# CAS Cybersecurity

## CAS Cybersecurity

- [Start](https://cas-cyber.gitbook.io/cas-cybersecurity/start.md): CAS Cybersecurity gitbook documentation
- [Reconnaissance](https://cas-cyber.gitbook.io/cas-cybersecurity/master.md): Reconnaissance is a set of processes and techniques (Footprinting, Scanning & Enumeration) used to covertly discover and collect information about a target system.
- [Opensource Intelligence](https://cas-cyber.gitbook.io/cas-cybersecurity/master/opensource-intelligence.md)
- [Docker basics and Images](https://cas-cyber.gitbook.io/cas-cybersecurity/docker-basics.md): This chapter will cover some basic commands of docker. It will also show you some examaples where you can find and install docker images to train and sharp your security skills :)
- [Damn Vulnerable Webapp](https://cas-cyber.gitbook.io/cas-cybersecurity/docker-basics/damn-vulnerable-webapp.md)
- [bWAPP](https://cas-cyber.gitbook.io/cas-cybersecurity/docker-basics/bwapp.md)
- [Juice Webshop](https://cas-cyber.gitbook.io/cas-cybersecurity/docker-basics/juice-webshop.md)
- [Webgoat](https://cas-cyber.gitbook.io/cas-cybersecurity/docker-basics/webgoat.md)
- [Metasploitable 2](https://cas-cyber.gitbook.io/cas-cybersecurity/docker-basics/metasploitable-2.md)
- [Metasploitable 3](https://cas-cyber.gitbook.io/cas-cybersecurity/docker-basics/metasploitable-3.md)
- [MISP Docker (old)](https://cas-cyber.gitbook.io/cas-cybersecurity/docker-basics/misp-docker-old.md)
- [MISP Docker (new)](https://cas-cyber.gitbook.io/cas-cybersecurity/docker-basics/misp-docker-new.md)
- [Scanning and Enumeration](https://cas-cyber.gitbook.io/cas-cybersecurity/scanning-and-enumeration.md): In this chapter I'll show you the basic commands of nmap, a way where you can practice your scans and a short introduction how you can use the metasploit auxiliary modules to scan for smb and http.
- [Scanning with zenmap](https://cas-cyber.gitbook.io/cas-cybersecurity/scanning-and-enumeration/scanning-with-zenmap.md)
- [Scanning with nmap](https://cas-cyber.gitbook.io/cas-cybersecurity/scanning-and-enumeration/scanning-with-nmap.md)
- [Scanning with msf auxiliary](https://cas-cyber.gitbook.io/cas-cybersecurity/scanning-and-enumeration/scanning-with-msf-auxiliary.md)
- [Vulnerability Scanning and Analysis](https://cas-cyber.gitbook.io/cas-cybersecurity/vulnerability-scanning-and-analysis.md): In this chapter I'll show you a way how you can use nmap with NSE scripts to scan for vulnerabilities
- [OpenVAS](https://cas-cyber.gitbook.io/cas-cybersecurity/vulnerability-scanning-and-analysis/openvas.md)
- [nmap vulnerability scan](https://cas-cyber.gitbook.io/cas-cybersecurity/vulnerability-scanning-and-analysis/nmap-vulnerability-scan.md)
- [MSF Auxiliary Modules](https://cas-cyber.gitbook.io/cas-cybersecurity/vulnerability-scanning-and-analysis/msf-auxiliary-modules.md)
- [Exploitation](https://cas-cyber.gitbook.io/cas-cybersecurity/exploitation.md): In this chapter I'll show you how you can perform a vulnerability scan with nmap against the metasploitable2 docker image and exploit some of it's services.
- [Metasploitable 2](https://cas-cyber.gitbook.io/cas-cybersecurity/exploitation/metasploitable-2.md)
- [Redis Server](https://cas-cyber.gitbook.io/cas-cybersecurity/exploitation/redis-server.md)
- [Print Nightmare](https://cas-cyber.gitbook.io/cas-cybersecurity/exploitation/print-nightmare.md)
- [Baron Samedit](https://cas-cyber.gitbook.io/cas-cybersecurity/exploitation/baron-samedit.md)
- [Polkit](https://cas-cyber.gitbook.io/cas-cybersecurity/exploitation/polkit.md)
- [Heartbleed](https://cas-cyber.gitbook.io/cas-cybersecurity/exploitation/heartbleed.md)
- [Man in the Middle](https://cas-cyber.gitbook.io/cas-cybersecurity/man-in-the-middle.md): In this chapter I'll show you how you can perform a man in the middle attack against a windows box which is in the same VMNet than my Kali Linux System.
- [ARP Cache poisoning](https://cas-cyber.gitbook.io/cas-cybersecurity/man-in-the-middle/arp-cache-poisoning.md)
- [RDP MitM Exercise](https://cas-cyber.gitbook.io/cas-cybersecurity/man-in-the-middle/rdp-mitm-exercise.md)
- [Windows Hacking](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking.md)
- [Throwback Network](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/throwback-network.md): Challenge URL: https://tryhackme.com/network/throwback
- [Entering the breach](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/throwback-network/entering-the-breach.md): Exploring systems and services
- [Exploring the caverns](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/throwback-network/exploring-the-caverns.md): Enummerating Webservers, gain more information about the company itself
- [Webshells and you!](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/throwback-network/webshells-and-you.md): Finding attack vector in pfsense
- [First Contact](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/throwback-network/first-contact.md): Get a reverseshell
- [WinAttack LAB](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab.md)
- [Module 01](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab/module-01.md)
- [Module 02](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab/module-02.md)
- [Module 03](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab/module-03.md)
- [Module 04](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab/module-04.md)
- [Module 05](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab/module-05.md)
- [Module 06](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab/module-06.md)
- [Module 07](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab/module-07.md)
- [Module 08](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab/module-08.md)
- [Module 09](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab/module-09.md)
- [Module 10](https://cas-cyber.gitbook.io/cas-cybersecurity/windows-hacking/winattack-lab/module-10.md)
- [Web Application Security](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security.md): This chapter will give a short overview of the OWASP Top10 and a little introduction into BURP Suite.
- [Burp Proxy Introduction](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security/burp-proxy-introduction.md)
- [DVWA](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security/dvwa.md)
- [DVWA Exercises 1](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-1.md)
- [DVWA Exercises 2](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-2.md)
- [DVWA Exercises 3](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-3.md)
- [DVWA Exercises 4](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-4.md)
- [DVWA Exercises 5](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-5.md)
- [DVWA Exercises 6](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-6.md)
- [DVWA Exercises 7](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-7.md)
- [DVWA Exercises 8](https://cas-cyber.gitbook.io/cas-cybersecurity/web-application-security/dvwa/dvwa-exercises-8.md)
- [CTF and Crypto Exercises](https://cas-cyber.gitbook.io/cas-cybersecurity/ctf-and-crypto-exercises.md): In this chapter I'll add some Crypto Exercises
- [Cyberchef Challenge](https://cas-cyber.gitbook.io/cas-cybersecurity/ctf-and-crypto-exercises/cyberchef-challenge.md)
- [HTB Invite Challenge](https://cas-cyber.gitbook.io/cas-cybersecurity/ctf-and-crypto-exercises/htb-invite-challenge.md): This is my writeup howto solve the Invite Challenge for the HacktheBox Cybersecurity Training Platform.
- [BSides London 2019 Challenge](https://cas-cyber.gitbook.io/cas-cybersecurity/ctf-and-crypto-exercises/bsides-london-2019-challenge.md): This is my writeup for a security puzzle that gave me the possibility to attent the BSides 2019 IT-Security Conference
- [Ninja Sec Challenge](https://cas-cyber.gitbook.io/cas-cybersecurity/ctf-and-crypto-exercises/ninja-sec-challenge.md)
- [Threat Intelligence](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence.md)
- [MISP Exercise 1](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence/misp-exercise-1.md)
- [MISP Exercise 2](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence/misp-exercise-2.md)
- [MISP Exercise 3](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence/misp-exercise-3.md)
- [MISP Exercise 4](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence/misp-exercise-4.md)
- [MISP Exercise 5](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence/misp-exercise-5.md)
- [MISP Exercise 6](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence/misp-exercise-6.md)
- [MISP Exercise 7](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence/misp-exercise-7.md)
- [MISP Exercise 8](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence/misp-exercise-8.md)
- [Virus Total Graph Exercise](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence/virus-total-graph-exercise.md)
- [RFI Incoming!](https://cas-cyber.gitbook.io/cas-cybersecurity/threat-intelligence/rfi-incoming.md)
- [Forensic Exercises](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises.md)
- [Disk Forensics](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics.md)
- [The Sleuth Kit Intro](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/the-sleuth-kit-intro.md)
- [Filecarving with Foremost](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/filecarving-with-foremost.md)
- [Filecarving with scalpel](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/filecarving-with-scalpel.md)
- [Bulk extractor](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/bulk-extractor.md)
- [Disk acquisition with dd](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/disk-acquisition-with-dd.md)
- [Disk acquisition with dcfldd](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/disk-acquisition-with-dcfldd.md)
- [Disk acquisition with ewftools](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/disk-acquisition-with-ewftools.md)
- [Disk acquisition with FTK Imager](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/disk-acquisition-with-ftk-imager.md)
- [Mount disk image (raw)](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/mount-disk-image-raw.md)
- [Unknown USB Stick](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/unknown-usb-stick.md)
- [USB Stick Filecarving](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/usb-stick-filecarving.md)
- [Autopsy Exercise](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/disk-forensics/autopsy-exercise.md)
- [Windows Forensics](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/windows-forensics.md)
- [Bitunlocker](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/windows-forensics/bitunlocker.md)
- [Alternate Datastreams](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/windows-forensics/alternate-datastreams.md)
- [Memory Forensics](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/memory-forensics.md)
- [Volatility2 Basics (Linux)](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/memory-forensics/volatility2-basics-linux.md)
- [Volatility2 Exercise 1](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/memory-forensics/volatility2-exercise-1.md)
- [Volatility3 Exercise 1](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/memory-forensics/volatility3-exercise-1.md)
- [Volatility3 Exercise 2](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/memory-forensics/volatility3-exercise-2.md)
- [Volatility3 Exercise 3](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/memory-forensics/volatility3-exercise-3.md)
- [Image Forensics](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/image-forensics.md)
- [Unswirl Image](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/image-forensics/unswirl-image.md)
- [Manual Filecarving 1](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/image-forensics/manual-filecarving-1.md)
- [Manual Filecarving 2](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/image-forensics/manual-filecarving-2.md)
- [Browser Forensics](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/browser-forensics.md)
- [Mail Header Analysis](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/mail-header-analysis.md)
- [Timestomping Exercise](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/timestomping-exercise.md)
- [Network Forensics](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/network-forensics.md)
- [Tshark Exercise](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-exercises/network-forensics/tshark-exercise.md)
- [Malware Analysis](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis.md)
- [Ransomware](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/ransomware.md)
- [General Introduction](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/ransomware/general-introduction.md)
- [Ryuk](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/ransomware/ryuk.md)
- [RansomEXX](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/ransomware/ransomexx.md)
- [REvil](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/ransomware/revil.md)
- [BlackMatter](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/ransomware/blackmatter.md)
- [Hades](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/ransomware/hades.md)
- [Egregor](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/ransomware/egregor.md)
- [DoppelPaymer](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/ransomware/doppelpaymer.md)
- [YARA](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/yara.md)
- [YARA Install](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/yara/yara-install.md)
- [yarGen](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/yara/yargen.md)
- [YARA with Cyberchef](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/yara/yara-with-cyberchef.md)
- [TCP dump analysis](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/yara/tcp-dump-analysis.md)
- [Memory dump analysis](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/yara/memory-dump-analysis.md)
- [Dosfuscated Scripts](https://cas-cyber.gitbook.io/cas-cybersecurity/malware-analysis/dosfuscated-scripts.md)
- [Android Malware](https://cas-cyber.gitbook.io/cas-cybersecurity/android-malware.md)
- [LAB Setup 1](https://cas-cyber.gitbook.io/cas-cybersecurity/android-malware/lab-setup-1.md)
- [LAB Setup 2](https://cas-cyber.gitbook.io/cas-cybersecurity/android-malware/lab-setup-2.md)
- [Android Manifest](https://cas-cyber.gitbook.io/cas-cybersecurity/android-malware/android-manifest.md)
- [Android Permissions](https://cas-cyber.gitbook.io/cas-cybersecurity/android-malware/android-permissions.md)
- [APP Tracing with Frida](https://cas-cyber.gitbook.io/cas-cybersecurity/android-malware/app-tracing-with-frida.md)
- [AES Key decryption](https://cas-cyber.gitbook.io/cas-cybersecurity/android-malware/aes-key-decryption.md)
- [RedAlert](https://cas-cyber.gitbook.io/cas-cybersecurity/android-malware/redalert.md)
- [BlackRoseLucy](https://cas-cyber.gitbook.io/cas-cybersecurity/android-malware/blackroselucy.md)
- [Crackme RE Challenge](https://cas-cyber.gitbook.io/cas-cybersecurity/android-malware/crackme-re-challenge.md)
- [Forensic Readiness](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-readiness.md)
- [Windows Event Logs](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-readiness/windows-event-logs.md)
- [Windows Sysmon](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-readiness/windows-sysmon.md)
- [Sysmon: Capture Clipboard](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-readiness/sysmon-capture-clipboard.md)
- [Sysmon: Process Injection](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-readiness/sysmon-process-injection.md)
- [Ransomware Detection](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-readiness/ransomware-detection.md)
- [Signature based](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-readiness/ransomware-detection/signature-based.md)
- [Live Response](https://cas-cyber.gitbook.io/cas-cybersecurity/live-response.md)
- [Velociraptor P1](https://cas-cyber.gitbook.io/cas-cybersecurity/live-response/velociraptor-p1.md)
- [Velociraptor P2](https://cas-cyber.gitbook.io/cas-cybersecurity/live-response/velociraptor-p2.md)
- [Velociraptor P3](https://cas-cyber.gitbook.io/cas-cybersecurity/live-response/velociraptor-p3.md)
- [Windows Response LAB](https://cas-cyber.gitbook.io/cas-cybersecurity/live-response/windows-response-lab.md)
- [Lateral Movement Detection](https://cas-cyber.gitbook.io/cas-cybersecurity/live-response/windows-response-lab/lateral-movement-detection.md)
- [Detect persistence](https://cas-cyber.gitbook.io/cas-cybersecurity/live-response/windows-response-lab/detect-persistence.md)
- [Volatility Analysis](https://cas-cyber.gitbook.io/cas-cybersecurity/live-response/windows-response-lab/volatility-analysis.md)