YanoSec
Progress0 of 152 lessons complete

Course / Tools

Tools

Tools grouped by course topic: what each does, precautions for its use, and the lessons that introduce it.

28 short entries

Command line

  1. 01The shellA program that interprets command text, applies rules such as expansion and redirection, and runs commands.Taught in What a command is, Bash variables, if, and a loop
  2. 02manDisplays a system manual page, often explaining a command's syntax, options and behavior.Taught in Getting help
  3. 03findWalks a directory tree and tests entries against conditions such as a name pattern or a type.Taught in find, grep, file, strings, and which
  4. 04grepPrints input lines that match a pattern by default; options can change what it reports.Taught in find, grep, file, strings, and which
  5. 05fileSuggests a file's type using tests that include recognizable patterns in its content.Taught in find, grep, file, strings, and which, Magic bytes and lying file extensions
  6. 06stringsPrints sequences of printable characters from a file, subject to length and encoding settings.Taught in find, grep, file, strings, and which, file, strings, and strace
  7. 07SSHSecure Shell: a protocol and tools for encrypted remote login and other connections. Host keys help authenticate the server.Taught in SSH, keys, and a non-default port
  8. 08BashA command interpreter and scripting language used by many Linux systems.Taught in Bash variables, if, and a loop, A script that does one real chore

Code

  1. 01PythonA general programming language this course uses to read bytes, decode data and automate small steps.Taught in Installing and running a file, Variables, strings, lists, dicts, conditions, loops
  2. 02xxdDisplays bytes as a hex dump, usually with positions and readable characters. It can also convert a hex dump back to bytes.Taught in Bits, bytes, and hexadecimal

Networks

  1. 01WiresharkA packet analyzer that opens saved captures or captures live traffic and displays protocol details.Taught in Wireshark: follow one conversation, PCAP triage

Web basics

  1. 01digSends a DNS query and prints the answer section and the records returned.Taught in DNS: resolver, authoritative server, A, AAAA, CNAME
  2. 02curlA command-line data-transfer tool used here to send HTTP requests and inspect responses.Taught in curl, and one HTTP request from Python

Tools

  1. 01CyberChefA browser tool that chains small operations such as decode, encode and XOR over pasted data.Taught in CyberChef, When to stay in CyberChef and when to open Python
  2. 02Browser developer toolsThe browser's panels for inspecting and changing a page, its requests and its stored data.Taught in Browser developer tools
  3. 03NmapA network scanner that uses responses and missing responses to report host and port states. Results depend on the scan and network conditions.Taught in Nmap
  4. 04Burp SuiteA web testing toolkit whose proxy intercepts and inspects browser traffic. Other tools let you edit and resend requests.Taught in A proxy: Burp Suite or OWASP ZAP
  5. 05ZAPAn open-source web testing tool with an intercepting proxy, passive analysis and active scanning.Taught in A proxy: Burp Suite or OWASP ZAP

Crypto and files

  1. 01exiftoolReads and writes metadata in images, documents and other files.Taught in Metadata with exiftool
  2. 02binwalkSearches file bytes for patterns that suggest embedded files or data, with optional extraction features.Taught in binwalk and carving
  3. 03JohnJohn the Ripper, an offline password cracker that tests guesses against hashes.Taught in What a password cracker does, Hydra, John, and Hashcat on a lab
  4. 04HashcatAn offline password cracker that tests guesses against hashes, often on a GPU.Taught in What a password cracker does, Hydra, John, and Hashcat on a lab
  5. 05VolatilityA memory-analysis framework whose plugins interpret saved memory images, for example to list process or connection records.Taught in What a memory image is

Testing

  1. 01HydraAn online login guesser that tries passwords against a live service.Taught in Online guessing versus offline cracking
  2. 02MetasploitA framework of modules for security testing, including checks, exploits and payloads. The lesson explains their roles without requiring execution.Taught in What Metasploit is

Reversing

  1. 01GhidraA reverse-engineering suite with disassembly and decompiler views. The lesson uses an author-written sketch to explain their limits.Taught in Opening a binary in Ghidra and finding main
  2. 02GDBA debugger that can start or attach to a program, pause it, and inspect registers and memory. The course introduces its role without requiring a session.Taught in Memory and the stack, as a picture, What a buffer overflow is

Pwn

  1. 01pwntoolsA Python toolkit that can start programs or connect to services and script exchanges with them. The course's primer is optional.Taught in Where to practice, What a buffer overflow is