TryHackMe 51
- Cloud-based IaC - Terraform, AWS CloudFormation, and Secure IaC Practices
- On-Premises IaC - Vagrant Provisioning, Ansible Automation, and Pipeline Exploitation
- Intro to IaC - Declarative vs Imperative, Lifecycle, and Virtualisation Primitives
- Container Hardening - Daemon Protection, Cgroups Limits, Seccomp, AppArmor, and Grype Image Auditing
- TryHackMe: One Piece Room Walkthrough
- Container Vulnerabilities - Breakouts via Privileged Capabilities, Docker Sockets, Exposed TCP, and Host Namespaces
- Intro to Kubernetes - Cluster Architecture, Declarative YAML, Kubectl Operations, and RBAC Hardening
- Intro to Docker - Image Lifecycle, Dockerfiles, Compose Orchestration, and Socket Architecture
- Intro to Containerisation - Docker Architecture, Linux Namespaces, and Process Isolation
- Mother's Secret - Code Review, Route State Machine Exploitation, and Path Traversal in Node.js
- DAST - Dynamic Application Security Testing, OWASP ZAP, Authenticated Scans, and CI/CD Automation
- SAST - Static Application Security Testing, AST Modeling, Taint Analysis, and Semgrep Rules
- Dependency Management - Supply Chain Attacks, S3 Skimmers, and Python Dependency Confusion
- CI/CD and Build Security - Pipeline Exploitation, Build Runner Poisoning, and Environment Segregation
- Source Code Security - Git Internals, Credential Hygiene, and Secrets Management in CI/CD
- Intro to Pipeline Automation - CI/CD Architecture, Build Agent Security, and Environment Segmentation
- Secure Software Development Lifecycle (SSDLC) - Methodologies, Threat Modelling, and Testing Automation
- Software Development Lifecycle (SDLC) - Phases, CALMS Framework, and Core Delivery Metrics
- Introduction to DevSecOps - Cultural Evolution, Shift-Left Security, and Pipeline Shared Responsibility
- TryHackMe: Topic Rewind Recap - Storage and Data Security Walkthrough
- TryHackMe: The Shared Snapshot - Defending AWS Walkthrough
- TryHackMe: The Blind Bucket - Defending AWS Walkthrough
- TryHackMe: The Plain Bucket - Defending AWS Walkthrough
- TryHackMe: The Leaky Bucket - Defending AWS Walkthrough
- TryHackMe: Topic Rewind Recap - Securing Compute Walkthrough
- TryHackMe: The Oversharing Container - Defending AWS Walkthrough
- TryHackMe: The Leaky Metadata - Defending AWS Walkthrough
- TryHackMe: The Unpatched Instance - Defending AWS Walkthrough
- TryHackMe: The Exposed Port - Defending AWS Walkthrough
- TryHackMe: Topic Rewind Recap (Module 3) - Defending AWS Walkthrough
- TryHackMe: The Invisible Network - Defending AWS Walkthrough
- TryHackMe: The Forgotten NACL - Defending AWS Walkthrough
- TryHackMe: The Not So Private Subnet - Defending AWS Walkthrough
- TryHackMe: Topic Rewind Recap (Module 2) - Defending AWS Walkthrough
- TryHackMe: The Silence of the IAMs - Defending AWS Walkthrough
- TryHackMe: The Overpowered Role - Defending AWS Walkthrough
- TryHackMe: The Forgotten Access Key - Defending AWS Walkthrough
- TryHackMe: The Over-Privileged User - Defending AWS Walkthrough
- TryHackMe: Topic Rewind Recap (Module 1) - Defending AWS Walkthrough
- TryHackMe: Introduction to AWS Security Tools - Defending AWS Walkthrough
- Defending AWS: Introduction to Cloud Storage - S3 Architecture, Access Control, and Encryption Models
- Defending AWS: Introduction to Cloud Computing - EC2 Architecture, AMIs, and Immutable Workloads
- Defending AWS: Introduction to Cloud Networking - VPCs, Subnets, Gateways, and Traffic Isolation
- Defending AWS: Introduction to IAM - Identities, JSON Policy Anatomy, and Evaluation Logic
- Defending AWS: First Steps Into AWS - Console Navigation, CloudShell, and CLI Fundamentals
- TryHackMe: LookUp Walkthrough
- TShark: CLI Wireshark Features
- TryHackMe: RootMe Walkthrough
- TryHackMe: TShark Challenge I - Directory Curiosity Walkthrough
- TShark: The Basics
- TryHackMe: CMesS Walkthrough