Advertise on podcast: Learn As I Learn - Technology, Product and Cybersecurity

Episode 10: Advanced Cybersecurity Principles: Beyondthe Basics Description: Deepen your understanding of securityprinciples! Explore concepts like least privilege, separation of duties, defense in depth, security by design, encryption, hashing, and the three types of security controls (preventive, detective, corrective). Learn how these principles form a resilient and auditable security architecture.

Episode 9: Ethical Hacking Foundations: Concepts, Laws& Frameworks Description: Understand the blueprint of cybersecurity!This episode covers the core principles of InfoSec (CIA Triad), what ethical hacking entails, key cyber laws and regulations (GDPR, HIPAA), structured attacker models like the Cyber Kill Chain and MITRE ATT&CK, and fundamental security controls.

Episode 8: Log Analysis & Forensics: InvestigatingIncidents with Event Viewer & SIEM Description: Become a digital detective! Learn hands-on log analysis for incident response on Windows Server 2022. Configure audit policies, simulate login failures, use ChatGPT to identify event IDs (e.g., 4624, 4625), and analyze logs using Event Viewer. We'll also cover installing and configuring Splunk (a SIEM) for parsing andcategorizing network event data.

Episode 7: AI in Reconnaissance & Scanning:Smarter Attack & Defense Description: Explore the cutting edge ofnetwork security! This episode demonstrates running network scanning exercisesusing AI-driven security tools (Nmap with ChatGPT). Learn how AI enhances IPdiscovery, host detection, port scanning (SYN, UDP, ICMP Echo, Xmas, Maimon,Null), and service enumeration, providing efficient interpretation of scanresults.

Episode 6: Phishing in Action: AI-Driven SocialEngineering & Detection Description: Understand and detect phishing attacks! This episode integrates AI (ChatGPT) for creating persuasive phishing emails, using tools like TheFatRat to generate undetectable payloads. You'll learn how social engineering works, how to deliver payloads, and how toinvestigate suspicious emails using SysTools EML Viewer.

Episode 5: Malware Unpacked: Hands-on Analysis &Reverse Engineering Description: Dissect malware like a pro! This practical session provides hands-on experience in malware analysis and reverse engineering using tools like PeStudio (for string analysis, imports, VirusTotal indicators) and EXEinfo PE (for byte analysis and graphs). Analyze a ransomwaresample in a controlled environment.

Episode 4: Real-world Exploitation: System Compromisewith njRAT Description: Dive into a full system exploitation scenario!This episode demonstrates compromising a Windows Server using the remote accesstrojan (RAT) njRAT. You'll learn to download, install, configure, generate amalicious payload, share it, and then control the victim machine, includingkeylogging.

Episode 3: Hacking Windows: Generating Payloads withMetasploit Description: Master system exploitation! Learn to generate acustom payload using the Metasploit Framework (msfvenom)on Kali Linux, deliver it to a Windows target, and execute post-exploitationactivities through a Meterpreter session (e.g., sysinfo,hashdump, screenshot).

Episode 2: Session Hijacking 101: Man-in-the-Middlewith ARP Spoofing Description: Intercept credentials in action! Thisepisode demonstrates session hijacking through a Man-in-the-Middle (MITM)attack using ARP spoofing and credential sniffing tools like dsniff on Kali Linux. Learn to interceptunencrypted login credentials and understand the risks of insecurecommunication.

Episode 1: DDoS Unleashed: Hands-on Flood AttacksDescription: Witness and understand Denial-of-Service attacks! Thispractical session simulates a Distributed Denial of Service (DDoS) attack byconfiguring an FTP server on Windows and launching a flood attack using KaliLinux's hping3. Observe system impact andthe importance of proactive monitoring.

Glimpse into this series: Season 3: Exploitation, Forensics & AdvancedDefense Episode 1: DDoS Unleashed: Hands-on Flood AttacksDescription: Witness and understand Denial-of-Service attacks! Thispractical session simulates a Distributed Denial of Service (DDoS) attack byconfiguring an FTP server on Windows and launching a flood attack using KaliLinux's hping3. Observe system impact andthe importance of proactive monitoring. Episode 2: Session Hijacking 101: Man-in-the-Middlewith ARP Spoofing Description: Intercept credentials in action! Thisepisode demonstrates session hijacking through a Man-in-the-Middle (MITM)attack using ARP spoofing and credential sniffing tools like dsniff on Kali Linux. Learn to interceptunencrypted login credentials and understand the risks of insecurecommunication. Episode 3: Hacking Windows: Generating Payloads withMetasploit Description: Master system exploitation! Learn to generate acustom payload using the Metasploit Framework (msfvenom)on Kali Linux, deliver it to a Windows target, and execute post-exploitationactivities through a Meterpreter session (e.g., sysinfo,hashdump, screenshot). Episode 4: Real-world Exploitation: System Compromisewith njRAT Description: Dive into a full system exploitation scenario!This episode demonstrates compromising a Windows Server using the remote accesstrojan (RAT) njRAT. You'll learn to download, install, configure, generate amalicious payload, share it, and then control the victim machine, includingkeylogging. Episode 5: Malware Unpacked: Hands-on Analysis &Reverse Engineering Description: Dissect malware like a pro! Thispractical session provides hands-on experience in malware analysis and reverseengineering using tools like PeStudio (for string analysis, imports, VirusTotalindicators) and EXEinfo PE (for byte analysis and graphs). Analyze a ransomwaresample in a controlled environment. Episode 6: Phishing in Action: AI-Driven SocialEngineering & Detection Description: Understand and detect phishingattacks! This episode integrates AI (ChatGPT) for creating persuasive phishingemails, using tools like TheFatRat to generate undetectable payloads. You'lllearn how social engineering works, how to deliver payloads, and how toinvestigate suspicious emails using SysTools EML Viewer. Episode 7: AI in Reconnaissance & Scanning:Smarter Attack & Defense Description: Explore the cutting edge ofnetwork security! This episode demonstrates running network scanning exercisesusing AI-driven security tools (Nmap with ChatGPT). Learn how AI enhances IPdiscovery, host detection, port scanning (SYN, UDP, ICMP Echo, Xmas, Maimon,Null), and service enumeration, providing efficient interpretation of scanresults. Episode 8: Log Analysis & Forensics: InvestigatingIncidents with Event Viewer & SIEM Description: Become a digitaldetective! Learn hands-on log analysis for incident response on Windows Server2022. Configure audit policies, simulate login failures, use ChatGPT toidentify event IDs (e.g., 4624, 4625), and analyze logs using Event Viewer.We'll also cover installing and configuring Splunk (a SIEM) for parsing andcategorizing network event data. Episode 9: Ethical Hacking Foundations: Concepts, Laws& Frameworks Description: Understand the blueprint of cybersecurity!This episode covers the core principles of InfoSec (CIA Triad), what ethicalhacking entails, key cyber laws and regulations (GDPR, HIPAA), structuredattacker models like the Cyber Kill Chain and MITRE ATT&CK, and fundamentalsecurity controls. Episode 10: Advanced Cybersecurity Principles: Beyondthe Basics Description: Deepen your understanding of securityprinciples! Explore concepts like least privilege, separation of duties,defense in depth, security by design, encryption, hashing, and the three typesof security controls (preventive, detective, corrective). Learn how theseprinciples form a resilient and auditable security architecture.

Episode 10: Web Server Security: Architecture, AttackSurface & Hardening Description: Fortify your web fortress!Understand the architecture of web servers (Apache, Nginx, IIS) and theirextensive attack surface, including misconfigurations, buffer overflows, andDoS flaws. Learn essential hardening techniques like disabling unused services,restricting permissions, and proactive patching.

Episode 9: IDS/IPS Evasion & Deception: PlayingDigital Cat and Mouse Description: Master the art of stealth andcounter-stealth! This episode explores attacker techniques for bypassingIDS/IPS (like protocol tunneling, packet fragmentation, traffic blending) andhow defenders deploy honeypots and deception technologies to lure, detect, andstudy intruders.

Episode 8: Network Traffic Analysis: TCP/IP, UDP, andWireshark Flags Description: Decode network conversations! Learn to use Wireshark to capture and analyze both connection-oriented (TCP) and connectionless (UDP) traffic. We'll examine the TCP three-way handshake (SYN, SYN-ACK, ACK flags) and observe UDP's behavior, understanding how protocolsfunction at the packet level. Command to generate UDP Traffic: hping3 –2 –c 1000 –i u1000 8.8.8.8

Episode 7: Vulnerability Assessment: Real-timeScanning with Nessus Description: Become a vulnerability hunter! This episode guides you through performing real-time vulnerability scanning of a target machine (Bee-Box) using Nessus. You'll learn to set up Nessus, initiate an advanced scan, interpret severity levels, and explore remediation strategies. Download Nessus URL: https://www.tenable.com/downloads/nessus?loginAttempted=true