> For the complete documentation index, see [llms.txt](https://cas-cyber.gitbook.io/cas-cybersecurity/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cas-cyber.gitbook.io/cas-cybersecurity/start.md).

# Start

CAS Cybersecurity gitbook documentation

If you are looking for a practical hands-on cybersecurity education in switzerland, check-out this certificate of advanced studies course: <https://www.ost.ch/de/weiterbildung/weiterbildungsangebot/informatik/cas-cyber-security>

![](https://3977837039-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MfT0VPyK6X13Egd9pzy%2Fuploads%2FvYUJC2S0HwtCA9eN0tn2%2Fpentest_zoo.png?alt=media\&token=a5c7f1d4-a28c-44de-89a7-a52d6e3febd4)

### Hacking-Lab Live CD

Most exercises can be done with the Hacking-Lab live CD. It's a modified version of Kali Linux developed by [compass security](https://www.compass-security.com/en/).

{% embed url="<https://livecd.hacking-lab.com>" %}

### Alternative Live CD

{% embed url="<https://www.kali.org/get-kali#kali-virtual-machines>" %}

{% embed url="<https://www.parrotsec.org/download/>" %}

### Changing History

<table><thead><tr><th width="156" align="center">Date</th><th>Description</th></tr></thead><tbody><tr><td align="center"><strong>20.10.21</strong></td><td><p>Chapter <a href="/cas-cybersecurity/ctf-and-crypto-exercises.md">Crypto Exercises</a> added</p><p><a href="/cas-cybersecurity/ctf-and-crypto-exercises/cyberchef-challenge.md">Cyberchef Challenge</a> added</p></td></tr><tr><td align="center"><strong>21.10.21</strong></td><td><p><a href="/cas-cybersecurity/ctf-and-crypto-exercises/htb-invite-challenge.md">HTB Invite Challenge</a> added</p><p><a href="/cas-cybersecurity/ctf-and-crypto-exercises/bsides-london-2019-challenge.md">Bsides London 2019 Ticket Challenge</a> added</p></td></tr><tr><td align="center"><strong>14.11.21</strong></td><td><p>Chapter <a href="/cas-cybersecurity/windows-hacking.md">Windows Hacking</a> added</p><p><a href="/cas-cybersecurity/windows-hacking/throwback-network.md">Throwback Network Challenge</a> added </p></td></tr><tr><td align="center"><strong>19.11.21</strong></td><td><a href="/cas-cybersecurity/man-in-the-middle/rdp-mitm-exercise.md">RDP MitM Exercise</a> added</td></tr><tr><td align="center"><strong>06.02.22</strong></td><td><a href="/cas-cybersecurity/windows-hacking/winattack-lab.md">WinAttack Lab Exercises</a> added</td></tr><tr><td align="center"><strong>07.02.22</strong></td><td><a href="/cas-cybersecurity/exploitation/redis-server.md">Redis Server Exercise</a> added<br><a href="/cas-cybersecurity/exploitation/print-nightmare.md">Print Nightmare Exercise</a> added<br><a href="/cas-cybersecurity/exploitation/baron-samedit.md">Baron Samedit Exercise</a> added</td></tr><tr><td align="center"><strong>07.02.22</strong></td><td>Chapter <a href="/cas-cybersecurity/threat-intelligence.md">Threat Intelligence</a> added</td></tr><tr><td align="center"><strong>08.02.22</strong></td><td><a href="/cas-cybersecurity/threat-intelligence.md">MISP Exercises</a> 1-4 added<br><a href="/cas-cybersecurity/threat-intelligence.md">MISP Exercises</a> 5-8 added</td></tr><tr><td align="center"><strong>09.02.22</strong></td><td>Chapter <a href="/cas-cybersecurity/forensic-exercises.md">Forensic Exercises</a> added<br><a href="/cas-cybersecurity/forensic-exercises/image-forensics/unswirl-image.md">Unswirl Image Challenge</a> added</td></tr><tr><td align="center"><strong>11.02.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/the-sleuth-kit-intro.md">The Sleuth Kit Intro Exercise</a> added</td></tr><tr><td align="center"><strong>12.02.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/filecarving-with-foremost.md">Filecarving with foremost Exercise</a> added<br><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/filecarving-with-scalpel.md">Filecarving with scalpel Exercise</a> added<br><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/bulk-extractor.md">Bulk extractor Exercise</a> added<br><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/disk-acquisition-with-dd.md">Disk acquisition with dd Exercise</a> added</td></tr><tr><td align="center"><strong>13.02.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/disk-acquisition-with-dcfldd.md">Disk acquisition with dcfldd Exercise</a> added<br><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/disk-acquisition-with-ewftools.md">Disk acqusition with ewf-tools Exercise</a> added</td></tr><tr><td align="center"><strong>15.02.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/disk-acquisition-with-ftk-imager.md">Disk acquisition with FDK Imager Exercise</a> added<br><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/mount-disk-image-raw.md">Mount disk image (raw) Exercise</a> added</td></tr><tr><td align="center"><strong>19.02.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/unknown-usb-stick.md">Unknown USB Stick Exercise</a> added<br><a href="/cas-cybersecurity/forensic-exercises/windows-forensics/bitunlocker.md">Bitunlocker Exercise</a> added</td></tr><tr><td align="center"><strong>20.02.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/usb-stick-filecarving.md">USB Stick Filecarving Exercise</a> added</td></tr><tr><td align="center"><strong>22.02.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/mail-header-analysis.md">Mailheader Analysis Exercise</a> added<br><a href="/cas-cybersecurity/forensic-exercises/timestomping-exercise.md">Timestomping Exercise</a> added</td></tr><tr><td align="center"><strong>23.02.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/memory-forensics/volatility2-basics-linux.md">Volatility Basics Exercise</a> added</td></tr><tr><td align="center"><strong>26.02.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/memory-forensics/volatility2-exercise-1.md">Volatility Exercise 1</a> added</td></tr><tr><td align="center"><strong>27.02.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/image-forensics/manual-filecarving-1.md">Manual Filecarving Exercise 1</a> added</td></tr><tr><td align="center"><strong>28.02.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/image-forensics/manual-filecarving-2.md">Manual Filecarving Exercise 2</a> added<br><a href="/cas-cybersecurity/forensic-exercises/disk-forensics/autopsy-exercise.md">Autopsy Exercise</a> added</td></tr><tr><td align="center"><strong>09.03.22</strong></td><td>Chapter <a href="/cas-cybersecurity/malware-analysis.md">Malware Analysis</a> added<br><a href="/cas-cybersecurity/malware-analysis/ransomware/general-introduction.md">Ransomware Introduction</a> added<br><a href="/cas-cybersecurity/malware-analysis/ransomware/ryuk.md">Ryuk Exercise</a> added</td></tr><tr><td align="center"><strong>20.03.22</strong></td><td><a href="/cas-cybersecurity/ctf-and-crypto-exercises/ninja-sec-challenge.md">Ninja-Sec Challenge</a> added</td></tr><tr><td align="center"><strong>28.03.22</strong></td><td><a href="/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-4.md">DVWA Exercises</a> added</td></tr><tr><td align="center"><strong>07.04.22</strong></td><td><a href="/cas-cybersecurity/malware-analysis/ransomware/ransomexx.md">RansomEXX Exercise</a> added<br><a href="/cas-cybersecurity/malware-analysis/ransomware/revil.md">REvil Exercise</a> added<br><a href="/cas-cybersecurity/malware-analysis/ransomware/blackmatter.md">BlackMatter Exercise</a> added</td></tr><tr><td align="center"><strong>08.04.22</strong></td><td><a href="/cas-cybersecurity/malware-analysis/ransomware/hades.md">HADES Exercise</a> added<br><a href="/cas-cybersecurity/malware-analysis/ransomware/egregor.md">Egregor Exercise</a> added<br><a href="/cas-cybersecurity/malware-analysis/ransomware/doppelpaymer.md">DoppelPaymer Exercise</a> added<br><a href="/cas-cybersecurity/exploitation/polkit.md">Polkit Exercise</a> added</td></tr><tr><td align="center"><strong>11.04.22</strong></td><td>Chapter <a href="/cas-cybersecurity/forensic-readiness.md">Forensic Readiness</a> added<br><a href="/cas-cybersecurity/forensic-readiness/windows-event-logs.md">Windows Event Log Exercise</a> added<br><a href="/cas-cybersecurity/forensic-readiness/windows-sysmon.md">Windows Sysmon Exercise</a> added</td></tr><tr><td align="center"><strong>13.04.22</strong></td><td><a href="/cas-cybersecurity/forensic-readiness/sysmon-capture-clipboard.md">Sysmon:Capture Clipboard Exercise </a>added</td></tr><tr><td align="center"><strong>23.04.22</strong></td><td><a href="/cas-cybersecurity/forensic-readiness/sysmon-process-injection.md">Sysmon: Process Injection Exercise</a> added</td></tr><tr><td align="center"><strong>24.04.22</strong></td><td>Chapter <a href="/cas-cybersecurity/malware-analysis/yara.md">YARA</a> added<br><a href="/cas-cybersecurity/malware-analysis/yara/yara-install.md">YARA Install Exercise</a> added</td></tr><tr><td align="center"><strong>25.04.22</strong></td><td><a href="/cas-cybersecurity/malware-analysis/yara/yargen.md">yarGen Exercise</a> added</td></tr><tr><td align="center"><strong>30.04.22</strong></td><td><a href="/cas-cybersecurity/malware-analysis/yara/yara-with-cyberchef.md">YARA with Cyberchef Exercise</a> added</td></tr><tr><td align="center"><strong>01.05.22</strong></td><td><a href="/cas-cybersecurity/malware-analysis/yara/tcp-dump-analysis.md">TCP Dump analysis Exercise</a> added</td></tr><tr><td align="center"><strong>04.05.22</strong></td><td><a href="/cas-cybersecurity/malware-analysis/dosfuscated-scripts.md">Examples of Dosfuscated Scripts</a> added</td></tr><tr><td align="center"><strong>05.05.22</strong></td><td><a href="/cas-cybersecurity/malware-analysis/yara/memory-dump-analysis.md">Volatility Memorydump Exercise with yara</a> added</td></tr><tr><td align="center"><strong>15.05.22</strong></td><td>Chapter <a href="/cas-cybersecurity/forensic-exercises/network-forensics.md">Network Forensics</a> added<br><a href="/cas-cybersecurity/forensic-exercises/network-forensics/tshark-exercise.md">Tshark Exercise</a> added</td></tr><tr><td align="center"><strong>16.05.22</strong></td><td><a href="/cas-cybersecurity/threat-intelligence/virus-total-graph-exercise.md">Virus Total Graph Exercise</a> added<br><a href="/cas-cybersecurity/threat-intelligence/rfi-incoming.md">RFI Incoming! Exersise</a> added</td></tr><tr><td align="center"><strong>23.05.22</strong></td><td><a href="/cas-cybersecurity/live-response.md">Chapter Live Response</a> added<br><a href="/cas-cybersecurity/live-response/velociraptor-p1.md">Velociraptor P1 Exercise</a> added</td></tr><tr><td align="center"><strong>24.05</strong>.<strong>22</strong></td><td><a href="/cas-cybersecurity/live-response/velociraptor-p2.md">Velociraptor P2 Exercise</a> added</td></tr><tr><td align="center"><strong>26.05.22</strong></td><td><a href="/cas-cybersecurity/live-response/velociraptor-p3.md">Velociraptor P3 Exercise</a> added</td></tr><tr><td align="center"><strong>30.05.22</strong></td><td><a href="/cas-cybersecurity/live-response/windows-response-lab.md">Chapter Windows Response LAB</a> added<br><a href="/cas-cybersecurity/live-response/windows-response-lab/lateral-movement-detection.md">Lateral Movement Detection Exercise</a> added<br><a href="/cas-cybersecurity/live-response/windows-response-lab/detect-persistence.md">Detect Persistence Exercise</a> added<br><a href="/cas-cybersecurity/live-response/windows-response-lab/volatility-analysis.md">Volatility Analysis Exercise</a> added</td></tr><tr><td align="center"><strong>31.05.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/memory-forensics/volatility3-exercise-1.md">Volatility3 Exercise</a> added</td></tr><tr><td align="center"><strong>04.06.22</strong></td><td><a href="/cas-cybersecurity/forensic-exercises/memory-forensics/volatility3-exercise-2.md">Volatility3 Exercise 2</a> added<br><a href="/cas-cybersecurity/forensic-exercises/memory-forensics/volatility3-exercise-3.md">Volatility3 Exercise 3</a> added</td></tr><tr><td align="center"><strong>06.06.22</strong></td><td><a href="/cas-cybersecurity/forensic-readiness/ransomware-detection/signature-based.md">Signature based Ransomware detection</a> added</td></tr><tr><td align="center"><strong>13.06.22</strong></td><td>Chapter <a href="/cas-cybersecurity/android-malware.md">Android Malware</a> added</td></tr><tr><td align="center"><strong>20.06.22</strong></td><td>Android LAB <a href="/cas-cybersecurity/android-malware/lab-setup-1.md">Setup 1</a> added</td></tr><tr><td align="center"><strong>21.06.22</strong></td><td>Android LAB <a href="/cas-cybersecurity/android-malware/lab-setup-2.md">Setup 2</a> added</td></tr><tr><td align="center"><strong>23.06.22</strong></td><td><a href="/cas-cybersecurity/android-malware/android-permissions.md">Android permission Exercise</a> added</td></tr><tr><td align="center"><strong>30.06.22</strong></td><td><a href="/cas-cybersecurity/android-malware/app-tracing-with-frida.md">App tracing with frida</a> Exercise added</td></tr><tr><td align="center"><strong>01.07.22</strong></td><td><a href="/cas-cybersecurity/android-malware/aes-key-decryption.md">AES Key decryption Exercise</a> added</td></tr><tr><td align="center"><strong>05.07.22</strong></td><td><a href="/cas-cybersecurity/android-malware/redalert.md">Android RedAlert Exercise</a> added</td></tr><tr><td align="center"><strong>07.07.22</strong></td><td><a href="/cas-cybersecurity/android-malware/blackroselucy.md">BlackRoseLucy Exercise</a> added<br><a href="/cas-cybersecurity/android-malware/crackme-re-challenge.md">Crackme Challenge</a> added</td></tr><tr><td align="center"><strong>14.08.22</strong></td><td><a href="/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-5.md">DVWA Exercises 5</a> expanded<br><a href="/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-6.md">DVWA Exerxices 6</a> added<br><a href="/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-7.md">DVWA Exercises 7</a> added</td></tr><tr><td align="center"><strong>15.08.22</strong></td><td><a href="/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-8.md">DVWA Exercises 8</a> added</td></tr><tr><td align="center"><strong>11.12.22</strong></td><td><a href="/cas-cybersecurity/exploitation/heartbleed.md">Heartbleed Exercise</a> added</td></tr></tbody></table>

### Table of Contents

[Reconnaissance](/cas-cybersecurity/master.md)

[Docker basics and Images](/cas-cybersecurity/docker-basics.md)

[Scanning and Enumeration](/cas-cybersecurity/scanning-and-enumeration.md)

[Vulnerability Scanning and Analysis](/cas-cybersecurity/vulnerability-scanning-and-analysis.md)

[Exploitation](/cas-cybersecurity/exploitation.md)

[Man in the Middle](/cas-cybersecurity/man-in-the-middle.md)

[Windows Hacking](/cas-cybersecurity/windows-hacking.md)

[Web Application Security](/cas-cybersecurity/web-application-security.md)

[CTF and Crypto Exercises](/cas-cybersecurity/ctf-and-crypto-exercises.md)

[Threat Intelligence](/cas-cybersecurity/threat-intelligence.md)

[Forensic Exercises](/cas-cybersecurity/forensic-exercises.md)

[Malware Analysis](/cas-cybersecurity/malware-analysis.md)

[Android Malware](/cas-cybersecurity/android-malware.md)

[Forensic Readiness](/cas-cybersecurity/forensic-readiness.md)

[Live Response](/cas-cybersecurity/live-response.md)