackademy: Red Team Wi-Fi - URL: https://cyberlabarchive.com/courses/hackademy-red-team-wi-fi - Category: Other Institutions - Downloadable Files: 4 (5.7 GB) - Formats: ZIP, Z01, Z02, Z03 - Description: Many publications exist documenting ways to attack Wi-Fi networks. Still, the gap between old methods that have become obsolete and the current state and outdated tools can be frustrating for someone who wants to learn or even update his knowledge in this field. This course aims to learn the modern ways of assessing the security of Wi-Fi networks and how to apply these attacks against organizations during a Red Team engagement. Indeed, during this course, we will be able to start from the very beginning by talking about old, current, and new attacks and opportunities to allow attendees to fulfill their pentest or Red Team engagements in the future based on our recent experiences. Syllabus Introduction Network introspection Attacks and risks Completion Hackademy: Red Team Wi-Fi - Syllabus Topics: * Pentest * Security --- ### 466. Practical Analysis with Security Onion 2.3 - URL: https://cyberlabarchive.com/courses/practical-analysis-with-security-onion - Category: Security Onion - Downloadable Files: 1 (349 MB) - Formats: 7Z - Description: This course is geared for those interested in seeing how Security Onion is used practically to triage alerts, hunt for threats, as well as build new detections. This course consists of three case studies that briefly cover the 3 most common workflows used in Security Onion: Case Study 1: Alert Triage & Case Creation – This case study walks through how to triage alerts within the alerts interface including escalation to TheHive. Case Study 2: Threat Hunting – This case study focuses on threat hunting within Security Onion using the Hunt interface, targeting SSL & Sysmon logs. Case Study 3: Detection Engineering – This case study covers ingesting Google Workspace audit logs into Security Onion and writing Sigma rules within Playbook targeting these new logs. Practical Analysis with Security Onion 2.3 --- ### 467. Developing Your Detection Playbook with Security Onion 2.3 - URL: https://cyberlabarchive.com/courses/developing-your-detection-playbook-with-security-onion - Category: Security Onion - Downloadable Files: 1 (344 MB) - Formats: 7Z - Description: This course is geared for those wanting to understand how to build a Detection Playbook with Security Onion 2.3. Students will gain both a theoretical and practical understanding of building detections in Security Onion, reinforced with real-life examples from network and host datasources. Syllabus Course Welcome & Introduction to Security Onion Security Onion Installation tDetection Engineering tKey Components of a Play Operationalizing Plays with Sigma Getting Started with Playbook Creating New Plays Developing Your Detection Playbook with Security Onion 2.3 - Syllabus Topics: * Security --- ### 468. Security Onion 2.3 in Production - URL: https://cyberlabarchive.com/courses/security-onion-2-3-in-production - Category: Security Onion - Downloadable Files: 1 (276 MB) - Formats: 7Z - Description: This course is geared for administrators of Security Onion 2.3. Students will gain a foundational understanding of the platform – how to architect, deploy, manage and tune their Security Onion 2.3 grid. Syllabus Preview Course Welcome & Introduction to Security Onion Overall Architecture Installation – Manager Node Installation – Search Node Installation – Forward Node Grid Management with Salt Grid User Management Grid Firewall Management Grid Updates Grid Hardening Security Onion 2.3 in Production - Syllabus Topics: * Security --- ### 469. Complete Hardware Hacking Package - URL: https://cyberlabarchive.com/courses/complete-hardware-hacking-package - Category: Other Institutions - Downloadable Files: 6 (28.7 GB) - Formats: ZIP, Z01, Z02, Z03, Z04, Z05 - Description: The topic of Hardware Hacking is one of the topics that is rarely addressed and mentioned in official courses, but nevertheless it is one of the most important techniques required for hackers who intend to carry out field and physical attacks. This package includes videos from conferences like DefCon on this topic, hands-on courses, lots of books, YouTube videos and blogs. In this course, you will learn a wide range of topics such as making (Rubber Ducky) BAD USB, FPGA attacks, security testing of switches and routers, Wifi jamming, direct attacks on Memory, attacks on Mouse, etc. This package includes more than 40 hours of educational videos and many books. To know the names of the courses and books in this package, you can watch the video of this article. Complete Hardware Hacking Package --- ### 470. Zero Point Security – C2 Development in C Sharp - URL: https://cyberlabarchive.com/courses/c2-development-in-c-sharp - Category: Zero Point Security - Downloadable Files: 1 (2.5 GB) - Formats: ZIP - Description: Learn how to design, build and maintain your own C2 Framework codebase from scratch.  Build a RESTful API-driven Team Server, and a .NET Framework Implant with a variety of post-exploitation capabilities. Design and build Unit Tests to automatically test your code and prevent regression bugs. --- ### 471. Zero Point Security – Red Team Ops - URL: https://cyberlabarchive.com/courses/zero-point-security-red-team-ops - Category: Zero Point Security - Downloadable Files: 1 (1.1 GB) - Formats: ZIP - Description: Red Team Ops is an online, self-study course that teaches the basic principles, tools and techniques synonymous with red teaming. Students will first cover the core concepts of adversary simulation, command & control, engagement planning and reporting. They will then go through each stage of the attack lifecycle – from initial compromise to full domain takeover, data hunting and exfiltration.  Students will learn how common “OPSEC failures” can lead to detection by defenders, and how to carry out those attacks in a stealthier way. Finally, they will learn how to bypass defences such as Windows Defender, AMSI and AppLocker. - Syllabus Topics: * Getting Started * Command & Control * External Reconnaissance * Initial Compromise * Host Reconnaissance * Host Persistence * Host Privilege Escalation * Host Persistence (Reprised) * Credential Theft * Password Cracking Tips & Tricks * Domain Reconnaissance * User Impersonation * Lateral Movement * Session Passing * Pivoting * Data Protection API * Kerberos * Active Directory Certificate Services * Group Policy * MS SQL Servers * Microsoft Configuration Manager * Domain Dominance * Forest & Domain Trusts * Local Administrator Password Solution * Microsoft Defender Antivirus * Application Whitelisting * Data Hunting & Exfiltration * Extending Cobalt Strike * Exam Preparation --- ### 472. Antisyphon – SOC Core Skills - URL: https://cyberlabarchive.com/courses/soc-core-skills - Category: Antisyphon - Downloadable Files: 5 (20 GB) - Formats: ZIP, 001, 002, 003 - Description: This 16-hour information security training course will cover the core security skills all Security Operation Center (SOC) analysts need to have. These are the skills that all Black Hills Information Security (BHIS) SOC team members need to have. Syllabus Core networking skills Live Windows Forensics Live Linux Forensics Memory Forensics Active Directory Analysis Network Threat Hunting Basics of Vulnerability Management The Incident Response Process SOC Core Skills - Syllabus Topics: * Core networking skills * Live Windows Forensics * Live Linux Forensics * Memory Forensics * Active Directory Analysis * Network Threat Hunting * Basics of Vulnerability Management * The Incident Response Process --- ### 473. (BTL1) Blue Team Level 1 - URL: https://cyberlabarchive.com/courses/btl-blue-team-level-1 - Category: Other Institutions - Downloadable Files: 1 (882 MB) - Formats: ZIP - Description: BTL1 is designed to train technical defenders who can defend networks and respond to real-world cyber incidents. The skills and tools you learn apply directly to security roles and are used by defenders worldwide. - Syllabus Topics: * Security Fundamentals * Phishing Analysis * Threat Intelligence * Digital Forensics * Security Information and Event Monitoring * Incident Response * BTL1 Exam Preparation --- ### 474. Antisyphon – Securing The Cloud: Foundations - URL: https://cyberlabarchive.com/courses/antisyphon-securing-the-cloud-foundations - Category: Antisyphon - Downloadable Files: 3 (5.5 GB) - Formats: 001, 002, 003 - Description: In this course, we’ll explore Amazon Web Services (AWS) as a platform. We will take the perspective of a new startup company spinning up infrastructure in AWS for the very first time. We’ll use a scenario-based approach, where you’ll don the persona of a security engineer on your first day at a new startup. This course will demonstrate ideas like secure-by-default and will examine services and patterns for locking down defaults using a combination of open source and platform-native tooling. Finally, attendees will walk away with a practical understanding of various controls, detections, and guardrails. Antisyphon – Securing The Cloud: Foundations --- ### 475. Reversing Hero - URL: https://cyberlabarchive.com/courses/reversing-hero - Category: Other Institutions - Downloadable Files: 1 (8.4 GB) - Formats: ZIP - Description: Reversing Hero course is a very good course for people who want to learn reverse engineering from beginner to intermediate level. This course consists of 12 hours of video, the degree of difficulty of which increases step by step, and also in the Reversing Hero course, you have to try to solve the given exercises by yourself, and if you are completely stuck, you can watch the video of the solution to the exercise. Reversing Hero --- ### 476. Redteam Blueprint by Redteam Nation - URL: https://cyberlabarchive.com/courses/redteam-blueprint-by-redteam-nation - Category: Other Institutions - Downloadable Files: 1 (20.8 GB) - Formats: ZIP - Description: The RedTeam Blueprint course from RedTeam Nation is a very special course for people who want to start Red Team, APT or penetration testing. This course also teaches the basic topics related to hacking and security in the operating system as well as the network, and is completely suitable for people who do not have any background. - Syllabus Topics: * The 3 Teams * Penetration Testing Process * The Windows Operating System * The Linux Operating System * Operating System Internals * Active Directory * Kerberos * Data Manipulation * Networking * VPN’s * Firewalls * Building a Firewall * Programs * Python * Assembly * Scope Identification * Reconnaissance * Exploitation * Post Exploitation * Password Cracking * Covering Your Tracks * Reporting * Attacking a Windows Domain * Job Hunting --- ### 477. Maltego Essentials - URL: https://cyberlabarchive.com/courses/maltego-essentials - Category: Other Institutions - Downloadable Files: 1 (453 MB) - Formats: ZIP - Description: Maltego Essentials is the official video tutorial series that guides you through the basics of Maltego to help you kickstart your investigations. Watch these 10 bite-sized tutorials and quickly learn about the most important Maltego features now! Syllabuss 1. Introducing The Official Maltego Video Tutorial Series 2. Editions of Maltego 3. How to Install and Activate Maltego 4. Running Your First Transform 5. How to Navigate your Graph 6. Different Layouts and Views of a Maltego Graph 7. What You Should Know About Entities in an Investigation 8. Notes, Bookmarks & Attachments 9. What Are Collection Nodes 10. How to Import Data into Maltego Maltego Essentials Course --- ### 478. Maltego Advanced - URL: https://cyberlabarchive.com/courses/maltego-advanced - Category: Other Institutions - Downloadable Files: 1 (828 MB) - Formats: ZIP - Description: This course will teach you the advanced features included in your Maltego Client. After this course, you will be able to create custom Entities, use the advanced options included with the Maltego Standard Transforms, and collaborate with colleagues. Syllabus Introduction The Transform menu Advanced Infrastructure Transforms Data Integration Custom Entities Imports and Exports Maltego Advanced - Syllabus Topics: * Introduction * The Transform menu * Advanced Infrastructure Transforms * Data Integration * Custom Entities * Imports and Exports --- ### 479. Getting Started in Security With BHIS and MITRE Att&CK - URL: https://cyberlabarchive.com/courses/getting-started-in-security-with-bhis-and-mitre-attack - Category: Antisyphon - Downloadable Files: 4 (22.1 GB) - Formats: ZIP, Z01, Z02, 7Z - Description: The Getting Started in Security with BHIS and MITER ATT&CK course from Wild West Hackin Fest is designed for those who want to enter the world of cyber security. This course does not require prerequisites and its purpose is to understand and learn how to defend against attacks that happen on a daily basis by hackers. In this course, you will learn about 11 of the most important attacks that every organization must protect itself against. The instructor of this course is John Strand. Getting Started in Security With BHIS and MITRE Att&CK --- ### 480. FortyNorth – Intrusion Operations - URL: https://cyberlabarchive.com/courses/fortynorth-intrusion-operations-getting-started-in-security-with-bh - Category: Forty North - Downloadable Files: 5 (8.2 GB) - Formats: ZIP, Z01, Z02, Z03, Z04 - Description: The Intrusion Operations course from FortyNorth Institute is the advanced training of Red Team operations. FortyNorth Institute has focused all its attention on the development of Red Team courses, and the courses of this institute have a high level of technical content. In this course, you will start your work exactly like a hacker who is targeting an organization, and this process will continue until you gain access and enter the organization’s network. In this course, you will write malicious and customized viruses to bypass antivirus and other defense technologies of the organization’s network (Evasion), use of whitelists to bypass restrictions, advanced penetration testing of the target organization for final access. Syllabus Introduction Command and Control Options Malleable Profiles Command and Control Configuration Aggressor Scripting OSINT Active Recon Phishing Application Whitelisting Antivirus Evasion EDR Evasion Overview Persistence Initial Access, Recon, and Lateral Movement Attacking the Cloud Finalizing the Assessment FortyNorth – Intrusion Operations - Syllabus Topics: * Introduction * Command and Control Options * Malleable Profiles * Command and Control Configuration * Aggressor Scripting * OSINT * Active Recon * Phishing * Application Whitelisting * Antivirus Evasion * EDR Evasion Overview * Persistence * Initial Access, Recon, and Lateral Movement * Attacking the Cloud * Finalizing the Assessment --- ### 481. Binary Offensive – Modern Initial Access and Evasion Tactics Training - URL: https://cyberlabarchive.com/courses/initial-access-training - Category: Other Institutions - Downloadable Files: 1 (8.3 GB) - Formats: ZIP - Description: This intermediate -level , 3-day-long intensive course dives deep into Modern Initial Access and Evasion tactics, which were effective on numerous engagements delivered in tightly monitored environments. The author will share his insights regarding strategies that made his malware accomplish engagement objectives, side by side with aggressively configured AVs & EDRs. Designing modern Red Team malware carriers smuggled in scripts, executables, and HTML websites are only some areas the course focuses on. We will explore numerous technical concepts and file formats. Craft advanced malicious Office documents, shellcode loaders, smuggling payloads, and other infected scripts that will help us reach target systems effectively. By applying modern AV & EDR evasion techniques into custom-crafted Red Team weaponry, capable teams will be equipped with the knowledge to succeed during adversary simulations even in the rapidly changing threat surface landscape. This course focuses on that – telling effective techniques apart from ones that no longer work. - Syllabus Topics: * Classic Initial Access * New Hope * Executables & Shellcode Loaders * Maldocs --- ### 482. FortyNorth – Initial Access Operations - URL: https://cyberlabarchive.com/courses/fortynorth-initial-access-operations - Category: Forty North - Downloadable Files: 2 (3.7 GB) - Formats: ZIP, Z01 - Description: The Initial Access Operations course from FortyNorth Institute is an advanced training for hacking and gaining access in the style of the Red Team. FortyNorth Institute has focused all its attention on the development of Red Team courses, and the courses of this institute have a high level of technical content. One of the most important stages and goals of the red team is initial access to the environment of the target organization. In this course, you will learn how to use a wide range of attacks such as phishing attacks, creating customized and personal viruses, stealing passwords, executing code by Meterpreter or Cobalt Strike, process injection, etc. Access the target organization’s network and environment. Syllabus Introduction Development Environment and Goals Credential Harvesting Weaponized Word Documents Code Execution (Part 1) Code Execution (Part 2) Code Protections FortyNorth – Initial Access Operations - Syllabus Topics: * Introduction * Development Environment and Goals * Credential Harvesting * Weaponized Word Documents * Code Execution (Part 1) * Code Execution (Part 2) * Code Protections --- ### 483. Enciphers: iOS Application Security - URL: https://cyberlabarchive.com/courses/ios-application-security - Category: Enciphers - Downloadable Files: 1 (1.7 GB) - Formats: 7Z - Description: This course is designed to teach the skills required to find and exploit vulnerabilities in real world iOS applications. The training includes exploits and vulnerabilities discovered on several penetration tests or in bug bounty programs. The target mobile apps used in this training are a state of art training apps. Syllabus Introduction to the Course Training Presentation Revisiting iOS Application Security – v.2023 Enciphers: iOS Application Security - Syllabus Topics: * Security --- ### 484. Red Team Analyst [CRTA] - URL: https://cyberlabarchive.com/courses/cwl-red-team-analyst-crta - Category: Cyberwarfare - Downloadable Files: 1 (2.7 GB) - Formats: ZIP - Description: The Certified Red Team Analyst [CCRTA] course from the cyberwarfare institute is a Red Team-style hacking and security training for beginners. This is a hands-on training course specifically designed for beginners interested in Red Teaming operations. - Syllabus Topics: * Introduction to Red Teaming * Red Team Lab setup * External Offensive Operations * Internal Offensive Operations * Practical Case Study --- ### 485. CWL: Enterprise Security Controls Attack Specialist - URL: https://cyberlabarchive.com/courses/cwl-enterprise-security-controls-attack-specialist - Category: Cyberwarfare - Downloadable Files: 1 (1.5 GB) - Formats: ZIP - Description: The Certified Enterprise Security Controls Attack Specialist [CESC-AS] course from the cyberwarfare institute is a Red Team-style hacking and security training at the level of organizations and companies. This is a hands-on training course specifically designed for people interested in high-level, organized Red Teaming operations. Syllabus Hands-on of Enterprise Security Controls Implementation of Security Controls Offensive C# Tradecraft Abusing Windows API Abusing/Evading Host & Network based security controls CWL: Enterprise Security Controls Attack Specialist - Syllabus Topics: * Pentest --- ### 486. Cracking Software Practicals (CSP) - URL: https://cyberlabarchive.com/courses/cracking-software-practicals-csp - Category: Other Institutions - Downloadable Files: 4 (15.5 GB) - Formats: ZIP, Z01, Z02, Z03 - Description: In this CSP course, you will apply all the knowledge and skills taught in the CSL course to crack real software.  Real software are commercial proprietary software.  We are doing this for educational purposes and not to harm software developers. This skill and knowledge benefits developers in that they are better able to secure their software. The concept is similar to ethical hacking – the only way to defend against hackers is to know how hackers break in. Similarly, for software security. The best way to improve software security is to learn how software is being cracked. - Syllabus Topics: * Introduction * Creating a Sandbox for Cracking Software * Introduction to crackme’s * Introduction to x64dbg and Detect it Easy (DIE) * Setting up your cracking workspace and workflow * Debugger Stepping Basics * Stepping Into Calls * Breakpoint * Reversing Jumps * How to patch a program * Summary of Cracking Software Workflow * Introduction to cracking gui-based programs * Crack the Serial Key using BP on strings * Windows api functions & the stack * Patching to bypass wrong serial key message * Setting Breakpoints on Intermodular Calls * Setting BP from the Call Stack * Cracking Registration File Checks * Removing Nag Screens * Cracking Trial Period Software * Cracking Auto-Generated Serial Keys * Removing Nag Screen by TDC * Cracking by patching eax register values * Cracking via Hardware Breakpoints * How to Change Serial Key By Patching Memory Directly * xAnalyzer Static Code Analyzer * Serial Fishing – how to extract serial key * Cracking Software Protection * Cracking software using loaders * Cracking Software’s Anti-Debugging Protection * Cracking Software that has a combination of Packing Anti-Debugging * Keygens * Assembly Language Programming for Reversers * Creating an External Keygen * Cracking Visual Basic 6 Native compiled software * Cracking VB6 p-code Software * x64dbg tools usage * Cracking .NET Framework Software (C# and VB.NET) * Cracking .NET Software Protection * Understanding the Process of De-obfuscation * Cracking DLL’s --- ### 487. Cracking Software Legally (CSL) - URL: https://cyberlabarchive.com/courses/cracking-software-legally-csl - Category: Other Institutions - Downloadable Files: 3 (10.7 GB) - Formats: ZIP, Z01, Z02 - Description: Cracking Software Legally (CSL) course is reverse engineering training and software penetration testing legally. In this course, you will learn about reverse engineering and Assembly language. Also, this course will provide valuable information for people who work in the field of Malware Analysis and Exploit Development. Gives. Syllabus Introduction Creating a Sandbox for Cracking Software Introduction to crackme’s Introduction to x64dbg and Detect it Easy (DIE) Setting up your cracking workspace and workflow Debugger Stepping Basics Stepping Into Calls Breakpoint Reversing Jumps How to patch a program Summary of Cracking Software Workflow Introduction to cracking gui-based programs Analyzing the PE for a gui-based program Crack the Serial Key using BP on strings Windows api functions & the stack Patching to bypass wrong serial key message Setting Breakpoints on Intermodular Calls Setting BP from the Call Stack Cracking Registration File Checks Removing Nag Screens Cracking Trial Period Software Cracking Auto-Generated Serial Keys Removing Nag Screen by TDC Cracking by patching eax register values Cracking via Hardware Breakpoints How to Change Serial Key By Patching Memory Directly xAnalyzer Static Code Analyzer Serial Fishing – how to extract serial key Cracking Software Protection Cracking software using loaders Cracking Software’s Anti-Debugging Protection Cracking Software that has a combination of Packing Anti-Debugging Keygens Assembly Language Programming for Reversers Creating an External Keygen Cracking Visual Basic 6 Native compiled software Cracking VB6 p-code Software x64dbg tools usage Cracking .NET Framework Software (C# and VB.NET) Cracking .NET Software Protection Understanding the Process of De-obfuscation Cracking DLL’s Cracking Software Legally (CSL) - Syllabus Topics: * Introduction * Creating a Sandbox for Cracking Software * Introduction to crackme’s * Introduction to x64dbg and Detect it Easy (DIE) * Setting up your cracking workspace and workflow * Debugger Stepping Basics * Stepping Into Calls * Breakpoint * Reversing Jumps * How to patch a program * Summary of Cracking Software Workflow * Introduction to cracking gui-based programs * Analyzing the PE for a gui-based program * Crack the Serial Key using BP on strings * Windows api functions & the stack * Patching to bypass wrong serial key message * Setting Breakpoints on Intermodular Calls * Setting BP from the Call Stack * Cracking Registration File Checks * Removing Nag Screens * Cracking Trial Period Software * Cracking Auto-Generated Serial Keys * Removing Nag Screen by TDC * Cracking by patching eax register values * Cracking via Hardware Breakpoints * How to Change Serial Key By Patching Memory Directly * xAnalyzer Static Code Analyzer * Serial Fishing – how to extract serial key * Cracking Software Protection * Cracking software using loaders * Cracking Software’s Anti-Debugging Protection * Cracking Software that has a combination of Packing Anti-Debugging * Keygens * Assembly Language Programming for Reversers * Creating an External Keygen * Cracking Visual Basic 6 Native compiled software * Cracking VB6 p-code Software * x64dbg tools usage * Cracking .NET Framework Software (C# and VB.NET) * Cracking .NET Software Protection * Understanding the Process of De-obfuscation * Cracking DLL’s --- ### 488. EC Council: Risk Management Approach and Practices - URL: https://cyberlabarchive.com/courses/ec-council-risk-management-approach-and-practices - Category: EC-Council - Downloadable Files: 2 (10.4 GB) - Formats: RAR, ZIP - Description: This risk management course is specifically designed to guide a CISO in defining and implementing a risk management approach within an IS program. The course introduces the student to the most common approaches and practices used by organizations worldwide. It is not intended to cover risk outside of the IS enterprise (including financial and business risks). - Syllabus Topics: * Introduction to Risk Management * The Essentials of a Risk Management Program * Risk Management Frameworks * Risk Management Policies and Procedures * Risk-Based Audits * Third-Party Risk Management (TPRM) * Risk Management Positions --- ### 489. EC Council: Master Incident Handling In Cybersecurity (ECIH v3) - URL: https://cyberlabarchive.com/courses/ec-council-master-incident-handling-in-cybersecurity - Category: EC-Council - Downloadable Files: 4 (24 GB) - Formats: ZIP, MP4 - Description: EC-Council’s Certified Incident Handler program equips students with the knowledge, skills, and abilities to effectively prepare for, deal with, and eradicate threats and threat actors in an incident. This ANAB-Accredited and US DoD 8140 approved program provides the entire process of Incident Handling and Response and hands-on labs that teach the tactical procedures and techniques required to effectively Plan, Record, Triage, Notify and Contain. Students will learn the handling of various types of incidents, risk assessment methodologies, as well as laws and policies related to incident handling. After attending the course, students will be able to create IH&R policies and deal with different types of security incidents such as malware, email security, network security, web application security, cloud security, and insider threat-related incidents. - Syllabus Topics: * Module 01: Introduction to Incident Handling and Response * Module 02: Incident Handling and Response Process * Module 03: First Response * Module 04: Handling and Responding to Malware Incidents * Module 05: Handling and Responding to Email Security Incidents * Module 06: Handling and Responding to Network Security Incidents * Module 07: Handling and Responding to Web Application Security Incidents * Module 08: Handling and Responding to Cloud Security Incidents * Module 09: Handling and Responding to Insider Threats * Module 10: Handling and Responding to Endpoint Security Incidents --- ### 490. EC Council: CSA – Certified SOC Analyst - URL: https://cyberlabarchive.com/courses/certified-soc-analyst-csa - Category: EC-Council - Downloadable Files: 3 (17.3 GB) - Formats: ZIP - Description: is a training and credentialing program that helps the candidate acquire trending and in-demand technical skills through instruction by some of the most experienced trainers in the industry. The program focuses on creating new career opportunities through extensive, meticulous knowledge with enhanced level capabilities for dynamically contributing to a SOC team. Being an intense 3-day program, it thoroughly covers the fundamentals of SOC operations, before relaying the knowledge of log management and correlation, SIEM deployment, advanced incident detection, and incident response. Additionally, the candidate will learn to manage various SOC processes and collaborate with CSIRT at the time of need. - Syllabus Topics: * Module 01 – Security Operations and Management * Module 02: Understanding Cyber Threats, IoCs, and Attack Methodology * Module 03: Incidents, Events, and Logging * Module 04: Incident Detection with Security Information and Event Management (SIEM) * Module 05: Enhanced Incident Detection with Threat Intelligence * Module 06: Incident Response --- ### 491. EC Council: Certified Penetration Testing Professional (CPENT) - URL: https://cyberlabarchive.com/courses/certified-penetration-testing-professional-cpent - Category: EC-Council - Downloadable Files: 4 (10.5 GB) - Formats: RAR, PDF - Description: EC-Council’s Certified Penetration Testing Professional program teaches you how to perform an effective penetration testing in an enterprise network environment that must be attacked, exploited, evaded, and defended. If you have only been working in flat networks, C|PENT’s live practice range will teach you to take your skills to the next level by teaching you how to pen test IoT systems, OT systems, how to write your own exploits, build your own tools, conduct advanced binaries exploitation, double pivot to access hidden networks, and also customize scripts/exploits to get into the innermost segments of the network. - Syllabus Topics: * Introduction to Penetration Testing * Penetration Testing Scoping and Engagement * Open Source Intelligence (OSINT) * Social Engineering Penetration Testing * Network Penetration Testing – External * Network Penetration Testing– Internal * Network Penetration Testing – Perimeter Devices * Web Application Penetration Testing * Wireless Penetration Testing * IoT Penetration Testing * OT/SCADA Penetration Testing * Cloud Penetration Testing * Binary Analysis and Exploitation * Report Writing and Post Testing Actions --- ### 492. EC Council: Certified Network Defender v3 - URL: https://cyberlabarchive.com/courses/certified-network-security-course - Category: EC-Council - Downloadable Files: 7 (60.1 GB) - Formats: ZIP, PDF - Description: Certified Network Defender v3 [CND v3] has been designed by industry experts to help IT Professionals play an active role in the Protection of digital business assets and Detection and Response to Cyber Threats, while leveraging Threat Intelligence to Predict them before they happen. is a network security course designed to help organizations create and deploy the most comprehensive network defense system. - Syllabus Topics: * Network Attacks and Defense Strategies * Administrative Network Security * Technical Network Security * Network Perimeter Security * Endpoint Security-Windows Systems * Endpoint Security-Linux Systems * Endpoint Security- Mobile Devices * Endpoint Security-IoT Devices * Administrative Application Security * Data Security * Enterprise Virtual Network Security * Enterprise Cloud Network Security * Enterprise Wireless Network Security * Network Traffic Monitoring and Analysis * Network Logs Monitoring and Analysis * Incident Response and Forensic Investigation * Business Continuity and Disaster Recovery * Risk Anticipation with Risk Management * Threat Assessment with Attack Surface Analysis * Threat Prediction with Cyber Threat Intelligence --- ### 493. EC Council: Certified Ethical Hacker (CEH v13) - URL: https://cyberlabarchive.com/courses/ethical-hacker-ceh-v13 - Category: EC-Council - Downloadable Files: 4 (69.1 GB) - Formats: ZIP - Description: The EC-Council Certified Ethical Hacker (CEH) v13 course is designed to build expertise in ethical hacking methodologies, focusing on key areas like network security, threat intelligence, vulnerability assessment, and hacking techniques. With hands-on labs and real-world scenarios, the course prepares cybersecurity professionals to think like hackers, enabling them to protect networks effectively. The updated v13 covers critical areas such as malware threats, cloud security, and IoT. Ideal for cybersecurity roles, CEH v13 is globally recognized and equips participants with essential tools for safeguarding information systems. - Syllabus Topics: * Pentest --- ### 494. EC Council: Computer Hacking Forensic Investigator (CHFI v10) - URL: https://cyberlabarchive.com/courses/computer-hacking-forensic-investigator-chfi - Category: EC-Council - Downloadable Files: 4 (61 GB) - Formats: ZIP, MP4 - Description: EC-Council’s Hacking Forensic Investigator (C|HFI) is the only comprehensive ANSI accredited, lab-focused program on the market that gives organizations vendor-neutral training in digital forensics. C|HFI provides its attendees with a firm grasp of digital forensics, presenting a detailed and methodological approach to digital  forensics and evidence analysis that also pivots around the Dark Web, IoT, and Cloud Forensics. The tools and techniques covered in this program will prepare the learner for conducting digital investigations using ground-breaking digital forensics technologies. - Syllabus Topics: * Digital Forensic --- ### 495. (WAHS) EC Council: Web Application Hacking and Security - URL: https://cyberlabarchive.com/courses/web-application-hacking-and-security - Category: EC-Council - Downloadable Files: 2 (2.2 GB) - Formats: ZIP, Z01 - Description: EC-Council’s Web Application Hacking and Security is a specialization certification that enables the cybersecurity workforce to learn, hack, test, and secure web applications from existing and emerging security threats in the industry verticals. Understand, Exploit, And Defend Yourself Against Topmost Web Vulnerabilities With A Comprehensive Hands-On, Lab-Based, Guided, Mastery Course Designed By The Team That Brought You CEH Advanced Web Application Penetration Testing Advanced SQL Injection (SQLi) Reflected, Stored and DOM-based Cross Site Scripting (XSS) Cross Site Request Forgery (CSRF) – GET and POST Methods Server-Side Request Forgery (SSRF) Security Misconfigurations Directory Browsing/Bruteforcing CMS Vulnerability Scanning Network Scanning Auth Bypass Web App Enumeration Dictionary Attack Insecure Direct Object Reference Prevention (IDOR) Broken Access Control Local File Inclusion (LFI) Remote File Inclusion (RFI) Arbitrary File Download Arbitrary File Upload Using Components with Known Vulnerabilities Command Injection Remote Code Execution File Tampering Privilege Escalation Log Poisoning Weak SSL Ciphers Cookie Modification Source Code Analysis HTTP Header modification Session Fixation Clickjacking EC-Council Web Application Hacking and Security --- ### 496. SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals - URL: https://cyberlabarchive.com/courses/applied-data-science-machine-learning - Category: Security Education - Downloadable Files: 5 (73.7 GB) - Formats: PDF, RAR, ZIP, ISO - Description: SEC595 empowers cybersecurity professionals to leverage data science, artificial intelligence (AI), and machine learning (ML) to enhance threat detection, incident response, and security automation. This course provides a practical, hands-on approach to applying data-driven techniques for analyzing security data, identifying anomalies, and building predictive models. Participants will learn to work with popular tools and frameworks, explore real-world datasets, and develop ML models to solve cybersecurity challenges such as intrusion detection, malware classification, and phishing detection. SEC595 bridges the gap between data science and cybersecurity, equipping professionals with cutting-edge skills to tackle modern threats effectively. - Syllabus Topics: * Data Acquisition, Cleaning, and Manipulation * Data Exploration and Statistics * Essentials of Machine Learning: Trees, Forests, & K-Means * Essentials of Machine Learning: Deep Learning * Essentials of Machine Learning: Autoencoders * Essentials of Machine Learning: Functional Models and Deployment --- ### 497. Volatility – Memory Analysis: Malware and Memory Forensics Training - URL: https://cyberlabarchive.com/courses/memory-forensics-training-volatility - Category: Other Institutions - Downloadable Files: 17 (32.9 GB) - Formats: 001, 002, 003, 004, 005, 006, 007, 008, 009, 010, 011, 012, 013, 014, 015, 016, 017 - Description: The ability to perform digital investigations and incident response is a critical skill for many occupations. Unfortunately, digital investigators frequently lack the training or experience to take advantage of the volatile artifacts found in physical memory. Volatile memory contains valuable information about the runtime state of the system, provides the ability to link artifacts from traditional forensic analysis (network, file system, registry), and provides the ability to ascertain investigative leads that have been unbeknownst to most analysts. Malicious adversaries have been leveraging this knowledge disparity to undermine many aspects of the digital investigation process with such things as anti-forensics techniques, memory resident malware, kernel rootkits, and encryption (file systems, network traffic, etc.). The only way to turn-the-tables and defeat a creative digital human adversary is through talented analysts. This course demonstrates why memory forensics is a critical component of the digital investigation process and how investigators can gain the upper hand. The course will consist of lectures on specific topics in Windows, Linux, and Mac OS X memory forensics followed by intense hands-on exercises to put the topics into real world contexts. Our goal is to give you practical experience with all the major facets of memory analysis. For example, you’ll defeat disk encryption, recover cached passwords, investigate insider theft, compliment network forensics with data you find in memory, and hunt for attackers throughout corporate networks. We still leave enough room for detecting common RATs and hacker tools, reversing packed/compressed malicious code, and generating timelines from memory. You’ll even customize your own automated memory artifact scanner and engage in a fast-paced, challenging CTF that involves corroborating evidence across multiple memory samples (i.e., Windows PCs, Linux servers). Memory Analysis: Malware and Memory Forensics Training --- ### 498. Aerospace Cybersecurity: Satellite Hacking (W53) - URL: https://cyberlabarchive.com/courses/aerospace-cybersecurity-satellite-hacking-w53 - Category: Other Institutions - Downloadable Files: 2 (2.8 GB) - Formats: 001, 002 - Description: This course teaches the foundations of satellite cybersecurity by guiding you through the reconnaissance, communication dissection, decoding, and vulnerability analysis of satellite systems through interactive activities and tutorials. Learn about the underlying concepts of what makes satellite network infrastructure function and apply your knowledge to conduct digital forensics on real life satellites in orbit. Syllabus Satellite Reconnaissance Communication Analysis and Eavesdropping Reverse Engineering and Decoding Communication Vulnerabilities and Attacks Aerospace Cybersecurity: Satellite Hacking (W53) - Syllabus Topics: * Pentest --- ### 499. EC Council: Certified DevSecOps Engineer - URL: https://cyberlabarchive.com/courses/ec-council-certified-devsecops-engineer-ecde - Category: EC-Council - Downloadable Files: 1 (15.2 GB) - Formats: 7Z - Description: EC-Council Certified DevSecOps Engineer (ECDE) is a hands-on, instructor-led comprehensive DevSecOps certification program which helps professionals to build essential knowledge and abilities in designing, developing, maintaining a secure applications and infrastructure. This course is blended with both theoretical knowledge as well as the practical implementation of DevSecOps in your on-prem and cloud-native (AWS and Azure) environment The course covers integration and automation of all the major and widely used tools, processes, and methodologies of DevSecOps that help organizations to build secure applications rapidly in a DevOps environment Syllabus Module 01: Understanding DevOps Culture Module 02: Introduction to DevSecOps Module 03: DevSecOps Pipeline-Plan Stage Module 04: DevSecOps Pipeline-Code Stage Module 05: DevSecOps Pipeline-Build and Test Stage Module 06: DevSecOps Pipeline-Release and Deploy Stage Module 07: DevSecOps Pipeline-Operate and Monitor Stage EC-Council: Certified DevSecOps Engineer - Syllabus Topics: * DevSecOps --- ### 500. EC Council: Certified Blockchain Professional For Business Leaders - URL: https://cyberlabarchive.com/courses/certified-blockchain-professional-cbp-3 - Category: EC-Council - Downloadable Files: 1 (2.9 GB) - Formats: 7Z - Description: Introducing the first Blockchain Professional Training and Blockchain Certification Program to set the global standard in Blockchain Technology. The Certified Blockchain Professional (CBP) Course was developed to help professionals gain the knowledge they need in Blockchain technology to understand its impact on business and beyond. The Certified Blockchain Professional is fully vendor-agnostic and practical, focusing on the current state of blockchain technology as well as its future potential. The Certified Blockchain Professional course digs deep into the main characteristics and features of the distributed ledger technology (DLT) as well as introduces Blockchain’s new 3S (Secure-Scalable-Sustainable) proprietary framework. Students will also get a deep understanding of blockchain technology and mining of cryptocurrency. Syllabus Chapter 1 – Introduction Chapter 2 – Financial Applications Chapter 3 – Crypto Assets Chapter 4 – Blockchain Project Implementation Chapter 5 – Bitcoin Chapter 6 – Blockchain as a Service Chapter 7 – Security Chapter 8 – Ethereum Chapter 9 – Open-Source Biz Chapter 10 – Decentralized Apps Chapter 11 – Scalable Blockchain Chapter 12 – Industry Use Cases Chapter 13 – IoT and Blockchain EC-Council: Certified Blockchain Professional For Business Leaders - Syllabus Topics: * Blockchain * Security --- ### 501. EC Council: Certified Blockchain Professional For FinTech Professionals - URL: https://cyberlabarchive.com/courses/certified-blockchain-professional-cbp-for-fintech - Category: EC-Council - Downloadable Files: 1 (2.5 GB) - Formats: 7Z - Description: Introducing the first Blockchain Professional Training and Blockchain Certification Program to set the global standard in Blockchain Technology. The Certified Blockchain Professional (CBP) Course was developed to help professionals gain the knowledge they need in Blockchain technology to understand its impact on business and beyond. The Certified Blockchain Professional is fully vendor-agnostic and practical, focusing on the current state of blockchain technology as well as its future potential. The Certified Blockchain Professional course digs deep into the main characteristics and features of the distributed ledger technology (DLT) as well as introduces Blockchain’s new 3S (Secure-Scalable-Sustainable) proprietary framework. Students will also get a deep understanding of blockchain technology and mining of cryptocurrency. Syllabus Chapter 01: Introduction to Blockchain Technology Chapter 02: Financial Application Chapter 03: Crypto Assets Chapter 04: Insurance Applications Chapter 05: Blockchain Project Implementation Chapter 06: Bitcoin Chapter 07: Security in Blockchain Chapter 08: Blockchain as a Service Chapter 09: Ethereum and Other Cryptocurrencies Chapter 10: Open Source Fintech Blockchain Frameworks Chapter 11: Decentralized Applications (DAPPS) Certified Blockchain Professional For FinTech Professionals - Syllabus Topics: * Blockchain * Security --- ### 502. EC Council: Certified Blockchain Professional For Developers - URL: https://cyberlabarchive.com/courses/certified-blockchain-professional-cbp-for-dev - Category: EC-Council - Downloadable Files: 1 (4.5 GB) - Formats: 7Z - Description: Introducing the first Blockchain Professional Training and Blockchain Certification Program to set the global standard in Blockchain Technology. The Certified Blockchain Professional (CBP) Course was developed to help professionals gain the knowledge they need in Blockchain technology to understand its impact on business and beyond. The Certified Blockchain Professional is fully vendor-agnostic and practical, focusing on the current state of blockchain technology as well as its future potential. The Certified Blockchain Professional course digs deep into the main characteristics and features of the distributed ledger technology (DLT) as well as introduces Blockchain’s new 3S (Secure-Scalable-Sustainable) proprietary framework. Students will also get a deep understanding of blockchain technology and mining of cryptocurrency. Syllabus Lesson 1 Introduction Lesson 2 Cryptography Lesson 3 Impact on finance industry Lesson 4 Bitcoin Lesson 5 Blockchain Project Implementation Lesson 6 Security Lesson 7 Cryptomining Lesson 8 Ethereum Lesson 9 Other cryptocurrencies Lesson 10 AI Lesson 11 Blockchain as a service Lesson 12 Open Source Lesson 13 Python Lesson 14 JavaScript Lesson 15 Java Lesson 16 Online IDE Lesson 17 Industry Use Cases Lesson 18 IOT Lesson 19 DApps Lesson 20 Future Lesson 21 Quantum Computing EC-Council: Certified Blockchain Professional - Syllabus Topics: * Blockchain * Security --- ### 503. EC Council: Drone Hacking Workshop - URL: https://cyberlabarchive.com/courses/drone-hacking-workshop - Category: EC-Council - Downloadable Files: 1 (7.5 GB) - Formats: 7Z - Description: In this course you will set up EC-Council’s Mobile Security Toolkit (STORM) OS to interface with your drone, then learn about drone hacking. This will include a wide arrange of topics from the basics of drones and the FCC rules, to the capture, examination, and exploitation of drone data. Syllabus Technical Introduction Drone Hacking Core UAV Technology UAV Robotics as an ecosystem Wireless Recon Drone Hacking EC-Council: Drone Hacking Workshop - Syllabus Topics: * Pentest --- ### 504. Maltrak – In-Depth Red Teaming: APT Adversary Simulation - URL: https://cyberlabarchive.com/courses/maltrak-in-depth-red-teaming-apt-adversary-simulation - Category: Maltrak - Downloadable Files: 1 (5.5 GB) - Formats: ZIP - Description: This is an on-demand full hands-on training that focuses on developing cyber weapons that can evade AV detection, EDR logs and forensics traces like how advanced targeted attacks do, and provide you with insights on how to improve your organization’s overall detections and security posture. - Syllabus Topics: * Welcome & Intro * APT Attacks & Red Team Infrastructure on AWS * Phishing & Social Engineering Mastery * Initial Access: Get your foot into the organization network * Write Your Own HTTP Malware * Implement a Plugin Framework in your Malware With Keylogger Plugin --- ### 505. Maltrak – The Programmer Mindset: Problem Solving in Cpp - URL: https://cyberlabarchive.com/courses/maltrak-the-programmer-mindset-problem-solving-in-cpp - Category: Maltrak - Downloadable Files: 1 (853 MB) - Formats: 7Z - Description: The course, “The Programmer Mindset: Problem Solving in C++”, is an in-depth training program designed to equip learners with the skills needed to solve complex problems using Cpp. - Syllabus Topics: * Intro * The Programmer Roadmap * C++ Beginner Zone * Arrays * Strings * Recursion --- ### 506. MalTrak – Cybersecurity ATTACK & DEFENSE: The Foundations - URL: https://cyberlabarchive.com/courses/maltrak-cybersecurity-attack-defense-the-foundations - Category: Maltrak - Downloadable Files: 1 (2.1 GB) - Formats: ZIP - Description: Cybersecurity ATTACK & DEFENSE: The Foundations, is a comprehensive training program designed to provide the fundamental skills and roadmap needed for a successful career in cybersecurity. The course is divided into three main modules: ATTACK: This module teaches how elite hackers infiltrate the world’s most secure networks, providing a foundation for careers in penetration testing and red team operations. RESPOND: This module focuses on how cybersecurity experts protect their organizations against advanced attacks. It covers essential skills for working in incident response and threat hunting. INVESTIGATE: This module instructs on how to perform a deep investigation of targeted attacks’ tools and malware, including static and dynamic analysis on a malicious file. The course also includes a bonus module on Fileless Attacks & Targeted Ransomware Attacks1. The curriculum is hands-on and includes real-world scenarios, making it an excellent starting point for careers in incident response and malware analysis. - Syllabus Topics: * Module 01 – ATTACK * Module 02 – RESPOND * Module 03 – INVESTIGATE * Bonus Module – Advanced Attacks --- ### 507. 13Cubed – Investigating Windows Endpoints - URL: https://cyberlabarchive.com/courses/investigating-windows-endpoints - Category: 13Cubed - Downloadable Files: 1 (12.7 GB) - Formats: ZIP - Description: Unlock the secrets of Windows forensic investigation with my new course! I took my years of experience creating videos on the 13Cubed YouTube channel and set out to develop affordable, comprehensive, and professional training. Whether you’re looking to get into the field, already work in the field but want to step up your game, or just have an interest in digital forensics, look no further. This course is for you! - Syllabus Topics: * Welcome and Introduction * Initial Setup * Windows Event Logs * The Registry * Evidence of Execution * Persistence, Privilege Escalation, and Lateral Movement * Anatomy of NTFS * File Deletion and Recovery * LNK Files and Jump Lists * Additional Content * Knowledge Assessment --- ### 508. 13Cubed – Investigating Windows Memory - URL: https://cyberlabarchive.com/courses/investigating-windows-memory - Category: 13Cubed - Downloadable Files: 1 (15.4 GB) - Formats: ZIP - Description: If you’ve taken Investigating Windows Endpoints (or already have the equivalent knowledge), this is a natural continuation of the content that deep dives into Windows memory forensics. Learn the foundations of how Windows memory is structured, how to acquire memory, how to analyze memory images using Volatility, MemProcFS, and WinDbg, and more! This is for you. - Syllabus Topics: * Welcome and Introduction * Initial Setup * Foundations of Memory Forensics * Acquiring Memory * Poor Man’s Memory Forensics * Memory Analysis with Volatility * Malware Memory Analysis with Volatility * Memory Analysis with MemProcFS * Malware Memory Analysis with MemProcFS * Introduction to WinDbg * Additional Content * Knowledge Assessment --- ### 509. SEC550: Cyber Deception – Attack Detection, Disruption and Active Defense - URL: https://cyberlabarchive.com/courses/cyber-deception-attack-detection-disruption-active-defense-sec550 - Category: Security Education - Downloadable Files: 2 (1.9 GB) - Formats: PDF, ZIP - Description: SEC550 explores the art and science of cyber deception as a proactive strategy for detecting, disrupting, and defending against adversaries. Participants will learn to design and implement deception technologies, such as honeypots, honey tokens, and decoy systems, to mislead attackers and gather actionable intelligence. The course covers strategies for embedding deception across networks, cloud environments, and applications, enabling organizations to detect threats early and minimize the impact of attacks. Through hands-on labs and real-world scenarios, SEC550 equips security professionals with innovative tools and techniques to outmaneuver attackers and strengthen their overall security posture. - Syllabus Topics: * Understanding the Problem * Deception Foundations * Deception Techniques and Technologies, Part I * Deception Techniques and Technologies, Part II * Deception Concepts, Planning, and Evaluation * Capstone Exercise --- ### 510. XINTRA – Attacking and Defending Azure & M365 - URL: https://cyberlabarchive.com/courses/attacking-and-defending-azure-m365 - Category: Other Institutions - Downloadable Files: 3 (5.5 GB) - Formats: 001, 002, 003 - Description: The course “Attacking and Defending Azure & M365” is a comprehensive training program offered by Xintra. It provides an in-depth understanding of attack techniques, detection, forensics, and mitigation strategies on Azure and Microsoft 365. The course is designed to be hands-on and includes practical labs for real-world learning. It is suitable for individuals interested in cybersecurity, particularly in the context of Azure and Microsoft 365 environments. The course is self-paced, allowing learners to progress at their own speed, and also includes live sessions for interactive learning. Syllabus 1. Introduction 2. Overview of Azure/M365 3. Setting Up Your Environment 4. Log Analysis Using SOF-ELK 5. Reconnaissance & Enumeration 6. Initial Access Techniques 7. Credential Theft 8. Lateral Movement Techniques 9. Privilege Escalation 10. Persistence Techniques 11. Defense Evasion Attacking and Defending Azure & M365 - Syllabus Topics: * Pentest * Security --- ### 511. SEC661: ARM Exploit Development - URL: https://cyberlabarchive.com/courses/arm-exploit-development-sec661 - Category: Security Education - Downloadable Files: 3 (2.6 GB) - Formats: 7Z, RAR, ISO - Description: SEC661 is a specialized course focused on advanced exploitation techniques for ARM-based architectures. Tailored for experienced security professionals, the course delves into the intricacies of ARM assembly, reverse engineering, and vulnerability discovery. Participants will explore real-world exploitation scenarios, including stack overflows, return-oriented programming (ROP), and bypassing modern mitigation techniques like DEP and ASLR on ARM systems. With hands-on labs and detailed guidance, SEC661 prepares attendees to analyze and exploit vulnerabilities in IoT devices, mobile platforms, and embedded systems, equipping them with the skills to defend against sophisticated attacks targeting ARM-based technologies. - Syllabus Topics: * ARM Exploit Fundamentals * Exploiting IoT Devices --- ### 512. SEC566: Implementing and Auditing CIS Controls - URL: https://cyberlabarchive.com/courses/implementing-auditing-cis-controls - Category: Security Education - Downloadable Files: 3 (43.7 GB) - Formats: PDF, 7Z, ISO - Description: SEC566 provides a practical guide to implementing and auditing the Center for Internet Security (CIS) Critical Security Controls (CIS Controls). This course is designed to help organizations improve their cybersecurity posture by effectively prioritizing and deploying the CIS Controls framework. Participants will learn how to assess current security practices, identify gaps, and align them with CIS guidelines to reduce risk. The course also covers techniques for auditing the implementation of controls to ensure compliance and effectiveness. Through hands-on exercises and real-world scenarios, SEC566 equips security professionals with actionable strategies to strengthen defenses and achieve measurable improvements in cybersecurity. - Syllabus Topics: * Introduction and Overview of the CIS Critical Controls * Data Protection, Identity and Authentication, Access Control Management, Audit Log Management * Server, Workstation, Network Device Protections (Part 1) * Server, Workstation, Network Device Protections (Part 2) * Governance and Operational Security --- ### 513. SEC537: Practical Open-Source Intelligence (OSINT) Analysis and Automation - URL: https://cyberlabarchive.com/courses/practical-osint-analysis-and-automation - Category: Security Education - Downloadable Files: 2 (4.5 GB) - Formats: PDF, 7Z - Description: SEC537 provides hands-on training in open-source intelligence (OSINT) gathering, analysis, and automation techniques. This course teaches participants how to collect actionable intelligence from publicly available sources, such as websites, social media, forums, and databases, while adhering to ethical and legal standards. Students will also explore tools and scripting methods to automate OSINT workflows, enabling efficient large-scale data collection and analysis. Real-world scenarios and exercises demonstrate how OSINT can be applied to threat intelligence, investigations, and risk assessments. SEC537 equips professionals with the skills to uncover critical information, gain insights, and enhance decision-making in cybersecurity and beyond. - Syllabus Topics: * Practical OSINT Analysis * Practical OSINT Analysis with Python --- ### 514. SEC487: Open-Source Intelligence (OSINT) Gathering and Analysis - URL: https://cyberlabarchive.com/courses/open-source-intelligence-osint-gathering-and-analysis - Category: Security Education - Downloadable Files: 3 (12.8 GB) - Formats: PDF, ZIP, ISO - Description: SEC487 is a foundational course focused on collecting, analyzing, and leveraging publicly available information for cybersecurity, investigations, and decision-making. Participants will learn techniques to gather OSINT from various sources, including social media, public records, websites, and dark web platforms, while maintaining ethical and legal compliance. The course emphasizes manual and automated methods for identifying and interpreting critical data. Through hands-on exercises and real-world case studies, SEC487 equips students with the skills to apply OSINT in threat intelligence, vulnerability assessments, and incident response, enabling professionals to uncover valuable insights and protect against evolving threats. - Syllabus Topics: * Foundations of OSINT * Gathering, Searching, and Analyzing OSINT * Social Media, Geolocation, and Imagery * Networks, Government, and Business * The Dark Web, Breach Data, and International Issues * Capstone: Capture (and Present) the Flag --- ### 515. SEC556: IoT Penetration Testing - URL: https://cyberlabarchive.com/courses/cyber-security-courses-iot-penetration-testing - Category: Security Education - Downloadable Files: 2 (10.1 GB) - Formats: PDF, ISO - Description: SEC556 focuses on the unique security challenges posed by the growing number of Internet of Things (IoT) devices. This course teaches participants how to identify, exploit, and secure vulnerabilities in IoT devices and their supporting infrastructures. Topics include network attacks, device manipulation, weak authentication, insecure communications, and firmware analysis. Through practical labs, students will perform hands-on penetration testing on a range of IoT devices, from consumer gadgets to industrial systems. SEC556 equips professionals with the skills needed to understand IoT-specific attack vectors, develop mitigation strategies, and improve the overall security of connected ecosystems in both personal and enterprise environments. - Syllabus Topics: * Introduction to IoT Network Traffic and Web Services * Exploiting IoT Hardware Interfaces and Analyzing Firmware * Exploiting Wireless IoT: WiFi, BLE, Zigbee, LoRA, and SDR --- ### 516. SEC699: Advanced Purple Teaming – Adversary Emulation & Detection Engineering - URL: https://cyberlabarchive.com/courses/purple-team-tactics-adversary-emulation - Category: Security Education - Downloadable Files: 3 (6.5 GB) - Formats: 7Z, ZIP - Description: SEC699 is an advanced course that focuses on the collaboration between red and blue teams, known as purple teaming, to enhance an organization’s defense mechanisms. Participants will learn how to emulate real-world adversary tactics, techniques, and procedures (TTPs) to identify weaknesses, while also strengthening detection and response strategies within the defense team. The course covers the use of advanced emulation tools, developing detection engineering techniques, and improving incident response processes. With hands-on labs and simulated attack scenarios, SEC699 equips security professionals to fine-tune their offensive and defensive capabilities, ensuring robust security and effective threat mitigation. - Syllabus Topics: * Introduction & Key Tools * Initial Intrusion Strategies Emulation & Detection * Privilege Escalation & Lateral Movement Emulation & Detection * Persistence Emulation & Detection * Emulation Plans (Extended Access To CTF Range) --- ### 517. SEC599: Defeating Advanced Adversaries – Purple Team Tactics & Kill Chain Defenses - URL: https://cyberlabarchive.com/courses/defeating-advanced-adversaries-kill-chain-defenses - Category: Security Education - Downloadable Files: 1 (117 MB) - Formats: PDF - Description: SEC599 focuses on the integration of offensive and defensive strategies in purple team exercises to thwart advanced adversaries. This course explores how to use the kill chain model to identify and disrupt adversary tactics at every stage of an attack, from initial compromise to exfiltration. Participants will learn to emulate sophisticated threat actor techniques while developing and implementing effective defenses, detection systems, and countermeasures. Through hands-on exercises and attack simulations, students will gain expertise in strengthening their security posture by continuously improving their response to advanced persistent threats (APTs) and real-world attack scenarios. - Syllabus Topics: * Introduction and Reconnaissance * Payload Delivery and Execution * Exploitation, Persistence, and Command and Control * Lateral Movement * Action on Objectives, Threat Hunting, and Incident Response * APT Defender Capstone --- ### 518. SEC565: Red Team Operations and Adversary Emulation - URL: https://cyberlabarchive.com/courses/red-team-operations-adversary-emulation - Category: Security Education - Downloadable Files: 3 (13.9 GB) - Formats: RAR, ZIP, ISO - Description: SEC565 focuses on the strategies, tactics, and techniques used by red teams to emulate advanced adversaries and conduct realistic penetration testing. This course provides in-depth training on planning, executing, and reporting red team operations, with an emphasis on simulating real-world cyberattacks across various attack vectors, such as phishing, social engineering, lateral movement, and privilege escalation. Participants will learn how to apply the MITRE ATT&CK framework for adversary emulation and how to tailor their operations to test an organization’s defenses. Through hands-on labs and real-world scenarios, SEC565 equips professionals with the skills to conduct thorough red team assessments, identify vulnerabilities, and improve an organization’s overall security resilience. - Syllabus Topics: * Planning Adversary Emulation and Threat Intelligence * Attack Infrastructure and Operational Security * Getting In and Staying In * Active Directory Attacks and Lateral Movement * Obtaining the Objective and Reporting * Immersive Red Team Capture-the-Flag --- ### 519. SEC555: SIEM with Tactical Analytics - URL: https://cyberlabarchive.com/courses/cyber-security-courses-siem-with-tactical-analytics - Category: Security Education - Downloadable Files: 5 (48 GB) - Formats: RAR, PDF, ZIP, ISO - Description: SEC555 is a hands-on course that teaches security professionals how to effectively leverage Security Information and Event Management (SIEM) platforms for detecting, analyzing, and responding to cyber threats. The course focuses on configuring, tuning, and optimizing SIEM solutions to gather actionable intelligence from logs, events, and network data. Participants will explore advanced analytics techniques, threat hunting methodologies, and real-world scenarios to identify malicious activity and improve incident response. Through practical exercises and case studies, SEC555 equips attendees with the skills to transform their SIEM into a powerful tool for proactive defense and tactical decision-making in dynamic security environments. - Syllabus Topics: * SIEM Architecture * Service Profiling with SIEM * Advanced Endpoint Analytics * Baselining and User Behavior Monitoring * Tactical SIEM Detection and Post-Mortem Analysis * Capstone: Design, Detect, Defend --- ### 520. SEC549: Enterprise Cloud Security Architecture - URL: https://cyberlabarchive.com/courses/cyber-security-courses-enterprise-cloud-security-architecture - Category: Security Education - Downloadable Files: 3 (1.1 GB) - Formats: PDF, ZIP, 7Z - Description: SEC549 focuses on designing and implementing robust cloud security architectures tailored to enterprise environments. This course provides a deep dive into securing multi-cloud and hybrid cloud infrastructures, addressing challenges such as identity and access management (IAM), secure workload deployment, data protection, and compliance. Participants will learn to build scalable, defensible cloud architectures using industry best practices and native security tools across platforms like AWS, Azure, and Google Cloud. Through hands-on labs and case studies, SEC549 equips security professionals with the knowledge and skills to develop resilient cloud security strategies that align with business goals and withstand evolving threats. - Syllabus Topics: * Cloud Account Management and Identity Foundations * Implementing an Identity Perimeter in the Cloud * Network Access Perimeters for the Cloud * Data Access Perimeters in the Cloud * Enabling the Cloud-Focused SOC --- ### 521. SEC542: Web App Penetration Testing and Ethical Hacking - URL: https://cyberlabarchive.com/courses/web-app-penetration-testing-ethical-hacking - Category: Security Education - Downloadable Files: 4 (14 GB) - Formats: PDF, ZIP, ISO - Description: SEC542 provides hands-on training for identifying and exploiting vulnerabilities in web applications while teaching the ethical hacking techniques necessary to secure them. Participants will explore critical areas such as injection flaws, cross-site scripting (XSS), authentication bypasses, and security misconfigurations. The course includes advanced topics like automated scanning, manual testing techniques, and analyzing modern web technologies such as APIs, frameworks, and single-page applications. Through practical labs and real-world scenarios, SEC542 equips security professionals with the skills to assess web applications effectively and provide actionable remediation strategies to strengthen overall security posture. - Syllabus Topics: * Introduction and Information Gathering * Fuzzing, Scanning, Authentication, and Session Testing * Injection * XSS, SSRF, and XXE * CSRF, Logic Flaws and Advanced Tools * Capture the Flag --- ### 522. SEC540: Cloud Security and DevSecOps Automation - URL: https://cyberlabarchive.com/courses/cloud-security-devsecops-automation - Category: Security Education - Downloadable Files: 4 (51.4 GB) - Formats: PDF, ZIP, ISO, OVA - Description: SEC540 teaches security professionals how to integrate security into the DevOps pipeline and automate security practices for cloud-native environments. The course focuses on securing infrastructure-as-code (IaC), containerized applications, and CI/CD workflows across platforms like AWS, Azure, and Google Cloud. Participants will learn how to use tools and techniques for vulnerability scanning, compliance checks, and automated threat detection. Hands-on labs emphasize implementing DevSecOps principles, creating secure deployment pipelines, and leveraging cloud-native security services. SEC540 equips attendees with the skills to build scalable, secure, and automated solutions that align with modern development and operational practices. - Syllabus Topics: * DevOps Security Automation * Cloud Infrastructure Security * Cloud Native Security Operations * Microservice and Serverless Security * Continuous Compliance and Protection --- ### 523. SEC522: Application Security: Securing Web Apps, APIs, and Microservices - URL: https://cyberlabarchive.com/courses/application-security-securing-web-apps-api-microservices - Category: Security Education - Downloadable Files: 4 (11.2 GB) - Formats: PDF, ZIP - Description: SEC522 provides a comprehensive approach to securing modern application ecosystems, including web applications, APIs, and microservices. The course covers foundational and advanced security concepts such as secure coding practices, authentication and authorization mechanisms, API security frameworks (like OAuth and OpenID Connect), and protecting microservices architectures. Participants will explore vulnerabilities like injection attacks, broken access controls, and insecure deserialization, while learning how to defend against them using practical mitigation strategies. Through hands-on labs and real-world scenarios, SEC522 equips security professionals with the skills to identify and address security risks in contemporary application environments, ensuring robust and scalable protection. - Syllabus Topics: * Web Fundamentals and Secure Configurations * nput-Related Defenses * Authentication and Authorization * Web Services and Front-End Security * APIs and Microservices Security * DevSecOps and Defending the Flag --- ### 524. SEC511: Continuous Monitoring and Security Operations - URL: https://cyberlabarchive.com/courses/continuous-monitoring-security-operations - Category: Security Education - Downloadable Files: 2 (15.7 GB) - Formats: PDF, ZIP - Description: SEC511 focuses on building and enhancing continuous monitoring and security operations capabilities to detect, analyze, and respond to threats effectively. This course teaches participants how to implement advanced monitoring strategies, leverage Security Information and Event Management (SIEM) systems, and utilize network traffic analysis tools for real-time threat detection. Topics include incident detection, threat hunting, forensic investigation, and operationalizing threat intelligence. Through hands-on labs and case studies, students will gain the skills to develop robust monitoring solutions, automate workflows, and strengthen an organization’s security operations center (SOC) to address evolving cyber threats proactively. - Syllabus Topics: * Current State Assessment and Security Architecture * Network Security Architecture * Network Security Monitoring * Endpoint Security Architecture * Automation and Continuous Security Monitoring * Capstone: Design, Detect, Defend --- ### 525. MGT551: Building and Leading Security Operations Centers - URL: https://cyberlabarchive.com/courses/building-leading-security-operations-centers - Category: Security Education - Downloadable Files: 4 (14.3 GB) - Formats: PDF, ZIP, ISO - Description: MGT551 equips leaders with the knowledge and skills to design, build, and manage effective Security Operations Centers (SOCs). This course covers the entire lifecycle of a SOC, from establishing objectives and defining workflows to implementing technologies and recruiting the right talent. Participants will explore topics such as threat detection, incident response, automation, and metrics for measuring SOC performance. The curriculum emphasizes strategic planning and operational excellence, ensuring that SOCs can adapt to evolving threats and business needs. Through case studies and practical exercises, MGT551 prepares security leaders to create high-performing SOCs that deliver measurable security value to their organizations. - Syllabus Topics: * SOC Design and Operational Planning * SOC Telemetry and Analysis * Attack Detection, Hunting, and Triage * Incident Response * Metrics, Automation, and Continuous Improvement --- ### 526. MGT525: Managing Cybersecurity Initiatives and Effective Communication - URL: https://cyberlabarchive.com/courses/managing-cybersecurity-initiatives-effective-communication - Category: Security Education - Downloadable Files: 2 (2.5 GB) - Formats: PDF, ZIP - Description: MGT525 focuses on the critical skills required to successfully lead and manage cybersecurity projects while fostering effective communication with technical and non-technical stakeholders. This course emphasizes project management techniques tailored to cybersecurity initiatives, including risk assessment, resource allocation, and timeline management. Participants will also develop communication strategies to translate complex security concepts into actionable insights for executives, teams, and external partners. Through practical exercises and real-world scenarios, MGT525 equips cybersecurity leaders to manage initiatives effectively, align projects with organizational goals, and drive collaboration across diverse teams to achieve security success. - Syllabus Topics: * Driving Value, Development Approaches, Frameworks, Methodologies, and Tailoring * Stakeholder and Team Performance Domains * Development Approach, Life Cycle, and Planning Performance Domains * Work and Delivery Performance Domains * Measurement and Uncertainty Performance Domains --- ### 527. LDR520: Cloud Security for Leaders - URL: https://cyberlabarchive.com/courses/cloud-security-leaders - Category: Security Education - Downloadable Files: 2 (4.4 GB) - Formats: PDF, ZIP - Description: LDR520 provides executives and managers with a strategic understanding of cloud security to enable informed decision-making and effective leadership in cloud adoption. The course explores cloud security principles, risk management, and governance frameworks, focusing on major platforms like AWS, Azure, and Google Cloud. Participants will learn to evaluate cloud security risks, ensure regulatory compliance, and align security strategies with business objectives. Through case studies and interactive discussions, LDR520 equips leaders to guide their organizations in securely leveraging cloud technologies, fostering collaboration between technical teams and business stakeholders, and responding to the unique challenges of the cloud environment. - Syllabus Topics: * Cloud Security Fundamentals and Identity Management * Cloud Security Environment Protection and Architecture * Data Protection, Security Detection and Response * Securing Workload and Security Assurance * Roadmap planning and capstone exercise --- ### 528. MGT516: Building and Leading Vulnerability Management Programs - URL: https://cyberlabarchive.com/courses/build-lead-vulnerability-management-programs - Category: Security Education - Downloadable Files: 2 (1.8 GB) - Formats: PDF, ZIP - Description: MGT516 is designed to help security leaders develop, implement, and manage effective vulnerability management programs that protect organizations from emerging threats. The course covers the entire vulnerability lifecycle, from identification and assessment to remediation and mitigation strategies. Participants will learn how to prioritize vulnerabilities based on risk, integrate vulnerability management into broader security operations, and measure the effectiveness of their programs. Through hands-on exercises and case studies, MGT516 equips professionals with the skills to lead cross-functional teams, communicate risks effectively to stakeholders, and continuously improve vulnerability management processes to reduce the organization’s attack surface. - Syllabus Topics: * Vulnerability Management Design and Planning * Vulnerability Identification * Vulnerability Analysis, Metrics, and Communication * Driving Remediation and Automation * Collaboration and Continuous Improvement --- ### 529. MGT433: Managing Human Risk - URL: https://cyberlabarchive.com/courses/manage-human-risk - Category: Security Education - Downloadable Files: 2 (1.5 GB) - Formats: ZIP - Description: MGT433 focuses on understanding and managing the human element in cybersecurity, recognizing that employees, contractors, and third-party vendors can be the weakest link in an organization’s security posture. The course explores the psychology of human behavior, common security risks posed by insiders, and how to mitigate them through training, awareness programs, and behavior-driven security policies. Participants will learn how to develop and implement strategies to reduce human risk, including phishing prevention, social engineering defenses, and fostering a security-aware culture. Through practical case studies and exercises, MGT433 equips leaders with the tools to manage human risk effectively and enhance overall organizational resilience. - Syllabus Topics: * Fundamentals and Identifying / Prioritizing Human Risk * Identifying and Changing Behavior * Security Culture and Measuring Change --- ### 530. ICS515: ICS Visibility, Detection, and Response - URL: https://cyberlabarchive.com/courses/ics-visibility-detection-response - Category: Security Education - Downloadable Files: 2 (32.6 GB) - Formats: PDF, ZIP - Description: ICS515 is a hands-on course designed to equip cybersecurity professionals with the skills needed to detect, analyze, and respond to threats targeting Industrial Control Systems (ICS) and Operational Technology (OT) environments. The course covers key topics such as network visibility, threat intelligence, incident detection, and forensic analysis specific to critical infrastructure sectors like energy, manufacturing, and transportation. Participants will learn how to implement and optimize monitoring solutions, analyze ICS network traffic, and develop response strategies to mitigate cyber threats. Through real-world scenarios and hands-on labs, ICS515 prepares defenders to enhance the security and resilience of industrial environments against evolving cyber risks. - Syllabus Topics: * ICS Cyber Threat Intelligence * Visibility and Asset Identification * ICS Threat Detection * Incident Response * Threat and Environment Manipulation * Capstone Day, Under Attack! --- ### 531. ICS410: ICS/SCADA Security Essentials - URL: https://cyberlabarchive.com/courses/ics-scada-cyber-security-essentials - Category: Security Education - Downloadable Files: 4 (15.6 GB) - Formats: PDF, ZIP - Description: ICS410 provides foundational knowledge and practical skills for securing Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) environments. The course covers ICS architectures, protocols, risk management frameworks, and common attack vectors targeting critical infrastructure. Participants will learn essential security controls, incident response strategies, and best practices for securing industrial networks. With hands-on labs and real-world case studies, ICS410 equips IT and OT professionals with the expertise needed to protect ICS/SCADA environments from cyber threats while ensuring operational reliability and safety. - Syllabus Topics: * ICS Overview * Architectures and Processes * Communications and Protocols * Supervisory Systems * ICS Security Governance * Capstone CTF --- ### 532. SEC503: Network Monitoring and Threat Detection In-Depth - URL: https://cyberlabarchive.com/courses/network-monitoring-threat-detection - Category: Security Education - Downloadable Files: 5 (96 GB) - Formats: PDF, 7Z, ISO, ZIP - Description: SEC503 is an advanced course designed to help security professionals master network monitoring, intrusion detection, and threat analysis. The course covers essential topics such as packet analysis, network forensics, SIEM optimization, and anomaly detection techniques. Participants will learn how to detect and respond to cyber threats by analyzing network traffic, logs, and attack patterns. The course also dives into advanced tactics used by attackers, including evasion techniques and encrypted traffic analysis. Through hands-on labs and real-world scenarios, SEC503 equips security analysts, SOC teams, and incident responders with the skills needed to enhance network visibility, improve detection capabilities, and respond effectively to cyber threats. - Syllabus Topics: * Network Monitoring and Analysis: Part I * Network Monitoring and Analysis: Part II * Signature-Based Threat Detection and Response * Building Zero-Day Threat Detection Systems * Large-Scale Threat Detection, Forensics, and Analytics * Advanced Network Monitoring and Threat Detection Capstone --- ### 533. Smart Contract Hacking Course 2023 - URL: https://cyberlabarchive.com/courses/smartcontractshacking-johnnytime - Category: Other Institutions - Downloadable Files: 1 (17 GB) - Formats: ZIP - Description: Smart Contract Hacking is a comprehensive online course that teaches you how to secure, hack, and use blockchain and smart contract technology. The course covers the fundamentals of blockchain, the popular Ethereum coding language Solidity, and the tools and techniques for auditing and exploiting smart contracts. You will learn how to deploy, scan, and test various blockchain implementations and protocols, such as Bitcoin, Ethereum, Solana, Cosmos, Near, NFTs, DeFi, and Web3. You will also get access to hands-on exercises, challenges, and quizzes to reinforce your learning and gain practical experience. By the end of the course, you will have the skills and knowledge to become a proficient web3 security professional. - Syllabus Topics: * Intro * Career Paths * EVM * Environment & Dev Tools * Exercises Guidelines * Tokens crash course: ERC20 * Tokens crash course: ERC721 * ReEntrsncy Attacks * Arithmetic over/underflow * Phishing Attacks * Randomness Vulnerabilities * Access Control & Default Visibility * DEFI Crash Course: DEXes * DEFI Crash Course: Money Markets * Replay Attacks * Flash Loans & Flash Swaps * Flash Loan Attacks * Denial of Service * Sensitive On-Chain Data * Unchecked Return Value * Frontrunning * DAO & Governance Attacks * Oracle Manipulation * Call / Delegate call Attacks --- ### 534. SEC450: Blue Team Fundamentals: Security Operations and Analysis - URL: https://cyberlabarchive.com/courses/blue-team-fundamentals-security-operations-analysis - Category: Security Education - Downloadable Files: 3 (18.1 GB) - Formats: 7Z, ZIP, ISO - Description: SEC450 is an entry-level course designed to provide a strong foundation in cybersecurity operations, threat detection, and incident response. This course focuses on core Blue Team concepts, including network defense, security monitoring, log analysis, and threat intelligence. Participants will learn how to use SIEM tools, detect malicious activity, and respond to cyber threats effectively. The curriculum includes hands-on labs that simulate real-world attacks, helping students develop critical skills in security operations. SEC450 is ideal for aspiring SOC analysts, security engineers, and IT professionals looking to build a solid understanding of defensive cybersecurity strategies and techniques. - Syllabus Topics: * Security Operations Teams, Tools, And Mission Overview * Network Traffic Analysis * Endpoint Defense, Security Logging, and Malware Identification Overview * Efficient Alert Triage and Email Analysis * Continuous Improvement, Analytics, and Automation * Capstone: Defend the Flag --- ### 535. FOR710: Reverse-Engineering Malware: Advanced Code Analysis - URL: https://cyberlabarchive.com/courses/reverse-engineering-malware-advanced-code-analysis - Category: Security Education - Downloadable Files: 3 (15.8 GB) - Formats: PDF, ZIP, ISO - Description: FOR710 is an expert-level course designed for cybersecurity professionals who want to master the art of reverse engineering and analyzing advanced malware threats. The course focuses on dissecting sophisticated malware, including rootkits, fileless malware, and evasive techniques used by advanced persistent threats (APTs). Participants will learn how to analyze malicious code at the assembly level, use dynamic and static analysis techniques, and leverage tools such as IDA Pro, Ghidra, and debuggers. Through hands-on labs and real-world case studies, FOR710 equips malware analysts, incident responders, and forensic investigators with the skills needed to uncover hidden malware behaviors, develop signatures, and enhance enterprise defense strategies. - Syllabus Topics: * Code Deobfuscation and Execution * Encryption in Malware * Automating Malware Analysis * Automating Malware Analysis (Continued) * Advanced Malware Analysis Tournament (Extended Access) --- ### 536. FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques - URL: https://cyberlabarchive.com/courses/reverse-engineering-malware-malware-analysis-tools-techniques - Category: Security Education - Downloadable Files: 5 (14.1 GB) - Formats: ZIP, PDF, 7Z - Description: FOR610 is an in-depth course designed to equip cybersecurity professionals with the skills needed to analyze and reverse-engineer malicious software. The course covers key malware analysis techniques, including static and dynamic analysis, behavioral analysis, and code disassembly. Participants will work with industry-standard tools such as IDA Pro, Ghidra, x64dbg, and Wireshark to dissect malware, identify indicators of compromise (IOCs), and understand obfuscation and anti-analysis techniques used by threat actors. Through hands-on labs and real-world case studies, FOR610 prepares malware analysts, incident responders, and forensic investigators to detect, analyze, and mitigate modern malware threats effectively. - Syllabus Topics: * Malware Analysis Fundamentals * Reversing Malicious Code * Analyzing Malicious Documents and Scripts * In-Depth Malware Analysis * Examining Self-Defending Malware * Malware Analysis Tournament --- ### 537. FOR578: Cyber Threat Intelligence - URL: https://cyberlabarchive.com/courses/cyber-threat-intelligence - Category: Security Education - Downloadable Files: 4 (18.4 GB) - Formats: PDF, 7Z, RAR - Description: FOR578 is a comprehensive course designed to teach cybersecurity professionals how to collect, analyze, and operationalize cyber threat intelligence (CTI) to proactively defend against advanced threats. The course covers intelligence lifecycle fundamentals, adversary tracking, attribution analysis, and threat modeling techniques such as the MITRE ATT&CK framework. Participants will learn how to leverage open-source intelligence (OSINT), analyze threat actor tactics, techniques, and procedures (TTPs), and integrate CTI into security operations. Through hands-on labs and real-world case studies, FOR578 equips analysts, SOC teams, and security leaders with the skills needed to transform raw data into actionable intelligence that enhances threat detection, incident response, and strategic decision-making. - Syllabus Topics: * Cyber Threat Intelligence and Requirements * The Fundamental Skillset: Intrusion Analysis * Collection Sources * Analysis and Production of Intelligence * Dissemination and Attribution * Capstone --- ### 538. Applied Network Defense – CyberChef for Security Analysts - URL: https://cyberlabarchive.com/courses/cyberchef-for-security-analysts-and - Category: Applied Network Defense - Downloadable Files: 3 (4.6 GB) - Formats: 001, 002, 003 - Description: CyberChef for Security Analysts will teach you how to use CyberChef to perform common data manipulation, transformation, deobfuscation, and extraction techniques using real security data*. This isn’t just a simple tutorial, you’ll work through diverse exercises using real-world security data to build a toolkit of techniques.Simply put, CyberChef for Security Analysts is an example-driven master class on dealing with the most common types of data you’ll encounter in common blue team roles like SOC analysts, malware reverse engineering, forensic investigations, threat hunting, and threat intelligence. - Syllabus Topics: * CyberChef Basics * Character Encoding and Encryption * Data Formatting, Parsing, and other Manipulation * Defeating Malware Obfuscation * Log File and Forensic Analysis Techniques * Image Manipulation * HTTP Requests and JSON Data --- ### 539. FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response - URL: https://cyberlabarchive.com/courses/advanced-network-forensics-threat-hunting-incident-response - Category: Security Education - Downloadable Files: 12 (307.1 GB) - Formats: PDF, ZIP, ISO - Description: FOR572 is an advanced course designed for cybersecurity professionals seeking to master network forensics, threat hunting, and incident response. The course focuses on deep packet analysis, intrusion detection, and uncovering adversary activity within large-scale enterprise environments. Participants will learn how to analyze network traffic, identify anomalies, and reconstruct cyber attacks using tools such as Zeek (Bro), Suricata, Wireshark, and Security Information and Event Management (SIEM) solutions. - Syllabus Topics: * Off the Disk and Onto the Wire * Core Protocols & Log Aggregation/Analysis * NetFlow and File Access Protocols * Commercial Tools, Wireless, and Full-Packet Hunting * Encryption, Protocol Reversing, OPSEC, and Intel * Network Forensics Capstone Challenge --- ### 540. SEC541: Cloud Security Attacker Techniques, Monitoring, and Threat Detection - URL: https://cyberlabarchive.com/courses/cloud-security-attacker-techniques-monitoring-threat-detection - Category: Security Education - Downloadable Files: 3 (11.7 GB) - Formats: ZIP - Description: SEC541 is an advanced course that focuses on understanding and defending against attacker techniques in cloud environments. Participants will learn how adversaries exploit misconfigurations, abuse cloud-native services, and bypass security controls across AWS, Azure, and Google Cloud. The course covers threat detection, cloud monitoring, and incident response strategies to counter real-world cloud threats. - Syllabus Topics: * Management Plane and Networking Logging * Computer and Cloud Services Logging * Cloud Services and Data Discovery * Microsoft Ecosystem * Automate Response Actions and CloudWars --- ### 541. SEC504: Hacker Tools, Techniques, and Incident Handling - URL: https://cyberlabarchive.com/courses/hacker-techniques-incident-handling-sec504 - Category: Security Education - Downloadable Files: 4 (55.1 GB) - Formats: ZIP, PDF - Description: SEC504 is a foundational course that provides a comprehensive understanding of the tools and techniques used by attackers, as well as strategies for detecting and responding to cyber incidents. The course teaches participants to think like an attacker while strengthening their defensive skills. Key topics include reconnaissance, scanning, exploitation, post-exploitation tactics, and malware analysis. - Syllabus Topics: * Incident Response and Cyber Investigations * Recon, Scanning, and Enumeration Attacks * Password and Access Attacks * Public-Facing and Drive-By Attacks * Evasion and Post-Exploitation Attacks * Capture-the-Flag Event --- ### 542. SEC401: Security Essentials – Network, Endpoint, and Cloud - URL: https://cyberlabarchive.com/courses/security-essentials-network-endpoint-cloud-sec401 - Category: Security Education - Downloadable Files: 4 (24 GB) - Formats: PDF, 7Z, ZIP, ISO - Description: SEC401 is a comprehensive cybersecurity fundamentals course designed to equip professionals with the essential skills needed to secure networks, endpoints, and cloud environments. The course covers key security concepts, including risk management, cryptography, access controls, incident response, and security operations. Participants will learn how to identify vulnerabilities, defend against cyber threats, and implement security best practices across modern IT infrastructures. - Syllabus Topics: * Network Security and Cloud Essentials * Defense in Depth * Vulnerability Management and Response * Data Security Technologies * Windows and Azure Security * Linux, AWS, and Mac Security --- ### 543. SEC275: Foundations: Computers, Technology, Security - URL: https://cyberlabarchive.com/courses/cyber-security-courses-foundations-sec-275 - Category: Security Education - Downloadable Files: 1 (90 MB) - Formats: PDF - Description: SEC275 is an entry-level course designed to provide a fundamental understanding of computing, technology, and cybersecurity concepts. It is ideal for individuals new to cybersecurity or those looking to build a strong technical foundation. The course covers essential topics such as computer hardware and software, networking basics, operating systems, and cybersecurity principles. - Syllabus Topics: * System Architecture, Operating System, and Linux * Search, Web, and Networking * Introduction to Servers and Programming * Security Concepts and Advanced Security Concepts --- ### 544. Applied Network Defense | ELK for Security Analysis - URL: https://cyberlabarchive.com/courses/elk-for-security-analysis - Category: Applied Network Defense - Downloadable Files: 1 (1.7 GB) - Formats: 7Z - Description: It’s time to master your data. This course will teach you how to use the Elasticsearch, Logstash, and Kibana (ELK) to build your own IDS console, investigation platform, or security analysis lab. You must master your data If you want to catch bad guys and find evil. But, how can you do that? That’s where the ELK stack comes in. ELK is Elasticsearch, Logstash, and Kibana and together they provide a framework for collecting, storing, and investigating network security data. In this course, you’ll learn how to use this powerful trio to perform security analysis. This isn’t just an ELK course, it’s a course on how to use ELK specifically for incident responders, network security monitoring analysts, and other security blue teamers. Syllabus Elasticsearch: How data is stored and indexed. Working with JSON documents. Logstash: How to collect and manipulate structured and unstructured data. Kibana: Techniques for searching data and building useful visualizations and dashboards. Beats: Use the agent to ship data from endpoints and servers to your ELK systems. HTTP Proxy Logs File-Based Logs (Unix, auth, and application logs) Windows Events & Sysmon Data NetFlow Data IDS Alerts Dealing with any CSV file you’re handed Parsing unstructured logs, no matter how weird they are Applied Network Defense | ELK for Security Analysis - Syllabus Topics: * Elasticsearch: How data is stored and indexed. Working with JSON documents. * Logstash: How to collect and manipulate structured and unstructured data. * Kibana: Techniques for searching data and building useful visualizations and dashboards. * Beats: Use the agent to ship data from endpoints and servers to your ELK systems. * HTTP Proxy Logs * File-Based Logs (Unix, auth, and application logs) * Windows Events & Sysmon Data * NetFlow Data * IDS Alerts * Dealing with any CSV file you’re handed * Parsing unstructured logs, no matter how weird they are --- ### 545. Applied Network Defense | Demystifying Regular Expressions - URL: https://cyberlabarchive.com/courses/demystifying-regular-expressions - Category: Applied Network Defense - Downloadable Files: 1 (989 MB) - Formats: 7Z - Description: Most security analysis and detection tools support matching with regular expressions because of limitations in their own feature set. This means that if you can write regular expressions, you can search with infinite precision. This applies to IDS engines, SIEMs, and even command line tools like grep. The phrase “searching for a needle in a haystack” is overused, but it’s a serious component of what security analysts do. A large part of our success is contingent on being able to search through large repositories of data and match things that meet very specific criteria. Demystifying Regular Expressions will help you do exactly that. Syllabus The most common uses of regular expressions and how to apply them in places you weren’t even aware of. The process of iteratively building and testing regular expressions for things you want to match. Techniques for overcoming common gotchas like dealing with whitespace How to Evaluate the efficiency of expressions by the number of steps it takes to match. A definitive guide to escaping so you’ll know when and how to do it How quantifiers can be used to match specific numbers of data occurrences How to use capture groups to reference specific matched content and perform additional operations on it Complex behavioral structures like lookarounds and conditionals The use of modifiers to match case-sensitive, enable free-spacing, or match in single line mode Applied Network Defense | Demystifying Regular Expressions - Syllabus Topics: * The most common uses of regular expressions and how to apply them in places you weren’t even aware of. * The process of iteratively building and testing regular expressions for things you want to match. * Techniques for overcoming common gotchas like dealing with whitespace * How to Evaluate the efficiency of expressions by the number of steps it takes to match. * A definitive guide to escaping so you’ll know when and how to do it * How quantifiers can be used to match specific numbers of data occurrences * How to use capture groups to reference specific matched content and perform additional operations on it * Complex behavioral structures like lookarounds and conditionals * The use of modifiers to match case-sensitive, enable free-spacing, or match in single line mode --- ### 546. Applied Network Defense | Practical Threat Hunting - URL: https://cyberlabarchive.com/courses/practical-threat-hunting - Category: Applied Network Defense - Downloadable Files: 3 (5.2 GB) - Formats: 001, 002, 003 - Description: A structured system to ensure you’re never at a loss for places and methods to start hunting for evil. Practical Threat Hunting is a foundational course that will teach you how to approach threat hunting using a proven, structured, repeatable framework. Practical Threat Hunting is the course that will teach you to hunt in a way that will never leave you at a shortage of places to start or techniques to manipulate data to spot anomalies. You’ll build skills through a series of expert-led lectures, scenario-based demonstrations, and hands-on lab exercises. Through a combination of theory and application, you’ll learn the basics of threat hunting and apply them to your network immediately. Syllabus Two hunting frameworks: Attack-Based Hunting (ABH) and Data-Based Hunting (DBH) Techniques for leveraging threat intelligence and the MITRE ATT&CK framework for hunting input The 9 most common types of anomalies you’ll encounter when reviewing evidence. The 4 ways threat hunters most commonly transform data to spot anomalies Typical staffing models for hunting capabilities in organizations of all sizes along with pros/cons 5 metrics that support and enable threat hunting operations My two-step system for effective note taking while hunting (and how to transition those notes to longer-term storage for easy searching) An ideal design for a hunter’s wiki/knowledgebase A 5-step framework for dissecting and simulating attacks to prepare for hunting expeditions Applied Network Defense | Practical Threat Hunting - Syllabus Topics: * Two hunting frameworks: Attack-Based Hunting (ABH) and Data-Based Hunting (DBH) * Techniques for leveraging threat intelligence and the MITRE ATT&CK framework for hunting input * The 9 most common types of anomalies you’ll encounter when reviewing evidence. * The 4 ways threat hunters most commonly transform data to spot anomalies * Typical staffing models for hunting capabilities in organizations of all sizes along with pros/cons * 5 metrics that support and enable threat hunting operations * My two-step system for effective note taking while hunting (and how to transition those notes to longer-term storage for easy searching) * An ideal design for a hunter’s wiki/knowledgebase * A 5-step framework for dissecting and simulating attacks to prepare for hunting expeditions --- ### 547. Applied Network Defense | Osquery for Security Analysis - URL: https://cyberlabarchive.com/courses/osquery-for-security-analysis - Category: Applied Network Defense - Downloadable Files: 1 (1.1 GB) - Formats: 7Z - Description: Osquery for Security Analysis will teach you how to use Osquery to perform thorough investigations of hosts on your network. This isn’t just an Osquery tutorial, it’s a course designed to help you improve your host-based investigation skills using one of the best tools for the job. syllabus How to craft SQL queries to interrogate Windows, Linux, and MacOS hosts Common queries for performing software inventory and asset control Strategies for interrogating processes to determine if they are malicious Techniques for uncovering persistence and lateral movement Triaging suspicious systems using high-value data tables Hunting leveraging MITRE ATT&CK techniques Complete deployment of distributed Osquery across your network using FleetDM and ElasticStack How to leverage differential queries to monitor state changes and generate alerts Extending Osquery with extensions Applied Network Defense | Osquery for Security Analysis - Syllabus Topics: * How to craft SQL queries to interrogate Windows, Linux, and MacOS hosts * Common queries for performing software inventory and asset control * Strategies for interrogating processes to determine if they are malicious * Techniques for uncovering persistence and lateral movement * Triaging suspicious systems using high-value data tables * Hunting leveraging MITRE ATT&CK techniques * Complete deployment of distributed Osquery across your network using FleetDM and ElasticStack * How to leverage differential queries to monitor state changes and generate alerts * Extending Osquery with extensions --- ### 548. Applied Network Defense | Practical Packet Analysis - URL: https://cyberlabarchive.com/courses/practical-packet-analysis - Category: Applied Network Defense - Downloadable Files: 4 (8 GB) - Formats: 001, 002, 003, 004 - Description: Capturing packets is easy, but making sense of them isn’t. This course will teach you the fundamentals of packet analysis. You’ll learn all about common protocols, how to troubleshoot network issues, and how to investigate security incidents at the packet level. It’s easy to fire up Wireshark and capture some packets…but making sense of them is another story. There’s nothing more frustrating than knowing the answers you need lie in a mountain of data that you don’t know how to sift through. That’s why I wrote the first Practical Packet Analysis book a decade ago. That book is now in its third edition, has been translated to several languages, and has sold over 25,000 copies. Now, I’m excited to create an online course based on the book. The Practical Packet Analysis online course is the best way to get hands on visual experience capturing, dissecting, and making sense of packets. Syllabus How networking works at the packet level. How to interpret packet data at a fundamental level in hexadecimal or binary. Basic and advanced analysis features of Wireshark. How to analyze packets on the command line with tshark and tcpdump. Reducing capture files with Berkeley packet filters and Wireshark display filters. Techniques for capturing packets to make sure you’re collecting the right data. How to interpret common network and transport layer protocols like IPv4, IPv6, ICMP, TCP, and UDP. How to interpret common application layer protocols like HTTP, DNS, SMTP, and more. Normal and abnormal stimulus and response patterns for common protocols. Troubleshooting connectivity issues at the packet level. Techniques for carving files from packet streams. Understanding network latency and how to locate the source. How common network attacks are seen by an intrusion detection systems. Techniques for investigating security alerts using packet data. How malware communicates on the network. Applied Network Defense | Practical Packet Analysis - Syllabus Topics: * How networking works at the packet level. * How to interpret packet data at a fundamental level in hexadecimal or binary. * Basic and advanced analysis features of Wireshark. * How to analyze packets on the command line with tshark and tcpdump. * Reducing capture files with Berkeley packet filters and Wireshark display filters. * Techniques for capturing packets to make sure you’re collecting the right data. * How to interpret common network and transport layer protocols like IPv4, IPv6, ICMP, TCP, and UDP. * How to interpret common application layer protocols like HTTP, DNS, SMTP, and more. * Normal and abnormal stimulus and response patterns for common protocols. * Troubleshooting connectivity issues at the packet level. * Techniques for carving files from packet streams. * Understanding network latency and how to locate the source. * How common network attacks are seen by an intrusion detection systems. * Techniques for investigating security alerts using packet data. * How malware communicates on the network. --- ### 549. Chris Sanders | Intrusion Detection Honeypots: Detection through Deception - URL: https://cyberlabarchive.com/courses/intrusion-detection-honeypots-through-deception-ebook - Category: Other Institutions - Downloadable Files: 1 (20 MB) - Formats: 7Z - Description: Intrusion Detection Honeypots is the foundational guide to building, deploying, and monitoring honeypots — security resources whose value lies in being probed and attacked. These fake systems, services, and tokens lure attackers in, enticing them to interact. Unbeknownst to the attacker, those interactions generate logs that alert you to their presence and educate you about their tradecraft. Intrusion Detection Honeypots teaches you how to: – Use the See-Think-Do framework to integrate honeypots into your network and lure attackers into your traps. syllabus Leverage honey services that mimic HTTP, SSH, and RDP. Hide honey tokens amongst legitimate documents, files, and folders. Entice attackers to use fake credentials that give them away. Create honey commands, honey tables, honey broadcasts, and other unique detection tools that leverage deception. Monitor honeypots for interaction and investigate the logs they generate. Chris Sanders | Intrusion Detection Honeypots: Detection through Deception - Syllabus Topics: * Leverage honey services that mimic HTTP, SSH, and RDP. * Hide honey tokens amongst legitimate documents, files, and folders. * Entice attackers to use fake credentials that give them away. * Create honey commands, honey tables, honey broadcasts, and other unique detection tools that leverage deception. * Monitor honeypots for interaction and investigate the logs they generate. --- ### 550. Applied Network Defense | Building Intrusion Detection Honeypots - URL: https://cyberlabarchive.com/courses/building-intrusion-detection-honeypots - Category: Applied Network Defense - Downloadable Files: 2 (3.8 GB) - Formats: 001, 002 - Description: Building Intrusion Detection Honeypots will teach you how to build, deploy, and monitor honeypots designed to catch intruders on your network. You’ll use free and open source tools to work through over a dozen different honeypot techniques, starting from the initial concept and working to your first alert. Building Intrusion Detection Honeypots is the seminal course on strategic honeypot deployment for network defenders who want to leverage deception to find attackers on their network and slow them down. syllabus What makes an intrusion detection honeypot different from research honeypots. How to leverage the four characteristics of honeypots for the defender’s benefit: deception, interactivity, discoverability, and monitoring. How to think deceptively with an overview of deception from a psychological perspective. How to use the See-Think-Do framework to integrate honeypots into your network and lure attackers into your traps. Tools and techniques for building service honeypots for commonly attacked services like HTTP, SSH, and RDP. How to hide honey tokens amongst legitimate documents, files, and folder. To entice attackers to use fake credentials that give them away. Techniques for embedding honey credentials in services and memory so that attackers will find and attempt to use them. How to build deception-based defenses against common attacks like Kerberoasting and LLMNR spoofing. Monitoring strategies for capturing honeypot interaction and investigating the logs they generate. Applied Network Defense | Building Intrusion Detection Honeypots - Syllabus Topics: * What makes an intrusion detection honeypot different from research honeypots. * How to leverage the four characteristics of honeypots for the defender’s benefit: deception, interactivity, discoverability, and monitoring. * How to think deceptively with an overview of deception from a psychological perspective. * How to use the See-Think-Do framework to integrate honeypots into your network and lure attackers into your traps. * Tools and techniques for building service honeypots for commonly attacked services like HTTP, SSH, and RDP. * How to hide honey tokens amongst legitimate documents, files, and folder. * To entice attackers to use fake credentials that give them away. * Techniques for embedding honey credentials in services and memory so that attackers will find and attempt to use them. * How to build deception-based defenses against common attacks like Kerberoasting and LLMNR spoofing. * Monitoring strategies for capturing honeypot interaction and investigating the logs they generate. --- ### 551. Applied Network Defense | Detection Engineering with Sigma - URL: https://cyberlabarchive.com/courses/detection-engineering-with-sigma - Category: Applied Network Defense - Downloadable Files: 1 (10.7 GB) - Formats: ZIP - Description: Detection Engineering with Sigma will teach you how to write and tune Sigma rules to find evil in logs using real-world examples that take you through the detection engineering process. We’ll dissect real Sigma detection rules focused on finding a variety of malicious activity in diverse log sources. Once you have a good handle on these components, you’ll start writing and tuning your own rules in a series of case studies. In some case studies, I’ll describe a detection gap and you’ll write a rule on your own before I show you how I tackled the problem myself. In other scenarios, you’ll write or modify a rule on your own and submit it to me for feedback. In this course, you are never alone! I will be with you 100% of the way to help you understand the structure of Sigma rules, how to get from idea to finished rule, and best practices for writing resilient rules. - Syllabus Topics: * Course Introduction * Lab Toolkit Virtual Machine * Sigma Fundamentals * Case Study 1 – Windows Event Logs * Case Study 2 – Zeek Logs * Case Study 3 – Sysmon Logs * Case Study 4 – AWS CloudTrail Logs * Sigma In Production * Final Challenge * Course Conclusion --- ### 552. Applied Network Defense | Splunk for Security Analysts - URL: https://cyberlabarchive.com/courses/splunk-for-security-analysts - Category: Applied Network Defense - Downloadable Files: 3 (4.4 GB) - Formats: 001, 002, 003 - Description: Splunk is a data analysis platform that allows security practitioners to centralize data, search through it, correlate events, and create security analytics and dashboards. It’s also the most popular commercial SIEM used by security teams to perform investigations and threat hunting. Splunk for Security Analysts will teach you how to use Splunk to onboard data, extract meaningful fields, and search through it using real security data to conduct security research and investigations. This course goes beyond the documentation to provide a diverse set of real-world security data that you’ll use to gain confidence with Splunk’s extensive capabilities. syllabus The Splunk Data Pipeline Data Onboarding Finding and Exploring Data Enrichment and Advanced Filtering Sharing, Scheduling, and Alerting Visualization and Dashboards Applied Network Defense | Splunk for Security Analysts - Syllabus Topics: * Analysis * Security * Splunk --- ### 553. Applied Network Defense | YARA for Security Analysts - URL: https://cyberlabarchive.com/courses/yara-for-security-analysts - Category: Applied Network Defense - Downloadable Files: 3 (4.2 GB) - Formats: 001, 002, 003 - Description: Learn to use YARA to detect malware, triage compromised systems, and perform threat intelligence research. Detecting malicious elements within files is a core security skill for incident responders, SOC analysts, threat intelligence analysts, malware analysts, and detection engineers alike. There are different ways to accomplish that goal, but none are more flexible or widely used as YARA. YARA is a pattern-matching tool used to help identify and classify malware in a variety of scenarios. By writing YARA rules, security practitioners can detect whether malware exists within a group of files, triage a potentially compromised host, or identify common elements between samples to bolster threat intelligence. Syllabus YARA Fundamentals YARA Rule Syntax Detection Research Methodology Ruleset Management Adversary Tradecraft Applied Network Defense | YARA for Security Analysts - Syllabus Topics: * Analysis * Security --- ### 554. Kaspersky – Windows incident response - URL: https://cyberlabarchive.com/courses/windows-incident-response-kaspersky - Category: Kaspersky - Downloadable Files: 2 (2.3 GB) - Formats: 001, 002 - Description: Are you looking to improve the expertise of your in-house digital forensics and incident response team? Or do you want to train yourself in the area of incident response to identify the complex attacks? This Kaspersky Windows Incident Response course brings you concentrated knowledge from the company’s Global Emergency Response Team (GERT) experts. The course’s curriculum is heavily focused on practicing. Our experts will take you through all the stages of responding to an incident based on a real-life ransomware case. You will master incident detection, evidence acquisition, log file analysis, network analysis and creation of IoCs, and also get introduced to memory forensics. You will be working in a simulated virtual environment with all the necessary tools to practice IR. Your coaches Ayman Shaaban and Kai Schuricht have handled security incidents for Kaspersky incident response customers around the globe. You will get not only super-clear theoretical knowledge but also tap into their up-to-date experience, skills and tips. A Kaspersky report shows malware can survive in a company’s digital environment for months and even years under the radar. After completing the course you will be able to verify and handle threats quicker in order to minimize the impact and contain the damage. Syllabus Introduction Incident response process Incident detection: Network & System based Evidence acquisition Memory analysis Log file analysis Network analysis Cyber Threat Intelligence (CTI) Windows incident response - Syllabus Topics: * Incident Response --- ### 555. Kaspersky – Targeted malware reverse engineering - URL: https://cyberlabarchive.com/courses/targeted-malware-reverse-engineering-kaspersky - Category: Kaspersky - Downloadable Files: 4 (7.7 GB) - Formats: 001, 002, 003, 004 - Description: Skilled reverse engineers aren’t born – they’re made by experience. If you are a cybersecurity specialist with a good understanding of malware analysis methodologies & tools and are looking for more confidence in applying your skills, you can bridge the gap by working hands-on with real-life cases. With this challenge in mind, our intermediate-level course is built around analysis of 10 targeted malware cases used in the wild by powerful APT actors recently. Cases including MontysThree , LuckyMouse & Lazarus have been researched personally by our trainers as part of their work in the Kaspersky GReAT team – so you will get first-hand knowledge and best practices from their exclusive research. By working in the dedicated virtual lab, using an array of tools like IDA Pro, Hex-Rays decompiler, Hiew, 010Editor and many others, you will gain practical experience analyzing real-life targeted malware and will become a more efficient malware analyst and reverse engineer and prove your skills are relevant to today’s threat landscape. Syllabus Introduction and Chafer LuckyMouse Biodata Exploit Topinambour Biodata Trojan DeathStalker MontysThree Lazarus Group Cloud Snooper Cycldek’s Tried Targeted malware reverse engineering - Syllabus Topics: * Malware * Reverse Engineering --- ### 556. Kaspersky – Suricata for Incident Response and Threat Hunting - URL: https://cyberlabarchive.com/courses/suricata-for-incident-response-and-threat-hunting-kaspersky - Category: Kaspersky - Downloadable Files: 1 (2.2 GB) - Formats: ZIP - Description: Suricata is the foundation for effective intrusion detection and prevention. With cyber attacks on the rise it’s more crucial than ever for businesses, enterprises or cybersecurity consultancies to have a comprehensive security strategy in place. And that’s where Suricata rules come to the rescue. The “Suricata for Incident Response and Threat Hunting” course from Kaspersky xTraining is the ultimate training program taught by Kaspersky’s leading security researcher who has spent years on the front lines of cyber defense, Tatyana Shishkova. She will share unique insights and sophisticated tips and tricks, giving you an unparalleled understanding of the IDS/IPS within the Suricata rules framework. The course is created for companies aiming to power up their security policy and individual learners, looking to advance their career in cyber security. Whether you’re a beginner specialist or a seasoned professional in security or SOC analysis, security administration, malware research or incident response, it will give you the knowledge and skills to stay ahead of the ever-evolving threat landscape. Learn how to write and implement Suricata rules to detect and block even the most advanced threats. Gain a deep understanding of how the framework works, and how to use it for identifying and responding to attacks in real-time. Get practical experience to enhance your network security with hands-on exercises and various real-life scenarios. - Syllabus Topics: * Incident Response * Security * Threat Hunting --- ### 557. Kaspersky – Security operations and threat hunting - URL: https://cyberlabarchive.com/courses/security-operations-and-threat-hunting-kaspersky - Category: Kaspersky - Downloadable Files: 4 (7.4 GB) - Formats: 001, 002, 003, 004 - Description: Big companies with complex IT infrastructure need to protect it – or face the consequences of being compromised. Sophisticated attackers can bypass automatic defenses unnoticed. Here’s where Security Operations Center (SOC) comes to the rescue, bringing the expertise and skills of its professionals for upgraded business protection. Developed by Kaspersky’s own SOC experts, this course offers a comprehensive training to SOC analysts and other staff dealing with security operations. The knowledge you will get is practical and tested: our experts update it daily, provide security to Kaspersky itself and deliver on-site training to clients all over the world. During the time on the course, you will get to know the diverse roles within a SOC, its services and use cases, get acquainted with the modern attack tactics, techniques, and procedures, and learn how SOC helps deal with them. Within the numerous extensive practice sessions in the restricted areas of the virtual labs, you’ll get an opportunity to develop your skills in incident detection and investigation. Syllabus General Cybersecurity concepts Windows Linux Security operations and threat hunting - Syllabus Topics: * Security --- ### 558. Kaspersky – Hunt APTs with Yara like a GReAT ninja - URL: https://cyberlabarchive.com/courses/hunt-apts-with-yara-like-a-great-ninja-kaspersky - Category: Kaspersky - Downloadable Files: 1 (394 MB) - Formats: 7Z - Description: Have you ever wondered how Kaspersky’s GReAT experts discovered some of the world’s most famous APT attacks? Now, the answer is within your reach. Our specialists have poured years of experience from the prominent cases they have worked on into our online Threat Hunting with Yara training. Course leader Costin Raiu, a 25 year veteran of the threat hunting industry, will teach you the unconventional ways of working with Yara so that you can find threats of the same magnitude as his team. Specifically designed for self-paced learning, our course is deeply practical and enables you to learn-by-doing, hunting for real threats in our dedicated Virtual Lab. Using world-renowned cases like BlueTraveller, Sofacy & WildNeutron as the basis of the course, Costin shares insights and techniques from his team’s exclusive research on these cases. This knowledge will enhance your career and improve your organisation’s threat defences. Syllabus Inception String based rules Efficient rules Taking advantage of Yara modules Hunting for new samples on VTI Wildcards Digital Certificate, imphashes and developer footprints Malicious Office documents, OLE format Expert Yara exercises YarGen, automation and a bit of magic Hunt APTs with Yara like a GReAT ninja - Syllabus Topics: * APT * Hunt * Security --- ### 559. Kaspersky – Advanced Malware Analysis Techniques - URL: https://cyberlabarchive.com/courses/advanced-malware-analysis-techniques-kaspersky - Category: Kaspersky - Downloadable Files: 3 (5.1 GB) - Formats: 001, 002, 003 - Description: Kaspersky opens a treasure-box: our legendary training program on Advanced Malware Analysis Techniques. It helps established reverse engineers, incident responders & digital forensics specialists level-up their work on cybersecurity incidents and become unique experts. The main focus of the course is advanced static analysis because for cybersecurity incidents involving previously unseen malicious code, this is the most reliable way to determine functionality of the code and find actionable artefacts. It allows organizations affected by APTs to define adequate damage assessment and incident response. The course also heavily features our exclusive know-hows on the automation of decryption, decoding and other processing of the samples which helps not only optimize routine tasks, but preserves your work in the code. You will be introduced to a custom static analysis framework (available for download), proven to be very efficient during decades of Kaspersky APT research. Syllabus Introduction Shell Msfvenom Bangladesh GPCA Regin driver Decrypt string Driver Miniduke Rocra Cobalt Cloud Atlas Miniduke PDF Ragua Py2exe Cridex Carbanak Snake Advanced Malware Analysis Techniques - Syllabus Topics: * Malware * Reverse Engineering --- ### 560. AUD507: Auditing Systems, Applications, and the Cloud - URL: https://cyberlabarchive.com/courses/auditing-systems-applications-cloud-aud507 - Category: Security Education - Downloadable Files: 4 (33.7 GB) - Formats: ZIP - Description: AUD507 is a comprehensive course designed for IT auditors, security professionals, and compliance specialists who need to assess and verify the security of systems, applications, and cloud environments. The course covers key auditing principles, risk management frameworks, and compliance requirements while providing hands-on techniques for evaluating security controls across on-premise and cloud infrastructures. - Syllabus Topics: * Audit in the Enterprise and Cloud * PowerShell, Windows System, and Domain Auditing * Auditing Linux * Auditing Cloud Infrastructure * Auditing Web Applications * Audit Wars --- ### 561. FOR528: Ransomware and Cyber Extortion - URL: https://cyberlabarchive.com/courses/ransomware-and-cyber-extortion-for528 - Category: Security Education - Downloadable Files: 2 (39.7 GB) - Formats: ZIP, ISO - Description: FOR528 is a specialized course designed to equip cybersecurity professionals with the skills to investigate, respond to, and mitigate ransomware and cyber extortion attacks. The course covers the entire lifecycle of a ransomware incident, from initial infection and encryption to ransom negotiation, recovery, and forensic analysis. - Syllabus Topics: * Ransomware Incident Response Fundamentals * Ransomware Modus Operandi * Advanced Ransomware Concepts * Ransomware Incident Response Challenge --- ### 562. FOR518: Mac and iOS Forensic Analysis and Incident Response - URL: https://cyberlabarchive.com/courses/mac-and-ios-forensic-analysis-and-incident-response-for518 - Category: Security Education - Downloadable Files: 4 (149.4 GB) - Formats: PDF, ISO - Description: FOR518 is the first non-vendor-based Mac and iOS incident response and forensics course that focuses students on the raw data, in-depth detailed analysis, and how to get the most out of their Mac and iOS cases. The intense hands-on forensic analysis and incident response skills taught in the course will enable analysts to broaden their capabilities and gain the confidence and knowledge to comfortably analyze any Mac or iOS device. - Syllabus Topics: * Mac and iOS Essentials * File Systems & System Triage * User Data, System Configuration, and Log Analysis * Application Data Analysis * Advanced Analysis Topics * Mac Forensics & Incident Response Challenge --- ### 563. FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics - URL: https://cyberlabarchive.com/courses/advanced-incident-response-threat-hunting-training-for508 - Category: Security Education - Downloadable Files: 7 (104.9 GB) - Formats: ZIP, PDF, ISO - Description: FOR508 is an advanced course designed for cybersecurity professionals who need to detect, investigate, and respond to sophisticated cyber threats, including advanced persistent threats (APTs) and targeted attacks. The course teaches cutting-edge digital forensics, threat hunting, and incident response techniques to track adversaries across compromised enterprise environments. - Syllabus Topics: * Advanced Incident Response & Threat Hunting * Intrusion Analysis * Memory Forensics in Incident Response & Threat Hunting * Timeline Analysis * Incident Response & Hunting Across the Enterprise | Advanced Adversary & Anti-Forensics Detection * The APT Threat Group Incident Response Challenge --- ### 564. FOR498: Digital Acquisition and Rapid Triage - URL: https://cyberlabarchive.com/courses/digital-acquisition-rapid-triage-for498 - Category: Security Education - Downloadable Files: 4 (62.3 GB) - Formats: ZIP, 7Z, ISO - Description: FOR498 is a specialized course designed for digital forensics professionals and incident responders who need to quickly acquire and assess evidence during critical cyber incidents. The course focuses on rapid data acquisition, efficient forensic analysis, and initial triage processes to support timely decision-making and incident response. - Syllabus Topics: * Scene Prep, Management, and Storage Interfaces * Portable Devices and Acquisition Processes * Triage and Data Acquisition * Non-Traditional and Cloud Acquisition * Apple Acquisition and Internet of Things * Beyond the Forensic Tools: The Deeper Dive --- ### 565. FOR500: Windows Forensic Analysis - URL: https://cyberlabarchive.com/courses/windows-forensic-analysis-for500 - Category: Security Education - Downloadable Files: 2 (97.6 GB) - Formats: PDF, ZIP - Description: FOR500 is a specialized course designed to equip digital forensics professionals with the skills needed to investigate and analyze Windows-based systems. The course focuses on extracting and analyzing digital evidence from Windows operating systems, including artifacts related to user activity, system events, malware infections, and cyber attacks. - Syllabus Topics: * Digital Forensics and Advanced Data Triage * Registry Analysis, Application Execution, and Cloud Storage Forensics * Shell Items and Removable Device Profiling * Email Analysis, Windows Search, SRUM, and Event Logs * Web Browser Forensics * Windows Forensics Challenge --- ### 566. Web Defense Professional (eWDP) - URL: https://cyberlabarchive.com/courses/web-defense-professional-ewdp - Category: iNE - Downloadable Files: 2 (3.9 GB) - Formats: ZIP - Description: Have you ever wondered about how web applications are attacked in the real world and what you can do to mitigate every attack? The Web Defense Professional Learning Path will illustrate exactly how each attack works, what the impact of each attack is, how to fix it, and how the exploit no longer works after the fix. This learning path will also give you in-depth, practical advice about how to simplify your defense and how to implement attack mitigations that actually work (regardless of you having access to the source code or not). In addition, it will cover mitigation advice for multiple platforms and languages, the OWASP Testing Guide, detailed techniques and methodology to simplify the defense of web applications, advanced usage of OWASP ZAP, OWASP OWTF, ModSecurity, and more. The Web Defense Professional Learning Path also prepares you for the eWDP exam and certification. eWDP --- ### 567. Advanced Penetration Testing (eCPTX) - URL: https://cyberlabarchive.com/courses/advanced-penetration-testing-ecptx - Category: iNE - Downloadable Files: 2 (1 GB) - Formats: ZIP, PDF - Description: The Advanced Penetration Testing Learning Path provides all the advanced skills required to carry out a thorough and professional penetration test against modern networks and infrastructure, such as the ability to execute state-sponsored-like operations and advanced adversary simulations. You must be familiar with PowerShell scripting, Active Directory administration and Windows internals knowledge, basic reverse engineering skills, and possess a good working knowledge of network protocols, as the content dives into all stages of a red-teaming engagement. Learning path at a glance: -Implementation details on numerous undocumented attacks -Obscure ways of exploitation and backdooring -Advanced client-side exploitation techniques -Custom attack vector and payload creation -Custom payload creation techniques -In-depth analysis of Active Directory exploitation -Stealthy lateral movement and evasion against modern defenses -In-depth analysis of critical domain infrastructure exploitation -In-depth details of common misconfigurations and weaknesses -Details for covert operations and stealthy persistence eCPTX --- ### 568. Offensive Security Exploit Developer (eCXD) - URL: https://cyberlabarchive.com/courses/offensive-security-exploit-developer - Category: iNE - Downloadable Files: 1 (858 MB) - Formats: ZIP - Description: If you’re looking for the most practical way into the exploit development and software security world look no further. The Exploit Development Student Learning Path provides not only the fundamentals of Windows and Linux exploit development but also covers advanced Windows and Linux exploit development techniques, as well as anti-exploit mechanism bypasses. In addition, you’ll learn software debugging, shellcoding, how to identify and fully exploit 0-day vulnerabilities, bypassing modern anti-exploit mechanisms, how to use tools such as Immunity Debugger, x32dbg, Mona, Pwntools, GDB, RopperThis, and more. This learning path also prepares you for the eCXD exam and certification. eCXD --- ### 569. Reverse Engineering Professional (eCRE) - URL: https://cyberlabarchive.com/courses/reverse-engineering-professional - Category: iNE - Downloadable Files: 2 (1.4 GB) - Formats: 001, 002 - Description: Are you looking to gain the theoretical and practical knowledge required to perform advanced reverse engineering of third-party software and malware on the assembly language level? The Reverse Engineering Professional Learning Path will teach you several methods to identify, isolate, and finally, analyze portions of code which are of high interest, as well as the most common Windows APIs utilized for file, memory, and registry manipulation by either software protections (such as packers) or malware. During the learning process, you will also get insights into the most common anti-reversing tricks, including different code obfuscation methods, and how to bypass them. The Reverse Engineering Professional Learning Path also prepares you for the eCRE exam and certification. Learning Objects Reverse Engineering Foundations Practical Reverse Engineering eCRE --- ### 570. Advanced Web Application Penetration Testing (eWPTX) - URL: https://cyberlabarchive.com/courses/advanced-web-application-penetration-testing - Category: iNE - Downloadable Files: 2 (1008 MB) - Formats: ZIP, PDF - Description: Interested in assessing and mitigating advanced web application risks an organization could potentially be exposed to? The Advanced Web Application Penetration Tester Professional Learning Path provides all the advanced skills necessary to carry out a thorough and advanced penetration test against modern web applications, as well as prepares you for the eWPTX exam and certification. Learning Objective: -Based on techniques professional pentesters use -Master advanced Web Application attacks & security tools -In-depth Web Application Vulnerabilities analysis -Covers XSS, SQL Injection, HTML5, and much more -In-depth obfuscation and encoding techniques -Bypassing filters and WAF techniques included -Explore HTML5 and XML attacks vectors and exploits -Explore advanced PHP, Java, Deserialization, LDAP, Server Side, and Authentication/SSO attacks -Learn effective API & Cloud-powered Application penetration testing -Demystifies Java RCE internals, attacking RMI-based JMX services, JNDI injection attacks, PHP Objection Instantiation, PHP Type Juggling, constructing Property Oriented Programming chains, and attacking memory-unsafe languages eWPTX --- ### 571. Web Application Penetration Testing Professional (eWPTv2) - URL: https://cyberlabarchive.com/courses/elearnsecuritys-new-ewpt-beta-certification - Category: iNE - Downloadable Files: 5 (22.5 GB) - Formats: ZIP, Z01, Z02, Z03, Z04 - Description: Interested in learning how to assess and mitigate real-world web application vulnerabilities an organization could potentially be exposed to? The Web Application Penetration Testing Learning Path is a comprehensive and structured journey designed to equip aspiring penetration testers, Web App Security Professionals, Bug Bounty Hunters, and web developers with the essential skills and knowledge required to plan and perform a thorough and professional web application penetration test and how to effectively identify, exploit, and mitigate vulnerabilities in modern web applications. The Web Application Penetration Tester Professional Learning Path provides you with all the advanced skills required to carry out a thorough and professional penetration test against modern web applications, as well as prepares you for the eWPTv2 exam and certification. Learning Objects Web Application Penetration Testing Methodology Information Gathering & Reconnaissance Web Application Analysis & Inspection Web Application Vulnerability Assessment Web Application Security Testing Manual exploitation of Common Web Application Vulnerabilities Web Service Security Testing eWPTv2 --- ### 572. Mobile Application Penetration Testing Professional (eMAPT) - URL: https://cyberlabarchive.com/courses/mobile-application-penetration-testing-professional - Category: iNE - Downloadable Files: 1 (1.2 GB) - Formats: ZIP - Description: Would you like to expand your knowledge of how to code simple iOS and Android applications in order to build real-world POCs and exploits? The Mobile Application Security and Penetration Testing Learning path give penetration testers and IT security professionals the practical skills to understand the technical threats and attack vectors targeting mobile devices. This learning path covers the process of identifying security issues on Android and iOS applications, using a wide variety of techniques including Reverse Engineering, Static/Dynamic/Runtime, and Network Analysis, as well as prepares you for the eMAPT exam and certification. Learning Objects Android & Mobile App Pentesting iOS & Mobile App Pentesting eMAPT --- ### 573. Threat Hunting Professional (eCTHPv2) - URL: https://cyberlabarchive.com/courses/elearnsecurity-certified-threat-hunting-professional - Category: iNE - Downloadable Files: 2 (1.1 GB) - Formats: ZIP, PDF - Description: Interested in establishing a proactive defense mentality and learning how to proactively hunt for threats in an organization’s network? Through expert-led instruction and risk-free lab environments, you can do all of that and more with the eLearnSecurity Certified Threat Hunting Professional (eCTHPv2) certification. This certification includes a practical exam in which you can conduct a threat hunt on a corporate network and propose defense strategies to be graded by INE’s expert cyber security instructors. With this certification, you can showcase your threat hunting talents to current and future employers. eCTHPv2 --- ### 574. Penetration Testing Professional‌ (eCPPT) - URL: https://cyberlabarchive.com/courses/ine-penetration-testing-professional - Category: iNE - Downloadable Files: 2 (4.7 GB) - Formats: ZIP - Description: If you are looking to become a professional penetration tester or IT Security personnel where your job relies on your ability to defend and assist an organization in assessing and mitigating infrastructure and web application risks, then the Penetration Testing Professional Learning Path will help you get there. Starting this learning path, you should have a basic understanding of networks, internet protocols, IT security issues, and penetration testing concepts, as well as the ability to read and understand code. This learning path builds strong foundations by giving theoretical lessons reinforced with practical exercises, covering topics like system, network, web app, and wi-fi security. The Penetration Testing Professional Learning path also prepares you for the eCPPTv2 exam and certification. Learning path at a glance: Based on techniques professional pentesters use Covers everything a modern Pentester needs to know Network Pentesting, Web Application Pentesting, Wifi Pentesting, System Security Section Architecture fundamentals, Buffer overflow, and Shellcoding -Covers both Windows and Linux exploitation Post-Exploitation and Pillaging methodology Includes Ruby & PowerShell for Pentesters sections Learn how to create your own Metasploit modules Learn how to leverage the PowerShell Empire toolkit Includes a professional guide on Pentest Reporting eCPPT --- ### 575. Enterprise Defense Administrator (eEDA) - URL: https://cyberlabarchive.com/courses/enterprise-defense-administrator-eeda - Category: iNE - Downloadable Files: 4 (18.7 GB) - Formats: ZIP, Z01, Z02, Z03 - Description: The Enterprise Defense Administrator certification covers topics ranging from: basic defensive engineering strategies, proper hardening of network devices and servers, vulnerability management, log gathering and analysis, and much more. This certification exam is grounded in a hands-on approach, where candidates will be presented with a reproduction of a standard enterprise network and specific tasks to complete. In addition to the multiple-choice questions, the Enterprise Defense Administrator certification tests not only knowledge, but the ability to apply knowledge and skills in a practical lab-based environment. --- ### 576. Junior Penetration Tester (eJPTv2) - URL: https://cyberlabarchive.com/courses/elearnsecurity-junior-penetration-tester-ejptv2 - Category: iNE - Downloadable Files: 2 (16.4 GB) - Formats: ZIP, 7Z - Description: INE Security’s eJPT is for entry-level Penetration testers that validates that the individual has the knowledge, skills, and abilities required to fulfill a role as a junior penetration tester. This certification exam covers Assessment Methodologies, Host and Network Auditing, Host and Network Penetration Testing, and Web Application Penetration Testing. This exam is designed to be the first milestone certification for someone with little to no experience in cybersecurity, simulating the skills utilized during a real-world engagement. This exam truly shows that the candidate has what it takes to be part of a high-performing penetration testing team. --- ### 577. eLearnSecurity Certified Malware Analysis Professional (eCMAP) - URL: https://cyberlabarchive.com/courses/elearnsecurity-malware-analysis-professional - Category: iNE - Downloadable Files: 2 (743 MB) - Formats: ZIP - Description: Are you interested in dissecting malicious software in order to understand its mechanics and purpose? The Malware Analysis Professional Learning Path provides a holistic approach to reverse engineering and analyzing all aspects of malware. During the learning process, you will come across realistic and even real-world malware such as ransomware, botnets, and rats, against which you will perform reverse engineering, static analysis, and dynamic analysis activities. The Malware Analysis Professional Learning Path also prepares you for the eCMAP exam and certification. --- ### 578. eLearnSecurity Certified Incident Responder (eCIR) - URL: https://cyberlabarchive.com/courses/elearnsecurity-certified-incident-responder - Category: iNE - Downloadable Files: 2 (328 MB) - Formats: ZIP, PDF - Description: eLearnSecurity by INE certifications allow students to gain real-world, hands-on experience as they complete their studies instead of requiring them to complete hundreds of multiple-choice questions. The eCIR challenges you to solve situation-based labs inside a fully featured and real-world environment while educating you on best practices for maximizing efficiency and performance, as well as reducing important security metrics such as time to detect, time to respond and points of risks. By completing a full Incident Response report, you can prove that you have the capabilities to explain why an intrusion occurred, how to prevent the intrusion again, and any additional mitigation steps necessary. Putting the analysis in your hands allows you to prove to your team and supervisors that you have what it takes to stop attacks in their tracks. --- ### 579. eLearnSecurity Certified Digital Forensics Professional (eCDFP) - URL: https://cyberlabarchive.com/courses/elearnsecurity-certified-digital-forensics-professional - Category: iNE - Downloadable Files: 2 (1.6 GB) - Formats: ZIP, PDF - Description: The eLearnSecurity Certified Digital Forensics Professional certification tests your understanding of networks, systems and cyber attacks. Once you’ve mastered the essentials, you’re challenged to utilize various methodologies and creative thinking to complete a real-world simulation based on actual scenarios and incidents. Your course material will cover how to analyze both FAT & NTFS file systems, carving and creating your own custom carving signatures and Windows registry analysis. In addition, you’ll learn how to perform thorough investigations against Skype, explorer’s shellbags, Windows recycle bins, and much more. --- ### 580. +CompTIA Security - URL: https://cyberlabarchive.com/courses/security-plus - Category: CompTIA - Downloadable Files: 4 (16.8 GB) - Formats: ZIP, Z01, Z02, Z03 - Description: CompTIA Security+ is a global certification that validates the baseline skills necessary to perform core security functions and pursue an IT security career. - Syllabus Topics: * Attacks, Threats and Vulnerabilities * Architecture and Design * Implementation * Operations and Incident Response * Governance, Risk and Compliance --- ### 581. +CompTIA PenTest - URL: https://cyberlabarchive.com/courses/pentest-plus - Category: CompTIA - Downloadable Files: 3 (11.5 GB) - Formats: ZIP, Z01, Z02 - Description: CompTIA PenTest+ is for cybersecurity professionals tasked with penetration testing and vulnerability management. What Skills Will You Learn? 1. Planning and Scoping Includes updated techniques emphasizing governance, risk and compliance concepts, scoping and organizational/customer requirements, and demonstrating an ethical hacking mindset 2. Information Gathering and Vulnerability Scanning Includes updated skills on performing vulnerability scanning and passive/active reconnaissance, vulnerability management, as well as analyzing the results of the reconnaissance exercise --- ### 582. +CompTIA Network - URL: https://cyberlabarchive.com/courses/network-plus - Category: CompTIA - Downloadable Files: 5 (24.1 GB) - Formats: ZIP, Z01, Z02, Z03, Z04 - Description: CompTIA Network+ helps take your IT infrastructure to the next level, covering troubleshooting, configuring and managing networks. What Skills Will You Learn? 1. Networking Fundamentals Explain basic networking concepts including network services, physical connections, topologies and architecture, and cloud connectivity 2. Network Implementations Explain routing technologies and networking devices; deploy ethernet solutions and configure wireless technologies --- ### 583. +CompTIA CySA - URL: https://cyberlabarchive.com/courses/cysa-plus - Category: CompTIA - Downloadable Files: 4 (16.3 GB) - Formats: ZIP, Z01, Z02, Z03 - Description: CompTIA Cybersecurity Analyst (CySA+) is a certification for cyber professionals tasked with incident detection, prevention and response through continuous security monitoring. What Skills Will You Learn? 1. Security Operations Improve processes in security operations and differentiate between threat intelligence and threat hunting concepts; identify and analyze malicious activity using the appropriate tools and techniques 2. Vulnerability Management Implement and analyze vulnerability assessments, prioritize vulnerabilities and make recommendations on mitigating attacks and vulnerability response --- ### 584. +CompTIA CASP - URL: https://cyberlabarchive.com/courses/casp-plus - Category: CompTIA - Downloadable Files: 8 (37.8 GB) - Formats: RAR - Description: CompTIA Advanced Security Practitioner (CASP+) is an advanced-level cybersecurity certification for security architects and senior security engineers charged with leading and improving an enterprise’s cybersecurity readiness. What Skills Will You Learn? 1. Security Architecture Analyze security requirements in hybrid networks to work toward an enterprise-wide, zero trust security architecture with advanced secure cloud and virtualization solutions. 2. Security Operations Address advanced threat management, vulnerability management, risk mitigation, incident response tactics and digital forensics analysis --- ### 585. +CompTIA A - URL: https://cyberlabarchive.com/courses/comptia-a-plus - Category: CompTIA - Downloadable Files: 4 (16.5 GB) - Formats: ZIP, Z01, Z02, Z03 - Description: CompTIA A+ is the industry standard for launching IT careers into today’s digital world. What Skills Will You Learn? 1. Hardware Identifying using and connecting hardware components and devices 2. Operating Systems Install and support Windows OS including command line and client support, system configuration imaging and troubleshooting for Mac OS, Chrome OS, Android and Linux OS